5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-sedquz.htm
Size 194B
Sample261002-e3txlsxxex
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1036	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{C61F3A9E-7101-4DFF-8D02-8AADB7E5810D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5092	msedge.exe
5092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe
1816	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1816 wrote to memory of 4376	1816	msedge.exe	87
PID 1816 wrote to memory of 1036	1816	msedge.exe	88
PID 1816 wrote to memory of 1876	1816	msedge.exe	89
PID 1816 wrote to memory of 1876	1816	msedge.exe	89
PID 1816 wrote to memory of 1876	1816	msedge.exe	89
PID 1816 wrote to memory of 1736	1816	msedge.exe	90
PID 1816 wrote to memory of 1736	1816	msedge.exe	90
PID 1816 wrote to memory of 2508	1816	msedge.exe	91
PID 1816 wrote to memory of 2508	1816	msedge.exe	91
PID 1816 wrote to memory of 4328	1816	msedge.exe	92
PID 1816 wrote to memory of 2508	1816	msedge.exe	91
PID 1816 wrote to memory of 4328	1816	msedge.exe	92
PID 1816 wrote to memory of 4328	1816	msedge.exe	92
PID 1816 wrote to memory of 1428	1816	msedge.exe	94
PID 1816 wrote to memory of 1428	1816	msedge.exe	94
PID 1816 wrote to memory of 1428	1816	msedge.exe	94
PID 1816 wrote to memory of 3392	1816	msedge.exe	95
PID 1816 wrote to memory of 3392	1816	msedge.exe	95
PID 1816 wrote to memory of 3392	1816	msedge.exe	95
PID 1816 wrote to memory of 4892	1816	msedge.exe	101
PID 1816 wrote to memory of 4892	1816	msedge.exe	101
PID 1816 wrote to memory of 2136	1816	msedge.exe	102
PID 1816 wrote to memory of 2136	1816	msedge.exe	102
PID 1816 wrote to memory of 3184	1816	msedge.exe	104
PID 1816 wrote to memory of 3880	1816	msedge.exe	113
PID 1816 wrote to memory of 1852	1816	msedge.exe	114
PID 1816 wrote to memory of 2432	1816	msedge.exe	115
PID 1816 wrote to memory of 4700	1816	msedge.exe	117
PID 1816 wrote to memory of 4700	1816	msedge.exe	117
PID 1816 wrote to memory of 1276	1816	msedge.exe	125
PID 1816 wrote to memory of 1276	1816	msedge.exe	125
PID 1816 wrote to memory of 4512	1816	msedge.exe	128
PID 1816 wrote to memory of 4512	1816	msedge.exe	128
PID 1816 wrote to memory of 5092	1816	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-sedquz.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffb8ef9c188,0x7ffb8ef9c194,0x7ffb8ef9c1a0
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,168896001173880436,8712268692769699183,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,14967844890764076472,16491668574984186769,262144 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,1968730760325151044,12456055352048184605,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,18051205190344317882,15170619894308662374,2097152 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,15397799311258373858,14226597920670825979,2097152 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,15805759384942433936,4470317319793475382,2097152 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,819512827774902724,2963571312363673821,2097152 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,1818068795640525018,14790122049374231806,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,8538438074987102985,8556927269298889819,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14373222336601902640,5638734202027230959,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14373222336601902640,5638734202027230959,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,610718271058181789,4870550065183317096,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,3269332868281038186,17267099778918523677,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,9166087568093424693,13894965240174697951,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,50351812344543884,5180930363491385392,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,11839034410426442586,4455314882451590786,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,8200836169510943438,2534285257602557278,524288 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5140,i,7651504920011749963,6583964785003248936,262144 --field-trial-handle=2348,i,9382449670028596800,17545773826050152099,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

139aff13-a1c9-46f2-ab5b-2c0db8040837.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\139aff13-a1c9-46f2-ab5b-2c0db8040837.tmp
Size 8KB
SHA256 110ac80731d85fa770fb62717d7d3d1efee2427062e62a050b732fcdf4e0d960
MD5 4595d7a8e5585cc2dac3296c93399596
SHA1 c0bbffff8a09f925af3040a09e447be0e25d9031
SHA512 7b01a171059a9d4e8a07bc1c22deffc04a1061b8f1872966107e5cc837d7a3dbeab9674c3241cd39cafa355b96ff03d3caef9eebbd5dee3552c6c4d4a6b96ef3
SSDEEP 192:EONg6nnHGQmiUyBaQYcX5hQDP1Djzor63I3cMc4F+8U6:EONg6nCzQNX5+DtT863IYEU6
TLSH
T1D102EA35BCA87CAB8AF7AD45B08633139FA5217BE5946BC0DAEC5E1C00D765C2346D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1bfdcb01-a4fe-4a57-9549-52764a8e341d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1bfdcb01-a4fe-4a57-9549-52764a8e341d.tmp
Size 8KB
SHA256 65936ed6b65912218badce8cce54aba02133502998c6707a9441fef700a32eec
MD5 34dd41a8035acd8ba79ea325d39a2c22
SHA1 648ae2b35799eaf08c504d88774ac6df741b46da
SHA512 564b182c06627bfb34184cc07fef52d41d299c5b0219b27f3b416c9ad6b9fe01d1f4397c3419bcc3d5671ea1cda503c648637f2da7191eb02222c681584e3939
SSDEEP 192:EONU6nnHtQmiUyaa4YcX5hQDP1Djzor63I3wXkeig3rq5hU6:EONU6nLy4NX5+DtT863IAXV4hU6
TLSH
T16B121D35F8A8BC6B5ED37895B08731139FA51167D6887BC0D6EC2E2C01DE66C534AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

51b61b02-ee60-4ccb-817b-f23bef410eb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51b61b02-ee60-4ccb-817b-f23bef410eb5.tmp
Size 10KB
SHA256 c90d3710ab0558a610f02919ccd862af9508d256176fb7dfcbadfd83e4e3a18a
MD5 31a82a1bc39b7dff579762c0e1ce38de
SHA1 3911a36a2ba88389fcb1cafcdf2cc1a7c5cb8500
SHA512 e70bd492a7e240b4a33d09b51a29951eef6cc12d7df282655bea01b3470d5be97bed9da63e71bfcb1a426bf03cec8df0158fe472e67b98b3e63f4b6caf5ae197
SSDEEP 192:sxZZRcPW5/fZs1tIdpHWHW6+WNGYYBFFI6IIg54J:sxZZie5/fZs1O2HbGfAq
TLSH
T10E22C9526E28697B8CCBE20DBB55BF53E6F9503255901E88E6FCCA1C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bcd6b60-9cd3-4f64-905a-e802f5cdb814.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5bcd6b60-9cd3-4f64-905a-e802f5cdb814.tmp
Size 27KB
SHA256 0f24bdbccf3aaecf5b925ad0a5897ea1bdb11acd9f25176d2c31b08bad1e9195
MD5 af4844e90ad16eb6bb9fac40ca5ec901
SHA1 cc25bb4c4da7366a64ef83ca39536a31f361e476
SHA512 1019e621f8d11408954f4e590e61cb9789d9ab2f7850ebb7cfaec9558fb55f5b3814984ba0b116a05b26a4893e274f71afebb3a76e0417719ddcc8f8c2206412
SSDEEP 768:sVyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXFrop1eK:sVyYR7jWv3NpBu1ja/CL8OX+d
TLSH
T1F4C2E92B640DCB7E4FC01E9DDC5A6F9B7E9802C796548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86d298e6-713d-4a17-bc86-ae5105b8628c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86d298e6-713d-4a17-bc86-ae5105b8628c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 f3f8a3fd30b85eeefde3927baccd2cb438adedf1fc803d06f03d87802c148b5b
MD5 43e0da96d2114efd9b6ac8ae8e18bd31
SHA1 c2ed587927e2bcaf2dfad6f409b22260e92f35bd
SHA512 5ab42a4715d85678d708c86c60f5c0f4808e4644444061a5e84773f3df5f3d2c89cfa7d072bc44d4dafdd140f636094e0cb7da46ee3a140b9610c3f823ed3113
TLSH
T1AAE020F819C5C31F7604744702BC430C9392369B92C479CD1740CA4C7C4955162C3D60
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 538d28f3a8c589049d2af25500e0a70b21fa2c34cdfdf7aff98cd7f6c18567b6
MD5 3f6b948842580b81fa411fa71e766aab
SHA1 d15681d65b73b89958c918eab74e342b3744cb64
SHA512 768ffe043a915c6de423a8ad7753397864c387f6bef32bd051f0bb1bb1ec25f42e1044bfcdae167fc5a98b0314b1d19c3724d45287ab22f7aea8a15073f3edd5
TLSH
T1CAE026F509CBC22FA618684702A8534CD7C1362BA2C9798E2B05CE897486095E2D3AB8
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 813e0a28f042b96864b804466edd37d3c08b1a3783382ef3620eb314e3776a60
MD5 d62c7fdc2b4375d13ee4c658a9c522f2
SHA1 10ec82c2dc9eb6a5d6ff34094b35223d4208ce52
SHA512 0f0d13829bb1a4bc418e19787a8a74faf7e5e6003de57933369ec66f2e681e6578adc2c4ef5851dd4ae52cb2c837780f3f764d852e614d104c86e11636acefce
TLSH
T1256193D2C4E069EDFBFC43BDA5D53B83B73895C2768B5D2301A4D4BA44063D9E242074
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0fc9ba79e46fd500d845013b5ce3cfe87bb62fc020534e50b9d56e455727d076
MD5 4b23b62c9a6b221b06e4db03e71a2414
SHA1 a1cb717ceb9cdf84388f3c9909190b5f20cb130d
SHA512 fea8f33ccc0566e981044de529d1023d2575ecbbd1524664c30ce96c3f2e5243f9a4504a1e8c283bb1d106e247af1ae4a7cab6377ebe0345e8c0d8d0ab023eb7
TLSH
T13C6194D2C4E069EDFBFC43B965D53B87B738D5C2768B5D2300A4D4BA48063D9E642074
MD5 SHA1 SHA512 TLSH

Submit Download

d93c552e-e8b3-47e9-b5fa-50bbc04326fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d93c552e-e8b3-47e9-b5fa-50bbc04326fc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1a2cd6ce-5eb3-4001-9cfd-0543a0d940d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a2cd6ce-5eb3-4001-9cfd-0543a0d940d6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

42799edc-d959-47c0-9172-438748247886.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\42799edc-d959-47c0-9172-438748247886.tmp
Size 949B
SHA256 d378cdcbabcc4a73ffe0e2dfd83eac0794254c22d7a55d43ae46320a7972a9c3
MD5 f6d6ce580385188efdcd34f63664a696
SHA1 cd28947973426a55c09cc6382a4339d06429b6be
SHA512 07fba58e10b6c6fede3aa9d21abc65a2ec57d104d543f39cae5b8daac19ffb27f301481ba9e6ae83f93718311f8262b6fcf075dd37c81efb000d39eab454d817
TLSH
T1C7117DF3C3D585AE890556F05A24EE2BCE2D0A05421C7C19C5D4EF6793E3076E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

f176a121-092a-499e-ae25-e39d1a810905.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f176a121-092a-499e-ae25-e39d1a810905.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dd87c4dc26a3cd319f7cac519f37a5d9823655c54cea1881efdf32c0f5865450
MD5 1c1de2c089a1a1f3a760d0290b8015ec
SHA1 63bd378581b1a272f08c2901b294574e895da1de
SHA512 25f8d61fcd156270ea5fc331f67391d764e8f3a0ae858a31d42214e18e2c166dfcd4de2f9336c31286b451df4241d9cefc633c30ea0f272b0cf518c98cb835e7
SSDEEP 96:KwhQwKpq+nvKFxvV1xQRAsyJxKa4yPx+Hf4Jsl+KeU9:ITnvKFxvV1+RAFJL4yPoHf4Jre
TLSH
T15A91775232B71260387D6A4C42B4C62B428235B33114EA7B7FBC62795E6EE055CFE8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a30a22e6-9799-48f5-aee3-3e157ed03f12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a30a22e6-9799-48f5-aee3-3e157ed03f12.tmp
Size 9KB
SHA256 c04ad0e0276849d5ea01317f2cd7f05d3fbd609140d559687be8d05c904e1b8b
MD5 745b100fcad7e8afd708d64b5734939e
SHA1 e35b10468cdb9065ac347ec3d64ac61cf5beb7cf
SHA512 d27da81401006ddc97a630188525d2198f8a34a280eda3f619ab482859181a3513f87581fef308d2c9283578ba061419ee47d90fb7d6159e2b3ac95f9831e5bb
SSDEEP 192:sxZZRcPW5/fZsYtIdpdWHW6+WNGYYBaFI6IIg5SJ:sxZZie5/fZsYO4HbGfRQ
TLSH
T12D22A8126E38A57B8CCBE20DBB55BF53D6F9503255D01E98EAFC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2f5b3d5-bd68-491c-96b9-3c2ebbf5bc71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2f5b3d5-bd68-491c-96b9-3c2ebbf5bc71.tmp
Size 9KB
SHA256 0b4f5ba065892c6241cdbb337c40c498fc01eedd042be608a0f1301149566bff
MD5 ac300390b46e0a141106cb4f60a93a6e
SHA1 c289e14c4cbf720c73ba33dac8933ccbf2f64df7
SHA512 aa0945818ed794d8af78f25c4f6f00de95a21ccfc4d304526b955baf0a0861c5fa8a6ed440ebd7beab67ea0ec65c39ac57498ac12ddbff9595d31535f3860032
SSDEEP 192:sxZZRcPW5/fZsbtIdpdWHW6+WNGYYBaFI6IIgrJ:sxZZie5/fZsbO4HbGfR9
TLSH
T12112A8126E28A57B8CCBE20DBB55BF53D6F9503255D01E98EAFCC61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d672cc3d-4495-48e3-b022-38e8c8ff6a11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d672cc3d-4495-48e3-b022-38e8c8ff6a11.tmp
Size 10KB
SHA256 c7cf132b82eec1f80ce2557300cb21fbd0226fcd446f04cdc5d563bfbf0698ec
MD5 0fce18e501d897cd3cd591097303c9ef
SHA1 1a0aa1433efe34cb6aa0e7d656bf4f3f8bcc441c
SHA512 5443f4476f62e3524a7bccead0640b4d54882c23b76c7e851d53f4bcc4beced61088b738ffb332e681ad78883289c8c9cc4a41232c6828fa952acc6e35c4691d
SSDEEP 192:sxZZRcPW5/fZs1tIdpdWHW6+WNGYYB0FI6IIg54J:sxZZie5/fZs1O4HbGfPq
TLSH
T10B22C9126E28697B8CCBE20DBB55BF53E6F9503255901E98E6FCCA1C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71f569dc-0b53-463d-a044-c6ff3a767f27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\71f569dc-0b53-463d-a044-c6ff3a767f27.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1f65c01-00cf-45d5-a90d-d6602aee3b83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a1f65c01-00cf-45d5-a90d-d6602aee3b83.tmp
Size 21KB
SHA256 38d28cc2431fb176243f66916224a4bed497e38d7b6c350eef73742483380c9c
MD5 6d5e0942bb86704129f979067634242d
SHA1 e908a3cdd37b81424e86f6e1434a35bea59c3075
SHA512 fe3bdbe505173db3c0aae7418d2588339390256461a6ca2fd859517a3a033024235d69032935bf0c05e500d52866aa996ae127cafccb611d54aaaf04c875818d
SSDEEP 384:PciFiZcIhzsND8TUNTUlIlAZniLp34QX5+DtT863IAXW4htgOIwZOymZoc:/FQRuwgEc3rkDLjW4hXs7H
TLSH
T16AA26D339CA89D7F6EFB9A85F58632038FB45067D5D5AB80E6DD9E2C019A1D8034BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1bcf2eb-ee24-40d3-a083-77339ef06471.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1bcf2eb-ee24-40d3-a083-77339ef06471.tmp
Size 18KB
SHA256 1880435fdf78436f476e9ab13219faeed2efc811f1d211c2ca77f0a8f4ac87ec
MD5 e9802ca1fae89951a99e2fac83b8ec7d
SHA1 f9c16a2316c04921bb4819c20291adb4dc9b0ac0
SHA512 9ce8ef6c5ecbb69356b0c8b68039b8e9706dbe48e681d70532dae94ae24d065117bdf916c86efc72dab2371a75a0f1f3459b97c41dd40d1b4b019c09d5d6470d
SSDEEP 384:HHZcIhsNxAZniLp34QX5+DtT863IAXA4htgOIwZOymZoc:Ph9c3rkDLjA4hXs7H
TLSH
T132827E329CB86D7B1DFBA045B18632139FB86067E6C46BC0D5ED6F2C01DD5A8135B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e74c1b10-2f3d-43bb-9460-96673265befb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e74c1b10-2f3d-43bb-9460-96673265befb.tmp
Size 18KB
SHA256 6ddcc01c0449365b746b39c63eefb85c48bff29d56d261accb8f9f02039e7ba5
MD5 47a73025a30b4da9b99b9775899b8515
SHA1 f4151807b0bc3833d04baefdde36702838aeec3e
SHA512 5c260f056bc9385d946ef860a156e3b2d34aae5a50c949435773bcc0e718dec909ffa3eb0edb83fa33bbc8e4b54b549509bb0e2870252aca7123ae9fc20094a2
SSDEEP 384:7HZcIhsNxVZniLp34QX5+DtT863IAXA4htgOIwZOymZoc:ThWc3rkDLjA4hXs7H
TLSH
T180827E329CB86D7B1DFBA045B08632139FB85067E6D46BC0D5ED6F2C01DD5A8135B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc41c781-7a62-4278-a467-eec14079351b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dc41c781-7a62-4278-a467-eec14079351b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3cc3c95ff534c81ce22608928ba5f04bfcddf621b654df70a1e6502331f47d16
MD5 59ff42a2e7bf4aac63b657a463530046
SHA1 d364d6cd7806a173398e679412c99d9dafcc6292
SHA512 0ea3eb0bb63c43459dae959c3f3719685b654dfee67d4ed06504cb9b05867f8bb9baa3fbdd675ae20200f188c7774b168ff7f85f998f480aeb454b52ad06b45b
TLSH
T1AB41195CB6FA1108B7B36F5A9BF6B86D487F79772A0AD49D00010E4F4B62700D861737
MD5 SHA1 SHA512 TLSH

Submit Download