c43b7f004363d726c6881225894e9d4c8ad4e0c17676912801ab5471bdc50920

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261102-w1999aev7l
SHA256 c43b7f004363d726c6881225894e9d4c8ad4e0c17676912801ab5471bdc50920
MD5 a02f69c3fbe4d7c6fe0316a4c362f221
SHA1 d95a0fbd82d1bc0eb3b142036447fe415f9e73ce
SHA512 85641eec327e99d5c2cedcb7a6475e079316bf57c8ce595cfbe821082161eb40c0fc7a9d9a5023e3e7fab49a5ee5cc326696b8415b224f02e67a41ac1a5b388b
SSDEEP 384:GQy9+4LIZecuHL9THymEewejc6V0v2Me/qcw0ceGeT9MYrxkq:G5E4LKecuHVymVjciGwLGeGe+Yrxf
TLSH
T16603B91BB8C18C320277C2E59E55BF2EED61821B920A084836FE4797EFF2D554E5358B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
524	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{CFEBF339-427F-43EC-872D-806444B8E736}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe
2564	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2564 wrote to memory of 1100	2564	msedge.exe	89
PID 2564 wrote to memory of 1852	2564	msedge.exe	91
PID 2564 wrote to memory of 524	2564	msedge.exe	90
PID 2564 wrote to memory of 1852	2564	msedge.exe	91
PID 2564 wrote to memory of 1852	2564	msedge.exe	91
PID 2564 wrote to memory of 4868	2564	msedge.exe	92
PID 2564 wrote to memory of 4868	2564	msedge.exe	92
PID 2564 wrote to memory of 432	2564	msedge.exe	94
PID 2564 wrote to memory of 432	2564	msedge.exe	94
PID 2564 wrote to memory of 432	2564	msedge.exe	94
PID 2564 wrote to memory of 3316	2564	msedge.exe	95
PID 2564 wrote to memory of 3316	2564	msedge.exe	95
PID 2564 wrote to memory of 3316	2564	msedge.exe	95
PID 2564 wrote to memory of 4272	2564	msedge.exe	96
PID 2564 wrote to memory of 4296	2564	msedge.exe	97
PID 2564 wrote to memory of 4272	2564	msedge.exe	96
PID 2564 wrote to memory of 4272	2564	msedge.exe	96
PID 2564 wrote to memory of 4296	2564	msedge.exe	97
PID 2564 wrote to memory of 4296	2564	msedge.exe	97
PID 2564 wrote to memory of 2156	2564	msedge.exe	99
PID 2564 wrote to memory of 2156	2564	msedge.exe	99
PID 2564 wrote to memory of 4872	2564	msedge.exe	100
PID 2564 wrote to memory of 4872	2564	msedge.exe	100
PID 2564 wrote to memory of 4804	2564	msedge.exe	102
PID 2564 wrote to memory of 6096	2564	msedge.exe	106
PID 2564 wrote to memory of 5920	2564	msedge.exe	107
PID 2564 wrote to memory of 4960	2564	msedge.exe	108
PID 2564 wrote to memory of 2228	2564	msedge.exe	109
PID 2564 wrote to memory of 2228	2564	msedge.exe	109
PID 2564 wrote to memory of 4272	2564	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x328,0x7ffe1596c188,0x7ffe1596c194,0x7ffe1596c1a0
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,7002609486143726104,8652923006906998972,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:11
  2⤵
  - System Time Discovery
  PID:524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,6115430753616892229,18058757864926783290,262144 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,15175971508493294550,13292474715839311307,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:13
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,16497337003552226966,5923528720907245003,2097152 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3684,i,1206570578669000557,3208854332223851831,2097152 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,8199193977836922567,14086157919656289023,2097152 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,9831398980124149126,9217844297412307744,2097152 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,3010170131364366599,14535900219228196114,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,1506937126741641710,11853452688588277152,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,7824076574586376833,10862051961254585496,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,7824076574586376833,10862051961254585496,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,18130001302844725458,17344523898742190871,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,98895405176861928,2670095928656330065,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=604 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,5971924287190577778,7820114884569299355,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,230353882202742275,18423110703919761146,524288 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,12894168234372198274,1500987013110296082,262144 --field-trial-handle=2108,i,13598433762247449270,12161586878622081736,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6ca080bf-3170-4516-ac01-ce84b72f4fc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ca080bf-3170-4516-ac01-ce84b72f4fc1.tmp
Size 33KB
SHA256 a3039555fb9d8eb13194591684ffe2511ca1cb9317d40c54ba9e19da5d875da4
MD5 a0b62ebb2bfbb1dd0009944f53d287b3
SHA1 edb4dc6fa5f9b4c4302433652ad300617be10dc4
SHA512 857bcc977b466d899f7a04010cb11c537c47abee280555cc1f717674ccdabaec61906ba6e83ce5ced30ad06d104ec3f843e3e721e083cba38f050e7cee3d3cde
SSDEEP 768:tz3dU9TOfkfqSfJtLyJYe1ELsAvC8/YE66E75ESLK:tz3ZfkfVf4Ye1EQujY6ktG
TLSH
T183F29E71ECA48D771EF29698B3462B17FEF48113C4C85B94E5CE2A0C05C76AD634F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86e69449-5160-4a3a-8215-abfa2a636e9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\86e69449-5160-4a3a-8215-abfa2a636e9d.tmp
Size 37KB
SHA256 9eb27de338cbec01da02d2a2e5eb7d4fbc55bfdc6039be89b522c7327ac27df4
MD5 093a69910c80cb31ae6c92a5a8c57bff
SHA1 8bdb4bed1f7bffa734d87f72214b10d7a2c0e405
SHA512 9f6c19cd375c108ab79d41d0fcd7f54975c83894ac33f6c1faffc273746257bb08faef078674b64921505d38d46969f7902ad329ecc92f80ba1fb5eb53275a42
SSDEEP 768:h/UxvxjgC+i3Er9TOfkfqlKJYe1ELsAvC8/YMIDSHrkw:0Zj3+i3HfkfHYe1EQujYJS4w
TLSH
T1CF03C031ECA48D375EF2A688774A5717FEF4412394C46BA496DD2B0D06C73ACA30F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bb4fed3-2557-4cd2-8d1a-17f4971c68e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9bb4fed3-2557-4cd2-8d1a-17f4971c68e1.tmp
Size 38KB
SHA256 007824941ca57c090ca6ec31b21deac7cb9d91a31e982045391c3652318d7516
MD5 6ae4b4835b37d487365562b18e43308b
SHA1 7c80c83823b0330532345c64ef548e65289a2126
SHA512 0b942aae87d2998e33e1be54ca74f19e614e19f9fb7bc5e6f4f5abfe40edd2bf1ab0c0731b9d30b5d89b6e27d5f76cd2aedeecd27137918bc22f907c7bdc49d2
SSDEEP 768:9/UxvxjgC+i3vi9TOfkfqSfJt9yJYe1ELsAvC8/YN66SHrkw:gZj3+i31fkfVfyYe1EQujYRS4w
TLSH
T10703CF32EC648C375EF2A6D8768A5707FEF48113D4C46AA495DD2B0D05CB3AC630F49A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c3ab4fa-73bc-4db8-97a1-d8e00a2c4f9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c3ab4fa-73bc-4db8-97a1-d8e00a2c4f9e.tmp
Size 38KB
SHA256 5824b481540a88b1559402bceefe0384d3e870485e2f90c0797b7b3ad6a655ae
MD5 6a797c8268b3ca3045656d47773debb8
SHA1 2891a43ece57cdb848870bcd4160c878d8977e99
SHA512 ecbeff0ecf98a1208e1d31bb9a62beaf33bec1ab02777f154a8264e706cae14a7afa1585e51c4c2eef0090710bda091435af35564141c50f61c44952663045c3
SSDEEP 768:w/UxvxjgC+n3wU9TOfkfqSfJtLyJYe1ELsAvC8/YE66h9s:dZj3+n3MfkfVf4Ye1EQujY6js
TLSH
T10103CF32EC749D336DF29698734A1757FEF4812384C86AA495DE2E0D0AC73AC534F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09267342-36c0-4a44-aeb6-8e1b7c135e91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\09267342-36c0-4a44-aeb6-8e1b7c135e91.tmp
Size 105KB
SHA256 baa37fb90b22728e8621cb1e0cd8370d14339295fb597cb899c58908f1d9ea43
MD5 3cf096da5ebbeb243b3cc63b1ce61c42
SHA1 ca076b08c459cee4e3c214a706dff7f9e182cb83
SHA512 9947e993a1b05c95053c60c8e5a9c544169c0476f5ca113971ea72db5ce4a94442075b08a2a9e36d34e5f00f8b4a8b4233e22fa2a713e941c9d3b5cc8e620092
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

69471fe6-94a9-4dcd-891e-95d14f5fc580.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69471fe6-94a9-4dcd-891e-95d14f5fc580.tmp
Size 11KB
SHA256 2b576af8e0fff978b679ffa88f6d65999631c24f9140ddeceb833866fce8d1e0
MD5 ee0162badbc8590c8d743fc74e78bfb0
SHA1 43a69df192d818fa19f0201b2b08719ffe058e56
SHA512 d85fb0d117888455b5c72be9cada9bf24e250ac060eab7ead94481beb1b0074bcde8d3b67abb6d11d4394b64773d2d9e06039fb7ac1e7cc0ded61f5516faf532
SSDEEP 192:sxRRRWbp/feDs3qrVi1zoA8p4i/g6+WNIYx6pTU4GbmcIgD5J:sxRRGp/fis3eiYH/5InUHmAX
TLSH
T11732B616AE28AD3B8CD7D25DBB55BF13E2F91032A1951E44FAFC861C05E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

895901a2-0ded-47a5-ba43-76f8013cc96f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\895901a2-0ded-47a5-ba43-76f8013cc96f.tmp
Size 11KB
SHA256 07e3c510cb179ecffcdaedc4c4c10369b061d88d9f5f71c1715dd6cb119068ea
MD5 56d2df36d77d535332dda628c511e37a
SHA1 2fe4057118f438154c6822a143f567af270f8c04
SHA512 b0845057fe56c19254ade40700331fd0ebaefa3d4868325f75181c580140cdcc936e74e342e51aa179f48c0e3d7f77613079fd7d12cc0e757f5f0a4d06fcf62c
SSDEEP 192:sxR7qRWbp/feDsMqrViozoA8p4i/g6+WNIYx49NTU4GbmcIgDfJ:sxR7qGp/fisMeixH/5InPUHmAV
TLSH
T15A42B616AD28AD3B9CC7E25DBB55BF13E2F91032A1951E48FAFC861C05E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f6bb68755de44e340c48bbd3c915d21c6e03e955b76fa7be77001d463e68a46e
MD5 b2a62599f94ed0d5d69501e556bf9c58
SHA1 84a83a4abc0650ba62ff06355244964059b25abd
SHA512 b59443634a1dd0a32485a9f7a00ebef655a68078fb183190c617b506e2db30530afcab425d15bfd7e5184a500d26499de382f5e607804e313c0c19bb986987a2
TLSH
T1FB513FF5339C90F1F768007147C3FD83B6B145D0D54A1E5210E8CABDA8C63259CEE28A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2b0e6235384ae414db0f2a6ac7564a52ac01eaff16dc44777bd598f4ba76bcb4
MD5 1e8093d6364ff8e8ae59f8869c8ad9fb
SHA1 e47241e39b9edf1003625b315d3b36a2e67a0b1c
SHA512 b11718a17b58e46a8137b079f17af9552fb55eeda9c751ee7cc99793282e135b5cfcf408410db4097706c7dd97e779d7fcc9d701a313839cc443d2b463df6169
TLSH
T14C512EF5339C90F1F768007147D3ED83BAB045D0D54A1E6214E8CEBDA8C63259CEE28A
MD5 SHA1 SHA512 TLSH

Submit Download

6c304aa9-3a91-4d6a-ac65-2077914105bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6c304aa9-3a91-4d6a-ac65-2077914105bf.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3dc000f5-d8f8-4e2a-9c49-374305307d27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3dc000f5-d8f8-4e2a-9c49-374305307d27.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

90564754-9075-47c7-b76a-a8d07d98f745.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\90564754-9075-47c7-b76a-a8d07d98f745.tmp
Size 2KB
SHA256 f42ec83d98e03cb1473b9b5dd68e6641462c9acb7a545d381527b050a49ac9eb
MD5 47a6896f07346c972fe3baad9f8a9610
SHA1 75a68603b3e3b45f98758a233c235114b522a084
SHA512 37dd694ceafb295574559c5c6b887f1248ef3c11e426ff9c2bd344bb0497f42e8806404e9d17d6f53b77017b62accc98054a469d0f215a075f7d17461f6b14b5
TLSH
T1B9517DF7C3E4866E890196F1AB146E2FCE2D0516432C7C6689E4AE1B93F2472D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

acae34c2-ed03-43ed-ac18-8660c667ad5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\acae34c2-ed03-43ed-ac18-8660c667ad5f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a7f37e4634b86c88c6ea6f2f5278752905473068a68e632f2f947dc25baea54e
MD5 de8a4a863cac768a557d5a689a24f65e
SHA1 762995106ca9540427a25d52ac9bf81ba784ba17
SHA512 1955cbec2fb315e3d3174a37154ff10737af7971c3a4792d3f96ac5b8da01fc0211323bb1c8ca8d0f77e1b2ed7acb897b129b21625c74061e397066217e5a9ec
SSDEEP 192:sxRGRWbp/feDs6qrVi1zoA8p4i/g6+WNIYx6pTU4GbmcIgIJ:sxRGGp/fis6eiYH/5InUHmAs
TLSH
T12532A616AE28AD3B8CD7E25DBB55BF13E2F91032A1951E48FAFC861C05E66DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 20a19a67f296669f265881b2fb5dc14ec4f2c9d3d508caa0211d1ba26126baae
MD5 151a680e92d8393be6a8c9af4508d49e
SHA1 803a09b2f2b33c38e1abcb6e1f2d5e6f52a3688e
SHA512 0a9506a93d24be823e2e3c96fc47a5ec2c9aad3374867468ca7167fa3ceb94f856a65135dde5a3a581288c7f62b2e8d65ac4789ff42f9b3fff060518fa685de6
SSDEEP 96:KU+AKrquayhkIy0UhToz8ZghKhIZyh9KiLgEXaKw8Wx:2rlLJx
TLSH
T1ED915661313B0254393D350CA1F5AAAA438736B3303DE66F3BEA88954D66E140EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a560f9bc-1530-40a3-b19c-66b120aac0af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a560f9bc-1530-40a3-b19c-66b120aac0af.tmp
Size 23KB
SHA256 eae6673cbd3668412647cc6b49d5ef334966f690c9e64d9ca699721176bde893
MD5 0f7e471f20153945de71044567bf1886
SHA1 514b53a8af8c256c6d28342c01c1eca5afba9a06
SHA512 ba6cb9045200277e6eff31d3cdbe61e33a9bad3b933c95414832e9a4533a9902ee0151315d92d613f5094626a7488362f8d392f2dcb51a180dde0d00c82d1a0b
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMGrowsi:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0VQ
TLSH
T122B2DA2B644DC77F8FC00AAD9C196E9B7D9802C79A548D4047FE994C03C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b47b1a7d-8506-42dd-9d54-038ed0d95671.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b47b1a7d-8506-42dd-9d54-038ed0d95671.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e426b016-6f7d-49c6-952c-c366ae18916a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e426b016-6f7d-49c6-952c-c366ae18916a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

181084ab-ce27-4ebf-be14-62f75a9b2226.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\181084ab-ce27-4ebf-be14-62f75a9b2226.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a68eeb75-f6bc-43b3-bf10-b7e066234942.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a68eeb75-f6bc-43b3-bf10-b7e066234942.tmp
Size 36KB
SHA256 1a9061f13fe774e6e5d820aceb309132c21c72e29b7ae87a75811159e6d27379
MD5 d4200669b570a3564b362b71c0b95206
SHA1 cdef0a81929dafd3ca9e4f858bfda84b60fdffe1
SHA512 e07ba8ae2498c1edf0575a65d89b926694488ff44d36549c8ffb6d0078dadc407b59656f91d482ecf3f603b9d71e6b4f2ea00eb6d6a757e26c694fa6647544ab
SSDEEP 768:UFdI37wgAU9TOfkfqSfJtlGJYe1ELsAvC8/YE66E75ESLK:4I3+fkfVf2Ye1EQujY6ktG
TLSH
T1DDF27D72D894CD7B6EB69B94B3492717FEF48113C4D89690E6CE290C01876ED234F865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63687976-1989-4c45-9faf-773eae82fce7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\63687976-1989-4c45-9faf-773eae82fce7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7c1e272-e751-470b-820c-509b9f91f64b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7c1e272-e751-470b-820c-509b9f91f64b.tmp
Size 33KB
SHA256 e775fcc3f56f78a989155c7cfd4a4c59682554e659a59102dc76e240fd2fdf4a
MD5 80bfe8666c31c28c2d7a2f6e6a15b5af
SHA1 4cb1b653e5574af6d2256f09af4cead46022b07d
SHA512 80311f7ea36f516537cfd0967cd79e091d3227cc63f881dfcae8440162d066d80d2f59fc2e90e583627d1fe4d6f8875c842f3503f2ebda099b5883e956515cb5
SSDEEP 768:Az30U9TOfkfqSfJtLyJYe1ELsAvC8/YE66E75ESLK:Az3QfkfVf4Ye1EQujY6ktG
TLSH
T16EF29E71EC648D771EF29694B3462B17FEF48113C4C85B94E5CE2A0C05C76AD638F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download