859d402e8444fc17c855fb6f2a43b30af96383edfb79329087197ed439547f32

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample260909-ake9aaac25
SHA256 859d402e8444fc17c855fb6f2a43b30af96383edfb79329087197ed439547f32
MD5 f496991f0377b1624b28a1a91b8bf088
SHA1 91da18f728b4215a3c41b6ceb96577a4ef5b5518
SHA512 f2d1a67011025af56cea45b1f66e12315c8d079488dbb22e1f2211dae64a50a0cc99aa56905b610d1746e3949bc44572d556b6272e064524eac443c87a691658
SSDEEP 384:GQy9+4LIZecuHL9BHymESwejc6V0v2M+Z/qcwMQXAT9MYrxkq:G5E4LKecuHHym1jciG0ZLwRA+Yrxf
TLSH
T19603B91AB8C18C320277C2E69E52BF2DED61821B931A084836FD4797EFF2D554E5358B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1388	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333867558720527"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{4CAC10A9-FBB3-4E49-B108-9DEA85982AEB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe
5676	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5676 wrote to memory of 4568	5676	msedge.exe	89
PID 5676 wrote to memory of 2792	5676	msedge.exe	90
PID 5676 wrote to memory of 1388	5676	msedge.exe	91
PID 5676 wrote to memory of 2792	5676	msedge.exe	90
PID 5676 wrote to memory of 2792	5676	msedge.exe	90
PID 5676 wrote to memory of 4144	5676	msedge.exe	92
PID 5676 wrote to memory of 4144	5676	msedge.exe	92
PID 5676 wrote to memory of 3492	5676	msedge.exe	93
PID 5676 wrote to memory of 3504	5676	msedge.exe	94
PID 5676 wrote to memory of 3492	5676	msedge.exe	93
PID 5676 wrote to memory of 3492	5676	msedge.exe	93
PID 5676 wrote to memory of 3504	5676	msedge.exe	94
PID 5676 wrote to memory of 3504	5676	msedge.exe	94
PID 5676 wrote to memory of 5264	5676	msedge.exe	96
PID 5676 wrote to memory of 5264	5676	msedge.exe	96
PID 5676 wrote to memory of 5264	5676	msedge.exe	96
PID 5676 wrote to memory of 5376	5676	msedge.exe	97
PID 5676 wrote to memory of 5376	5676	msedge.exe	97
PID 5676 wrote to memory of 5376	5676	msedge.exe	97
PID 5676 wrote to memory of 5996	5676	msedge.exe	99
PID 5676 wrote to memory of 5996	5676	msedge.exe	99
PID 5676 wrote to memory of 3900	5676	msedge.exe	100
PID 5676 wrote to memory of 3900	5676	msedge.exe	100
PID 5676 wrote to memory of 2784	5676	msedge.exe	102
PID 5676 wrote to memory of 5496	5676	msedge.exe	106
PID 5676 wrote to memory of 2192	5676	msedge.exe	107
PID 5676 wrote to memory of 484	5676	msedge.exe	108
PID 5676 wrote to memory of 2800	5676	msedge.exe	109
PID 5676 wrote to memory of 2800	5676	msedge.exe	109
PID 5676 wrote to memory of 4484	5676	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd613ec188,0x7ffd613ec194,0x7ffd613ec1a0
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,11857511301777468902,126843513498157628,262144 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1029074613228180601,14805622885738822685,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,4250496839507585822,13786428942034184502,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,10977819083812803875,12480542005950032474,2097152 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,18409977418068644423,15018338859308502577,2097152 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,9281781240879355585,4040354519041992470,2097152 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,14971922351291743433,2254049039165212667,2097152 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:9
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,2134109970680917495,1160669032892461853,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,13889864661852732302,168931488313499757,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,16748377929292613987,4708680280911575652,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,16748377929292613987,4708680280911575652,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,4229720801514657780,5138209878234030390,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,10993211590119579289,11739765142804571043,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,6529242219315191589,7436583226208883492,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,17883276787154649530,14538454459554055442,524288 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,8637066648535903298,13155447640317602368,262144 --field-trial-handle=2624,i,10262807793558223112,13808763333542542092,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 58d903b43aaa5cd620ae7dc50a2d95602f774f050050ce5007002432148ee2d2
MD5 67d3ba1ae4e328e0bb943e638cb3b1d1
SHA1 a8f3b07a83fe99cd31031584a747d9e7be3d829c
SHA512 f9394caf212ffc905dd778bfdc6fd8069f357f4b66cb1d3f52db949335f69dc09e06e75951b185d6bd6fd138187cdbdcd80a1b2ed40d26b70816cd7542f09458
TLSH
T14A51847553B64DD2DB29AA7AF0E9746B32F6806A43073E00F2852F385C05F745BE1113
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b702.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b702.TMP
Size 3KB
SHA256 712e749a2b5654bcc3ae0623b486e5ab1708837d8146fd712dc34d2643cbfbd3
MD5 1ab9e59d056134f493988cd794221bb7
SHA1 3b5c9cc445ad74136a02192a7a633f1f06d2920b
SHA512 3cddef63ea210fcea930114527942b397959e9de3ddd09e4890e0a0c7b69a24077777175ab2f8ef609299bca6d28e4dfcb08858a62974df18e6b94252e3e06d8
TLSH
T1CA51847553B64DD2DB29AA7AF0E9746B32F6806A43073E00E2852F349C05F745BE1113
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4bd32971a97f816c7dcc43b71a56603fbf75a1d67e02ab32c8a090a805410531
MD5 6858e85f08b192466335666028a905bd
SHA1 b1a497bcdb2ff3fe48c4d45dc679e9b54f1ef51e
SHA512 5de6f1a8cbe90c1b8ba594208f32e6afd7b724d69b29e3ef96ef501d9ecf8b87bb7a66259b915137c29919c6a50b4d8e6a1031e2d7a3b73c89b4bd6ba7fa427e
TLSH
T11241B0F783E586BE891156F0AA14AE2FCE2D0515432C7C5A89E4AF1B93F34B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 348457efb8ae795ba6b3eaa6fe2f3f06ac9efe14a7aa56fe4d6233cb1ad9b37f
MD5 4024927b54b2eae577b69f9c128606b0
SHA1 54220c4cc358989099dff3d9bb2e28c48fdbf088
SHA512 ee7737a631690c16f83564e1e28732462d3460dae8641d5fbc37f0d0fffa44f7d2974c098f08aed88cc3091dbb3439425e7614d2636e2b52f5d7c8c8b0f73a48
SSDEEP 192:sxRnRFbW/fUVshvqprQ5BzoA8p4j/g6+WNIYn8UghMGdIgDOJ:sxRnHW/fUVshvq5G/5ITPpW
TLSH
T1E932B7166E28AD7B9CC7D21DBB65BF53D2F96032A1D45E48A7FC8A1C04E76CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e097f911a9532c15c90955cdf27ced9903bac719291aa61b449a2f61d93ff2a0
MD5 925907beb96ff3de23cb79b6003cf483
SHA1 491d46e888a2c0956cff134e577e1dc49cb2111d
SHA512 cccf4995190a1eb310b3adb22d93ab93409418505e3c28b9a0ce775724fdace68d00669b628ae64491275c4619bd7e7229199792d1617917a808d1f778eb9055
SSDEEP 192:sxRwRFbW/fUVshvvprQ5wzoA8p4j/g6+WNIYn8z6hMGdIgDUJ:sxRwHW/fUVshvvmG/5ITspk
TLSH
T12542B9166D28AD7B9CC7E21DBB55BF53E2F9603261D45E48A7FC8A1C04E76CE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ea3c1c4df8d5cd8922e21bca42bbe9dea23e55e9c4ab07ae95614e3098fb0f03
MD5 43805090cbf01193e6c621dfb6c8912b
SHA1 53342856c4b3736dda408bc41f7df19712069f13
SHA512 a99417de0c76dbe2ec811d3430794f915ba192d76dae0da19e3f55eb6c2f36e19af47cd740c7d27c60f0982bf8b237104b792eaa970c76fd7d126276ed103970
SSDEEP 192:sxRYRFbW/fUVsBvqprQ5BzoA8p4j/g6+WNIYn8UghMGdIgIJ:sxRYHW/fUVsBvq5G/5ITPps
TLSH
T1EF32B7166E28AD3B9CC7D21DBB65BF53D2F96032A1D45E48A7FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b85bc8c92ed33ebf211828689f796402ac457d1a8a4a6b29b9be4df7ac3893bc
MD5 30561cb2759287c94bca3cc134d3108b
SHA1 4f8218c9fa52f11446101838a23abbf95b499fb3
SHA512 b92535dea762008b30b4c2bdbfdee6635a14a8fdfacc036320feacc329eee805a404633947b28ce8549b2ce785a9092da3c31ca1b32bcf7f24498e25d97f09cf
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPprohMQ:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vh
TLSH
T175B2DB3B604DCB7E5F800AADEC19AFDB7D9802C79A948D4447FE990C02C77EA91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

10614518-14ee-4b6e-8596-e99896f129e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\10614518-14ee-4b6e-8596-e99896f129e7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 dc68f4fcfc11c236517858340c677380546ba952cb0324211335ee289a00e8e9
MD5 fe5ebc8e9351b5eebf492d7e27d11335
SHA1 88761bf0ebb22115ba6d91686a797dcf7362d849
SHA512 9849196fe8a3e73a2e6a2471a8c48ed0693be9a8ab79c83476dbcd43ef9de9fb3def2260ea3042a541bee07f50c6174ba96f7fc997bd244c06c25e6428ea9d02
SSDEEP 768:mrv+4UNbds3LyDZIO0oGExNzc4ReyIs2DeVH1S5D:mbsbS3uGotc44bsoEH1Y
TLSH
T1BE03DF32E868D977ACE69686B40B71433EF8611B82C81ED4C5EE6F4C4A4B5DD035F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a92aef03175d4731c5ca605a174c00f96da39d9765bf5f4c18df28d8a19710a4
MD5 33cb1eeb630864dbe3a0caeb2e751061
SHA1 0b46c20d062fef392430ceeee6c5b10b7920d1ee
SHA512 7ef403792cdfb912ee7dc92d1dbc719a7ad58c83ab2ff0aa0053a299678423fc4e6ddbe665734747d2c55acecb2270732e76daf6dd1ff6e7c700b9c4a0ebae98
SSDEEP 384:sZcI6R38N8e1M/iPgdIJDZNfNoXOVSUUd2GMX6LETRzcoXfK86sfxEZxxsIj4lB6:6+3hzIDZIO0oGEtNzc4ReyIsPDMgLJK
TLSH
T116F2BF32FD649CBBACEA9386BA0772427DF4616781CC6D9486ED5F0C058B6DD034B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 56a13521aba88d57a435a6ab4a16aa59c1529f414c894e6271efcbf7f990fbb8
MD5 0c08e83823f131d4f0a11116952b9082
SHA1 33e43c94c8e0a607579e4691e3d89500b40245eb
SHA512 6f626fe6624bca0cff60216c3fc7c8190b93d14863237f2572e36808edcd338f116fedcbc656147e7bd6933b01e523f29dc3b3daef8a7fc12eacec5b71941a60
SSDEEP 384:qZcI6R38N8P1M/ic8dIJDZNfNoXOVSUUd2GMX6kETRzcoXfK86sfxEZxxsIj4lB6:I+3qMIDZIO0oGEQNzc4ReyIsPDMgLJK
TLSH
T1AEF2BF32FD649CB7ACEA9386BA077242BDF4612781CC6D9486ED5F0C05876DD034B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 33664d4d2bdbb1817718c1dc67c83cd9df91b407411096457da4854c449cee52
MD5 35d6663c33f7bfb79a9bdce011e7eb6f
SHA1 d0655dd32d35759e55c096b763088a448fda1bc5
SHA512 41653dfe740c99ed6e7b122e9716b57272a647af1d48c00bb931b7c7b7da476105c12e13621a08a131340b85b2e85408be6be39ad44c79616634ae449bd65306
SSDEEP 768:JFQI3rwgGMIDZIO0oGEoNzc4ReyIsPDMgLJK:II3UNGttc44bsbMgLJK
TLSH
T120F2AE32AD54CDBBACEA9B86FA1B3202BEF55167C1C8AD9497DD9E0C05471DD034B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 efd907d29c6c95b6fbdae42528d6657743d2079e5f6528e557a0d5479932700b
MD5 5b2213945bfa110e6ea9c55e374a9be6
SHA1 4d53cec094ba35b2316ea5143f731f2354594029
SHA512 e0ecc3c4f7f6fcf0ccaa1ac622d31274a6b3741088b3d34cbce5840ca1924cb652334ebb908314a1c9d33ba79f299e5874a1e0797a5cd1faf4f77ec187ab11c1
SSDEEP 768:6rv+4UNbds38hDZIO0oGJNzc4ReyIsXBeVH1S5D:6bsbS38GJtc44bsxEH1Y
TLSH
T13B03DF32E8688977ACF69686B40B76537EF8611782D81E94C5DE1F0C4A8B5DC130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d2f225f-3a92-4041-b3f5-16ea6f310bb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6d2f225f-3a92-4041-b3f5-16ea6f310bb7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download