hxxps://loveco[.]squarespace[.]com/

Analysis

user interaction
yes
max time kernel
58s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://loveco.squarespace.com/
Sample260803-pnffsaxfpc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302337121743212"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{DF97C9F6-2DD1-4E13-A51A-499DBA16A514}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 4768	4492	msedge.exe	85
PID 4492 wrote to memory of 2776	4492	msedge.exe	87
PID 4492 wrote to memory of 4944	4492	msedge.exe	88
PID 4492 wrote to memory of 4944	4492	msedge.exe	88
PID 4492 wrote to memory of 4944	4492	msedge.exe	88
PID 4492 wrote to memory of 2088	4492	msedge.exe	89
PID 4492 wrote to memory of 2088	4492	msedge.exe	89
PID 4492 wrote to memory of 3816	4492	msedge.exe	91
PID 4492 wrote to memory of 4248	4492	msedge.exe	90
PID 4492 wrote to memory of 3816	4492	msedge.exe	91
PID 4492 wrote to memory of 3816	4492	msedge.exe	91
PID 4492 wrote to memory of 4248	4492	msedge.exe	90
PID 4492 wrote to memory of 4248	4492	msedge.exe	90
PID 4492 wrote to memory of 3032	4492	msedge.exe	92
PID 4492 wrote to memory of 4212	4492	msedge.exe	93
PID 4492 wrote to memory of 3032	4492	msedge.exe	92
PID 4492 wrote to memory of 3032	4492	msedge.exe	92
PID 4492 wrote to memory of 4212	4492	msedge.exe	93
PID 4492 wrote to memory of 4212	4492	msedge.exe	93
PID 4492 wrote to memory of 4852	4492	msedge.exe	97
PID 4492 wrote to memory of 4852	4492	msedge.exe	97
PID 4492 wrote to memory of 4592	4492	msedge.exe	98
PID 4492 wrote to memory of 4592	4492	msedge.exe	98
PID 4492 wrote to memory of 3360	4492	msedge.exe	100
PID 4492 wrote to memory of 5036	4492	msedge.exe	113
PID 4492 wrote to memory of 4740	4492	msedge.exe	114
PID 4492 wrote to memory of 1044	4492	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://loveco.squarespace.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x210,0x240,0x238,0x25c,0x7ff9f3a4c188,0x7ff9f3a4c194,0x7ff9f3a4c1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,11619342389157364587,7381026488227133212,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,949499939310795704,7372276837667409452,262144 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,16284089314768245384,6084325883115864720,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,15033724460193778683,6990687876905885199,2097152 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,15582983939297649778,1510558088054925793,2097152 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,610389986092884358,15192461518362234953,2097152 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,1785059267031313540,18261060994780004417,2097152 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,10390649532210875650,16394226330655457933,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,16622838159493240014,18118131340920406856,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9530477427365692712,6004186206764766478,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9530477427365692712,6004186206764766478,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,4132738078035623002,11488099319878753585,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,4607754556271862010,8060564369232328382,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,16277322780884624683,1912596958721691848,524288 --field-trial-handle=2104,i,9984233742104158542,14476153902213565449,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 86f58006da590b6a6397eb32ecab83559def6e4467e696655355071b7bf2aa4a
MD5 448f19b0779a65b0be650a956fa5df6e
SHA1 3baed8e409ca650111c9646e8bf0dad44ff672b3
SHA512 f7785f7b3b588df9949bb0ddf9ccce50e7ecddfe0d32752bd78b9bf0c7255c65a9c30533b1b6de2eb00570b5d4f393e3d3d59d030c093e0902b082d13b1d4f37
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T1A5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9b5e7c71d1ae70e52f67cf0779d626cbb324d750076be8dadad2eac888e89d17
MD5 072544a6f150ac20f23c199e7fc2ad04
SHA1 88f775ceeae1de37ae487e0ba0e644ee388e0a16
SHA512 2ee2efc3671b55bf1c8e056bfce233be2f0f6281d626f4e0bbd6e207fef8190041b5f80d201eb6824add72607c9558fd6e64a73cc79c995f1fd91133edfc9730
TLSH
T10D611C24CAD24E80EB500233D6D0AB6036399A94BBCB6F51F28558F91E0FF6D2D7F119
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59138e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59138e.TMP
Size 2KB
SHA256 2745b4329cebd0b69bc5fbd0ffabdbe708e747f429624faef912e30567c17b45
MD5 4d9a83bf71f4dfef93dbbb771b96b856
SHA1 6ccd25433268aac9acc013a6c46917b0e00ad2ab
SHA512 5a33df88a02db071ba89711919ce456ca407fb5b849f7fa8022caefda87040fa9aa93f73bf42e5a3fe8bbade39c3937e890a2d768860b8b09747665a9a08ee9a
TLSH
T123513D24C3520D91EB915233D0D02754367AD6D83BC76F94F29868F91E0EF2E5E7E119
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f31e94fcf6cc4e0f337722816c67e7aed3929eeb5c65192d59f3f15dc8fd9ae6
MD5 0e831e92732cd738c145863b51523bd8
SHA1 eef0ca63389556062f91739056b1aa2cff3d9590
SHA512 485916fdf1571ac2b2789081eefce8579300e536e352364086fdcc38f98364dad2a0f15074c304ed2353fc29197b1ce38733d0a3aecc8960c5ec2105ba78d8bd
SSDEEP 192:sxZqRcVyM/jK1Ml8Mkt/fVsukNVjIdpHFHW6+WNI8I4/Y9I8HRjIgrJ:sxZq8Mt/fVsuuilHbo4/m9
TLSH
T14252F9526A34A977CCCBD209FA55BF53D6F9047292900E58A9FCD91C04E6BED320781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 460373fbe0c45cc73330e1d6f9e2da32be62df8c6428819928d064f11b1eff7d
MD5 9c26adf428ddd056e3fc21ee69d38e54
SHA1 e74a5f8f2b51217998af1164b82fa2476ad55967
SHA512 8b3fd21018a9ab1dd8204b7f0537f9290237a7961ce3f738ffdb6f91d0b1cb658364e60830ca64d419b24a183d6d27232980ebbf2f3a7981c3d62cce54209533
SSDEEP 768:vgcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN/ronog69+:vgcv21wWvu+Z+u1jaeFLeRNsot+
TLSH
T1B2D20B2B280CCB7E4F841E9CED2AAF8A6DD801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 af81b1a07a892ab8db353aca0ccbb4565fc39d6ee28823c3a84d07eed59b7048
MD5 3b5ed0dbe27fd9092fe1f4f9573c7759
SHA1 17c045fd86c906596c208a14c39c3f664e74c229
SHA512 d0a3cc26d9e2ad0dd70b5d327d27a6f357793d3807b30ba983ec788fd7862f08e939f160f4264e3d6b782ee2bdc0928ab9ad30aadcc5b80f6745b49cafb912d8
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD6aEKPaGO1WKO06C4AKFeKz:mTfLRl7J
TLSH
T1E6C12416B13B4642287E7808A79285378F4931E7781CB4AF7F7800A65E6BE115DFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d0473fe02136d3fcaab47b06d77cb09454407d4660ebd8a68857f40500da0077
MD5 e60a46e95dda119eccda3bff8443fb01
SHA1 614cf9c14843a0951460b37c3e4c6e28fc17b4b7
SHA512 9f703ea894832af41577eb75c9f5e6a6e1ca0458cd7a109bc2bf3a49de882852397ac889df77e859912a095b18fc1830bc7557644172c74599f282520072e9fd
SSDEEP 384:gZcIhsNJ8TQ87zi8CREe+CzO4eyfxNJr6HlytEDq17KDK:ehJzXARPrOXyfxLroy6Dqhd
TLSH
T1B4929D71A9744C375EE7F140F88739178EF84023E6C42F94A2ECBF2D05DA6A8230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7e42d632c6a345dbe2eeff6909a5d2f742db1b9cc8d92e0f7753f3dfd0cb2942
MD5 423f9d22126dbaa8b8d9015482b6f2cf
SHA1 b631eafd5241b39d52b19ae37add25bee7f58081
SHA512 bac050591f437cd0afdb07734abd25b92bdcdae207cd096a82278a295eefdfd9a787dcf757f51d1cd2eb12ca16b659c15196967d110073ee271dbb43c779c4c9
SSDEEP 384:sZcIhsNJuQ87zi8CREe+CzO4eyfxNJr6HlytEDq17KDK:6hpXARPrOXyfxLroy6Dqhd
TLSH
T1D4929E7169744C375EE7F150F88739178EF85063E6C42F94A2ECBF2D01DA6A8230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 da9d639b9556151ea220ceed4c5bcc3250177f70b072a42c9101086a7ab777ea
MD5 7e5479fba736eb79de5b5b7fd918c275
SHA1 fbefa075a54c7ddea504adf7bbcc560d49493aa3
SHA512 013a07f3dca551c3af6b6a0ade7101a2655f2b9d2a39f3558976363247e4248114d0d5bca7cd1158e7358bb782ff75b17ba322ca8ae9e39c9942d7fd4494ec5d
SSDEEP 192:aON86v+YLXQmiUy8nEh+CGSO49oyfrCHNJ1qWU6:aON86vz9PEh+CzO4eyf4NJrU6
TLSH
T11F124B36B9385C7B5EE2A990F48736278EA85167E9857F80D5DC3E1C02DF79C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5908733c59b32c1117a9233f60746a12dabf221cb1e862aa38a278163b655097
MD5 b67f1af54f6745bc8a0a2ecd0c29782f
SHA1 91bd1547d6072598d191a8ef5a9c3e5f6a0cabff
SHA512 fb08589699aa257a1e48e0abd42cd9092593a5330b103cea23283c2467e890e82ba6b14849b34508100ef61c0ab40afa1b81ae498a4e0b5f655ddec9672cfc05
SSDEEP 192:JONW6v+YLNQmiUyOnZh+CGSO49oQusNJftU6:JONW6vz/fZh+CzO4eGNJlU6
TLSH
T1E802F935B9381C7B9FF2AE45F58737279FA82177E9912F84D9E82E1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a40fa2734b52961e356be5cf9b17f879f5a817b647b1404fb542d0d272dbdc69
MD5 19d98955617cfe32a2408381f6c76480
SHA1 a7a218b2e181d4c713304f85e33113fabf9a0da5
SHA512 343b88a0c73135ac1dfa1f75128de2ebcebd2f72ae0cc453a330cc5cc0e9845860e987b7119e18183548b2e36a4e54cec268f5bd8b434deb6d5538bd6f0d658e
TLSH
T1C8410C59A6ED1108B3B72E56ABF6A46E887BB9772F0AD45D00110E4E0A62F40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads