hxxps://smallbusiness[.]chron[.]com/display-email-html-outlook-2007-45215[.]html

Analysis

user interaction
yes
max time kernel
18s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 21:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://smallbusiness.chron.com/display-email-html-outlook-2007-45215.html
Sample260804-1etslahc22

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303528729672986"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{521A6D47-3829-4919-AA3C-3DD6AA9BE17E}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 3928 wrote to memory of 4080	3928	msedge.exe	86
PID 3928 wrote to memory of 4360	3928	msedge.exe	87
PID 3928 wrote to memory of 872	3928	msedge.exe	88
PID 3928 wrote to memory of 872	3928	msedge.exe	88
PID 3928 wrote to memory of 872	3928	msedge.exe	88
PID 3928 wrote to memory of 4320	3928	msedge.exe	89
PID 3928 wrote to memory of 4320	3928	msedge.exe	89
PID 3928 wrote to memory of 2564	3928	msedge.exe	90
PID 3928 wrote to memory of 1032	3928	msedge.exe	91
PID 3928 wrote to memory of 2564	3928	msedge.exe	90
PID 3928 wrote to memory of 2564	3928	msedge.exe	90
PID 3928 wrote to memory of 1032	3928	msedge.exe	91
PID 3928 wrote to memory of 1032	3928	msedge.exe	91
PID 3928 wrote to memory of 596	3928	msedge.exe	93
PID 3928 wrote to memory of 2344	3928	msedge.exe	94
PID 3928 wrote to memory of 596	3928	msedge.exe	93
PID 3928 wrote to memory of 596	3928	msedge.exe	93
PID 3928 wrote to memory of 2344	3928	msedge.exe	94
PID 3928 wrote to memory of 2344	3928	msedge.exe	94
PID 3928 wrote to memory of 4016	3928	msedge.exe	97
PID 3928 wrote to memory of 2948	3928	msedge.exe	98
PID 3928 wrote to memory of 4016	3928	msedge.exe	97
PID 3928 wrote to memory of 2948	3928	msedge.exe	98
PID 3928 wrote to memory of 2516	3928	msedge.exe	100
PID 3928 wrote to memory of 2764	3928	msedge.exe	101
PID 3928 wrote to memory of 2764	3928	msedge.exe	101
PID 3928 wrote to memory of 2764	3928	msedge.exe	101
PID 3928 wrote to memory of 1604	3928	msedge.exe	103
PID 3928 wrote to memory of 1604	3928	msedge.exe	103
PID 3928 wrote to memory of 3856	3928	msedge.exe	104
PID 3928 wrote to memory of 3856	3928	msedge.exe	104
PID 3928 wrote to memory of 3856	3928	msedge.exe	104
PID 3928 wrote to memory of 2676	3928	msedge.exe	105
PID 3928 wrote to memory of 2676	3928	msedge.exe	105
PID 3928 wrote to memory of 2676	3928	msedge.exe	105
PID 3928 wrote to memory of 2644	3928	msedge.exe	106
PID 3928 wrote to memory of 2644	3928	msedge.exe	106
PID 3928 wrote to memory of 2644	3928	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://smallbusiness.chron.com/display-email-html-outlook-2007-45215.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffd954ec188,0x7ffd954ec194,0x7ffd954ec1a0
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,6374307493273722418,16999923036533887272,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,8381205757715035155,6760830902040663735,262144 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,15122217401173109418,4892603589985731359,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,17922622749245807669,17164878216241276757,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,5356526525361494964,17851987115974792490,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,8449619703190620243,14264879012607089548,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14223797213320147874,6712822012043409245,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7903572436847304088,13801231781921037826,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,8888493911349695408,16459497848883236507,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,4718439401661165648,14349215751137287801,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,4718439401661165648,14349215751137287801,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6156,i,13923516338887139094,11953274246130541809,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,3267761592378185606,586943049652246017,524288 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5848,i,15438990821171063947,17482690665017404117,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4872,i,4068574481541389282,3927863020521661712,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6724,i,10474224935560452658,9991571172939423386,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4688,i,7526873947014903601,9628576378599832069,2097152 --field-trial-handle=2288,i,5018376829347395445,8113236748431805666,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:4128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 863KB
SHA256 521a18375861ef10fe2b074b34b8d9f1f6e281c4285cd7ce300633c02ee01c15
MD5 e8174b917af88d57dba287dd3c7f2c7a
SHA1 0340f630e957112ca8dcc9b3c6679b6e909ebbe7
SHA512 2dee567add8c7b64cc6facd6d6662480099c82caafcd8f7a9a20acf9ce3c5c9c1a4c08c42a5b61edadd1316a79e50f1400183806a5b691d61b7d327c69b547ce
SSDEEP 12288:lNqzF8BrzAoX70OMAvJHoVRko+FMMAp9hoVbdkXArrj8hiSCWbx8rFbtLEvYREe:z6F8BYoX4OdoUNF8pjVMkhpCWOpkYREe
TLSH
T11C151241A7E1A355CC30A370D6DA13837738E9307F0A57EF879422B9EDAB3A5AC03595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cc86cb8d6e4e8e03dab5dc38fba43fa904951b413763fc71d8f5b29eebbac0ab
MD5 b0efdc457c3272d0bd7ef78b1ca3493f
SHA1 d7bb5ab6cb2c105843b4aa8893d39ec20d1ff4dd
SHA512 a7675dbd2045103dd42ff8bfa347cb359d9da70928eed249431d0827ae2df14ad6b0bb7ad21e4b8bf8c9c3bc3a4de90e5f997d87da3574db4bfe8a34f9187c46
SSDEEP 192:sxZERoka/fosVjOIdpyoHW6+WN+jh/YC2s/MtfIgrJ:sxZEZa/fosVjf7Hbw/S9J9
TLSH
T19F22D8126E78A97B8CCBD21DBA55BF53D2FA103291D11E58E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fecad5943ce1b0fa3d8188347627f8cba52cf387e69986a1097c903a208f7d22
MD5 079cfc0350b0d8dda23d408ea9aefebb
SHA1 14088ac3d8fc978e3c4c76ee759628a9c980fbdf
SHA512 7abd357c19407995f5f7a4b2474f97a3af5d7b28a5d2d0b973f1b03be27ee0a6b77f8ca0413f01d98b0d81c2b35b665be9d42d7edde7b44c581930bba8b9d4d2
SSDEEP 768:ssqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrnro/:ssqbUj+WvSCs6u1jaaZLbWr0/
TLSH
T180C2E83B340CCA7E4FC01E9DDD5A6F972E9802C7A7988D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ed134264b11584b76d88cdddbe402120a7bdb5c6f3249611205261665ed74b8e
MD5 7273490b3d8e1d71fa7380f4b3d24130
SHA1 51a9ca103fb5fc4c42e6838a67d7d585651e8de2
SHA512 c989e27492fac5d0cc5eb09e961a59321db2d563e7046b63365bb8eea792bddc9428ca2a52ba2a9bb25dbd0c5d67ac167a33d3f3c205337ce164c16c05bc4ed5
SSDEEP 48:KcaIvK3qwbyVFIdK2gAm/I1KY8wbyd/IVKEsgi:KcaEK3qu2FGK2gB/6KY8uG/2KEsV
TLSH
T1D5B1730531BA86302C7E684DA3E196364E8376637404A57F7FB851A60E7AE110DFECED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 34620ee3dae805631d572871558138abfbec63819647412f85b8eaecad50fe39
MD5 dbdefa3722f07f064f409f2487daddfc
SHA1 cd873ec3f31ad95ede88b1081b2204bfa271b5c1
SHA512 fa311db11b9f51f5177eb37e8bd1c47f09351bc395a2b42c215101db261a21ae6215ecfe369eb9d8dd814ebe85d4498da50faf2e7a503e9eb3944d304221f40c
SSDEEP 384:4ZcIhsNJNIgK4zRuEa+Rdrg+2zWiSBeRs9JKgqijUd+:GhI3asdglzWiSTjKgqmUd+
TLSH
T1CB927C3158786CB699E6B481F48636175FF89037DAC52BA4D5EDEF0C00DAA9C130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3bd6d32896c28f1028fef9e47cffa1bc20436b5f16c558586ae17d697c263f64
MD5 da14b727a5062a6855147bdc97f39633
SHA1 124267afd15e2554be38f7026f6dec127ef5edf9
SHA512 ca27e4a9b38845897cb41b4e7728954a24716dc6d3f4abb7d59787f54eb4ef27cf66b04b9021c01ff99cae3faa2a22c3e1b5090bf86c13506fb8ca0d0e24cb47
SSDEEP 192:EON86DbfQmiUy/98Ba+j36+FdCkQ60+2zA9Nzi6KqdU6:EON86Zm8Ba+Rdrg+2ziiSU6
TLSH
T14312093668786C7B5DD26940F48736135FE45137DA8A6BA1D6DC5F0C00EB66C234BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 583685815425e28ad241d600ac453c3f6b9749804b9cf1a103823cd6d5192454
MD5 8b7788ebcf0da72278d3bff82be2ffe6
SHA1 1e87488717bddbb4c2c9c639a0484b3ffc6b752e
SHA512 c189264af09acf26a2c513f25c79f53f773f60442056d2f20083682a09737b5dc2595035fff97797706b8bda0ae30245a0f3353f42195bcd609a35dd443565dd
SSDEEP 192:vON46Db6QmiUyV9HBa+j36+FdCuRgi6vvU6:vON46ueHBa+Rdmi0U6
TLSH
T16002E83968782CB79AE26E49F48737275FE4203B99962B94DAE85F0C00D764C2307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7d5abbcb77688b729a356a4ab47de56f274cea80fa55868cbea6f0695c4a8fae
MD5 37319571099376f2c55d7ea8118712da
SHA1 920040af08cb5a7c5db16aeeb28d8dfb07c5f085
SHA512 a85f2afe32dcf0b7d4f4340e61fc4255b4cd3895ac2bb8a362380daa90c1abeb3fdcd60ddfddda2eb124769873ab82a4ab661bdeaccccc21a251daa4fba74e6f
TLSH
T1A8415D5DBAE91158B3B76E569FF6A46E487B79372F0AD05D00010D4F0663B40D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads