449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11

Analysis

max time kernel
61s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 18:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260702-w5rnpscv7s
SHA256 449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11
MD5 47393f0fa8f5a068af1e3f7336f71911
SHA1 cb662e9893f2961bdbb97a15ca095768babc299a
SHA512 0f494afa814cfa729736d45e9f38b976c072c3aa306d4bee49ee358bd92eec555d8d977f6733899a7d3c407e433cec90202fc8ea5a4cc36d4c942371f74263fd
SSDEEP 192:z1agA++iMZ8avzKuz1tHmzXc1i/X31BBMYSfo5:3Lu53mzXc1Y1TMYSfo5
TLSH
T1AAE17EF7661A26189DAE9180AF75F319C878E901D2274C48454F6B3F02DFF56C2B2D4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1292	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274906722201944"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2639994890-966400312-4246138405-1000\{44025C98-5D1E-44B9-8FEE-A419F809B2C8}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 2792 wrote to memory of 4308	2792	msedge.exe	87
PID 2792 wrote to memory of 1292	2792	msedge.exe	89
PID 2792 wrote to memory of 944	2792	msedge.exe	90
PID 2792 wrote to memory of 944	2792	msedge.exe	90
PID 2792 wrote to memory of 944	2792	msedge.exe	90
PID 2792 wrote to memory of 5968	2792	msedge.exe	91
PID 2792 wrote to memory of 5968	2792	msedge.exe	91
PID 2792 wrote to memory of 4796	2792	msedge.exe	92
PID 2792 wrote to memory of 2784	2792	msedge.exe	93
PID 2792 wrote to memory of 4796	2792	msedge.exe	92
PID 2792 wrote to memory of 4796	2792	msedge.exe	92
PID 2792 wrote to memory of 2784	2792	msedge.exe	93
PID 2792 wrote to memory of 2784	2792	msedge.exe	93
PID 2792 wrote to memory of 3420	2792	msedge.exe	94
PID 2792 wrote to memory of 2908	2792	msedge.exe	95
PID 2792 wrote to memory of 3420	2792	msedge.exe	94
PID 2792 wrote to memory of 3420	2792	msedge.exe	94
PID 2792 wrote to memory of 2908	2792	msedge.exe	95
PID 2792 wrote to memory of 2908	2792	msedge.exe	95
PID 2792 wrote to memory of 2096	2792	msedge.exe	97
PID 2792 wrote to memory of 5524	2792	msedge.exe	98
PID 2792 wrote to memory of 2096	2792	msedge.exe	97
PID 2792 wrote to memory of 5524	2792	msedge.exe	98
PID 2792 wrote to memory of 5608	2792	msedge.exe	100
PID 2792 wrote to memory of 5296	2792	msedge.exe	104
PID 2792 wrote to memory of 3124	2792	msedge.exe	105
PID 2792 wrote to memory of 5632	2792	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff8e748c188,0x7ff8e748c194,0x7ff8e748c1a0
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,7502081566549491336,15847326244670862510,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1992,i,11974501425391392690,12326665417944260181,262144 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:2
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,17719598203629006025,3128641853064416412,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:13
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,5245272581868745535,13862979708081169074,2097152 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,5394501482591004724,3769610186914015209,2097152 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,1729131494615923689,17855245007016237507,2097152 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:9
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,87658205827537322,8783632836363959649,2097152 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,12311648999310119456,11210550459332248476,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,15931607054414326475,16561002760262109020,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15558399845662527269,697427541625518804,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15558399845662527269,697427541625518804,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,4096778759581855033,12247298574123940327,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=1220 /prefetch:14
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,6555666889003832536,2578838271794202889,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=1380 /prefetch:14
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,14801814619071530489,18081888629677982995,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13878268987062650487,5033958506598816744,524288 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,16635670776710364714,3705406631505178507,262144 --field-trial-handle=2772,i,4003501542046392350,299267684413043015,262144 --variations-seed-version --mojo-platform-channel-handle=1448 /prefetch:10
  2⤵
  PID:1952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 674d24008448b140a9b320032b4ed333cf5a592b073bf375c453c816d33c703b
MD5 b989ec4e221bd567659492bc1ad7ab3b
SHA1 372670805b3060960e77e6ba32a3b9edd0241cf0
SHA512 f6934e6a831bcac97110107a79389dae0e669b743e0d62e5b411c19471bf237f4d61c7cee27d9fcacbd7045cbe27e78b4e6c38f6e76ca789a7760295558b0bb3
TLSH
T1CBD0C0383E28F508C5402076E4504310E3238131742B8242B010F02DEC581810BDF0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e1a5fea1006889b9c3bcf0a470a6a4256d5300a4b7036038ddce5fd042c424c
MD5 e9af81b8f1175d007e2c699939cb3df6
SHA1 696178bffe86e4e363a26747d6a5cb80e28621ce
SHA512 38174d529846c50b0af9a056e65ca491645c3cbf1fb867ef22a3b7c7ee4287ba29c3a28d736bc2e9c562faa24bb671db3b9cc40507a467140e47eaa4aeae6d51
TLSH
T145D0C0343E38F408C540207AE4514310E3138131302B8242B010F03DEC581810BDE0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 857a8f5c2f9ca086614767f247f6e5cdcd39c9e9bc7a4695e9914fe71e428577
MD5 99080710e6e3b2f84ac217ac287e62c3
SHA1 02df08775fef3953e9d98bd8fd091fadc3302f42
SHA512 0e91b4d32aac922b664e77b66960d9f78ddd9e37515de28e27a0c3ac53d00c91a58516cdac0e5fff05dc7467f039b52109b0367545419a9d7e279117adbb5b61
TLSH
T17F61C838046C0921E72E68BD50E3209F3FB4C8D604F36E2E78A595F7D40AB972063179
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596d85.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596d85.TMP
Size 3KB
SHA256 a17ccad6fed4f2aa94e87ef305ce27f26c7a1341d6c4df6bbb4310a597172506
MD5 ab8d25f22847023ccb8be098c90f5239
SHA1 2389c48baadb3ab0c5bb3def1b2aa601eacd99b9
SHA512 e523ba1f646f8148d32e51f13b9ee6a6af7f05c3d68ba12202a11cd1de5114c2515860c6b889c07b0855bb87f481759d9421d0b7fe08dfe119b3d3bebf4613cf
TLSH
T1CF61A738086D0911E72E68BD90E3609F3F74C8DA04F36E2E686995F7D40AB9764A3179
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 33886e8817d45e2756a80e94427a6ac7c425fcc665a79dfaf78e06081f44a4b5
MD5 f3bf385bdaea3b61870af2a9fbda4709
SHA1 520f0faaeafa9510afa1f394e853473feded06ad
SHA512 4af6c56427bb2889f29255e6e150a34a6d8a070fbb986823583417a966413f56a8c3e51efe8ac7deb3c9d8c94e4c3c49a0e9fd96ec6c3abfd2dfc0622511e05e
TLSH
T14441AAF783E4857E8A0186F4FA186E2BCE1D0915832C3D56C9E0AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a4de0b04a3acb637a0bf109116eb176eed40454a42b1cd465e5c56540a3bdfe0
MD5 bdb85facdb62222b351be11c68435333
SHA1 3388c8cab160d62561e8448d0e3b41ec0d4cec27
SHA512 5d6957895cd245ae8a259dab0f968b284c6944bc858926c80e86a0fd221b460bffa90269f4e5188f5613fea0c16b76483f755cdabda3e17c80392dd21de4c23b
SSDEEP 192:sxRh/yM/jK1Ml8UQtFy/f4eLsB1JAE1jbIzoA8peS/g6+WNIY+GuFtGvHqIgDVJ:sxRh5qLy/f4eLsT+ij9p/5IlFdb
TLSH
T12562D816A6345A778CDBD209FA557F53D6F81572A2901E48AAFCCB0C02E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7fbdbdec9faf32b5beaef260f89325395a157833d94ca38653329dbb88f9d7c5
MD5 cbaeb83edefa62b6dabc236ce0bcf341
SHA1 583ed49df45eb1aa8d786bedaff81c049d82e754
SHA512 62aa25e2ca4461be7b030bf23201aac53e542187b8159a7e3ab4174d86cfb527de0cef8468c1bc120501a4d1a63af7e3f2125f34236138806f89b1b27758ef4f
SSDEEP 192:sxRy/yM/jK1Ml8wFy/f4eLsyJPE1jbIzoA8p4S/g6+WNIY+vuFtGvHqIgIJ:sxRy5by/f4eLsylij9P/5IEFds
TLSH
T133520A15A638597BCCDBD209FA557F53D6F81573A2901E48AAFCCA0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ae734166035111c521295e179373d7160e1a04d035e9cc7ab10985d778563f5d
MD5 67c9a69ca82492abbb3ea59011d9627f
SHA1 33bb40207cffa65899e2b5b0356e69436598bc8c
SHA512 cf88f243a53175a3707b76d1a1f7f87ca7e4d9109686241e03ef43a7d8454cdef64374ea3cba82250f278587a269a3d5000b4516aa20fcdc367010f0e6732572
SSDEEP 192:sxRh/yM/jK1Ml8wFy/f4eLsB1JPE1jbIzoA8p4S/g6+WNIY+vuFtGvHqIgDTJ:sxRh5by/f4eLsTlij9P/5IEFdx
TLSH
T1A252EA15A634597BCCDBD209FA557F53D6F81573A2901E48AAFCCA0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f1af18ef9729b05f89cc9e1774726128ce01b60ad151932aca97374c0225afec
MD5 dd93c576d1796458c449bfb93c6a44ee
SHA1 cdb309d1c9b493fb24f799d0467ece8d4da2cdc9
SHA512 67a4c5fbd37b231836423dec3ca8c11ec6b17429e09289a7bdd64cdf50afb3e0138f7d8b6ee30c08fb2a8ecc598bd5a9a80b96d22552adec638a24aa260ee024
SSDEEP 768:7dUhjgWgEyf3w8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIe0GKrod45Q:7dUhjgWgEyf3wu1ja9RGhdsQ
TLSH
T1F1C20B3B640CC77F4F844A9DEC29AE976DD801CB9B588D5447EA890C03C77EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a05ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a05ce.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 0b03f1dbe3d97185e1588fec4ef3df584e5500b4162be3d9f7f63820fd7ccfaa
MD5 b164571e4ca5cfb6946b3c0f6b45901b
SHA1 161105c085390a31bdc64ce36ac369eb51ffaf40
SHA512 7d3faa2c79fc8d92f7d10f08b40b39ae694cf7dac1727d31ff59495ea1978d28a662441c43855269663f9c81b4348fa2d5912f3a168b7b9f266f23d36c3dfb5d
SSDEEP 768:erv+4UNbd73ZT85mvjMcvnWgWWR+2SrXH78tRMt+8rr6R:ebsbR3ZPvjJPWg1bSrooDrS
TLSH
T1A413BF31A86989B39CF2D684B10B7643BFF44183D6C91B88C4D91B4D429F9DE270BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 2ffb31727659e638bf2d19d4208608238fdf411090618bbd85b76373a0e5540d
MD5 eab5494b26d2c6c079249980bdffde3e
SHA1 ead8585ea128609da7c075bdf67c4be190b481af
SHA512 37648b48cb8a5df23aa7999f5aaf5d64e0f48db45815ef49feb3a60a50317cd642a21a6ce7626552b02f4149a453d80f79dd94368c29ba19ef85e4c6a5bfcb11
SSDEEP 768:Lrv+4UNbd730E85mvoMcvnWgWWR+2SrXH78tRMt+8rr6o:LbsbR304voJPWg1bSrooDrv
TLSH
T15613BF31A86949B39CF2D684B10B7243BFF44183D6C91B88C4D91B4D429F9DE270BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f2d8884b31882890f82bb5da83ff3ef5337f791c6fdbef8d65e44c9770820537
MD5 e4429a0801ba8f38a34aef44c98ef45b
SHA1 bb487e1fa653bf83017d09ee1dbdfbecee1f1089
SHA512 5e26a6e9446a6c403ee02859b83ba65611a459fec13b5e695c0e60d88e58ac826a868e5f0fb2bf2e93cfa2766e1177faecde83e6b9eb85be889a4183e7903fec
SSDEEP 768:5F1j+903PwgiE85mvvMcvnWgWWR+2SrXH78tRMtDl8BvTPatwa:I90344vvJPWg1bSrooDl0Wtwa
TLSH
T19603AF32AC458DB79DF2CB84B20B7243AEF04293D5C96A98D6CC6E0D129B6DD1307D79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 cc3ea494b2133d5f5d7780a8c529b544a849f6d2473c8de389f23f144945ebbc
MD5 a65589373f57e40466b86096e8535d64
SHA1 2db81cd8d01ec9ea6bdba4453fda3f2b481a4c16
SHA512 581c7978771a5e935a95a70d3ba0eece14da7489a690b38e66b6a3114ac7ecb865bee1feba398eae39d8dd7ce9c66946f8164eea2f26c1da6753c0f4c19d40fd
SSDEEP 768:5F0rv+4UNbd23PwgkE85mv2McvnWgWWR+2SrXH78tRMt+8rr6A4:cbsb43O4v2JPWg1bSrooDrk
TLSH
T14F13BF32A85889B39DF2CA84B10B7243BFF04193D5C96B98D5C91E4D429F9DE230BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 051b6cf4c3f0fdd3442582bce656c35b46023e50b72bcf447bf78f6ca534a50a
MD5 66d104a3161e7aabf6891cb748e0d62e
SHA1 296660f03475e8a58ad801d70fdcf5a91bcc9af6
SHA512 60ebaca73bb43952f224f7fe3a8dce4aa3cfc3f2e18f52e508c4ba0dc079380048e71be0b5328d285f35bbb5c32d164fec6347067ea2c23f9f7aa74ec8b8878b
SSDEEP 768:Orv+4UNbdp3VH5mgMcvnWgWWR+2SrXH78tRkk+8rr6F:Obsb/3egJPWg1bSroVDr6
TLSH
T11303BF32A8698973DCE2D685B20B76037FF44183E6C91B88C4D91B4E429F9DE2707D67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads