hxxps://www[.]jbridgek[.]com/

Analysis

user interaction
yes
max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 17:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.jbridgek.com/
Sample261102-v645rafg38

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{B772512B-E70B-4A69-93D9-909877E6D913}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3436	msedge.exe
3436	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 4620	4412	msedge.exe	86
PID 4412 wrote to memory of 984	4412	msedge.exe	88
PID 4412 wrote to memory of 1472	4412	msedge.exe	89
PID 4412 wrote to memory of 4808	4412	msedge.exe	90
PID 4412 wrote to memory of 1472	4412	msedge.exe	89
PID 4412 wrote to memory of 1472	4412	msedge.exe	89
PID 4412 wrote to memory of 4808	4412	msedge.exe	90
PID 4412 wrote to memory of 3144	4412	msedge.exe	91
PID 4412 wrote to memory of 3144	4412	msedge.exe	91
PID 4412 wrote to memory of 3144	4412	msedge.exe	91
PID 4412 wrote to memory of 3280	4412	msedge.exe	92
PID 4412 wrote to memory of 3280	4412	msedge.exe	92
PID 4412 wrote to memory of 3280	4412	msedge.exe	92
PID 4412 wrote to memory of 4136	4412	msedge.exe	93
PID 4412 wrote to memory of 4136	4412	msedge.exe	93
PID 4412 wrote to memory of 4136	4412	msedge.exe	93
PID 4412 wrote to memory of 2380	4412	msedge.exe	94
PID 4412 wrote to memory of 2380	4412	msedge.exe	94
PID 4412 wrote to memory of 2380	4412	msedge.exe	94
PID 4412 wrote to memory of 1972	4412	msedge.exe	97
PID 4412 wrote to memory of 5068	4412	msedge.exe	98
PID 4412 wrote to memory of 1972	4412	msedge.exe	97
PID 4412 wrote to memory of 5068	4412	msedge.exe	98
PID 4412 wrote to memory of 4120	4412	msedge.exe	101
PID 4412 wrote to memory of 3328	4412	msedge.exe	110
PID 4412 wrote to memory of 644	4412	msedge.exe	111
PID 4412 wrote to memory of 1708	4412	msedge.exe	112
PID 4412 wrote to memory of 2332	4412	msedge.exe	114
PID 4412 wrote to memory of 2332	4412	msedge.exe	114
PID 4412 wrote to memory of 3436	4412	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.jbridgek.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffae32ec188,0x7ffae32ec194,0x7ffae32ec1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,15141769131424623124,4536880326889575831,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:3
  2⤵
  - System Time Discovery
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,13305903346156723639,8294964999054166554,262144 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,14915794888411626776,8806802263499250024,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15863175085504837275,16915028055133780344,2097152 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,4663276167533082539,13768857140669110518,2097152 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,14607932887008552529,10487703400973146559,2097152 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,15096554306446759573,9700594289358014084,2097152 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,17361178624980195756,7150375402253735386,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,11331254642005562657,18404686387342073550,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,607516612726018083,6691261770324009147,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,607516612726018083,6691261770324009147,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,1244323153116036397,4584209268640918201,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,3228764836621587953,12197354763116747078,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,13879003568786039525,3774313464082397248,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,10915619954744766756,17674058498952235119,524288 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6016,i,3473756058216637698,10965756693932678523,262144 --field-trial-handle=2304,i,6525103952380602051,15926977722961786537,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

24c8a161-9070-4e8a-9100-71b822d5c75e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\24c8a161-9070-4e8a-9100-71b822d5c75e.tmp
Size 18KB
SHA256 ddc1addff66ba04f8251f0b454e05a8c1becf25403ba753e050ac22826ea37f7
MD5 e2f6741f5633fc88663d4328b03379ba
SHA1 c62c736ca5936dabd8071d17aa09c33f47a9e21f
SHA512 77d48c90fadf5ee67bc75234f17a2b120cec565eb861c9f334500a0484febd7a88de24c3d63e15fd116878d4cf3e24ae471e35b82ea96bb5573e919160cd3afb
SSDEEP 384:TQkUSv7sN43da75qAMBGYX5EHc46Ul++23rYH7vBElXmIIl2:97hkhWGYuH56blbYH75ElXmLY
TLSH
T114826D35E8B8AC3B49E3A511F14A3A13DFB4911BDAC92F50D9ED5B1C01CB2DC234B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27384851-e700-41a1-afe3-3c7bf2ee2642.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27384851-e700-41a1-afe3-3c7bf2ee2642.tmp
Size 18KB
SHA256 8b868692edca94278ab9ff5729cc86dde3ac24cb178d44bf41b9c82d6777701a
MD5 3f9a7b927589507ad135883ef16b6607
SHA1 19cd02d5e9bb74f652a65811cf46043d6392e9a9
SHA512 6766ae97ae096118db7b0e2a46293eb8bad138a9ca9b83d1604961c01ed18ef3f8416f66510f5ef1af08dbb7a9152663d55185a4bc1a9886c4a248763beb0cfe
SSDEEP 384:/QkUSv7sN4ida75qAMBGYX5EHc46Ul++23rYH7vBElXmIIl2:B7ckhWGYuH56blbYH75ElXmLY
TLSH
T171826D75E8B8AC3B49E3A511F14A3A13DFB4911BDAC92F50D9ED5B1C01CB2DC234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

0213198f-e689-4228-9095-24616359591d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0213198f-e689-4228-9095-24616359591d.tmp
Size 10KB
SHA256 1dce7a3e7191de9cfda9a51d9da362c82f1b8961ce0fb3a89229eda34e6702e5
MD5 f6ab672949cb327e5f69df3c7cc4125f
SHA1 44bfcabdc46b81e189cca7e372a20c4497382822
SHA512 7f163fcaa2a9f1dd44b9b0528272d95d33879cf218e174366bf861a323f32c0f86aac801de22b67b65901418094b205768cf02e77117d550a055d17d21646287
SSDEEP 192:sxZER+W2/fKsrGIdpAjHW6+WNQfN/Ygy4HPIg5kmhJ:sxZE/2/fKsrn6HbC/Zvr
TLSH
T13122B7126E38A97B4CC7D21DBA55BF53E6FA103295951E48AEFC861C05E77CD220B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

130d70cf-3454-4cd7-a41e-3153673e5f66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\130d70cf-3454-4cd7-a41e-3153673e5f66.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cb0cad3-9071-4da6-bb47-33049a6b6371.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3cb0cad3-9071-4da6-bb47-33049a6b6371.tmp
Size 10KB
SHA256 54fe304517f32805898814c8d849cf9361b00b961c64088ce2842fcd9e5a8bd3
MD5 1e224f0c8f401abe4af6c7478100e85e
SHA1 510eeef593b23903aba0b804eb1e3821c81266d9
SHA512 86ab00d3e6033ea88256b17c1745af489b1fd900463d5a8b5a0f75397364d542264eb147c8dc9943505d69fa03e2994418fdc60f1e3c1a9a07ac91a03c22e25e
SSDEEP 192:sxZER+W2/fKsFGIdpAjHW6+WNQfN/YgscHPIg5amhJ:sxZE/2/fKsFn6HbC/5Br
TLSH
T13732C7126E38A97B9CC7D20DBA55BF13E6FA503295911E48AEFC861C05E77CD224B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

850d988b-fd6b-40bf-b723-51195a4b5d24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\850d988b-fd6b-40bf-b723-51195a4b5d24.tmp
Size 10KB
SHA256 4422eafec1e7a4aa32304b7f67389e1d78b66fef79b5d0ee0f058d062dbd2faf
MD5 c85b821a5c4b8256996541249e07edff
SHA1 487eabf44c92b73d9d5d8b0a97f97bc5c2bee093
SHA512 272db06879417f6b1ecf0fc01c1f7a8e89dd6a6c88264d8175035bae36c0a493e9a67683b31c5b9a6a8eeb5fb29c21762725ecf14acdddf2733d46c07d858c3f
SSDEEP 192:sxZER+W2/fKsfGIdpAjHW6+WNQfN/Ygy4HPIg/mhJ:sxZE/2/fKsfn6HbC/ZOr
TLSH
T1A222B7126E38A57B4CC7D21DBA55BF53E6FA103295941E48AEFC861C05E77DD220B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 01a5ae3d5f51ce04c2c24d8250e60ac7757614e7ab42ad3c1feee699a1e1a509
MD5 f0eb029e8ef31ac81a28d4aa8c864292
SHA1 e8687e0245a261ed1d31fca0ada25755ae8a6ac1
SHA512 a8449fe0d5fd7276f354594abe87e5b5f43073b342983140c2180747eed1d1643b950b9d792e20fd7cea60a5a872b6cd1e47fe9727758440577dd8beae786dbc
TLSH
T1F861A380D6837055FBA44175BAE922DB3E3AA8ACD6830F090EF8D87CE84F31C910CC56
MD5 SHA1 SHA512 TLSH

Submit Download

043c9d74-b7c9-4284-8110-e8023eefbfcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\043c9d74-b7c9-4284-8110-e8023eefbfcb.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4fd4411b-2d0b-43ac-a929-ab194924569c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4fd4411b-2d0b-43ac-a929-ab194924569c.tmp
Size 1KB
SHA256 cf0ba04f419a0bda08f91114e0209af1a1a298608fad0b168633155946b43e9e
MD5 f6990408b1aa37d64811a6ff24843a6e
SHA1 52ac479bb8b8b79f3c02aa88d0ed13ec625ae6b4
SHA512 77344daa700c2c0abdf5153054958239767e8aa9d33f990a54d6e89e708bb1e7f64e0327a10e8921f43a53cf4ab5d0ab152b64ae87b9d87a54d6cf0cd20fbb80
TLSH
T114419FF7C7E4861ECC2156F0AB146E2FCE2E091582183D2AC9D4EF2B97E2474E10164F
MD5 SHA1 SHA512 TLSH

Submit Download

e6949e90-ec87-4420-a658-5a3afabdd2fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e6949e90-ec87-4420-a658-5a3afabdd2fc.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e840eca7-ed8c-42d1-aee1-a0238d24a5f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e840eca7-ed8c-42d1-aee1-a0238d24a5f5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b4015e0075d9cbe3b605c530b394ca7ac4639cccd0befe29c9acc76eb104b4ba
MD5 afbdc12d5d521ad9c7476e0f3b5a9200
SHA1 d1ee0305e1214f24e003d7862d4a842f2cf68d52
SHA512 6206312807b9d82ae7b93b4e8081edddc545e2793f4e5b5e3ffd45b39b851214a1d85b4f3fe3c7f448a0a3840d452d7eaee3c6a063456003111466d4a0405f6b
SSDEEP 96:KkEQKJGa6+YKD6uQd+iQOuxDCzsFaxKt4Fwx5IALauSSygKJ:y7fBQd+iQOu5Cz+a04Fw7IALauS1
TLSH
T158A12F55346B0291397E284D85B4862F525131B33228EDBFBFB894614E6BE101DFDCE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4d84084-0188-44c9-a3a5-7a324223b849.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a4d84084-0188-44c9-a3a5-7a324223b849.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ad913dc0-cf71-4615-80ac-643b743b836f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad913dc0-cf71-4615-80ac-643b743b836f.tmp
Size 27KB
SHA256 e8ae2ece605e1137693cc565b74f1d415ca1e6f63fa1ce587090723cd2f9d4f3
MD5 cbc7d2d016ebd0d175c1183bac7558d2
SHA1 819d46d4546369cdbaff56748b82a51f5d6819e9
SHA512 0ecf168ef35c9fe983e24fe73b4ffe9f55a4e2308cdc53e26afeb338f92323a2c4aa4cbf572b496373b0393561ea8116f20e8badca1b4fd26f9100457fac0a0a
SSDEEP 768:JyichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz6roZc/h:JyichfPWvPZplu1jan+LKgzx4h
TLSH
T15EC2EA7B640CCB7E4FC01A5DDD1A6F9B7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d48fea6a-cb3b-492c-940d-ec538d2066c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d48fea6a-cb3b-492c-940d-ec538d2066c0.tmp
Size 10KB
SHA256 6186e09bc84da1e0030dc2a838a2678556ba0b486e3af1b4eb0df70fee519769
MD5 4f336d43265c2d58f896d4b705fac04e
SHA1 c4c38bd3bee81d42b3c68b5c10f961170481ccec
SHA512 e8d89366c9189b53d3bc5b1b8806ceaedef52bc1e8eb6b01b5aa776d277abda88c8c3fd49a4d29fa87ee9dd86123b03f86123d2b7d4f6d5e9339000c1678a776
SSDEEP 192:sxZER+W2/fKsFGIdpajHW6+WNQfN/Yg3LdPIg5amhJ:sxZE/2/fKsFnMHbC/nBr
TLSH
T13832C8166E38A97B9CC7D21DBA55FF53E6FA103295901E48AEFC861C05E77CD220B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8ae9d87-ae9c-4943-972e-a39247e2a856.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b8ae9d87-ae9c-4943-972e-a39247e2a856.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9b2c4ac-ac67-45ff-8222-7373b1e796c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b9b2c4ac-ac67-45ff-8222-7373b1e796c5.tmp
Size 8KB
SHA256 ee4396c8639a7b0ce8ed6667cb41c954227eff4b6e46ec209522b6667d2256c0
MD5 67db111b5f6207298a721c6b6e26e0ae
SHA1 3ff0705d5c67d8afbddaa893e180a2ecc8375c81
SHA512 551a95fef96d375027f24efcbdfe9709a9cbe5f7ce7b0b78916996ba4ccb1afef9415d3cde56eb00c2c3d505909fccad7ad2c3301d77dd8fcc8402cc5d79ccbb
SSDEEP 192:LJONO6DphmqQmiUy47q8wGYX59ezeCc3onWkk7DBU6:lONO619XRwGYX5EHc4wFU6
TLSH
T172020B35E8787C7B4EE36E45F5873A179FE8112BAA942F44D6E81A1C01D768C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d354efee-2ea2-41f7-a2c4-b601de8092f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d354efee-2ea2-41f7-a2c4-b601de8092f1.tmp
Size 8KB
SHA256 3e82640b6a66dc57c8c944f418755714dac1a09fa98f5c1736a0753f4827d0e5
MD5 738a47e1417800a6eeab569f61b1141f
SHA1 6518df7defd5af66329db2f580c97ebb936c94fd
SHA512 3ed440c11fa7e6b88f18eb01269ca4f032688fb16ee04d54b709eb8e4af9c1a2d35ffd858d9e5ba6964cb9261585799dcdead6818178258dba02c96f04701349
SSDEEP 192:bONR6DphRqQmiUyW7cwGYX59ezeCc3on6UHF++23xkIIYq5O7U6:bONR61OPcwGYX5EHc46Ul++23CYU6
TLSH
T164122A35E4B8AC7B4ED36555F08739139FA5422BEB897F40D5EC1A1C01DF69C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f4afb97-b91d-42c3-9782-79b76fd3d96c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f4afb97-b91d-42c3-9782-79b76fd3d96c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f6ab899e-823e-4bd3-b183-e731d7e4b11e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f6ab899e-823e-4bd3-b183-e731d7e4b11e.tmp
Size 26KB
SHA256 e6ee70372cca71384958010fafc0a78129be76903ae41230d069b3a71f52c397
MD5 ac8087ad3bf01cc33b90634d8d218c91
SHA1 49c5e6cf6717cff6397d40919563e9077be45d78
SHA512 de0af3c6f58ef7ad9a0f265d9e2bfa13a4bf01d0c21f887ce350ba590af7f453882c748a9116a4ee9f2b44f5c3ee7451b8760984992145272da936c8dff6c5e1
SSDEEP 384:wiFzQkUSvTYsNo8TUNTUlIlida75qxMBGYX5EHc46Ul++23vYH7vBElXmIIl2:LFdcFwgmkUWGYuH56blfYH75ElXmLY
TLSH
T1DFC218F294D7983AD9AE5713A33E3D039EBCC117B9846A50B799490CCD8A1BFD30B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a38c9720c421621d0f69a0aa6ff906d037b9e08fb736e18ae490416257d0a960
MD5 6e28741029cccfb871d9204ed5cd35d0
SHA1 73070535b806d3c387e1a871847efb38a20448c5
SHA512 39f100127177e2780c74e5374f2a738a7ebd1851bb63354e6b566979846a8d0afbfeed4391272c5f746bb0363236c234a01a085376791a5665ab1772252bbc56
TLSH
T119411C5CAAFA1104B3776E5AABF6A86E487E7D672E06945D10110E4F0A33B44C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download