40e6d16c692a242eb47816013dc9fa8325ae6ae190e3e60d6eff7baac63f83e9

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261006-w2evqsttbs
SHA256 40e6d16c692a242eb47816013dc9fa8325ae6ae190e3e60d6eff7baac63f83e9
MD5 2ef3b3a3705ce6d666671c6be4f2fc27
SHA1 828d74fb159b6482d98f502b116f8b2a0196055e
SHA512 b7eca3a780eaa0eade48ec39d550062edbc1107238551879767529ff7bfd9fecf8686601bc4d2667ab17d0091090e72aaf465985d13d3fa979f71499d7270dc8
SSDEEP 384:GQy9+4LIZecuHL9CHymEuwejc6V0v2Mb/qcw0ceGeT9MYrxkq:G5E4LKecuHCymBjciGBLGeGe+Yrxf
TLSH
T1AA03C91AB8C18C320277C2E69E56BF2EED61821B920A084836FE4797DFF2D554D5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6096	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{5E6D2D4B-B62D-4307-91D2-059F91075568}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2524 wrote to memory of 4468	2524	msedge.exe	90
PID 2524 wrote to memory of 2900	2524	msedge.exe	91
PID 2524 wrote to memory of 6096	2524	msedge.exe	93
PID 2524 wrote to memory of 2900	2524	msedge.exe	91
PID 2524 wrote to memory of 2900	2524	msedge.exe	91
PID 2524 wrote to memory of 1504	2524	msedge.exe	94
PID 2524 wrote to memory of 1504	2524	msedge.exe	94
PID 2524 wrote to memory of 4536	2524	msedge.exe	95
PID 2524 wrote to memory of 4536	2524	msedge.exe	95
PID 2524 wrote to memory of 4536	2524	msedge.exe	95
PID 2524 wrote to memory of 4940	2524	msedge.exe	96
PID 2524 wrote to memory of 4940	2524	msedge.exe	96
PID 2524 wrote to memory of 4940	2524	msedge.exe	96
PID 2524 wrote to memory of 3368	2524	msedge.exe	97
PID 2524 wrote to memory of 1744	2524	msedge.exe	98
PID 2524 wrote to memory of 3368	2524	msedge.exe	97
PID 2524 wrote to memory of 3368	2524	msedge.exe	97
PID 2524 wrote to memory of 1744	2524	msedge.exe	98
PID 2524 wrote to memory of 1744	2524	msedge.exe	98
PID 2524 wrote to memory of 1084	2524	msedge.exe	100
PID 2524 wrote to memory of 1084	2524	msedge.exe	100
PID 2524 wrote to memory of 2528	2524	msedge.exe	101
PID 2524 wrote to memory of 2528	2524	msedge.exe	101
PID 2524 wrote to memory of 2044	2524	msedge.exe	103
PID 2524 wrote to memory of 3576	2524	msedge.exe	107
PID 2524 wrote to memory of 5864	2524	msedge.exe	108
PID 2524 wrote to memory of 4536	2524	msedge.exe	109
PID 2524 wrote to memory of 1300	2524	msedge.exe	110
PID 2524 wrote to memory of 1300	2524	msedge.exe	110
PID 2524 wrote to memory of 4736	2524	msedge.exe	111
PID 2524 wrote to memory of 4736	2524	msedge.exe	111
PID 2524 wrote to memory of 5968	2524	msedge.exe	113
PID 2524 wrote to memory of 5968	2524	msedge.exe	113
PID 2524 wrote to memory of 5776	2524	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffd49aec188,0x7ffd49aec194,0x7ffd49aec1a0
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,10876577699627495768,5894203585697131176,262144 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,13180921742533414720,7070634117778752781,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,1277058708294644482,10431251512888387635,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:13
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,12367302593485879708,18090720217724603046,2097152 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,5256252152335370429,4039455988975899830,2097152 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,11553843390208971956,1132543190038067520,2097152 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,7215154420946509058,6086930343693346725,2097152 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:9
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,9007853262291658195,16485595147579960542,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:14
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,4138952009720994909,6022232827931386275,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,789965275307968711,10824344089796770567,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,789965275307968711,10824344089796770567,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,4769184247798896909,12755270518626639850,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,13051125444893860134,15713297886688691641,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,13589743350829256817,11707234063201396622,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2888,i,6086894643420309187,6522591067877325118,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:14
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,4580551147760463875,11369942805801361627,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2748,i,3849969196341284517,7744252839338702162,524288 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:14
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5244,i,5168515046048760680,10461089476305444800,262144 --field-trial-handle=2268,i,17394706365835861886,16185393866490668280,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5776

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

510eef24-1d24-4585-9036-53b7dfb3632a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\510eef24-1d24-4585-9036-53b7dfb3632a.tmp
Size 35KB
SHA256 e9b29fc864551af46089375dc0b98c2ec52440065644563efe28e2b50afd3141
MD5 cca59c49818d96847c2bf07262f41d1f
SHA1 e23d66b827fd83104c44017ed241103a1f362047
SHA512 3ed08be12d75a8d647cbf02954b8f461c52fc76a2a7003ff560322954b199c56152c4ea668ae63af649e8fb973f3196574bb70fc1ce2bb3bf4bf9ce065a28209
SSDEEP 768:5o3LHnq9gm14YLOs4DmGA5b65Q92RQMPbTRsPUz:5o3jneYAF65dQURsMz
TLSH
T169F2AE71DCA0DEB76CB991C07687B2466FB94123D5C896A058EE7F0D05C7A9E030B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d8af85e-67e0-4a00-ab6e-7b8c0abb32fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d8af85e-67e0-4a00-ab6e-7b8c0abb32fd.tmp
Size 40KB
SHA256 e17b54b59714c011fca0d8f7ec3a3b8577817ae589b2e78f75e290633154dbc6
MD5 9aa79097f5bd84247ff862731d98fdf6
SHA1 e9a5dfbd5c654f3ba01e5cbe810aa7172532e1b9
SHA512 b423f6075525aaf130c342246af19536d5e3a4f3a54f6e3c5d7313f7c2a5ac35ca6dc4b55f4f19a964f14188f80243fa96b06c6bb9dbe2c58e36e3fe55bc1d3f
SSDEEP 768:n/UxvxjgC+Z36HnX9gm14YLOs4DmGA5b65Q92RQMPbTdes:aZj3+Z3gndYAF65dQUEs
TLSH
T1FA03CF32AC60EDB39CB5A5D03647B28BAFB54573C4C999E448E97F0C09C768D430B95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94293d49-20ab-4e3c-91d2-6bbd935baa3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94293d49-20ab-4e3c-91d2-6bbd935baa3e.tmp
Size 35KB
SHA256 8466a9d837adb4b41a78c6dda0d2b61d0c8cf780ca41817255cc3954c0eeda1f
MD5 d96bc992d1a63c4280fdca78f9b222f4
SHA1 f0e7f60215c6c6052e5b14a240bd88f2ee2bb951
SHA512 95b276cac1981143f818448176a28ce0f2a47d8684be932312472a277d1e1c5ae2600b24dd57b77a5c7efad1fa5755457e89d761068093ce23775459b71b0312
SSDEEP 768:7o36Hnq9gm14YLOs4DmGA5b65Q92RQMPbTRsPUz:7o3gneYAF65dQURsMz
TLSH
T167F2AE71DCA0DEB76CB991C07687B2466FB94163D5C896A098EE7F0D05C7ADE030B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

3f837f3a-0b1d-463d-ad14-831cd1b2f142.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f837f3a-0b1d-463d-ad14-831cd1b2f142.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

54e4758c-bf69-4ddf-91d9-eeebcdcbd766.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54e4758c-bf69-4ddf-91d9-eeebcdcbd766.tmp
Size 11KB
SHA256 41ed24db741277e006d141b8b91aa697fb728f49b42051b5f19f8bfbeaba0256
MD5 4ab0a4f5c06620196426d45cfd5c08cd
SHA1 dad910eaa2af1d7f5bec7e303adaec814641db00
SHA512 ecdf0bdc4afb4a8a9d8dad71f5892bdd60a1b8ff4b3b10191eb248023b0ce57b2d613016e842277b20579ce3b99c0ad62e68aa5703827ab17210f00a5b8ee4a4
SSDEEP 192:sxRSRmbG/fsfspdyYhgzoA8p4L/g6+WNIY28mw+GYIgDmJ:sxRSKG/fsfspdbZG/5Izwi+
TLSH
T19232C915AD28A97B4CCBD21DBB667F53D6FD5033A4D42E48A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 412c846acdb7047fe26e3faea7c673aa9a22799b92920b1da56d7812b446b745
MD5 e6e836cc4404c655deacdad85c21c34f
SHA1 5e9b3114962a2f61480dea05c3fe52ae4dbc82d7
SHA512 509e8f642c7701ab8410d6ba132f22a8ebe5d23256b02c4d38a0ce5e8162828a20ba879a54ec3e155d5354a9c9ebdb03eac8b0303b1078e88fb27619a47e6e48
TLSH
T11CE026E418CAC22FA2487447437C930CC392366B92C17A9E3B04C9C57D85152A282BA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0e5cbe757b6740fc31288ebb4fd0253e0d59d39127aabc3018299fb7fe6d3bc1
MD5 ab015ac2c6dd5ba96d8c2a84092dbaaf
SHA1 775d8f3be325efd926ff285250173749aea5a97b
SHA512 ecd72d415ecc57fcfef69d6274911b9037fd8a16b6e9c7c6d9da2ffea2bb098d1217ff7a6e99c4d993ff50865d0a3f7cf24c07b5051d64ab6ef19a854c1e621f
TLSH
T194E026E424C8C73FE3087457017C534C83E0365A92C06A8E3744EBC47885440B293FE4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 73c4a28aeb3a72ae72c9507aa96ea0b918cb34c63fb02ab46416e3a88b466c61
MD5 699a8c267fffe93a056bae094d4ec2b0
SHA1 c3b1821e3c476e136204af5a50de356fc80b0ad0
SHA512 bd977d2d4b37f712705eb4a9a89df0c123118c6735a142acbc32ff6b9b09c05e56767c32d63f1441709e52e723a1718d20aae351dea8903d81d8183bffae775d
TLSH
T1D151E985C9E05250FB58027249D2F18B3EF8C9C0D7E79E0215BEC9FDDB2B798AA84104
MD5 SHA1 SHA512 TLSH

Submit Download

cf5d7697-c2bd-4074-b8f5-0e4914a9a13e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\cf5d7697-c2bd-4074-b8f5-0e4914a9a13e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

327ef635-1934-4464-8570-e2186580ba37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\327ef635-1934-4464-8570-e2186580ba37.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

947e34d2-c266-4827-840e-b3d63b09b046.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\947e34d2-c266-4827-840e-b3d63b09b046.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f5629e5c-089b-4d50-8beb-7eeb40b748f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f5629e5c-089b-4d50-8beb-7eeb40b748f9.tmp
Size 3KB
SHA256 41bdeaa037cf93c31eab53ab529527eddc984a76ddd106b181ef46f6bda155e5
MD5 ef4399d29ee723de88ce310ef94db25d
SHA1 a4e44c5dd649211599a90b855fc73b32a7a8dd5b
SHA512 47e7ac4a3a23a29b319ba0e2b73bd52d3f20fa97b70c2e253766d1a70d612553264d31ea6323630d08f595d3f7fdae40fefc30de752a81a2ea26aaa70680b887
TLSH
T151519EF7C3E8867D890156F0AB146E2BCE2D0955832C3C56C9E4EE1BA3E24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 40ccb2dd71edc1c75da7df47dd70eb71518d02de9050017754c6fa196f56561b
MD5 14ea9883d3107b87cd23e7df74b0233a
SHA1 6f1b549fcee0fe88a4909fd1e245f2eb457c1ebe
SHA512 d39c2daa7065af17743f0c1dab0daf9eea0b66aa763ac58d0468241c5a380b2801524d406e8ede0a43e9e4db67d5772ac59fdee6745405f961748b7e989b0eca
SSDEEP 48:K0mBcAeEE9bI/wISY9K981+9xWtYXoEGyL5IVpz3Lkb3SPISBkK9B1rkxJ0Yyz7I:K4NqKOg6iKkKfaURaK6A6h
TLSH
T1DD917402706B86903DBD3A4842A9A71A036231F33419E5AB7F7C44E79D6EF084DFE5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 e03328a67b39fe71db23c27e625ee55a9919d477902dbb472f74969eb0916ec3
MD5 abc95048e0d19f15ab7a05d49faf3c87
SHA1 5a6ed498e0168b9510e43a256fd92b579a82bedb
SHA512 b6a804d6bcb9c4e454443e41b1b6e888a805f2beca10cc5e4c94e8b10e630e81f89d4bef7a0cee5455a1cac093b7d205105a34d2fde72ee9b234b4153bcc493e
TLSH
T14881630270AB86903CBD354C42A6A61A076231F23519E5AB7F7C04B79E6EF484DFE5C9
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a575dc7e-fd24-4471-b6d8-a502d66577a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a575dc7e-fd24-4471-b6d8-a502d66577a6.tmp
Size 23KB
SHA256 ec656d2a32ee8e72f5cd651bdcbd07979ff97f285aaa04f86f2e3a3999b6545f
MD5 d029e26a9de1241ac8aac3a1edb92edc
SHA1 2d57a02a2bc533a027ee78b9da4119acd89fe616
SHA512 11aa0c0d82aff2f088e05dc05bf8d7cbbef21f317cdf09e9947e999e61f7a3c1ef0cecc1cfcd52d95b7f02763bfc12cf80386362421b649babcca22b7309264e
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWHCroHJ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VJ
TLSH
T1A3B2EA2F644CCB7E8FD00A9DAC596F9B7E9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b56316ab-8d58-49df-835d-2a92311c74fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b56316ab-8d58-49df-835d-2a92311c74fe.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c00b573d-fdd5-47da-9799-2049e7d5619e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c00b573d-fdd5-47da-9799-2049e7d5619e.tmp
Size 11KB
SHA256 36ef493c384dd34fb3704fdca28ef9ab09461630512ece482f56a975c83cbc02
MD5 36afd0094450cb959c0eea11625ab139
SHA1 b08152c5a4674f3b587a9bdf2fdabc83cd437d14
SHA512 d69aaddbeb08f270ff85db696e3b2452813703364597a2a063832b90f936ab858c091ded4bc9654cb22b2a286e01f076fc17b31f044534e5baa99502afeccaf1
SSDEEP 192:sxRPRmbG/fsfspryYh4zoA8p4L/g6+WNIY2ymw+GYIgD8J:sxRPKG/fsfsprbBG/5Itwi8
TLSH
T1DC42C915AD28A97B9CCBD21DBB667F53D2FD5033A4D42E48A6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe0bbd15-d31b-45d5-b8a0-afcd37e8ea28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fe0bbd15-d31b-45d5-b8a0-afcd37e8ea28.tmp
Size 11KB
SHA256 6375bbb18a190d5c201b34452bca66f24c62942e3f37d483aa240f62b6132853
MD5 097a489b8c539cee390c73eeec6ca73f
SHA1 20ef4ed14b7eff3115f5fba7cd54a99ac90d72d5
SHA512 3d8d7050792aa0ccd10ee5d08fb629be98c5a4e699cd7c4581f7b47eea98877df3abbfe93f4900e2e9dc25026dc7854c27b0471be6a9bc9ea7ed66a1f1b63b4c
SSDEEP 192:sxRhRmbG/fsfsidyYhgzoA8p4L/g6+WNIY28mw+GYIgIJ:sxRhKG/fsfsidbZG/5Izwis
TLSH
T19C32A9159D68A93B4CCBD21DBB667F53D6FD5033A4D42E48A6FC861C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc8c6b14-ae17-4e79-9d68-baff792a7eb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cc8c6b14-ae17-4e79-9d68-baff792a7eb5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c03c2e12-c68f-4c68-baf8-e2bf7bbf34e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c03c2e12-c68f-4c68-baf8-e2bf7bbf34e4.tmp
Size 39KB
SHA256 cf52162c269064502006ba2131e6c847c04a4a292175e73692853b7a7247be93
MD5 aa2817a79af10b7535082a5ba0cc7287
SHA1 a18df0f0ce23d88b39516d571c19b63c973c7cca
SHA512 7fed48ffff8ff51935109f3e97f3776b784a2adb04b5012d72fec5b9e5cb456ce525e3b59114389a54792a5a865fb61402f3eb472bda2bdb62cc0e9ad5298616
SSDEEP 768:U/UxvxjgC+B3zv5wgm14YZtDmGA5b65Q92RQMPbuFj0O:BZj3+B3jY3AF65dQlFQO
TLSH
T1CD03CF36EC91AEB39CF95680374BB35AAFF84073C1C895E048E96E1D06C768C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d77d894a-407a-463a-9cfc-d6642172bd6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d77d894a-407a-463a-9cfc-d6642172bd6d.tmp
Size 37KB
SHA256 2d33146b41fce6de8942969658c5c7cf9b1eafc03458b070b304b108403de51a
MD5 ea688c6660d0e7a24ffc254f82c87bcd
SHA1 b54cef2cc9eb6dd5cc234ba837155332835df125
SHA512 fed25361f3284c38560c0986464611ec79da025bec09b8e128a78e697959724ec961ca8c8fe3a0c5b4d2ecf7f6894b2b18d555aca540353eaa7bb71a912df346
SSDEEP 768:RFQb3CwgyHnq9gm14YLOjDmGA5b65Q92RQMPbTRsPUz:gb3FnLAF65dQURsMz
TLSH
T17D03AE72DC90CEFBACB99AC07647B2066FB94163C5C8D6E0A5DE6E0C01979DD034BC5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download