e1cf614e939aed0dda29c2a87069d65f82b3898346ff4fa1378d777cbff42f15

Analysis

max time kernel
149s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261104-w28staed44
SHA256 e1cf614e939aed0dda29c2a87069d65f82b3898346ff4fa1378d777cbff42f15
MD5 f833d4b7c443ac26b32683b67aa040bc
SHA1 42a61674d0873a486ab825a9de3d59e9f2051745
SHA512 6cc87d666c04c8fd246306a77b8e1d6d8c42dde32351daad1b1b0c50d6c560d8f9e0f06b17733cf726796f734dfca71070c223536f3ba18ad732e458ffbe1055
SSDEEP 384:GQy9+4LIZecuHL9FHymEUCwejc6V0v2Mg/qcw/eP1AT9MYrxkq:G5E4LKecuHTymCjciG+LwiA+Yrxf
TLSH
T11503B91AB8C18C320277C2E69E56BF2DED61821B920A084836FD4797EFF2D554E5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2804	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{840968F6-4A64-4675-8B16-9001FB52B495}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe
5656	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5656 wrote to memory of 4996	5656	msedge.exe	89
PID 5656 wrote to memory of 4876	5656	msedge.exe	90
PID 5656 wrote to memory of 2804	5656	msedge.exe	92
PID 5656 wrote to memory of 4876	5656	msedge.exe	90
PID 5656 wrote to memory of 4876	5656	msedge.exe	90
PID 5656 wrote to memory of 4504	5656	msedge.exe	93
PID 5656 wrote to memory of 4504	5656	msedge.exe	93
PID 5656 wrote to memory of 1368	5656	msedge.exe	94
PID 5656 wrote to memory of 1368	5656	msedge.exe	94
PID 5656 wrote to memory of 1368	5656	msedge.exe	94
PID 5656 wrote to memory of 4972	5656	msedge.exe	95
PID 5656 wrote to memory of 4972	5656	msedge.exe	95
PID 5656 wrote to memory of 4972	5656	msedge.exe	95
PID 5656 wrote to memory of 3668	5656	msedge.exe	96
PID 5656 wrote to memory of 2564	5656	msedge.exe	97
PID 5656 wrote to memory of 3668	5656	msedge.exe	96
PID 5656 wrote to memory of 3668	5656	msedge.exe	96
PID 5656 wrote to memory of 2564	5656	msedge.exe	97
PID 5656 wrote to memory of 2564	5656	msedge.exe	97
PID 5656 wrote to memory of 876	5656	msedge.exe	99
PID 5656 wrote to memory of 5488	5656	msedge.exe	100
PID 5656 wrote to memory of 876	5656	msedge.exe	99
PID 5656 wrote to memory of 5488	5656	msedge.exe	100
PID 5656 wrote to memory of 2732	5656	msedge.exe	103
PID 5656 wrote to memory of 3872	5656	msedge.exe	106
PID 5656 wrote to memory of 5304	5656	msedge.exe	107
PID 5656 wrote to memory of 4440	5656	msedge.exe	108
PID 5656 wrote to memory of 5880	5656	msedge.exe	109
PID 5656 wrote to memory of 5880	5656	msedge.exe	109
PID 5656 wrote to memory of 5028	5656	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe013cc188,0x7ffe013cc194,0x7ffe013cc1a0
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,5102721804472382569,1405196508759755879,262144 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,6658171889737259729,13236684927360646387,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,2857459427702932309,18301419773142111538,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,10075430560604903500,18022647494680832050,2097152 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,16043631029209526083,16304041245310235029,2097152 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3944,i,6710098028871548191,3412535894902088230,2097152 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3960,i,8188192832617518037,5770305414169067886,2097152 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:9
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,15521391361733327069,18403859927608425577,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,3652239072233735178,15971927734523089938,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,2789122711204440605,5020961056786770658,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,2789122711204440605,5020961056786770658,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4652,i,14580354764617346499,14019432102720335100,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,8228362958547242788,11180420893525483060,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,9468734270518591672,12852899077285755048,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,16384086406924165625,16412746133206559285,524288 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:14
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,4134596344621541278,8849655898142623899,262144 --field-trial-handle=2256,i,7707515051205930469,8832595263746545018,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

06b40500-7099-4dab-8a78-9ea5480eaf69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06b40500-7099-4dab-8a78-9ea5480eaf69.tmp
Size 34KB
SHA256 086e4cb74ebd185ad1d32170c813fbe93ec804e9531433becf8a0885b0d44995
MD5 3ac37117d98d737085ce3cc162efe168
SHA1 bc58b44e59f94f26022149eaeabeb69dbc14f158
SHA512 44b0e40735e5875f75da8b9b319d7f5bfeaf8a250f499e370200986680e6b1910fbe267e3eed31fee8438112d9837eb6e99dad731ee100439f0aac776376b6ff
SSDEEP 768:6p3O0KSf9cMqjYyEMbxyJugQVTJ7vvmeX+E75EO4LV:6p3RDyEmxyJJq17vAkQh
TLSH
T1BAF2BF71A8A59D7389F38685B209B787FFE44253C8C91B84D8CD5E1D018B6ED274BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f6b6307-a8e5-4f6a-8f55-3aca2ffbd7b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f6b6307-a8e5-4f6a-8f55-3aca2ffbd7b7.tmp
Size 39KB
SHA256 ceb4310385363fb9db73b2462eeb347374b90aaff2ecdafc35fee51fa00c974b
MD5 333b20874d26cd37e03304389a21c1b0
SHA1 cb46b20bb8cc1998cd05af6b51d2d8923b697147
SHA512 dd094387bb9659f0d55933b872e98f701531ce11fafe1ebed5e2f0bbb0dc619d04ff08532f4bbc140d42f6a358d7ca593fe270e83cd885d240311f634461cf72
SSDEEP 768:f/UxvxjgC+l37+KSf9cMqjvyEMbxyJugQVTJ7vvmeX+hrZ:yZj3+l3E2yEmxyJJq17vApZ
TLSH
T12903C031ACA5AC3398F79285765AF787FFF4056384C51B9488DD5E0E068B3AC534B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13546c82-13e3-4b98-b189-95e316b317d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13546c82-13e3-4b98-b189-95e316b317d1.tmp
Size 38KB
SHA256 5bd684a1c442db7b486931719bd93bd96d3d8b2ddb44ef2991caca3200b658d1
MD5 28c453af918b82834a1c4455f2ee21ce
SHA1 486856a62d0c402aa6005a2665c15dcdedb3932b
SHA512 b2af24415392bc36d109bf2b12621bb4275b97c5aa837e1614b756ff764f807c2680c2c2bb9adea3aeb1541a0c691e291202f0d754124c3e2bd2913ef6a7b32f
SSDEEP 768:u/UxvxjgC+k3pKof9cMqjXyEMbxyJugQVTJ7vvmeO+SHtBk:jZj3+k3tYyEmxyJJq17vnSbk
TLSH
T11503C035ACA59C3389F792847649F787EFF505A384C62AE484DD6E0E128B3BC530B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ac9bbba-57db-402a-b01a-27d1e2faa392.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ac9bbba-57db-402a-b01a-27d1e2faa392.tmp
Size 36KB
SHA256 0639aad28f9da591ee3a4f6a359630e64cb3d0d79f04d761f1deaf2b31b5f782
MD5 0c30f20db544ec52c5b93dba2a79a53c
SHA1 b251747925e94976d01af0e0c5038c18580fcbb9
SHA512 bebf2c8a8a1ae8b52ae86231139f0efa280682a18d505a705fb515260cad514b6bd125099f8792b23751b925f208cbd8398bf061776abe89bcbfdf673d9aaab7
SSDEEP 768:SFd/3Gwgn0KSf9cMqjEyEMbxyJugQVTJ7vvmeX+E75EO4LV:i/3fvyEmxyJJq17vAkQh
TLSH
T122F2AE729894CD779DB68B84F219B387EEF002A3C8D95B90D5CD5D1D018B2EC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

07c779f4-4c57-462e-b2c9-d3b64695e8a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07c779f4-4c57-462e-b2c9-d3b64695e8a5.tmp
Size 11KB
SHA256 f05a8a9249f68876aafd29dabab64bd8d0adf14332c7e47ea1e30a018ebd67ac
MD5 50a05e63c5bab0774b074cfd0ba96255
SHA1 3120c4c3167654ccce0abfd61e6dba30b2db063c
SHA512 6191dea56e6151dfe8c9f6c1ca36c1c943b871e04e4a6d15e9e8cb5464a41c6ee2ec6370aa1bf2d2b7277b750d76e1d9a33c8cacbf4c2fb31d0be48cec687d2f
SSDEEP 192:sxRzR0b0/f7sLkxzoA8p47/g6+WNIYF0tUG6IgDvJ:sxRzM0/f7sLksW/5I4F
TLSH
T157329415AD68A93B9CCBD20DFB55BF53E2F91032A1951E48A6FC8A1C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

871579f5-183a-4587-a7ce-5eb4f2fe1589.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\871579f5-183a-4587-a7ce-5eb4f2fe1589.tmp
Size 23KB
SHA256 8ded6dfc1e90685eeb4cf9ba1b8160d5598d729a3067f5433d4a475a003f7df5
MD5 5030d4289f0f0a0cda336c619b2f5e49
SHA1 76e949e201f6984752646627562d140930089380
SHA512 510014a2dafab4aea8cb1a5e77c989f3af5ec0e9cde70c33cf1593952f74cf32a1b964172ab8d146757acae10313adb17815c638179bf3b909dfe44b269cf42a
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnero+P/:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0VJ
TLSH
T1BAB2D92F640CCB7E4FD04A9DAC196FDB6DAC02C796588D4047FA994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ed818cce6f50d74f627f33121258878ceb22bd65dbb3555cb556059c4df9ab30
MD5 0f84083988f1b8f55fb5f7165dacb7ad
SHA1 8092e2f7b61c3ad5c6398a5b9855d4b73e9980c1
SHA512 83ccbdfe3e05307209395f99146cc83ac0bb79e21d5087ab4058b2378ea62aa557ddba07411b02b9cd01031b936a93a5322e02cb82cfe0c5a3661c3bd317c7f7
TLSH
T1FF5174801F669131FFBC003189ECFE877630B681959F1E2E3958D5F42A9A7EF9241008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 538bbf1ba63b11daaf53e51fb26ade0887bed6da736d1d913cb3b727bb549ab2
MD5 ade734c5e3aef4a08e16ade196b7c58f
SHA1 eaf3dd38806c6928a8abe6b6cd138649605f5768
SHA512 21d9571e2b420aa199d2250c489c19106c904ea44edbf7f2f41bb0f932fb7689eaa358fdafd69981c1818c906b72d6da20931c934cbf85d4500f6047b071dbdb
TLSH
T1385184801F669131FFBC00318AECFE877630B681959F1E6E3958D5F02AAA3EF9241008
MD5 SHA1 SHA512 TLSH

Submit Download

14ad70ca-d589-4b54-94ba-5dc79fcb248e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\14ad70ca-d589-4b54-94ba-5dc79fcb248e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

32c8d22a-ec81-46ca-89e2-1f5be919db61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32c8d22a-ec81-46ca-89e2-1f5be919db61.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

5921cf35-8b3a-4146-8763-f0563ff0554c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5921cf35-8b3a-4146-8763-f0563ff0554c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cd5f2bb5-41e7-4b6a-ab94-b7027fc50ef8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cd5f2bb5-41e7-4b6a-ab94-b7027fc50ef8.tmp
Size 2KB
SHA256 22a8a733b9860fb5845920ecfa68f28f5a15bca10b09168660ee9b165f0eec73
MD5 4824b385af761aba3e7a88b97c0e4241
SHA1 c63fff62113c2167bb15c9d422e9021dd2275207
SHA512 54161e3e7dbc68b36b12588a1db4400e34c7ac0465cb30a0350f7f3a7c6171e62a32cc6878ba09857666371196896684ed33d7e302e64d58544c2dfc57011fc7
TLSH
T1A551CFF783E4867E991196F0AB14AE2FCE2D0516432C3C5AC9E4AE1B93F24B1D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ac81a717-0353-4f08-b370-9417cd7d5f15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac81a717-0353-4f08-b370-9417cd7d5f15.tmp
Size 10KB
SHA256 ddd8ed557ad7b13acc288520313eef7a9c750178f250be2fa476c959ab23ea7e
MD5 2990e5075e4d5dd4845309136246e3e8
SHA1 c5580f2df05bc4eccee714cecd83600ef679b967
SHA512 b39f05e50a8e7887edd1c04d11bd6a43b24cb855d4c458d0aa073a499db4950674ae7008edb8197569af1d7066cc26d0fda6ec84c78b0d2bc4970f2188ea6d8c
SSDEEP 192:sxR7R0b0/f7sEHzoA8p47/g6+WNIYF55UG6IgIJ:sxR7M0/f7sEuW/5Ins
TLSH
T103229515AE68A93B9CC7D20DFB65BF53D2F91032A1D51E48A6FC8A1C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f23e93f6-b037-4a28-8291-55a59e4ab3fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f23e93f6-b037-4a28-8291-55a59e4ab3fc.tmp
Size 10KB
SHA256 de1eee7fe03fae812996b69b235537d77896e5f6adaa9dd35e05aa5c3d63d75a
MD5 3fa05521c003131182586a038376dbe2
SHA1 ca674db77f337a1e2f819b5a0869ce37cb4a64bf
SHA512 19799b8d8317be0e5ceadcafa79d9bcd5f9e1adbef931e88d17abfefdd8c50e72f7dd534f07c72ef4ceab4d73eea22d74ab7a19a50f5e3c3bb1918fc04fdf6e1
SSDEEP 192:sxRUR0b0/f7sLJHzoA8p47/g6+WNIYF55UG6IgDJJ:sxRUM0/f7sLJuW/5InH
TLSH
T1F4329415AE68A93B9CCBD20DFB65BF53D2F91032A1D51E48A6FC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f78334b6-3539-4f0f-8115-bd5782a8bb85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f78334b6-3539-4f0f-8115-bd5782a8bb85.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5518305f-5d57-4fa7-800e-ee1e2b824e37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5518305f-5d57-4fa7-800e-ee1e2b824e37.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e82f7c1705949e55a43cce608733d10c57ca44e62c1c42b3f7fbde0ace903332
MD5 cccc1853366bbadf558d856c1044de90
SHA1 d308584430959d38a086fcdf6984e996b24b9d56
SHA512 5f073922f8c3e66936cf7897b6a7ccf55b6cd77aa4a0d656e9d09f56e7bfa8a104dcb9f9ffef96877f75fcff8585cb1583dbad86900a124cd0e36e141ee868d1
SSDEEP 768:p/UxvxjgC+k3Wvf9cMqHyEMbxyJugQVTJ7vvmev3SHtBk:cZj3+k3swyEmxyJJq17v5Sbk
TLSH
T11C03CF35ACA59C3388F792847649E787EFF505B398C62BA485DD6F0E128B3AC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9b4d6ad-814c-451a-a394-752d3d2e81c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c9b4d6ad-814c-451a-a394-752d3d2e81c1.tmp
Size 34KB
SHA256 b1f7c409fb1790b9aafc5c27035ea9c89ce85e58a3a2fca82168104d70b4d882
MD5 001efbfbbd31b08ec79890549b807899
SHA1 5a21228e4c294fa32e8c06fd8fb3e157c8a51e31
SHA512 5f8e6953b4b65b57d4fbeac623f05f46c62dc2cd8db057242fd7fa26bcf17b922dde5288d93b866f47549958b14b248624398773d409100fb56e164b88ff74dc
SSDEEP 768:Ep370KSf9cMqjYyEMbxyJugQVTJ7vvmeX+E75EO4LV:Ep3aDyEmxyJJq17vAkQh
TLSH
T1B9F2BF71A8A59C7389F38285B209B787FFE44253C8C91B84D8CD5E1D018B2ED274BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1847276a-399b-4d05-b704-c7ce10621180.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1847276a-399b-4d05-b704-c7ce10621180.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download