5cfec5a28c1fbc170456a03e13390aec4ceb7d3df0509e5142b2edcb78173829

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261102-w2fr2aev8r
SHA256 5cfec5a28c1fbc170456a03e13390aec4ceb7d3df0509e5142b2edcb78173829
MD5 40844a9c1d771aff3fafe9bc40feffff
SHA1 8edd5d04c00f5b3f8e8295fd2c41d395144ac033
SHA512 b88c9116bc291bf97eb14e8aaa54c749033462e9e80fffc1df1a6f70ffa781dbe1dfa2ec9b7583835dfd76546d4731caabed500facb1b354be8e338251bc123b
SSDEEP 384:GQy9+4LIZecuHL90HymEmwejc6V0v2MG/qcwMQXAT9MYrxkq:G5E4LKecuHMym1jciGgLwRA+Yrxf
TLSH
T1C503BA1AB8C18C320237C2E69E55BF2DED61821B921A084836FE4797DFF2D554E5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{E0495EBD-F074-4263-9A0E-92F4977C02A6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3396 wrote to memory of 1028	3396	msedge.exe	89
PID 3396 wrote to memory of 2268	3396	msedge.exe	90
PID 3396 wrote to memory of 6048	3396	msedge.exe	91
PID 3396 wrote to memory of 6048	3396	msedge.exe	91
PID 3396 wrote to memory of 6048	3396	msedge.exe	91
PID 3396 wrote to memory of 2228	3396	msedge.exe	92
PID 3396 wrote to memory of 2228	3396	msedge.exe	92
PID 3396 wrote to memory of 6032	3396	msedge.exe	95
PID 3396 wrote to memory of 6044	3396	msedge.exe	94
PID 3396 wrote to memory of 6032	3396	msedge.exe	95
PID 3396 wrote to memory of 6032	3396	msedge.exe	95
PID 3396 wrote to memory of 6044	3396	msedge.exe	94
PID 3396 wrote to memory of 6044	3396	msedge.exe	94
PID 3396 wrote to memory of 3972	3396	msedge.exe	107
PID 3396 wrote to memory of 6076	3396	msedge.exe	108
PID 3396 wrote to memory of 5528	3396	msedge.exe	109
PID 3396 wrote to memory of 2560	3396	msedge.exe	111
PID 3396 wrote to memory of 5840	3396	msedge.exe	112
PID 3396 wrote to memory of 2560	3396	msedge.exe	111
PID 3396 wrote to memory of 5840	3396	msedge.exe	112
PID 3396 wrote to memory of 3352	3396	msedge.exe	114
PID 3396 wrote to memory of 4328	3396	msedge.exe	117
PID 3396 wrote to memory of 4328	3396	msedge.exe	117
PID 3396 wrote to memory of 2652	3396	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcb19cc188,0x7ffcb19cc194,0x7ffcb19cc1a0
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,7584062933912775390,17178059883176733938,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,16212764464591514471,12270217851130813664,262144 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,3690097684632112783,3454359031445753331,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,3171184736305457566,17508520769825146850,2097152 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,13283871410786187135,15869552622557097289,2097152 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,3934290108114206413,16500726718888621365,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,13822270136120576819,15156172152192414973,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,4060002306718327828,6273832902447974868,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,10542209772192756668,6750462538724143112,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,8195784109910763296,11096751863610780640,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,18067475896560459811,12891063939901867033,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,18067475896560459811,12891063939901867033,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,1952964885999245040,9952898161970724318,524288 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5296,i,6814260545618310148,12008005411359693378,262144 --field-trial-handle=2280,i,3950134136655893951,4449789691836097369,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

009ee7ce-c2fb-4128-96da-ee6acd5f6e8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\009ee7ce-c2fb-4128-96da-ee6acd5f6e8c.tmp
Size 27KB
SHA256 7edd84e663bbf3f6a63f7c5be36199e01ccdb360d4bf8dc55776111de046b3af
MD5 1eeaa36677625f096e23f9a3eb0783ce
SHA1 11ea6d3734735aadcaf8ed1f2bbb4c65cb1c2092
SHA512 fd350c7c426a63020e747d1ab4b22e4c66b838b18b26de6388588b72b83768dfe2967a01c78432b636737ca87b6d1bf8fd4f6194acf8bb453a2b6efe92e7d034
SSDEEP 384:nTiFzQkUSvP3sN38TUNTUlI4s5mgXUlK2flBE8noQz7rfnjH7vBEt/gL/7IzRII8:+FdP3+wgi/PBE8oGznjH75EPL8
TLSH
T13AC25A36E8A8DEABEDEB8E95A30D3643EDE05213C69C4AC4D9C95D1C00D71CD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63f70b4f-3d5c-4411-b8c9-c00ff19528b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\63f70b4f-3d5c-4411-b8c9-c00ff19528b4.tmp
Size 25KB
SHA256 146c15f7f343b58017d9dfb8a8178934c58e640160caea24e817670715043a11
MD5 d54710ab4b7c17301f0720028ee37ba5
SHA1 942e43b028adcb2702e3ee6bc3695cb71ad5bbcc
SHA512 528fa66ba34d9042695d64c61cfa2aacfcc207a94019cbe1f814473ac5a4271221f54aac731f94217517a89ab4d071302b34204ce4f9b4f800edd62c6cefcc8f
SSDEEP 384:nViFiZcI63sN38TUNTUlI4g5mgXUlK2flBE8noQz7rfnjggL/7IzOo/:cFQ63+wgg/PBE8oGznjr8
TLSH
T10CC24A72E8A4C9BBFCEA8ED5A74A7607DDF44223D68C9AC4D9C81D1D00A71DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a86bada-c51f-4ecd-8e87-c3e40b3ceb9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a86bada-c51f-4ecd-8e87-c3e40b3ceb9b.tmp
Size 25KB
SHA256 a0baa207ab4c3724ca7ee49a93d127bf763d57ed8534cb637563ad6476cf1d02
MD5 1df16d87046468df7809f40c624f8584
SHA1 4e8f57b5d712aee9297923ee29abc43964b4ce06
SHA512 a07d0b542e0bb3dbd1cbce09210b7c707e87d096bae25e57a4f0a16d1debc35d268280179bb7ae077eb245452035d2e609b801c633f4450917f1f721a935b35f
SSDEEP 384:nTiFiZcI63sN38TUNTUlI4g5mgXUlK2flBE8noQz7rfnjggL/7IzOo/:+FQ63+wgg/PBE8oGznjr8
TLSH
T15DC24A72E8A4C9BBFCEA8ED5A74A7607DDF44223D69C9AC4D9C81D1D00A71DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8facc5f8-2328-421a-bbbb-5994b25a9ac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8facc5f8-2328-421a-bbbb-5994b25a9ac3.tmp
Size 27KB
SHA256 bb990ab50934deaa5e2eb377363e940ee75c035bd234d4463901b99619f5547d
MD5 60f93fa32880442031a60cca6dab1b03
SHA1 77e23ab65200022cd1eeacbb7673151f4b095528
SHA512 f1c7e89ee3edc0593d9e817fa401e5ff7c09c0a0cfe0a27c8cc8a99ea2397e2077ad2f4e79dac702383f0b4d628b29832a34a048e22e9a3ad75db4f1856e2741
SSDEEP 384:nYiFzQkUSvnqO3sN38TUNTUlI4s5mgzUlK2flBE8noQz7rknjH7vBEt/gL/7IzRI:jFd53+wgi/PBE8oGonjH75EPL8
TLSH
T1F6C24976E8A8DEABADEB8E95B30D3A43EDE05213C69C5AC4D9C95D1C00D71CD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

06a97bcd-fd88-4f5f-8f7a-8aa827fdac03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\06a97bcd-fd88-4f5f-8f7a-8aa827fdac03.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30ac66d5-8b01-40fb-85be-1cd1da3ff848.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30ac66d5-8b01-40fb-85be-1cd1da3ff848.tmp
Size 11KB
SHA256 1f0ae6e0e1bdb6b2ac8558bfc99f525a0ed5aee8409d5de6b06c0e2bab6e249c
MD5 d0034dc48a87edf42f57de6a3d6283be
SHA1 a832d92611439abc998ebf755aab519abaeaf9b1
SHA512 6b221567cd9d66f84fcad158d2f99a55136196605e9740c5314ca4c41dd32fd8bea430fcf715168e51362d713516637a1a8f73ff4b6550cffcad6d6b3855817b
SSDEEP 192:sxZNR+k1/fYsuQZZUKzodpH0HW6+WNGYbIaFY7PIgjQJ:sxZNT1/fYsuOZUxUHbGFwYzj0
TLSH
T1FE32D715AE28A93B9CC7D21DFB55BF53E3F95032A0951E48AAFC8A1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

376cbbd4-95bc-4bf8-a835-8b3104e9c317.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\376cbbd4-95bc-4bf8-a835-8b3104e9c317.tmp
Size 11KB
SHA256 54eefe78a3cb4b655ae4da255885b5f8c9abfe60ef96c51186a7a10ad508998e
MD5 8ca12162e376bc8b7dfe2d85762f46df
SHA1 c4096ad79f5f06d90e50c78ebef0efe3170ac5f9
SHA512 dc0eb2b54faecbb0d9ed97a83962b0a56231e2cb3cc0a85fbf7949eaa30ffaab07a630745cfe3308543ca0cc94a2835196ff5ca6b7fe94513a9ef84d67d956f1
SSDEEP 192:sxZMR+k1/fYsYQZZlKzodpH0HW6+WNGYbICFY7PIg58QJ:sxZMT1/fYsYOZlxUHbGFIYz+0
TLSH
T10542D715AE28A93F9CC7D219FB55BF53E7F9503290951E48AAFC9A1C05E76CD220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a0e2457-bb3f-4f86-9713-e1f5d28b7ae6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a0e2457-bb3f-4f86-9713-e1f5d28b7ae6.tmp
Size 11KB
SHA256 ad49ad9b62da9fafbf014264e14eea3d9c5cd0e3597826af90074238c27159f0
MD5 fdc7a025502b5ce1bbd7958a7e057800
SHA1 2dfa83cf8c3eb42e188a5465b52afc419f3526ef
SHA512 845ffed573b96be42ab50a62e0b23e0e6c19eb39a1cc3cb3b7fccd9a87c2dee88f3510a8328dceb8f7d673bda605b53b5cab0dc4dcdfa95774364167b4536e09
SSDEEP 192:sxZNR+k1/fYsRQZZUKzodpH0HW6+WNGYbIaFY7PIg58QJ:sxZNT1/fYsROZUxUHbGFwYz+0
TLSH
T1B532D715AE28A93B9CC7D21DFB55BF53E3F95032A0951E48AAFC9A1C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d4c6b3c-57ba-4848-b22a-25324bb9c23c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5d4c6b3c-57ba-4848-b22a-25324bb9c23c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

13f7096a-312b-4c89-9352-26e75ca26d31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\13f7096a-312b-4c89-9352-26e75ca26d31.tmp
Size 2KB
SHA256 e4c3aa5c80fda1190e8d3828fb10e4a86151fc4b5cbb8265ec3c340245f83ef1
MD5 140071dabdfa7ec4abd9c0ffdf83a7a1
SHA1 91f2e3cb9ca5ecdc3a43964c860ee8bf53a81a1d
SHA512 cf6f8bcd9ea9c4160484276d41a7e4af706c2397fc027d4ad4fb2c19b6950733d09a71c1bd8a53f9828cfebe5b570538313381b0e8271cff8a18d018878f8a98
TLSH
T18541C0F7C7E4866E990156F0AB286E2FCE2D0515432C3DA688F4AF1B93F2471D24169F
MD5 SHA1 SHA512 TLSH

Submit Download

afcac673-ad93-4d1a-b47d-cf6dbdf7bb20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\afcac673-ad93-4d1a-b47d-cf6dbdf7bb20.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e5621f5d-c964-409c-b56a-924a0ef07218.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e5621f5d-c964-409c-b56a-924a0ef07218.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 80bd07d11752a0646e1a3812320d606b363113a01fa668abdad59490ace0c861
MD5 9cf8476d24850ade9a936221d95644f9
SHA1 c5f1af1e5d9a19d61a2448a50275742d931a683e
SHA512 c55e1d5ea1b4349c3c8f26f66882f0ad08137ec4b5079678ec8c15db6dd56cabfc73b3dd37c5e5125324839d0e5d867f68c2eda8b051ead7b113265a2984dc93
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXWFnc:OtfFvpopPxrB4RhfWdc
TLSH
T1A3B2241571BB021038FE690881B5872F464232733258EA7B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ababb8dc-7d46-4d08-8b4d-f43265cf6e5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ababb8dc-7d46-4d08-8b4d-f43265cf6e5a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

c9641eb9-06bf-4470-a59a-09a686462e09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9641eb9-06bf-4470-a59a-09a686462e09.tmp
Size 414B
SHA256 04684e05115a8b8e77d68b57aa04dacbf4cf1f1da6bf721c91bacfb0fd764614
MD5 f3217efea01222d57ed75ef6d4d95035
SHA1 342e8a569bcefd7221c743fee86924d6df64c22b
SHA512 40a5b77a0d1cd23fcb5e8845b61b05a03ab45c9aa1f5fe3235d4cad96bb96d5e9b4c9a45b8e28841eb0bbdfafef47fd175ad01d4b023edf7675c77618f70f490
TLSH
T1F3E02BE5C919BC371CFC0F286454064AFA5103473A80898B3B3DC00E8FB173685C696C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 7856e3dedf0d49b10b8d10e460090f6a4fd0808a011504135f187f99925a6516
MD5 dd5a16003e6930089b4754381cae5c93
SHA1 2b168a186762d8a6b67735281902b5d49c6c8346
SHA512 45ea9a0a796a1c58d5726c603c6cbfe2f8bd361dc8c77b7d9476af69ec72ff286de2ad4f5a0f798b9829c123e0e744fc06599cf3cf95d0f2d58bda7a1a0f0460
SSDEEP 384:nyiFiZcI63sN48TUNTUlIm25mg58nK2flBE8noQz7D27O6R2Feo4gL/7IzAoE:5FQ639wgS/JBE8oGD27TR6n
TLSH
T132C24A36EC94C9BBECEA8FDAA7097A07DEF40163959C8AC0DAC85D1D009359D170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6d7188d-2dfe-4585-9c58-9d99823654c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6d7188d-2dfe-4585-9c58-9d99823654c4.tmp
Size 26KB
SHA256 91ab307667ad637ad6ddd58d25de749e4f27941891f8181688b081328bebf36b
MD5 b19e75040e3d9ec57ecbc745d0e3790f
SHA1 49466aeb8e14a4d3d9dc108a0e2b08bf5929b637
SHA512 448c33ab449d969293bae75aff4a4913fe588a69c5b40b2cc775fae45a14bbd92e7caf9b989a3ba880c37351e175af4c555f0aa58a216c8669eab6e90006ce47
SSDEEP 384:npiFiZcI63sNb8TUNTUlIm25mg9kGK2flBE8noQz7rmnj7O6R2Feo4gL/7IzAoE:AFQ63OwgSxcBE8oG6nj7TR6n
TLSH
T110C25B72E8A4C9ABFCEB8EE5A74A7607DDF44253C68C9AC0D9C81D1D009759D170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1faa6cbb1b87e0443c39ba192cf526e46b2d3ea8a19f4c2e40f0e1f1e0898651
MD5 3249d3c47c2bd33d0fc47b91f8bf3821
SHA1 3104a525e4c1328140898cefc9e82a8b8c664afe
SHA512 7d024b2ca37e36395f33011088245c1ce3f39e203029bb1690d5fee9d053601b9589c35ac4fb295fd08a3c2c9c1757f51cdca4fbfa060c0d69883432e7938b7a
TLSH
T1E2411A49B6F91148B3B77E56ABF7A87E447FB8732E0A915D10110E4F0A66B00C471B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3352-245-0x0000028F0BC00000-0x0000028F0CC00000-memory.dmp

Download