11b9a2298e50c40a44ea03742ba39b2f5cdaea7bcb55bb367174cceb7ad186f2

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261102-w2fr2aev8n
SHA256 11b9a2298e50c40a44ea03742ba39b2f5cdaea7bcb55bb367174cceb7ad186f2
MD5 ee0ce3dec1b2cdfcb71edae6e86bfd83
SHA1 a7065ad87801d66c710adcb741e4a77d23daa192
SHA512 ec634a1821936c013bd2e2f89dc9e0942c8d680f3a84f84361c7ebeb834473367ec3b70cf469bf5476e8bd5e854a08b3d0ed805c5f1060256fe20bc7e36b0578
SSDEEP 384:GQy9+4LIZecuHL9yHymEmwejc6V0v2MCBAi/qcwMQXAT9MYrxkq:G5E4LKecuHCymRjciGNiLwRA+Yrxf
TLSH
T15303B91BB8C18C320237C2E69E56BF2DED61821B921A084836FE4797DFF2D554E5358B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{8933FEFA-6042-46B7-AC79-9CCF5DBA31EC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
964	msedge.exe
964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe
1392	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1392 wrote to memory of 4392	1392	msedge.exe	85
PID 1392 wrote to memory of 2364	1392	msedge.exe	86
PID 1392 wrote to memory of 528	1392	msedge.exe	87
PID 1392 wrote to memory of 528	1392	msedge.exe	87
PID 1392 wrote to memory of 528	1392	msedge.exe	87
PID 1392 wrote to memory of 4692	1392	msedge.exe	88
PID 1392 wrote to memory of 4692	1392	msedge.exe	88
PID 1392 wrote to memory of 3628	1392	msedge.exe	90
PID 1392 wrote to memory of 4304	1392	msedge.exe	91
PID 1392 wrote to memory of 3628	1392	msedge.exe	90
PID 1392 wrote to memory of 3628	1392	msedge.exe	90
PID 1392 wrote to memory of 4304	1392	msedge.exe	91
PID 1392 wrote to memory of 4304	1392	msedge.exe	91
PID 1392 wrote to memory of 3124	1392	msedge.exe	92
PID 1392 wrote to memory of 3124	1392	msedge.exe	92
PID 1392 wrote to memory of 3124	1392	msedge.exe	92
PID 1392 wrote to memory of 4388	1392	msedge.exe	93
PID 1392 wrote to memory of 4388	1392	msedge.exe	93
PID 1392 wrote to memory of 4388	1392	msedge.exe	93
PID 1392 wrote to memory of 4116	1392	msedge.exe	99
PID 1392 wrote to memory of 4116	1392	msedge.exe	99
PID 1392 wrote to memory of 2404	1392	msedge.exe	100
PID 1392 wrote to memory of 2404	1392	msedge.exe	100
PID 1392 wrote to memory of 2208	1392	msedge.exe	102
PID 1392 wrote to memory of 3872	1392	msedge.exe	109
PID 1392 wrote to memory of 1044	1392	msedge.exe	110
PID 1392 wrote to memory of 3636	1392	msedge.exe	111
PID 1392 wrote to memory of 2028	1392	msedge.exe	113
PID 1392 wrote to memory of 2028	1392	msedge.exe	113
PID 1392 wrote to memory of 4892	1392	msedge.exe	114
PID 1392 wrote to memory of 4892	1392	msedge.exe	114
PID 1392 wrote to memory of 964	1392	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff85a66c188,0x7ff85a66c194,0x7ff85a66c1a0
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,15075208958381486744,13628622579242931299,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,15593859484300963617,11478648076578841264,262144 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,8336209766789496416,2273964037343704921,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,18191368209926820177,15366108880965522285,2097152 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5981276899774499267,15931840618039386199,2097152 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,15587949719946357195,8456933697456161519,2097152 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,6749078471068066659,12920532955620257518,2097152 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,14596038223150934767,14402445221577376318,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,17583198395029076571,4602857355288480585,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,16877958693982814812,14046903484803501930,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,16877958693982814812,14046903484803501930,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,11995571197833434956,2532449108327526003,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,16211116699572088117,4364251898952703408,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,11617610905200129439,5582168712301284991,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,15564863324631395229,9569017642929850652,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,8313880602627943452,9480794869006512884,524288 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6036,i,14469053601384756599,3576316760984005595,262144 --field-trial-handle=2372,i,9953124301961303755,8888240197920198505,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

52ea60fa-2493-4f5f-a091-0eb1ec7b9d44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52ea60fa-2493-4f5f-a091-0eb1ec7b9d44.tmp
Size 21KB
SHA256 1044a06486b620844f6f4c71da00ffc670a2461d24814ac4cef92fae26d08f7d
MD5 12a1f201302e04d6afd29ad68054cc58
SHA1 06f7640affa0c30c38dcad93a9e27ac1e9b42113
SHA512 2867969bdc919cf8f558bb66146a14af3b7c68eabe68e645bee5540ec7a6136a403004ee7a99a9f44cfb39f99c6332544ee9d6cf710a353b603382bed136cada
SSDEEP 384:wiFzQkUSv4zsNY8TUNTUlIluKYGX5cd/BGYX5EaV84YXTNGH7vBEuHIIll:LFdEBwglP6JGYua7YxGH75EkLz
TLSH
T184A27D7398A4AD7F1DE39B50F14E3613DEB09167C9D56B90E6CD5A2C01CA1CC234BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b316b51-de77-41cd-89c0-4a17dc3890de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b316b51-de77-41cd-89c0-4a17dc3890de.tmp
Size 8KB
SHA256 45144a5c7640e42a4c301a95a78466d2ce259fa24a521de927323e5178a77047
MD5 4812f14ed3b71823ffc3df63e8603520
SHA1 f93a9422cd8cbbd8171ba2d6674eadf103ce1905
SHA512 59c67166f8767d0324b7c6a26619d8bba0a3e36558f5ac73ed15abd3291e1a6491823df7f14948e3f1d0505c0ae6fad4b2a0be0557a4d422b118be87a67f922c
SSDEEP 192:WONR6DphjqQmiUyR9dwGYX59ezTC5jzor3mLrYXT+BkII9q5FU6:WONR61IudwGYX5EaV84YXT7GU6
TLSH
T1AC121B36A878BC6B1DD2A595F08B3513AFA4512BEB847F50D6DC1B2C02DF65C234A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0dc3c770-7d1d-4c3b-9a85-871c1f9d5aec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\0dc3c770-7d1d-4c3b-9a85-871c1f9d5aec.tmp
Size 105KB
SHA256 2ef96264d2b79f2f32ba7c3f4d8bc3a7cd12206153f6218f7bbe1251f2de650f
MD5 1ad9f96c1fcd1af763818d9e108bb5f4
SHA1 1e2816ec93f878922501ab302f5c8c4e7ebcd07d
SHA512 e00a04412dedd2975b5ca272c9660f6c9931bacff5f3a31e6eda9d9dbf0a5b61954f0ec88458dfe5f52a32f35c3785be60c678cc8a35853099cfde0c58ccdbe9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T1EFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

00b6b530-ce3a-43a2-b3ae-452ff937ecab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\00b6b530-ce3a-43a2-b3ae-452ff937ecab.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c528103-1db5-45e7-b148-b83a10cb2753.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c528103-1db5-45e7-b148-b83a10cb2753.tmp
Size 10KB
SHA256 b4f358b4aa566074b5b36279bb0c8d86e16a151efb3d604e803f20828a208b4e
MD5 05f6ba0f7966770ed911160424db155d
SHA1 b0e274449191de446b4776af8c14d15d30320a77
SHA512 9802bc548bfadb8080402d00962946f9145de262c758dfbdc3b4711addadca9a26c145abc00af466b187be59dea7b2d4a941fc9125414a7eb2c97ef5ff1a49a5
SSDEEP 192:sxZNRYWc/f4sikIdpHNHW6+WNGYgsmm+NIg55J:sxZNlc/f4si9tHbGCy1
TLSH
T18E22B8126D38A97B9CC7D21DBB55BF13E6F9503291901E88AAFC861C09F77DD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63ef53d6-df19-4abd-bb56-1b8c195a426c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\63ef53d6-df19-4abd-bb56-1b8c195a426c.tmp
Size 27KB
SHA256 3255d42b90749d875d4118371ed80eaf883a86bc3f99e0063ab30f19c3a9a7d6
MD5 1ff612dca24161d9cca60d0476629145
SHA1 772f18012709ebfdd61854ae2d07cb81c734068b
SHA512 b6738d0b47b3d7a9ccde219518e47806d90ade6ecb1524e82be10bf86c2c1de194b4b079792be80c0965e15108b78ca9bb2db0d0f6c8d789e0808e1c81dea9ce
SSDEEP 768:4xichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzTroH42:4xichfPWvPZplu1jan+LKgzgY2
TLSH
T15EC2FA3B640CCB7E4FC01A9DDD1A6F9B7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ad23bf7bd75825b210b18e22e84a0cad9b386e06905d09331faeec46f2b94949
MD5 18885651c69bde942d09c0f7264a4c2f
SHA1 55300b2483dac50352f43b2c0f1174e8ef0ef7b5
SHA512 20bf52f695277a5db3307bb95c8137535768a773110c8e5eb38e197f74b46d3afa39b2cb0006db787f5f7278869b669ed6396e67b79639c5908ded1feb5c7d8f
TLSH
T1B6E07DC504C8C66EB73866C741FD534C83E0361BE7C8699E5717C48C7482044B3C66A2
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 280a25ca130cd913df743056532e2180b9fe98cf59bc574f2f0343256e4627ed
MD5 dab63a9b0003ba5f60bed10a126ab32d
SHA1 24c44674ea8836bfaf08a2d8451bbf96c57ba1e0
SHA512 063cc4c58b8c50670703520502adcf9e5014dd473765a943d606152b674241a66323b6e01256d59abb07270bd932b4fd7270ec709f163307fb8517ef16464a1e
TLSH
T1DA619141C0C0846ADFD44230A1F6A0A7F23172B4C4A7BDB9814CDCBE8B07F3D226B890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d964c6ec59887e24dc7a52c26481338fa900112276eb05bcb855b48a1d81e012
MD5 43467570716c118658cbcc39ffd3d37b
SHA1 bb454bb3b12f862df14565d64f5d6322f4be25b8
SHA512 644027a9d8bde79c15de641721b9e6484f6009b8c265968ee0c4315f611ec0d977d7e790ec3fbd3987f60c6de6b99202d50b0fdf494c1220bdae44fd301e164e
TLSH
T12E618241D0C0846ADFD44230A5F59197F235B6B4C4A7BCB9814CDCBE5B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

abb25792-0be4-4a46-9b8a-075d62c4579f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\abb25792-0be4-4a46-9b8a-075d62c4579f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

325a19cb-9c90-4400-ac88-66b0349d4bd3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\325a19cb-9c90-4400-ac88-66b0349d4bd3.tmp
Size 1KB
SHA256 daff78c12d2089574fcb7c16d99d2c4a91af966a3afed779e2c953553a47450f
MD5 cb8fc65fe0834927f02e8b3e037dbff0
SHA1 bc493246b3184a7627e4b3d25674b892e8adf4ad
SHA512 4a710704c4a2c332255ea3a40aa5d15bc16139c3b976d53fe16f7b9a1337ec89b43b327f83e962b52c25e35c2e00758b62af7b92626ba205c5f8cf627454c06b
TLSH
T1E5319FF3C3D4867E980156F09B24AE2BCD1D0656422C3C1689E8EF5B93F24B1D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

6ea25dd4-dead-47ab-a717-9400f97193b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6ea25dd4-dead-47ab-a717-9400f97193b9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

82164c1f-cca6-41ca-b93a-57aff3d595de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\82164c1f-cca6-41ca-b93a-57aff3d595de.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5ed5367061c6ebc35c57b457ba78b60901017eeaf0385fb7e1cf6772efc41ae1
MD5 56ecd1a6069078005f0b9aad2ac0ca9c
SHA1 2106b87e33eae645437ca470986ef4a04726c7ad
SHA512 37e228a2aacc40c239ad027b34459c3738d60eabd6b5ec5394305eb1344e207f6dabf30b4e8b2ba6f0b602992204b840708ef2c6ddbc39eecfc43fa9c131fa76
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLWRsQO00tbYvAISotK9M1OtxG9Yn4UJ:KAzmKo0ye5WKyoCOduKu8B
TLSH
T161912F013577129078BE7D6895B0871B02813573341AF62AFFBD50668EAEE580CFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7cbcc42-5765-4247-bda9-95f9d8282253.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7cbcc42-5765-4247-bda9-95f9d8282253.tmp
Size 9KB
SHA256 586dc6f3d69ac8ba9db69ee4838fcfa8d0e9d9b1fd082327b9384b545741f9cc
MD5 dec88115de36f5a42d389f49a0499494
SHA1 55d22fde63fbd1d3514a5dd14fedde6f52cd8472
SHA512 c198dcdfc213ba191e7b11f2636e5ab6450cf5b15957606d8bca56caaf059677ce14a2564f658fad4577723fbe7d01b9022fc235af6685cbee703319c21ef589
SSDEEP 192:sxZyRYWc/f4si8IdpdNHW6+WNGYgdzm+NIgrJ:sxZylc/f4silzHbG6y9
TLSH
T1FB22B8126E28A57B8CC7D21DBB55BF13E5F9507291941E88EAFCC61C09E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2004b1a-c84a-4ff6-b792-48ce8d7feba4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2004b1a-c84a-4ff6-b792-48ce8d7feba4.tmp
Size 10KB
SHA256 60ccfe365673bd0fafaba8f393b02fc07d720019e404c7691624b101552eb8eb
MD5 834c744e027514d56acd674639999604
SHA1 4a0e4c3810019a5e4ddf3ee0d9fb470b601d6614
SHA512 44ba0b06511d41eb1e50d12bfeec566782361e88645274aef586d03a5f9cc13c3a59de74da5923b85a11f016fb7c98c37686835dd8eb11b57c8e3874a8ef7345
SSDEEP 192:sxZNRYWc/f4sikIdpdNHW6+WNGYgApm+NIg55J:sxZNlc/f4si9zHbGdy1
TLSH
T1B822B8126E38A97B9CC7D20DBB55BF13E6F9503291911E88AAFCC61C05E77DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4c130d7-7154-4fb1-a626-3d2694301bed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4c130d7-7154-4fb1-a626-3d2694301bed.tmp
Size 9KB
SHA256 929766e1447671a77982ab9882f5df4a8b0ac1fd7a6ad7d8d00dc40b652357ec
MD5 c3054f33075c570e2782525243791fbf
SHA1 6995f74b24d4654e86a14863f5d8c46f23abf69f
SHA512 77b720b45c0efb8067a2ac50c125795ebad4c25710985a3242e4b8006e85886afb27572395f1d04bb23457d4bc3aa5f33021bd58b17e1b64703597acd756c1a1
SSDEEP 192:sxZyRYWc/f4sb8IdpdNHW6+WNGYgdzm+NIg5bJ:sxZylc/f4sblzHbG6yD
TLSH
T11422B9126E38A57B8CC7D21DBB55BF13E6F9507291901E88EAFC861C09E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c557bf57-79aa-4eb8-9de5-a2237ed49fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c557bf57-79aa-4eb8-9de5-a2237ed49fc4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6672b743-2e63-4672-bc61-b9bf748039c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6672b743-2e63-4672-bc61-b9bf748039c7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4f894c2c55752e5e82c3832956ae20921cf5e28b75fce8e1ce5532fa251a84c7
MD5 d4b95fea176a7625017d987a145d16de
SHA1 13b6f9b1ae9d9092c2dc1879b9fe054cc282d76d
SHA512 ca3f6e9b73b8d8c8ad793e94a19029339c53fe11793f4e97b7de4150f15ce67c20528b9cac434511e80b81bfc16845fbd28bf47017f9985bce9f711217a76855
SSDEEP 384:VQkUSv0sNjUuKYGX5cd/BGYX5EaV84YXTbGH7vBEuHIIll:v03P6JGYua7YnGH75EkLz
TLSH
T1E9829E76EC787C6B0DE3A650F04E3613EFB49027DAD81B90D9DD5B2C01CA698234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b555329a-55aa-4667-a2a7-d5badc1ab3b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b555329a-55aa-4667-a2a7-d5badc1ab3b2.tmp
Size 18KB
SHA256 63d08f5a95e8bc7fe0ab6282bb02c18cf241e95d118d281a51733f7e6e280ec2
MD5 1617b92f2ccfc60f7f33e6695533ddf5
SHA1 dc52736a8fed44ce3829d470a678611f95c31133
SHA512 b11d643c35d42c5787f05ecd4eb29eba0056a9474b55ebcc494252c99bc26979d3091e58abe76b08462d1809af37041faec0a79f44be5c4e0d5852f4478e4851
SSDEEP 384:PQkUSv0sNjU7KYGX5cd/BGYX5EaV84YXTbGH7vBEuHIIll:R0+P6JGYua7YnGH75EkLz
TLSH
T10A828D76EC787C6B0DE3A650F04E3613EFB49127DAD81B90D9DD5B2C01CA698234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da7c464a-4666-4ab0-8aeb-3637e63a5738.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da7c464a-4666-4ab0-8aeb-3637e63a5738.tmp
Size 8KB
SHA256 97e8e50de3094836c0c922df6a261c76b172c94c42483623f58ca034744646f4
MD5 4814779899ab43962eacd6df72eb99c3
SHA1 20fc4e9f1ef1774cb0cf0c74fa84cec2d872242d
SHA512 1c9f60761b1e2437fca4941b683a7d2aef7856e2b3c3b709aeab4c28a0c431cb340691aa439fdeed56743972be8454c80be81cbf0f704da9920eab9587a8a40c
SSDEEP 192:LJON76DphmqQmiUyB9q8wGYX59ezTC5jzor3mL9kk7OFU6:lON7619ARwGYX5EaV8CKU6
TLSH
T17B02D935AC787C7B4DE3AE45B48B27139FE8212BAA542F44DAE81B2D01D765C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05412233-d4f2-4218-aeb2-13e92b4275ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05412233-d4f2-4218-aeb2-13e92b4275ec.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3e4f0bd9915735566955755ccf08b776687643ad90cb40265f9cba41c65fc873
MD5 bea5d7db27d6a8f6639abcee6425c539
SHA1 932d575c296730ffa6463d61df9ec63c200ed09f
SHA512 0a54f0d2b5fc8ec4545efbb34374eb747f1aea417e29425c0431ce8eb702351f81e18ee9dd15a72bd22a52cc3aa8f4796365a6a108f2be2fff33b116dd1ec0cc
TLSH
T116412758A6FD5108B3B76F4AAFF6A86E487ABD371E06C49D00110E4E0A22F40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download