0807b3cf7f87473d2e027354ee5d3bf4e35c40801d5adaa41893601a84c08bb4

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
combine_tessdata.1.html
Size 39KB
Sample261102-ctqsgset7s
SHA256 0807b3cf7f87473d2e027354ee5d3bf4e35c40801d5adaa41893601a84c08bb4
MD5 0f5ef91540589c4889dbd7870a0984d8
SHA1 b86f8d2e8db35911d63aacd50e9c25154fa72ab8
SHA512 7371e263678c84bb42568cdb3d271def1a3ecb3f4f2726264f1aa62edf5e85ae24a7978524f3e414e2290974aee46b8210531a084495e9a30549b4a7e4995a6e
SSDEEP 768:WdEDwU8kuDK2SjtkAuop1lBhfmMJHSlo4VNazVGlJx2D17/E3N:JEtu+AVCX2J49
TLSH
T19E030A30A78030EAA127C2577F54F9346620F934D6E31AF5D076C2D99BCEAE746E2709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
248	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{A40C3C22-036B-4704-8129-BA7F8853273B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3440 wrote to memory of 1092	3440	msedge.exe	89
PID 3440 wrote to memory of 4500	3440	msedge.exe	90
PID 3440 wrote to memory of 248	3440	msedge.exe	91
PID 3440 wrote to memory of 4500	3440	msedge.exe	90
PID 3440 wrote to memory of 4500	3440	msedge.exe	90
PID 3440 wrote to memory of 5764	3440	msedge.exe	92
PID 3440 wrote to memory of 5764	3440	msedge.exe	92
PID 3440 wrote to memory of 1520	3440	msedge.exe	93
PID 3440 wrote to memory of 5804	3440	msedge.exe	94
PID 3440 wrote to memory of 1520	3440	msedge.exe	93
PID 3440 wrote to memory of 1520	3440	msedge.exe	93
PID 3440 wrote to memory of 5804	3440	msedge.exe	94
PID 3440 wrote to memory of 5804	3440	msedge.exe	94
PID 3440 wrote to memory of 5056	3440	msedge.exe	96
PID 3440 wrote to memory of 5004	3440	msedge.exe	97
PID 3440 wrote to memory of 5056	3440	msedge.exe	96
PID 3440 wrote to memory of 5056	3440	msedge.exe	96
PID 3440 wrote to memory of 5004	3440	msedge.exe	97
PID 3440 wrote to memory of 5004	3440	msedge.exe	97
PID 3440 wrote to memory of 3436	3440	msedge.exe	99
PID 3440 wrote to memory of 3560	3440	msedge.exe	100
PID 3440 wrote to memory of 3436	3440	msedge.exe	99
PID 3440 wrote to memory of 3560	3440	msedge.exe	100
PID 3440 wrote to memory of 1476	3440	msedge.exe	102
PID 3440 wrote to memory of 2104	3440	msedge.exe	106
PID 3440 wrote to memory of 1776	3440	msedge.exe	107
PID 3440 wrote to memory of 708	3440	msedge.exe	108
PID 3440 wrote to memory of 2500	3440	msedge.exe	109
PID 3440 wrote to memory of 2500	3440	msedge.exe	109
PID 3440 wrote to memory of 1312	3440	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\combine_tessdata.1.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ff821bfc188,0x7ff821bfc194,0x7ff821bfc1a0
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,16091815142908606547,799793168961042650,262144 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,10384936319072496004,11785669958870833680,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - System Time Discovery
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,3238793760372518759,6555691273233396372,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:13
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,13370832195790976896,13552196592562659101,2097152 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,14151802895669352194,10575586664924605137,2097152 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,10076688771181827194,17039931922895861627,2097152 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:9
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,11456922344309437670,6111088209952626630,2097152 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,17457362595644859666,17206709202116450883,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,10326958979640375770,14352863073976403686,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,17550852461901812249,12089730969198707157,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,17550852461901812249,12089730969198707157,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,8146994421801691011,14760870052228035953,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,17484399416946357416,3418394387962320808,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,3750540050322419769,1998827723064653305,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,10182455192718062647,4753808338128922286,524288 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=820,i,12735541738308240488,14152241673038664399,262144 --field-trial-handle=2244,i,6927252679340507631,2321007602993125135,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

50f97904-c9f2-4b3f-be50-8a7c53f94f11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\50f97904-c9f2-4b3f-be50-8a7c53f94f11.tmp
Size 40KB
SHA256 8608a47fb11a43567e37953fd326f3d3268a3b2662971a444e5189aba4905e8b
MD5 c60cd513ece506a73dcf157240dcca64
SHA1 225087fb3419adcf4c0bee59bdab4304523f2b04
SHA512 1df7e600baac55115b198b9b131d307ce067b0f8e37fb956e7a3d76b407df43904f84ca7bf3a53703ad067698481d68fb0a60175407cc2372313aff66fe0d278
SSDEEP 768:o/UxvxjgC+W36GHwc7fZrKyp5XSwQs88uBkiT2rE75EXkL:1Zj3+W36GTtrjILNBmktL
TLSH
T1D703C039F8946823ACF2E345374A3757AFF09157C4C41A9489EE660E02CB7AD634786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55277d6a-800c-4312-9c1f-07701c09e9a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55277d6a-800c-4312-9c1f-07701c09e9a9.tmp
Size 37KB
SHA256 3c98bd691486020fddcb16dba05831b36202edf7f10c0e8f4f3a5b216f255427
MD5 c6bafc2ae2c437a4b76f797ad66bc9f1
SHA1 c6305d72b3ac36913281fddf1ab144c0decfb06e
SHA512 c57986b63cc53fecd325f4fb98dda2601246c24ad0c0aae54bbe3c79d82a6337981d6aa3366eb2014a9025da96806f9bac127364cd25b90a6c0b87d66b306f7f
SSDEEP 768:R/UxvxjgC+W3grac7fZrKZp5XSwQs88uBkiTC2/P84g:kZj3+W3gltrOILNBbHg
TLSH
T1ED03D039EC946873ACF39385365A275BAFF05053C4C41B9849EE7A1E039735DA307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71367ff0-c5a9-4053-adb9-00bcf97e985c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\71367ff0-c5a9-4053-adb9-00bcf97e985c.tmp
Size 33KB
SHA256 b6665a945608a64adbbee59bd146edbc5d636c869a12af7e041373b0394c790f
MD5 177bc1d3e0d483d97d722bf28312aaa1
SHA1 c9580fb62e5a40d8206ccf85023740747cd77b9d
SHA512 b9d2acef5837d522078870e391566d91bf318a41b7baefc57a845af2ee2ae9aec3ddf6529c1add9ba25cd831574ccc8d152cdf2b4837a093e41f36fbc8878115
SSDEEP 768:jK3lG/wc7fZrKCp5XSwQs88uBkiT2rE75EXGL+:jK3lG7trZILNBmklq
TLSH
T168F2B035F89099639CB29381775A3706AFF0E147C8C80B94C9DEA61D01CB79E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f9c65ad-c82c-4f9d-b26a-398873209fb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8f9c65ad-c82c-4f9d-b26a-398873209fb6.tmp
Size 33KB
SHA256 e158ffc60c5654ea54c4bec77c55fe3da7fe74c651eb82b01ae11acc29ae4b24
MD5 c780e5333115236577a79863d54a4b3c
SHA1 adece601c7c4201e85e705348f92ded1922f42a3
SHA512 3d0ea4bf22b69e85bcea741cebe763bb2336e62dcf296a1800caf2f9a4a0272973bdb96e7560e80e87b591cbf5b319eb7da11971a5447c54aabb8652b4ec44d9
SSDEEP 768:FK3qG/wc7fZrKCp5XSwQs88uBkiT2rE75EXGL+:FK3qG7trZILNBmklq
TLSH
T196F2BF35F88099639CB29381775A3706AFF0E147C8C80B94C9DEA51D01CB79E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

3d270e62-a980-48bf-b9db-af85045653f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d270e62-a980-48bf-b9db-af85045653f8.tmp
Size 23KB
SHA256 eb3cde7951790c64779e712916eb01c420905040dedaa446e0cd66ba1621e5e7
MD5 1ac65b8ce4c70563391fe1a656703958
SHA1 bf3af0679b9cc156a610ba8c8b0d5f0c769b2dc8
SHA512 c6743c15ae2352294038ed2df3d4b6bb396efd44f11f30c5d640b8fe5d858c131b6b60b5cfabf07f35fa6800ed393ed04a9970cacc8fa0768e249cb69fed039b
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXFroJeY:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Vb
TLSH
T1A8B2D92B600CCB7F4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44596974-857c-4472-90e7-c34402a65894.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44596974-857c-4472-90e7-c34402a65894.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7aeda1ac-3776-4dfd-a22f-b132f9cd475b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7aeda1ac-3776-4dfd-a22f-b132f9cd475b.tmp
Size 11KB
SHA256 51123c32fd9c6fae432033b880fa0050b3b7556f6cea2c19207a52aacdddd486
MD5 0054ff1d6a4a3a356cf42ba4c86c13e2
SHA1 99a550119dfee4e7f892bcec37ec018262b083c2
SHA512 a609da7c16686c9cfab5f6df85117dc5d2c32b72f785276ac0934c7d30953a86570f054159e90f9e6e8143d5ad382799831492bf7df053e84da002deb95c9bda
SSDEEP 192:sxR2kRfbg/fHsjHRiXzoA8p4n/g6+WNIYEGYrGqIgIJ:sxRj9g/fHsjPC/5IXs
TLSH
T12632A615AA28A93B9CCBD21DBB65BF53D7F95032A1D01E48B6FC861C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7dffa4c2-5e5a-4136-a1f8-ed39a0a5023e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7dffa4c2-5e5a-4136-a1f8-ed39a0a5023e.tmp
Size 11KB
SHA256 dfd8c07f0462d353dc56253bc517521217a7715f667eddb36f10e4a787770111
MD5 254758d19669d86b6d47425faca56c82
SHA1 f24fd0e29cb011c1080fee70bcf3556adce3b8f8
SHA512 92657537b28c348445c45404cc85674b456b50a81d20c312a1cfc5a25854ece6dee79483dedfe10c603912109d4f6ae55d056d384294acddce4039665bc66331
SSDEEP 192:sxR2zRfbg/fHsyHRiXzoA8p4n/g6+WNIYEGYrGqIgDqjJ:sxRU9g/fHsyPC/5IXuV
TLSH
T19F32B715A928A93B9CCBD20DBB65BF53D7F95032A1D01E48B6FC862C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 48a295ad1cbb131c57954f76796a9369f9a3065d7d505858d930c21cc3f5f743
MD5 5dafe95f61f5844ef0dbf25465db42df
SHA1 3b63b7c85529b39693907c4a9a751d18d0c45cfe
SHA512 7be657a217a1061104ec81642710bb1d7e0e96433ad023d9b59501a6900be05efb30779236c6a6ccb8db52a5e748a93a6a293fc51623c16983d15a605c6ce293
TLSH
T1EB5184871DB18070D76854F4D4D053873EF525B16AE31E054A7BFEB4BF4E3D29189868
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6343df0c7333b651a8bde84e01ab312f6b99afe8b7315b59356632443f3a5bf3
MD5 1fe9b18e83ebf2ecfb18e953c6ea65a6
SHA1 2d9a2a21d26a43bcbb3a2360adedaea50758cc2a
SHA512 1c6ee4a185a3af44eef475f5ac7d145e92f4c573d6d74d3eaff27df66c49684e5a11b66ac51b3d7f11c6f2da198951ce4c1432a8ff07c4a95b05650e0fb332b8
TLSH
T16051A4871DB18070DB5844F0C4E013873EF565B02AE31E06467BFEB4BF4E3D29189828
MD5 SHA1 SHA512 TLSH

Submit Download

92f9150b-a47b-4b17-8a5f-05abf8184b13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\92f9150b-a47b-4b17-8a5f-05abf8184b13.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0bb40392-7ef7-49f0-92ca-4b5aa302935e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0bb40392-7ef7-49f0-92ca-4b5aa302935e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b47ba146-d812-4e15-8a16-52f70872a4dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b47ba146-d812-4e15-8a16-52f70872a4dd.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cc29d6bf-d1a0-4246-bbb8-8d22eaa7835e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cc29d6bf-d1a0-4246-bbb8-8d22eaa7835e.tmp
Size 2KB
SHA256 cf153995470a6f75d5482982067cc16f80958cc6002aed7072a149af06ba8d00
MD5 bd8d68198ffcb6200f043734f27f65c7
SHA1 e16d13fc4964c537a4706820f3a53a68b42e0917
SHA512 196a064d112db597a8729d008c1cf54f90ec91371d5dfb15ead68e13b2e241c5cb267a884a4de6190e4687856265ed7e807b065d490ff19b8392bad1be667537
TLSH
T1D141D0F783F4867E9A0146F0AB146E2FDE1D0526432C7C6688E4AE1B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f5b10e8e-e93e-452c-864c-2c4d0c0a983b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f5b10e8e-e93e-452c-864c-2c4d0c0a983b.tmp
Size 11KB
SHA256 9c319840b6301b93a0903922044cbaeeeb8073029ceb2edd1d97a05f8d3d8d8a
MD5 a3242bb94863819c78df6e85ab0a248f
SHA1 6cee26c0c09174e9a7828152ac79e63452efaf13
SHA512 54b1fe1522b27601b6ba5ba26992a9df29f4bcbf934d9303f594848d0c8974fccc3faa6c4685a2dda4fd9d8bde5c594012c14a77520a431777960b4ff1e386e3
SSDEEP 192:sxR2zRfbg/fHsrHRiXzoA8p4n/g6+WNIYELZiwrGqIgDqlJ:sxRU9g/fHsrPC/5IBVuP
TLSH
T1D432C815A928A93B9CCBE20DBB65BF13D3F9503261D01E48F6FC8A1C04E76DD620781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de93af04-cef9-4853-9149-2639860d608b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\de93af04-cef9-4853-9149-2639860d608b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc3c42cd-27f4-445f-8c34-c17cc292b824.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dc3c42cd-27f4-445f-8c34-c17cc292b824.tmp
Size 38KB
SHA256 4f8c23a4f8f3826c7f8fb2052c6d5534a7838874b07d76828d1ff74d55b76749
MD5 ad1b47020c1752d322d139e8b737cc11
SHA1 2af75469074f2dd545e1cb8cc079d2a1469b86f7
SHA512 27fd25a93e4afa895f19691264c4abdefb54e1c9d3902be80f8f23d238eb1728c23d2c0deb5c0ba20f4730544d1b6a608744d68dca7ef24f1a4fac68f641bf05
SSDEEP 768:C/UxvxjgC+W3W3ac7fZrKqp5XSwQs88uBkiTzr/P84g:HZj3+W3WptrJILNBRHg
TLSH
T15D03C039FC945863ACF39381365B374BAFF06157C4C41AA449EE7A0E028B79D634789B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed9f6f27-755b-4f52-be00-2e70cae1af60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed9f6f27-755b-4f52-be00-2e70cae1af60.tmp
Size 36KB
SHA256 bf66b1661018b736b76f828dfadb08292d8b1910521097cd5a7db4c0d23373da
MD5 3addf6db665ea8306503f372f6adbdea
SHA1 d14b54735b8ef4d8707d5dcf77e86a84f7557657
SHA512 b053b1dc59b952fa0f81a89f11c55793b77efba93e3fac021092a27fe6558b7d65a8fa02af44efe3ddc2133eb98c6ca6e23e6d84c21831f05b2c8e39ffca3c00
SSDEEP 768:iFds3CwgCG/wc7fZrKbmp5XSwQs88uBkiT2rE75EXGL+:ys3fG7tr2YILNBmklq
TLSH
T1E0F2BF36ECC0D977ADB29781B71A3706EFF09157C8C81694CACEA51D018B39D238BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8379f17-dc18-42ea-96c7-81b0fe041153.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f8379f17-dc18-42ea-96c7-81b0fe041153.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download