hxxps://dntds[.]shop/jsrepo?rnd=0[.]8360651660017383&ts=1785761690542

Analysis

user interaction
yes
max time kernel
50s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 16:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dntds.shop/jsrepo?rnd=0.8360651660017383&ts=1785761690542
Sample260803-vc9hdawset

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302495205756304"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{971E614F-2CE5-416D-884D-170B8715F042}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 3204 wrote to memory of 2700	3204	msedge.exe	88
PID 3204 wrote to memory of 3480	3204	msedge.exe	89
PID 3204 wrote to memory of 3752	3204	msedge.exe	90
PID 3204 wrote to memory of 3480	3204	msedge.exe	89
PID 3204 wrote to memory of 3480	3204	msedge.exe	89
PID 3204 wrote to memory of 1960	3204	msedge.exe	91
PID 3204 wrote to memory of 1960	3204	msedge.exe	91
PID 3204 wrote to memory of 3816	3204	msedge.exe	92
PID 3204 wrote to memory of 3304	3204	msedge.exe	93
PID 3204 wrote to memory of 3816	3204	msedge.exe	92
PID 3204 wrote to memory of 3816	3204	msedge.exe	92
PID 3204 wrote to memory of 3304	3204	msedge.exe	93
PID 3204 wrote to memory of 3304	3204	msedge.exe	93
PID 3204 wrote to memory of 652	3204	msedge.exe	94
PID 3204 wrote to memory of 368	3204	msedge.exe	95
PID 3204 wrote to memory of 652	3204	msedge.exe	94
PID 3204 wrote to memory of 652	3204	msedge.exe	94
PID 3204 wrote to memory of 368	3204	msedge.exe	95
PID 3204 wrote to memory of 368	3204	msedge.exe	95
PID 3204 wrote to memory of 4908	3204	msedge.exe	99
PID 3204 wrote to memory of 4908	3204	msedge.exe	99
PID 3204 wrote to memory of 3104	3204	msedge.exe	100
PID 3204 wrote to memory of 3104	3204	msedge.exe	100
PID 3204 wrote to memory of 1064	3204	msedge.exe	102
PID 3204 wrote to memory of 1096	3204	msedge.exe	105
PID 3204 wrote to memory of 1116	3204	msedge.exe	106
PID 3204 wrote to memory of 2628	3204	msedge.exe	107
PID 3204 wrote to memory of 4756	3204	msedge.exe	108
PID 3204 wrote to memory of 4756	3204	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dntds.shop/jsrepo?rnd=0.8360651660017383&ts=1785761690542
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x234,0x238,0x23c,0x248,0x7fffd1b6c188,0x7fffd1b6c194,0x7fffd1b6c1a0
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,17013751406269956246,9108503623012912591,262144 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,4211421777683655753,14501014588877206111,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,8959967575392382854,13175460911746813671,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,15194180903054274243,6556763663483107300,2097152 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,2083697012711976337,7501110578837030289,2097152 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,10802714292536388848,11529286548384282444,2097152 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,1046587830089975175,13969260791384422441,2097152 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,7217811930505473116,15801613956530790094,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,10154622516282806121,5419718519451002533,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14068354939225633652,526831696363954673,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14068354939225633652,526831696363954673,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,16125428547120042856,9253255912741619358,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,10661480774572122660,1242523122896442982,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,247858664044064904,17862031684215807979,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4044,i,15496311301652921932,9536802494738498412,524288 --field-trial-handle=2324,i,16843902769675606854,14553246031677991053,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:4756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 690678662f6a8a075c47c05371303166c163774295446637d01ac4eca67dfe6a
MD5 575dbeb5214f32c1f0b6e499a2d48e76
SHA1 e153d9f33a0bddab46a1853b2499eb2c3c3cc34f
SHA512 246fc68c93f1fa1a0c1e63eeb9681495fe8095b4babf4734834278948eb873855b8bd8c5eea59ea9969ef9f333990b8bbd636825a7f74a89839fc022d526db94
TLSH
T1845150180692649EE730D231C4E01B13BE36C1F9897B8E380290E9BFD7277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a6ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a6ab.TMP
Size 2KB
SHA256 7ee45214f750b88829626c16233aeed2ca4300169aee8bb17a5ef31cf2148b15
MD5 816e252955624594e9fb1e36bdfb0568
SHA1 eef1a7bc75bf613121ff3daa3027d7f5179b856c
SHA512 c961641345b7531e9cf035a41512cd63d10f9911fd3b5606620c8391bee3f905d96d663acbeb0e71f276863c395539b7aa1f68c2b4eb103ef00bbe80136afa7e
TLSH
T11B514D180652649EE730D231C4E01B03BE36C1F989BB8E390290E9BF97277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9b14250aa318254506dcaa3cdca783f988cd21c663b31f5f025f365ab523d46e
MD5 aeeef34891213a82713b2c4e8ecbe951
SHA1 3ff9fe151e55bfd24488f99fb4c679da02507123
SHA512 9d6d7e96a29472afc730d58af94bfc6c5ea5b64735e835a0f4cb6c12dafa2eadf4c27775264053749f5df7b09b1c8eca082c16857352261cba12450bfd8bb957
SSDEEP 192:sxZgLRLyM/jK1Ml8MkFJ/flosqWZcIdpg/HW6+WNfIn/YwoLhv1uIgrJ:sxZgL9MFJ/flosqWZFmHbo/qG9
TLSH
T15552F801AA746977CCDBD309BA55BF53D6F9047392950E44A9FCDA0C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a9c2243dce0285e01ed31df358fa47115a4a298794fb289aa82c717c0b70131f
MD5 5a01cbab803ce30722086240b2640e87
SHA1 9872cec2298eef1cb50a7b14fa07cba17e5b2481
SHA512 04d40db455ac9f9c31d92a473d97f868207fb186ab0361e1d985b653d20dc890de99c9a64956e8cc416ac9185d7b8ee7f2d1bccf32733da95df00995116d14b1
SSDEEP 768:3A4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dorohFc9aJ:3A4jeXmWvmKLEu1jacPLZQdTkc
TLSH
T1F9D20A3B284CCF7E4F844E5CEC26AE976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 5f03e17f7adbf4e7b935ccaf2ed701062bf63cd8e55a71ae7b48ff3eddbd3228
MD5 d146914a00b7a30aaf559f1b74d9bb7e
SHA1 36213b66c272c68945d8dbb47af7901ee17f434f
SHA512 3745dd905f60e9cb283ab3af57ee82c09415f5a879162788d5795c89ca8bfc36b39838af74325f408108ea57f2e1b590b8a49ff503763d628152b7dea3036f0d
SSDEEP 96:KYBdTRxx89ssmlxKe4mzxibDUlxSWpKKCw1k4KR2qSqIKrCJ:Wvdxjf2
TLSH
T166C1F25A30BF02163D7D2519A2A4D72B4F4176A37019E42BBBA940B20DA7E354CFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 14e0434e96b20e25da566e3e7b1cdd895c133dc4a22e05cc61a952aa4df38a58
MD5 5ab582918fa97e4190e806bd07818825
SHA1 9925cfac74d76de706a5e402188c7e002d1e9130
SHA512 509ce4c3a30120221cc401da1d66c8891e5414c4b1692afd9aed84724188f602dfc82c04f770c21c7c90a0591bbe4ee73d07685fa8c233f3b7e81ff866eba7e8
SSDEEP 192:EONg6hZ0QmiUyg+pc/+jVqO1Qz5wOZ2T9U6:EONg6oOpu+MOeK22BU6
TLSH
T1B102D83568786C778EF2AE45F48737235FE5117BE9966F84E6E81B1D00C769C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b153fa1eeac65cd31281ce708fd060a4cb87cf3fd1dbc3a6777959920d760622
MD5 7ec42b07141a07d02b5812c5eaef46be
SHA1 4bd6e53ea71e64fd3187cd75b70dae243976402b
SHA512 9153fc85706d592e55bd92b6e9179b1c28bbad8529c62310d7013767b28fc7b9b5dbabc899d6d1c707704223d550cecde3209a88f714b69772f3464bac39de06
SSDEEP 192:DONd6hZeQmiUyA+Lc/+jVqO1QtB+2b15cOqIqGU6:DONd6GYLu+MOetB+2E9IU6
TLSH
T11E12FA356568AC775EE3A651F48732138EE5512BEACABFD0E5DC2F1C04CB66C230AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 736261a5828dfa783b180d23152295ee1eff40bf6b6184ad2b7e5ce5e6c5105f
MD5 4d7194a99973917251e931da0e40a6f0
SHA1 573829adbaa99957f4107b12acd641bce9abe255
SHA512 eddbcfc9742aa90cc49b789fa37072a65870d466f19847e0a832b299caa24c0aaafca36284a2b3e408c264d4b8de3aeceabf603c0dd1d4b105f7b804bbd183de
SSDEEP 384:AZcIhsNMgDOjFpf+MOetB+2HFI6HlytEDq13WD:+hNRhOqBllIoy6DqxWD
TLSH
T141928D3199B468375EE7A255F48B39138FF85027AAD9AFD4E1DDBB1C008A6A8130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5817639ee83339238341dc66a4af88e6dcfde609315d871998459569aaa49a14
MD5 a4e9a879e44516f62af301e7bd99381c
SHA1 06d70e2b65cc3cce11e2f1a849f95166f680b0fc
SHA512 18f9bfeb2da6d6a203e313dedae26d0528a3045976965346f9a80df3b3fc7bdef73ae99fb92e4d7bae54f076728110610d99487e3edea50223d6d28f26bae69a
SSDEEP 384:HZcIhsNM7DOjFpf+MOetB+2HFI6HlytEDq13WD:vhSRhOqBllIoy6DqxWD
TLSH
T19A928D3199B46C374EE7A245F48B39138FF85027AAD9AFD4E1DDBB1C008A6A8130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fdcb8359-b1b8-456f-93f9-8eaf5a138715.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fdcb8359-b1b8-456f-93f9-8eaf5a138715.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 82efe9bce648cdd9fe3ec3f26d5bf515907156381c8b892a932d53671e3c9aa8
MD5 6dd7673acb6b125473100c23ae6e501b
SHA1 eb6f714b44153b66a22fe28e6dfef767a8d09996
SHA512 e5b0ff91384339ddcd00fb4c616a2853d1e88f0eb5e2bd6ceb6a33323411107a1e04828f64fc6b8df55efa682b4ea1d697098bad4234d59844c4db8754e1db07
TLSH
T1B4413B5CA6E91048B3B7BF566FF7A86E487BB9772E0AD55E10110E4F0622F40C862737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads