Overview

overview

10

Static

static

3

3372c1edab...70.exe

windows7-x64

9

3372c1edab...70.exe

windows10-ltsc 2021-x64

9

3372c1edab...70.exe

windows11-21h2-x64

9

51B4EF5DC9...67.exe

windows7-x64

10

51B4EF5DC9...67.exe

windows10-ltsc 2021-x64

3

51B4EF5DC9...67.exe

windows11-21h2-x64

3

E906FA3D51...56.exe

windows7-x64

10

E906FA3D51...56.exe

windows10-ltsc 2021-x64

4

E906FA3D51...56.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    82s
  • max time network
    88s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    14/11/2024, 05:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe
  • Size 284KB
  • Sample241114-gd6afsymem
  • SHA256 3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
defense_evasiondiscoverypersistenceransomwarespywarestealer

Malware Config

Signatures

  • Renames multiple (6004) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Drops file in Drivers directory 1 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion
  • Drops file in System32 directory 64 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 39 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 26 IoCs
  • Modifies Control Panel 2 IoCs
    evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of WriteProcessMemory 58 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe
    "C:\Users\Admin\AppData\Local\Temp\3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Users\Admin\AppData\Roaming\hugufdp.exe
      C:\Users\Admin\AppData\Roaming\hugufdp.exe
      2⤵
      • Drops file in Drivers directory
      • Executes dropped EXE
      • Adds Run key to start application
      • Drops file in System32 directory
      • Sets desktop wallpaper using registry
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Modifies Control Panel
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4320
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3156
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:3744
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2744
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:5116
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1784
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:2672
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2340
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:320
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1664
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:3648
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2216
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:2800
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3528
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x124,0x134,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:2500
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:4704
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:1364
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5044
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:2120
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1668
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:2076
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3792
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x134,0x138,0x13c,0x110,0x140,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:3324
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2116
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x134,0x138,0x13c,0x110,0x140,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:636
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Roaming\log.html
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2900
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x134,0x138,0x13c,0x110,0x140,0x7ffc499546f8,0x7ffc49954708,0x7ffc49954718
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          PID:3128
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c del C:\Users\Admin\AppData\Local\Temp\3372C1~1.EXE >> NUL
      2⤵
        PID:3288

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 418B
          • SHA256 16058766934ada97fcc4e47abe0c59eaadadab9f8f0d51a7f05e2f5613842ac9
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 552B
          • SHA256 7b7360d2554f2a0bb13f2ea253591b1170c4719befabf5fe47fe439af728c3dc
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 686B
          • SHA256 83f53ef5eb3d588597e3f222ebcaaab91f751782b9da5c0935befc076e6c16ad
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 820B
          • SHA256 a9e6de278e351f872a5291953544774a47e8ccc79bd1bef636585661c3fe053d
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 954B
          • SHA256 1b9fc8ce610ca19581b5538f2266c30d8b01b1d0c5a7ca02ab82c3b4921b9365
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 1KB
          • SHA256 104b3a91ced55bb2055822aafab043432c281c93f1ba10ef5e8545e833422570
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 1KB
          • SHA256 5bebd90447baf407de5be817059a4cb67725739110b1d91aa958b23d648fc1e0
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 1KB
          • SHA256 2ee652b89a202ecc112b47fc37b6fec63c02d572c520dc9ee1f1ebc5a6ffd5de
          • MD5 SHA1 SHA512
          Submit Download

          metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
          • Size 284B
          • SHA256 363df0025c4ee6d18089f5aa3d13c0532f0dd7c3b2969a41d4c14ff81983a286
          • MD5 SHA1 SHA512
          Submit Download

          035da337-7174-47bf-8467-fadb30004996.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\035da337-7174-47bf-8467-fadb30004996.dmp
          • Size 3.8MB
          • SHA256 3c5937ae88121d1c01412aca6072b7939b4d273b1d4d76661faa002cedc36717
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          0ae8dd79-0409-4de2-9886-4e05e59c0263.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\0ae8dd79-0409-4de2-9886-4e05e59c0263.dmp
          • Size 3.8MB
          • SHA256 ba829193975d6c1e56c3daae098fff24fd926c495b07d05a10cce24e53f05d60
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          2fdd3fe7-c2d8-434d-b3f9-872405af98bc.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\2fdd3fe7-c2d8-434d-b3f9-872405af98bc.dmp
          • Size 3.8MB
          • SHA256 c788ba7eec0136857526119a685d7cfd73a23f208048d0223d426790c4c1fa8e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          438983ec-99da-4de4-8e96-b7248b61bb0b.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\438983ec-99da-4de4-8e96-b7248b61bb0b.dmp
          • Size 3.8MB
          • SHA256 d7ea57a40704d13d4cf0e6103b534a9e7c87f09e76a96320a116149452a1fb86
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          484d5056-bf18-40b6-bdf6-da04e6142756.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\484d5056-bf18-40b6-bdf6-da04e6142756.dmp
          • Size 3.8MB
          • SHA256 dd14d7d2ade72e291fb3229b21a96b2eafadc091b5d61e647d7a1dd8dfecdc51
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          5e60c884-6d94-44ea-b170-ce57f64e0f5e.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\5e60c884-6d94-44ea-b170-ce57f64e0f5e.dmp
          • Size 3.8MB
          • SHA256 8c2046a2c2f3982ef87b30295ac55e63c94371e788edd7db5065b7d60b65b9ac
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          6a063607-17f7-4d99-917e-1336841dce5d.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\6a063607-17f7-4d99-917e-1336841dce5d.dmp
          • Size 3.8MB
          • SHA256 74aed285e2aa039c66659443ea337b7b36d67e429c11a6594a2ed2fa31ad77b0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          7d295bb3-d17a-489c-9c02-f69a018a6ce3.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\7d295bb3-d17a-489c-9c02-f69a018a6ce3.dmp
          • Size 3.8MB
          • SHA256 d516332f6d20dfa70bdcea0b7090cd9afd31d8f486019282d6939a7727d70687
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          7e3914da-e0ef-4320-9bb4-8e68e9602b49.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\7e3914da-e0ef-4320-9bb4-8e68e9602b49.dmp
          • Size 3.7MB
          • SHA256 a1c9665ad1e512988f260f9fc20fbbf6f5a71e039d79f6e5399c26e044ab4381
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          9f321210-0b78-4f7b-ae89-bdf8a11cad6a.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\9f321210-0b78-4f7b-ae89-bdf8a11cad6a.dmp
          • Size 3.8MB
          • SHA256 70364a7b30fb152bbd3130d9d40d7389609bb887952d466c2b86bc0b78abd9c9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          e1b193b8-c9fd-4277-9203-d9a34c05bfb3.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\e1b193b8-c9fd-4277-9203-d9a34c05bfb3.dmp
          • Size 3.8MB
          • SHA256 c1381baed7604478e3e86f9311177ea85fdcb7eba7bba421be53c2fc19560796
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          f687667e-f740-4ad9-a27e-e80722d8b234.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\f687667e-f740-4ad9-a27e-e80722d8b234.dmp
          • Size 3.8MB
          • SHA256 a13f33eb361f78df57f31e00b7912436b3b82da67ca3046617c716aa1a144867
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          f9d41a58-fff9-494f-8b09-6f5f70b05f61.dmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\f9d41a58-fff9-494f-8b09-6f5f70b05f61.dmp
          • Size 3.8MB
          • SHA256 873756031dcd3f7b5e04e23a5ecd9f692e30972a1f6ce25511d4e62c47620530
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 f9bb71dd089d3a1cbf9d788aab2e74f9adde8f537060d8d0275df4fd0be704df
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 ecc519f4034aa54ca05009fbadf4a341e2f764b68d7adfd2a6e46cb42ace355e
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 eb3197ef76bb138392e4c54ab5a6e7ba388384321f9d9a610dc6d5b172cce23e
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 5e823a6db56be01defb09a266958daad4142ce271a6bca7b731cb1a35f5a4c32
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 7c28e43f83376f9f3354d8c52f23c58213e3b7db501a033e3f4da0caa29cb2e6
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 b06ecef6acd7d05a1fc5b4aacc6b8f3ca54e822c74fb3f5deb81bbd399230890
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 e33ea0ac9728e9ce874a6fbe6ae7dad4d5a7bfdda3e5d3723f21220f6e3caa15
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 6f064e90c549d71aacb5af1d949ef5f11d8b21bce5fa3d698910a0a1d5998079
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 cdb48d4205f2cf822d571bd98cbb1fb5dd2039d3ef096291084ee3149f476af2
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 03b3a427481866f403ce992275d3e46ad0da6c52bf40ed214f8bc27456722535
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 ac3cd6465b051ed18d4aa297b95001405fffeb4b88d8a166da8a9e9e11634f0f
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 83cb7d7b4f4a9b084202fef8723df5c5b78f2af1a60e5a4c25a8ed407b5bf53b
          • MD5 SHA1 SHA512
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
          • Size 152B
          • SHA256 cee7d013dc26d0a9ab6e280ddb8be0a7becc4facee6e4486fb02181fc517f70a
          • MD5 SHA1 SHA512
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 2KB
          • SHA256 ab369fcec161ecbaa36bbdd6c2ab821cbd1fa926f2e353d5fc7cd6b2f008e369
          • MD5 SHA1 SHA512
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 3KB
          • SHA256 c13677a79d5c5245fc391d92417dd365fc0d8fac431e149a242d4765a06c068a
          • MD5 SHA1 SHA512
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 3KB
          • SHA256 af6c60736772c4095f80d9d458854c3427e20994cc7404ce0385181a86d9d338
          • MD5 SHA1 SHA512
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 4KB
          • SHA256 32c1fa61a99f8ca4957915691754602a1e7134502f13e9731ba586e1e94300cd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 4KB
          • SHA256 84f579f40f1a5b443236145d7dffba62a94645f36b2096a31726a5b4f7338e96
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 5KB
          • SHA256 ad690033c62605107c5ef5e7d7a20e73684c6d537bd70b0b9dbb0e32b20db103
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 7KB
          • SHA256 e3de23df00db9364a53c3b1fde2cd40de7020a809b923d3e726d4dad105fbe0a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          watson_metadata
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
          • Size 1KB
          • SHA256 293f0e556deaf954b075a953bef41a94edc05e06dfde582d48386761d7ce479d
          • MD5 SHA1 SHA512
          Submit Download

          edge_shutdown_crash.txt
          • Path C:\Users\Admin\AppData\Local\Temp\edge_shutdown_crash.txt
          • Size 2B
          • SHA256 e79e418e48623569d75e2a7b09ae88ed9b77b126a445b9ff9dc6989a08efa079
          • MD5 SHA1 SHA512
          Submit Download

          hugufdp.exe
          • Path C:\Users\Admin\AppData\Roaming\hugufdp.exe
          • Size 284KB
          • SHA256 3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          log.html
          • Path C:\Users\Admin\AppData\Roaming\log.html
          • Size 1.2MB
          • SHA256 451c181202291292a224adc66adfa5dd9e298ae1e022826f8739acc6c3403a7a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download