c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Analysis

max time kernel
148s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
siprt_multiuser_V02.html
Size 796B
Sample261104-w2vaesct81
SHA256 c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400
MD5 265e51037981a14ed99a5fc8c5ec1b51
SHA1 d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
SHA512 b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151
TLSH
T11101F12AC182A80FE0231070FA91E37451594212629B4F647B9FF676F6CE1AB56B22CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3356	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{D9FB7760-11A5-4817-A9DA-3123CD3B46FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3728	msedge.exe
3728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 552 wrote to memory of 1440	552	msedge.exe	85
PID 552 wrote to memory of 3356	552	msedge.exe	86
PID 552 wrote to memory of 2936	552	msedge.exe	87
PID 552 wrote to memory of 2936	552	msedge.exe	87
PID 552 wrote to memory of 2936	552	msedge.exe	87
PID 552 wrote to memory of 3368	552	msedge.exe	88
PID 552 wrote to memory of 3368	552	msedge.exe	88
PID 552 wrote to memory of 3788	552	msedge.exe	90
PID 552 wrote to memory of 2672	552	msedge.exe	91
PID 552 wrote to memory of 3788	552	msedge.exe	90
PID 552 wrote to memory of 3788	552	msedge.exe	90
PID 552 wrote to memory of 2672	552	msedge.exe	91
PID 552 wrote to memory of 2672	552	msedge.exe	91
PID 552 wrote to memory of 3224	552	msedge.exe	92
PID 552 wrote to memory of 3224	552	msedge.exe	92
PID 552 wrote to memory of 3224	552	msedge.exe	92
PID 552 wrote to memory of 1740	552	msedge.exe	93
PID 552 wrote to memory of 1740	552	msedge.exe	93
PID 552 wrote to memory of 1740	552	msedge.exe	93
PID 552 wrote to memory of 3548	552	msedge.exe	97
PID 552 wrote to memory of 3908	552	msedge.exe	98
PID 552 wrote to memory of 3548	552	msedge.exe	97
PID 552 wrote to memory of 3908	552	msedge.exe	98
PID 552 wrote to memory of 1948	552	msedge.exe	100
PID 552 wrote to memory of 2796	552	msedge.exe	109
PID 552 wrote to memory of 1112	552	msedge.exe	110
PID 552 wrote to memory of 2132	552	msedge.exe	111
PID 552 wrote to memory of 4800	552	msedge.exe	113
PID 552 wrote to memory of 4800	552	msedge.exe	113
PID 552 wrote to memory of 4160	552	msedge.exe	114
PID 552 wrote to memory of 4160	552	msedge.exe	114
PID 552 wrote to memory of 3728	552	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\siprt_multiuser_V02.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe814fc188,0x7ffe814fc194,0x7ffe814fc1a0
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,18351866679649647139,9194695097350031320,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,18371531237962305826,13431351777721901023,262144 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,5058854698140808146,7148213114246869391,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,12804247882027030996,1174293792135570424,2097152 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,16407974828792556243,8388620214427901333,2097152 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,9556863207347021004,661312857302481330,2097152 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,1974327319446645466,13844921946510175775,2097152 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,8636103203063868330,1968216111343860697,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,18173202431953302339,9120698586185815199,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10883344888211752722,768064003580048303,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10883344888211752722,768064003580048303,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,17380236050739472842,8549733637599018380,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,8190486708623149505,864013191465220408,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,1185585877862420343,9357007894988174213,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,513152120538986307,844894372996553416,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,2930763272071918322,4360589703495717288,524288 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,494220405769569843,118426847002885001,262144 --field-trial-handle=2276,i,6462125384756406481,17297117100364461688,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

04cb412d-271b-40df-872c-9960130f7a6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04cb412d-271b-40df-872c-9960130f7a6f.tmp
Size 21KB
SHA256 156be8123b0290104b6c0bcd080e07d86b343f4aaa1e65fb73c73edc5597fb46
MD5 70e5e3fe430609898dbbbd51abb6a4a1
SHA1 92fddec65cf8f9d4c2ad5cc818d99aafb366d185
SHA512 f9e3343179125c5b396817f0107c111b60539019a3080a77480c642a1156621549b2d590bf6c9da964ee776f340a41a06a4bdb2ffdaf91b46c3dcaec9904b474
SSDEEP 384:tZiFzQkUSvvzsNi8TUNTUlIln8BZ7ddHX58E28qX8LH7vBEMbIIlN:twFdLfwgqBjpaF8LH75EMbL7
TLSH
T126A26C739898AE6F5EF29A45F1493103DFB49067CA99AB90D7DC9E2C00CB1DC2347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e69afbe-51ea-4cee-8214-60ade43d513b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e69afbe-51ea-4cee-8214-60ade43d513b.tmp
Size 8KB
SHA256 a1685018b475055cb946242f8a65afdc71c65814b7217d27ae37b6f20043ee76
MD5 77dfb62aa50572bc0736eb9e367c476c
SHA1 2f6234e02dfda500a28dad0a71ec96138f0994e0
SHA512 6354e8a9c0399bcbf32e6554ba671e61cb7f8135c8b8da101f25d7ae53393bd1e43ff4b00c7fd6262104183d3eeb6957d7349592da20d4aadab6ac544583eac8
SSDEEP 192:1ON06wlDgQmiUyJbW4X58gZqjzorCDlv3U6:1ON06kgyW4X58E28C/U6
TLSH
T13102E934B9687C6B9EF3AD09F48726139FE4202BE6552F44CAE81A1D00DB69C1347927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43256b7e-6bea-455f-9c45-68b888a463a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43256b7e-6bea-455f-9c45-68b888a463a6.tmp
Size 18KB
SHA256 2ec9f916a5bdac47347c3557d26d9c4ecec530f25dbe7413a9998d72167d18bd
MD5 84a70ead47821b85665128cda24e9ac9
SHA1 90b05f8c182366a6324e863040173908f2f741c8
SHA512 8a3f7759a7d2e964c9a5a2fe3d2ad83059f0319e8fab4dae3ea30cdf24d142b9523e20cdf20e98b65d4b856ea8105ad41333e7b4c216f809f77dda6c7c30c4d1
SSDEEP 384:vQkUSv0sNan8BZ7ddHX58E28qXjLH7vBEMbIIlN:x0qBjpaFjLH75EMbL7
TLSH
T13B826C76A8A9BE2B09F3A545F14A31039FB49027DBD81F90C6EC9F2D00CE29C2347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

40a591ac-33b5-498e-a3eb-d0df6ad09139.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40a591ac-33b5-498e-a3eb-d0df6ad09139.tmp
Size 9KB
SHA256 ac7421f37b8e76e53d8edd344c5c5e87c86b40f5e8a5659c571d0a49059b6636
MD5 3af70e2f466ac905be01cac5fae0459e
SHA1 ff2911a6d3fa02d6e1ccd793a434d7433f5b981e
SHA512 57f610d2c9d58449233fa1c8f025ec31382307bda30a9e58acacb4c1634d90fbf18ec5c979a046ba591f73f5dd10f64b76748e51861ec1148be675ad81206fb2
SSDEEP 192:sxZ9RbWP/fasl9IdpdCHW6+WNGYrvbL4IgrJ:sxZ9kP/fasl+EHbGX9
TLSH
T1FB2296526E68A97B8CC7E209FB55BF13D6F9543251941E48EAFC8A1C04E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61da5ad1-8b64-4fc7-84c0-914b6b5967ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61da5ad1-8b64-4fc7-84c0-914b6b5967ad.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6aabea43-e676-4eb5-9de4-30a7fa9b5606.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6aabea43-e676-4eb5-9de4-30a7fa9b5606.tmp
Size 9KB
SHA256 264465bf0528b155be1bc5475c51656346710c4432239dc3255aca46918eaeb7
MD5 e935bf23153baddc0f514035b794adc9
SHA1 277d81cb52fb8d83024c655ed869b790d33567a5
SHA512 3e22ca01e386e4b77dc6207eb56deec2a71d3efe600a469bd7c38abd2566f343b71c2c007c228aeb0d0a9dd733f4eb1cb9f49129942e16ca7a1400b89561902a
SSDEEP 192:sxZ9RbWP/fas59IdpdCHW6+WNGYrvbL4Ig5SJ:sxZ9kP/fas5+EHbGXU
TLSH
T1E822A6526E68A97B8CC7D209FB55BF13D6F9543251941E48AAFCCA1C04E7ADE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eaf43f5-3168-4430-85c4-279eeb7e2804.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7eaf43f5-3168-4430-85c4-279eeb7e2804.tmp
Size 27KB
SHA256 2d3e1c9c143998e33de3f528b4c8241c1304bfaba6e68482a9d2585fb90ec501
MD5 27d55c93b7bd76525968e54c70241c02
SHA1 98bfe6f872a32087827fb49650dc00b536a14797
SHA512 95c303f7eefaf53832b219c49a312b642adc808173831718d807aff1db77b630244d07ce2ef4982014c3b70487d49457461f880b7e4d684a36166915c56881ad
SSDEEP 768:6Ly4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb3roR4Z:6Ly4J/DWvbtBhu1jajiLm0bkqZ
TLSH
T124C2FA3B644CCA7E4FC00A9DED5E6F9B3E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1cf3308c9a4dd2a1bf618fa34ca1a94197734ed8cc909be34d19cb18d8d88b39
MD5 9cd69328a49c62417223daca53faf1c7
SHA1 bc6f47c0445efb2cda2d87912153c1ed932919cf
SHA512 07cc5b34c7726513df6f3c0b1cba1b4a49c25014c345c4b2f036fc86f7e2d454f9cce2b4d7af4312e908aa7a73df047d5cc462b223d8fc72b094a4410d77a61a
TLSH
T1A8E086D445C9C63FB748B45702E8A74CCAA0362B97C4AD8E2B14D4997E83544A2976A1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f509598953885618f83c066f7dd67eb2859e1c146919868d949dfb6035386fa7
MD5 37907f8ab37bc025e28302cea952348f
SHA1 ed4a67933f63e5ed0976f00de1a34b654f9de87b
SHA512 f753a7e006d1abc84e5f5355873b8a051b1efa96b6bfaa697cac13f83d75fb3f207d9dce680d188191b8ec8644fe3f2eb4188176e6869ea1726d9b287786dbc2
TLSH
T1E761D74CA5808956EFA85D3091FA238F3DF479FC858B5E1E82F2D879873635727144E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 09f52027e14ac098cc3dee97e9262eccc38845a98a032a89566058e869664d27
MD5 1e5c6ec823edcd0edd8d4ba01b1b32f5
SHA1 543f2c271b2cae9547937148031ec1caaff70836
SHA512 aa743c38ea53350af15959fb5018feb66e36218fad2fb6acd196fca695cbbc352154632288997a3f5a5940d9e36f8a5e1639301a1afaa0059c2639925552e5ff
TLSH
T1D861D74CA6808956EFA85D3091FA238F3DF4B9FC858B5E1E82F2D879873634727144E4
MD5 SHA1 SHA512 TLSH

Submit Download

27954ccf-f760-4b9b-ad2c-69ccc24ff296.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\27954ccf-f760-4b9b-ad2c-69ccc24ff296.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a4003529-7b3b-4c6c-864a-13f66ea71411.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4003529-7b3b-4c6c-864a-13f66ea71411.tmp
Size 949B
SHA256 dc583c307c800e151c333baa0dbd16843923fd1010909d2ce68427c71a1b60f3
MD5 11a7254ae0ff58cf3b49f8d97617395b
SHA1 a8b7d9aeb5c0e2fc07c315355dbe5a83ad5e187c
SHA512 20aff52d70cd913cf6da77ed234a86ef89e82c59440cccbb7fa23dd676fe9e8d3672e4935888afc2633c9f42ce6b3b4c4ee6fc945e58d5f6498d9f8c974a3b5c
TLSH
T111117DF3C7D595AEC90116F05A24AE2BCE1D0906821C7C19C5D4EF27D3E3475E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

b6c02abe-3c84-47b6-b2a2-99825bf0283b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b6c02abe-3c84-47b6-b2a2-99825bf0283b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c5c0098d-1876-4bcc-8c27-3c3e765da4a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c5c0098d-1876-4bcc-8c27-3c3e765da4a8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 858af31d5b49654c167007cad586cffae50e04bd9eff3bcc0400d3ad49a946d3
MD5 98bed885f4841b66fa5c968a74616b11
SHA1 3bc5220d6b945ca7f985058961f6aa20cb257b61
SHA512 b50d181bbb9a3894edf7c757b8313dcd041b2c7646ae47460e4594b550a87b79e3d6175938de82f845403c2ae0c8b5aaf9b8c01d686a3ad14ea362cedb233e9a
SSDEEP 48:KIDI1Ks04jyLwNwswhw9wPw7w/wgbwTwmwzISw1wgK9w11wXwgxwlwwYw2w3wtwq:KIDCKs0+mZqKakS29yKGML
TLSH
T1D791565135BF020538BE358882B4C71E0E4232B77259E66BBFBC44665E6BE042DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf61f6e5-b0ca-4951-a017-0e791be6aa5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf61f6e5-b0ca-4951-a017-0e791be6aa5f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c75105ff-1a51-491a-93b9-c7c16a1f5e8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c75105ff-1a51-491a-93b9-c7c16a1f5e8e.tmp
Size 10KB
SHA256 dbd72da4c2b46e0fdc2aba31cfe67c038463c7a6189367fc6423b2b2f94d7f50
MD5 655305ff3234568314b6d55290f8528a
SHA1 f651e7b83ed9bee097bbab1d334a59602bec989e
SHA512 14bb2569401ab67e20b2ad0e9a4379d27369925b459030a1aca0d6759c72da146294a98f416e1685dc7cf437c71a8e9a1f77bc1336beebe999b21380da3bdf41
SSDEEP 192:sxZ9RbWP/fasZ9IdpdCHW6+WNGYrSpL4Ig54J:sxZ9kP/fasZ+EHbGk+
TLSH
T17122B7526E68A97B8CC7E209FB557F03E6F9543251941E48AAFCCA1C05E7ACE234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2240f9d-e21b-48f3-bc99-0517373cf476.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f2240f9d-e21b-48f3-bc99-0517373cf476.tmp
Size 10KB
SHA256 914f98ce366f5e4d9d8893d28193d38bbfbae4365ccc175792f9224b331689ba
MD5 df1021e00e0437541b3dc324f831872e
SHA1 557cc7ab1cd8a225ea21f5293ff82edc80fd1cd3
SHA512 edde3ac39c5643329006e2df57b88e99bbdc90f278b75bc68499945ee892a10b5d418d1b5d11762ae589ddddc5f3ab16c9292db5239f5bc96ba5b41811aa307a
SSDEEP 192:sxZ9RbWP/fasZ9IdpHCHW6+WNGYrJ+L4Ig54J:sxZ9kP/fasZ+iHbG2+
TLSH
T1AC22C7526E68697B8CC7E20DFA557F03E6F9543251941E44AAFCCA1C05E7ACE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4cdfb09-2b55-4f2a-930a-e436e806ae75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c4cdfb09-2b55-4f2a-930a-e436e806ae75.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1373caa2-080a-4564-bb00-740d5bc23f73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1373caa2-080a-4564-bb00-740d5bc23f73.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f2e5e839-18ac-44f3-8ea9-47e44e9d6f53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2e5e839-18ac-44f3-8ea9-47e44e9d6f53.tmp
Size 8KB
SHA256 a0d551cf0c5aa1e8c3cf6e50b051d9db37e1c741efaae8d2fcaeb8204ec637a8
MD5 f5214d6e88df6d6ec3658c081ef18d5c
SHA1 d2c98e08718c2c6b27298e65e29e9518789ca41c
SHA512 0358384a2183b2232edd4e68428bf2fbbcda53854b507cf92edd9d76f1ed28f1fbd8ddb6fcddcc95d34a8fde6868a0c6850822439959603d0a1f1d9de0ab302f
SSDEEP 192:kONT6wlDaQmiUyXb/4X58gZqjzorqXsveiqrU6:kONT6kWO/4X58E28qXHLU6
TLSH
T1D3120835B8A8BD6B5DE2A484F08731039FA95127EB896F50C6EC5E2C00DF66C534B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbcb9bbc-0e68-492e-9a10-326521d60548.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fbcb9bbc-0e68-492e-9a10-326521d60548.tmp
Size 18KB
SHA256 8036859ee597c874ba8ef0c6423f3a20dbe735c90e92ab099ed8e96bb5fffa15
MD5 b5085ca6a692afba2af5d312d0e39f94
SHA1 e90778f0869fae8adca430cb3d5ebdd86518c39e
SHA512 fdf7b087cf2a351b763a27bcd4165e16e90ba27c4e41e859d3f452055975db9618276c63314928ebbd9fa0cd25c3da4987c518c9d111c4fe8f719ee614bab797
SSDEEP 384:7QkUSv0sNa08BZ7ddHX58E28qXjLH7vBEMbIIlN:10tBjpaFjLH75EMbL7
TLSH
T13E826D36A8A9BE2B09F2A545F14A31039FB49427DBD81F90C6EC9F2C00CE29C2347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3dab8cf4e71a89cab554f089d46bf3c5e6192a080082c6d3f2adb22a5191f7d4
MD5 e4283d15c3dcccaed66ec01f91eea139
SHA1 d9e3dfc8c0817ad818236eeaac84507b0434dde1
SHA512 1073f467ace61155bb6761c82e216358cd957281043397731e440c39fb15e6a361d96118eb7048ecd5ecec80798da53e58c2e74b8b4ba6b88dd0fc32f1ef8fae
TLSH
T1BC412A58A6E91108B3B76F5AABF2A8AD447FBC372E46D45D10010D4F0A72B40CD71737
MD5 SHA1 SHA512 TLSH

Submit Download