hxxps://omaga3llc[.]com/cdn-cgi/images/icon-exclamation[.]png?1376755637

Resubmissions

07/10/2026, 17:11

261007-vqjtwadt7m10

07/10/2026, 16:20

261007-ttd75acy5r10

Analysis

user interaction
yes
max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/10/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://omaga3llc.com/cdn-cgi/images/icon-exclamation.png?1376755637
Sample261007-ttd75acy5r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{BDFC1246-77C0-464F-9DB2-EF5D8424BAAB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3624	msedge.exe
3624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 4188	4928	msedge.exe	87
PID 4928 wrote to memory of 3512	4928	msedge.exe	88
PID 4928 wrote to memory of 5012	4928	msedge.exe	89
PID 4928 wrote to memory of 5012	4928	msedge.exe	89
PID 4928 wrote to memory of 5012	4928	msedge.exe	89
PID 4928 wrote to memory of 4356	4928	msedge.exe	90
PID 4928 wrote to memory of 4356	4928	msedge.exe	90
PID 4928 wrote to memory of 2736	4928	msedge.exe	91
PID 4928 wrote to memory of 2736	4928	msedge.exe	91
PID 4928 wrote to memory of 2736	4928	msedge.exe	91
PID 4928 wrote to memory of 3044	4928	msedge.exe	93
PID 4928 wrote to memory of 3044	4928	msedge.exe	93
PID 4928 wrote to memory of 3044	4928	msedge.exe	93
PID 4928 wrote to memory of 1540	4928	msedge.exe	94
PID 4928 wrote to memory of 3716	4928	msedge.exe	95
PID 4928 wrote to memory of 1540	4928	msedge.exe	94
PID 4928 wrote to memory of 1540	4928	msedge.exe	94
PID 4928 wrote to memory of 3716	4928	msedge.exe	95
PID 4928 wrote to memory of 3716	4928	msedge.exe	95
PID 4928 wrote to memory of 3008	4928	msedge.exe	102
PID 4928 wrote to memory of 864	4928	msedge.exe	103
PID 4928 wrote to memory of 3008	4928	msedge.exe	102
PID 4928 wrote to memory of 864	4928	msedge.exe	103
PID 4928 wrote to memory of 4812	4928	msedge.exe	105
PID 4928 wrote to memory of 800	4928	msedge.exe	113
PID 4928 wrote to memory of 1680	4928	msedge.exe	114
PID 4928 wrote to memory of 4508	4928	msedge.exe	115
PID 4928 wrote to memory of 2496	4928	msedge.exe	125
PID 4928 wrote to memory of 2496	4928	msedge.exe	125
PID 4928 wrote to memory of 3624	4928	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://omaga3llc.com/cdn-cgi/images/icon-exclamation.png?1376755637
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffc368fc188,0x7ffc368fc194,0x7ffc368fc1a0
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,210909810564377186,15257959481455345841,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,4778151735630456162,16422761763577348705,262144 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,9691257793883838727,968261547406344435,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,12841615671402485716,18080206684595588075,2097152 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,18328987744531850576,1585012213404756664,2097152 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,16121389512975300783,599903109828206248,2097152 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,15186886435946664034,9013829581651829485,2097152 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4654593435108652342,14786160261523706350,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9314487315296918063,16551991316968477985,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,3647062068000225340,10535321417698084976,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,3647062068000225340,10535321417698084976,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,9670405967713535781,8832517849028182503,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,15220574492552337673,14042859899497222418,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,7697257486455047099,13269129508829046565,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,1314257190385496427,9742488326132983508,524288 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,17049716334758396205,7835837312837187282,262144 --field-trial-handle=2320,i,9258847020439264285,12306273021039270659,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3624

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

503af7c3-8303-4461-bb05-76e4f01a1c6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\503af7c3-8303-4461-bb05-76e4f01a1c6f.tmp
Size 18KB
SHA256 a931281ec54d6699d53d385dcd9fd3666dacf5bb8125ef1721da5365042d623f
MD5 d783caa4063b20bb00f54a4244fa7c5e
SHA1 cd44db91e96cfbb9642da41f3168e29039e12462
SHA512 0f9bdffd559589dd459a614503894edb116acf8e21799772ff4d744d2dead2e8f488e1cba7a6c191454d700815bc077bb6a603c05b7f76916a74795ebe08949b
SSDEEP 384:VZcIhsNpDutx5kDUkzBGYX5EN3862XOySPJAxJ+1ChEo4:th1txq9GYuNL2OySPkJ+1CSr
TLSH
T190828E729CB5AC7729E29241F44A36039FFC902BA7C55F94D6EC6B2C01DA795030B936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55b9e6db-c2bc-4a97-9455-649431d8f0e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55b9e6db-c2bc-4a97-9455-649431d8f0e5.tmp
Size 26KB
SHA256 b230e1b2d0e4295fe0f658ee66d19e78af55152867866d0420a7691733a1d3cd
MD5 e776e23ae92de257cdbcc7c0097bb9eb
SHA1 c7317407e0fb4c771046380b9760ab2f6f401180
SHA512 1c5cb17fcaf2b8cdd2380b060d8eea20c469190fcc457dc200a3e4c95314dadb4c158c29f19194798fcd4016fcedefaacedc3893528961efeb6ec5fbfe7df3c1
SSDEEP 384:WHiFiZcI3zsNL8TUNTUlIl+utx5kDUAzBGYX5EN3862XO0SPJAxJ+1ChEo4:WCFQjKwg3tx+9GYuNL2O0SPkJ+1CSr
TLSH
T155C23CF248E7987BE9AD5743A73D2D034EBCD027B5855A50B3D85A1CCC962BFC306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77b4a7cb-c821-4b21-b276-c9f0caefaa31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\77b4a7cb-c821-4b21-b276-c9f0caefaa31.tmp
Size 8KB
SHA256 cdd88ccbee1df9cc73e52dd9a0f195f5142e694d4df1200dbc64fa818a3c9bba
MD5 f3c898f9c66297b1450627427fa19138
SHA1 80f8eec251ad96f676f452af275efbec565ed00e
SHA512 4291a24d19f10ab72ae926354291c9a892111515a1f76b72518e2fcb1cf8e20603dfd55f77ef8733dcef9b34de5e5b0d1635f164be845fc2e07acaf455e64096
SSDEEP 192:LJONc6DphDqQmiUyauvhwGYX59ez8CvjzorQRf2XpEekIIkq5GdU6:lONc61w1GhwGYX5EN3862XO3SU6
TLSH
T1F6120A32A8B8BC7B1ED2A591B44B35139FA8512BEB856F54D6EC1F1C01DF658130A837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d45bf60-f067-43a1-af51-06a6752e127c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d45bf60-f067-43a1-af51-06a6752e127c.tmp
Size 8KB
SHA256 dcd8760bea09bbb043479e0018f4535061e2e727a561362e625e80a30b24680b
MD5 33ebb5c538e7f5972fea3c7bf82974f5
SHA1 819b95b5e4267a2b68a5cd27da6e31529f5bb7e7
SHA512 579e63d16a19f334d450af5b587f6f65062e5e22fc9fa3f555a46b74f54d3386b8fac86984573fa67f3b092ea36b1871bbf07eed1f6e8d69f677872129553cc1
SSDEEP 192:LJON96DphmqQmiUyuvq8wGYX59ez8CvjzorQRRkk7egU6:lON9619pRwGYX5EN38w3U6
TLSH
T18302E935A8787CBF5EE3AE45B54B26139FE8102FAA956F54D6EC1E1C00D764C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d2849a1-8645-49dc-a6bf-bfb2949ae67a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\3d2849a1-8645-49dc-a6bf-bfb2949ae67a.tmp
Size 105KB
SHA256 10bf49f629ba90a1161d0117602435d1a511d1f7a5e47b20fe3a693551550e5a
MD5 71eab00578b8a3050d0ce445655db7b7
SHA1 5d8b06f8805760a18e17cebb8bf5d7f5043e6b1b
SHA512 be43de9b4dd545f3d61990b5e57cf08e702bc1c9f282e5e78b4586dfb34cb8ef3bc6ed1dfaeab69e5117101a833b785cd1e7e844338056be3018d33e6c4afa51
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7P:fwUQC5VwBIiElEd2K57P7P
TLSH
T1A7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 24c133ed61416156a3d0b4fa00bfca479eb7ecb5184955e998fbedcca605f8b1
MD5 b90ecf74a561822627982f1b8d4c4873
SHA1 3340a2b49ee7948da3345fd34ecb2ab68420b586
SHA512 eb4373bf9ed3d7960d90950f6ae991a5e15a049a12d096bc176bd999a7c117e37d44210634cdfb6f388be8a9ac75d4920be8d0f0c23e0873f2a14b925d350604
TLSH
T1BBD08025C9F46FD5E037103D012241447ECC95665B023116E169156E19955D71E61891
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

160aacd9-dcf8-407e-8afd-827ab99b6ffc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\160aacd9-dcf8-407e-8afd-827ab99b6ffc.tmp
Size 27KB
SHA256 97c4d7074cf7568077e1dcd7a32158db444eba08cff4a55a802d14cd09721da7
MD5 27846ef93be55bea935e77b6a0bc7819
SHA1 cbbaa34a50936eea6e736fcbcde153b78abdc2a7
SHA512 e3136686a9796ab77684cc4e2da0ee9b8cc12f129d98af8b9ed522a687e12047f81f5fccb5daf024d29b030df62db84eed23ca01c4ffb4e355b75e8c72d1f118
SSDEEP 768:3sichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzsroA7/:3sichfPWvPZplu1jan+LKgz36/
TLSH
T130C2FA7B640CCB7E4FC00A9DDD5A6F9B7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16a7fc9b-8fcd-4179-9268-5dcd2a373e3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16a7fc9b-8fcd-4179-9268-5dcd2a373e3a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

368e5165-7624-4793-92f5-cda0942c8f6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\368e5165-7624-4793-92f5-cda0942c8f6d.tmp
Size 10KB
SHA256 d7233ead2f81527757df8c2cf3feb6004d2d6025a71082fb09dae1ef3f952802
MD5 c155dc8191829fa91a67ddb5b0d8651d
SHA1 5719cec32aebd62a4ddfaa8796a5e93d3f8bca60
SHA512 df433f22a57cad65812b65a752c6f82f02d4429b4b79c4658d6fee27b6586fc7d1d4c3f0e64d499bf5dc10bbb81143c444412a88ef1e173c6019f9853a7cabea
SSDEEP 192:sxZVRbWo/fFsMtIdpJ3HW6+WNeUk/YgsxmIgrJ:sxZVMo/fFsMOpHba/t9
TLSH
T1D822B8526E24A97B8CCBD20DBB15BF13E5F9507295D51E88AAFC862C04E67CD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fd2377a-22ab-40a6-bc93-8591a3885eb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6fd2377a-22ab-40a6-bc93-8591a3885eb9.tmp
Size 10KB
SHA256 4819d54e67707c152a06e901e5194319cd42a723645d0bc12e9a437d156708d2
MD5 2a78d07abf5850d948d94963ce291e57
SHA1 1c4449a3ae13af65e771a867d6c070948e12a6c6
SHA512 c15063c34d55656e0198a1a2071b1ac424f3f0e9e4b8faf8726d289dee7eb3e520c64c443b5a0ca5bb45278f703e5a0d3fbc804716f252d6faf8a1c37c45fba7
SSDEEP 192:sxZVRbWo/fFsuwtIdpJ3HW6+WNeUk/Yg5xmIg5lJ:sxZVMo/fFsuwOpHba/Ul
TLSH
T19322B8526D246D7B8CCBD20DBA15BF13E6F9507251951E88AAFC862C05F6BCD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70ef14e7-d815-40e1-a871-f1acb7776644.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70ef14e7-d815-40e1-a871-f1acb7776644.tmp
Size 10KB
SHA256 456efcdb0e5021c822b07ef0640a564912eba47ea02bfaa12221d65f2847cd5f
MD5 102e44d24619e8a7af4eab83e28e4a69
SHA1 20937c4e74b59d5088733d6d6846f0ff58ef93ca
SHA512 da66fbf7f901b113efe2380ec9a7c8d8fce90faa0b234e55d07160bd903c43bf93f009826ddea8b7baf41904dd8cdf0e3a69d89d3ba2618cabaadd14457f7e7d
SSDEEP 192:sxZVRbWo/fFs9tIdpJ3HW6+WNeUk/YgsxmIg5XJ:sxZVMo/fFs9OpHba/tz
TLSH
T18F22B8526E24A97B4CCBD20DBB15BF53E5F9507291D51E88AAFC862C04E67CD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80d625fb-a499-4454-95b9-713e8c030cc7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80d625fb-a499-4454-95b9-713e8c030cc7.tmp
Size 10KB
SHA256 01707ac506afa85156f1415dd605654c3c8ae8a78a80cd41c11ae42e67dfe2a5
MD5 9885822a436f9cc373e7fc62476356b6
SHA1 ba7bd2ca2e1ff08773f63c9677983c94916ad592
SHA512 fb4284ddc99ed27db8b883871063521ca3ed5d55d443fabca542774bff11ad87209f09fe0eec52f236e4daa2ed88e21d22af86eba808215d092799625db39c86
SSDEEP 192:sxZVRbWo/fFsuwtIdpT3HW6+WNeoUXYgIxmIg5lJ:sxZVMo/fFsuwOzHbGXVl
TLSH
T18722B7526D246D7B8CCBD20DBA15BF13E6F9507295911E88AAFC862C05FABCD130781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 58772f71c7b1a737f1b2628a7a68db052ed70b6da2fbe687ebb05b0b9d9c75e1
MD5 4300265eaf4800d5de7ec5cfc4e6b8cb
SHA1 5033113a323f132289d0e3d9de0c156d930b6d73
SHA512 292d2dc933e88aebce487c911d7bc3a165fbf30728c087ce60958ab753e491ae12778c1245254f6d9fdfb7b4a95439321a1703617124f8b9ba143d295d389320
TLSH
T19E61C641A588B397EFB4C3B8D0FA1D8B363C84B4B4835E2312F4E5B9570AF11912B9D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1bbff0d2726195be0adadbd175faa554d626e93531c2ca4114f8f085c45c345d
MD5 6c24839fa5931ea5a957466b550c0b20
SHA1 6529dbf2257e4262ef3be181aa13853bcf053602
SHA512 94db40f4fc2a03546defb53141d524d3922c7d31c4b5ce48da3dd92eda2b45090032b9af043ce63e12de7ba32e2636e1d96bfc6be5972fbfc51228bb6e221238
TLSH
T1C961B5419588B397EFB8C3B8D0FA1D8B363C84B5B4834E2312F8E5B9570AF11952B9D4
MD5 SHA1 SHA512 TLSH

Submit Download

c9cba1bf-6088-40ad-9955-a911f6a4d89c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c9cba1bf-6088-40ad-9955-a911f6a4d89c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1c6d8f20-a394-43de-ba73-46195b17aa48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c6d8f20-a394-43de-ba73-46195b17aa48.tmp
Size 1KB
SHA256 1d0e3233458ca07142aed801dcfaf507cb7b7f846ab883759587e3e0104ce9bb
MD5 2cf0e4552d4920041c92b909e74d8add
SHA1 efac5c24e32694e0813c5b33f84bf5b4f92c7dab
SHA512 1c9e66730fc9d22d097dab4ee41569a65c6cbfb3b861323d6cca78b583bafa0ca7eb8a6cdebec4022d4fa4a9b03b70f6e8bdd2d301692d51019c7ab7fc61a1b6
TLSH
T111315CB3C6D5CA6D88115AF06A14AE2BCF2D0A05421C3D2A8DD4FF5BD3E3075E20264E
MD5 SHA1 SHA512 TLSH

Submit Download

7165b440-d85a-4329-87e1-80a5d9f27b67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7165b440-d85a-4329-87e1-80a5d9f27b67.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c3abd2db-239b-4c8b-b2b5-3dc6df772f8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c3abd2db-239b-4c8b-b2b5-3dc6df772f8b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 2356b0d93ea94b7039eeecc1eebc028284adbc5435798121635f10112a41d283
MD5 cca5490ec5dd1e57e3c286f0150651a0
SHA1 5bb13ed5f28ad60c4f78e3c08791782dc6701918
SHA512 a39bc68f53802f4f12dc30b69246e7574fa23c26e61fe9d4467bd0e95afa39c288108ed7026f36b2f745826911edc94c07b508f7e854b92becfe54907ff5d86f
SSDEEP 96:KnH4pNf95bgpiq+VbKWi+LbCHP6RZouLeKwUfLuKI0aeDSKsUJ:S35dlZ8
TLSH
T131B1260171BB120138BD359891B69B1E5242B173305AF92BFFBC90A64E6FE585CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b30a7c2c-9135-4238-a1e4-4b6306ba0265.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b30a7c2c-9135-4238-a1e4-4b6306ba0265.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

824dc637-d9d8-40ab-8d17-4b9561dbc530.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\824dc637-d9d8-40ab-8d17-4b9561dbc530.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c90345da-c5fb-4af8-9838-5e8801a78642.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c90345da-c5fb-4af8-9838-5e8801a78642.tmp
Size 18KB
SHA256 41dcd9b1da40f17cb258bfbeb221778f4ca4c058f1e7ff9ccb308dc3f50476f4
MD5 b19c607dc33678201f3c84edc80aff13
SHA1 8bd2ea3201acfb0ac9967b172c272834cc620538
SHA512 c89afd49340f310c03976b825ca2b42267a5be1fb6f86bb330e92235c82ec7faf47b338f4cb20159f5715c8a8560310366e02c65a75395fcaf2b760527b48621
SSDEEP 384:+ZZcIhsNp+utx5kDUkzBGYX5EN3862XOySPJAxJ+1ChEo4:+xhwtxq9GYuNL2OySPkJ+1CSr
TLSH
T11F828D729CB5AC7729E29241F44A36039FFC902BA7C55F94D6FC6B2C01DA799030B936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbaddf91-69f1-413d-a57e-50969be141bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dbaddf91-69f1-413d-a57e-50969be141bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ae331cea99587ef7be71aa8c111fb21093dba714d56ea8d26b5bbe4d8ed6916a
MD5 79d35afec0ced2b54f71e8eefb471121
SHA1 965d00aefeabd1336abd4dabef5fcb9b327b154b
SHA512 759c3d7dca308cc940ba495177b069ab10a0acc7301accbb4f98ad3f1bf81980e70f55dac5632556131c1748d86f98dcb85b37c447346f37d86c84659e6736d5
TLSH
T16441F658BAF91148B3B76F4A9BF6A86D447E79672F0680AD10110D5E0A63B00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download