hxxps://lin[.]ee/fVk8IMn

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://lin.ee/fVk8IMn
Sample260925-pspv1sys5k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348133549206026"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{D43A5C7B-5C24-4CA0-8FDF-D33AA305BD07}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2168	msedge.exe
2168	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3144 wrote to memory of 4540	3144	msedge.exe	89
PID 3144 wrote to memory of 2248	3144	msedge.exe	90
PID 3144 wrote to memory of 3272	3144	msedge.exe	91
PID 3144 wrote to memory of 3272	3144	msedge.exe	91
PID 3144 wrote to memory of 3272	3144	msedge.exe	91
PID 3144 wrote to memory of 2192	3144	msedge.exe	92
PID 3144 wrote to memory of 2192	3144	msedge.exe	92
PID 3144 wrote to memory of 2748	3144	msedge.exe	93
PID 3144 wrote to memory of 2748	3144	msedge.exe	93
PID 3144 wrote to memory of 2748	3144	msedge.exe	93
PID 3144 wrote to memory of 4728	3144	msedge.exe	94
PID 3144 wrote to memory of 4728	3144	msedge.exe	94
PID 3144 wrote to memory of 4728	3144	msedge.exe	94
PID 3144 wrote to memory of 5096	3144	msedge.exe	96
PID 3144 wrote to memory of 5096	3144	msedge.exe	96
PID 3144 wrote to memory of 5096	3144	msedge.exe	96
PID 3144 wrote to memory of 1156	3144	msedge.exe	97
PID 3144 wrote to memory of 1156	3144	msedge.exe	97
PID 3144 wrote to memory of 1156	3144	msedge.exe	97
PID 3144 wrote to memory of 4320	3144	msedge.exe	101
PID 3144 wrote to memory of 3708	3144	msedge.exe	102
PID 3144 wrote to memory of 4320	3144	msedge.exe	101
PID 3144 wrote to memory of 3708	3144	msedge.exe	102
PID 3144 wrote to memory of 4672	3144	msedge.exe	104
PID 3144 wrote to memory of 2692	3144	msedge.exe	105
PID 3144 wrote to memory of 2692	3144	msedge.exe	105
PID 3144 wrote to memory of 2692	3144	msedge.exe	105
PID 3144 wrote to memory of 3332	3144	msedge.exe	116
PID 3144 wrote to memory of 2564	3144	msedge.exe	117
PID 3144 wrote to memory of 4608	3144	msedge.exe	118
PID 3144 wrote to memory of 3732	3144	msedge.exe	119
PID 3144 wrote to memory of 3732	3144	msedge.exe	119
PID 3144 wrote to memory of 4100	3144	msedge.exe	128
PID 3144 wrote to memory of 4100	3144	msedge.exe	128
PID 3144 wrote to memory of 1880	3144	msedge.exe	129
PID 3144 wrote to memory of 1880	3144	msedge.exe	129
PID 3144 wrote to memory of 2168	3144	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://lin.ee/fVk8IMn
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb92b0c188,0x7ffb92b0c194,0x7ffb92b0c1a0
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,12716051668256110230,9320911427878397523,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,7705930615606519369,2197650120980169230,262144 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,13874941866120283388,13286007860303058791,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,15175082709678306537,293055613201298232,2097152 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,18299308244769342499,15062873426608860556,2097152 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,16016385398280657087,11961749399334492743,2097152 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,2087480010601061960,3859710032303630333,2097152 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,5541031133432466473,4848088190211137541,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16167990772209288430,14575645168015668818,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,2267298333255317691,5307580566366097805,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,2267298333255317691,5307580566366097805,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6184,i,11309781996210136400,288555221186741860,2097152 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,13104958284143569426,9644582318457401075,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,15857075131339857193,5264511887097896375,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,2534482999218444524,3693641693352109619,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,11788315446205237680,10660227954242741802,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,1696739405363945321,4149030280755629364,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,842565819119928559,723645098810703871,524288 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5156,i,5970730954063452624,9696295259281540581,262144 --field-trial-handle=2308,i,1368967681700244331,10327841669601987409,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 270ed1d0efe4acb8f46556b2c630a30e0f343c8cfd69b4dbe412e9a4d10d24c9
MD5 d2d8ed2309e59e9e1da55d42068c10b1
SHA1 20d1fa3d1be4d98e13c5dcbef7fede9a4d815efc
SHA512 3f187366e12e3d161189cbd1873e8aa8c071488fe3cc3972e34926bc350f1cc8bed2626c051a66eb9b4eaaabcb5bb8fa1054a8e5a710012d97be9011f0bdab03
TLSH
T16DE07D980ACCC3BEA7086A87416E570C83A03F1BD2CCEE8E37048CC4B581548B7C2AD2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 acee41a79424790625c085ff31ae691c33508059c174ea78bd31d33e99ca1f99
MD5 4f1f9aebd7c0b34b7a2b3f929108749d
SHA1 9c467a607a5bdaaca6bafd1e06a0431665aff719
SHA512 c199d231560a168e53b663b940f28de9255585ce899d0bc8fb389920bd96ce7ad9d4c81a9c33e715f78d4fe36b8e283fd590af7c9bbcf5ebff4c3999304a098f
TLSH
T1C28172835A9040A4FBFC763183F80E9F33FA4989694B7E17309CF877D606F559228994
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593186.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593186.TMP
Size 3KB
SHA256 5a92c5ac6b092011f427095de83b7ffeb35cc549449e5c53a218cfd914370cee
MD5 3eece0b4635798ef47fe0c829779ff8d
SHA1 26ae906324b61d423bc5686a73c03c3d1c86da86
SHA512 8b164b2ce30ac60bb94b82249226c2e8ac122a606a040677358a6c39361a1f01cf45f2c92083f4881e5bc2b4b7479f2515f15e5068c79cef3516b5537e844801
TLSH
T141618483594040A5FBFC603193F01E8F37F68E81A94B7D53319CF4A7DA06F169139894
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1f56c0af799a07d92cc83f13292a16b4d37ec8f276274e27e30778cd3328237b
MD5 e3a49056cfe53eb2ee603355a2adf1e7
SHA1 06cf6268462ff8ff09ddccf6611cb54066251043
SHA512 d08580bc1666118ce055dc15b68700b61a71a9e26068047a3301efe35bf8a6930f286231abc044f4587e88bbfb36d72a73522a793a9eae974682cf570318b467
TLSH
T1765177F687A5496D8A1156F0AA187F2FCE1C055B03AC3C86C9D09F6F93B35B5E181A0A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e852648c1dc6b129e738608ab5f2e5cc07f9abc4d125f11f1261cd6040c75364
MD5 a9ad6193e9f4a21126d6fa0454c960ac
SHA1 7fbe0d8039cf0de5d2564f8f1e92e49953a43699
SHA512 3c21310fff030d4ef2f92e66b0018e01c7b457e0322f2bd7b9be60b69aa9bd86256923cc3346fd0e8c75d1e448bad071196616d3653a27cf414e55d33abf589c
SSDEEP 192:sxZNRSxW9/f1sPJ2IdpZ/HW6+WN7y4/Y3bEOIgrJ:sxZNcI9/f1sh31HbV/K9
TLSH
T12422B7556E38A57B8CCBD21DBB29BF13E6F9503291901E58BAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5b4bde3f02e5bb4676e18088616cd73259607d9e0f84e9d3c3897a89ba98a2a3
MD5 589ff016d0b7866098355bb08eb6351a
SHA1 fc4b3b242293e191b52270c151602d0848ebbdb7
SHA512 30afd6ea5e333a72e3eb2006416ee9371c7867cc054a3202b4e144075f74c48652159e24155e2b0e9bf40074538a2200dfae2f57ee4ff4392eefa93ecc672f88
SSDEEP 192:sxZNRSxW9/f1sDV2IdpZ/HW6+WN7y4/Y3+EOIg5IJ:sxZNcI9/f1sh31HbV/Ja
TLSH
T15822B7556E38A97B9CCBD20DBB15BF13E6F9503291901E58BAFC961C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dddda5be5e8dd670e28edb8b31b23396d24dcd920caffb4a57a9eb08d6920387
MD5 f4e3b28d651f9b58eab2cf27bfdad4c7
SHA1 dac2f63a85aab43334366060f5692346d44380eb
SHA512 f6483db3721c01646e1888e567938b1275ba48a6ce57491494aa74e9c25def3f868fcd5082c9adeddc04ea141a875ac7a53c6994d95f692ce0acc065f2ebc2f8
SSDEEP 192:sxZNRSxW9/f1sDJ2IdpZ/HW6+WN7y4/Y3bEOIg5iJ:sxZNcI9/f1sl31HbV/KA
TLSH
T10A22A6556E38A57B8CCBD21DBB29BF13E6F9503291901E58BAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3b48318684d666ed63e96dc5612d108b927e946764e6c05d49b3ed191ff8c3f5
MD5 38b1e139956bb95f38d7ede81065a0ac
SHA1 1cbe10876e8646e8b17b46360e5666654980740c
SHA512 3a2521dfe6d526aa6089056d8692cf4745b7f560c019ae2b7ffcb9c2229cc0213c1c5ad05ac5d2282f55f499222d1e3c3ed9c2755319ae0e69a63768146c7136
SSDEEP 192:sxZNRSxW9/f1sDV2Idp3/HW6+WN7y4/Y3zEOIg5IJ:sxZNcI9/f1sh3vHbV/4a
TLSH
T1ED22C8566E38A97B9CCBD21DBB15BF13E6F9503291901E48BAFC961C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 10afc95f1a0657c28790ef48fc58f8be23e4dcefd3543b7262b5e3773a4ad375
MD5 4b5b8c53b7f8a803c308a145287b043b
SHA1 909d06722571d084b002f94d0e052fd29a6c9485
SHA512 3bdb81428fdab06dcc0f3ec876b1014f85550d199afb159ff55c85574d05ad471ba7ff8cb8006ae2ebfcf834d2e1f77ff7a7663356c83c7f70dd1baf8141ae3c
SSDEEP 768:JH30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72arolZMY:JH30AbSWvS2l9u1jaLmLZ12Rj
TLSH
T144C2DA3B640CCB7E5FC01A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7c48fa1828c277222725008893e167da7e0db790b8748de574322323cee612f
MD5 f09a3f30f3bce5af6ff80f2fa2bb0cbb
SHA1 2de778f0e3cdc6d5b12a230c47b839c00831ec27
SHA512 5e6322c8342f198d2333903c822520ef868f8c8838b8353fce6eab54520a8ba9f9c5c356f41163c555dc885f48959e599a0b34d0cacdf9fc17c4afbb81907440
SSDEEP 48:K0CNCsChC9CPC7C/CgbCTCmCzISC1CgK9C11CXCgxClCwYC2C3CtCtyL4neioS2j:KgfeKgYG+fSKAsTj+KQkyCz
TLSH
T15A91320670BA065079BF245991E58B1F664132B37354EA6BBFBD00924E2FE181DFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbc221aa-293a-4fdb-a35d-c5ed92dec178.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dbc221aa-293a-4fdb-a35d-c5ed92dec178.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 921cd9917d92114b35a0e00dea3b1704ed9e05708769855f6261f38900064657
MD5 63625c3972684445af6a870dabb14dcc
SHA1 f23ff62fbe4ea1090bf53fdd10f5ae608da92bc6
SHA512 4a35e48889e09769bf85d940d861a858d16c1c7402ff1d35d529f2e490887e13d7f2207f53501542b9f6e4b864955606bfe4d3620d96f470d9daa23d4ed7c5eb
SSDEEP 384:YZcIhsNXDKVRPpuVzc9iX5FEKDZtgOIwZOyFvoR:mhmIPcYa11XsQS
TLSH
T17B828E3698B85C7B5CE7E104F18B36035EB8906BDBC85F84D9ED6B2D01E61E4030B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f5e873fa959533dfd1976516456e1f151420514d1f03761546a1ef88325d094b
MD5 447b5d48c48cba15b43d086bfccc26f7
SHA1 171ccdcc37e3effda2994971e7574c046fecb273
SHA512 cbdc47d5f1fd26a2df380e279fa68aa0e3f9b090e3b51dc1076c2355a1edb7d68e6638792bc63953d850f924c465112cc5636e4d1be8baa52e964d2f3a982fc5
SSDEEP 384:miFiZcIOzsNp8TUNTUlIlEKVRPpuVpc9iX5FEhDZtgOIwZOyFvoR:NFQOswgiIPCYaE1XsQS
TLSH
T16EC23BF648E7897BD9AE9747B37E2D038EBCC067B5849A40B798561CCD960BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bbabf24f9e6bd537319cb788677d1c51a395d858bbd86b0780aaea9eaee610f5
MD5 8ad848c75fd92fbc133237284db77701
SHA1 93a8bfd4e2426bce471c9e0d1f10ad309fe33eb0
SHA512 1a9dfe0f375fad3987b7a1dd55e450d12daf660bc021a390fa151172e74f1fefef44cde337a10c03de3a0b9f9a2d7678a518647b4cd2185eb9519966a9fb7124
SSDEEP 96:gqONkXQsjpfuMVwptaL5ih/cIPURHl8h4otop5yiCD2BIPuva6zx8X5Fx+xfYvNm:LONr6AmwprQmiUyCm6siX5FYRkJiHhU6
TLSH
T1BA02FA35AC686C7F8EE3AE05B58B7B135FA4106BDA952F44CAE81B1C01D769C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 faa64bfd5bd6261910aa0b60666a99d7d6d4270d20453b12a6aec46b6561519b
MD5 28d26a60b342d06ec5580e04d7a4a06f
SHA1 ca61ab18ce5ea7fdad5180469dfcf888e88af3e0
SHA512 80e00ae222db62ab9ed097bfcc574f06b96d10e322b3bc63bde79a8ebe3388e48562dec3c9463ec95797600d7e5c67315ca907b1e587c1950a539ee0441e95a3
SSDEEP 384:qZcIhsNXEKVRPpuVzc9iX5FEKDZtgOIwZOyFvoR:IhzIPcYa11XsQS
TLSH
T19F829E3698B85D7B5CE7E104F18B36039EB8902BDBC85F84D9ED6B2D01E65E4130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a61e1c33618934540b5397be6e1a52278c05b41e432a98ee2aaf48d65a1264a0
MD5 67459f30ebfefcf09b38679fbe805834
SHA1 fad561af95c9dd3b16402cfe09b6886dcdb2719b
SHA512 3468e815e239713258537faad969594856770556227ac788efde9685897cae08482988886313ec816871a455dccea67c9df91bf8c8025f573c960bc4bfe5d71f
SSDEEP 192:LONy6AmwpFQmiUy8mMsiX5FYRBOlRM/IZU6:LONy6ipj8MsiX5FE8DZU6
TLSH
T1D5122B36B8B8AC3F5DD3A554F08735139EA8512BDF886F94D9EC2B1C01DB5AC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91b5b16a-a886-46cf-aab2-f73fc76a316c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\91b5b16a-a886-46cf-aab2-f73fc76a316c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 279c59d6a1b29195b9303a3a1efb3332281331ed76d737f62f55dad5c8df9e1e
MD5 e5e3abdb35d2fae969049eb5d3a2b34a
SHA1 6322369c1b4a1e5341b462abe3162546d9c2fb4a
SHA512 09565b07f638eb8bf738de209c6b21a3a7e3e19fdcd1a9b756cc410ec4b42e45000d763be7d3bebc6cb3b99c943145faeea190a14ae54c34c07a005848c4f478
TLSH
T141411858A6FA1144B3B76E569BF6A86D487ABD362F0AD45D10110E4F4A63B00CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download