hxxps://techseelinkagespvtltdsolutions[.]rsupplyinc[.]vu/?e=amVmZi5oYXJyaXNAY2V2YWxvZ2lzdGljcy5jb20=

Analysis

user interaction
yes
max time kernel
60s
max time network
62s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 08:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://techseelinkagespvtltdsolutions.rsupplyinc.vu/?e=amVmZi5oYXJyaXNAY2V2YWxvZ2lzdGljcy5jb20=
Sample260729-kk16vsfc73

Score

7^/10

microsoft discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Detected potential entity reuse from brand MICROSOFT. 1 IoCs

phishing microsoft

flow	pid	Process
36	3864	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3864	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297880324368476"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{674E0D04-0CB7-4DDF-BDE8-AD17D32A7EED}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 2852 wrote to memory of 652	2852	msedge.exe	85
PID 2852 wrote to memory of 3864	2852	msedge.exe	86
PID 2852 wrote to memory of 1176	2852	msedge.exe	87
PID 2852 wrote to memory of 1176	2852	msedge.exe	87
PID 2852 wrote to memory of 1176	2852	msedge.exe	87
PID 2852 wrote to memory of 3028	2852	msedge.exe	88
PID 2852 wrote to memory of 3028	2852	msedge.exe	88
PID 2852 wrote to memory of 4580	2852	msedge.exe	89
PID 2852 wrote to memory of 4580	2852	msedge.exe	89
PID 2852 wrote to memory of 4580	2852	msedge.exe	89
PID 2852 wrote to memory of 3780	2852	msedge.exe	90
PID 2852 wrote to memory of 3780	2852	msedge.exe	90
PID 2852 wrote to memory of 3780	2852	msedge.exe	90
PID 2852 wrote to memory of 4516	2852	msedge.exe	92
PID 2852 wrote to memory of 4516	2852	msedge.exe	92
PID 2852 wrote to memory of 4516	2852	msedge.exe	92
PID 2852 wrote to memory of 4368	2852	msedge.exe	93
PID 2852 wrote to memory of 4368	2852	msedge.exe	93
PID 2852 wrote to memory of 4368	2852	msedge.exe	93
PID 2852 wrote to memory of 2032	2852	msedge.exe	99
PID 2852 wrote to memory of 2032	2852	msedge.exe	99
PID 2852 wrote to memory of 3192	2852	msedge.exe	98
PID 2852 wrote to memory of 3192	2852	msedge.exe	98
PID 2852 wrote to memory of 1080	2852	msedge.exe	101
PID 2852 wrote to memory of 1808	2852	msedge.exe	105
PID 2852 wrote to memory of 4820	2852	msedge.exe	106
PID 2852 wrote to memory of 368	2852	msedge.exe	107
PID 2852 wrote to memory of 4532	2852	msedge.exe	108
PID 2852 wrote to memory of 4532	2852	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://techseelinkagespvtltdsolutions.rsupplyinc.vu/?e=amVmZi5oYXJyaXNAY2V2YWxvZ2lzdGljcy5jb20=
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ff8924dc188,0x7ff8924dc194,0x7ff8924dc1a0
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,2255023881119697616,5312040026754643243,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,17549963240791134446,13237639326762026319,262144 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,5573480615076362302,17219996638664469099,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,14066128771661892850,6571582143022560616,2097152 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,16127249425075705576,8577580638489076882,2097152 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,7265400665598555946,6199433058141318800,2097152 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,15389164069368304349,13643462067532518429,2097152 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,12473865734405482674,4878381040510058531,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,16640775622422125133,7251815883159583126,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5775956886429829392,10909907422611655384,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5775956886429829392,10909907422611655384,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,6685949126726720348,7756074264485004650,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,16469797098095190449,5343833159499026516,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,9302185076129526546,10930893691890347437,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,7579854290527003568,4484964640196541963,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,3614558698326635730,16006088428677621561,524288 --field-trial-handle=2348,i,854719635235321828,11259847283839042212,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:1476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 29KB
SHA256 c48303cce01f6c5a55943fafa94b554f25086fff26eca26cbbe8bc8e27bbace6
MD5 ce29d2e72d067ab24c35cfe595e530b1
SHA1 2f789c8a7df4f7999c6af2c58213ea3422ececaf
SHA512 9d2b15fcf9ef97857fbe249aa4c51833cc23281070fabb2a586c88d85372da333e2e4b429c5be97d933fc3baf1ac27572965f9a4ef03b7ce6efbeb5165fbc31d
SSDEEP 768:pE/bJJgiG18t/hO+MSOdDfnYVqq8m4EXxdI+vTeL:pm9JgnW/FqdDfn4pQEBJeL
TLSH
T14AD2F1AB85081331743229ED8F0D9AC107890FA3A387D9FD1206FA1459FE578F56D1FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2a2dcb14c09889ca04c06b35015cda560eb2ddc68a203222cb1835e34dabff82
MD5 2545592c0f976c4d79a087b04536b214
SHA1 b97b32ce8f1983b925fc79fa63d9999d90bd68e1
SHA512 29467dc08d9eef074f07fe4303383fbd2006908682e6d711cd41c498398a0b50b222fa24d80185edf98aaa0ea8bae253b26c92b4856ddba73ded676bfdd3220f
TLSH
T10B7192D4F1758896D3A2837DC6E1C625343497AB0B8FDD470660863DE51FBE343AE108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ca103d2cee5888cf20c25db83da0f66fea5b4d3b839e234c15bb50ee47aa3f54
MD5 9faa4898dd58108413dc4ed535cf6557
SHA1 d2105e634707ebe6c4a097f99e8bf8da3ef1081f
SHA512 b655348b0cb3b37363033a358840d34baf9296b32abf77a195aa5641ff80c84962297c682630b79c93d5b43919627adcafb4ef03f2477edca0ba02dbe0c2d99c
TLSH
T1AB71A5D0F5758496E3A2837DC6E1CA593034969B0B8FDD4B0660A53CE60FBE3839E508
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59045b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59045b.TMP
Size 3KB
SHA256 ac01244049cadcbd419fd79e8b2d2c5e0a7e799990020fbc2d35397f599f59e4
MD5 5515c57c019ba72644e83d3afef17870
SHA1 01b5995443b218d4011da98c39a980d91849b6fd
SHA512 135dd4f88a2cbd4f7090cef50af72f7d0ac6c939e3921610e65c058b8ddf943edc073fca0b1264bf895722825d57393e860b8a184dd13d153125c07c53f3bf18
TLSH
T19B7192D4F1769896E3A2837DC6E1C62534359BAB0B8FDD4B0660463DE50FBE343AE118
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2d9be74cd69a892c93eeb501cac7525ab3073e8fe21795e6a4beb8ed91d36651
MD5 94fa2deae5649c5732f339fdd39fe88d
SHA1 4b7e86a769ddceb44affba604aaef05e52144780
SHA512 cb931f857c1126e1fa93a9851d5389ad6547a2f4ab95444f9098eb0755cd4bc6c69b3c5614b8a8f769d82537aa23ffdf8a5ad56625e19065c3ceddac686f24f0
SSDEEP 192:sxZlRiyM/jK1Ml8MkZ/fIYs/pGmIdpNjHW6+WNL0T/Yw4H01+TIgrJ:sxZlMMZ/fts/pGHBHbI/l1o9
TLSH
T12D52E6066B38997BCCCBD209FA55BF53D6F50462D2940E44AAFCDA0C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f42ed7f74d89d0881338e5cc4368a29de659ac912e1d687bd150bbd05bd2320a
MD5 efa57ca7ab614ebb29fb693e2483ab96
SHA1 af023ab779c8daa9ce7e571b48a401904cf4fde1
SHA512 fcec0035c42adb99c66032a21c304043c497ae50615d2c1dce78a7e1183ab7530d0b2eafc1e1ec6c7b6d803404a999ecee6d4aef50aa256bcf6e7dfdbd3aeeae
SSDEEP 768:ta4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dOrohecPac:ta4jeXmWvmKLEu1jacPLZQdFnv
TLSH
T1CDD2093B240CCB7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C77EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9f84a0ca4df88e6791a8f2bdacd3fefb3c4aa07f1bcc67179f76e5d1f823ccfc
MD5 3174cce884081c6098136432fa0558de
SHA1 9eb4a82bd0d508c74d2d49ba9e219234a8c8bb18
SHA512 f2fca7a2885f560f47c79e66e1120f838957df17786858112ab2904f03df0a4385b1b93a7579eb0994c3815b727a1ec5480dd6210697465b00ee84847dbd2f24
SSDEEP 96:KkHC7ntll+n1AldH+KFLdB+pfHoxXfm3uKQ4n6IKzqiU:zHC7ntll81A3HHLdBwfHoxXfVfvU
TLSH
T10D91515232BF42022D7E28189394C6575A82B1773248A83B7BAC01B24F67E665DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4511393699f5f46e09690b5a19536ab95ea4f5679cdc8d5382880224751f89a2
MD5 05e3e84a2d33c4de796bce3eb431af88
SHA1 7902fda752bf6de282ac02c6d1ec5b80dba79f62
SHA512 0b34f7bbc03b152439994008d630ffcf875951a8929a230272acf9cb792761ed8b76b6e3d635cc809879f174f91403fcf00cba2ab4a7353a010d0274825ec43d
SSDEEP 192:EONI6hZ0QmiUyGIpc/+jVEBO1Tm65wOZOgfrU6:EONI6oOpu++BOU27DU6
TLSH
T1A302D935686C6CB78EE2AE45F48727235FE4212BEA957F84D6E81B1D04C775C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0526a69a9909c199c3f4eb364595b25df47eb42698c79eb6c94a3d3f1677a341
MD5 1e02a1dcf12cba46e86fa3258de6d188
SHA1 a904e3ff0a3aa84d2674a82fd6f35fa02d606848
SHA512 7ef2146f2fff76e19f6950d4bccc78ac64ba4a12a5ce5bc59e7fc4238cfd0563de9141b45c69eb92131193314b7b01963b1c0e8108223526a4f75eb927d76651
SSDEEP 192:xONS6hZPQmiUy1IGc/+jVEBO1Tm6//Eq5cOqpqNU6:xONS6NLGu++BO1/cl9UU6
TLSH
T1F91208366968AC771DE2A981F48736534EE55127DE897FC5D2DC2B1C04DF7AC230B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 50fc97910ac6507637493e47b731d8fbbcabb1a6559ef9436f4b5e9746701049
MD5 f5073019fdf94fb0f004743333e5c5b9
SHA1 f23577f80f9c15a3aa368d80eb505e8ca698fadb
SHA512 2c2289958cec3d6e694e2678ecc0f776b274dae0b3db8363b30ac8ebf071e37ddca56cfa6c4fbf2c9771ac33868690f4e92da25ce7b08406cdb49061af31b372
SSDEEP 384:NZcIhsNgUaViXiRaf++BO1/c3FUScjmwZ:Vh9ZCTBO1/cVU1j9
TLSH
T183929D726D78AC766AE6A501F8873A138FF89073DBC42BC4D5ED6B0D04DA6AC1307925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 beec696a589a7c111185d3e27128c80d84cc77b59c5be482e4c3b4fba7764a3d
MD5 47c0c82cc480813898b44b3ad24d34a4
SHA1 a5eeca41118d32fec058f22804c0fa48c1776837
SHA512 c0a96b7d74c33aafd3f7c6ea69aa55446a5f9c83d3d362bdfd1ba425dc020a687b7141f8b526667647593c476548376b6b288cc0019a4a04a8ab489d6c988579
SSDEEP 384:sZcIhsNgURViXiRaf++BO1/c3FUScjmwZ:6hWZCTBO1/cVU1j9
TLSH
T107929D726D78AC7669E6A541F8873A138FF89073DBC42FC4D6ED6B0D04DA6AC1307921
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce1c6473-a2a8-4482-b2fb-cbf3d63afdae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ce1c6473-a2a8-4482-b2fb-cbf3d63afdae.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a5f8921aee17ccfde2ff6f26b3a73625ee7a6341d9ceea011c487c3e68450341
MD5 a976c7f44e77cbc67cbb15d5bdea4dcd
SHA1 48e2cc716afd7274163cce09a549188ba93fcf1d
SHA512 f37be337be17e3524a72372e686635fd72872c3af282df5581d6951712c480ee3c182ac8c208b6d255d87ba4a7eb2ca0639532a49da902141e44172b1dd8b939
TLSH
T12641E758BAEA1058B3B76F5AAFF3A86E447AB8772F06955D40110E4F0973B04D871B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads