hxxps://link[.]edgepilot[.]com/x/k-ybgqpDQEz8NBJ--QMjW-c?u=hxxps://fonts[.]googleapis[.]com/css?family=Ubuntu[:]400%2C700

Analysis

user interaction
yes
max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 15:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://link.edgepilot.com/x/k-ybgqpDQEz8NBJ--QMjW-c?u=https://fonts.googleapis.com/css?family=Ubuntu:400%2C700
Sample261022-tdetqaaf95

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4628	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{07E5FDE2-C679-417F-8A9C-392416C46C94}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 3248	1788	msedge.exe	85
PID 1788 wrote to memory of 4628	1788	msedge.exe	86
PID 1788 wrote to memory of 2936	1788	msedge.exe	87
PID 1788 wrote to memory of 2936	1788	msedge.exe	87
PID 1788 wrote to memory of 2936	1788	msedge.exe	87
PID 1788 wrote to memory of 2108	1788	msedge.exe	88
PID 1788 wrote to memory of 2108	1788	msedge.exe	88
PID 1788 wrote to memory of 1128	1788	msedge.exe	89
PID 1788 wrote to memory of 1128	1788	msedge.exe	89
PID 1788 wrote to memory of 1128	1788	msedge.exe	89
PID 1788 wrote to memory of 1064	1788	msedge.exe	90
PID 1788 wrote to memory of 1064	1788	msedge.exe	90
PID 1788 wrote to memory of 1064	1788	msedge.exe	90
PID 1788 wrote to memory of 1628	1788	msedge.exe	92
PID 1788 wrote to memory of 1628	1788	msedge.exe	92
PID 1788 wrote to memory of 1628	1788	msedge.exe	92
PID 1788 wrote to memory of 4360	1788	msedge.exe	93
PID 1788 wrote to memory of 4360	1788	msedge.exe	93
PID 1788 wrote to memory of 4360	1788	msedge.exe	93
PID 1788 wrote to memory of 3824	1788	msedge.exe	97
PID 1788 wrote to memory of 3824	1788	msedge.exe	97
PID 1788 wrote to memory of 3824	1788	msedge.exe	97
PID 1788 wrote to memory of 4988	1788	msedge.exe	98
PID 1788 wrote to memory of 2608	1788	msedge.exe	99
PID 1788 wrote to memory of 4988	1788	msedge.exe	98
PID 1788 wrote to memory of 2608	1788	msedge.exe	99
PID 1788 wrote to memory of 4244	1788	msedge.exe	101
PID 1788 wrote to memory of 3252	1788	msedge.exe	110
PID 1788 wrote to memory of 4032	1788	msedge.exe	111
PID 1788 wrote to memory of 3884	1788	msedge.exe	112
PID 1788 wrote to memory of 3964	1788	msedge.exe	114
PID 1788 wrote to memory of 3964	1788	msedge.exe	114
PID 1788 wrote to memory of 1516	1788	msedge.exe	115
PID 1788 wrote to memory of 1516	1788	msedge.exe	115
PID 1788 wrote to memory of 4972	1788	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link.edgepilot.com/x/k-ybgqpDQEz8NBJ--QMjW-c?u=https://fonts.googleapis.com/css?family=Ubuntu:400%2C700
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffaef07c188,0x7ffaef07c194,0x7ffaef07c1a0
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,11204630522583858476,16679380907846268828,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,17967291884670569127,13896037058176012526,262144 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,4935236306181249707,4121328115769516563,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,10063254751713174771,6919857955768673720,2097152 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,5970785536216738287,6592741936923687183,2097152 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,14716226533561822497,13554957656307750906,2097152 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,11982239495169865926,4954926740092886076,2097152 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5140,i,15333970412186940984,7026975774264856100,2097152 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,6089011779386366431,13578744897384580220,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,10103334475941625060,8161060618510815526,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,241472410941480492,2248458358223778846,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,241472410941480492,2248458358223778846,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,7284634346540183512,13721101298538392977,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,5457290099312219533,17462398844697939591,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,9388897633129896362,11537542713677179360,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,2996598414129674513,14643210124601321436,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,12120226079108588681,10051913300913754886,524288 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5976,i,10461865074110739633,859515753003696046,262144 --field-trial-handle=2300,i,11043576887069556938,13886287211983451400,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

042e5151-b51c-4fdf-9710-2cfb381a9912.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\042e5151-b51c-4fdf-9710-2cfb381a9912.tmp
Size 8KB
SHA256 b4c06b06532482f4516a6480b2abf19aceb6496f1a2a5b97ec9b28a9009fde6d
MD5 29e675d0dc7299ab60334b58b705a356
SHA1 5fbda1db8d65557c5b60081f6dd3c0afbee3613b
SHA512 079260497a48a66609930221e6f57145e2b30e9afed171d324c8899bac9c0801687da5218f69957efc5b8708da72b8e2c62b0ce648c1fd55fcd1e38add3e887d
SSDEEP 192:1ONY46wlDgQmiUyK9W4X58gZojzorwoUDlhcU6:1ON16kgTW4X58Ew8DQCU6
TLSH
T17A02D735A9687C7B8EF3AD09B58626139FE5102BEA552F44DAFC0A1D00DB75C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46021513-d21d-400d-896c-1ab85c049f91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46021513-d21d-400d-896c-1ab85c049f91.tmp
Size 18KB
SHA256 4bb82534afdbfe9d71ad242c842efbdd586750d20dcf31499d070e48a3bb5a2b
MD5 3f0b408c8e2637e25671f981d47e56e4
SHA1 cffd6d31f55f7434d2ca9d3c9b146a7296cc944e
SHA512 a229352133c97c5f1a05f27aa5754cd1fe81c50ab45f851f10a6712f41f48481b39a7c779eb7166023639997e5b1da4ed0f609dc4851c2d75a351a50e1c5c8de
SSDEEP 384:9QkUSv0sNPkN1MZHRcHX58Ew8D7XNL9zvwQTLUECIIlh:n0oXCaizp9zv7yL3
TLSH
T154826B72A868BD3B4EF3B455B18A3543EFB09117DBC92F90D6EC5B1C01DA298135BE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8350966e-0146-4ec1-b523-20427a68f443.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8350966e-0146-4ec1-b523-20427a68f443.tmp
Size 8KB
SHA256 7a26faef05c51784706d827c390f780aff6fdcba4ad4362e6eae4f6796a88780
MD5 bc3076b8d9ff2c9d6017bd01cf52d2b7
SHA1 e22afed5729027fda99e870dce0022f31fed1ae3
SHA512 cf1eba53c0c98d53acafd2823b5ee022a26b63aaf9c2c92346847b16a7280a7fe523cfaeafc0775726c0f58e93ce2027cb958bd489672ad619e0265a16d7f9b9
SSDEEP 192:8ONy6wlDxQmiUy89M4X58gZojzorwo7XPFIEfveEqdU6:8ONy6kPzM4X58Ew8D7XNL+zU6
TLSH
T1C0121932A978BC3B5EE2A445B48A35139FA55127EA897F80D6FC1B1C01EF65C130BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90fda2bb-0e55-4798-9e6e-81b447a244b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\90fda2bb-0e55-4798-9e6e-81b447a244b0.tmp
Size 18KB
SHA256 ca0e8f76f211500c2c5ed91fabf5da460912d01a55f8bbbf62461871dc090d21
MD5 4d2dab98f3c7b32926c3094263c3b62e
SHA1 ae0dc591dcadb4cc0dd03d7e0b76b14d4ee0f0b4
SHA512 faaa46c37de069ac3dc1504a142958ae8f99f050b6a11ce8f704e7f7b4b3f0cd848da4d4749c5195dddfc106b97e5df3958fdfab11b1b7aaaa8dded0464c3a12
SSDEEP 384:QQkUSv0sNPzN1MZHRcHX58Ew8D7XNL9zvwQTLUECIIlh:40LXCaizp9zv7yL3
TLSH
T142826B72A868BD3B4EF3B455F18A3543EFB09117DAC92F90D6EC5B1C01DA298135BE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

135513b0-1467-4438-946c-50a70a593be1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\135513b0-1467-4438-946c-50a70a593be1.tmp
Size 10KB
SHA256 c94ae16061316cde2976b2fe03e31607eb997350195771778a9b6f6bf93905f3
MD5 00d12135ccba5734f016f9fce1d4e520
SHA1 314fb1dc54c493c6da1720225698efd27c87c8a3
SHA512 b85148190852fa47c14f7eb4c25f11385fc1092c7390bc1516fae5db3bee04f7570f1a7fbd1525142b426e6f39990de1b0257f22250d0f243182b435cbe789d8
SSDEEP 192:sxZrRIW5/f+sOaIdplE5HW6+WNa6ma/Yr/oDwIgrJ:sxZrt5/f+sOzeHbB/s9
TLSH
T13B22C9536E34A93F8CC7E209BA55BB13E6F95032A5D11E44FAFC891C04E6ADD220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b916eea-c51d-4852-afc2-d43265c22372.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b916eea-c51d-4852-afc2-d43265c22372.tmp
Size 10KB
SHA256 e7697f457e8ae34518bac042c92c00f1c13c8846a90b274befaa1531cb8d34f0
MD5 ce177bc299fe8b5b2bc26b86fbe470f6
SHA1 34730118162ec4ef824895350eda2953cc4ec3eb
SHA512 6c25f913ee3ab83c2c5d72d30a5949e7c7370fdf61ae7ea9d563ab4d5c7a6e12919ab919f2b5d8608e2724888e425b62fcf4ab90e5c7ea0d699467e87b13e6b5
SSDEEP 192:sxZrRIW5/f+sbaIdplE5HW6+WNa6ma/Yr/kDwIg5MJ:sxZrt5/f+sbzeHbB/iS
TLSH
T1C332B7536E34697F8CC7E209BA55BF43E2F95032A5D11E44E6FC8A1C05E7ACE220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e11d5f7-b483-4c05-b920-009158fa11b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e11d5f7-b483-4c05-b920-009158fa11b8.tmp
Size 27KB
SHA256 5662506b02541dc28a17efd0534327de572a4df0c1dff0d5f68b4e9676f94185
MD5 939c34a31afc4094080a98bc202b3dab
SHA1 360225ffb2644da85f34ce9031dddc2b0889ffcc
SHA512 62e82c3f2c726f5b767200cc91482e48be74259ca5db6e4889689c765707de180930aea20af199f3c4b4c9c09cedd65f819c61cf6230743abb76f1d7f3f54aa3
SSDEEP 768:BKy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbOroR0q:BKy4J/DWvbtBhu1jajiLm0bF2q
TLSH
T10CC20A3B684CCA7E4FC01A9DED5E6F973E9802C796948D4047FA994C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f643a21-6b24-4f36-b502-9b1164526980.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f643a21-6b24-4f36-b502-9b1164526980.tmp
Size 10KB
SHA256 4065a5f40b350065bc1e0699fa28362eb514a50d22cb59d52a917392db15f698
MD5 84d6dc5e4dd48f3bfec9cb0646c7d983
SHA1 6c28700cd46d0f84f8dd2ea1f6f8910d46fa38f6
SHA512 7b2804f0d56e8d9893cb095b3ac0ec6ca995b093d85676bbe2a90247da950c9527c396e69c64f3185fcd7ab1e32d03639f19efcd1e1e0608011d5b4cdd5eaed1
SSDEEP 192:sxZrRIW5/f+s+aIdplE5HW6+WNa6ma/Yr/oDwIg5mJ:sxZrt5/f+s+zeHbB/so
TLSH
T19522C8536E34A93F8CC7E209BA55BB53E6F95032A5D11E44EAFC891C04E6BCD2207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96dfd223-4132-4852-b5a7-66cc3e4a09f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96dfd223-4132-4852-b5a7-66cc3e4a09f0.tmp
Size 11KB
SHA256 bc552632bed56b24c59efbe5ec1e15a855901d9f81a7411b04739d5132698407
MD5 b7dd2cd66169f50d3ee64d53711c19a6
SHA1 b41bfcc7ac5b30a089a87b6c0b9afe94e97e9069
SHA512 5a75438342a950e8b210ce51f940a672fb6c933c395cdbe291dc0cfb9910776c13409679f24df58651749548d81e4315fca44037a733eb967124df71bcbde225
SSDEEP 192:sxZrRIW5/f+sbaIdp/E5HW6+WNa6ma/YrOTywIg5MJ:sxZrt5/f+sbzUHbB/BS
TLSH
T11532C8536E34693FCCC7E209BA55BF43E2F55032A5901E44E6FC8A1C05E7ACE220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 9db59a9fa5a044e36b4171769a4e55b950ae4fe71c9ae11740812574a0e9d482
MD5 bb0181cde3f1a769fd0154f2514e81e4
SHA1 0929089c33515af89142a4195ecc43f3a5c6a0d1
SHA512 15869c03bd18052a4d46bc993edda5286a029639fbf7a834c00a35dda8b526c8e868eb4cc2927987df594d8660fb62c4c13950268fb8c2fed2e845d9b81c640a
TLSH
T108E07DD845CAC23EB30C64C7537C6B8C83AA361FD6C8E98F3708C6847485458B7C2790
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 7241c756a38db617db39686eb58fce805518c9f5ea10f82367541ff17261e810
MD5 39f3a256ca671723a3631656656f0544
SHA1 9f70f67b563806308df35a2ea7a1b8e2b583824d
SHA512 a071e86fc7f7d145bf0a08926ecaaaadf21169411c06b1d1686094f877cce1ea474e3b54322e3394ce3ae1b1f0aac052de23671f0740d30d0964f99bf5e25a03
TLSH
T1D551E7C4ADA58895DBA80CB1A5D29E83373C4DB55D973F5214ACC8BA6B0F7B4B10207F
MD5 SHA1 SHA512 TLSH

Submit Download

222b1d3c-5545-4b75-aed1-580c25914ca9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\222b1d3c-5545-4b75-aed1-580c25914ca9.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

39aaceb9-9ab3-48b2-9e75-f494469ac9fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\39aaceb9-9ab3-48b2-9e75-f494469ac9fa.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7359f0e2-a3ec-4fec-95d0-ff7f727f68cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7359f0e2-a3ec-4fec-95d0-ff7f727f68cc.tmp
Size 2KB
SHA256 afc6f59120e739442a6aceaa9173ce465f55844050dc76464657022d4f54dea6
MD5 495db82c34a2f4235a566fcb90fc2d8c
SHA1 428393fce7f8a9065a578d8355fed238b9cb5b3a
SHA512 dbb3ab17002fd0383e6cbd5b4c1527ab0e46b3b757a4804be97a8e5ad92bb95bc59b1b72b8260061f92608b5395e8a714ed365ddb0b26ba450a0577a5f22dbcb
TLSH
T1F8418BF7C3E4866E89515AF06A246E2BDE1E0919422C3D1AC8E4EF6BD3E2071E10164F
MD5 SHA1 SHA512 TLSH

Submit Download

c789b942-ca21-4ee6-9769-81219c7f9fdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c789b942-ca21-4ee6-9769-81219c7f9fdb.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 787ea2c806e7270c1dad7ae2ac47b1b1e8e6d30f234ff360b4c728d3e8b5f7a1
MD5 a08f19e5034b9559f82a2eda038c7e11
SHA1 d5e470fd5b40af7fb04a917d550d2087ae764f53
SHA512 e023f5aaa821bc344db3047c3740a7152554839cd2efb86e525d250fad5c415add0a28b69ba179c057d06df8f133a9935a29e4c429862210a4e3a52d9485aa46
SSDEEP 48:KIDI1Ks04jyLEzy+suCLbyB6ISWLK9y1ALxEbYJqC2yLbef7F99ebtAFISbQiQtr:KIDCKs0+mLWK8YoaQHEgKlaO2jWKwsS
TLSH
T186D1575130BB068538BD298895B5876E424235733019F96FBFBD41619E2FE080DFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5d21753-d908-4d48-8d20-4f9e2179db5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5d21753-d908-4d48-8d20-4f9e2179db5f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e8ea7195-1fbd-4349-aee6-a61385fe27dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8ea7195-1fbd-4349-aee6-a61385fe27dd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1de8da3-6913-43e2-b6cb-7eec42466938.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a1de8da3-6913-43e2-b6cb-7eec42466938.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01c11950-8c89-4f47-8648-7db75f1ddf7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\01c11950-8c89-4f47-8648-7db75f1ddf7a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f5152ab5-dcfe-4896-b94d-e6aa2ad5b982.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f5152ab5-dcfe-4896-b94d-e6aa2ad5b982.tmp
Size 26KB
SHA256 fd33a2ecc2615983f0380329010aff700dbaea2068b6438614d78e21b038a17f
MD5 69455d5c113ee6f4ed332471c737d6a3
SHA1 39a924f9139fbd3c6b0d046e174aecc974d2eae2
SHA512 622d1356e7982b85d3856a5dd1c610354f8234e0e1a307778f197b342a50ff305a9788d756addf56dcdfc455237181b6418c81540064f04fb29bd47345e45f09
SSDEEP 384:5iFzQkUSvNzsNx8TUNTUlIlkN1MZHXcHX58Ew8D7XNLyzvwQTLUECIIlh:QFd1Qwg7JCaizpyzv7yL3
TLSH
T133C218F258D7993ADEAE9747A37D2D029EBCC017F5852A90B398491CCC861BFD306D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 976e0e2dc22266d4bd861f7a33ae37605e3f367b36d8bac455f6ae6456e1866d
MD5 263a6368414d981d080159e4514a07fd
SHA1 57c2aacb65710f38128cec552b4c3bffab8c5139
SHA512 7f1fb29ca1a0b34bf553bb92f3f548f538dc88a568ab502b0a33b1ad2d086f5f5616d8526c91e35c137638c39e161eaf674e39d6d1b4fe12c2adbd9861ecfa7b
TLSH
T101412758B6E91148B3B77F46AFF2A86D48BFBD772F06D56D00120E4E0A62A01C971737
MD5 SHA1 SHA512 TLSH

Submit Download