hxxps://clicks[.]e[.]link[.]com/f/a/9poXKiAOMXce2qXhL5Az0w~~/AAQRxRA~/4jOs-vGI25YbsFogEUqQrapzB4fPyHGIlGG4OsMOuOgsxpkfJroUqUNDA4AezzHupWMDKs-p5Vfoqwzr5RDqKuJ2EwQ9SArVd31D22fGLzWcVOld-_h92ms62LI-80Kk_E9GX6RtxFTCk7YRZYEmxQDv-u9FYGJIugoqgSg71ad8weMP2qoQewh72PIqPeM-mmzc0xhbVGERp7gUnlRTvA~~

Analysis

user interaction
yes
max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 04:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://clicks.e.link.com/f/a/9poXKiAOMXce2qXhL5Az0w~~/AAQRxRA~/4jOs-vGI25YbsFogEUqQrapzB4fPyHGIlGG4OsMOuOgsxpkfJroUqUNDA4AezzHupWMDKs-p5Vfoqwzr5RDqKuJ2EwQ9SArVd31D22fGLzWcVOld-_h92ms62LI-80Kk_E9GX6RtxFTCk7YRZYEmxQDv-u9FYGJIugoqgSg71ad8weMP2qoQewh72PIqPeM-mmzc0xhbVGERp7gUnlRTvA~~
Sample260620-fa5n3set9v

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5784	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264040821766229"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4274393721-1801116158-3678143273-1000\{C7C322BB-21B1-4CD0-ACE4-43D3CC781EF1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7020	msedge.exe
7020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5676 wrote to memory of 1164	5676	msedge.exe	89
PID 5676 wrote to memory of 5848	5676	msedge.exe	92
PID 5676 wrote to memory of 5784	5676	msedge.exe	91
PID 5676 wrote to memory of 5848	5676	msedge.exe	92
PID 5676 wrote to memory of 5848	5676	msedge.exe	92
PID 5676 wrote to memory of 2956	5676	msedge.exe	93
PID 5676 wrote to memory of 2956	5676	msedge.exe	93
PID 5676 wrote to memory of 6564	5676	msedge.exe	94
PID 5676 wrote to memory of 5576	5676	msedge.exe	95
PID 5676 wrote to memory of 6564	5676	msedge.exe	94
PID 5676 wrote to memory of 6564	5676	msedge.exe	94
PID 5676 wrote to memory of 5576	5676	msedge.exe	95
PID 5676 wrote to memory of 5576	5676	msedge.exe	95
PID 5676 wrote to memory of 4956	5676	msedge.exe	96
PID 5676 wrote to memory of 4956	5676	msedge.exe	96
PID 5676 wrote to memory of 4956	5676	msedge.exe	96
PID 5676 wrote to memory of 2004	5676	msedge.exe	97
PID 5676 wrote to memory of 2004	5676	msedge.exe	97
PID 5676 wrote to memory of 2004	5676	msedge.exe	97
PID 5676 wrote to memory of 1948	5676	msedge.exe	99
PID 5676 wrote to memory of 6764	5676	msedge.exe	98
PID 5676 wrote to memory of 1948	5676	msedge.exe	99
PID 5676 wrote to memory of 6764	5676	msedge.exe	98
PID 5676 wrote to memory of 1124	5676	msedge.exe	101
PID 5676 wrote to memory of 4780	5676	msedge.exe	105
PID 5676 wrote to memory of 4824	5676	msedge.exe	106
PID 5676 wrote to memory of 1812	5676	msedge.exe	107
PID 5676 wrote to memory of 4300	5676	msedge.exe	108
PID 5676 wrote to memory of 4300	5676	msedge.exe	108
PID 5676 wrote to memory of 7020	5676	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://clicks.e.link.com/f/a/9poXKiAOMXce2qXhL5Az0w~~/AAQRxRA~/4jOs-vGI25YbsFogEUqQrapzB4fPyHGIlGG4OsMOuOgsxpkfJroUqUNDA4AezzHupWMDKs-p5Vfoqwzr5RDqKuJ2EwQ9SArVd31D22fGLzWcVOld-_h92ms62LI-80Kk_E9GX6RtxFTCk7YRZYEmxQDv-u9FYGJIugoqgSg71ad8weMP2qoQewh72PIqPeM-mmzc0xhbVGERp7gUnlRTvA~~
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7fffe5fdc188,0x7fffe5fdc194,0x7fffe5fdc1a0
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,13095874097461583065,8882727771155366635,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,15443519362360012839,15812938081994946085,262144 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,15628392203403436808,16660366569327498266,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:13
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,9487410761401040202,10197170899213769864,2097152 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:6564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,4511629981252008508,4415085141145618039,2097152 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5028,i,13666544881060502515,17906257534715166442,2097152 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3860,i,9930765222497128999,2775406156139838792,2097152 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,44052813077341981,17249514218788492825,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,5231984978197428189,2794088087889159940,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,11336804467658700211,14647099397937875522,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,11336804467658700211,14647099397937875522,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1220,i,14933604305515731661,15923866157538905616,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,6644710603512892388,488482046024726667,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,3023595528415268992,14874367534390062206,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,15546449163167821491,11377047134944939851,524288 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6488,i,3386925588303270681,16931234551907403547,262144 --field-trial-handle=2468,i,15989713321240546718,261742410995831903,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 afab44831d15737b93a51b5da32d6f7ffdeb215ed2ae065fce98d07ea4026ae9
MD5 577602fc13804460f1a4c682a14371fa
SHA1 75c72bc7e167208774b7c3c199ee72158d472d5b
SHA512 cf269890ba0a2bcf1c40983f5ab82ca0bed90f59b35f5275ced490c8da7884427c1e64cec45fcf6fb345409604822a89ee8e179211bc96abdb7d379a2baa2ee4
TLSH
T112D08021350EB882D11B10FACD62C316711985636263D10E7991D02DCC974D0B3C5597
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a61df6b1b5973a8f8515610c489bd12e6e001f8527beb5b138216e21393998d2
MD5 1413e4dcb4a722f7a2c851bea622b10b
SHA1 a394fd253f2f3468ec63381b79a7be8f141d441f
SHA512 78510b7b5833d69d44a1969dccddd809ed47ba6d93baa551566bbbb962c07880ca89cc801765cdff99b247b04e98234ccb9c522675e88277eebfffcde1a48baa
TLSH
T1BBD08021350EB882D51B10FACD72C326711985676663D10E7591402DCCD74D063C5597
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 569801e84bed0d412834b33b12eb8b338d8e59f2c92d4b6b87fcb4b17ef4de9e
MD5 14f0c3438f5f28c7b2bcc6c8bc93c2ea
SHA1 f751ed3954a1626ab16b9190b230fafd98189d7f
SHA512 9af8640aa9c52903aa1dba967023fba5c1e51d751496dbca80093b337b28e1e156902a9c75bcb8c963618dd4004fa9999a701422daed0a1880dc9b895af2d1c6
TLSH
T19DE02BADC936EC3708FE0B196560464FE76113276B41994F3B7CC20C8FB067A4686D6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 df0e0e8abcfcff4b87279102b391911f102dd0664e1602c2bfe75460b519262c
MD5 7154f321b1c995cef14f5db638748780
SHA1 c98f53cff985cbe4ecf2766beb909bc552ba0dba
SHA512 75df1833533149b1faf169847e53d1bcdd39ddce876695c2a3343116aeddc61364d1f850af838680cbaf6134642bebaf23acd91e3e5b538bbc0134bb352c0c02
SSDEEP 96:BKCj3GrKLuL0wfo4zx4Wbx2DcsgoHRC11xHpTfgoLu3sLlAdI5fLOc9MXwyaGATQ:BKCj3wOuL0wfZzxRx2DcsgoHRMzHpTfE
TLSH
T1068196A1C1B635AAFB3C8BB8D0C24855F37224DF4617BE1B6DB9A13CBA067E150E1944
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58fbff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fbff.TMP
Size 3KB
SHA256 ef9d793aa2d15929e9f0cebe147e20f1af04b78eeccb5f4479fabad7f1b5e309
MD5 b364fd1590c48fa794a6e6844f8c1726
SHA1 24dcd3ad4028e5b58d5326ae86910cd0fcbccdad
SHA512 1d1b6dedbaee22ebb22cd574337be094da79f7f15a4e3fdc721c8c43925b3db4dbfa108fe76a8a8414f1483d3641d12b46bbe450aed092530b469e7bc252f236
TLSH
T133712BA1C17234A5FB3C477CD0C18C95F7B028EF451B3E1B6EB9A23CB8067A154C1984
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 99b81a4a52b027ba68cf3272bae760be3fb13637b2038ce0f879527163ba171e
MD5 9624a729727129f9a5b342c6ea213b59
SHA1 021934085b9a0716d611e62802d5af91207e0a19
SHA512 6f9454a29aaf74b22d7e976e4ae0f885eb8d4fd2a40262446f65e05ac67f95c94c0545df96fe6ed80971b8bfdb1857a6a56ffc87ebbdc89c162394cc63987924
SSDEEP 96:DbS1ROu0PuDuL+uohWGjhnij6PzBjX/uRu6uXZukuh5u+9umu9uYGuguEuku0uUf:D+1EhkjphWGjhnij6P1jPUJOZ3u5DJG+
TLSH
T167C17BF387A8863DDD1195F4AB182E1FCE690924032C396AC9E49F1B93F2472E19165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c58857776bbf9b26ceced303bcb0686f91dc9f2ee571b1bb94010fe7e6c702da
MD5 b83883e041b9339aa6405316020aff86
SHA1 4997db09a0831ab9b819620425c83fced86be77d
SHA512 b0a367ec52086023de5be4deb1732cf96f9c072784a00a6c4b699d8d0f24a5a6d9b34f4fb73cfe00d75decf9b38a5c8943fa46cc9bb3732994d50457ca9e03b3
SSDEEP 192:sxRpR9yMqZjK1Ml8UQFFp/fRslFgSWsZuAKzoA8pH0/g6+WNVxWXYJDHDvQ+GjIm:sxRpiqjp/fRslFgTShU/5qX6vQ5aa
TLSH
T18472C7166938997BCCDBD609FA85BB53D6F81173E2445E44A6FC8B0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 fa1f2c6128ad29d7e93eb77e265999a1d8c2b5c74be0513140cdd431c0c083b9
MD5 2c9991827e88f4f27d8a36665bd57b95
SHA1 47a5ec8c16b46dd2ba1d64e1b228b742b402a0e6
SHA512 2bcd88858441a078c3d85bce58ab1766a208ac6e36b5c5197b859087657e528ace5545459bdbaa0491a601c3085b7979adb29620b76d9666083bd5d8859e9a83
SSDEEP 192:sxRpR9yMqZjK1Ml8wFp/fRs2FZWsZuAKzoA8pH0/g6+WNVTR/YJDlqDvQ+GjIgja:sxRpibp/fRs2FgShU/5j/bvQ5ja
TLSH
T1EB62C8166938997B8CDBD609FA85BF53D6F81173E2545E44A6FC8B0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 91fc157443756ccb2afe439faf44133fd4a4f983ed29b8c599202b7e2311fab7
MD5 228b97a96f0957e881904ac80f29f1c4
SHA1 185b120738fa31f15de070836d56a356df9658f7
SHA512 b0c2acd693248aa632daa1b57206083ec5be7f3a1ac1a43bb8cbf5c6685a8d5377b01f4c44d254f8825a7641f107e4405772b3e0f10dca598fc4fefdd6f89d8f
SSDEEP 768:Aeax56WgGMffA8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4u8CcrofF3czg:Aeax56WgGMffAu1jatBCHd3cM
TLSH
T17EC2FC2B240CC77E4F845E9DEC29AED76DE801CB9B588D5447EA880C03C77EB911A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d168789d634437a4c9d6da101bc82bd447edfec3eed5ee660f759eb3a07a24be
MD5 d5088c11be13957a7acbb435f79dc96f
SHA1 4eeafe143ebaa555b22dcecd67bf89d5164a0ccb
SHA512 1eb26f14926aaa91399dcb83feed16a301eed5c03dd7ab480a9604d239efd5050aa8d6f18031382d8a616886cab71bc664f290e8bd01b67a6a3b06b57288c953
SSDEEP 384:CEsqH8wSgMr85QoaiVuNqCBUsDJO9ZfLHob0Vx1pVnopZUP2PHbAzvHvR0HAxN:CE9RKPHbAzvHvR0HAxN
TLSH
T128B239517A7E224139BD2919D194966F674270B3301AB63F3BBD20E20EA7E004FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 fb31574916c1c318dd718b7e129642a35ae871518a77588d503c2a9b4ccbd752
MD5 86f6f8771aae83fd4597f4adf68a3552
SHA1 0d99705802b0882ae44febce799f68290029e20e
SHA512 af749f011adbda4a7e01132396ba8a11a61b898e0ea86e2fe618c6a89ca36607d6944ca38036f8c2e3ade57943f68720fedfa5c3ac755e32cdd10554a2612ddc
SSDEEP 384:nUiF1tNn/s3n9Sx8Nh8TUNTUlIRV/F3aOhxc2HfoBVWLBkSRQfUUDZHITGT0I68I:vF1j+9g4wgHoCn6VOKfJDZHi+0Evw
TLSH
T1F9E2C4F298D79977D8AE4B87A33D6E0699FCC163B5885984B7D81D0CCC961BFC306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7dbd6aec1dad7387a1c8edc5753dae235555c66d1b09ba1488347eb1f8f91af0
MD5 59788ce86e290ef4f58086a8bcf199cb
SHA1 635b2868889b3403a8e32e2a07b77c3e3be54a31
SHA512 7d98016d24bda357ee29737aa3ff350612644be5b944b2263ffdd484e50be55418f5e91fdb7b3af2d60c666fea2e4d11d41e6de1c9c9d1bd1f4084bf27c3f619
SSDEEP 384:nGiF1tNn/s3n9SN8NP8TUNTUlIRy/F3fGfAc2HfoBVWLBkSRy0ITGT0I+8Lk1Izx:tF1j+9AGwgWZ806VOs0i+0pv8
TLSH
T1E6C22936D854DA7BDDFA9FD9B309764BAEE401A381C86AD8DAEC1D4C00872DD0347D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4ddbae386816451e0a7a80356d6db5d4ea729ad58aefbf14609e600b29f07363
MD5 a7ffe0ea2c96493bdf81b0593a42e739
SHA1 6b977d9dc6b3cbde87ca42670a312323ff05b10c
SHA512 75798df9a8a40d405d1a12bd1de7e48a0b39d58fb0e4b22157b42cb783cd986c0fc0f3c99d7a1613618b2c3f6b8eceffb787a733393cf1e2e493f6b8202369e6
SSDEEP 384:nSiF1tNn/s3n9SN8Nh8TUNTUlIRV/F3aOoxc2HfoBVWLBkSRQfU1ZHITGT0I68LM:ZF1j+9A4wgHoXn6VOKfOZHi+0Evw
TLSH
T13CC24A32D854DA6BACE65BD9B30A76479EF402A385CC6AC8DADC1D4C01DB2DD530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download