hxxp://voltgrid[.]co[.]uk

Analysis

user interaction
yes
max time kernel
85s
max time network
86s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 22:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://voltgrid.co.uk
Sample260718-2d7hqset5m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4552	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288873516122257"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{248E9503-06C6-4EA1-B23D-4098E7635C14}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4000 wrote to memory of 4244	4000	msedge.exe	87
PID 4000 wrote to memory of 4552	4000	msedge.exe	88
PID 4000 wrote to memory of 2588	4000	msedge.exe	89
PID 4000 wrote to memory of 2588	4000	msedge.exe	89
PID 4000 wrote to memory of 2588	4000	msedge.exe	89
PID 4000 wrote to memory of 2852	4000	msedge.exe	90
PID 4000 wrote to memory of 2852	4000	msedge.exe	90
PID 4000 wrote to memory of 4344	4000	msedge.exe	92
PID 4000 wrote to memory of 4344	4000	msedge.exe	92
PID 4000 wrote to memory of 4344	4000	msedge.exe	92
PID 4000 wrote to memory of 4264	4000	msedge.exe	93
PID 4000 wrote to memory of 4264	4000	msedge.exe	93
PID 4000 wrote to memory of 4264	4000	msedge.exe	93
PID 4000 wrote to memory of 2628	4000	msedge.exe	95
PID 4000 wrote to memory of 116	4000	msedge.exe	94
PID 4000 wrote to memory of 2628	4000	msedge.exe	95
PID 4000 wrote to memory of 2628	4000	msedge.exe	95
PID 4000 wrote to memory of 116	4000	msedge.exe	94
PID 4000 wrote to memory of 116	4000	msedge.exe	94
PID 4000 wrote to memory of 4492	4000	msedge.exe	99
PID 4000 wrote to memory of 2044	4000	msedge.exe	100
PID 4000 wrote to memory of 4492	4000	msedge.exe	99
PID 4000 wrote to memory of 2044	4000	msedge.exe	100
PID 4000 wrote to memory of 2496	4000	msedge.exe	102
PID 4000 wrote to memory of 2392	4000	msedge.exe	108
PID 4000 wrote to memory of 2392	4000	msedge.exe	108
PID 4000 wrote to memory of 2392	4000	msedge.exe	108
PID 4000 wrote to memory of 4760	4000	msedge.exe	115
PID 4000 wrote to memory of 3352	4000	msedge.exe	116
PID 4000 wrote to memory of 2524	4000	msedge.exe	117
PID 4000 wrote to memory of 1912	4000	msedge.exe	125
PID 4000 wrote to memory of 1912	4000	msedge.exe	125
PID 4000 wrote to memory of 1912	4000	msedge.exe	125
PID 4000 wrote to memory of 4952	4000	msedge.exe	126
PID 4000 wrote to memory of 4952	4000	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://voltgrid.co.uk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,11769846833513923873,9402495469879462510,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,6650200270835722569,14437724730784870292,262144 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,8687350404476878029,13836972059452737692,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,3324616737187845191,8150598008566719826,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,14317644922712401578,7275152269062543580,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,7272960639854921216,3916669856476764735,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,10513493368575608252,14918028994132856283,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,11938910199576868931,12762650390557082637,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,12494033323224884513,13372406099114809499,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,11439032684765196503,11761018376459571273,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,11439032684765196503,11761018376459571273,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3448,i,5934942711324640408,8299921347607299255,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,3864982580045919539,8254255246906827112,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,9581879379057907766,15923272039882329476,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,15625476750211345740,2923843406758622961,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5220,i,12574579508043888303,5435830708983368133,2097152 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,4841992903060234691,1346992717123018596,524288 --field-trial-handle=2320,i,7139828301583596743,10118200414773125851,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

3fda769b-f0b0-41bc-8a00-ae7ab3794db4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3fda769b-f0b0-41bc-8a00-ae7ab3794db4.tmp
Size 10KB
SHA256 a90bdd25f5eb698d2c87491228f5d7779612672069ec7e460f78f60bae9e64b5
MD5 b35f19065bed99952c410686e471aa57
SHA1 c1290255cac6527047d804e2855397e5c8ca79b6
SHA512 6012294ae72213a74982e195cc24199b543996d111729cfd052447611b9a50b4883b7412ee7c39cacafc1da6b7ea181950992c0d57797a497cba134d1b454e9d
SSDEEP 192:sxZLRukh/fpsz+2ZqbVTIdpJHZ376+WNGYvxvh60IgrJ:sxZLHh/fpsz+2wmJH2Gyh9
TLSH
T1FF22B8526E38A9778CCBE21DBA15BF53E6F91032A1D41E58E6FC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dfab89035f52392b06e252f7bc1cccc215d24cfb1bd4e026f3bfe326d6df279e
MD5 a6b1fffb3f3bb365010b8830213a3b8a
SHA1 3b95e6c912927866e77e483a072d829c8db4dc57
SHA512 7e1c75125a1def202570362a4463d40a0e7313be82868bf3548a7db645b2b9397779e13cfbbda81a2fb59e33a6f8353a52b470b2e7d40d216698f43f93f16c74
TLSH
T13161B6750B10C4ECE79035B198D932927872DDEAF8834E4670735EB1FA05F5149EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a0221841db8e1976c54e3b25cd03fbdadad83a0fdcc13f19acf7aea82a8a2c51
MD5 6e42cab05965775d84cda71c6ef8ed2c
SHA1 df391253d9058fd7b1076ee03f67a2dd0b33b1f0
SHA512 19056c8ba61c647c54c7930a7a83fd8c39c33b39c2d516b09a99dfa1604d5a7bfd0a23618157c1f7a9c5c7534431a40011a985de7fb1d76ade6e1162a61a53c1
TLSH
T1AC61B5750B01C4ECE79031B198DA32927872DCEAF4875E46B0B35EB1FA04F4189EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c81797a38bfde73a5fd3ebbe06ca5083ffae897e169efef7b0578ca05a56b8a8
MD5 663f14841d10c1b0b0e51840bfadd11d
SHA1 e33637fd827fa6b1883c9f9a806b6ea392f9a3af
SHA512 30117d28cc09c7e12c852a790c5fc29145c88080c9ff4e5cf0f4d858a41e17b4fbebce4af6ca8bd9f7b1a6923a31fa7220fb90f6fcbfdafec1c7eb85cb963561
TLSH
T1E271A4750B00C4ECEB9031B098E976967872DCEAF4832E46B1725E71F601F4189E69BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 548e3b6ed43b3e103c3a60a7520144c98f1d2338cf03983da16b4e60497ce4c1
MD5 386b8e67d2149bc91f3827b1a4ddc333
SHA1 8bf245d64499b065354cb7c26aa715fd4d86cda8
SHA512 9786c8a3f87a0c3a5aafcc8d5b6cb272683c2b1c4ebac80fb2fc2c96d11f616ffa934d7a5fbbf783c3858c979679ed0d3bc219d95e13e4919db0e314a174b10c
TLSH
T1FB619CF3D3F4896D891111F06B246D2BCE5E042A936C39668EE8FE4A57E34B2E10194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1e3d797d370f7f62bfd57a7d1a9af5d324e123670a94bf39a2b7b2da9097ba18
MD5 1c191b2b0cf6d068ed0eee4991e87989
SHA1 a166be088c8822a435454e7559fd1d7dc0721434
SHA512 000522c1206a3becaf01ac3955ec72d67eb8fb918c114f00424bc108dbee36ce6e73aef1087f86e6a6aafd44c81eff2bf79c163c58b8641211a68f05e8b8fe45
SSDEEP 192:sxZLRukh/fps7+2Zr6VTIdpOfHW6+WNdFy/Yva5Ah60Ig5WJ:sxZLHh/fps7+2BxMHbe/5ah8
TLSH
T1DB32A8526E28AD779CC7E21DBA15BF53E6F51032A1941E58E7FC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3a77aae4dbeac4de0160a10448591e805a2498eb72301e0e626d5aac39fbe111
MD5 30b203a5ead44fdf8b71fb80b8ad0f69
SHA1 4c2093f13e706d2bece6a4fea3a8b6a4eaad7f4c
SHA512 7a4d3b0e486f9ced9fb978c73ac3673ce624c91489d3c44f40aa0ccdbc8ae50acb3cd8949d2d40bf18b13cee8d0ddb5685a057f8f7a4c8551816407529293981
SSDEEP 192:sxZLRukh/fps7+2ZrDVTIdpOOYHW6+WNdGtXYv95Ah60Ig5WJ:sxZLHh/fps7+2BuFYHbaXiah8
TLSH
T1F43296526E38AD7B9CC7E219BA15BF53E6F91022A1941E58E7FC861C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 16a1e100c884b1a0fa54046e02b73749c7d566d3c53083368101364c6a40c16f
MD5 6ccf308d5451710acf91402c80bc7e07
SHA1 9e16dc8de4bc5d43696f059e4cc383cc0274f9e0
SHA512 5aa378799f181dd29299e4c23be4adb887fed62023e5bcccb55212e95000bdaff5e56c880bef1db8bf48ab764357516d073cb668b7d1760e2d5fe5ab3add23c9
SSDEEP 192:sxZLRukh/fps7+2ZqbVTIdpJHZ376+WNGYvxvh60Ig50J:sxZLHh/fps7+2wmJH2GyhO
TLSH
T18422B8526E38A9778CCBE21DBA15BF43E6F91032A1D41E58E6FC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 60baae2cb3dede7fe18a57408c728c2496b24cc2ddbcf9a30a11333332c04f06
MD5 5174225312ea6c41940c61d7a1dcdf23
SHA1 875caee17fd3f049df66b7a9d56e081b18d56936
SHA512 2d881efe633c7bbe2fcd373b9578d328990869220998aba4d1abf6f82442bbd3d610e922363bf8f66016e1859dfc1f1bfe44979038d81925fdd41cddee08139f
SSDEEP 768:uhee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pbBro7GP:uhee3rxWvhffnu1jatcL88b6a
TLSH
T167C20B3B640CCB7E5F800A9DDC5A6F977FA802C797588D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b818893d6c6a9a8db156c1aa31123890c83d6c2637eed68de01e2ab4426cb4b4
MD5 c46837c4277d0a61b30650a53178deaf
SHA1 525799bf09abd803f467a6412555dcf2999bfa57
SHA512 b39650f66bca26054bac7b25e3805520e9d380f6621ba0f27dd1f04d5637db7f76d031db23006abdb853acb3c2dbfe16d992164882a49bb5e9ea45df37abf8b9
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09q:KYH+Kggm+ruKAUyyQgKJuP
TLSH
T19391F416743A02022C7D3D8CB2A696364F4635937468A8EF7FB904A24E67E114EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3c9a0f1-b635-46fe-a984-17ca5ae18c8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c3c9a0f1-b635-46fe-a984-17ca5ae18c8f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 39c3a786149bc7f143e1244bfa42ed0bd3001f787fbf256ab5dfd062469968b3
MD5 bd25b68695d13fb625342bf01a91762f
SHA1 b375567f15e5f1d4c99fe5a6e678f9717acc8fd8
SHA512 52a229211b2daea30ec21537e209b6ad1ed89cb48b5a44e46bf69e3c1430436d5dbde4fbf1bdd4cf94ec1454cac337f5cc3e4f7b7e9797bacf7fa895879c6e28
SSDEEP 192:uBLsN2kQ/lg8CNM7e+nQmiU1wHk4MTAn+FdLQx6ptFd3E78z16qKUMZ:esN2kOGFO7xJIbkdcxMdUYiUMZ
TLSH
T1D6422A726C389C2799A7B686F04A36135FF0512BD6C82F94E6ED6F1C01DA7AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 7f839505076843a374f904b184f0270b0ea9e3d5c231644085dd4f2c10762529
MD5 1099ea3af5ae9ea88459279910f9e0b3
SHA1 b9698a24d6443e29b6fc0dfca22de9ec58bc5084
SHA512 02f49e754f7f517d877e534726282279b33e3d6342cd63d6dd9ed4cc656427a017b112d2eca24f49eba60f3d5c08aac7a8f934dc334566c0d3b28e4c18e90d19
SSDEEP 384:eiFfusN28TUNTUlIlgOGFO7x2IbkdcxMdUe0iUMZ:1FWrwgbG09gnUdiUMZ
TLSH
T1D262F8735C688D3BADA6AA85F54A32139FF0416BCAC4AE94F7DD5E1C00DB29C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 89b639bc0e9aa386620426df5f73add8f40f20ef853555d64f62134447c425f5
MD5 98e9fc93d6373bff1a9c239e58e31f76
SHA1 0c677a3baa75cbbe29a248fcbb3b8890b1c474f5
SHA512 399d270dcc74623a36f83d2c4b8c93223c2555c98e86b8599c49788887ae9757c39dba77f271f5a118cef40ce5c04e448c8364c1aa9a09c56d5d9822b1eb3628
SSDEEP 384:eiFKtNn/s3n9SqBsN28TUNTUlIlPOGFO7xumbkdcxMdUo1iqb:1FKj+9TrwgMG0rgnUo1iqb
TLSH
T137B2F9F248D7893AD9AE5B47B33D2E024EBCC167B5846A50B3D85A0CCCC62BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6b43c3f9e611e46d1465194d8c7f013bf60242032adf7c14b00ed4fc5a337a95
MD5 230e811d5b0b812bda5a9e1a946c3f23
SHA1 beecac8da30fdeebf47315399ac81c7b1d583f1e
SHA512 bb8d6dd33ad9ab0bee15e523f42c65e0d490cbad044db2c0a71b7f877988ad31a60c449a2829312a0932daae06aa0706c6f92da238d4405a4881ac00b606f770
SSDEEP 192:uEbsN2YBQ/lg8CNM7e+PHQmiU1wHk4MTAn+FdLQx6ptFd3ER8z16qKUMZ:dsN2gOGFO7xPpIbkdcxMdU2iUMZ
TLSH
T197422A726C389C27A9A7B685F04A36139FF0512BDAC82F94A6ED6F1C01DA79C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 06eb40c32fe29b5b516366655034c04215975fa77fd3a45ba91374396abb0bca
MD5 1967f164d763b0db9130bb61aeb1eae5
SHA1 7507320c46ae59a82d985100d0b7fdae1811d7c1
SHA512 3ed21719d9a285f6206e68c9dd2e38df340dbb04f060af1a59d4b3843657ae6ebec87119cba3980846bcbfc50fd034c6e70e2594aa13c7856d3c6921f4056cbb
SSDEEP 192:lONb6vMtPQmiUys1ThTAn+FdLQx6/847yMU/u:lONb6UtRFT7dcxEfU/u
TLSH
T19E020835AC786C6BEAB3AE46F48A27171FE4116FA5D01B54EAE82F1C00D725C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 f1d43f4a51a8ecccbe3fe2ba445ad2aa5d174323c7cd1fe4a883ac70cbbdcc05
MD5 f638b6e873d8b0ecdcf247efbd872123
SHA1 e2fb242f682bd0cb72fb89c04e5016a2c4bffaac
SHA512 f0d820a39f9454a9d01cf7c0abf913112a26bed973eaed1ecb1849a4f25d31d7f0e033dbadaeedee794b2880baab90ab5812df2659c65b91d0a8478f1d364a67
SSDEEP 192:1ONX6vM4PQmiUy915hTAn+FdLQx6ptFd3Ex80I6qKU/u:1ONX6U4Ry57dcxMdUGiU/u
TLSH
T139121C72AC749C27ADA3B546F48A36175FF4922BDAC46F50B6DC2F1C01DA6AC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 479B
SHA256 df971de1d83c4ec8d8a5317c7da912d8feaad9129307ead7cac91d8819c039d1
MD5 60aeec055cd3bd04b686b14115275140
SHA1 226ad5a7a3c53e4dbc2166906cae70250583b691
SHA512 0567a6078a9f2c06a9054f75a9bf6b745ad3e3735d4b341e44089627a2e31febb2df182dfc3b521cc3bc180bae5d381bff6248f2806a7339a8f3037dff530336
TLSH
T115F0544E8C2EC994FE0955F500D5C3732415AC408EB55E7D6D0856D364861684CC9752
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 38c8c9615356f92791e78a945063812c423eec8a52f876661a3b43fd5e1c0fc7
MD5 19164938fcc1520b30907571127b848e
SHA1 b37151c3a722b219cfe52670a48357175ed6a44a
SHA512 911dc13f5a258adfa233cc7bdfe7344c0d26caff2c0302baf25a70d9aba20729fd3676b023c76c04cc612a68cb358e8f9df868c8d3bc3bbf3e8f07800ca737e3
TLSH
T136513A6636A287BF8E652EBADF04A6607DC8DEB416675050C2221AD14CDB0770C1B3FD
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f005a64e39cd76e374ee6b02a133f678def6a8bea6135380ae3903edc663f0ea
MD5 df6aa1704d29cade68ec7e86b0d69f99
SHA1 e300226fe7af8ae77140f0183d6f881cf6304388
SHA512 8aad02334880d641d2a9ab60e03eaca45aebfddc94e9dd3458d84c61838dff9a05da06f62fb15bdb08ab2cef46a45889c83d5f9d34ca33e2544fe41eec4cb34d
TLSH
T1FD414A5CB6F91158B3776F1A9BF6A8AE487B79772A06D05E10110F8F0626B00CDB1737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads