hxxps://astral[.]sh/uv/install[.]ps1

Analysis

user interaction
yes
max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://astral.sh/uv/install.ps1
Sample261102-thj91adv5l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4156	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{344076DF-D977-4CD9-A987-035B589FE60E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5068 wrote to memory of 4720	5068	msedge.exe	84
PID 5068 wrote to memory of 4156	5068	msedge.exe	86
PID 5068 wrote to memory of 4144	5068	msedge.exe	87
PID 5068 wrote to memory of 1588	5068	msedge.exe	88
PID 5068 wrote to memory of 1588	5068	msedge.exe	88
PID 5068 wrote to memory of 4144	5068	msedge.exe	87
PID 5068 wrote to memory of 4144	5068	msedge.exe	87
PID 5068 wrote to memory of 4760	5068	msedge.exe	89
PID 5068 wrote to memory of 4308	5068	msedge.exe	90
PID 5068 wrote to memory of 4760	5068	msedge.exe	89
PID 5068 wrote to memory of 4760	5068	msedge.exe	89
PID 5068 wrote to memory of 4308	5068	msedge.exe	90
PID 5068 wrote to memory of 4308	5068	msedge.exe	90
PID 5068 wrote to memory of 4176	5068	msedge.exe	91
PID 5068 wrote to memory of 4176	5068	msedge.exe	91
PID 5068 wrote to memory of 4176	5068	msedge.exe	91
PID 5068 wrote to memory of 2040	5068	msedge.exe	92
PID 5068 wrote to memory of 2040	5068	msedge.exe	92
PID 5068 wrote to memory of 2040	5068	msedge.exe	92
PID 5068 wrote to memory of 3996	5068	msedge.exe	99
PID 5068 wrote to memory of 1344	5068	msedge.exe	100
PID 5068 wrote to memory of 3996	5068	msedge.exe	99
PID 5068 wrote to memory of 1344	5068	msedge.exe	100
PID 5068 wrote to memory of 3620	5068	msedge.exe	104
PID 5068 wrote to memory of 3892	5068	msedge.exe	109
PID 5068 wrote to memory of 1932	5068	msedge.exe	110
PID 5068 wrote to memory of 2112	5068	msedge.exe	111
PID 5068 wrote to memory of 2612	5068	msedge.exe	113
PID 5068 wrote to memory of 2612	5068	msedge.exe	113
PID 5068 wrote to memory of 964	5068	msedge.exe	114
PID 5068 wrote to memory of 964	5068	msedge.exe	114
PID 5068 wrote to memory of 1824	5068	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://astral.sh/uv/install.ps1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,18339733702319131727,18363301606484712412,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,3876869845594954974,6404950027516513707,262144 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,10028341333324677827,3113610097353518459,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,17021563244599991290,12296934103615181212,2097152 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,6489243931162219434,8540982603456720727,2097152 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,16868110532263631035,17060745333206972651,2097152 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,17418561393538441709,445498108110108814,2097152 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,10492200667856123077,7846195653458295707,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,6152577368689979571,15465057061121740760,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,5631513516531007352,13585611124606717084,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,5631513516531007352,13585611124606717084,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,17099326219971791151,7666678146747713074,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,1675303052035021828,1137918641604042962,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,14196176198550869887,16964372531272994213,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,14520153930265386445,15526140499810030822,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,2793948975795055371,3862381993071259541,524288 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,10827414266528204248,3780492846280372153,262144 --field-trial-handle=2340,i,3741973828824623722,4759393314230576036,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

051dbe92-4c01-452b-be51-d30ff6859089.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\051dbe92-4c01-452b-be51-d30ff6859089.tmp
Size 8KB
SHA256 e932341f77a7b4ef5a2dccfe4c7d5526555b92a4a36fafe06f91fb6fd228cd86
MD5 3825a4f0d80add26f944bb1bf913745f
SHA1 325f5d179383ffee992b092e1dc6f85d363949cc
SHA512 7680c5541b3cdb4c4ada3b6f1246be6d23bd9aca79ad7d476a9b976d0e925d04da1be370db3688179e3439c17df3b259f4fddafe4062183cea5dd48ccf3f6a2f
SSDEEP 192:1ONO6wlDgQmiUyZ9W4X58gZejzorxJlDlRFU6:1ONO6kgcW4X58EC8xJLLU6
TLSH
T14A02F935F9687C6B8EF3AE09B48627139FE5112BE6552F44CAE80A2D00DB65C134AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58d58cc8-8432-46a8-91dd-a11487b62b9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58d58cc8-8432-46a8-91dd-a11487b62b9c.tmp
Size 26KB
SHA256 bbd865d387ae1182c443ce954fccccfc2c5c3fa3adbee028f88524fab69f5249
MD5 1507daa187771f939a70a6203ecd9c48
SHA1 83576e7dad1155e1481b73c918704a9fd77b829a
SHA512 16b337f90588b5dba32bb69831cce94b772524e8f48aac75c99c78de3ce5d2e5921202e5c4b353980ba673fe363cc61a8fcdc00595ce51d94004462b13ae1eac
SSDEEP 384:eiFzQkUSv7zsNi8TUNTUlIl3XWJZDeu9tuHX58EC8xJgXw+2bMmH7vBEwjIIlb:1FdvLwghWJ1PmaHwlbMmH75EiLl
TLSH
T1FAC217F298D7993BD9AE9703A33D2D028EBCC017F5955A50F798491CCC8A1BFD34A911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

05945d06-4432-4f88-af74-6a0ad104b985.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05945d06-4432-4f88-af74-6a0ad104b985.tmp
Size 27KB
SHA256 2f55d101f65c485b7c108c910f9c46498c935565e864b6d446337ad62464b2fb
MD5 0e18daaf2c862a97fe41eb48613c9198
SHA1 ffd4438a016cf43358d66b48c9c3282d5acd58c3
SHA512 c73f00e3ef2abc0002e949335e08cc9e0d58b6a396b2e6faabea336c02be938ae20ff5ea43ebb1e76bf72e6dd65c070f08f76de37c3ad64514d95c35f676e807
SSDEEP 768:mjy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb5roRpte:mjy4J/DWvbtBhu1jajiLm0byPte
TLSH
T1ACC2FB3B684CCA7E4FC00A9DED5E6FDB3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2248ad03-331a-484f-aadb-c8b37a6a16e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2248ad03-331a-484f-aadb-c8b37a6a16e6.tmp
Size 10KB
SHA256 c13408ef2944f55ec3b909fb77d67137a47e015139eafdcc28ed5c95083ba2d7
MD5 27cde685c37d9ecc7b3655f8466024e8
SHA1 baaa8a3e2249aa597798f9035cae39cd625cfdfb
SHA512 e17a009033b5dc8464aae79d89c160f41d9c3a33dadf940fe25cea34f6cf949b873f08758a8ab88c222cfde9f5092093854bd9fd969d378161b12b79af7c9cf2
SSDEEP 192:sxZWRoW9/ffs0vIdpjcHW6+WNMEr/Yrb+T/qIg59J:sxZWd9/ffs0AYHbj/bqV
TLSH
T1B022B952AE68797B8CC7D20DBA25BF13E6F5503251951E44BAFC861C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75f12b3a-c0a6-42ac-a789-e5f9d2928bed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75f12b3a-c0a6-42ac-a789-e5f9d2928bed.tmp
Size 9KB
SHA256 b652fa5c154c47335676c6422dd66857aaec308ce8fc4b49b5f6f57dca7870e8
MD5 54b407bbb746afbb7ab3c6f62ef18285
SHA1 cedc9645d859304dcbde4123e27e31f09eebacc7
SHA512 79f93471a2c94a1179590296d851eba09cd287204f523cd79903bf5dfeb96abd2b5fa4dafea7af516ade6aede9e6fd7dbb475378a2b17c3111917917aaecdb64
SSDEEP 192:sxZWRoW9/ffsmvIdpjcHW6+WNMEr/Yr5mT/qIgrJ:sxZWd9/ffsmAYHbj/Pq9
TLSH
T16722A752AE68B53B8CC7D20DBA25BF13D6F9503255951E48FAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e8cdfb9-f122-4df9-8fc9-b362da466dcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e8cdfb9-f122-4df9-8fc9-b362da466dcc.tmp
Size 10KB
SHA256 ff3a3d395dd0a763212841a26abc8da90567c924baf0abc8d757376bf7adb7c8
MD5 7e0acfad054062bcb03b4d49bdf422bf
SHA1 66d13dcc502143062c48b86e02f3cfc92fcfb12b
SHA512 f09d0d0ee4c9700ae38595d83626accf32e3599039e971b66b121fd8464b9c49bc617090dd3e2b3140c06645a8a73bfbfee7edc98ed2582778447d960181fc4e
SSDEEP 192:sxZWRoW9/ffs0vIdpJcHW6+WNMEr/YruFT/qIg59J:sxZWd9/ffs0AmHbj/tqV
TLSH
T18F22C992AE68793B8CCBD20DBE25BF13E6F5503251911E48BAFC861C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c243264602ac94573f7576ce95d178fa576cbe6e862615cfe14676f3e88b593e
MD5 bed50c44619ddbc1387498e3ac704b5e
SHA1 3181bfac2fb9c602d8cd42ea9fc7da252f81a52d
SHA512 57032ee563db9db4040ccb4967594491e2639fc24d420f488abb5bde71171d5b4eaff114d8e3a1957e6265a312abe13f9915f8237559a454d13cf8c60ed82e84
TLSH
T11DE026CD44CECB2EA289A48742ECBB4CC2C03B1B93C8690E5704C599F143884A2866E0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1e8c0dbd887f3fcc676950bac57c46bcacbe93cb4803bedba35a40e0c441e3d1
MD5 cc03985b9a46e8becd62b694f3b6a0a3
SHA1 a9827e7c4d6cb352e1d2be3603629e5ad26635d5
SHA512 15624ee0ca911f28134d06a0e095fdb53fff7ceed4fa446ef68a9e1554735872405836cab9b4e53c02bf522390b435fb3f7df0aee9a7146aa17a24390fabb6a3
TLSH
T17B611E86E48E4463DBB491FD9DE12CCB3938C6F046AB1D5A0798D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 44bf9f9f25eff7a81c016041f18a91c8a6cc8d602a9d3bb71e2a7db72ebad383
MD5 e2ffa4f5cbced5018fd526a530b22367
SHA1 feb293d41d7613ecb678298a4b7b9b49a7479d63
SHA512 b82b94b6c77019f3bad7b45971b9e863289bd316dd11e1fc430fee66ec49a95c60dede2d8143e5a5139d409e1fcba5bd73cf0769de66dc7b0b53000cf1831bc1
TLSH
T17F612E86E48E4463DBB491FD9DE12CCB3938C6F046AB1D5A0798D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

49f287e3-0e0d-49a5-af4f-0540306c2e6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\49f287e3-0e0d-49a5-af4f-0540306c2e6e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

00e0b8c4-7e50-4cc7-bf90-708eaf965f83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00e0b8c4-7e50-4cc7-bf90-708eaf965f83.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

78a9690d-d106-4560-9d3f-d53933414905.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78a9690d-d106-4560-9d3f-d53933414905.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c126ce2a-2c52-4ebc-a9a7-fe94ad4acaad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c126ce2a-2c52-4ebc-a9a7-fe94ad4acaad.tmp
Size 1KB
SHA256 ec6469b0edd0a3e2f9df2a519801b32a9fa8562cc6575f263238dbbe72d402ff
MD5 f77a0c539ddaefd33c5c7b811fa3f517
SHA1 489986e9bdfcf75c4a8a7eb7e8bb66d31f6f41ec
SHA512 80527db5c1a902abeaae121d7c81d26d1e54339901d645d6dae8b268d6686cca567f0cf0d08e718f95e70ddba9749010776a68153d031dbcac9d44e3e38e1932
TLSH
T13C3180B7C3E5816D891156F0AE14EE1BCE5D0516831C7D2989D4EF1BD3E3071E14164F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b4fcc3a094f2a2302b0916cdd639c61a1b36c0948cdac409921381f8698af6d8
MD5 993801964d2a2a6494b6ec18db654ec9
SHA1 4235d98ca8a82e7800b931f718e1be54a27c24e9
SHA512 99a906ec016f8a9b40fb04f7761507199b67057b71e84b6168d52a2447edd48d8b3ebfc83acbe5df95f0d3e6da0585d8202ffd449ec957b451651aed1ffec585
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLISXTIpK8gUnyJ+IPKjyl:KIDCKs0+iSJT+K8gGK+sKjyl
TLSH
T17391314471AB0341397E298844B5967B12817AB33028E56F7FBCC4A79E6BE140DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d587b8b3-6a1b-43a0-90f4-229dd9623001.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d587b8b3-6a1b-43a0-90f4-229dd9623001.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f364da48-3d1d-411a-bfe7-5212e75e4a98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f364da48-3d1d-411a-bfe7-5212e75e4a98.tmp
Size 10KB
SHA256 4f04fba41c85ccadbbf262830f21865d2d8baa10ab112b8747e7707702ee3f93
MD5 8c10f4356d3f70850942d351b667ec1e
SHA1 cbae8fdf49706672f50a28e85b5dfd20dd2e453e
SHA512 a05944c5b047d7536ec41bf6a21792e22dbf19991566b1a365511156bb077a6db995f0c31b10367c143a8278f06404d5044a0b15cab695697eb773bf864793bb
SSDEEP 192:sxZWRoW9/ffs7vIdpjcHW6+WNMEr/Yr5mT/qIg5fJ:sxZWd9/ffs7AYHbj/Pqj
TLSH
T16F22B852AE68B53B8CC7D20DBE65BF13D6F9503251951E48BAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a09897e-54ea-49d6-a39c-43afbd5cc597.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0a09897e-54ea-49d6-a39c-43afbd5cc597.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a4486292-21ef-4852-8d01-0adb91d5337b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4486292-21ef-4852-8d01-0adb91d5337b.tmp
Size 8KB
SHA256 c2f8a29c42c19adeb55341dc77ef060f4b771d7a59d8758ac11da14602455a03
MD5 c9206032aee51c0cefc1d5e663baa990
SHA1 dd41a79ac437a6b97d22eba772289f923d10d729
SHA512 526f041f327b31faa02ab1908d27210b652be9b40e9ce814ed515701bd1b70bcfba7638083ce0f147cfef7cf1f1484394a586dd08056b32e81763b691df10f94
SSDEEP 192:oONL6wlD1QmiUyW944X58gZejzorxJgXA7R+2bEveQqUU6:oONL6kTh44X58EC8xJgXw+2bvmU6
TLSH
T175120835E468BC2B9DE2A545B08731139FE5511BDB896F90D6EC1B2C01DF65C534EC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c02703c0-2094-4d0c-a61e-e603d9b306b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c02703c0-2094-4d0c-a61e-e603d9b306b2.tmp
Size 18KB
SHA256 32c894d615a8a217808ff60fabdf7eaede0925c1fb7dcc249c2327be92a7ecda
MD5 27eceef820e4b485882ae34430586c92
SHA1 193ef6ac839423082da0e8f012aced8ad7521a7c
SHA512 b99148e85ca0fb9bb36ec41919367b8ea1408b88284c337948a5da16578a094478f03d40f421259f29b1313c03d5d1ed97890d0b570200abd45281d261336841
SSDEEP 384:0QkUSv0sNa3XWJZDe59tuHX58EC8xJgXw+2b7mH7vBEwjIIlb:k01WJ1UmaHwlb7mH75EiLl
TLSH
T1CF828D71A8B8AD3B4DF3A105F04A35139FF4911BD6D91F50DAED5B2C00CE29C234AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d44e9f75-35ba-4e1f-b4a4-2acd896e4ac0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d44e9f75-35ba-4e1f-b4a4-2acd896e4ac0.tmp
Size 18KB
SHA256 143dd06a4bad9c49d6d63c865f419f9099af8802cf34200e6dcec83efe7ce142
MD5 90282810cee9a112c444467cb05636c6
SHA1 0c1488b8f470051fcf60f4ad9e9ea2451605acd0
SHA512 f7f57881c78a4c6ec71adbebbc9ddd25060cc80bed19f588ffdc68b4bdd157c03fd0dbfee83eb55f05d3c4752320af0558407813ba14adbdf791789300c48e1d
SSDEEP 384:RQkUSv0sNaSXWJZDe59tuHX58EC8xJgXw+2b7mH7vBEwjIIlb:D0KWJ1UmaHwlb7mH75EiLl
TLSH
T1E9827D72A878AD3B5DF3A105F04A35139FF8911BD6D91F90DAED5B2C01CE29C234AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

280ca395-8eb3-4c5b-9afb-e2c094639f95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\280ca395-8eb3-4c5b-9afb-e2c094639f95.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 66f607ff160a3b9aa7ff12506d42197d9337e78f5307c268508e317cc17d785e
MD5 1d39cc8c6b04bad642bdabe3271ecce2
SHA1 14e4141f22e581af1e38ebd77895862553330303
SHA512 f6ca4898768811809d9d180a909f497e8b073b4e06769cb6a78b47c67346e678963b6be256d4210a92dccb4e61fac77342fe03e11bae899dbad2edb026d2a25d
TLSH
T16F412A98B6FA1118B3B76E5A9BF7A42E447FB9372F0AD55D00110E4F0667A00C971B3B
MD5 SHA1 SHA512 TLSH

Submit Download