hxxp://verisure-stat[.]evo-agency[.]eu?entity=32896852

Resubmissions

27/07/2026, 14:58

260727-scea5agn8w3

27/07/2026, 14:58

260727-scd1csvgkf

27/07/2026, 14:57

260727-sbpepsvfqa3

Analysis

user interaction
yes
max time kernel
49s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://verisure-stat.evo-agency.eu?entity=32896852
Sample260727-sbpepsvfqa

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2072	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296378464416631"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{8BDE9A6D-FA88-42AF-9B7D-E4780EC3E39F}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 4548	4300	msedge.exe	86
PID 4300 wrote to memory of 2072	4300	msedge.exe	87
PID 4300 wrote to memory of 2876	4300	msedge.exe	88
PID 4300 wrote to memory of 2876	4300	msedge.exe	88
PID 4300 wrote to memory of 2876	4300	msedge.exe	88
PID 4300 wrote to memory of 4832	4300	msedge.exe	90
PID 4300 wrote to memory of 4832	4300	msedge.exe	90
PID 4300 wrote to memory of 900	4300	msedge.exe	92
PID 4300 wrote to memory of 900	4300	msedge.exe	92
PID 4300 wrote to memory of 900	4300	msedge.exe	92
PID 4300 wrote to memory of 2224	4300	msedge.exe	91
PID 4300 wrote to memory of 2224	4300	msedge.exe	91
PID 4300 wrote to memory of 2224	4300	msedge.exe	91
PID 4300 wrote to memory of 4672	4300	msedge.exe	93
PID 4300 wrote to memory of 4672	4300	msedge.exe	93
PID 4300 wrote to memory of 4672	4300	msedge.exe	93
PID 4300 wrote to memory of 4876	4300	msedge.exe	94
PID 4300 wrote to memory of 4876	4300	msedge.exe	94
PID 4300 wrote to memory of 4876	4300	msedge.exe	94
PID 4300 wrote to memory of 4544	4300	msedge.exe	97
PID 4300 wrote to memory of 4544	4300	msedge.exe	97
PID 4300 wrote to memory of 4544	4300	msedge.exe	97
PID 4300 wrote to memory of 3904	4300	msedge.exe	99
PID 4300 wrote to memory of 3904	4300	msedge.exe	99
PID 4300 wrote to memory of 2652	4300	msedge.exe	100
PID 4300 wrote to memory of 2652	4300	msedge.exe	100
PID 4300 wrote to memory of 1584	4300	msedge.exe	102
PID 4300 wrote to memory of 3376	4300	msedge.exe	107
PID 4300 wrote to memory of 1636	4300	msedge.exe	108
PID 4300 wrote to memory of 396	4300	msedge.exe	109
PID 4300 wrote to memory of 2228	4300	msedge.exe	113
PID 4300 wrote to memory of 2228	4300	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://verisure-stat.evo-agency.eu?entity=32896852
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb6119c188,0x7ffb6119c194,0x7ffb6119c1a0
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,18224581954634699692,15385343392343776875,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4532887398912645014,14155847699970306043,262144 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,3142469195682564335,7811161694909543805,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,2000661698579732422,11727490038040094398,2097152 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7301703872403798771,12954086680503242522,2097152 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,9233226852619610077,7879961602063121183,2097152 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,1664261621952128932,16312464315677197716,2097152 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3880,i,17850781975638954291,8633616420573429671,2097152 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,5871231829057131902,5706170364186771076,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,17107388082859607233,7315923678702471346,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,2928470544133806311,2863977373338996872,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,2928470544133806311,2863977373338996872,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,7656828295027751902,1823981613619156461,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,8824929312568262980,7677443488468774046,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,1391321797314049572,11063471683095298705,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,1171764317894342029,13312804547999479886,524288 --field-trial-handle=2184,i,17518982924997790488,8867426922663879293,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
  2⤵
  PID:2228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3708

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2bad2bfe-ded6-4aed-be27-195ee971f0f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\2bad2bfe-ded6-4aed-be27-195ee971f0f2.tmp
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 323a39ca192d59f3bb7eaeff512e83c5057b2ce31917bd9f87b15121b81e3986
MD5 a45989501614285c2a11a68ab04ab73f
SHA1 ac86639f9da7940b8826e0adc7c0b3fa671b6c7e
SHA512 ef66c2b3ae5a084b30958ca0a068ef25d27e087cf307f78eb71fa94463f9e7eb1b7a90a566dc67142ab133b6f7280a691fd1ba129ba7001a1aa428b38d3c944d
TLSH
T162712D5842C24972EFBE5072C5F155153EF3499F8ECB8E6247E4C4FD623AB1EA9E5004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58adfe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58adfe.TMP
Size 3KB
SHA256 0efb2380cff331c1ce65ffbb7ee993e250554a25280af0cfee9d6703648e34f7
MD5 69e7ee6b0c9898737fc93628e2ebe7eb
SHA1 d639373ad9b7d81f6e73ab86ceba9acf2910fcc4
SHA512 b0e236e8d6df6d0d5cd0267a5c9d531eb2bba8d3f3c70febba8df5254d9b40185c1f3a51cee1857a2d5af1b679c51ed26bbde264c3d355f74c927057d9dd02d5
TLSH
T156614C1802C25976EFBE2072C0F196193EF3499F8EDB8E1247E4C4FD6039B1EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f762a7809e013d9e17dde964c0c59b8cd4736e6db25e927f6ac6e6cfa2278cfc
MD5 42dd8bbd436036155812769be1a94a9f
SHA1 87d03c340cea3257a196355a98cd82ff5653bbcf
SHA512 46a19fffd42f9b6a9a9ea3cbede196f8b0fbb09afcae49413772af4e947c7e329f871547b4da003e615025be1e59fd4c15bcfe7fdfd89a13aba3fbc786357b9d
SSDEEP 192:sxZnRNyM/jK1Ml8Mkg/fxs0ZDRIdpfUHW6+WN0fY/YwzliPIgrJ:sxZnbMg/fxs0ha8HbR/09
TLSH
T17C52E7166A349977CCDBD209BA45BB53E6F91572E2900E44A9FCCA0C04E6FED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f55d73d96ebd438391379b48dcc000dad74f319dadc6a118baffd828b32faa25
MD5 a88bdd1664bf2d8f2b974f56663c8555
SHA1 32ea31307d949acb21b3e096bbbf05d838c483fe
SHA512 9fa5600b94a86161fb5668b79b6c68b08c20f3c7b979897c0a560f6d6ca55fdf284be8caecb0be226cf3ca5855f15d0faaebe9ece7e06efe46a8160782c848fe
SSDEEP 768:H44jeXmWvmKxE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+durohIVae:H44jeXmWvmKxEu1jacPLZQdlA
TLSH
T190E2F93B280CCF7E4F844A5DED26AE972ED801CB6A584D5447FA894C03C77EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5fa64fb2f5f81c13b3f75bf57f5f52236a12647df214989338835aa9623fcfdd
MD5 2586e1de890143b30e28ed7da00b06e8
SHA1 6db6a63c3a977d725edc369f5bef0b2da5230764
SHA512 d903417079cf4a51ff3e106792031ad10f89ca3184341ac6c79813feeb8c3c1ad1ef1c40087b3fde560ca3bd353d571e3889e85845ad96d1f052e6d76e160459
SSDEEP 24:KdhfsX+a7djP34HL+uIjL3KighaV31EBnSmZMM8fcyXYsfj45a2dOuq4GC+ZIjk6:KceI3KLKIjy9lI5KGUcKZIxKaUcjy4
TLSH
T15291874536BB42012C3F650C9390DA668A81B1A730A6F42F7FAD04F65E2BE119DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f43a111ea3213e71a488fddddb2998171df3e2d7266f5c418b13231e44abef19
MD5 c89c5f06d208e63f77ab70cacbb71f15
SHA1 e545b0b338f917e5fecbb314ed1b82a04c1458f4
SHA512 6996c211ef335e40d406812c13c7c8bfd91fca08f4d6c8b71fd0c6396b9eef3c300a30450216af9aba41650e30a1d540e8fe0bad31dc3bf62f47b4da92aab551
SSDEEP 192:u4LsNQlQx7ZEpbQmiU1QEz4H/+jVRjzorIMXTr+2r5cFTWqT+U8:ZsNQls6v/8f+j8IMX/+22Ff+U8
TLSH
T1AC320936A978AC274DE2A695F08736139EE4112BDAC97F94D6EC5F0C00CB6AC131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 94ec9e36198ed527931d72e04b7ae76033a090f7580d066eadad695e9434850f
MD5 8cb04c5fb2723b0425e04f55ed552edb
SHA1 61b0ab35626d58af809340edc50311cff2355296
SHA512 246cc37126d5d7179292cdfed693429de62653197af5b2a231359f6061cd0f84148c20e925644aab8ad7fa30a8841520bd95e9a50be81c49540fe3b0531ef029
SSDEEP 384:DKZcIhsNQPs6v/8f+j8IMX/+22Ff+OObjI9G6w7oF:Dohowcj/lo229MM
TLSH
T14F928E36AC389C3799E2A652F0C736175EF4A13BD7D96F84E1ECAF0D048AA6C0317815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 62e97e16955af2f1e7009e1c3299e15d14e1293ef385274fc739f8487b33b62f
MD5 954d1a963ed7866e3d1b3c79fafa1cb5
SHA1 1127b75342a16be4202074246afcb28007d89da8
SHA512 f9c091651e47fbb8ebd46191a67ff526631bcabaec9851d8a169d8eb10eddd98a33286b22c4b338cd7c7b25458d51590c1ffd337c0faffc5f017ef39e402580c
SSDEEP 192:EONJ6hZ0QmiUyvDpc/+jVRjzorIz5wOZyAhU6:EONJ6owpu+j8IK21hU6
TLSH
T1F202C939A8687C7B8EE2AE45F48737135FE5116BE9956F84DAE81B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d444db121c841d888c7e07c4792664238c7384da16bf2251b8c9ee534273007f
MD5 bde480774268c1e88b1da669a92f8b49
SHA1 3c3ff287532e211365273b1efb411d63681f8c4d
SHA512 6a1114fdfe8da0556145496785cb19dcf00df3056ccdb8f021422cd3e53e5448186c19769f46a570aa82d1e8c9365e45838ee13bcbadf0d383317cf6cc2da889
SSDEEP 192:UONB6hZVQmiUy3Dsc/+jVRjzorIMXTr+2X5cOqWqT+U6:UONB636su+j8IMX/+2a9f+U6
TLSH
T18C120D36A468AC6B4DD2A685F48732135EE5512BDBC57F90D5EC1F1C00DBA6C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0edd2fa3c17a586dabe4d16780471eb758cf84667d031d72368c6a361c9aaa6e
MD5 ea912be8fc7d7dce93293a81f602689c
SHA1 e418010487b71282ac83529ce5f73ea77b54f76d
SHA512 ebdaf04f2c4ea6e22868fb89f114000e3f1e75e9a6724701d75cbf1fe37c2150a362008fb4059543a331e1f2d1ce459d856b8f96aaa5200df740b960f8bb0fe3
TLSH
T13D411898A6F91148B3B77E5A9BF7A82E487EB8772F06C45D10110E4E0A22B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads