0a1f73251f00c996bac566c966717de083fd5454f08dc68e12b92ee1f743b3d8

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
clink.html
Size 1.3MB
Sample260701-ap2cbacz5s
SHA256 0a1f73251f00c996bac566c966717de083fd5454f08dc68e12b92ee1f743b3d8
MD5 f6b45d7ae990ae07fb185ce243ebe1f9
SHA1 438dd497c4d0c8cda74e713fbcf7dbb193ca0499
SHA512 25ae36ee539c622ba77d88880ecc00f9088c9ab5ed079cff029f713c76e00c38ca1525797f4723f427e9cee53d9eb42abf97ab01b3330a1dc30bee959041d273
SSDEEP 12288:OulIkA9gzd1HMcPQ/K7gRAoocYLrDwQ4KOmDx52ssKJB9oVJVtebW8sawvMIw8X0:OuekAi7HMc4/6fToFDGreRJHC
TLSH
T15355E87241D4563B416342FDD2092B7AF2EB406DE3120BE4FDFE870B479AD906A272D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3696	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273390627368024"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{CD44D2A8-00E1-4F66-BE06-E461434FA160}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 1220	4492	msedge.exe	86
PID 4492 wrote to memory of 3696	4492	msedge.exe	87
PID 4492 wrote to memory of 4876	4492	msedge.exe	88
PID 4492 wrote to memory of 4876	4492	msedge.exe	88
PID 4492 wrote to memory of 4876	4492	msedge.exe	88
PID 4492 wrote to memory of 3068	4492	msedge.exe	90
PID 4492 wrote to memory of 3068	4492	msedge.exe	90
PID 4492 wrote to memory of 1536	4492	msedge.exe	91
PID 4492 wrote to memory of 1536	4492	msedge.exe	91
PID 4492 wrote to memory of 1536	4492	msedge.exe	91
PID 4492 wrote to memory of 3308	4492	msedge.exe	92
PID 4492 wrote to memory of 3308	4492	msedge.exe	92
PID 4492 wrote to memory of 3308	4492	msedge.exe	92
PID 4492 wrote to memory of 732	4492	msedge.exe	93
PID 4492 wrote to memory of 732	4492	msedge.exe	93
PID 4492 wrote to memory of 732	4492	msedge.exe	93
PID 4492 wrote to memory of 1728	4492	msedge.exe	94
PID 4492 wrote to memory of 1728	4492	msedge.exe	94
PID 4492 wrote to memory of 1728	4492	msedge.exe	94
PID 4492 wrote to memory of 2564	4492	msedge.exe	98
PID 4492 wrote to memory of 2564	4492	msedge.exe	98
PID 4492 wrote to memory of 2772	4492	msedge.exe	99
PID 4492 wrote to memory of 2772	4492	msedge.exe	99
PID 4492 wrote to memory of 3344	4492	msedge.exe	101
PID 4492 wrote to memory of 1388	4492	msedge.exe	115
PID 4492 wrote to memory of 2384	4492	msedge.exe	116
PID 4492 wrote to memory of 3760	4492	msedge.exe	117
PID 4492 wrote to memory of 2372	4492	msedge.exe	119
PID 4492 wrote to memory of 2372	4492	msedge.exe	119
PID 4492 wrote to memory of 3504	4492	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\clink.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa394dc188,0x7ffa394dc194,0x7ffa394dc1a0
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,15100664056492832267,11690357733796566837,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,17038050272641240326,8847315763214930681,262144 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,2577993911230667484,1386659475642083389,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13398541503124015705,11981066172774050346,2097152 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,9702280632156792985,17292112951579175878,2097152 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,1075799445217351910,13866624318470884791,2097152 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,11706014195658595680,11274460931658021601,2097152 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,2782991599650259070,398171958493521675,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,8894847243528557484,948161907945173243,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10098089822294167634,4846628579417298228,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10098089822294167634,4846628579417298228,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,6897235821929721203,13218825871567447603,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,15342331617172259058,2947427843100091226,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,10206549251484385475,16476636835683812685,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,4300972541435481424,10881489988574094413,524288 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4496,i,5622750732655588770,10796465324136394655,262144 --field-trial-handle=2304,i,7218348625648138747,3342494373923695472,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a8cf539be8b7f467d7d49dfa02c347b3c62e055e76b9f8a6d8c440fb2fbda7d0
MD5 c8ed1736b6c0d1d829754046456bd821
SHA1 92bd9c3e1dfe03fff0c24d9bff0ea29e360ecdb2
SHA512 6eb6dd352c5d928e2d6c1a17a9cfbf480a27ce479147aeda4c3044eec9e929a1a1e496cde0e489227a298be06a456c699d8571e551df45eab8a68b4027a02c40
TLSH
T198714E3701C940C2D786013A54F26284F8BD82EAF63FDF5510F7AABE4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b205.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b205.TMP
Size 3KB
SHA256 344dc74a5afa932aa7764b3d16472c14a547667937c62290c4aaacc99609e592
MD5 e65e285caa0b66eae5e6afff6bd34556
SHA1 01596b41ac9a8af63dbab565b8a2eac6fb66ff10
SHA512 2ccdfe828a694594f5316f8b59e63b7a20aaa6ce7960b0067a0656834f49ebe287bc7f0504b6cdb8fb5c270db5caa8fdfb2edbcd3ef104008e9f510841203b80
TLSH
T1C3714D3701C940C2D786013A94F16284F8BD82EAF53FDF5150F76A7E4B93711819A17B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cf3eb98279e97424d82484b21e5637aa54d509a502834a751e429735f72cbc24
MD5 3e914a9c80ba3841a2cff62ea7b3626d
SHA1 030d6c1ab75b03ddb43aec2731b4e673622c164f
SHA512 b7b64ab97a0bcec809582976f99dc3c55b7e93e04ac14e9655c402eea0416e3fd4fa5195efe09e2e1e2ad7d93172aaa410b698008f7f170e0fee34a54e09ad5d
TLSH
T102319FF7C3D4866E991156F06A29BE2BCD1D0516832C3C1689F4EF5BB3E2470D101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 22cee4d8a7f843286d5025a75626a3cebea3d71dad83077c1b1554be164b5d7f
MD5 4f1c3ad56e81cf0d473a0b81d8f2a87e
SHA1 9a475806491afba9873d7ec807f835404c4839b2
SHA512 37d91f0cad95c51b9560f296ffd709f6b47e6c160772a136293ea1d650824e4f92dc16146f4b3245b47ef3963cd0dcb196dc4ab14dbb88aba73a70e4bba7a191
SSDEEP 192:sxZVdaRIzByM/jK1Ml8UQYBkYZ/f41sYxTwy/+V3DLIdpHVcHW6+WNGYzMVNGY+O:sxZ2aqT2/fAs9ru2HbGVmA
TLSH
T19D52C5526A349977CCDBD20DFA41BB53D6F5547392940E44AAFCCA0C01E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 beb099075a85110d42f90796d1105d8270b58affb7f135ab45efc490a8b35921
MD5 93f1add4e252d291fdc16531ab23b333
SHA1 350f740a3fc7e74be4afe4e27658611eede9fb82
SHA512 a60b616846195ca13cf1cd77924fffdf4d223f845580a0eb5a7b113f121f75a71bcfbf6e04cf15a661b0f7c2c3577a259a5d3a9561f22e8bd7a36f5c63d608e2
SSDEEP 192:sxZVdaRIzByM/jK1Ml8MkYZ/f41sOTwyQV3DLIdpdVcHW6+WNGYzQVmGY+ZvTIg9:sxZ2aM2/fAsV9uAHbGMm9
TLSH
T16E42D7126A349977CCDBD20DFA51BB53D6F91473A2940E44AAFCCA0C05E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 dcbce05fec96fabf1b3ccbf0be83f76bd8eb1af22894fef4c19d048a4086abae
MD5 161f5dbc63ee33ef27079b4dcb7b8cb6
SHA1 6693e3fab9b34e19649d8eecee26ec313584be78
SHA512 1a9556105f1d0e035576442796614c427d1b14c1a809b62332de44ae83a26eb7fcc04d4eea5778009a2fd59d35a2099172d88a4b5df40aadd8287aac61f35492
SSDEEP 768:apW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjgroI0i6YN:apW7kf0Wvqidau1jaa5LA3jrsN
TLSH
T181D2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 43a4221562759476f545d9dac44c115b6a815c87dba65d30688b3a6d285de506
MD5 27c5dde9709cf4cc95a6fee72a0c2596
SHA1 1c271baf09094f40a9924016799914aedd6cdfcc
SHA512 53d46fb5637122b7c08001b289c931887d3ce295f48da22ebcc9b21a160ed3a4671e03cb794ebd25f684a100933212d2a7e0ca26b2dc36a23950f64214b9963f
SSDEEP 384:htNn/s3n9SfsNLUiDVQbZc8bM2sgX0IidKzvEub:hj+9UQQSazsg78Kzv
TLSH
T16F928E776CB59D6A4DA29084F54A3B1B5FF98267E7842F50E2DC6B0C01DB39C231B60B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 63a28a27ece8006f95bebb1495b4e205f3bdfb03999dcff9c0e1ad14cc3b2c67
MD5 f3d19aab3efa767ef6ab573a2aa3723f
SHA1 9a99792b268de7913f08a5ffb03f86f230f3859c
SHA512 289503be22b941a9ac140de2b9414b5466bd7f89e6554049a78cf5329ae3c4b027e605ce811d8e0cc7f2d7d2720a27e100e19b2a6b2ca6ae5aa668175217c913
SSDEEP 384:WitNn/s3n9SkzsNLU7DVQbZc8bM2lgX0IidKzvEub:dj+9/5QSazlg78Kzv
TLSH
T1D9928D736CB58D7A4DA29084F54A3B1B5FB89267A7842F50E2DC6B0C05DB39C231B60B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d92280c5a74373e03f9aff39f896b9514adcd604dcb0676c09b217993c403ebe
MD5 5629b9e4c4bb304ed6492479a7ad5221
SHA1 c516b795b32bf5565a8d167dcc330875cbf508fc
SHA512 f924155b23384a11a9e32ea4354013f5aacd1f1ef537edbcd9eebbaad17cf30e0cbd4d7554e8c0bd12b4b912a27022d990073b528323a130ad1dfe5bd607f674
SSDEEP 192:MONo64BAQmiUyV91V8W5GBPK7hCI9waDibXU6:MONo6eAkoWQM5YU6
TLSH
T127020A356CB96C7B9EB2AE44F48637176FE8117BF5845B40E6E82B1C00D764C234792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0dc321ae51ab980a791a0df6ec17d0bd35f89c953a7def4f075f3f49e9ce3d9a
MD5 a522a52f78e6e96af5139e174c19b892
SHA1 bb874dacc99788488b2376c34680ab2bbd8e682e
SHA512 a5fe6f8621aa82709c6dd586996ee76951c14ee467adee243a1c492648d0b61051cf8b7926711a33229931ee8b74fe67e87fcbeb459a49e4eb6ed39d2f028659
SSDEEP 384:OTtNn/s3n9SfsNLU7DVQbZc8bM2sgX0IidKzvEub:Mj+9U5QSazsg78Kzv
TLSH
T148928E736CB54D6A4DA29084F54A3B175FF99267E7842F50E2DC6B0C01DB39C231B607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cc4dec4886f699d6c38f5d4f2c19a104a175227ab76a36d3582fdeb8f291cb78
MD5 e3031cb5c006d6a8f7406c05da66b287
SHA1 cd1f00c48495dae08aa574796d658ad48af83ebf
SHA512 a92d6e218e7c4d406d186acd3525ef98bbe1a4894aa4c5349b050e56b4092b9b642b21787cdd68c6efbd2b22a1fac1c5c9a649cd60dfce0cc069c899566ee79c
SSDEEP 192:f8ONr164BEwQmiUyV4V8fU5GBPK7hCI9jlE/WwiXqoU6:UONx6e96sQM2rgU6
TLSH
T168122B766CF8AC7B5DA2A584F48637075FA9512BFA846F40E6DC2B1C01EF65C230B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4cc05fd79a5bf635e1e58ada5b1217bd7bba27102ec7b8bba0525c1ab220b205
MD5 e244a448ede25c93f7e86e2ae104b9e9
SHA1 0b5d343775d1dcefd80a9049434956705f29122c
SHA512 d2f854207483ff51a5819b863a98d337e70778de47d72c37a4eb8a3e0657df913fa128b3de5835cef4d68c97b8cef1efa5a94733f4d4a6d9ac031da82244bb5e
TLSH
T1AB411858A6F91148B3B76E56ABF6B86E443F7D372F0B905E10010E4F0A62B04C971B37
MD5 SHA1 SHA512 TLSH

Submit Download