624ceb2e977658ace5a4449a806f70c508e0220b8dca82f8f2da239e22f4e7d7

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261104-w28staed45
SHA256 624ceb2e977658ace5a4449a806f70c508e0220b8dca82f8f2da239e22f4e7d7
MD5 55e94b638816562674d784eafcd02a3a
SHA1 bf9d9845f0cdaaa36995ef31e201acef0a7c2000
SHA512 f84080f6b507311a57adf3a4fc65cecd2ede7c3cae0d458c29dd38c0c0f84843dd410edd66066e4ffcea7293c3d7c1f49a9fc084e56f8016472e5da9e8470493
SSDEEP 384:GQy9+4LIZecuHL9THymE/wejc6V0v2M9B/qcHfmieGeT9MYrxkq:G5E4LKecuHxymEjciGbBLReGe+Yrxf
TLSH
T1F203B91BB8C18C320277C2E69E55BF2EED61821B921A084836FE4757EFF2D154E5358B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{2751E208-98AC-4A1D-AD09-B4D2F6812B3A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2068 wrote to memory of 1952	2068	msedge.exe	86
PID 2068 wrote to memory of 4116	2068	msedge.exe	87
PID 2068 wrote to memory of 2144	2068	msedge.exe	88
PID 2068 wrote to memory of 2144	2068	msedge.exe	88
PID 2068 wrote to memory of 2144	2068	msedge.exe	88
PID 2068 wrote to memory of 724	2068	msedge.exe	89
PID 2068 wrote to memory of 724	2068	msedge.exe	89
PID 2068 wrote to memory of 3296	2068	msedge.exe	90
PID 2068 wrote to memory of 3076	2068	msedge.exe	91
PID 2068 wrote to memory of 3296	2068	msedge.exe	90
PID 2068 wrote to memory of 3296	2068	msedge.exe	90
PID 2068 wrote to memory of 3076	2068	msedge.exe	91
PID 2068 wrote to memory of 3076	2068	msedge.exe	91
PID 2068 wrote to memory of 4812	2068	msedge.exe	93
PID 2068 wrote to memory of 4812	2068	msedge.exe	93
PID 2068 wrote to memory of 4812	2068	msedge.exe	93
PID 2068 wrote to memory of 4432	2068	msedge.exe	92
PID 2068 wrote to memory of 4432	2068	msedge.exe	92
PID 2068 wrote to memory of 4432	2068	msedge.exe	92
PID 2068 wrote to memory of 3932	2068	msedge.exe	98
PID 2068 wrote to memory of 3932	2068	msedge.exe	98
PID 2068 wrote to memory of 2972	2068	msedge.exe	99
PID 2068 wrote to memory of 2972	2068	msedge.exe	99
PID 2068 wrote to memory of 1116	2068	msedge.exe	101
PID 2068 wrote to memory of 3600	2068	msedge.exe	110
PID 2068 wrote to memory of 2164	2068	msedge.exe	111
PID 2068 wrote to memory of 3208	2068	msedge.exe	112
PID 2068 wrote to memory of 4928	2068	msedge.exe	114
PID 2068 wrote to memory of 4928	2068	msedge.exe	114
PID 2068 wrote to memory of 1312	2068	msedge.exe	115
PID 2068 wrote to memory of 1312	2068	msedge.exe	115
PID 2068 wrote to memory of 2136	2068	msedge.exe	116
PID 2068 wrote to memory of 2136	2068	msedge.exe	116
PID 2068 wrote to memory of 1128	2068	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x2b4,0x7ff88090c188,0x7ff88090c194,0x7ff88090c1a0
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,9383394575393578505,1014642755963874003,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,1445580350526320124,14913591176759945588,262144 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,10957533145716946964,10746488287452368636,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,3027301702117834307,2453671084693788570,2097152 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7629982715926325052,8764637977737468006,2097152 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,17954015068015753283,18041222758977489237,2097152 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,6314514961987216506,14575245605086207768,2097152 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,14521993035567740259,6755704929316090580,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,10925550582803546100,3485083299254733536,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,502499880464382204,15115261700267686936,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,502499880464382204,15115261700267686936,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,17111908626031938689,7764164925625500166,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,7456982653445432344,64590566248757928,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,14724759909860732828,18263408311543055949,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2828,i,13047633726126023708,2284751415887892762,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,8297321055225951052,9825895546485722821,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12046507630159182530,3563394373866673448,524288 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6000,i,15091369402153029269,13038418423305632426,262144 --field-trial-handle=2300,i,11541125307848345724,17921785187480280344,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

105cb6b3-cca9-49c3-9aef-a53bccf7d7a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\105cb6b3-cca9-49c3-9aef-a53bccf7d7a2.tmp
Size 8KB
SHA256 acc1f544586d10d118d5e5be980a1aff13c4e47d76b82a63cc28edd60da52828
MD5 f275d439b54f8221ed1e5fb740af3698
SHA1 0b047f3e300e7eae171d411ed747c633dcc0c798
SHA512 b963aed75fd4d931944aa8c44a9a755fc90c780f90b78e4f2e00a82043c40993a489e4c3c03655c7ec491ae03968a1bb42ef7427ed49f5ddacf5c5725d4ad68d
SSDEEP 192:aONW6IE7QmiUyMhTPuIGmXNjzorvRa0UC7swVU6:aONW6Dt7PuIGmXB8oescU6
TLSH
T11B02EA35AC78BC7B9FF3AE49F4872623AEA5102BD6951F44DAE81F1D00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c450edd-155b-4726-8d5b-8935d8d2607e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1c450edd-155b-4726-8d5b-8935d8d2607e.tmp
Size 8KB
SHA256 09bbcdedcc436c809ef849fd958780faaef58a8d2d4b5fc297d3cee1887b1e45
MD5 0e32562f9cb035e982d37467beb0aba0
SHA1 0ebe011d814df0b0e95e350fa70dfd02ab0d3b80
SHA512 207d55ad0fe3f59c366d4f33ec5c3afbf58453245a57cb7e2bd401bf38d61b18ff43c74e047dcb9ec41f24aace85ce71be64143cbdeb1572cf38cb64c9a5480c
SSDEEP 192:jLONw6IE+WQmiUyehTguIGmXNjzorvRa0/cX/eUPQ27H/q1U6:vONw6DLTguIGmXB8oMcXxHmU6
TLSH
T14D12FA32A8B8BC6F5FA3A944F4873513AEA54127D6896F50D6EC2F1C01EF25C134A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ce15f8c-4e23-4abf-aabe-3231c7d08b83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ce15f8c-4e23-4abf-aabe-3231c7d08b83.tmp
Size 18KB
SHA256 3474628d100cde7ea709470e095c60680644e4fb72e1612eaa895a3dc6281b96
MD5 03f3ef73ed520b43ccff94dd6ab9ecba
SHA1 293ee6fa62b94de7bfe1079064f399c9b3c82fcd
SHA512 ed90ec726130f76e9328a7df06076ee3739e9172ed661ca9c9a493dd77e140e3124f5b52d14d195de5cc283a74fd421beebdd7badcf5ed2d74c82694168c8029
SSDEEP 384:SQkUSv0sN9mvi1BoAzIGmXB8oMcXOimH7vBEkxaFIIlk:K0uYyEnM0OimH75EkmLG
TLSH
T13E826C72D8B8BC7B4FA3A554F14A3613EE748167D6C85B50DADDAB1C01CE28C234B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9435a53b-4e54-47c4-a2d8-62adde51a721.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\9435a53b-4e54-47c4-a2d8-62adde51a721.tmp
Size 105KB
SHA256 dcc5e5a44077d428b0e344ee45b3099e7eff2ebbdd8273ef1ec772721b41a5af
MD5 2b868614fa0b813f62a2463cf5176c67
SHA1 81b9a2da4d126d229190379b81cd945cd7b5b900
SHA512 34e1f30cbfede4f1f7f1c635e707b7391a5a20f0cfa6a316714dca4d73ebf5b8fc4dbe0bb321a92d46b6cfe02713df76143a1642643c1fe3dcf2ca3319f0ecb5
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7P:fwUQC5VwBIiElEd2K57P7P
TLSH
T16FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

0a5697ed-2387-4cfe-8a9c-c05d10d4e862.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a5697ed-2387-4cfe-8a9c-c05d10d4e862.tmp
Size 9KB
SHA256 5a0844ec18d8804afbf2e042911af80a8908021d9af974903990b57d5dbf2503
MD5 31e937a5585141a69f2afa5a36e61cd4
SHA1 6ffc5d95aa0eb0ff963a9249e679205d8d8b5ff7
SHA512 8852ed4e18adf3a5a7da017224fa532865c65826cb7bd5e4a0caae6f8caf3e89be58565415dcb7d58ff565c501e8690856eb415631489926d9f8c7e6bd0afd44
SSDEEP 192:sxZjRLW//fAsAUnIdpdEHW6+WNGYaplTc4wQ0IgrJ:sxZj4//fAsADmHbGvgQ49
TLSH
T10122A7526E28A97B8CC6E20DFA55BF13E5FA503251D41E48EAFD861C04E66DD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59a9d645-cdc3-4821-b003-70a335b2f70d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\59a9d645-cdc3-4821-b003-70a335b2f70d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

636545a0-eb02-4b4b-b435-d77ca2a92608.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\636545a0-eb02-4b4b-b435-d77ca2a92608.tmp
Size 27KB
SHA256 dc8f223a935f031067bc26638b1e6bc445ada42481bc4d56b1d63a04a0bb70d8
MD5 7404b308304f7fb2cbb1459a3a20ae90
SHA1 966e2021a8dbcbf01f0f68fc226dc5ef04e9ba7c
SHA512 eaaf868c06c10a217068cb29c351baff0b98583bb4c4c2560dd35bce37f829dcc17523062da7901fa7363f382bc7cf5a1b5efa8aef5196056089c2c51394ac92
SSDEEP 768:UEWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Lro4lfeFmReT:UEWPcLKWvKeEeu1jaClLiF744lWFmRG
TLSH
T15DC2FB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8129f4ea1a5e834fdd11051c72d6c97433e2dd540d7b02cc32d94d457ce8db62
MD5 bd1e90136830c074bfe13eb586a1911a
SHA1 8b7ea95226f8b6eb8ba1dcc0591f3e303f96cb5f
SHA512 d198b6ca105c52cf882355e4cd77bfafc0c0354579fd6234b51eddcbbf2aade585a672be300d8d8f9829981e32aef90613f4f153cb98a987daf2a55f7d2f8583
TLSH
T1D8E0268555E9C23FA608B58703E86B8CC2E0361FA3C0ED0E1B48C4A5B902044A2BA6A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8375f234f038821795c577672057ff9cd271f7f093647442c0dd105026ce3d78
MD5 80a036ef06d5b6b93683f984bff37971
SHA1 0ec8709054e4ce2b079aa4b41cb58e3f8a3a4083
SHA512 faefb0e36489f8e6637325cbed4f91a6beb08af0d7b2a2ba654a6a57291c5579d46e012a43553e395603fae97a59764c42ef3a50aa15a6f6a721cf09f08af920
TLSH
T123E026C495C8C33FF618769B05FEE30C82A0361AD3C0698E5F15C8887501180B2C6AA4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d15fba6796a64a0ba7973c4345787ca6fe42cd431e87674a406c640e478f289b
MD5 b690821780ea77e04ab26e04caa83f1e
SHA1 7acc711d185a39100ad4657e0be29799c34ac2ae
SHA512 1b3ee523cdf79cc0d14bac3e2bda08235f138e84ef6f440103452a6bbd822c6ad2d4862496d7b2fc946ecb53373de2acbdbde3f05b2480927da38c0c75f7cb50
TLSH
T11F6170C40540C06AF7D84175B5D6484F3DF7E5BDD1B34EE615A8D976AB0761140C0E7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b6aa820f2643e25f64343634afe13410c4a0555494c719b8f8270e04f534ad33
MD5 0d85f26a73e3aa7f4c0212200df8c04f
SHA1 75057fdb6dbd86ff4ad4ffcea79bcdb301861ca4
SHA512 4d8bad711bfc45c9633f8eb269f952ef97b8659fdbdff0eb95e4baa42e7d2038d91e1f7a2f9ddb1110d66350d0cf9598c98a76e05545f46583e5da561b391b1b
TLSH
T1F7618FC40640C06AF7E84071B5D6488F3EF7E5BCD1B34EE614A8E97AAB0761240C0F3A
MD5 SHA1 SHA512 TLSH

Submit Download

d9f2edbf-d189-4c49-ab90-ed428e0e8237.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d9f2edbf-d189-4c49-ab90-ed428e0e8237.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0b672adc-d6a4-43c1-9952-f06966611e0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0b672adc-d6a4-43c1-9952-f06966611e0e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

596f2092-b762-42a3-9dfc-ca477d2af70f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\596f2092-b762-42a3-9dfc-ca477d2af70f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

5f380602-64d2-4d8e-af12-0fac99eec56f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5f380602-64d2-4d8e-af12-0fac99eec56f.tmp
Size 1KB
SHA256 02818281f00e4176ead063587dc36eb4a134f3862f16ea468b79041242d3c970
MD5 11f925acb825578eba0f925a580068d3
SHA1 1a45662b9dc9fa7ef703f1242417b08db5cbec71
SHA512 c7f3bf7116cad4b9ec0b76bdcba1c4c737d335b4dd5a5df7651e5f8d7df9d260f8e31eb4db9eab1e6da6dfd81f668307250f9415e23fb1a0d1702109537ce12f
TLSH
T151318AB7C7D88A6E891156F05B24AE1BCE2D1A0682283C56C9E4FF1B93F2475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 70d2ce89d78842321add4513d3a5406790a8f0fe74eb37f6c093e56177b1f486
MD5 7ed46144ea9aae2284ef6e1aa610b89f
SHA1 61617bdd80dad06c8d7baa44bb34d18dabac2dbf
SHA512 b91896c63d82f84141c86a1e203893f65e14582310f0e8889211f9134ce8326f1a6ddb2ce2b6f5eb8ddfc03c97aa1760f8f043b66eef2d0b25e47f2071226ff8
SSDEEP 24:KYuhuIcIRKqh41aSrclyXytWRktI/KBhK1eSEgmOZWgEI5KChg1KSzEdyXP43n:KAfIRKc4MjyJaI/KnKg/HI5KUg0zyW
TLSH
T13F91F040316A028439BF2A0C55BA961E1242B2B3705AF57F3FBD85A75E6BF540CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6bd7c39-1b6e-4c49-ae84-e712f4f6f670.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6bd7c39-1b6e-4c49-ae84-e712f4f6f670.tmp
Size 10KB
SHA256 2afc2c60526ce71515ae9b6a60dcdd4ae33b6aca34a75e31ec916e919120dec9
MD5 22274a558555fa3045ee77baed25e03b
SHA1 299af65fd2085227c90cdb71299731d4ef7ebfde
SHA512 ed750068cfe83d5bfc879a343db6349c5882067f8f13dd47c3064c12c261942a6ca181d9988142bdab6561c6d1fb0d4021717b107497559ee661b47e6ad8ed0e
SSDEEP 192:sxZ6RLW//fAstrnIdpHEHW6+WNGYapHT/4wQ0Ig5IJ:sxZ64//fAstkkHbGBXQ4+
TLSH
T1D822B7526E38A97B9CC7E20DFA55BF13E6F6503251941E48ABFC8A1C04E76CD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba47a107-1075-4d02-a64f-38990309f0c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba47a107-1075-4d02-a64f-38990309f0c2.tmp
Size 9KB
SHA256 312fc733ed639d833b34d77cf9cc1098b5025a134bc5af6a090a49ae94bcefa7
MD5 fa774f509fc021004df59b041fceeb88
SHA1 fce5a59628b8df3276c51fe765c9673ded8e5313
SHA512 15f87ffa461192fd04035301c5ac643a5b0fefd1c1c35584f7dc76578a4863f9d29343053d6979e299270426302cdac774c4ecb08bf554a1051133f449d574b7
SSDEEP 192:sxZjRLW//fAs3UnIdpdEHW6+WNGYaplTc4wQ0Ig5iJ:sxZj4//fAs3DmHbGvgQ4U
TLSH
T16D22A852AE38A97B8CC6D20DFA55BF53D6FA503251D41E48AAFC861C04E76DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2caeca6-938a-4128-a7ff-04967873be08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2caeca6-938a-4128-a7ff-04967873be08.tmp
Size 10KB
SHA256 7317f01cfd1eef6eb997008e7c7df368972cd66d5671fef89eb0ded38dec187f
MD5 aeb7fa9fd27dae979ea8a93f1084fa01
SHA1 bd0ea894fb0bdf6f55cd5c4d1e0f2f027e70d0de
SHA512 0ad68b241bc050984f3d14d7d0fe105c89fb424c850af14fa48e5b3db0cc5b85c6232048960a1038ddb222a527f5b56400ab9105d4899353260eba19a2cd5fd0
SSDEEP 192:sxZ6RLW//fAstrnIdpdEHW6+WNGYapZTM4wQ0Ig5IJ:sxZ64//fAstkmHbGXQQ4+
TLSH
T1CB22A8526E38A97B9CC7E20DFA55BF13E6F6503251941E48AAFCCA1C04E76CD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3015fc9-ed77-4a5c-8c3d-fdf9eb845387.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3015fc9-ed77-4a5c-8c3d-fdf9eb845387.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

dad04772-fc6c-43ca-992a-411aa7bddd7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dad04772-fc6c-43ca-992a-411aa7bddd7f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1628c5c-a03f-4aae-ab0b-50c6aa771461.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1628c5c-a03f-4aae-ab0b-50c6aa771461.tmp
Size 21KB
SHA256 90f4f45021d5b4b8fd3ee56a2b7af4821b1d8e79cc46884cddd0d76b953b86ed
MD5 db0e8c79a66882ed0a89450e538a6b78
SHA1 e46f4a831e90daa0e73a52ad4047121089723404
SHA512 2fb05f21b36c0a47b1d9167881f52e349c83cc9022faea6932496f203ba71bc672d937f63dd0604892e64eaa0363c44ed8c20f5d382a01fdef650d3bcb0c523b
SSDEEP 384:ziFzQkUSvxqzsNH8TUNTUlIl/vi1BoAzIGmXB8oMcXIsimH7vBEkxaFIIlk:eFdEiwg8YyEnM0IsimH75EkmLG
TLSH
T1D0A25B7398A8AC7F9EB39A44F54A3613DEB48167C6C99B50E7DD9E1C00CB18C134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf3d4812-11cb-4a45-bdd1-2be8fa722ad8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf3d4812-11cb-4a45-bdd1-2be8fa722ad8.tmp
Size 18KB
SHA256 ad995f81016b4884258a1d2d991b90d4aaa6bfe72631600305f82ea2240bc84b
MD5 9b2af2adf8ee2f51b97cb095ed2f9d5f
SHA1 18601d8d03605fc029d0cab7ff95df893fae7da3
SHA512 48ee48fc3f7a7ec41a94e8b2bab0ecebdf5eb41f23d69e0ea2fd62976cfa10d4b17c0c2287fc3a277ac2bc0f7cef1987159d684270c5e7697c50b3d473311e84
SSDEEP 384:rQkUSv0sN9/vi1BoAzIGmXB8oMcXOimH7vBEkxaFIIlk:l0LYyEnM0OimH75EkmLG
TLSH
T199826C72E8B8BC7B4FA3A554F14A3613EE749117D6C85B50DADDAB1C01CE28C234B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68cede32-35c3-4e53-baea-3882a677e8a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\68cede32-35c3-4e53-baea-3882a677e8a2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f2f7d4a1f7e2eb5b6a5cd9ca1cd0a941aed9d0aae2b6d513d278a99ce5200230
MD5 69762ae496fc970fa3421782246473a1
SHA1 89dcf45130494f34aeb29eaaf62d09a4e650203a
SHA512 973a691e8bf10530a193e3dd765f4ea764301ad513dded51288301973eafdcb9ed2daba05fee21a848b156c6c2c17eaa774753ecc4932b16e0053f5752272690
TLSH
T1FC41D968A6E91148B3B76E56ABF7A46E487EBD732F07D45E10110E4F0666B80C871733
MD5 SHA1 SHA512 TLSH

Submit Download