4b69a48f6673c25fe1a4f96c21fd0d684a73e8026217d18f701d89035fd128e6

Analysis

max time kernel
14s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
360extremebrowser.exe
Size 2.4MB
Sample260707-vlaemsat2t
SHA256 4b69a48f6673c25fe1a4f96c21fd0d684a73e8026217d18f701d89035fd128e6
MD5 8e55c7a871237ffe2fe8ffeebc2ad2c8
SHA1 13ccd6386276adf835e444407fcb6f59615f9cc1
SHA512 bdf2dce69f21a6f87594c30f116b09b32b6d850aa83968d4be07e0c7536a2bfaeb44714cbb430f5103114fe0aee161f92b1897e9420f7f1e72950e0925d36f3e
SSDEEP 24576:HejswcBpoFvNdeZvip6XaMp/5p3vF8XRSkkkkkkkoRxUt97z7fIoggWft:HejswcEFVdOS6qe/5ZvFZRsz7RgF
TLSH
T1ACC59D03F69240E9D09AC278CA778735EA71BC558F21A6DF0680BE553E73AE01B3D791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6084	msedge.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2049790993-2338060321-149346055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2049790993-2338060321-149346055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2049790993-2338060321-149346055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3916 wrote to memory of 3028	3916	360extremebrowser.exe	88
PID 3028 wrote to memory of 4052	3028	iexplore.exe	89
PID 4052 wrote to memory of 3056	4052	msedge.exe	90

C:\Users\Admin\AppData\Local\Temp\360extremebrowser.exe
"C:\Users\Admin\AppData\Local\Temp\360extremebrowser.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3916
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe" https://browser.360totalsecurity.com/static/extreme/index.html?lang=en-US
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of WriteProcessMemory
  PID:3028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "https://browser.360totalsecurity.com/static/extreme/index.html?lang=en-US"
    3⤵
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:4052
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x320,0x7ffe1283c188,0x7ffe1283c194,0x7ffe1283c1a0
      4⤵
      PID:3056
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,1274627826863937495,3342827167316527899,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:11
      4⤵
      System Time Discovery
      PID:6084
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1916,i,17009893923393644789,13324135205676673335,262144 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
      4⤵
      PID:608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,16161701300857429412,17208816265455417882,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
      4⤵
      PID:6136
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,3681718496865264931,7039410255290152683,2097152 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
      4⤵
      PID:6036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,8618920552667490364,17918920058203771826,2097152 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
      4⤵
      PID:2648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,15429388883862132153,16205975585566526338,2097152 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
      4⤵
      PID:3188
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,7098080214138550622,746605570209882629,2097152 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:9
      4⤵
      PID:4656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,16762323209354249334,4250417609062978026,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
      4⤵
      PID:4856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,9900945121812347305,199350407841701574,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
      4⤵
      PID:4300
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,17555351407327853716,6579255868644481434,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
      4⤵
      PID:2768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,4905876124134670140,6119109517753587402,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
      4⤵
      PID:6016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,4905876124134670140,6119109517753587402,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
      4⤵
      PID:2740
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,17847369462559881905,8790369890565986809,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
      4⤵
      PID:3260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,13132340468566092469,88018974228412041,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=1400 /prefetch:14
      4⤵
      PID:2136
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,15964373834390690223,2840861959740182033,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
      4⤵
      PID:5816
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,13500087357053595541,18436380233461347563,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=1420 /prefetch:14
      4⤵
      PID:5704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,55304336187594759,6982880172407131979,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
      4⤵
      PID:3660
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,18405864993147498790,13416371757764517820,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
      4⤵
      PID:5340
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,7641772200276992706,3410608882621738727,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
      4⤵
      PID:1632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=948,i,2615387997480597110,2782117430355059689,262144 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:10
      4⤵
      PID:3788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,649274974048531790,778426052981578204,524288 --field-trial-handle=2628,i,14639468916600211182,470300049483351783,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
      4⤵
      PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2cfb77611c6372588cbb86850301c7d4d2a98bc9870148a0233cb9ff0ba848ae
MD5 30dd1402eab1adcd1b7a879da690d903
SHA1 5ad2617a2f54fb4647f217e450aa852cfab95912
SHA512 396e3e6a4f4d2b6cdab94a4fc9fcd07b5b3b76f067ce5666b89e9fb8d48b00e16fe2a2e9189c9d96e3f8d9d2f1a719132c8694f2859c94a22a5b7ecb4e74a3fc
TLSH
T1A3D02B343300650CC89070321C52B249532158300440420000D0B158CC7168102370AE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 174576d263d17c1ded542f85fe22b729d39689265635c9c57a2bfd1af11bcb69
MD5 e54a3dd3758ae26f8eb9c7149476114c
SHA1 dd4159ecc029af9dd3da72970ac8bfa500a0651c
SHA512 eabda803f8f816ad2a6d57d3ce37f9c8cf72ef9a0a1ebecd6f39990ef65120d12a76e6ae5a2cb62c423511cbb36f0da6835b1dfa5907c5559c0ead5b0735873c
TLSH
T1E6D092757764A90CC9A5B0322CA7B29AA322A8300495860444E5F2A8CDB6A82567B5AE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9568cbff3791fc89f7085b11087ec3fe2fa879aef34102e84546a9d7884030c8
MD5 372533472a7b8d5aefcd4961f514d461
SHA1 55bed394cec8735708af34a79f60d93022609d91
SHA512 67cae3f998a42c07aebab0e724a9cff21e585262d22eba5ce41dc1918cda6b9c87037ec72a2e060c1d4a80def7db571e4295814fbd1b382f844780e03fc53b7f
TLSH
T1C551D9D58F362BD1C76E4DB5A1E2698C3B74F8894207AE3300C6F175993A3CE9E40A57
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3ee04539c776e71064c90bc3397eb35698ea77dd5704155a9bd40166bdfe4f13
MD5 048bd9478968e6f6ab7fbf00b9e8c0d2
SHA1 02e523428d926515a55ea89ae2eef81d31dd0bd2
SHA512 95df0bb1747e25cbc23f428a0fd23a590d2de04dcd151fa951322186b776cfc480fa37d05e7c44c80a5b1437bddbda3bcd1b4ce14863be835be81f42ab9c4c12
TLSH
T17251EEF7C3E8827DDA1146F0AA147E1BCE2D0954832C3D5AC5E4EE5BA3F2471E141A8E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4afb81903b9583fc3c7c4890de7a7c31c5241bd49aaa1abecaf8246b2f560167
MD5 9304c604e470a37690f1bbdd7bf5a147
SHA1 0ab45a695fefeb2c537e2a16d22c36402de63b5e
SHA512 d189e8bc2cbba88239771f34a19075bdccfe0e8416e672dc6107728bc3212ac58eb1bcfef15b12933887294ff35414c01484270b3d613bdc483f3331e0901426
SSDEEP 192:sxRERgyM/jK1Ml8wC3/fMs/6J378zzoA8p60/g6+WNiNJ/YtZIYl9Wq7G3IgD7J:sxREi83/fMs/E4iX/5W/sisXuZ
TLSH
T15862EA156A249E7B8CDBD20DFA517B53D6F81573A2901E44AAFCCB1C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5c033708d86342e2673b1451c9eb052ce00fb783dac400a9963f4bf8053e7280
MD5 88fa598e027017b671563d3464537019
SHA1 03660a32521baef33ca416bd31a95bd9b3f85cf7
SHA512 e11485cb12a987bcb673eee01844922259fef15c49d0ff1e2c0a2a873ef434ec15e2926c52dffd6c423ae73ef77397b31ffb289d1a3f1ff5b77c23a1693b122d
SSDEEP 192:sxRDRIC3/fMsN6J378zzoA8p60/g6+WNiNJ/YtZIYl9Wq7G3IgFJ:sxRDJ3/fMsNE4iX/5W/sisXuv
TLSH
T11C42A6166D28AA3B4CC7D21DBB657F53E2F95032A1941E48F6FC8B1C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b14cf551b19da5ee64a48c7c6b1ecb607dad8480b7b9e059af5c4daa49c890bb
MD5 6a16a860583d4ba19a9f212c3f59b200
SHA1 270e438bb740964f483938ac3e2b572140338ae7
SHA512 7caa9aa0855e6ebf167b65cb98a191fa71cc449918cdf1f413ac97aa52c8fc7f766760ca6f9e5b74f29aefd0279bde0eab0a41c262841c9254f74d790bf68f5d
SSDEEP 768:dOwn1wjzwRFU7pLuL7u1wiWg1zwsftZwK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVQU:dOwn1wjzwRFYE7u1wiWg1zwsftZwKu1p
TLSH
T165C2DB7B744CCA7F4F804ADDA8297E9B6DA802CB5698C98087FE941C03C77EE51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 19d0363bdae70c00d6de89e1d9949fe22aba4d7df5fd7765fc765d903da06c05
MD5 2960c47bd2c2d5755810ee8cb6351454
SHA1 8ae38f595bc8e720d61ac4c6f2f824b12573eafe
SHA512 a971e3b135bd95e05a0c626f012973634c9f7af672301379357d64df1da6e7363326e978433cbcfae2610fa46da7b5622ececbedf639b1be8b7925f90b35b946
SSDEEP 768:dOwS1wBzwRbU7pLuL761wiWg1zwsfMZwK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVQl:dOwS1wBzwRbYE761wiWg1zwsfMZwKu1A
TLSH
T1E2E2FC3B684CCB7F4F404A9CAC297E9B6DE801CB57D8899447FA880C03C67EB551A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4cd1aff4128c02cc35d4536f8c6d54cd3c1c92902ac299f30ad10999c70d86fd
MD5 cebe72a7e0fcf057a4ae765dbcccf274
SHA1 378c0b39a5e614f4bd034dc48d143cfbf617c8af
SHA512 998c26d1a25744da91d1be015f97aca45143cfcac013b43de07667413c6f922c69d10d4e0fed74a5920b6db015f961e9e5faa45fb03be4a7a88126112065d313
SSDEEP 96:KRT8ZNbRRtWFKAg1tK4MgbtcjbylxWH1i7PF/DnWrw+gXnK4mgpnct1o7zoZs4q1:CT8ZNbRRIFKR1nMgbCjbylxWH1i7PF/N
TLSH
T132916565313B52C1783D2449806488F796C174E2313AAC3B3BA956F25FA7E039EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d88db1ce-84e0-4137-86cc-8fb072a8898e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d88db1ce-84e0-4137-86cc-8fb072a8898e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8520ed760ba2bc8c4eaa1dd6058cb6c518a467787083a6bbfc5b62a061f830c3
MD5 fe3dd0264e05cee0753e8db9ab001dc2
SHA1 b05613f42e015d35850993453c77d9b4eabfb5a3
SHA512 fcbd8994d96457ab1c9ad2fff46ae7f574a42a7f966dcb0ba2f19d7ababda71a8024007ead7a6ea2cb80ef63339035055ee99c259e9d1c49542212a89caa10a2
SSDEEP 768:r1FWj+9t3Hwgq9coMju37BtAwjUSzFLb9McL:rR9t3ruoTib+cL
TLSH
T1CE038C36D845CE27ADE787D6B35A3B96DEF101A3C9896DC4D9E86E0D00C31AD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b4b14e7096ccf829ff2d0edb68d18d586b9969ec2e56ff986d29048e7d3c9d10
MD5 c35ce86eb5a0f82462678e84ca2a4637
SHA1 b2e299ee113131b21c235a1e8f45dc30fe626206
SHA512 632b4608987a36385b1547ee1493d78a165f3e9b2abe305d9b85095e9ca52860a6f69f3082b0d86ef9eea8b75e955a6637bf290185032f247504dd2c827b4b24
SSDEEP 768:/prv+4UNbdr3HF4hoMju37BtAwjUSzFL4:/pbsbN3l4BuoTi4
TLSH
T1AA03AF31A8548E339CFB9289F25B3B53AFB45163C9891F94C8E96B0D41871AD270BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0fa90f7a1205088544d6459aa17624a1110f895a85875c320de8f387e77a9b97
MD5 4f4371c39440e643ffa943599abfb555
SHA1 8c0c35359711608030638e9fa21694aeaf886f44
SHA512 7858cd11cb6db6e4128c38f336a72d151127f5f679df239702747a6f5fb69cd8064316eba5603046112a30128d75aa047adfbcfedfd87f30d36a65b9347cf4cb
SSDEEP 768:CIrv+4UNbdX3xnHc4hotu37BtAwjUSzZYUikB+:CIbsbR3xHc4SuoTtUJI
TLSH
T1D203BE32984489379CF7D28AB24B2B53AFF45163C9851F94C8ED2B0D428B16D230BE77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b4054103e78cd6164ac4cbabf2d668a6082e6d025309a28fd5011927ad3e8cc0
MD5 f2b33ffdfa9b0165a47248fd423e454d
SHA1 8262ae89e3deb96c5d63924ee1a633876130bd66
SHA512 db95212a9f2a4787766e0c14dd1db222291669bd47018a16233795fa4cbeaa039caa4f699985628054f4c54ec7e774eb4db1e4488e7b19300af8a15c94f2bcd3
SSDEEP 384:nzYtNn/s3n9SS38NEukWYKyEPHBz2fppPou5FYUxfuIfNDvuh3n39WoBtAdEF7jx:zYj+9R3cF4hoMju37BtAwjUSzFLb9McL
TLSH
T1ADF2AF31A8458E239CE7D799B35B3B96AFF15177C9891E84C8E96F0E058316C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 86e8a82d0f9bf526ed16d0f87507a4023d81e6cc15f8076cc969cd98e0090765
MD5 a5d69559e6019eb5c761985ec2555e69
SHA1 a4f64ce1416a2c3eb5a65f2efee725dd98bd3cae
SHA512 ce8cab08c6318d94f96a62aa3808749a49be7279b582cf39e579531799f28d6e69344d13220dee897d9281d03d488a21f26b0eeecfb7d279e63333635837ceb0
SSDEEP 768:zTrv+4UNbdr3HF4hoMju37BtAwjUSzFL4:zTbsbN3l4BuoTi4
TLSH
T13603BF31A8588E339CFB9285F25B3B53AFB45163C9891F94C8E96B0D41871AD270BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

732c2e8d-a460-486f-95a3-fff0521169c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\732c2e8d-a460-486f-95a3-fff0521169c4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4052_1557022280\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads