91240f70a3a715da4812f094922451d7529ea2ce27dc99d2778d66d0c5e67f74

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261102-w2fr2aev8q
SHA256 91240f70a3a715da4812f094922451d7529ea2ce27dc99d2778d66d0c5e67f74
MD5 297bbc7331f207b906df5389bb8b72f4
SHA1 46b0127be6a218769eb99497aff2527982d01f37
SHA512 f44905d6acf3265af0b216657bd3e888c53e0b324e9e62c5196c85a57b5a31393acb284e304636f46f0577300321c69630ceadae1b9e10105afb8fa6b57ea4ad
SSDEEP 384:GQy9+4LIZecuHL9PHymEZPwejc6V0v2Mm/qcw0ceGeT9MYrxkq:G5E4LKecuHFymE3jciG8LGeGe+Yrxf
TLSH
T17A03B91AB8C18C320277C2E69E56BF2DED61821B920A084836FD4797EFF2D554D5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4428	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{7FE4F9B7-40EC-4AAB-8AA6-FF07509D2D45}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
180	msedge.exe
180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1524 wrote to memory of 4988	1524	msedge.exe	87
PID 1524 wrote to memory of 4428	1524	msedge.exe	89
PID 1524 wrote to memory of 1576	1524	msedge.exe	90
PID 1524 wrote to memory of 1576	1524	msedge.exe	90
PID 1524 wrote to memory of 1576	1524	msedge.exe	90
PID 1524 wrote to memory of 2988	1524	msedge.exe	91
PID 1524 wrote to memory of 2988	1524	msedge.exe	91
PID 1524 wrote to memory of 4032	1524	msedge.exe	92
PID 1524 wrote to memory of 3340	1524	msedge.exe	93
PID 1524 wrote to memory of 4032	1524	msedge.exe	92
PID 1524 wrote to memory of 4032	1524	msedge.exe	92
PID 1524 wrote to memory of 3340	1524	msedge.exe	93
PID 1524 wrote to memory of 3340	1524	msedge.exe	93
PID 1524 wrote to memory of 1196	1524	msedge.exe	94
PID 1524 wrote to memory of 1196	1524	msedge.exe	94
PID 1524 wrote to memory of 1196	1524	msedge.exe	94
PID 1524 wrote to memory of 888	1524	msedge.exe	95
PID 1524 wrote to memory of 888	1524	msedge.exe	95
PID 1524 wrote to memory of 888	1524	msedge.exe	95
PID 1524 wrote to memory of 2580	1524	msedge.exe	100
PID 1524 wrote to memory of 4520	1524	msedge.exe	101
PID 1524 wrote to memory of 2580	1524	msedge.exe	100
PID 1524 wrote to memory of 4520	1524	msedge.exe	101
PID 1524 wrote to memory of 3824	1524	msedge.exe	103
PID 1524 wrote to memory of 4692	1524	msedge.exe	110
PID 1524 wrote to memory of 884	1524	msedge.exe	111
PID 1524 wrote to memory of 3276	1524	msedge.exe	112
PID 1524 wrote to memory of 1224	1524	msedge.exe	114
PID 1524 wrote to memory of 1224	1524	msedge.exe	114
PID 1524 wrote to memory of 180	1524	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbe237c188,0x7ffbe237c194,0x7ffbe237c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,11007152372523134328,14751203518741418928,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,3278277262046685441,18425715061350340615,262144 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,18341481500390384375,17652991539873824126,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,1892825744252993886,14359562213394767120,2097152 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,15743315323694131115,12051323053108730775,2097152 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,17153834032978721301,1202880988860499021,2097152 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,5595345151447534210,8864463696276827429,2097152 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,16974656079207462106,6430494604170963309,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,12131482224988889315,718985980437406488,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,7828655748392914068,13152601407357416444,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,7828655748392914068,13152601407357416444,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,10812781783670248655,7314515363354017048,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,5999575096718801624,14088041155831458529,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,5939042975528994533,12702038321172113710,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,5232641791308168779,2407452816157538441,524288 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2972,i,1168054821101720521,7792729527248339222,262144 --field-trial-handle=2420,i,17587112433320293633,10496880240022458264,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1602af3a-f81b-4404-b5b3-1525e0a0017e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1602af3a-f81b-4404-b5b3-1525e0a0017e.tmp
Size 8KB
SHA256 ae44b8592ddbe0fda2a8a8fa11d4a187d76f58b14b5bbcb60dd0ee7b016f2c7c
MD5 1557e0b653647b24810f44c2a8b17e9b
SHA1 38892516730ccf060a37eca596e6b6d2fd710743
SHA512 4d783ce5a871e11d75630c6c75d6dcba7af0a914ce495fe92398a7d97c2e6a7c74454900c180162b7db2060fc41e87d1e668223218393f74a3036fca396f7e21
SSDEEP 192:EON56nnHGQmiUyXRQYcX5hQDP16jzor/eMcFYU6:EON56nCWQNX5+Dtm8/OyU6
TLSH
T17702EC35BCB87C7B8EF36D45B4863313AFA5213BE6956B80DAE85A1C01DB65C1306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3283edb6-7710-4598-b169-6db9a4917e58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3283edb6-7710-4598-b169-6db9a4917e58.tmp
Size 8KB
SHA256 5c97ad69c656b0052d5009b5767fd7e78df41d9acd970c93d19ade1d608f81b4
MD5 9a113497fd62efb6cd54f77cc524f245
SHA1 4afad7a08f13dac2ab0612d493200551eb09d53f
SHA512 8745baa241a9c273059a48709f9be6fa301d5c5610bccb6f2a7213d18f7c75ee8c2427a69c1e13de0dc5e11a664d442fafa187830b30b7e2104d449f8596b6fe
SSDEEP 192:IONi6nnH2QmiUyK7RxYcX5hQDP16jzor/wX4FfEXg3qq5AU6:IONi6nynFxNX5+Dtm8/wX888xAU6
TLSH
T17212FC32F8A8BC675ED26595B0863113AFA55127D7447FC0D6EC2A1C01DF7AC534AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f65e890-773c-4213-87cd-7f3f25846c49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f65e890-773c-4213-87cd-7f3f25846c49.tmp
Size 21KB
SHA256 69ffcfa7865494aaf0a8c92088bfb128b644059ee6b6064be5d6b1bc2b53f605
MD5 18e438bcf69257b11137ae7a4c399b5b
SHA1 d373a45f376b79d2fdd2edac163fac85a38cae63
SHA512 9717e693f0256ead0072ea6a4d26ad3a16175f742ca191f735cbe983170e3ed9b4e3460bfab6c4ac58447f6370055570962c68ddf70232ce665b45b3219a64b4
SSDEEP 384:EiFzQkUSvSzsNp8TUNTUlIl/aigUMjQX5+Dtm8/wX88exAH7vBENGIIlY:fFd6IwgguMkkDu7exAH75ENGLq
TLSH
T100A26C33A894ED3F5EF29A51F14D3213EEB45067CAC4ABD0E6DDAA1D018B2DC134AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80e34912-bb49-4164-be6b-1127db4f7eb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\80e34912-bb49-4164-be6b-1127db4f7eb7.tmp
Size 18KB
SHA256 9f184f57ffebbf72c024ca7e37e13d3b22fb8bb1a1499481e5cbb9173d6ac86a
MD5 2d64fdae25c92d26b2158119adc3fb31
SHA1 311a539ef251d96aaaed87a913190e5299e0b982
SHA512 a1841eb19694051d03e414c40ced4c7ca974ddcd76c7af00b1448d01e98831a14dca13904525fdd326e8feea581cf2e6463d187ac9f3bf2ddf194e49d927dcbb
SSDEEP 384:jQkUSv0sNoUGaigUMjQX5+Dtm8/wX88SxAH7vBENGIIlY:N0IuMkkDu7SxAH75ENGLq
TLSH
T1D1827F32F8A4AD3B4EE2A551B0493653EFB45027D6C86BD0D9ED6B1D01CA7DC234AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

32563aaa-a1f4-4d81-93c4-f6607c4fb3a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32563aaa-a1f4-4d81-93c4-f6607c4fb3a6.tmp
Size 9KB
SHA256 37b4889203e0c11cbf6a06bcfee182a4f6dbc18819fd1efd1bfebbfcd5f20aa4
MD5 8e8a69876b62bdd6dab0e28206c16dff
SHA1 506f6de60e30ec7a26951fd496fc91a1db997ca8
SHA512 efebdcac144714a4630bcb392d70c2ee460e256c98c53d7fab0eeb58ff4bf8355f7a193f61e9c302c879629c0c67b288ae71e992181fdf8ddbb26533d76e9c38
SSDEEP 192:sxZ7RVWs/fis3yIdpdjHW6+WNGYYB1e++MIgrJ:sxZ7us/fis37FHbGfxz9
TLSH
T1A622B7126E28A57B8CC7E21DBB25BF53E5F9503251D41E88EAFC961C05E76CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39226129-bad2-45d0-ad42-5513dc4c5bb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39226129-bad2-45d0-ad42-5513dc4c5bb1.tmp
Size 27KB
SHA256 fd2d6d8ee0f36f59bf81c0027ce78d9c41c865cb556ccd65dea4ff88fa3c4e36
MD5 9903081ee1af53d467bec14577189218
SHA1 d1c25f8be3e480224c4b9a3fdfd701adc44fa40d
SHA512 c0ec7400c9d510d029fdb3575c0dc488e0d4b199068ab334ff7063f4e457dac333f0066fc9fd7a1d50cfedf615e8b620ca4aac2049df3aa18e62c4bf6ff7c084
SSDEEP 768:RmyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXiropCOm:RmyYR7jWv3NpBu1ja/CL8OX5k
TLSH
T165C2E92B640DCB7E4FC01A9DDC5A6FDB3E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e11b033-7920-456d-b220-b4fa7c65328b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e11b033-7920-456d-b220-b4fa7c65328b.tmp
Size 9KB
SHA256 da0c6bb12fced83df5b12dcb85cadcb4bbf80262e0c73d63653a4e9ae18c77f2
MD5 304f882ad895d1eb07b38e7d05ad85bd
SHA1 6269513c2f79dcb8d9ed4c968e9271dbd5f1021d
SHA512 928ced5bd3b2ce10633cceb685925a67a86a12dfa1cc7eaba69613c9c8bf766bc52c2842fc26b0a27ae79e5490f8892417fdafe875ede73c0a27ce4d892827c3
SSDEEP 192:sxZ7RVWs/fis3yIdpdjHW6+WNGYYB1e++MIg5KJ:sxZ7us/fis37FHbGfxz4
TLSH
T14D22B7126E28A57B8CC7E21DBB65BF53E5F9503251D01E88AAFC961C09E77CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

821aa822-4ed5-41ec-b760-bdcaca441cee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\821aa822-4ed5-41ec-b760-bdcaca441cee.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 607810d36142040e4beea659d9c36015694fb99794dcdcd04d6fd00002c3d339
MD5 ab68713161c6778da7ab75640302f091
SHA1 aba449e9f10bc2b07ceb5e4016573f91f54d0ee1
SHA512 a9717526c24259b0c0a87499b07abf8ce59d8c4e61b71c61248a988f790c762d2eb92d51ea59385fb6ce1d9534ef361055def1abc6f5a228a5eb5d8c1521836d
TLSH
T1CE6194B126930490FBABDA7790D415A73673A3BD44A37F460BE8D3BB974B7F4A054009
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 76111a854dc791cdfafb989c70c8eef3e0b8e300e2d77db902b90e9c4b249a87
MD5 dae140f64cd34dba954a303b76aaabbe
SHA1 4486fe43807a8f6a586731afd1e571217c0ffefb
SHA512 c51db9add99d0babe34817af128e70ea7e698b7e0282a4c5dec13b4398b8e6aeae6742ae2dd336fbf72012277ac816b864353cbc019ef20f3ba5433057c7f1f1
TLSH
T15A61A4B126930490FBABDA7790D401A73673A3BD44E36F460BD8D3BB974B7F4A054008
MD5 SHA1 SHA512 TLSH

Submit Download

a897d91e-c1bf-4e83-80c0-4b926ef33c8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a897d91e-c1bf-4e83-80c0-4b926ef33c8c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

838c4dfe-f557-49b9-a42c-e015a97a8105.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\838c4dfe-f557-49b9-a42c-e015a97a8105.tmp
Size 1KB
SHA256 1bcd578ccb9a581069b90cc5eb3636b3d241cb3306fcf2eb5b9f86eed364f229
MD5 dbf349334732b2f70c56764647207866
SHA1 9990b912d62ec1320a2c57b283266628f0f24fe4
SHA512 9388889d59169bf50694fda48ed92ba4351835eb1b9289819d46076cde1e64b515a5d9e315dcdc8cb536dd113efc5ed3731e24ea3a890c71a7530405158596d5
TLSH
T100318EB7C3D4867E891156F15B24AE2BCE2D090642283C56C9E8EF1B93F2471D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

dd743f16-b1f3-4886-b9bb-a9729f667efd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dd743f16-b1f3-4886-b9bb-a9729f667efd.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e0d2f246-4803-477e-9a48-f7e81ba81e04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e0d2f246-4803-477e-9a48-f7e81ba81e04.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d3865ddaa1a31923a532854e452fbb63a518a30d1f9feb34f216d0f6e89ae037
MD5 a4f1ac33009c569bb36b54430899c04e
SHA1 93241f8ae642dd6f42398e882fae1c7b8948bb56
SHA512 a8f77b3bf99eca3e0320882cbde75f2092e5c73a23e8cbffcff186bd748f858de5d9f8e762c0d67f8e3a84c67d038373fcd5350073aaa56755f493964969ebb0
SSDEEP 48:KgMb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLvSbvRxRqbpkZIS/qK9f1VqxP6Ycdpi:KEbKKcMuqMAK9KGvOKMsSl
TLSH
T1DC91240234A7028039BE394944B4876B464272B37559EDBBBFBC94674E6EE141CFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e347f9b5-6348-4028-a116-087ce25a7524.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e347f9b5-6348-4028-a116-087ce25a7524.tmp
Size 10KB
SHA256 69f7a7fdc93465506e6448f0f59ae501ac18caf6a1002711524ac5bc99c8f65b
MD5 401cb7071452d716d75e53027fe318f2
SHA1 185702b75bc8f893eeb8f63902002e5ae613a9e8
SHA512 c9de72a229635c42a374f84418ea058d6f71368c870bccf9600ca1ddd49226cb6cf60d0d5fb9f74efa9142d0fcd4c7d631ad4a66d6d1fdd9ec5eec6e29812c7d
SSDEEP 192:sxZqKRVWs/fisxzIdpHjHW6+WNGYYBOr++MIg5gJ:sxZqKus/fisxsDHbGfDzi
TLSH
T13D22C7126E28697B9CC7E21DBA15BF13E6F9503251901E88AAFC961C09E77CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0ab6160-460c-44d0-987c-83593c0fbc8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0ab6160-460c-44d0-987c-83593c0fbc8c.tmp
Size 10KB
SHA256 687c8d8e465ac01693751dc0d1b58ddf559cd2b9203f80f7e699355445f25524
MD5 c8f11863dea4c8bc5599f90dc1aa8633
SHA1 2b59f6d98bafd55b294434a522b0b76d11fd0e6b
SHA512 eb52abdf8475ca36a94106913030b8fc3f0da7b6bc9de676776c3a8bb7bcadb422b3dd1d40894ccd7b0dcdc25a966948af93c6e33ebf756d3ba22374ba1d847a
SSDEEP 192:sxZqKRVWs/fisxzIdpdjHW6+WNGYYBq0++MIg5gJ:sxZqKus/fisxsFHbGfozi
TLSH
T14B22C7126E28A97B9CC7E21DBB65BF03E6F9503251901E88EAFCD61C05E77CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0872641-f5ba-497b-aa24-383d1a9537bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c0872641-f5ba-497b-aa24-383d1a9537bf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e71921b1-1657-4818-b4cc-a235bceb4162.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e71921b1-1657-4818-b4cc-a235bceb4162.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f64d2244-376a-41ae-9b50-eee8a6dd718c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f64d2244-376a-41ae-9b50-eee8a6dd718c.tmp
Size 18KB
SHA256 f902682da0749eddf3b9a2c150c2d899e14b07f5998033a9e6516d3381d5df40
MD5 a56c2c4c61c54f8cda9c24d2bfa45228
SHA1 46c5968388fd3ee6124410479a5b81de2e66d570
SHA512 d0c7fa6a090664e8a43c2cb3edde2625569eb7260e8b0f790647b58fd867daed935b8333c2ddc1112244b65c34004bbe395deed12c188b961ef1c5b0fa29c91b
SSDEEP 384:pQkUSv0sNoU/aigUMjQX5+Dtm8/wX88SxAH7vBENGIIlY:L0nuMkkDu7SxAH75ENGLq
TLSH
T16C827E32F8A4AD2B4EE2A551B0493253EFB45027D6C86BD0D9ED6B1D01CA7DC234AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7e52ed4b3545af8c9b90346334a7e96f726de8a22eeaae2e8c16f810c091ccbe
MD5 7746b1fe4eb955e6223c472d72d38a3c
SHA1 b92ceef97bd7204ab88d60f5f35c0384cf4ba117
SHA512 4f1ebc1b686d00e4d571b28d2881f57e15755ac55326412327332153ebc67f41b78c81832003d921e904b4f3c55d399f54104d07f5343e81d5709ccee382998a
TLSH
T1E1411859B6ED5148B3B76E5A9BF6A96D587BB9732E05C49D00100E4F0A72F40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download