0441850de6edeae437bb4f1f0ac685880a0101fe3da98dc48e85cf405d369dd2

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
clink.html
Size 1.3MB
Sample260623-anj2msht3l
SHA256 0441850de6edeae437bb4f1f0ac685880a0101fe3da98dc48e85cf405d369dd2
MD5 87c28f769dd67215058a4574132ac5ca
SHA1 d2dc3570b562f357b3d5f21b931126114121f01d
SHA512 beece2c656cde60bc5720c85a3f2e788fa99d66e07c1bea7a2ffa1e826c1e1dfc2ea040545f32baba01d3569339935bf373fe407e5af3779f1f4fa1b33de734b
SSDEEP 12288:hulJkA9gzd1HMcPQ/K7gRAoocYLrDwQ4KOmDx52ssKJB9oVJVtebW8sawvMIw8X/:huLkAi7HMc4/6fToFDGreIJHC
TLSH
T10E55E87241D4563B416342FDD2092B7AF2EB406DE3120BE4FDFE870B479AD906A272D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1684	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266477035425314"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-28459746-3881314244-166055492-1000\{A2600A34-2727-4FFB-B7E3-4C8C433170D1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6084	msedge.exe
6084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 3336	3124	msedge.exe	88
PID 3124 wrote to memory of 2024	3124	msedge.exe	89
PID 3124 wrote to memory of 1684	3124	msedge.exe	91
PID 3124 wrote to memory of 2024	3124	msedge.exe	89
PID 3124 wrote to memory of 2024	3124	msedge.exe	89
PID 3124 wrote to memory of 1532	3124	msedge.exe	92
PID 3124 wrote to memory of 1532	3124	msedge.exe	92
PID 3124 wrote to memory of 3220	3124	msedge.exe	93
PID 3124 wrote to memory of 4068	3124	msedge.exe	94
PID 3124 wrote to memory of 3220	3124	msedge.exe	93
PID 3124 wrote to memory of 3220	3124	msedge.exe	93
PID 3124 wrote to memory of 4068	3124	msedge.exe	94
PID 3124 wrote to memory of 4068	3124	msedge.exe	94
PID 3124 wrote to memory of 1332	3124	msedge.exe	95
PID 3124 wrote to memory of 4756	3124	msedge.exe	96
PID 3124 wrote to memory of 1332	3124	msedge.exe	95
PID 3124 wrote to memory of 1332	3124	msedge.exe	95
PID 3124 wrote to memory of 4756	3124	msedge.exe	96
PID 3124 wrote to memory of 4756	3124	msedge.exe	96
PID 3124 wrote to memory of 5504	3124	msedge.exe	98
PID 3124 wrote to memory of 1216	3124	msedge.exe	99
PID 3124 wrote to memory of 5504	3124	msedge.exe	98
PID 3124 wrote to memory of 1216	3124	msedge.exe	99
PID 3124 wrote to memory of 5532	3124	msedge.exe	101
PID 3124 wrote to memory of 4344	3124	msedge.exe	105
PID 3124 wrote to memory of 4152	3124	msedge.exe	106
PID 3124 wrote to memory of 6076	3124	msedge.exe	107
PID 3124 wrote to memory of 1384	3124	msedge.exe	108
PID 3124 wrote to memory of 1384	3124	msedge.exe	108
PID 3124 wrote to memory of 6084	3124	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\clink.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fff0057c188,0x7fff0057c194,0x7fff0057c1a0
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,1371030850346377868,9632624985627140905,262144 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,2093653709455833629,377295332603895267,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,9552344271964313421,10763607275561901157,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:13
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,17756638787017327355,3307135730764165336,2097152 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,5098407762787209575,17615495386541148856,2097152 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,9235889854811137212,1086081372351018655,2097152 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,1946615942505996182,18122986997733320579,2097152 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:9
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,4954273337051646754,1049245405388909963,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,3270946807565628403,13934095501549094871,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3107347718494815774,1912092688395533770,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3107347718494815774,1912092688395533770,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,9506693493336861279,4087793187564229579,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,4191983827071942105,11946223615189103877,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,13941880074498055109,15037929656344690685,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,10620817992532920902,11813221902285030991,524288 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6372,i,17211439510330740859,1732041178537833833,262144 --field-trial-handle=1960,i,11135337830890920764,11733143313805921423,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9ab84be2-1b85-40a9-ae86-477fcd4369b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ab84be2-1b85-40a9-ae86-477fcd4369b1.tmp
Size 39KB
SHA256 9721b187e8f8d92b672cc794f7960e1336feeb14bf262d2a79f5adad9628f9e2
MD5 7745e7e68cd52c120cef92a788254067
SHA1 0bdf5d024082927989654cd1e50b447eb88d4218
SHA512 1f20a7f8dfef7cdca1fa0b62c2a3545f4da4ba2454d59f98010760d207257123fcb59be9cb7fe08e73496e9d386c58c2addfd6bb95786366e7c838243e629399
SSDEEP 768:UjaeqD4MlshiLdMmQ3Fkgaff2fY0fHeyJ5p3EFlnNMLm7hyjWtTzTb:UqcjhIdMH3sf2ftfLp3EFlSC9yj2v
TLSH
T10A03D03A98A05C678DB296C6764777975EB04793CB813A599CCC7A0E409B3DE230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b778cc535cfe9ef8131b9d727f221c5d63c7f15bcd4cd19db345f2c97bdf5594
MD5 a4b8f3b6133ca4686118d40b6c8d4ea7
SHA1 cbca41492cec17181764c1371da84a0e0481f93f
SHA512 65135f099a2e372c9a11538ad8ff73abdfa24612895545773034b613318a9166b5560e41026d2ec245dda6b088efde1566126dae35182ddcb3fe795a786554ad
TLSH
T1B7D0C0743F42F108C04904F08534EF101337B81230839900F070C80E84E40C0A3C9053
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b4edbbe62f29386512f6cd1726c675b23fdeee21a26a2896a394ff9b87143167
MD5 c0060c375421fc206e85d98fc2ea6677
SHA1 2189b0dd881564dfef39585cc2cffda4dcd3ec91
SHA512 338dc8a4791fbbe759582d4a8fd55c1a6245fcc722bff11ff926118daa91041d62e98b05cb2e63b22ea119d41a557c511dcfb12592ab416dab9980af0b5ca713
TLSH
T1F2D0C0703F42F008C04904F08534EF101337B81230839900F170C80E84E40C0A3C8043
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 65ca622e3cc3314580b32b655809564df92c5058b10112fb8f71d0b6728a7fa4
MD5 771280d35725f5f6e1f71ef026b89ee6
SHA1 23217eaef347d09fe11b11489a1731eb04b9ccb4
SHA512 70bdb78d7734c3719a5d7a84fe825820a878c16760e02703fdb563fa99567c3fdec6ccf84df0f8e558cc7bc122b1870037f1eaff2bff502e68eaa6fe4c4eea34
TLSH
T122613C7F002A0BA0FBD505B8AFD118C937B4C7A22AE73E05044C67370BC9B2B43C4951
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59932e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59932e.TMP
Size 3KB
SHA256 0566f9a3dc090ff1152d7502b102ab0a2efd813eddb3e2e9d057de88d69fbeec
MD5 f165590949acf631b402405e08b50332
SHA1 160a5f4a4a42e70b85c1d30c200ada2a9a9eb435
SHA512 bedd7fc370ba2b7b00cd610b14127a8cddbf222b7efc76dbf6874b5e0f77c07c398364b3272ca27c8b35d739ff4da6b600da9e6a15ab62f298036ea6584efb48
TLSH
T164612B7F002A0BA0FBD505B8AFD118C637B4C7A22AE73E06044C67370BC9B2B03D4551
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 070b9e909fd75a9f531a505e758d58b95e866aa4f908d475f76ddd131883c17e
MD5 87c900a7bc1323bd61a0acf4b5411cf6
SHA1 0b4d046c141ef9371c896bd949d149e30e9a7937
SHA512 3a047dfd909ca63ff24d50ed79b541a152bd277e5935746b37fc544e2381f9bb4e7295e05930a788f215ddf196cf0fefa44dfc35197084d7bc921f7431c01526
TLSH
T10A51CCF7C3D8866D890156F0BB246E1BCE1D095583283C5AC8E4AF4FA3E2871D24158F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dcb93e77c198c801dd88e2e191973b16238218097dc58db91b8e7b16c9a2b13c
MD5 c70ea86963dc7f980baf0332f6b98fe9
SHA1 621dbdace65ab357b0e2fb30fe827a5cf4d73009
SHA512 e75e562297fdd671d04272c0435ebb6277129db8d2e0c190a171740a8edcd0538fa99c9242a58f43b6e46909018305e42e6c6cfeeca8e75872354f0a189224a4
SSDEEP 192:sxR3RlyM/jK1Ml8wFN/fGsmYcGqtzoA8p4A/g6+WNIYYMHYuqlGMIgIJ:sxR3PbN/fGsmYfLB/5I0qbs
TLSH
T1A552E8156A28997BCCDBD20DFA557F53D6F81573B2941E44AAFCCA0C00E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5442e399cfd693b63a6586716d98d1b8fed5f9c8f152768f1cc63235ecd223e0
MD5 b45c96cb73ef0c011aca4fe27f143b41
SHA1 61667df812e64d3aba017713f0a65ca9b8f62731
SHA512 7d838cbc2bca777e177a6d21efea1798cbdd3a37cc114788539b89c76872e0a6483b00b149c46e1090165ffd3b2367c4294b4494bf354001055f95541ec3c999
SSDEEP 192:sxRsRlyM/jK1Ml8wFN/fGsiYcGqtzoA8p4A/g6+WNIYYMHYuqlGMIgDGJ:sxRsPbN/fGsiYfLB/5I0qbm
TLSH
T18562E815AA24997BCCDBD20DFA557F53D6F81573B2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 279c7d00288292027bff496590fcdeec57aed1ecc94766a3099cdb17b8cc23c6
MD5 c75f9d943d1c16cb31ab63cb12d090ed
SHA1 9b06776b7e3b6d21a21380656ffc6e0b3d33cb82
SHA512 aad29b09604fa347960544e03de60773ca40f2b5ecd59a0f2da685986bd3fb55e8426662ec3c5fb402853e956a5f869fc10e3d2ecde9ac0cad3a6acdc73b5e76
SSDEEP 192:sxRsRlyM/jK1Ml8UQuFN/fGsixcGqtzoA8peA/g6+WNIYYMIYuqlGMIgDcJ:sxRsPqcN/fGsixfLr/5IHqb0
TLSH
T13462C816A6289977CCDBD21DFA557F53D6F81573A2940E44AAFCCB0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6268cf21acb8dee214d8d68215dfa52710d97b70222aac796a04f0d372f3bd78
MD5 9fcf845c7e87a20cccb38e121e87aead
SHA1 3217d355fb1342f562959a1d36a29fd8e45a01b7
SHA512 8887a82ee188ede4bf5f7ca69758dcb6684cce723b1d61db9967341766946c7f20015342ef838a1a8d9f88001e67978251dccb1f966ce33310dd2af1c833e03b
SSDEEP 768:j+8uI7WgNVfq38F1+UoAYDCx9Tuqh0VfUC9xbog/OVbBJ6jrolQo:j+8uI7WgNVfq3u1jaaH6QlQo
TLSH
T1BFC2FB2F640CC7BE4F844D9DEC25BE966DD801CB9B988D5447EE890C03CA7EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 65be98c1e6b41f81efefbd0b3466b1dc53460f47b8a99e22e32c41b111c0bba6
MD5 5a71bed4920885a4c60d6ce57990c00a
SHA1 acd3d553a50ec324372ed33b7f2bbab439dfda9a
SHA512 667ad9baf62c646e0709a27a19024da3387199a9a3b5792bf116ecf86d6e0d16da15235294e56912534fb78254ed43bdd61155bc78f0f5b84afe3c933ba11983
SSDEEP 96:K0AQK5eW2LGKo8aY7k4Cqa2Aql9a42KSTau2+QYdeRA:afZJGA
TLSH
T1ED914401317A2340397F290DA1A1997F524231B73166A57BBBA860E34F67F413EFC6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

15d97317-6a73-4112-8fa8-25637dad940b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\15d97317-6a73-4112-8fa8-25637dad940b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 26a6f53311053615e03cef5a44cc475e7898cda56ff0818a44254af56bdf18d8
MD5 78afd6e580484deaceff917f92f0b34c
SHA1 cf75ed38f4cf60611b834a694656a2bbfc74b2ca
SHA512 471587b8a1f0f2302ef030437eaa298d9cb3a3d05916c205f5b51558c0b7f858956823e2812f009a1ad71e5ee411c6ee074955a1abdeda5203c56c84825f7e8e
SSDEEP 768:Ij+9/3J6gaff2fY0fH4yJ5p3EFlnNMLmOhKALR1v/:X9/3Sf2ftfhp3EFlSC2KAd1v/
TLSH
T123F2BE32A8A09D265DE297C5B5073B876EF04673E6C43A999CCC7B0E40CB7ED130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7345997d21bc6495677311d73168578a59803b7730ba0f14bec674fabeba27ed
MD5 49f9f497bbf2dea2c9958343f69b4de3
SHA1 4d713d3ed8e6afe2224a418ceda19d565e6fd9f8
SHA512 0e980d341cd5ac828008cbf124bfae9957a0d80201ca02ebec115389c8be11e7b6e9a8fd3792768b392d18e5d0fdd42e5087766434fcc4c6883d6ee087fd742e
SSDEEP 768:Zj+9/3+6gaff2fY0fHByJ5p3EFlnNMLmOhKALR1v/:E9/3Bf2ftfmp3EFlSC2KAd1v/
TLSH
T16FF2BE3298A09D265DD297C5B5073B876EF04673E6C43A999CCC7B0E40CB7ED130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e2480141bc80e5927d4b4138389ed0e1dee2696a41432cedfcbb8bf6bfdea7f3
MD5 d637dbbc067ed7dc060c81bf2deed218
SHA1 c9c786fbb2ce65a5eec844431842206d8f0e6bff
SHA512 0e3eb689f2fb7837e2e2ba40508562e94e485939f35d8d70f375982810501e1abeeb0a2b1b461e231488410ad87f3c1d84b9a388b2937fac1a81705fa6676530
SSDEEP 768:9F1j+9q3Vwg/6gaff2fY0fH7yJ5p3EFlnNMLmOhKALR1v/:U9q3Ef2ftfsp3EFlSC2KAd1v/
TLSH
T1DD03BE339890CD2BADA69BC5B50B3747AEF042B3D5907A99A9CC7E0D00CB6DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

749a3fe8-1248-4f7d-8e80-d4c55a2f5450.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\749a3fe8-1248-4f7d-8e80-d4c55a2f5450.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download