0555619e529241bac4158ae54abb86817c58108bde6a893f080c87e520cb22c6

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261104-w28staed42
SHA256 0555619e529241bac4158ae54abb86817c58108bde6a893f080c87e520cb22c6
MD5 c4b0731a794cd03a84f0d1dd108c2ba4
SHA1 0b460f3f3b2149f239c44389adc87bc4ac1d99d4
SHA512 d4067c4650be3e2acbf9f17d3e70658a87378045c646fe0e8b429b654cd130063693769f699e2ca69c08f10f08f0cd58dc76163e3846d302d7d0a51d4797985c
SSDEEP 384:GQy9+4LIZecuHL9uHymESwejc6V0v2Mt1/qcHfmieGeT9MYrxkq:G5E4LKecuHaymtjciG31LReGe+Yrxf
TLSH
T19203B81AB8C18C320277C2E69E52BF2EED61821B921A084836FE4757DFF2D554D5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3336	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{96E24820-F32C-4CD8-999B-D40A087E9FB6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3780 wrote to memory of 968	3780	msedge.exe	84
PID 3780 wrote to memory of 3336	3780	msedge.exe	85
PID 3780 wrote to memory of 4348	3780	msedge.exe	86
PID 3780 wrote to memory of 4648	3780	msedge.exe	87
PID 3780 wrote to memory of 4348	3780	msedge.exe	86
PID 3780 wrote to memory of 4648	3780	msedge.exe	87
PID 3780 wrote to memory of 4648	3780	msedge.exe	87
PID 3780 wrote to memory of 3712	3780	msedge.exe	89
PID 3780 wrote to memory of 4072	3780	msedge.exe	90
PID 3780 wrote to memory of 3712	3780	msedge.exe	89
PID 3780 wrote to memory of 3712	3780	msedge.exe	89
PID 3780 wrote to memory of 4072	3780	msedge.exe	90
PID 3780 wrote to memory of 4072	3780	msedge.exe	90
PID 3780 wrote to memory of 4952	3780	msedge.exe	91
PID 3780 wrote to memory of 3676	3780	msedge.exe	92
PID 3780 wrote to memory of 4952	3780	msedge.exe	91
PID 3780 wrote to memory of 4952	3780	msedge.exe	91
PID 3780 wrote to memory of 3676	3780	msedge.exe	92
PID 3780 wrote to memory of 3676	3780	msedge.exe	92
PID 3780 wrote to memory of 396	3780	msedge.exe	98
PID 3780 wrote to memory of 628	3780	msedge.exe	99
PID 3780 wrote to memory of 396	3780	msedge.exe	98
PID 3780 wrote to memory of 628	3780	msedge.exe	99
PID 3780 wrote to memory of 2952	3780	msedge.exe	101
PID 3780 wrote to memory of 620	3780	msedge.exe	108
PID 3780 wrote to memory of 2392	3780	msedge.exe	109
PID 3780 wrote to memory of 896	3780	msedge.exe	110
PID 3780 wrote to memory of 3012	3780	msedge.exe	112
PID 3780 wrote to memory of 3012	3780	msedge.exe	112
PID 3780 wrote to memory of 3416	3780	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffad3ec188,0x7fffad3ec194,0x7fffad3ec1a0
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,11841347230596134096,2873111247279126165,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,6755073492201273380,18365983072491468577,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,16463789493802886107,16610878300643933586,262144 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,4168576233711234365,14053044106904513498,2097152 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,1452298317186545145,5468724571551393258,2097152 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,17821007755428940143,8616096644496541440,2097152 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,16827140603134747939,18362184522849193134,2097152 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:2
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,16851379151999800723,6175075269650915959,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,13697193468048316850,15140266808209877136,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,16277313573358713343,5535336117394593523,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,16277313573358713343,5535336117394593523,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,7572584837856897826,14871961836993857261,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,11473885781319217502,16100833906039485373,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,4219144317822639433,5733131057410157537,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,3756162485571627129,16731786604850906678,524288 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5840,i,15544301147553408571,13157043779072333332,262144 --field-trial-handle=2508,i,5516364821091300552,1823512016773542787,262144 --variations-seed-version --mojo-platform-channel-handle=1212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2222f0f3-ee15-48a5-8c49-3ee951084a00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2222f0f3-ee15-48a5-8c49-3ee951084a00.tmp
Size 21KB
SHA256 4490d5ecfd6ec6deeee0acb3db5a6f514aac21ba3cb995c42a742e4c124fcf4a
MD5 021a28df54f271ffe04feadfe599c427
SHA1 1895f1d13842e62208420edaa3563a36aed341e3
SHA512 6013a9729f180204fd17bf1ef669276f7cb0e510623634f6347b41a5ff0c1ab3e7206fa849934beae4483b7f45a81f602e703408f52a189140d2ff4a895da005
SSDEEP 384:JYiFzQkUSvbUzsNm8TUNTUlIlhWyZAk2wup5u8iNLzmH7vBE+SIIly:FFdsXwgOlklmH75ElLk
TLSH
T15BA26D739C989D3F6EF79A10F54A3613DEB451A7C6989B90E6CD9A1C00DB1CC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24eefaba-1c8d-4368-98a7-d33d04be7116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\24eefaba-1c8d-4368-98a7-d33d04be7116.tmp
Size 18KB
SHA256 4e6e13430d40389ea8d09af7ad9f3ec75cca88b73665bef97007ec8667a87b74
MD5 90b1d80afdc7ac55df20c0f6f503571f
SHA1 5707dfa032bacb2cae7d2df7bbbc36559d12384a
SHA512 a87c089915c46c08e92f74a16bcbd34a693ee9b3ea1f293dba48887801abe5d335c2779520c6190b8cdf49d2db10a20a8ad8ba7af46f2cf412b82113c2daf656
SSDEEP 384:iQkUSv0sNmAWyZAk2wup5u8iNLqmH7vBE+SIIly:a0DlkUmH75ElLk
TLSH
T140827D35ACA86C3B59F3A520F14B36139EB4916BD7D85F80D9DDAB2C01DE1CC270B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49693b79-7114-4ab9-860d-8a83f9aa1307.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\49693b79-7114-4ab9-860d-8a83f9aa1307.tmp
Size 8KB
SHA256 a19c2bc2105cb9a13199d31ee6ef31df4dc8fb0f5baf99562dc3185dedcfd164
MD5 10681a1bf9717cc8c4f485606fbc81b1
SHA1 05bcaff4ee316e2244467b48432c2ccf2e5fca6a
SHA512 4ef40d34a0ed9d126f1a765f0490e5f5282537f55910b06ea353ef6eed56935a53e2ddd0cd6d354209e904711aadaa79b0c402d9a4755bd708555a1eb25f4a1b
SSDEEP 192:VONH6iDHQmiUym+AWLq5u88PNLbetnuZvqhU6:VONH6A2Lq5u8iNLBmU6
TLSH
T1FC122A35B8A8BC7B6DA2A964F48736139E69417BD7886F80D5DC2B2C01FF59C130B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75472a37-9f8d-41d2-b250-f5cf1a454ef9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\75472a37-9f8d-41d2-b250-f5cf1a454ef9.tmp
Size 18KB
SHA256 36cd30da3d3fd17b5dd42cb4f5e654b9de83be215c3ce9ce716dc5e01779b163
MD5 b653febbd2575c720bc2667060866ed2
SHA1 224d5ef4d360681d2a4413a5042145260d5e0152
SHA512 11cad4d1cee0cb43196ca3f324be1adf05416a0fd58b9c0fbc5f613ee61effb557fdd26f1a6ff5bc1a760980d5dd8a55f27950f71f8208de712fab2dad3ea81b
SSDEEP 384:DQkUSv0sNmhWyZAk2wup5u8iNLqmH7vBE+SIIly:t0mlkUmH75ElLk
TLSH
T197827D35A8A86C3B59F3E520F14A3613DEB4916BD7D85F80D9DDAB2C01DE1CC270B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

1377396a-0501-4b81-ac53-861d2bbe688b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1377396a-0501-4b81-ac53-861d2bbe688b.tmp
Size 10KB
SHA256 9eca3520144f920cbbcc737574d70f4fa0f3cc35449e465451b431ecf919e1ee
MD5 fc8679640975ed5c569e28596c3e055c
SHA1 29f751fb87c257adb9bcaae29cc662b2994f8d74
SHA512 da3ad382daed7465d943dfeb673c3ea25a67a5f6eff1f391c64bb6ff0ae1e92a741ccc20e9d377fff8702dac8d36306766f9d277066e326675f048023a6d0827
SSDEEP 192:sxZWRdW1/fwsPZNwIdpd5HW6+WNGYaaOKtIg5KJ:sxZWO1/fwsPZNRLHbGq8
TLSH
T10222C8526E28A97B9CCBD21DFA15BF43E6F9103291951E48AAFCCA1C04E76CE134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a9c4186-15ca-4c0b-962e-b466372aea1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6a9c4186-15ca-4c0b-962e-b466372aea1d.tmp
Size 9KB
SHA256 fc8d5c741ad1456a6463ef4bedc22a7125ad177dedb886fccce59539e82ab240
MD5 8d0812a93e70f2318706b96a85fb5d0c
SHA1 aa01f8ba6be29e4205d80794e3ea56ce2fa1ab71
SHA512 76ac92b53ccb9f9df96e213e455d8aec1b730f42da6e4e736c03a52e95699601d774ed41b278cf074f824feff6d19e84a0b6f76abcc990167910bdbdd9e01f1e
SSDEEP 192:sxZ6RdW1/fwsPIGwIdpd5HW6+WNGYaJqKtIg5oJ:sxZ6O1/fwsPIGRLHbGPO
TLSH
T12C22B9526E28A97B8CCBD21DFB15BF43E6F9503191D51E48AAFC8A1C04E66DD134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 59b94a756f51180edb4f7fbffdc84d56022a5ba202d23f1adf8582eb089bb005
MD5 99fd9708a9c2f136684a4461da98b1b6
SHA1 cee1d8a97c9a30385ebee9b8c55eb6ef811f9d4d
SHA512 db8f0b78665d0669457fec513aa210b173e0e6e7ed0a2bae8b3c085761e3a34b8f624ab6c57a1afa1f82f54c66e799c0eb3000479a635f808e9dd8d314fa2d06
TLSH
T15C61D94591A00F5BFF98403992F672BF3674A88288C3DD6E34A9F8795D5674863DCC1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9c3e1c9ee406082e53367498a9ef3901735036215da6d45375341a20ca8fc72f
MD5 6d9d1a5f92fd6098a8961299b17bb4c5
SHA1 dd2f588cc85064fcf8ab3773aedd70cd2f9ecb36
SHA512 9890bd4b26f05cf8ca20299f5ad065e01adee3a9f695c4f30180c205474aee01fb48eab1437370fca228bda13d3ee3d0ca348bdaf6f96326de65f67a33323d4a
TLSH
T1C261F94581A00F5BFF98003892F672BF3674A88288C3DD6E30A9F8795D5674863DCC0C
MD5 SHA1 SHA512 TLSH

Submit Download

41481f73-58ee-4950-b8d5-b1483bdb5edf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\41481f73-58ee-4950-b8d5-b1483bdb5edf.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

75902624-4520-4925-bd1b-88dc14fe70f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\75902624-4520-4925-bd1b-88dc14fe70f8.tmp
Size 1KB
SHA256 e5b969e7f6aed51757a624cae72b344ed8e192c542bcce9e31ace72e808b0b69
MD5 4c75f79feeed87677f20cd0558335bda
SHA1 2b32d3688a3c0daf0e0a0486a9c0b0e1ba53be25
SHA512 7ceb9bbc56b80e083e00d8fc7bd0494d4ca8eba3120d68b2837b216a9ce7b6bf0fccadb82932382c5c8ad7c9272b4637ade7c10874d4683fd7cb3fed50c6f228
TLSH
T1B831ACF7C7D8866E881156F09B28AE2BDE2D151682283C16C9E4EF5BA3F2471D20159F
MD5 SHA1 SHA512 TLSH

Submit Download

bc8ea7b1-a9c1-44ad-8f2b-df8210b3f69b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc8ea7b1-a9c1-44ad-8f2b-df8210b3f69b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d217b640-331d-42e2-a768-a23ce9fa1d1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d217b640-331d-42e2-a768-a23ce9fa1d1b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 07a33deaf65bfb2233f428d2ab34999f5664191dcf6b8a74ba440aa7035c75fe
MD5 109fb8e2372a8f9ea2468595826318c7
SHA1 6739212862ff909ab639ac7a5c57000e221a92ac
SHA512 d15556ad29ecde86c1432cf4f631fc0b863032c2bf1e4685944fb0da0d85ce6fced500221f6ff242791672d5d93e7c6503db018051c91cd1efb3513bc81c1a08
SSDEEP 192:sxZ6RdW1/fwsHIGwIdpd5HW6+WNGYaJqKtIgrJ:sxZ6O1/fwsHIGRLHbGP9
TLSH
T1CE22A8126E28A97B8CCBD21DFA25BF43E6F9503191D51E48AAFC8A1C04E66DD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0ae4264c587c3c98a77dd791c7d5b64aa16dcb740486cad9ef0202ac288f81f7
MD5 f2ed3c724104eff91e03f9baa222d43e
SHA1 f7ea21b5ea3dd7892e20d33a34baff641a3cf79a
SHA512 e922ec830351e75306a4687c3d2f6d6ae5805dbdc6ef4f1294913ff4124fa248b514a03bdb483e9b192e3c9ffb926aa335bfdaed9f50e5d4c7a19d61615f3eb3
SSDEEP 48:K0Nsh9P7/gbTmzIS1gK911XgxlwY23ttyL6lI064I5bkjUISWyf8AiwUXjMhOIQv:KkyAKvqe2dOnOKIQu+viKQMl
TLSH
T14FA16F11716A02807E7E385941B5863A425234B3321CF5BF7FA9C8A75EABE501CFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d06eb87f-619a-409d-9c48-806959468aca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d06eb87f-619a-409d-9c48-806959468aca.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f277907d-b0ba-4bed-8d11-6acca27fd5d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f277907d-b0ba-4bed-8d11-6acca27fd5d3.tmp
Size 10KB
SHA256 031c491def49e255031bf9eedd4a1282a725b366d5bbe882942123831a7f36fb
MD5 cf745f66e3a6ed72977e5ed3d08ad40b
SHA1 47e6c711da5ef3040b6c4efd8e6cb70270e9e4b5
SHA512 f85c28f48da4af58e8c6b246277b5bd6500381345e8e15f3736ab881550013b1e119714463f2904e3ee2dc65c3bf318c9b3e734ac99af15a22980694e1acf8dc
SSDEEP 192:sxZWRdW1/fwsPZNwIdpH5HW6+WNGYaplKtIg5KJ:sxZWO1/fwsPZNRZHbG28
TLSH
T18622C8526E28A97B9CCBD21DFA15BF43E6F9503291901E48AAFCCA1C05E76DE134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f47428ed-4de9-4266-a114-576680b3e086.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f47428ed-4de9-4266-a114-576680b3e086.tmp
Size 27KB
SHA256 2932b1286f8ab1680c0d160dd33530ac87c6ee5f91dd65da59dcbaea33bcdb0f
MD5 df0ad8fcd04eef685d0c3b02d5327cc5
SHA1 224815e9555f958c177f1e9d2b8570c6466c4c42
SHA512 05913f912e162472dc89921ffa586218e33bfdefdd195a8ff258cedabcd090fad0a4d48ab4dcc528ac5fa6dec4d810325a7310f1fd3b9ece87b37701479b151a
SSDEEP 768:tayQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH32rokZ73:tayQRbrWvvlpZu1jaXKLf33NkZ73
TLSH
T14DC2F92B640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e228eca7-1f75-4a1d-883c-3c184fbc641d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e228eca7-1f75-4a1d-883c-3c184fbc641d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4ee9aa3-f4b7-4cca-8c7d-b71cb3127bc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4ee9aa3-f4b7-4cca-8c7d-b71cb3127bc3.tmp
Size 8KB
SHA256 5c3721fc671e6030bdde8a2a86b95cdc2e12fac3494e2c4d14e2749b6a1bf827
MD5 6f5c73f0756967a8aa186d1eac7fd066
SHA1 3656f984cff8a69a004af331399c67e7ebfbca3d
SHA512 5f227a618adc54e9923e355b6d04840b14a20d0b9230dd0ed795c3cef4d89b1f91c2a9317f46f85a15959deb1df030763d309eac5446b5f1e0a258d0c89adae0
SSDEEP 192:SONU6iDCQmiUymTWHq5u88PN0Sq/BxsU6:SONU6/YHq5u8iNk5+U6
TLSH
T1A7020938AC787CBB9DE3AD05B44737179F98117BE7942F84DAE81A1C01E768C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12fb5ba7-03e6-4893-9a87-6c11ac53eeb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\12fb5ba7-03e6-4893-9a87-6c11ac53eeb6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 232348d1351175045d168dd3153960a48571a14afb8909ab5bc53bc7ed4fbd9e
MD5 925d76498a95b093e2785788f6059003
SHA1 8ddbe4c418572d07e43bd2585da54ee6334d20c0
SHA512 e6269d540acaa01ee59eac49f5fafe691a7975b4d0d56612b5e0ae58a252ccbd375affce54dee644e89d340bd44c594314eea7e45fe953da7dbfff74f1138b28
TLSH
T1A2415A68B6FC1008B3B7AF5A9BF3A86D487FB9372E07D45D10110E4E4666A40C872737
MD5 SHA1 SHA512 TLSH

Submit Download