hxxps://the-quarry[.]co[.]uk/editor/sam-jones/

Resubmissions

25/06/2026, 21:01

260625-ztt68sfs6z4

25/06/2026, 20:27

260625-y8tzcae1514

25/06/2026, 20:26

260625-y77h2sfw3p4

Analysis

user interaction
yes
max time kernel
112s
max time network
95s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 20:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://the-quarry.co.uk/editor/sam-jones/
Sample260625-y8tzcae151

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2132	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134268928917690539"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{C1A40D8C-9598-41C9-9702-30C8F4955BF5}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 3848	1520	msedge.exe	89
PID 1520 wrote to memory of 4900	1520	msedge.exe	91
PID 1520 wrote to memory of 2132	1520	msedge.exe	92
PID 1520 wrote to memory of 4900	1520	msedge.exe	91
PID 1520 wrote to memory of 4900	1520	msedge.exe	91
PID 1520 wrote to memory of 5984	1520	msedge.exe	93
PID 1520 wrote to memory of 5984	1520	msedge.exe	93
PID 1520 wrote to memory of 5972	1520	msedge.exe	94
PID 1520 wrote to memory of 5972	1520	msedge.exe	94
PID 1520 wrote to memory of 3584	1520	msedge.exe	95
PID 1520 wrote to memory of 5972	1520	msedge.exe	94
PID 1520 wrote to memory of 3584	1520	msedge.exe	95
PID 1520 wrote to memory of 3584	1520	msedge.exe	95
PID 1520 wrote to memory of 1568	1520	msedge.exe	96
PID 1520 wrote to memory of 5164	1520	msedge.exe	97
PID 1520 wrote to memory of 1568	1520	msedge.exe	96
PID 1520 wrote to memory of 1568	1520	msedge.exe	96
PID 1520 wrote to memory of 5164	1520	msedge.exe	97
PID 1520 wrote to memory of 5164	1520	msedge.exe	97
PID 1520 wrote to memory of 1820	1520	msedge.exe	99
PID 1520 wrote to memory of 4540	1520	msedge.exe	100
PID 1520 wrote to memory of 1820	1520	msedge.exe	99
PID 1520 wrote to memory of 4540	1520	msedge.exe	100
PID 1520 wrote to memory of 3068	1520	msedge.exe	102
PID 1520 wrote to memory of 3564	1520	msedge.exe	105
PID 1520 wrote to memory of 1296	1520	msedge.exe	106
PID 1520 wrote to memory of 1112	1520	msedge.exe	107
PID 1520 wrote to memory of 3444	1520	msedge.exe	108
PID 1520 wrote to memory of 3444	1520	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://the-quarry.co.uk/editor/sam-jones/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ff82a4fc188,0x7ff82a4fc194,0x7ff82a4fc1a0
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,2701657068449498389,11217157624328532233,262144 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,578127055735110746,10886505019460684334,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,7818205822556819284,358433249318244808,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:13
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3340,i,5553143306390778579,8354570468759393552,2097152 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,2026554604760082534,18180572619232701062,2097152 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,8594839056651010069,8792469495780536131,2097152 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,7977690654430904244,2447366618436912182,2097152 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:9
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5882576737989162397,4965607537970339849,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,14021015505563457063,8100003499202164950,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,4427062645196216020,15602477056434048953,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,4427062645196216020,15602477056434048953,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1356,i,15064955043691150347,4803076647959272677,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=1380 /prefetch:14
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,7040275906577823202,11812446134984984059,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1188,i,17029708073122574142,3072624033198604191,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,14605166584358898175,6685108388023015218,524288 --field-trial-handle=3040,i,13433477854664828302,643417053396455865,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:3444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

97b6a605-b12f-413e-b734-a11f0f5f57bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97b6a605-b12f-413e-b734-a11f0f5f57bd.tmp
Size 23KB
SHA256 18714ee19933707ad0dd49ecc76f200e1fd2b5d8345f14448db765eff2e71e75
MD5 1322aac13e9b217693b92c8a78d00c67
SHA1 c08bbe1647817cef6185e78db941a414cca2ac5c
SHA512 9ffd433ff041005b61b5094c6fdee95d481b6f8bb2e9cb2215365a6437eed6d447bce7d047f75f41e14071f1f81b978c62a7b8e4f0c8a13d4c290abad2487203
SSDEEP 384:eMwutFCfCtgKgFfY6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDEk19q+RRQroe:e/utFIWgKgfY68F1+UoAYDCx9Tuqh0Vd
TLSH
T180B2DA2B604CCB7E5F801A9DAD1A6F9B3D9802C79A588D4047FE994C03C77EB92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 50e9a08306cf2cfeb9daff37c1f85300bc04ce820bafb18628bb23ec8f469f75
MD5 54d3ac443e231442e902464d4a73b35b
SHA1 307cbfacc6fe5d87b5a2737927b217d63e11f028
SHA512 d7754a4ffc6ad3f14a334516375bb5ac5bcbce8c4d44e05244947aabe24b76f2cf1cfbb621609fdd394ec76f360b3dfb12f69022ddc7fcb34cb61df95dcf29ad
TLSH
T181616360A3F50665DB5B85B534DA2044F3B4C4937B372E2C1C8C927F7D96B80A14AC5F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4905f9185ace7940c85f0784549b90c7fb8e6a840d5fed34feb0c3d7e136d985
MD5 c831f895d6f0d93b90b6e271d72c1156
SHA1 167803e6a7fbb66478cf5035ef55d3c72aacdd46
SHA512 87e52039b7a56efb2124b1ccbbf2769f16e5d750f8e1c7f3de14fe0a7ed8175310c543658af2189e879d54e52f297771604085bb110e4a79113c6d0cbd34377f
SSDEEP 192:sxRfRLbe/fQsYNkUvPzoA8pgZ/g6+WN+7AI/YZYvGGIgIJ:sxRfBe/fQsY7Oo/5/I/5s
TLSH
T10E3296566E78993B8CCBD219BB657F53D6F95032A1941E48A6FC8B0C04EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 92850726b7ab62337dd7c702ab7ada2092be11ec41b83c7923f2025d2774adba
MD5 10d8b2e491bfe54def004c331e3da1d3
SHA1 56e0f3f75cca500d7b59804085e4296e49db65eb
SHA512 a46a0c02a5da8f925eb3956fda29b1c6d2d98e746ea7cdd8057ab502b7f6c68f73ba0db7f1adf119ba063db9185803dc12accb82a61fd857329d3448bedf7fba
SSDEEP 192:sxRMRLbe/fQsmNkUvPzoA8pgZ/g6+WN+7AI/YZYvGGIgDhFJ:sxRMBe/fQsm7Oo/5/I/5l
TLSH
T11F3296566E78993B8CCBD219BB657F53D6F95032B1941E48A6FC870C04EBADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 60d1e8d97395a0dd50f4ecfcf242bb652408df9c6687aca12f1e5ff9ec33e631
MD5 08c8bbe22f766249c531a2e9a84c5878
SHA1 711285a22f1991d166ad3b7e67a2c5efa7800189
SHA512 5507b2f960e21d93573ad1e8777512edba670d6aa0df231f280bda2658c0f8e99579d9fe88d39e454926b76071e2b997b94563ea976599bd4cb2c76d9f8a491f
SSDEEP 192:sxRMRLbe/fQsaNkUvPzoA8pgZ/g6+WN+7AI/YZOvGGIgDhLJ:sxRMBe/fQsa7Oo/5/I/Tf
TLSH
T14932B7566D34993B9CCBD619BB657F53D2F95032A1941E48A6FCC70C04E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 598e35b8e3b673c8af97cd8c640d8ba1925150c8e23c12b3e8adbc71424ca45b
MD5 ee3874771a4faf7c0aefc029fd6fb7ad
SHA1 dff3c4332139461bc079178dd05e347af7d3b7a9
SHA512 eee34495ba482547c29e01a5f5207a554ff201a0d525bd871248e8efcff2199db159ae9735d3dacca9a317ca98aceaebdf2a1dd76bac87bc04e148740d220e21
SSDEEP 24:K4S9a0YINKmhs12SXYZyXUnY78jIzKfhy1ySmdRq0CHXTMCZNYBRUPLIQLYKr7hQ:KATINKQswPy54IzK5y0lQIvKJ2UeyW
TLSH
T12791734070BF224078BDA74D9294A65F52423073310EB47B7BA875E55E6BE002EFE9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6978095aaa916b5be790578b91793c9d949f0bb502195c2be0a963c3922ca767
MD5 9b5d34599c272448ca33dbd86af10cb1
SHA1 540b6255957043af3bcb721cb4b20c17f946a868
SHA512 eedf1147624b205a0a21dda21e3f52794cfb3ffb4ca6ef182c17ec08c7b819b152671d5b3c0842e249218c21a499f6e0fc56a7ddaab9f34805963e018016e96a
SSDEEP 768:KjaeqD4MlshiLdMm33JvuPfcO5fXJfXszV5R4HTytYYqgHvPwIyjWtxAlTL:KqcjhIdME3Ef1f5fIWTwJlyj2k
TLSH
T11013C076ECB89CA74CB2D684721676937EB44257C3C52B24DADC5B0D059BACF030B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 f2de56f73d1b9194f7304e4f3535950682a535b89c1d1d6c1f2921216234cf5a
MD5 442fcd5a58104f515e8fbefe716e7a4d
SHA1 50864ae90759a4fbf79d39708d0f32e496be8e2c
SHA512 049cf0871155e61030108f4da74cbb132e9468197fbcf613ef7de763e3683c8d8716dcb26e96c8a4248c0dda13fabb7e8ca3bd6b1493fdea87663daa30567117
SSDEEP 768:ZjaeqD4MlshiLdMmk3+NuPfcO5fXJfXsWV5R4HTytYYqgHvPwIyjWtxAlTL:ZqcjhIdMr3lf1f5fBWTwJlyj2k
TLSH
T126238CF698E75877CCAD9347633E2E526E7CC153B2842A10B7D8560DCD8B6BFC206816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 fa100e156b90fb5e53b810d02067d985d9dacd3eb3a047f406035bdaa14fbe03
MD5 aeeadb5f4ccb1c6cfc3900f22c3e4512
SHA1 8c6405676bbe216735eaf491b775fc2d28e72c89
SHA512 8342077fa22a23f57b93d9ccca4364ade294f1ea7e8e34fc56c4f3776dcb6625b8b995b7cadbb8fcfc9cac2e3fde7377a272ed3e6965c88d23525b0a57553b33
SSDEEP 768:ajaeqD4MlshiLdMm33+huPfcO5fXJfXszV5R4HTytYYqgHvPwIyjWtxAlTL:aqcjhIdME3Zf1f5fIWTwJlyj2k
TLSH
T1AC13CF76ECB89CA74CB2D684721676937EB44657C3C52B24DADC5B0D059BACF030B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1101b8d5eac738441fc56614f8142514a9366cc9719cc1853b222ddf08f1b88b
MD5 404fb4eb387e90fe2272067501c93bbe
SHA1 6e34d30704d758cbcb70e1b1961e6ce31dbd0fb4
SHA512 80cfff9663f8f09c1461a1025e3f1acb2a54542521eaedb83ce08e617ce9532d9ecce4a9709f77a83967c00fbb39dac92bd9d922565eec30b818b56794a25022
SSDEEP 768:EjaeqD4MlshiLdMma34wPfcO5fXOV5R4HTytYYqgHvPgLyjWtxjTo:EqcjhIdMh3/f1fYWTwJqyj2y
TLSH
T17903CF76ECB89CB74CB29684771276976EB842A7C3C12B64D9DC5B0D019BACF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5e320a0-19c3-4a67-b819-d202ac35c840.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d5e320a0-19c3-4a67-b819-d202ac35c840.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads