hxxps://www[.]mediafire[.]com/file/e7qnatflr1qtna9/Discord[.]Bot[.]Client[.]Setup[.]3[.]1[.]0[.]exe/file

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/e7qnatflr1qtna9/Discord.Bot.Client.Setup.3.1.0.exe/file
Sample260730-qffbgsaa32

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1628	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298907453970160"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{60A881FF-F440-4D55-9CA0-14FD494F527B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5404	msedge.exe
5404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe
5968	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 5968 wrote to memory of 1536	5968	msedge.exe	88
PID 5968 wrote to memory of 3492	5968	msedge.exe	92
PID 5968 wrote to memory of 1628	5968	msedge.exe	91
PID 5968 wrote to memory of 3492	5968	msedge.exe	92
PID 5968 wrote to memory of 3492	5968	msedge.exe	92
PID 5968 wrote to memory of 1960	5968	msedge.exe	93
PID 5968 wrote to memory of 1960	5968	msedge.exe	93
PID 5968 wrote to memory of 5828	5968	msedge.exe	94
PID 5968 wrote to memory of 5828	5968	msedge.exe	94
PID 5968 wrote to memory of 5828	5968	msedge.exe	94
PID 5968 wrote to memory of 2640	5968	msedge.exe	95
PID 5968 wrote to memory of 2640	5968	msedge.exe	95
PID 5968 wrote to memory of 2640	5968	msedge.exe	95
PID 5968 wrote to memory of 1352	5968	msedge.exe	96
PID 5968 wrote to memory of 1352	5968	msedge.exe	96
PID 5968 wrote to memory of 1352	5968	msedge.exe	96
PID 5968 wrote to memory of 5100	5968	msedge.exe	97
PID 5968 wrote to memory of 5100	5968	msedge.exe	97
PID 5968 wrote to memory of 5100	5968	msedge.exe	97
PID 5968 wrote to memory of 5192	5968	msedge.exe	99
PID 5968 wrote to memory of 5192	5968	msedge.exe	99
PID 5968 wrote to memory of 5192	5968	msedge.exe	99
PID 5968 wrote to memory of 5004	5968	msedge.exe	100
PID 5968 wrote to memory of 4980	5968	msedge.exe	101
PID 5968 wrote to memory of 5004	5968	msedge.exe	100
PID 5968 wrote to memory of 4980	5968	msedge.exe	101
PID 5968 wrote to memory of 1736	5968	msedge.exe	102
PID 5968 wrote to memory of 1736	5968	msedge.exe	102
PID 5968 wrote to memory of 1736	5968	msedge.exe	102
PID 5968 wrote to memory of 4488	5968	msedge.exe	104
PID 5968 wrote to memory of 2004	5968	msedge.exe	108
PID 5968 wrote to memory of 1524	5968	msedge.exe	109
PID 5968 wrote to memory of 2792	5968	msedge.exe	110
PID 5968 wrote to memory of 4592	5968	msedge.exe	111
PID 5968 wrote to memory of 4592	5968	msedge.exe	111
PID 5968 wrote to memory of 5404	5968	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/e7qnatflr1qtna9/Discord.Bot.Client.Setup.3.1.0.exe/file
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff849dfc188,0x7ff849dfc194,0x7ff849dfc1a0
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,3498767865943882862,3491142940728395371,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,12085383441649785304,17948708481508870990,262144 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,13877393596102749362,16022601786590516519,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:13
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,12948028326983113084,14464570602023399085,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11339388111406502192,11491993711825682027,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,13387848280876673175,17579551568568236569,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,14356345951942810171,9502282313369479499,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:9
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3580,i,11457579587172725164,10041611023280869437,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,1866778254842120702,8615985669920017410,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,3722053281135437357,18303351740669974015,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6000,i,10961954859722537591,824042389314643314,2097152 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,12158790756502185807,16054662685340078912,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,12158790756502185807,16054662685340078912,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,15727580627887964648,17007033478734046608,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,15191941680995272394,16890297947773628768,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6064946832777152478,13223060193094133385,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:14
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,13971954262225290397,16328392939682051396,524288 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,10773999226546275635,385140377571976951,262144 --field-trial-handle=2112,i,8505503135062815466,10629469091492988553,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5404

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0b635d1459e8ad35cebc52d8721dfa722ad6f2bf795355e4371020d253c454ac
MD5 2bd48cf873cb4d6249dd5ee2a6812f13
SHA1 923340a7892aa86f26069bea7258ec920b29c460
SHA512 8075c80eef1f54c95e5e25725aa994d3c6eb28d0e2d778408f288dd1ee3089cc525329e24196ce021e8ca57101cbaa4ff56f6532afec5faa3e656bd3c244b521
TLSH
T194719486132E04F6E71978F551FE9688F3F8CD6AB8CBAEC1A1901D378602F3610E0493
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8e7f27b239e547fb9e48908d2d27c7ff81ad50d8dbdb89b532f64d5f112333e1
MD5 1795021d2649bde4c54ed0764c6df595
SHA1 992e959956105f04788b72d133ebc5df35e501f2
SHA512 6b6354cc55eb7dc5a3a0a3d461354c71bedb4359bbf2052afb109ff8505e6c6c06ea8b72f6fbb294641b6463ed7ef3e27aab958e9fae338a0ae58ff2aada9607
TLSH
T14181BB86532E14F6E71978F551FE9688F3F8CD6BB8CB9E81A1801D378606F3550E0497
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5980a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5980a0.TMP
Size 3KB
SHA256 482f9d027ac376c45f14f28e99c7965917d6e799f1beac730eb3c45b68a61772
MD5 9b4b82cadbe87644827a98fe0029889c
SHA1 a7bf429edee6a1048e4553a2c7b6cdad1c4f75e8
SHA512 c79d02a9311a893344e0279965acc906592d8b7693882d45df61cb5b1ac9679fc2aa45045d238240c66d6aee9b55b403a5587aec590f1d382ba6f08d38b3ba88
TLSH
T1BC51618A032E09F6D75EBCF590FE6684B3F8C865B0CB9E0140D11E370A42F3AA0E0127
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22e470cd-008d-413c-8e66-0e4abb7482bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\22e470cd-008d-413c-8e66-0e4abb7482bc.tmp
Size 10KB
SHA256 540b223865ae01b8c58fab18c207712470626a948660690cae1f083d79d0ca8b
MD5 5e34d8416d060ad1472fb09ef521a18a
SHA1 5b242777b0f5d91622c8a6c3cf09a0fcf15c40b4
SHA512 f474f6b19196de2c69e6c39a2d8d12be4d461840fdda6a8ecd5f15c152b8b15b2a08744ef53efcfed6cccd292c7428dbd0d191ebcf402c3bd7ea73bea1081114
SSDEEP 192:DpMfBsyUMtgwfDG7zeLfFXiZS14v9KYkj4pY4rhYkoiZnK5foeSfOAQVJMbPGkb:DpMfBsyUMtgwfDG7zeLfFXiZS14v9KY9
TLSH
T1CF228AF782E5C61E891157F8A6146E1BCF1D0719832D3C1688D5EE8BE3E3072E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 2856f5f836458c6375700a38bfe449daf3ebc67cc671559a2becddbf1a67478d
MD5 8457238b055ab2ce106bbd06d2a93324
SHA1 2b10b8bb34cfbcab014b2309333a3d6fa553ec9b
SHA512 2cfe54f3df1052985705065855d5eadd6db90eac528cee94bcbf8bbb56f3f3a557c77caf9a5119c564211cad54ced7185e912bcd76e05cf843a128dde076f72b
SSDEEP 192:DpMfBsyUMtgwfDG7zeXFXiZS14v9KYkj4pY4rhYkoi9lnK5foeSfO+mQVJMUb:DpMfBsyUMtgwfDG7zeXFXiZS14v9KYkk
TLSH
T1C6228AF783E5C51E891157F8A6146E1BCF1D0619832D3C1688D5EE8BE3E3072E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 edf8e29e93f76e1fa0fae9298fa0a5f7088d4695a5d500285efc42b1053c2c15
MD5 160b0c78ef1b5ccf15a8e78286d43c72
SHA1 fe9c80559ed349c21242c0b33628fa0d8ed929ba
SHA512 3e21222abd11ddbec271048e38af497ec383bef87cf20e727564937086eb7a1d5fb4cfcce3a7f2e06ea8784cf48b0651bddce360907e3206ca804fa6b64150a5
SSDEEP 192:sxRAR/bh/fBszxKCA94/FzoA8pNb/g6+WN8nz/YD9y6SIGqfIgDCJ:sxRA1h/fBszxZ8BB/5m/cSay
TLSH
T1B742B7166A289D3B9CCBE21DBA55BF53D2F95032A1901E08EBFC960C00E76DD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8799140ef4ccb63507b63a4013b1af1c5ab106c461b0a5bcf8231dc6cdb80f85
MD5 250fd6c447a6e52ad1c93e32c44cd3af
SHA1 2487a0b37dd648f5ed7facfd5c82ad61bd43189a
SHA512 c8c42e3e59281175fcce922300381de34fdde6f34b8768d5404167d05832830c91596b1ae588c6ea73e92e2226f82bc85eeb7cab84d02d756166858ed7809c12
SSDEEP 192:sxR3R/bh/fBsryKCA94/FzoA8pNb/g6+WN8nz/YD9l6SIGqfIgIJ:sxR31h/fBsryZ8BB/5m/BSas
TLSH
T1EB32C8165A28993B5CCBE21DFA55BF53D6F95032A1D05E08EBFC960C04E66DD630780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7e55a3f9994a06e8f44c6414452266eb7c28de11b73ae92da7275f93e2a8f6d9
MD5 6be1ac07e227b2b1eeec2c1121650762
SHA1 83b309571340223975a81a7192e0a218d1b3526b
SHA512 654109d2fadf783073f8d4beab24e1b26a9b8445fa959fdb17fdd12b54dd4004681aa3fee7084dc1f36ded2005da49521a9f1455f8b1beb1b20db1a537a2c654
SSDEEP 192:sxRAR/bh/fBszyKCA94/FzoA8pNb/g6+WN8nz/YD9l6SIGqfIgDgJ:sxRA1h/fBszyZ8BB/5m/BSa4
TLSH
T11342C6166A28993B9CCBD21DBA55BF53D6F95032A1906E08EBFC960C04E67DD630780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 fce533fb0af6576c0ac09f45c15ba02d6fe779464cb8ea5d367bc3106f0af7aa
MD5 ef273b9eec5705bd4f77a17e6357e1ce
SHA1 9523522c36208f6cb73447c5d636bbd593ee0c58
SHA512 1fd1429caff4a16c796e90dd80336f473c1c02149b8921419b97ff661a0dff29e2b62836486c77f0d548c16e2f8e8b349a7551c3696e36d3336d78276b2dde83
SSDEEP 384:a8YfWRmfCtg/NFf7fKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcGropDm:azfWR0Wg/Xf7f8F1+UoAYDCx9Tuqh0VW
TLSH
T1E4B2DA2F200DCB7E5F800AADAD196FD76D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9492171ca7125e048f82f427191e13374181c36a5d46e6df26fde925f8781e29
MD5 504565c1b12a75ea5f7f969aaeb161cf
SHA1 b17ad10c607ef2c2d55026824676bc9c4e9086b3
SHA512 0ded19f6ecd2ab151ecff8d2ab23eae6645eadb5a44dc7d2e374d29584b524cefd1457ee43d136a3f21703a1d11b62a1e697241ccf5f3bfdbb36006c21a77690
SSDEEP 384:0ZcIh38Ns0GNCmVfWZlf8hyEG6TFCY6y2rEoajo4cdR8eHhVODjYPNDUMahObjIu:yh3/xci0jLrEnjN3Gac1Fab9M9
TLSH
T182F2CF756DB48DB39CF7D786B4873A026EF09323C2D80A949ADDB60D06935BC530B42A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d0223a7ada268f6f684783eccd3629a6e49c9aa2f015954dc4c0f2869aac56a2
MD5 8c02b68a7438e3aab132a3d8fcd863b6
SHA1 a8f38d27a848d95ba3940a11d63cbad3926d71ed
SHA512 dab409d703b6915240ad63f04710ad5f6f316e0c882e92a4b3aa62dc234d296c12dc716e4e41c9f2e4e6ba710f6f60a1f9f9f78fdbfd8f8fe822767e5542b01f
SSDEEP 384:6ZcIh38Ns0vNCLQVfWZlf8hyEG6TFCY6y2rEoajo4cdR8eHhVODjYPNDUMahObj1:4h3/FOci0jLrEnjN3Gac1Fab9M9
TLSH
T138F2BF756DB48DB39CF7D786B4873A026EF09363C2D80B949ADDB60D06935BC530B42A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 36ab6d723f1145ecc02bb002bc0a549f644e4958d1f8557639f642d49861f571
MD5 0b2d51303002dac62e2d39297ee9d523
SHA1 0325d1cf8af58c6736e21a2af4759cf4765601ae
SHA512 4421f251c4b306fc2fe4ef583d9983d9f8da508b390bfe2aaa22669615f5f8fa069af9a8e797ab8ed53da6770451ed5156b92ae87afdb79391e73643015bfd09
SSDEEP 768:rrv+4UNbdS33mi0JrEnjN3Gac1Z5eVH1SCz:rbsbg3EJQnjMaSEH1V
TLSH
T1D903CF3669B88A739CE7E38571877A037EF4525386840BE4CACD6B0D06975EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef15df3f-0016-4ee5-b2ca-63db7cff5695.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef15df3f-0016-4ee5-b2ca-63db7cff5695.tmp
Size 43KB
SHA256 e95163e5da91120e5e48a7686b25d2b5a2f27eb71209e0e0996b50d2c89a357d
MD5 838d1cb64123e0f84c9af82405ea8cea
SHA1 7f7d3984f9706e70aa9d9d960640533a23ecb54d
SHA512 d52078f70a642e819527630642c10b0a044c55e826938f8e5dcf508bd852da2b9cf6ba3948e7acaa6c8ea0212b5aa9fcf1afd39bbe90645ed92805b68e530793
SSDEEP 384:DiFiZcIL38Ns88TUNTUlIlGNCmZfWZlf8hyEG6TFCYly2rEoajo4cdR8eHhVODjw:uFQL3/8wgUci0jgrEnjN3Gac1Fab9M9
TLSH
T1331369F259D78973D8AE8B83A77E2E025EBCC263B1944694B7C9650CCD431BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6ceb3cc-a77c-4460-be42-3b49da9a1ee6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a6ceb3cc-a77c-4460-be42-3b49da9a1ee6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download