7a103b41d349e5bd795b197b2cac5d11762686efb665c3616ec74bd3873734b4

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261104-w28statxby
SHA256 7a103b41d349e5bd795b197b2cac5d11762686efb665c3616ec74bd3873734b4
MD5 5c2b35a90e81a60e2fe820cb09d61d12
SHA1 3d320f03b454325a873a8eb58c98789dd64dd733
SHA512 e266ff9b2c2911d407411bcf218124a47791a0fbb4bf7d228399b316bcfe1945fd16c38e8e176649d51c1d34b356469f8c1f30503575736e8949a56dcd2e5cad
SSDEEP 384:GQy9+4LIZecuHL9xHymE+0wejc6V0v2MUe/qcHfmieGeT9MYrxkq:G5E4LKecuH/ymkjciGyeLReGe+Yrxf
TLSH
T1BA03B91BB8C18C320277C2E69E56BF2EED61821B920A084836FD4757EFF2D554D5358B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{81FF8AEE-5E3B-4E0C-8E74-48B6ECD44F20}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 4688	4964	msedge.exe	83
PID 4964 wrote to memory of 540	4964	msedge.exe	84
PID 4964 wrote to memory of 2228	4964	msedge.exe	85
PID 4964 wrote to memory of 2228	4964	msedge.exe	85
PID 4964 wrote to memory of 2228	4964	msedge.exe	85
PID 4964 wrote to memory of 2124	4964	msedge.exe	87
PID 4964 wrote to memory of 2124	4964	msedge.exe	87
PID 4964 wrote to memory of 3376	4964	msedge.exe	89
PID 4964 wrote to memory of 3816	4964	msedge.exe	88
PID 4964 wrote to memory of 3376	4964	msedge.exe	89
PID 4964 wrote to memory of 3376	4964	msedge.exe	89
PID 4964 wrote to memory of 3816	4964	msedge.exe	88
PID 4964 wrote to memory of 3816	4964	msedge.exe	88
PID 4964 wrote to memory of 2260	4964	msedge.exe	90
PID 4964 wrote to memory of 2160	4964	msedge.exe	91
PID 4964 wrote to memory of 2260	4964	msedge.exe	90
PID 4964 wrote to memory of 2260	4964	msedge.exe	90
PID 4964 wrote to memory of 2160	4964	msedge.exe	91
PID 4964 wrote to memory of 2160	4964	msedge.exe	91
PID 4964 wrote to memory of 4572	4964	msedge.exe	96
PID 4964 wrote to memory of 1652	4964	msedge.exe	97
PID 4964 wrote to memory of 4572	4964	msedge.exe	96
PID 4964 wrote to memory of 1652	4964	msedge.exe	97
PID 4964 wrote to memory of 4368	4964	msedge.exe	100
PID 4964 wrote to memory of 3700	4964	msedge.exe	109
PID 4964 wrote to memory of 3640	4964	msedge.exe	110
PID 4964 wrote to memory of 1748	4964	msedge.exe	111
PID 4964 wrote to memory of 4360	4964	msedge.exe	113
PID 4964 wrote to memory of 4360	4964	msedge.exe	113
PID 4964 wrote to memory of 4272	4964	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff952b6c188,0x7ff952b6c194,0x7ff952b6c1a0
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,14726699239567992049,5123654530781265137,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,11143047768425255517,11308354577067633054,262144 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,7541004335862480447,15262240841184942997,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,13075584533857548104,7062557299941445838,2097152 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,18083109304964034458,14400330001130650372,2097152 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,8856808222423247232,6631330661618165,2097152 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,13691903498412274736,5135009356225801692,2097152 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,4490910680634840365,5172260430802827458,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,13980606091070909057,16679736557580136080,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2743389946019163280,15123474299024610790,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2743389946019163280,15123474299024610790,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,7394440606461414650,14183685376589123900,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,13356531241380024760,16310417755104586853,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,7027210265324498246,495286859993595859,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,9408020375948025827,5293919064118194515,524288 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5836,i,16700670554435136587,18412030319642339913,262144 --field-trial-handle=2288,i,4436675603890525418,10260419663758010074,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

01693b28-db33-469f-b19e-132d4f307c0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01693b28-db33-469f-b19e-132d4f307c0d.tmp
Size 8KB
SHA256 e7af7d023b5a539fdc2d4c9ce6cc4f7b8c0574899e39d2a4078d6097cde512de
MD5 5d880daf2493e1338803e553c59d4f01
SHA1 4faa47c0557a0b75456d903c7d86a4ab8ac09ed6
SHA512 309bd69c48eae91a59ed1d46211306efc394c434af915ea900861059f5fff18760612e3f258f35f397f6bbc9746744bdbc0baebc996de835d507c8f4c0037551
SSDEEP 192:ION26Dph9qQmiUyUmGwGYX59ezHC6m4Une+gkIILq5IU6:ION261aAGwGYX5EGQUFpVU6
TLSH
T192121935A8B8BC7B5DD3A491B44B35039EE85227DB887F94D6EC2A1C01DF19C130B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47407ddf-f7f5-4db8-a7d2-14b77cea84be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47407ddf-f7f5-4db8-a7d2-14b77cea84be.tmp
Size 18KB
SHA256 2ad474076d4aee1b190affdb2588d9eb543f4436c4d02954f70332f7adcf0b24
MD5 67b4caecbe3b38dd2a3d82c0c69bbd9e
SHA1 ccbbea84cb11ba33fbc91c9d5de5645bb64dc8cb
SHA512 bf3d2063a9bab6751bae39e69cc6d451f42e1a9b1bf7ec2a6382e0af312f80f1dda68ff7f32d7c917d62d44bcd3dff582245d3e3121188027d961d1b9f3ad70a
SSDEEP 384:mQkUSv0sNravhU5a85JeaBGYX5EGQUFmVH7vBExlIIly:G09ia8m0GYuGQXVH75ExlLs
TLSH
T167827D7698B4BC3B4AE39551F14E3617AEB49117DBC82F90D5DD5B2C01CB28C234B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8989ceb8-61e9-4b14-8b8d-e58a272db727.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8989ceb8-61e9-4b14-8b8d-e58a272db727.tmp
Size 8KB
SHA256 281d68b7fc60c3a6e2c4d1f8496fd2aac360baa2db70fc67cc32b39397d3ddc3
MD5 fbcf4c8d767b0f7fd0a8db622982cedf
SHA1 2cf50034976c88762bf6e5966aa73598af5e602b
SHA512 57776ffd66228314487dccf5e8d4d9849258d9557cca3df2763ca6b58d1097f2894f3d4124ae9e54a6dc698bde01bad63bf8d2b11d8a66e34c7d5bd5bbe275b9
SSDEEP 192:LJONC6DphmqQmiUyFmq8wGYX59ezHC6mEkk7haU6:lONC619bRwGYX5EG60U6
TLSH
T17D02E835ECB87C7B5DE36E45B44B2B175FD8112BAB912F84D6E81A1D00D724C130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

04099cc5-879b-4591-811b-00a90e1e0ac4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04099cc5-879b-4591-811b-00a90e1e0ac4.tmp
Size 9KB
SHA256 16cd731c0879ab9953db2b72992ec2f7db43ca47b5dee99b38a0374cef4f1bec
MD5 4ef1f1fc898fc1a22a2f0bef92bb1da8
SHA1 594ef2c64913a465068b00cb3c4c3fd95de42c25
SHA512 8a9a95446933245799df1513fe96f5c47b924e00baccd8989510aa39c38b72b531292825422861e06b51db0d9e89b4e74ae757c8ddae95feb438860621efe065
SSDEEP 192:sxZLRfWx/fdsBiIdpdGHW6+WNGYgdhE78Ig5GJ:sxZL8x/fdsBLUHbGIgc
TLSH
T1E422A7526E24A97B8CC7D20DFB15BF13D6F95032A1951E88AAFCCA1C04E6ADD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1dda4790-48b2-48b0-8fc1-b5d9488be56c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1dda4790-48b2-48b0-8fc1-b5d9488be56c.tmp
Size 9KB
SHA256 fa1c788a789eaf8626e1d3f517365cf3a7fa593fa9fd5cef70d7e9584658a38d
MD5 21f042338c0230ee04fbc438ca30ce4a
SHA1 ac56097eb2b31f5335602ebfc9eef98e5d160ddf
SHA512 5129793f925f2db65b7be52f6690b07464fd1cdaf7b3172692ee4dcbb082835973bf862ad3e41455348399bbd62de0deeb4e61370a2e7ff71e506cd058d1939c
SSDEEP 192:sxZLRfWx/fdsPiIdpdGHW6+WNGYgdhE78IgrJ:sxZL8x/fdsPLUHbGIg9
TLSH
T1B122B7526E24A97B8CC7D20DFB15BF13E6F95032A1951E48AAFCCA1C04E6ADD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d12c20a-29cf-4dea-8ec2-213d3e4e564e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4d12c20a-29cf-4dea-8ec2-213d3e4e564e.tmp
Size 10KB
SHA256 2e90eba97fc085a12dbff070bf2edf0a13c602e8a838553e09c98c2f50deeaaf
MD5 fc7985d54a60462bbddbc2b9fa07171a
SHA1 6f8afefd12a60dfa28a571c1b09c252ad2c5e26f
SHA512 719ffa4427fd654d95d841e483cf8f31393bfa4ba30e72eb305e1316889fb8df87489c8cea55df9f481b5ac1078b471bcf3b04674d73aec7f3833dd4b025ffd1
SSDEEP 192:sxZKRfWx/fdsM3IdpdGHW6+WNGYgRTE78Ig5sJ:sxZK8x/fdsMYUHbGOgW
TLSH
T1FA2296526E24A97B9CC7D20DBA15BF13E6F9503291911E48AAFCCA1C05E7ADD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2aadcd-5d31-4c57-bc94-3355dd99814f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a2aadcd-5d31-4c57-bc94-3355dd99814f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d72bf4b-ab94-49a2-8cee-5c01e19c6fa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d72bf4b-ab94-49a2-8cee-5c01e19c6fa4.tmp
Size 27KB
SHA256 c867bbc40769e1fa072915534b65dcb7e35209ddc7c675955c264dfaa56d2ac1
MD5 1b705127ef8c9be5b9c2ca540ee6d71e
SHA1 347339a8733f7ab7577d0378b211776ee72ca1e3
SHA512 fd3d2b68b59edec92e4bc325c3ccc2b6fa39b19266657a2816f78612a8a8296ad5db5f24a27cd2bace0768ec1b416351fac08d8be2a3804d0571055e1a08cb41
SSDEEP 768:JCichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzurog24:JCichfPWvPZplu1jan+LKgzln4
TLSH
T161C2EA3B644CCB7E4FC01A9DDD1A6F9B7E9802C7A6688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 94b50ea9db20a838f9e868a8dfbf6c7a41f10e6b9a278fb8e330c99a1b7d894f
MD5 5923004e15e6f881886ee65a36ca9826
SHA1 096e77b6b19ff8cfc094fae62ab767dfa90c5f34
SHA512 f8e50c55ae6e391ccd65cf07ba6b98f93b1877fa4397683e0e6d75cc5748a95d1ffc2656c79c7c29089fe341efb32bbb4a8e38be2e964db56ac328a033659baa
TLSH
T1AD61C481228783BEFBB3607481DE11CF3E3458C9198B2F22C1E5E578B88F765A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 25474263a552a4cf97fe42b936eab764abe9cfbb33d37a5ce0058762e96eb1cc
MD5 ae96e7843652d27fa520e3878819c726
SHA1 f0d57fdce9cfe5a9787de2c72714a43b69d940a5
SHA512 d2e6ade5c0c5aa46900ecdff68ce1ba9fcdac5d22e33a2635b646e969bae657be3dfd2000f66222f4c254ee8fe4f6e1090ece4dbae0832258e6370821aea6ef6
TLSH
T14961A5812287837EFBB7647481DE11CF3E3558C9188B2F22C4E5D578B88F755A35911B
MD5 SHA1 SHA512 TLSH

Submit Download

bbe97b17-ce9a-4d3a-a548-b4aca04c7a4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\bbe97b17-ce9a-4d3a-a548-b4aca04c7a4f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

76b31afa-6720-4935-904f-ea752de527fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\76b31afa-6720-4935-904f-ea752de527fa.tmp
Size 1KB
SHA256 ef3d2e9561a805406cc12fc4214ecd59261fa3a2f65eea216a1b7fd58efe8c91
MD5 92976586b1ecaa67cc97029e33465f7e
SHA1 44e359c5530b482636da33880c61e319a87263e2
SHA512 cfc882ee8306d4e11df0830ae0a660e344969a653d80084907a128dc775f35fcbbeb9cb7333e04ac1ac0a7bd24d6e7e84eb6e57e74f916ad09c8830c70c92d72
TLSH
T11F31EFF7C3D8867E881156F05B25AE2BCE2D1906822C3C16C9E4EF5BA3F24B5D20119F
MD5 SHA1 SHA512 TLSH

Submit Download

8b1580a2-98ed-47d5-a924-d8f122dc544d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8b1580a2-98ed-47d5-a924-d8f122dc544d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

90495727-5197-40f0-b296-9b892f8b3d47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\90495727-5197-40f0-b296-9b892f8b3d47.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 4cd007d765f5d63609ad059af47457c3020ad4f722463bdc8e8f28a0ee4c46ae
MD5 1a9d4c32aa0d07a3d4464469f3127303
SHA1 65e625c93984f603f305570b88bfcbe958982bdb
SHA512 e1a77b0f7b92a1258c0c9ed4b0346b54d29e5015dc612b8bb4b678e4cd1e3bca1999aaaa534c4ebae5c270025871e3ed1e3ffbcfbacc757df74843d8d0ca88f9
TLSH
T1BE117D60312E06C07F7E35148F689616525760B3351C64FF77B9D8E91926E214DF89CA
MD5 SHA1 SHA512 TLSH

Submit Download

e7923ddc-70ac-41fd-b98d-0d73197c0632.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7923ddc-70ac-41fd-b98d-0d73197c0632.tmp
Size 10KB
SHA256 55f312ecde3b532fe6965dab1e201a2754762ba07ec60458d1ff13e43c46d67c
MD5 7fdacd371a0467322727f51050848005
SHA1 60eebef40fb187f800057786822efa908ffebd6c
SHA512 02b462dc94f89f6f84833cc8304e01bf72c93de3c188882852782be34d31b89f674c0b3039bee129f314a89c236b74c6c4e9fa91a46c88a4cf17f294b5a14666
SSDEEP 192:sxZKRfWx/fdsM3IdpHGHW6+WNGYghQE78Ig5sJ:sxZK8x/fdsMYmHbGfgW
TLSH
T1C222A5526E28A97B9CC7D20DFA15BF13E6F9503291911E48AAFCCA1C04E7ADD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a979180-5956-4998-815e-20e779e0bbae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5a979180-5956-4998-815e-20e779e0bbae.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a8a6aebd-702c-4b33-bc84-47ac691d18a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a8a6aebd-702c-4b33-bc84-47ac691d18a5.tmp
Size 18KB
SHA256 3a30a63955ce9123e8fc2dc3b2b9a797353531734fd7c2a5bfeb415582a39adf
MD5 3f76f2ffc58656d80c1a5834ad14e94a
SHA1 051bb85d960a475ef6a7048f6c216890893f9c74
SHA512 ac05923f237cd3ab48db838edd159c5a1a0a02b3fb52782f0ad8cc4274efe8b7b5fd621406e0bb68e4cf57b39b1a92f13b14ddf8c0ea519fcdef23ac14b12165
SSDEEP 384:qQkUSv0sNrvvhU5a85JeaBGYX5EGQUFmVH7vBExlIIly:S0Wia8m0GYuGQXVH75ExlLs
TLSH
T183827D7698B4BC3B4AE3A551F14E3617AEB49117DBC82F90D5DD5B2C01CB28C234B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaacc35f-d577-431d-85cd-4be5afa4ae7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eaacc35f-d577-431d-85cd-4be5afa4ae7b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f9945a3f-4793-4991-97ce-d83a8d85d460.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9945a3f-4793-4991-97ce-d83a8d85d460.tmp
Size 21KB
SHA256 03662deae95edb1cc74c2c696d2be89b17478b5e97df49d759b0ca841a2c2738
MD5 54215636db29f33dac9020e7d1855f2a
SHA1 edfbc53f27a4a2864bdcd1d132dc1bc9a83e39d2
SHA512 37f9fdf57faa27c55267c863809f52bde943455b071ea7a16e09d637d0b570a448f9f12943de453d94386cd02bb98928542ccb9c00d9d771d0efeb7bd5f99ae6
SSDEEP 384:GiFzQkUSvazsN18TUNTUlIlvvhU5a85JeaBGYX5EGQUF0VH7vBExlIIly:tFdy8wghia8m0GYuGQXVH75ExlLs
TLSH
T139A25B7398E4AC3F5EE39A51F54E3603DEB49167CAC56B90E6D9992C00CB1CC234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88f8add7ed0ebbe785d90985faddd7dce9c87e93c52152f1a27118aa59b1acdc
MD5 29870a909a48017d4a2621fb39b5c33d
SHA1 d4257a1883b38b33a6ab85078599a31eccb859cc
SHA512 b228d632b7313f1cf77b902953eb773bb54e839a935118f7444b0ea19e938a58c368f69bdb759ace7f973867dadd657aaee4e212cdc84c9e9e2be32d9b2fe14f
TLSH
T18741074DA6EA110CB3777F4AAFF6685D487B78772E0AD19D10110E4F0A27A40CD62737
MD5 SHA1 SHA512 TLSH

Submit Download