b212c8d256af8a3cf3370600bca61e41aeec4f72cff2c2cdb06cf8c9bc53e63d

Analysis

user interaction
yes
max time kernel
29s
max time network
29s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
std.html
Size 357B
Sample260727-qd3c8sshqc
SHA256 b212c8d256af8a3cf3370600bca61e41aeec4f72cff2c2cdb06cf8c9bc53e63d
MD5 1affe3ac308cbe939fa442c09f62b856
SHA1 8a79472a44b411725ae229625667958006a235d6
SHA512 ad008ffc3f8e067bdba8cfcdf4c9f8cb2c3a3e96cd39aa44e3e3d9a6c1a759033df94b37cb38b25a6fc5bc3da275a07635e458e32ae86bbe5e14e248069ec1d4
TLSH
T10EE0C0FF00D0614AC80125917DD4BBDC324482FB6CC549B421C99083410017ECC2D7CD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296313837396405"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{8B77E1D6-B864-40FF-BA90-D4994CBB345E}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 2452	4840	msedge.exe	85
PID 4840 wrote to memory of 3940	4840	msedge.exe	86
PID 4840 wrote to memory of 3644	4840	msedge.exe	87
PID 4840 wrote to memory of 3940	4840	msedge.exe	86
PID 4840 wrote to memory of 3940	4840	msedge.exe	86
PID 4840 wrote to memory of 4528	4840	msedge.exe	88
PID 4840 wrote to memory of 4528	4840	msedge.exe	88
PID 4840 wrote to memory of 4600	4840	msedge.exe	89
PID 4840 wrote to memory of 4600	4840	msedge.exe	89
PID 4840 wrote to memory of 4600	4840	msedge.exe	89
PID 4840 wrote to memory of 2208	4840	msedge.exe	90
PID 4840 wrote to memory of 2208	4840	msedge.exe	90
PID 4840 wrote to memory of 2208	4840	msedge.exe	90
PID 4840 wrote to memory of 1808	4840	msedge.exe	92
PID 4840 wrote to memory of 1808	4840	msedge.exe	92
PID 4840 wrote to memory of 1808	4840	msedge.exe	92
PID 4840 wrote to memory of 752	4840	msedge.exe	93
PID 4840 wrote to memory of 752	4840	msedge.exe	93
PID 4840 wrote to memory of 752	4840	msedge.exe	93
PID 4840 wrote to memory of 2604	4840	msedge.exe	97
PID 4840 wrote to memory of 3064	4840	msedge.exe	98
PID 4840 wrote to memory of 2604	4840	msedge.exe	97
PID 4840 wrote to memory of 3064	4840	msedge.exe	98
PID 4840 wrote to memory of 3556	4840	msedge.exe	100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\std.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffa0554c188,0x7ffa0554c194,0x7ffa0554c1a0
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,8513243654122617378,318897697234266372,262144 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,6089706498416758128,2129399161531901388,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,2708578931157006617,15120444284164899379,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,4807117897486046491,7440645985693475461,2097152 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,14283653407787793217,9059646614425759155,2097152 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,1349902516874541614,2896576645398612770,2097152 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,5152427980279277786,3957345579553102344,2097152 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,8145424275291150869,885515574193534807,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,17291331864403229213,11612682611455088954,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15672700337721627851,9523933698789721052,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15672700337721627851,9523933698789721052,524288 --field-trial-handle=2328,i,48922008486083867,16196162683086034996,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c5a1e4c6bd71d3a34b9153f79497f36429c300493ba52b75f118fb04b6f9aeb9
MD5 9f913d966ee643ca1de8b3f2dde5c8df
SHA1 442e51f5b656fdcd9a7d6b4af45c1db11a666378
SHA512 43458f7b7392e9710094cd357cd1425f88091c9c64ddf0f7e74cbf231278338e40fe38e138a7a06a80890f0d450abbd6ec101aa6f0192d577ce9c474cc30e0a5
TLSH
T15C71C336223100E3FF31417239C16201F97DACEEF6AFEF2A4964D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587635.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587635.TMP
Size 3KB
SHA256 45feec2088865cc6e0ceb785f626eac5ff10bca0268730e171f5b4e67ab9a959
MD5 ecc3fa2d3955e31436f8e85afbbc6507
SHA1 489eded935f32c69a584f2a63211f66b99768aed
SHA512 ed9cdd737aece0ea6ac796cb961bb2d684b80b64e1c60ca2b85fba4148f4b9b0c9bd2134109388657efc58f61c75d5655435eade1d55dd321834cde6dc2ada46
TLSH
T13671C336222100E3FF31417239C16205F97DACEEF6AFEF2A4964D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 94898de007b2ce6326df76fe9352b224e4e789409b32633605faadc115984910
MD5 aee05e26fa98b8734e43132adc197180
SHA1 4464e56dacbfa8cb0cd44d92534938547c4e8206
SHA512 40ef59e0a6664beb8e9009f5ca0f0ab4e08151cb8e9fc88e06df117ce989aaa80e14c06e53e87038c3745ede3e20383828c8d7dd87320acc85617f74426363bf
SSDEEP 192:sxZcRpyM/jK1Ml8MkG/fpsziOIdpdqHW6+WNGYIkSj6IgrJ:sxZc7MG/fpszifUHbGs9
TLSH
T1F842E8166B34A977CCCBD309F9557F53D6F91472A2900E44A9FCDA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f4ac109b025597be42ad80d10eb7c3f9710ff2b1436756e4e6513463703aea8f
MD5 6c18343f82a14f69b89a91272f2b9717
SHA1 659db24570a8d5949c657b27bcb164f4b451f789
SHA512 cd6debe861eab973d20b87b2de899866e91c01cb0dd2b7b6ef5841e4ebc01a2bf7eeef9f979a038a50ae8392a46f1bb634cf4078a082e55352f008e9494eb933
SSDEEP 768:8isqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9/roPis:8isqxXlWvJD6Tu1ja54LAs9sPL
TLSH
T1A3D21B3B694CC77E4F840E5CEC2A6FD76ED801CBA6988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 84f851fb61ff297aa3440683409e5ce8c6f17554018e5ae2eaabd7d7fdd09ea5
MD5 34b50e40551943c6125dbe4159b0f790
SHA1 27fbaacb3fe945c6eb060df3fba092e6fa64586f
SHA512 0e0f4e8a865c7f44bd7ad81dab6f93334a0818be518a93ec858549c7f491737fc4679d38abf767f8a9bf33c62e07fdd99b81eb4f5132a087b3a01be149491316
SSDEEP 96:KYbaKYIKmXGKwg2uzCnTRZZezpoFhzeKZrhFe9bzg16yBmSgYI2qYX9IS2KwTIU2:ExN9uzCnTRZZEpojzzrhFYbzg18ldE
TLSH
T172E14B12367B0202387E2908E3AEC5779E5376633418E46F3B7850A55EA7E212DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5e867e4ad0e3d4d7383cdfd1115c620887776a75b2e7265dc46cb233fc175d53
MD5 d94a2ef2785e85c6fa03fa8e7d876e01
SHA1 f01ad0ef3a8621f284984e8e2d6546393a2dfcd4
SHA512 724d7c86c7b02c0c91ad2127b3714b8495a1d4aa69ef5b5fabd82894da0db4323cee36962fd09cbee57412c8c27b54e94a5a6033248bd469a4f0aa19fc3a80a3
SSDEEP 192:ulLsNehQeeacDkRbKXQmiU1EXM4VRNNOmz+7R9R+24SRgq4gU8:GsNehzeob48DVRNNOE+l9R+2fVU8
TLSH
T13D3219326C385C365EE2A145F48B36139FA86027EB896F90D1DC4F0C02DF5AC230A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8b67581735492fe296b87191ebf26ba00a7d68447b99c2d60fc6873f48cd5178
MD5 d1cabdeabbef07e61f78e9c89975c2f9
SHA1 5d935bc379c492cc9b4275059475d4a1c11904a8
SHA512 fbad76008a380d38efd05f5208b796b43d6adedf10339805848187b7968aef9efde5187dd52a3983318109dd985277d73990f6b0a79a22b54fc874d269f1e51c
SSDEEP 192:tON16JkRtQmiUyVjW+RNNOmz+ih3URIU6:tON16Ur2W+RNNOE+6TU6
TLSH
T15E02E9356D382CBB9EF26E05B58B27275FA8203BFA856F80D6D81F0C01D765C2346936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 53d159999b080dddd4f77cbc0d3a67a703e7bf8923d18d086357d434da44f00c
MD5 c42836f23bbd58e65b4f165dd590013d
SHA1 0d3f3d6f1e78d91d7918b9e9c2d451e905c8d89c
SHA512 f05e17a6bd55aaa6aad3e69880c64f857c0662f001e2067a276a16e48bd585ab72404d4092ddd5e0ca5e17d391099ca2cd497855bc60a0bc465b713087a30ad4
SSDEEP 384:zZcIhsNe7zeob48DVRNNOE+l9R+2fVOObjI9G6w7Gt:rhdekhHNOEI9RlfV29MGt
TLSH
T11E929E326C344C769AA6A511F4CB35175FF8B03BE7C86B90E1DD9F0C06DB8AC131A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d40a9ed30611b3cc0d17114d07ceeceedfa98c847dbf0f7a02fdec4719ec47fd
MD5 1354988211d09b16f042f21515fcb158
SHA1 978297c92cb51a7332e1afda1939ed611dd5caec
SHA512 9aaeb90542d4e64d3bf52eeba111704f79e4b5156992c88543dcc8bd82f1be2a06e3d6aaf7cbaddb643e945aeaeb76d0b2278e66992be82cde280d82e6cf607d
SSDEEP 192:tON36JkRqQmiUyejR+RNNOmz+7R9R+2VVcgq4gU6:tON36UmXR+RNNOE+l9R+24VU6
TLSH
T108121B36BC285C775EE26945F48B31175FA9602BEB8A6F90D1D81F0C02DF96C234E926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7ebca73391ea50f8054b5e8ec0804a4a1eac82ca112acb4f12525764008c507a
MD5 59716b356945a45d3a4a1b69e36586ed
SHA1 fa375aad5141fd3b50be9d93c46fe6d245bffaab
SHA512 18eb06e97b5fc0a3ca499bbbf2d2ac30984102df005c6d8d03677faa7dbebf1e673bed3e600805290c60fe5a04662b99d92bcaf3c43ce701ce2ae8f4616df081
TLSH
T1FB412598B6ED1148B3B77F5A9BF6686D487FBD372E0A915D10010E4F4A22B40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads