8af2654240dc0e632782a4f919c6fe5885c7b9e6b856efa0a7ea989a14fb56fe

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 10:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fonts/Roboto-700/Roboto-700.svg
Size 47KB
Sample261107-mvtkwabs3x
SHA256 8af2654240dc0e632782a4f919c6fe5885c7b9e6b856efa0a7ea989a14fb56fe
MD5 7f57c4c0f3b44acbe338d7ff6d6ee5b1
SHA1 35101c237ad0763d1e552b2d414e022e1e2a279b
SHA512 988b5138a8f55dc842b815e8b17bfa3707624f789364ede2ca78bf09ef44f78070fabc53f2fd7ab59be7a39000ee3b306ebba111b40fbb22a68482b18c463880
SSDEEP 768:Ta2NZRuu3g1z/LoM8BQmNQEazgnOM9I2U1A64LmDf6vKLroUQ0QF9Q1qQRQkLo2x:bNFg1pnmiE/OM97U42Hro1VI1nWulX
TLSH
T12C2372F6E64185C12AAFD3C0D750B1ED443E827B621628A58D8EE5F50D1E76DEE0BCC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4444	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{EF14AEDA-13AB-480C-A358-F25098A7729E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1044 wrote to memory of 5064	1044	msedge.exe	89
PID 1044 wrote to memory of 4444	1044	msedge.exe	90
PID 1044 wrote to memory of 2536	1044	msedge.exe	91
PID 1044 wrote to memory of 2536	1044	msedge.exe	91
PID 1044 wrote to memory of 2536	1044	msedge.exe	91
PID 1044 wrote to memory of 3312	1044	msedge.exe	92
PID 1044 wrote to memory of 3312	1044	msedge.exe	92
PID 1044 wrote to memory of 4392	1044	msedge.exe	94
PID 1044 wrote to memory of 4392	1044	msedge.exe	94
PID 1044 wrote to memory of 4392	1044	msedge.exe	94
PID 1044 wrote to memory of 1412	1044	msedge.exe	95
PID 1044 wrote to memory of 1412	1044	msedge.exe	95
PID 1044 wrote to memory of 1412	1044	msedge.exe	95
PID 1044 wrote to memory of 4840	1044	msedge.exe	96
PID 1044 wrote to memory of 4840	1044	msedge.exe	96
PID 1044 wrote to memory of 4840	1044	msedge.exe	96
PID 1044 wrote to memory of 4208	1044	msedge.exe	97
PID 1044 wrote to memory of 4208	1044	msedge.exe	97
PID 1044 wrote to memory of 4208	1044	msedge.exe	97
PID 1044 wrote to memory of 4516	1044	msedge.exe	99
PID 1044 wrote to memory of 4516	1044	msedge.exe	99
PID 1044 wrote to memory of 2376	1044	msedge.exe	100
PID 1044 wrote to memory of 2376	1044	msedge.exe	100
PID 1044 wrote to memory of 1404	1044	msedge.exe	102
PID 1044 wrote to memory of 556	1044	msedge.exe	105
PID 1044 wrote to memory of 1028	1044	msedge.exe	106
PID 1044 wrote to memory of 824	1044	msedge.exe	107
PID 1044 wrote to memory of 4288	1044	msedge.exe	108
PID 1044 wrote to memory of 4288	1044	msedge.exe	108
PID 1044 wrote to memory of 3940	1044	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fonts\Roboto-700\Roboto-700.svg
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffef925c188,0x7ffef925c194,0x7ffef925c1a0
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,16061957076414170575,17735670932048369140,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,11906162299101204078,5025288449666284560,262144 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:2
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,2290786304329888987,10331426958192362862,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:13
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3732,i,10593465138190183148,15296828956306484018,2097152 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3832,i,14365155315484412809,2236744153199287610,2097152 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,16772454263689431189,18195264096778190373,2097152 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,7193073256843572910,14763387669316806949,2097152 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:9
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,4588594725147784358,7533972196559621994,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:14
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,6414616423476625650,15171719397226312888,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4709141713717619769,10251774145270459611,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4709141713717619769,10251774145270459611,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,10969699602551892101,2493891321623663458,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:14
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,12395528557050362904,17271617182882231449,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,5165288198551117066,3610073177586859911,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:14
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,14814176541405141248,7755507647628079202,524288 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4416,i,12563556092832044920,8667329617779757115,262144 --field-trial-handle=2572,i,2499256189809731530,5953680348644197587,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3940

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ef3643d-8665-4612-b983-98604f7caa32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ef3643d-8665-4612-b983-98604f7caa32.tmp
Size 40KB
SHA256 6a8c6c5cfaaec6d6ac4f2fcb1796ca866372b4f4992ff04482f0905a9d92b534
MD5 91cfa661807c79ff4fe29d0c3c29bb45
SHA1 18f1f25538b9d732bd967a7f2c680f2207969d9e
SHA512 ac3a51fac466f1831c8951b773d9fa6d94e68e476f110df5db976e4d33ccaf1dd5fdf9e02481ddfd29aa38bdf6d6446097b169da00ec81618ded3a4789dec55b
SSDEEP 768:H/UxvxjgC+C3N/rKmpknE57Y0GZxJsXBdK8ZNSHUPpzn:6Zj3+C3pD70/JsXf7bSon
TLSH
T1AF03C035E8649D635DF692943A0E7387EEF48573C5C50DA88AED9F0C028B2AD0347917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

889f866e-8e31-47cf-992a-1f799267b027.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\889f866e-8e31-47cf-992a-1f799267b027.tmp
Size 40KB
SHA256 e565f3f61f37df381010b46ea02f98ce345736a6d1885094d0cbf8e53eeeb8af
MD5 01b153c983a5c1950e8779c2c6e4552e
SHA1 5545095dd566896b797c5d831961671ebc34eaf4
SHA512 720da61ec628019d6586b8699716429d7344e885ce81bd1edc3c726374c16fcccf283bb1c85d0f0daf546720a430ffc91a6fad1156bc77d675345a2c6040d783
SSDEEP 768:r/UxvxjgC+C34trKmpk4E57Y0GZxJsXBdK8ZNSHUPpAjn:eZj3+C3Gw70/JsXf7bSVn
TLSH
T11603C035E8649D635DF693A13A0E7387EEF48573C5C50DA88AED9F0C028B2AD0347917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

993aa0cb-504a-4518-8da9-1545f60b7f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\993aa0cb-504a-4518-8da9-1545f60b7f61.tmp
Size 37KB
SHA256 c8910391ed397be2f69ed49382217a21b09054de0493b825e23006f672b208e4
MD5 2db878edbeb1a8a41b4e37fa720f26dc
SHA1 366afe203172d6c5c0f9893b9590e27306d71146
SHA512 ceb365c1bfb4e36afc4e51c78a1eb03c9992646c6964776e4f25d0ddd153e57c273cbca3a5b6a94085a95e0528259aa20ece1d1e0a147f48127a771aaa30ba09
SSDEEP 768:A/UxvxjgC+I3OCKmpGE57Y0GZxJsXBdK8lWSHUPpMs:tZj3+I3r970/JsXf7wSfs
TLSH
T1BB03B034EC649D735DF793903A0E7357EEF446B3C5C54AA88AED5B0D028B26D034391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f873012-ebc0-49a3-96ba-c0869b658771.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9f873012-ebc0-49a3-96ba-c0869b658771.tmp
Size 38KB
SHA256 9dd6824244ea125471d4ec7cd20ceb9d5c8d617777a650e79e56388f48c7e34f
MD5 fa01de196003cec5e28cd36ea014177e
SHA1 7c38d27a05d042dafbf083807cec3fc5eead7d61
SHA512 31708070ff6740c408ee04324d5cf297c79e43057d0f09bb716a8d96fd70a0a7c1d4ac11ab6f42aa573488eac3c64b416764bb8e52eeba6eb6dddfded9669ef6
SSDEEP 768:M/UxvxjgC+I3wSBKmpkGE57Y0GZxJsXBdK8ENSHUPpMs:5Zj3+I3Ze70/JsXf7ASfs
TLSH
T1F903C035E8659D636DF79390360E7397EEF486A3C6C50DA88AED9F0C028B36D0347916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

4f862518-51b3-436a-a2be-bf0101f89fdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f862518-51b3-436a-a2be-bf0101f89fdd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62bf5759-8d5d-482c-859b-8b198c878a9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62bf5759-8d5d-482c-859b-8b198c878a9e.tmp
Size 10KB
SHA256 4fd3bc3e83b6465372646adb8ad05b38983094a2fc0720e470f21aebc654938c
MD5 3e87b09d3f5dc17459a313283b6cbb6d
SHA1 80529ba4166661dc9e8a25bff80b619a5b731858
SHA512 5234e00f0eb43fffda682eeb3919ea72bd8b4aa3b4d2717c5fe9881efbf3438d39e39a72785b0b7c3092b5203a8b31522e246440c441b8e31ff6b3ed1a1e5d90
SSDEEP 192:sxRwmbU/fQsDzBzoA8p4a/g6+WNIYU2RfKRsG+oIgDYJ:sxRw4U/fQsDz8v/5ItY
TLSH
T176328515AE68A93B9CCBD219FB65BF53D6F95032A0D12E48F6FC861C04EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75518af1-aa9a-448f-b533-33a3cb40621e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75518af1-aa9a-448f-b533-33a3cb40621e.tmp
Size 11KB
SHA256 18155a13fa3d5940a3545031570cb540ee98d15e5c634c903ad2fc9d6b85bfdb
MD5 78cb7228276307d53cf7299f0f32cc6b
SHA1 a5e98ea9469be322e905a02fed1682a18fb3105c
SHA512 b0997d5205f9c34c798d1ac725edc68a90093d41d6b9394830528966ba302d31be6d84942c0a75f44900c913a4a46dc0f71d13f188d3ad36001459b1413b0bde
SSDEEP 192:sxRwmbU/fQs1zBzoA8p4a/g6+WNIYU2RdKRsG+oIgDqJ:sxRw4U/fQs1z8v/5IhS
TLSH
T1BE3295156D68A93B9CCBD219FB55BF53D2F85032A0911E48F6FC861C04EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 61c0787e5943aa06f1e6ac59b54eca2a2350c8b6a8cf6ac1d8757ecad15f6d4d
MD5 12229c5fa09ed85aa42df587b9bb6c87
SHA1 71fdc5b309fe7dfa2c7280ac343730c88ed786ac
SHA512 f739c7ad3c19aff04957576eae2134d5e848a3e579a0b09311be02d0bb236b9490a37652dae3d3e8f01f8e90b6b2e4b67b7ddc65d55ab27e447dee365a8ba10d
TLSH
T1C9410FA77BA080B7C74FA13895C95B4B3F3699B0B5C72ED051D7C9F85A0A36C81980A9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d591e35df5c8a55386641fc64210c8fc2f7532dc615e99559ca74b20d85ee00a
MD5 3abc08e8f884edb26016fe9060d84092
SHA1 ff4c3ac18cbd7f085293ce2a1ac09ea46bb6b075
SHA512 1dc9c6676678c4c8330c8296b4c2d6c81547bba53e613e7709dcae08e5ee64919804fb87f63c21fe7940ffbc55a3f4a4ee26fc8bc31dda2dee4b7930d45f5c4f
TLSH
T1034101A77FA080B3C74FB03895C95B4B3F3699B0B5C72ED151D7CAF45A0635C81980A9
MD5 SHA1 SHA512 TLSH

Submit Download

346a3ab6-7402-4dba-993f-8fb3db329622.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\346a3ab6-7402-4dba-993f-8fb3db329622.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

712fe757-9a0e-4efe-bb9f-832ed5e6dc42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\712fe757-9a0e-4efe-bb9f-832ed5e6dc42.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c5edfa75-8411-454d-8453-7c15692e4261.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c5edfa75-8411-454d-8453-7c15692e4261.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4ace19ba9428866bcc872aac3a5ff58ebb3695776dc9c993a3dcf29fcce831a9
MD5 12d97f3af0aedc72c2e1482a66924406
SHA1 89e260fbd3e8c9ddbc27ad8544d09d4f421d35fb
SHA512 ec07dfdf339f1091305504868dc6a3bb1e69c266b6a0088ad051d3aff88fafd7b40b4f6942ee9e289163354a70c4bb38712926ae54616d1a9fb84d8dc0b333fb
SSDEEP 48:K0cIsLoXrF9t2j9C9Isr2KVTth2xzmSqRLnyd1IBKeM0DyFtIRKeMl:K0cLooK5yO21aKeM62tiKeMl
TLSH
T14A918221313A43C43A7E3D1C50E69A1B9A4531F67429F62F3BAE99A14E67E140CFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bae95525-8157-444d-b352-e875263243a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bae95525-8157-444d-b352-e875263243a2.tmp
Size 10KB
SHA256 01c0ad4b806f2425b6d9463e888a5927955c442f235fb8b287fc3a5c66435621
MD5 846f2afd8afc97bf6fee3ce7fabff781
SHA1 3318ef6a4d280d467ee6e6c2200004153ce3b031
SHA512 b92b8a1ec44a0abbafc731268a0f55d38542e491f05034537fd821181fa6d5fa5f9c9534bcf400ecb61ca607695cfb6e471d0dccd3a65362e88f475f3b745494
SSDEEP 192:sxR/mbU/fQsXzBzoA8p4a/g6+WNIYU2RfKRsG+oIgIJ:sxR/4U/fQsXz8v/5Its
TLSH
T14B3284156E68A93B9CCBD219FB65BF53D6F95032A0D12E48F6FC861C04EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccb1a3ff-8dc7-4ec3-bdc5-27da2b12618b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ccb1a3ff-8dc7-4ec3-bdc5-27da2b12618b.tmp
Size 23KB
SHA256 51bef90e54eddbe6ee83be66f98adb5b92050273d0be36e94c15c097ba209ac5
MD5 aedd6990996b707b9677969d5017e13b
SHA1 d385d2e1c3d688333296e597e94ea90060a8da30
SHA512 0b26abf813d242b2c94e0c8aaa1046dd177760db3567cfbf4f7ea172d9be27f29f3b79250c897ad8f955d00b3407d1742b049d304230100547e3c29d98edeea7
SSDEEP 384:64qajXwfCtgmcFfsO7nKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+a9mWRurrow:6JajXKWgm0fsO7n8F1+UoAYDCx9Tuqhq
TLSH
T1C0B2D93B650DCB7F5FC00AAD9C19AF976D9802CB96588D4047FE984C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b33e83a0-9543-423e-b8a3-9f8ade667d9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b33e83a0-9543-423e-b8a3-9f8ade667d9c.tmp
Size 40KB
SHA256 ae574dce9afa88f6145c8fb29ed945dad0ea71348d77698b97b843a1de4cb09a
MD5 15d0576954b290cbbaba9ef8e186114e
SHA1 1da51eaa7c07773673ac0a3c1ebecf3374953b96
SHA512 d617a1f0dfc8229349e102054f7882a921f0acb68c33580efae8ab0b8fc5d71fff49abb68c42f562af2877f930e354431caf8981973484a46ceeade2a4865ca0
SSDEEP 768:w/UxvxjgC+h34trKmpk0E57Y0GZxJsXBdK8ZNSHUPp9n:dZj3+h3Gk70/JsXf7bSun
TLSH
T17E03C035E8649D235DF693A53A0E739BEEF48573C5C50D688AED9F0C028B2AD0347917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8318183b-40ae-4738-956d-9599c7a0c551.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8318183b-40ae-4738-956d-9599c7a0c551.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download