hxxps://archievegenocide[.]com/

Analysis

max time kernel
149s
max time network
146s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://archievegenocide.com/
Sample261024-arnt1agy6n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2814447569-4053889695-374664695-1000\{28237746-5E33-40C2-A166-FE5EA4635E2B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
836	msedge.exe
836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 1680	1544	msedge.exe	84
PID 1544 wrote to memory of 2360	1544	msedge.exe	85
PID 1544 wrote to memory of 4676	1544	msedge.exe	86
PID 1544 wrote to memory of 4676	1544	msedge.exe	86
PID 1544 wrote to memory of 4676	1544	msedge.exe	86
PID 1544 wrote to memory of 2820	1544	msedge.exe	87
PID 1544 wrote to memory of 2820	1544	msedge.exe	87
PID 1544 wrote to memory of 2280	1544	msedge.exe	89
PID 1544 wrote to memory of 1796	1544	msedge.exe	90
PID 1544 wrote to memory of 2280	1544	msedge.exe	89
PID 1544 wrote to memory of 2280	1544	msedge.exe	89
PID 1544 wrote to memory of 1796	1544	msedge.exe	90
PID 1544 wrote to memory of 1796	1544	msedge.exe	90
PID 1544 wrote to memory of 796	1544	msedge.exe	91
PID 1544 wrote to memory of 4464	1544	msedge.exe	92
PID 1544 wrote to memory of 796	1544	msedge.exe	91
PID 1544 wrote to memory of 796	1544	msedge.exe	91
PID 1544 wrote to memory of 4464	1544	msedge.exe	92
PID 1544 wrote to memory of 4464	1544	msedge.exe	92
PID 1544 wrote to memory of 2908	1544	msedge.exe	98
PID 1544 wrote to memory of 2628	1544	msedge.exe	99
PID 1544 wrote to memory of 2908	1544	msedge.exe	98
PID 1544 wrote to memory of 2628	1544	msedge.exe	99
PID 1544 wrote to memory of 4268	1544	msedge.exe	101
PID 1544 wrote to memory of 2652	1544	msedge.exe	108
PID 1544 wrote to memory of 3104	1544	msedge.exe	109
PID 1544 wrote to memory of 4868	1544	msedge.exe	110
PID 1544 wrote to memory of 1572	1544	msedge.exe	111
PID 1544 wrote to memory of 1572	1544	msedge.exe	111
PID 1544 wrote to memory of 4212	1544	msedge.exe	112
PID 1544 wrote to memory of 4212	1544	msedge.exe	112
PID 1544 wrote to memory of 836	1544	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://archievegenocide.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7fffe3dac188,0x7fffe3dac194,0x7fffe3dac1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,10505128167865564739,13601314759380043498,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,15694245410478283269,7085783819005554497,262144 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,2546064559352622874,2724506982207812050,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,7422643448574064387,11627186620713138207,2097152 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3372,i,15561820481781081863,10806186061291382510,2097152 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,7473096290269626117,9206717836955243411,2097152 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,4012519015334845163,8395712489365133730,2097152 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=1668 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,9589164904067221544,4152926749782461839,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,10934238415623194166,11711904422411870688,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,18047825161703033020,3270507247063327888,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,18047825161703033020,3270507247063327888,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,9768932275160627808,5199678321643001966,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,7322646439921026575,14994778303792073184,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,12543373694278829821,17400600611374463684,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,809551273620036365,8379107592408494264,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,16471307026010400829,18361650827252210581,524288 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=804,i,17510302141798939868,708561273838505109,262144 --field-trial-handle=2212,i,16437859229981376087,2378755994986286304,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

040d121a-095e-444e-825a-5f81ec8b6558.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\040d121a-095e-444e-825a-5f81ec8b6558.tmp
Size 9KB
SHA256 6fdc868403cbe55971686a2fc269d93ef497df4a44077bdc48b44aeb96420a7e
MD5 c0dbe059c4450f2ead7a5e3b7ba7b56e
SHA1 cedfcd12ebc767e70be8373010af98b863f5286b
SHA512 fa8348a52af79e2c20bafb300890a40710d0768712cfb177a32faf6f8aab2b4ca432303ef2907204dd982cfe1c2cd480ffda22d22d7ed83cc0cc8f5671fdee9b
SSDEEP 192:+ONl6oJQmiUyCEivX4iOdim//iN8PMbq7NU/u:+ONl6GmivXlOl//oXQNU/u
TLSH
T150120A36A9A8FC275DD7A585F4CB31035EA89167DA896F80C6DC2F1D01DE6AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33e48ed2-3497-4fd9-a3c5-aaf4230c3d45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33e48ed2-3497-4fd9-a3c5-aaf4230c3d45.tmp
Size 15KB
SHA256 05f319d8b8b4989dcf32bdd81121e5783c3e8a80c1a751512db7f2e8ca083032
MD5 78904178b803eba0f0a5bbcd837cd784
SHA1 cc9b1c89d9c5e57aafa65a412e70d4fe0f25f4f2
SHA512 81a8417ea262c67ce5a74e47f09680db48ba8b25ce9dbb3e3493d54b88e98cd77e9de7adc7ff2a1f444e932534e2f772c8d666bebc4529a949bd8b23d623fac8
SSDEEP 192:uZ2ULHcP1cZLxRm88SvjiVvsNUkmQjK1+mnQmiU190p44X4iOdim//iN/0hbq7NC:YQkUSv0sNUkmEKEKU24XlOl//o4QNP6
TLSH
T190624C366CA9BC275DE7A641F58A35039FA49127D6C82F90C6DD6F1D02CE2AC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

671a0a08-31b8-4cf9-a8ee-3f947a4e2432.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\671a0a08-31b8-4cf9-a8ee-3f947a4e2432.tmp
Size 15KB
SHA256 64fb886a017803efe8c37a1e9ec932f5701b7e2fd4000905763a15172f934e7e
MD5 b63d81bc9992df9e421e2c4dd7800176
SHA1 49047c3da34af8dcd07f9bc7d08a586031513c1d
SHA512 948e7405d6b173033b0398db88141a5f8e137e184f5b97c6fb9023df7a85534271fd9277afb313dd00c76793cdc9b374429c43b446a64cbe3f9a3ada375f451f
SSDEEP 192:uz2ULHcP1cZLxRm88SvjiVvsNUkpQjK1+mnQmiU190p44X4iOdim//iN/0hbq7NC:6QkUSv0sNUkpEKEKU24XlOl//o4QNP6
TLSH
T1E9624C366CA9BC275DE7A641F58A36039FA49127D6C82F90C6DD6F1D02CE2AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93634f07-bbbf-4121-9d66-a26b423bb98f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\93634f07-bbbf-4121-9d66-a26b423bb98f.tmp
Size 18KB
SHA256 9026ec4a2e65815410afd43a78b46d38776cc74efb2b144268d88738acc5a458
MD5 e3794ea4f56c976e7519b628c1bee892
SHA1 74360bfe8360a1fafb8de232f0449b033b8340c3
SHA512 fa0887424ee8a95a10417bf0c04c78bd57889b0676ac73be0c7b962faace8571a09bd0e9562ae1b8589bc086486896c4a7c006e3724903f3c88f394c5cbb72f3
SSDEEP 384:ViFzQkUSvyzsNc8TUNTUlIlkmEKEKU24XlOl//oDSQNP6:cFda1wgr6/lOlnwSyP6
TLSH
T1248229335C98ED3B9EE7AB81F64A3203DFA44167C5D5AA90D7DC6E1D028A1EC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f6570ae-515a-465c-9886-e208d4ac9718.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\6f6570ae-515a-465c-9886-e208d4ac9718.tmp
Size 105KB
SHA256 a871097de08ac10fa186cf6374ed47c165532d2f45190d4a8a4920973b41eeca
MD5 8b1e50f3cab92971b2c83d5f4ebc1515
SHA1 dc7b9575587818187af365bfdab1445f1ceef6aa
SHA512 7dcbd713320e797358c4142ab7fe7cd08a8847ad447d0a5ccf2716297d7d9afff43a5332a49259ad7775f9b7a7ef3a0f23024a9cb2350bfebb1224fe83d27079
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ece119565cb5ea1654292803ba06971cbd385bd7bed4f8e00a3c159ecd391524
MD5 80c5e669176d41e636b49561ebc91645
SHA1 f1d4a06d81840ebfc7b69d0eaf7571112d1882c9
SHA512 6cb089daf527e445320420bde705656c35c54451e79061f31a3cb14f2657a8460a0b189300b89420c6f806f0e80e92df7c3cf3e9dafe535c2b3756bc635610c0
TLSH
T163D02B18C46A4550F023247501264BE13288A80826821002F0710275280170102DF890
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 824f8d077338df9c22cfff8221add35eb9c9eaeeb6c3d977c00b25a28d06607a
MD5 7be7c8970acc3d8ba944d7bc3c820229
SHA1 282baafddda5eb25fa4514aac0b00a2b106c7162
SHA512 026129433867da41532ea4d02467a0f16aa1ad5ffba5d699b8b980d3fd1902a017cf96dee8996acab370c37f3ee6282775659aed433b447af847b173e4400b35
TLSH
T1BDD02B1884AA4950F423247501254BE13288A80826825003F0710275180274102DF890
MD5 SHA1 SHA512 TLSH

Submit Download

26677921-e386-4f0b-b3d8-f97ba5f3b54d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26677921-e386-4f0b-b3d8-f97ba5f3b54d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

545a8f46-f1c6-4e19-ac47-7098c824d2cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\545a8f46-f1c6-4e19-ac47-7098c824d2cd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a9753b8-370e-46c0-a912-f713688389ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a9753b8-370e-46c0-a912-f713688389ad.tmp
Size 10KB
SHA256 a20e6a6141dae45ade6f543e01134192ee9834a73bbbb6f4e479f5298b652b59
MD5 a9fabefb721e76b3f87e5927f801515a
SHA1 172627dc29da9f619ecd97df39f59444020f784e
SHA512 83ed96fa59d4edc81da2c37d0a845ea8caa840d414aba2464c155704e7d2cc0574738dd3b23809a7bce1b5697f6411fb617a393b90bf710b7bf07f6cb5224473
SSDEEP 192:sxZCRNW4/fPsN9H5Idp3iHW6+WN8DQ/Yhl0K/UIgrJ:sxZCS4/fPsNgSHbX/QY9
TLSH
T11522D9556E68A53B8CC7E30DBB15BF53D6F9503251E11E58EAFC8A1C05E6ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80b4cab0-8e3f-4e51-a0d2-44547bd74ea4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80b4cab0-8e3f-4e51-a0d2-44547bd74ea4.tmp
Size 10KB
SHA256 4fb5785ad50ceabef14c9e951555e1147f2f6dc5cc8d24423a0c224eab0fffc8
MD5 c2021b721bd4ce3d76dbcf5e8d9871b7
SHA1 300837ff7b29f3187dfca5456c91bf973c89947a
SHA512 8be8addf5ae241edf4ef15b655d0158c94cab5dd0adbdec0c3910a8adf049e8364525b1fe207475f62700237c3b18baea4c22749dbd2cce11eb8c516c8a8a008
SSDEEP 192:sxZCRNW4/fPsO9H5Idp3iHW6+WN8DQ/YhVgK/UIg5hJ:sxZCS4/fPsOgSHbX/mYl
TLSH
T15A22EA556E64A97B8CC7E30DBB15BF53E6F9503251E11E48A6FC8A1C05E6BCE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94a9ed99-5f4c-4488-8532-7719a5540202.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94a9ed99-5f4c-4488-8532-7719a5540202.tmp
Size 27KB
SHA256 6d46ae9873371ac9291d9391d8d6ca809d239434e0b6384db699d50e96abc855
MD5 ffd35d2a68d0eeccab29e44a11bae2c3
SHA1 9221e4209c7f1c48ff553832cbed809cf4dc4a12
SHA512 61821cbdb3fe40947ad85253e3e20b3a69971a2fef91e859332ffddf1bd3c74138358ac010ab6d5382b9e2b8bb2b3892b2e6738d7715b535b940f3c3e949504d
SSDEEP 768:jsyI5TTWvvdRx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyyLlYmHfQrogCG:jsyI5TTWvvdRxu1jaXyLGgf7gT
TLSH
T1F3C2F83B684CCA7E4FC00A9DDD5A6F976D9801C7A6A88D4047FE894C03C77EA51268DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 583df6d75ee7bc48e9aef802fe25cc87f116eaf9bb7cfc48f8c1bd63abc95b5c
MD5 412bc58502c13c3df4103fcbe22432a9
SHA1 b801e1b5f7185c9c015e9aa94932ab1195aee86f
SHA512 b6f21a206fc60fc626fcd1bf6a9b5f55fc728f5bec7b34d73117e5a521da1f57e301b33e6a5cca995c32ea29615e24269eb543fdff826f2e56aec14486b170dd
TLSH
T1F5E07DC416CEC22FA70866C7027CB30DC7A1376AD3C06E8E1F00C5C87049050B6E6AF5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3fb11c8b0c8568cc1b20bc33baa2c255334adc97e5193d56e7360d68ccba45fc
MD5 6544b63dd2436d1c4a831a3d4c7550d9
SHA1 9f079182d4af9ef93b915dd1c2d8aba601a160f7
SHA512 55684bb1f55fe73edcf23783ca9824cd62853068246f8c2959bb9d836598cf14579c54d7c0310f4d3a7089cec50313c81524117718d5e30739efb80b0cfbfbc1
TLSH
T1C4615C3DD6E28DE4DFA807BB86C51886363495808DD32D0D289FF078A78735E1D0E724
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 788634ab43a1715728db5c19315dc4c67be7cd4cfc2c4a522168383d6fab749b
MD5 9d54212ef29d6a4639d6bb924b96ae58
SHA1 2437bfef1e32a19c65bf2c2d5f7092c7e56c87aa
SHA512 3cdb0715fbb11633841ef4d1bba2f924f5ceb28ecaa76860d0af963fbcc7777a271355b749323540bf8510d5bd4fe310be3d5430f49e206ec1f329e48e154544
TLSH
T1D4615C3DDAE24DE4DFA807BB86D51886363495808CD32D0D289FF078A78735E1D4E324
MD5 SHA1 SHA512 TLSH

Submit Download

193dd976-ef1c-4191-b2ee-9c0cc511f6a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\193dd976-ef1c-4191-b2ee-9c0cc511f6a6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2046e694-ca09-429c-afc3-ec80932fd4d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2046e694-ca09-429c-afc3-ec80932fd4d6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7bc00d59-b8a0-45c5-881f-01ab103b44a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7bc00d59-b8a0-45c5-881f-01ab103b44a9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

9d2acc06-79c6-43dd-9a84-04f0a0ccb767.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d2acc06-79c6-43dd-9a84-04f0a0ccb767.tmp
Size 1KB
SHA256 96283c9073df9a9fd9db544f166080974dda645b707c9677445722b6441b79d7
MD5 de76984b14504d93aab0e2938f7a77d6
SHA1 745e8e37194cd7f82e7df6cb0ea99f8aa98603b0
SHA512 58498dc876dcb8a81472932aac52ad65b2c6d75ea25fc431383399493a174da1d90f053d8aadc54cae829b0dd961ec06d78787745eb135f3b736947152e7bd7b
TLSH
T16A21ACF2CBE5826DD91116F05A14AE1BCE2C0915432C7C1AC5D8EF5BA7F3471D10158F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 26b279b42101cc0c94101c8af5d9fc5ab47c5e1a682bf92f55356ef1d1660039
MD5 2b4949ebd179131ed756c402c055e284
SHA1 ce2ed84d4d68e72009b264239f98655eb9282329
SHA512 7f8c9b0590d8ea843feec3cab24d014840b260f7b7ca05e87c81e092d9e4a1363f3e85c834ee4f0701c17b88ae5b419eb92ef380fcbf3958cfabc2e9f7794105
SSDEEP 48:KE+IfKrSALydfI1KE0InymuRaOQYI2WYD9I1O2KgTI82MmmT7sy:KE+sKrSm+feKE0aevSKkwE
TLSH
T1D591E01436F74640393E250C81789FAB638571FB3434EA2F3FBC10659A26E146DBD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b003d999-e64e-484d-8f64-9a97a9f0020b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b003d999-e64e-484d-8f64-9a97a9f0020b.tmp
Size 10KB
SHA256 7d7c95cb59a101f8432331d6abc654ae34570db36a36a71af7915f27d306223e
MD5 c424569e4c1510b2b21bf78971a5831a
SHA1 7925ee96d6c4e40bb0be6c843a277ebfc97b1830
SHA512 b81dd12a62a71c30cde535ab66b886cf85191d24d5f7da365957281bf4528708dff99412b25e0ade29d393ff4b9bbda81eebd977618f887ab31cfd8c146f40b0
SSDEEP 192:sxZCRNW4/fPsV9H5Idp3iHW6+WN8DQ/Yhl0K/UIg5TJ:sxZCS4/fPsVgSHbX/QYz
TLSH
T19A22EA556E64A93B8CC7E30DBB15BF53D6F9503151E11E48AAFC8A1C05E6BCE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bac610da-7a73-4d9a-8562-7874a16f3f6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bac610da-7a73-4d9a-8562-7874a16f3f6f.tmp
Size 10KB
SHA256 b25dd39ee3cd2b2bc4047839bcf1dee47c4d02de221eda4b759b7dd2204eeb7f
MD5 cf1bb4cc9f950122782f0566aa9aadc1
SHA1 b8d1ab4d6c0fc40789484ed460e286a351687d4e
SHA512 35e095ad7dfee0c7977409588241fb4d9ef8b54b004ad6269049cf5dc234729eba904ad98b82fbead34e30747587d1e9fddcd4d2596d0b4b834a32c6536bfa51
SSDEEP 192:sxZCRNW4/fPsO9H5IdpxiHW6+WN8DQ/YhjjR/UIg5hJ:sxZCS4/fPsOggHbX/eYl
TLSH
T13D32DA566E64A97B8CC7E30DBB15BF53D6F9503251E11E44AAFC8A1C05E6BCE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25fac142-b71f-468b-8e1e-d77e7650dd6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\25fac142-b71f-468b-8e1e-d77e7650dd6a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

302fab99-494d-4484-b982-04595fe1e172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\302fab99-494d-4484-b982-04595fe1e172.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f8aacf63-360c-4aba-8a1f-8ed3226d709d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f8aacf63-360c-4aba-8a1f-8ed3226d709d.tmp
Size 8KB
SHA256 484db78eec316c1f7a0d893aaabf9b5cf33ac6683b66bd054a8c4c243b4e6236
MD5 8317ede3f81d8a7457e296e0f0888b03
SHA1 2758841f754c3b15c4357fa4f1b2cc466eca820c
SHA512 45e01d427310c134225761fa7f995ca429e51760e44c618852c4d7db4ec96aae17fecd72d675be0c84b97ef6c2f36084098dc4a4af531e9e7044184189b042a8
SSDEEP 192:FONN96owQmiUyiEpvX4iOdim/orniYJU/u:FONv6VepvXlOl/MZJU/u
TLSH
T19602F935ACA97C6B9EE7AD45F48B36135FA8116BE9851F80CAD82F1D018769C1307C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 888ec80ca0bbbccb67dede7f7fe8ee117577b2c19c637b00f6675917e5201a25
MD5 23c2edc2e896c05eba4beb53e12febec
SHA1 61970f65014c6f77ce241131f50162a1f61c5b79
SHA512 36f0ac69624c4c61116265de2793b0e528a85f7000ba913e84c5301c22fb584d2079eebcc88c56617212f5d1163c0402b367f5a0d84edaf0796f41bb95dabb99
TLSH
T1FE41E659A6E91148B3F77F5AAFF7A86D487BB8762F06D05E10010D4E4A63A05CC72B33
MD5 SHA1 SHA512 TLSH

Submit Download