hxxps://link[.]edgepilot[.]com/x/NCsfik0eU9s7vQMQMlk_vzU?u=hxxps://mediadiscourse[.]org/letters/1c53c37f07

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://link.edgepilot.com/x/NCsfik0eU9s7vQMQMlk_vzU?u=https://mediadiscourse.org/letters/1c53c37f07
Sample261102-vsxthsff96

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2388	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{3FCC62D1-65B1-49E9-80DB-E6BFF64E3650}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
116	msedge.exe
116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe
2640	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 2640 wrote to memory of 5492	2640	msedge.exe	86
PID 2640 wrote to memory of 2388	2640	msedge.exe	87
PID 2640 wrote to memory of 5984	2640	msedge.exe	88
PID 2640 wrote to memory of 5984	2640	msedge.exe	88
PID 2640 wrote to memory of 5984	2640	msedge.exe	88
PID 2640 wrote to memory of 1656	2640	msedge.exe	90
PID 2640 wrote to memory of 1656	2640	msedge.exe	90
PID 2640 wrote to memory of 5856	2640	msedge.exe	91
PID 2640 wrote to memory of 5856	2640	msedge.exe	91
PID 2640 wrote to memory of 5856	2640	msedge.exe	91
PID 2640 wrote to memory of 3000	2640	msedge.exe	92
PID 2640 wrote to memory of 3000	2640	msedge.exe	92
PID 2640 wrote to memory of 3000	2640	msedge.exe	92
PID 2640 wrote to memory of 4540	2640	msedge.exe	100
PID 2640 wrote to memory of 4540	2640	msedge.exe	100
PID 2640 wrote to memory of 4540	2640	msedge.exe	100
PID 2640 wrote to memory of 4092	2640	msedge.exe	101
PID 2640 wrote to memory of 4092	2640	msedge.exe	101
PID 2640 wrote to memory of 4092	2640	msedge.exe	101
PID 2640 wrote to memory of 4604	2640	msedge.exe	102
PID 2640 wrote to memory of 4604	2640	msedge.exe	102
PID 2640 wrote to memory of 4604	2640	msedge.exe	102
PID 2640 wrote to memory of 5900	2640	msedge.exe	103
PID 2640 wrote to memory of 5900	2640	msedge.exe	103
PID 2640 wrote to memory of 5900	2640	msedge.exe	103
PID 2640 wrote to memory of 5836	2640	msedge.exe	104
PID 2640 wrote to memory of 376	2640	msedge.exe	105
PID 2640 wrote to memory of 5836	2640	msedge.exe	104
PID 2640 wrote to memory of 376	2640	msedge.exe	105
PID 2640 wrote to memory of 5008	2640	msedge.exe	107
PID 2640 wrote to memory of 4120	2640	msedge.exe	116
PID 2640 wrote to memory of 2792	2640	msedge.exe	117
PID 2640 wrote to memory of 5212	2640	msedge.exe	118
PID 2640 wrote to memory of 5364	2640	msedge.exe	120
PID 2640 wrote to memory of 5364	2640	msedge.exe	120
PID 2640 wrote to memory of 2504	2640	msedge.exe	121
PID 2640 wrote to memory of 2504	2640	msedge.exe	121
PID 2640 wrote to memory of 116	2640	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link.edgepilot.com/x/NCsfik0eU9s7vQMQMlk_vzU?u=https://mediadiscourse.org/letters/1c53c37f07
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2bc,0x7ffec040c188,0x7ffec040c194,0x7ffec040c1a0
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,1330628646465740362,3231024232789761506,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,11373295490180528258,13713362708140571494,262144 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,11455138645166428884,248302594143852981,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,17417145717300009803,11459283973932885893,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,6535136762319270839,14880377194443085861,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5020,i,6007797830970513823,540435448404880430,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3608,i,17144340972123403232,13790009035112904883,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3768,i,13886059139926016114,15685866866027536772,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:2
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5132,i,2211146978511248976,6081018213465194178,2097152 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,12549454912531965384,7983308508021759851,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,5006569195080637938,10686866076743972443,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,14380604057700823774,10010109247758896463,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,14380604057700823774,10010109247758896463,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,10479752150024137601,11272818753895282428,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,31119293732282012,10293592559736031270,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,10939038122969922100,6179284577214768718,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,6814329707888746943,12982606850972006319,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,10621579386102102335,15927587277589831057,524288 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5600,i,17959854644746441843,16080481038892803158,262144 --field-trial-handle=2260,i,9167931661126443790,467147955194864070,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

08e79fb5-c8ac-43d1-bc52-acaeb236ffb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08e79fb5-c8ac-43d1-bc52-acaeb236ffb3.tmp
Size 26KB
SHA256 8d85abd02ec2b03e091175d126b3b0545ec9cece20d3c8544a57d466bdb38324
MD5 fc42e7bf71dbcfa6555811010c653e04
SHA1 88f5fcf0ad368317240ebc28132fe29fc73fc8b1
SHA512 ff98827ed083e48973b350e9fa5d2c1c5d444ecaab985787e30276d22c789aeb63d060004a4abda612c9cd9af04b609d9135ce5c01fee24f96a6bf164a20684c
SSDEEP 384:n4PiFiZcI63sNY8TUNTUlIm2aKMm/XWsbNwzWfLBCh7SUZ4mY5u0iysa+VY5agL4:4aFQ63dwgcAfWsbwEBChf+mY5piyhggq
TLSH
T197C23A32EC98C9ABECEB4FD5AB4A3603DEF04263958C9AD4D5D91D1C009B5DD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33a957f0-0737-4e30-9aa3-1e31a49786ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33a957f0-0737-4e30-9aa3-1e31a49786ef.tmp
Size 27KB
SHA256 9c2c1b3c1fe966b040e7f887d8caf788281b522b10e784de86b6e3c8edecd0bf
MD5 d9b63250d6810d49d2407363190e70c5
SHA1 da0809cad861ea0bc667ead2c9d602eaa687f218
SHA512 6762af01bc72e885744a0d6a9af7f0143383538092b024d373e580a19b34a6a50a285f506c28fccad9e98880dadb44da6d6b4cc388b497dc58733fe791d6013a
SSDEEP 768:6aFd0NwgQCE2ub/EBChf+mY5UiyH75EnXnLm:6Y0cCE2qT272Db8Xni
TLSH
T1EBC24A32E894DEABEDE74E94A34E3A47EEE05163C99C9AD4D9DA1D1C00C71DD034BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cb2648e-807d-403d-8a42-ce1a8c44e9bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4cb2648e-807d-403d-8a42-ce1a8c44e9bf.tmp
Size 25KB
SHA256 747ae1e70235071bf8a873c12ec41fb756dc4bff3fe05711e7bc28fac13d68f8
MD5 c1d6a2a782a7d38cc07b17c4912dc490
SHA1 df67854df49f760c9b1525ccb7ead7b80fcd0bad
SHA512 69bd4e55856e73212e0cf67c7048c6863939c601b3f2d3a66c14a8ec83098775b30e117e5edfa8bd2c0b7e84f9ed1bcfe53efecc4e21f5580c3e26f983b513dc
SSDEEP 384:nUiFiZcI63sNU8TUNTUlIm2aKMiXxs4wzWfLBCh7SUZ4mYpFAsa+VY5agL/7Iz6q:vFQ63BwgcgxsHEBChf+mYpFAhggq
TLSH
T12EC24B36EC58C9ABECEB4FD5AB4A7603DEF00163959C9AD4DAD91D1C008759D0307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a90adc2-239b-4298-9e11-00527a659d68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a90adc2-239b-4298-9e11-00527a659d68.tmp
Size 27KB
SHA256 4f8d7ffb1f78b4504c2a787e9b5b38a16ac82417a1d0c53274b21facdfec3362
MD5 953f6c58bc5eb0dcea54dc9acaff81ed
SHA1 025ecbeeb9a836ac4cd5ab326960e53196f94c4c
SHA512 d73543fbf9a397408e6b7989f856ece4dea3cc1658c262707b52cca909a6140dfd1260c0ef7caa8d51b3db9f850a38c8d389e2cd2a85daf21e0996ff398bde78
SSDEEP 768:CaFd0NwgQCX2ub/EBChf+mY5UiyH75EnXnLm:CY0cCX2qT272Db8Xni
TLSH
T195C24A32E894DEABEDE74E94A34E3A47EEE05163C99C9AD4D9DA1D1C00C71DD034BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0c62dc6e-0faf-403a-a108-a1168d60693f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c62dc6e-0faf-403a-a108-a1168d60693f.tmp
Size 13KB
SHA256 1e1e22fa2242f7b8a15301abea7a1a39910e7d2f8362a1dabce2f511554c1d3c
MD5 e77d49344a0dadad66b18aed3a1eb982
SHA1 2a390b2809e6e46b193971350c86a3c7b7f32bfd
SHA512 7098fbe5371e6b09dcfbf41bb17f25ea89ca358a159449cce1785ff40c3dae78445b974cfa995ccd5025bc93c6ee67e177914d30259bb4d8d1fa0c2b7847a6cd
SSDEEP 192:sxZI4RIkU/fysFaQZLl8mzodp/bUlrHW6+WN9q4n1/YomJOwsiSfFIg5DtMJ:sxZI4RU/fys4OeduHbn/GO0SB5tw
TLSH
T1E052D6566A38697B9CC7D219FA05BF53E2F9103291D01E84EAFD8A1C15EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47b64102-f5c0-46d0-bd9b-b7e879cc123b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47b64102-f5c0-46d0-bd9b-b7e879cc123b.tmp
Size 13KB
SHA256 99baa450dbb73542228ae0d261d0725a00f6fa41af969c4288a635c035f98db3
MD5 e6152c90988b5846149011fcf63f6a7d
SHA1 cf71dd687a7d160028b632e18cc3c70a720c2aed
SHA512 f15a2a70cc7866b439464ee6f256d317b3ad07443c027a2a2b514130a03c0c033873d0fafa029a4757129474c944f7fd60da3f4c03781858c1844bcd36aa56c0
SSDEEP 192:sxZI4RIkU/fystQZLl8mzodp/bUlrHW6+WN9q4n1/YouJOwsiSfFIg5DtMJ:sxZI4RU/fystOeduHbn/GO0SB5tw
TLSH
T19952D7566A38693B9CC7D219FA05BF53E2F9143290D01E84EAFD8A1C15EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d2ca3fb-839a-4c77-a85e-7d0bdeaa5caf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4d2ca3fb-839a-4c77-a85e-7d0bdeaa5caf.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

77fddfbd-5bb4-443b-bcde-f6de6aabbf01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77fddfbd-5bb4-443b-bcde-f6de6aabbf01.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8db69623-f4a6-4c5b-bb64-8972c9cf48e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8db69623-f4a6-4c5b-bb64-8972c9cf48e3.tmp
Size 414B
SHA256 b45ee32e930647edccccebdc4e5cf7281c05f7f7cc2767ff1cbc80063323176a
MD5 159f4d91763011d23d7bc48a452a7858
SHA1 f7d400fc56c770f80913e090f3fd82d6fb6ba53f
SHA512 46afd7ff6f86e0b9150a6ec1d4366df51399784632010aab0671d1632d3651e6b547bc31d6e2eeb90f67b7817a323619b291cf878b0acad7a427aedf1f166a07
TLSH
T18CE02BAADD51EC3B18FD0B7D6494434AEB1023272B91984B7B3E910C8FB0636458696C
MD5 SHA1 SHA512 TLSH

Submit Download

8dd23148-7712-4f66-b096-3e08adfc93e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8dd23148-7712-4f66-b096-3e08adfc93e1.tmp
Size 12KB
SHA256 2d3b7a15c55e5a0cca3b2e8c1cbb306112bd83efbbfffac10b0c17176acd2941
MD5 0b35732317fbff32402ffb4f07ad7c2d
SHA1 c6e5774997a9b5000c5e0e445d7c98f29943111c
SHA512 a6e83c67cecf79b5b4252458c34b542b536842a0a66e3a21be015d1609150ce073039cbdee8c452344e90d93b675472bc8c3268a1361f44598fe7bbca0acbd1e
SSDEEP 192:sxZI4RIkU/fysuaQZLl8mzodp/bUlrHW6+WN9q4n1/YomJOwsiSfFIgjtMJ:sxZI4RU/fysHOeduHbn/GO0SBjtw
TLSH
T11E52C7566E38693B9CC7D219FA05BF53E2F9103291D01E44EAFD8A1C15EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ac3fc10e87b851228ad0e52621cac2121ed98c23c5afd881780fc8b8688f7480
MD5 489d1a3db25ce7ecfe8cd201081513ed
SHA1 5db1dd0cb234e3a383fa8fd1597adb1195e40964
SHA512 8b96681d56a7b3f415e761c60ca9af422d7e776885bbe88c0fcf1b30244ee6d285ee85cc73d8bcfe7ef5efc5adfab7415501e9087f70b554cc4f93e965c93026
TLSH
T114E026C556C8C37FA24CB48B01FA574C82C0379B93C0F91E6745C488B443140E3A6AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d4df7ffcc0b681a5580b51813429b82ade5ff1ae6cdc93efe506530db08fa78
MD5 d57edb1868b14a15b05d26734e46f852
SHA1 3c007222442f2faa0df43b4d30e85715a229776c
SHA512 af120348f4a4f155cd0e32c17d41424354754042b1749429c3cab058705cc46b792d39a58831168fe25dc94948d90cb31c2ccead915e55d249cd93ed95cf1852
TLSH
T1F3613EA45658C4D9FB98727197DE11CB323895A8BB931FE31860F87C5C0E36DD16C0C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0dfb33e729f89d8ece2dfc522fe22294bca124988a2fc5030cd9be102dbfa3a2
MD5 afe6c65b5ee19c6a60eddebb85e04cdd
SHA1 ac315edf5480da195ebb310c313976c513d76bd3
SHA512 86bb4ba8115b4ccdb6c61eeaf4dc1d3053fa421e17c605344eed03f580f1619ad5343ff4e12a59b608c3e796a03dda12e0e03ca4a34d60756e8a1e68dabd025f
TLSH
T112714DA05549C4D8FB987374A7EE008B323894A8EF471FF31864E93C5C0E76DD2680C0
MD5 SHA1 SHA512 TLSH

Submit Download

e4a89216-41ba-4ae7-9f66-1bcb2414c8d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e4a89216-41ba-4ae7-9f66-1bcb2414c8d8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

54f7e9d8-e0ee-4228-ba93-7e63e16229df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\54f7e9d8-e0ee-4228-ba93-7e63e16229df.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

6a629d1c-1dbe-4c75-aa27-54b28007d53a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a629d1c-1dbe-4c75-aa27-54b28007d53a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b2bbe938-ae76-44fc-ac5a-b0d4c806c430.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b2bbe938-ae76-44fc-ac5a-b0d4c806c430.tmp
Size 3KB
SHA256 1eec50f51384ce7feeed1ac4f70474f2e22a50dbb86a6351048ed8a7755a6021
MD5 b5a0cf49ffe6b63182f1b0d605925fe6
SHA1 02ebb041a21a46946058eeb4ba4e2549d0213016
SHA512 103f36313c3a86bd70487d6dc04034ba5fdc32027e7e78f6e54a1158bc69315a07da333ef20fd3592f93dffd7b60569c29686caaea6d56caebeb6f981bcd21bb
TLSH
T15481C1F7C3E4C62DD9119AF0AA187E2FCE1D0515426C3D1A88E4EE4F93E24B1E151A4F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9a6110ffb2b52b37212290ba52ce4b0de36265333bb4d70983f4838cea24f217
MD5 7068d7b0451dd18fb238e8b0db0984b7
SHA1 cd675ca27bf4ead4eb4e2c775fb026310a818c1b
SHA512 c071fd2809641db0c848196e3adde5e544c65a5aacee48f654775e1a161f48075c81b4ded5c5ecc8a26dbecf8520cd50a97930838fd96acf2c1d113e39452fd8
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgp:ST/2dXOJhJlpfnpp3tNXVrN3aJhw
TLSH
T1C4B2005571BB021039FE291C91B59B2E168231B33119E66B7FBD40B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e90273c2-c1a8-4724-bcd9-1ff32c913a61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e90273c2-c1a8-4724-bcd9-1ff32c913a61.tmp
Size 32KB
SHA256 41fbf0fa9d25088b705bbb153add576243510948de9aa0bf1959faba14011efb
MD5 0fd0243026f737e31507bf89df5f3a78
SHA1 68aa569422afb2f980cabb32dae40c3196c22c4b
SHA512 8a4488ae9df30d4694e4df7d2b124af7ff13d1e35e0c20d2ae8c02428fc4ab84832363457b76f07ab6fd2a28d2d014d7e511c04309d4c0f3e240366e9efdeefe
SSDEEP 768:CuFdeNwgQCXPub/EBChf+mY5lmyH75EnXnLm:C8ecCXPqT27D3b8Xni
TLSH
T12AE291F298D78977E89E4B97A33D2D4299BCC153B5885694F7C90C1CCC861BFC34A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4cdd507845155a9a9a39e94801b7f62847cac49c2e71907dd1b79f1bb8a4f911
MD5 8c66cd8315046ff96bb01a8bca721909
SHA1 da8a25b95b8315e1428d8c1011b6ef4837152b3f
SHA512 c11b03a024cfebfdbc0d094107555a9f05bafeab1545bbcdf8f533f047165275eb130115076a81b4caccaad65a1e4f3444f30460c5eb843508ae23e4af1e6f23
TLSH
T12F411A58AAFA1148B3B37F5A9BF6A4AD48BBBC762E16D05D10110E4E0663B40D871B33
MD5 SHA1 SHA512 TLSH

Submit Download