f7593241a9903a56a7f89a39cdc1668578a58550d1d62d8c291ff87744959f2f

Analysis

max time kernel
149s
max time network
162s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f7593241a9903a56a7f89a39cdc1668578a58550d1d62d8c291ff87744959f2f.html
Size 80KB
Sample260628-grckasfw2j
SHA256 f7593241a9903a56a7f89a39cdc1668578a58550d1d62d8c291ff87744959f2f
MD5 6b7673a5eaa242bc5aa1f7631238f811
SHA1 3d8996f4cbeab7b7c52b1d88ea25c2a0c2bb61d5
SHA512 032e4597d33d93729e86ca4c9717fccea198fc48ab81765b0df665ba6266c00096a1146f91e67c8c8345db61d38ed105770ecbc3f16a1a963152a1efcc75f0d0
SSDEEP 1536:JPoFVEr+MGUIgxJ/H9tKiDTzJpRXYo2M3wQWZhlo1t:jrvl9tKezJKct
TLSH
T19F83F9B9F1A170325E13F970412F510FBA3B686BE44C0DA8F194D8F1AEF69894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1452	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271001311655267"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3839916939-1319118069-2256772647-1000\{2C498C28-4C46-496A-9977-F4026C654B16}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe
5860	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5860 wrote to memory of 5140	5860	msedge.exe	90
PID 5860 wrote to memory of 2020	5860	msedge.exe	91
PID 5860 wrote to memory of 1452	5860	msedge.exe	93
PID 5860 wrote to memory of 2020	5860	msedge.exe	91
PID 5860 wrote to memory of 2020	5860	msedge.exe	91
PID 5860 wrote to memory of 4184	5860	msedge.exe	94
PID 5860 wrote to memory of 4184	5860	msedge.exe	94
PID 5860 wrote to memory of 2108	5860	msedge.exe	95
PID 5860 wrote to memory of 6832	5860	msedge.exe	96
PID 5860 wrote to memory of 2108	5860	msedge.exe	95
PID 5860 wrote to memory of 2108	5860	msedge.exe	95
PID 5860 wrote to memory of 6832	5860	msedge.exe	96
PID 5860 wrote to memory of 6832	5860	msedge.exe	96
PID 5860 wrote to memory of 4856	5860	msedge.exe	97
PID 5860 wrote to memory of 864	5860	msedge.exe	98
PID 5860 wrote to memory of 4856	5860	msedge.exe	97
PID 5860 wrote to memory of 864	5860	msedge.exe	98
PID 5860 wrote to memory of 968	5860	msedge.exe	100
PID 5860 wrote to memory of 4240	5860	msedge.exe	104
PID 5860 wrote to memory of 2708	5860	msedge.exe	105
PID 5860 wrote to memory of 1120	5860	msedge.exe	106
PID 5860 wrote to memory of 4160	5860	msedge.exe	107
PID 5860 wrote to memory of 4160	5860	msedge.exe	107
PID 5860 wrote to memory of 5484	5860	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\f7593241a9903a56a7f89a39cdc1668578a58550d1d62d8c291ff87744959f2f.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffd629cc188,0x7ffd629cc194,0x7ffd629cc1a0
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,17387907492818257619,2144887605754331285,262144 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,12907331473567407672,17725342076227299316,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,6510844465434822755,2146205630913255505,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:13
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,13921226755341718752,7369551388990985154,2097152 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,2090699029733306353,15002927991972204858,2097152 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:6832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5552095036964932487,16776560073923167569,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,4854977058550940005,15555964607720748950,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,4948253015332907259,6280521840986422228,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,4948253015332907259,6280521840986422228,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,11115575722930658820,1943981916393763047,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,3841626733127654437,14695641379077627876,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,7119765522114550516,1260999100849662549,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,827615901754231169,1985616140304046691,524288 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6084,i,10389312233899201092,2403360872340580831,262144 --field-trial-handle=2248,i,8964770766780501537,18069611225926103100,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:10
  2⤵
  PID:5484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:7132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 83748c5f59c12f467f96b0d21c3c9653419dfd0271c8efbdeebbd6ba4bd7548e
MD5 96bfca4318642edfa521d002be0f096d
SHA1 447f1b34ddedc860a8f0bd0c6dc12c229624acab
SHA512 b49889400d8441bd0f61eebe0a2489d48e83671a4d77bfdef519545878aebce5aa04d5e498b1e16dc02fc2a5990edce5232840f2805bd3cf047ef33c92fa70f4
TLSH
T112D080277919E851C0561171583DC779561941473EE6C20F79D5F04ED8D645073D7543
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f955c8d6f1a1a3190d5e321035e28ca582fcb76ec2f60d653e90465ff9d1ea00
MD5 0213e77255f07e9c3fc2c451f7a980eb
SHA1 a625e805f5575150fe89058ebdc7b3356ff294ad
SHA512 94f5a80a660d01988274953f2dc96b3f630595c4d1011e0137458475b3b6bda55410996e5d95fff27f7dfa7d3bf4ad111036266eb70344bc4183986e8f524b78
TLSH
T1BBD080277919E851C05611315C39C7795619414B3EE5C20F75D5E04ED8D645063D7547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 5afa65411d87ceab4789133b705341d207e04ae716cf855c58413b914218f328
MD5 2d13efb3bc25d94d88960f6a99ee63c5
SHA1 a86e03f9059fed456292afc425c48fd04d4d0148
SHA512 209bec3dbe6f4a6ed67d519732190d62b4ff09371c5dfc74cafcaf186a29c210c29f5b4ba3c10f895c38a76adb11fb9095cb51de59735d701e4c5c9f42fd8a96
TLSH
T118F028BAC921AC3748FC0B2874A54B4BFB5113772B40895F3B3D420D8FB1A3B464682C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1bbb6bdac88d22fedbb681214b700cd0763a5b756bc21236b1135f328be6be44
MD5 8068f20f9dcbe4e607b0f9ab73e30ea5
SHA1 8bee3f5ce1cf3be04e95b3e9a3c9107ec7510e49
SHA512 b9adf240969ca8cdb4f08f5990cb6419c365d4de73e3072ef79cf3dbdeaecda8d03bf8f2692a68074b9ce6629dfe4552713ddd35350fd6982a70f20d26929302
TLSH
T1C851DDF3C3E4866EC91156F0AB18AE2BCE2D0515832C3D56C9E4EF5B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 aad4e257c3c4dbaed4bb36ecfff6a182b049e9d9b31db64035b651155f65fdfb
MD5 e3e2ddd4730142c2420fcede88ea187b
SHA1 1088ae9ff5a2c2d838d5708f511b1d32809fc04f
SHA512 05de43f4d72bfa8a1a77e9581d78113382de287a73aa64d41a34fcbc38641a1bb37dea63a5329f4a3c86070e9d00629eb132489eba7b8b27cf83cacaf4bead51
SSDEEP 192:sxRhR0yM/jK1Ml8wFl/fNs1wPZbTLzoA8peF/g6+WNIYzlU+CG0IgjhQJ:sxRhObl/fNs1wRb2u/5Invjh0
TLSH
T11362C8156674597BCCDBD209FA55BF63D6F95533E2900E44AAFC8A0C04E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2ad52eb8892e427882a4c0205ed75438a72a66d527b612c4c2380425a7832117
MD5 37c49b9aedd60bed9d39bea80024de34
SHA1 aa34bc0c89ef98fa1ce116df2ae8f00d1a11e3ce
SHA512 c6704383536be8d7f43edf9999f9d36d9bd19ea4fb08a1753c4578aa54051dae143f4f0ffc2572f9557eb67b44950f4324bc36baf9613a6e737a46a9308f7dff
SSDEEP 192:sxRhR0yM/jK1Ml8UQRFl/fNs9RPZbTLzoA8peF/g6+WNIYzSU+CG0IgDGGhQJ:sxRhOqXl/fNs9RRb2u/5IqvZh0
TLSH
T1D562D9166564597BCCDBD209FA55BF63D6F95533A2900E44AAFC8B0C00F7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 33dd98e0921bbac29f21fbbea3f71f7d7f82ef0537394a8e7f53d047e4746360
MD5 b7fcd0cc168bd1a48eb467e8f8226400
SHA1 1a93e64b5d5c89fb0011e93dcd71c98f92724945
SHA512 b6db22b17a36eb3c19e57f72e7c5cc11238e5bf84ed80c285ee741befff42d0c85c4ea2830c6ab2d34be4eb0a7fd71364a32476da31d1d10ba31f695aff67469
SSDEEP 768:BawEOlWgfDfEN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJLfaDro68Inrw8kJPK:BawEOlWgfDfENu1ja8baw68Is8kJPK
TLSH
T1B9C2FC2B640CC77E4F845E5CEC3AAE976DE801CB9B984D5447EA490C03C7BEB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 130fda540d1be2d1b5b5986ab20be62198496ab795e01f7c39d46b497b0560ac
MD5 7be9c5939f982b69d54e868f6186c1a5
SHA1 d8aeb194d42c2fd6c2ffca1808a29d641bd09e00
SHA512 69e293193e4175915f54914cb1bd86d43d91ada50ccb96f4236e18d4f71c19d19cf0818d06ec6db83f973e4073b7164e573fef4cb915e9ec4ee7d2512f7904a1
SSDEEP 384:cdYt3tEJdTHLGHaR1xBprW9d6T9bLzwJbBRrn+gI4XIj++OT48TWe7sePejD:cdYt3tEJdTHLGHaR1xBprW9d6T9bLzwU
TLSH
T19EB21911393E234139FE2908D5A5866F674230B3301AA63B3BBD60E60E67E015FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7a96c05daa7ec59bfb8e0b5ccf604f75b809427e62c64c76f8ea983486d2a2a3
MD5 a11ef95c4e075fa9f42d91d765d857d7
SHA1 ceeb1448436305d8ae85799211c2e666c06bab76
SHA512 a1e480f4ae3be3cb2abfc6eeb85c32b8fb4e9945436b5de1e661e019ed3c4bb50aeae1499bd249f54d215fbb928ca46ddd3b7ec2976c358a50858f5bd8f57df2
SSDEEP 384:nbiF1tNn/s3n9SX8Nl8TUNTUlIRohESu31jT/f6V3zEO3iaO5ODAmn15wbAjEO8b:2F1j+9K4wg8EtaVoO3i4Amn12bfZb
TLSH
T11BD23A32DC94CAA7EDE68BD9B74A3606EEE04267C6885AD4D9D94E4D00D72DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d12ab0b596366a1303ec6b5feb381ae9de2355ce0e703c2defae2f8902596059
MD5 95175cdeb7268aea43c45bdd4ecbf2a0
SHA1 8626b224a069cdc39e5f56b576933d46f13653df
SHA512 36057cead6f44c6496815367057829a5eefddef77ceece29c0f217288491f4451a0106e3d348cd565663d75087cb6fc66bca42385eeb84c3fa505a0ad950bdf6
SSDEEP 384:nriF1tNn/s3n9SX8Nl8TUNTUlIRohESuk1jT/f6V3zEO3iaO5ODAmn15wbAjEO8b:GF1j+9K4wg8EkaVoO3i4Amn12bfZb
TLSH
T127D23A32DC94CAA7EDE68BD9B70A3607EEE04267C6885AD4D9D94E4D00D72DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 739cc9bcb614ea39ea8d8a720780196d840c92ee3e626bd7d6cbd4a538abe747
MD5 a3e1e87d35f177c5b2bcff333073e337
SHA1 773005b7782c32945910a456340838ffec16a944
SHA512 f7d271b9bcd1cadeea40f6fd03cadb918b06fd7ed31880e18800cb9c3acd22eb716b2efee69339e6a2b138c881a2f4f764a75fea2e7ad96a57d638081b97cbef
SSDEEP 384:n6iF1tNn/s3n9SH8Nl8TUNTUlIRohESuk1jT/f6V3zEO3iaO5OAAmn15wbAjEO8b:xF1j+9G4wg8EkaVoO3ixAmn12bfZb
TLSH
T163D23A32DC94CA67EDE78BD9B70A3607EEE08263C6885AD4D5D94E4D00D72DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2c3ba83387ab2791ab9f52c44d21a8a6081492bc30659a463b74ea70e9bdba57
MD5 166c2bb609ef2b5ced0c24ac6b1ef211
SHA1 af523973cba8da6d226db19d32768b7d8bcb2bcd
SHA512 205e26fbc3996232aa2a801cf6419791dfd0e49f10f3e8268f906d357b2e4af72a1111234fa1a513225e187aef54852aa3de956476cd20b194fc9dad5f34f68e
SSDEEP 384:nNiF1tNn/s3n9SM8Na8TUNTUlIRshESurRxT/f6V3zEO3iIcITGT0IVuJ8Lk1Izq:EF1j+9lfwgIENIVoO3iIci+0prvl
TLSH
T1DCC23A32DC64CABBDDEA4FD5B70A7647AEF001A7C4985AD8DAD91D0D00972DD0347C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads