hxxps://craftnx[.]com

Analysis

max time kernel
118s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 11:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://craftnx.com
Sample260804-m9f84aycph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3564	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303153878855254"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{E5AD7329-C338-4A80-9C13-5735461F60C5}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 5084 wrote to memory of 4548	5084	msedge.exe	86
PID 5084 wrote to memory of 3564	5084	msedge.exe	87
PID 5084 wrote to memory of 4508	5084	msedge.exe	88
PID 5084 wrote to memory of 4508	5084	msedge.exe	88
PID 5084 wrote to memory of 4508	5084	msedge.exe	88
PID 5084 wrote to memory of 1700	5084	msedge.exe	89
PID 5084 wrote to memory of 1700	5084	msedge.exe	89
PID 5084 wrote to memory of 404	5084	msedge.exe	90
PID 5084 wrote to memory of 404	5084	msedge.exe	90
PID 5084 wrote to memory of 3360	5084	msedge.exe	91
PID 5084 wrote to memory of 404	5084	msedge.exe	90
PID 5084 wrote to memory of 3360	5084	msedge.exe	91
PID 5084 wrote to memory of 3360	5084	msedge.exe	91
PID 5084 wrote to memory of 4804	5084	msedge.exe	93
PID 5084 wrote to memory of 4804	5084	msedge.exe	93
PID 5084 wrote to memory of 4804	5084	msedge.exe	93
PID 5084 wrote to memory of 1672	5084	msedge.exe	94
PID 5084 wrote to memory of 1672	5084	msedge.exe	94
PID 5084 wrote to memory of 1672	5084	msedge.exe	94
PID 5084 wrote to memory of 4724	5084	msedge.exe	97
PID 5084 wrote to memory of 2192	5084	msedge.exe	98
PID 5084 wrote to memory of 4724	5084	msedge.exe	97
PID 5084 wrote to memory of 2192	5084	msedge.exe	98
PID 5084 wrote to memory of 3188	5084	msedge.exe	100
PID 5084 wrote to memory of 1508	5084	msedge.exe	103
PID 5084 wrote to memory of 1500	5084	msedge.exe	104
PID 5084 wrote to memory of 3180	5084	msedge.exe	105
PID 5084 wrote to memory of 3552	5084	msedge.exe	106
PID 5084 wrote to memory of 3552	5084	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://craftnx.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8026cc188,0x7ff8026cc194,0x7ff8026cc1a0
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,2331284907747488530,8120781703033750483,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,2622151881694359960,5736715776895313945,262144 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,10720730227521580257,8825878646925864062,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,9796939836545422138,17312700946553204022,2097152 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,8709240349369997856,10707376754353641161,2097152 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,8845359849028235585,15987152329264030343,2097152 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,7867495171211443857,9540795573339885302,2097152 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,4153370525045741520,7400774393473286150,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,5792983850447769546,12108396765019607484,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,7823409009490144705,11467270086038319174,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,7823409009490144705,11467270086038319174,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,4346836854540383068,5058673310671375480,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,11042873500814085546,9465079670069791473,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,2484870708165359539,5470813084364260034,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2992,i,16542014254301828692,12041986832283546949,524288 --field-trial-handle=2116,i,928416513557826378,15994423535524457288,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:3552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 19770e7fe2094711e80964a836e60964de6a8ad16ccaac3d8dfad98369019638
MD5 44dad74e010b183434bee387e897e5a5
SHA1 1e8cd1a25c1805f95db825d1abc631a4dc4b3528
SHA512 4bbc70e7b7329e93d20b196e728888ea0151b121d95738e26f908478d84bd38ac8410bda7f62d907ab7d1206a6ca2df9c6c71f59ce1ad6ea772dbae5c26236d5
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1CEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3e5d9a66a4ac9b482be1d2c50c374c623907abbafabbc6f4ca7ee46ffb1581fd
MD5 5dc9c6924dadfce648e3f11dd3372148
SHA1 855e13f76e93c2b978eb67b838e996b7fbdb1317
SHA512 88ca4ea2b2d171091e5beabad01a8a4a3a16556203f5a0288348eb15a40c8fb0769f2d042c525120129127d2c61b1cba25aa5cc695e1757bf91add08d67240ca
TLSH
T137617FFA061220A3E72C8230E4E386153677C2551EA72E46CCBC867D79C7F50FF69149
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13c44a5e-fe33-43eb-b75b-316471636696.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\13c44a5e-fe33-43eb-b75b-316471636696.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ae9c1b785413040fcfe1517bb7ff9669e3c449bb459f84d1220819757fccfb66
MD5 9a7376a4d196bcdd67613d9c6463ce9e
SHA1 ba9e2263f729b5bd65cd96a814fdc8679728e6e2
SHA512 b54b6de41e03480aef1922c48822c4426425aa637400f8daf3aae79b497f2fd56ec2cc8071219a2f3b95f45acd3c2ecc50ca82a58ba035e8b97437ed517beb38
TLSH
T1892179B3C7E4966DCA1152F4AA246F1BCE2D091447183C2AC9D5FF1BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b0b6a9966ba32cf994e271d7d56e54c03ec68bed3295e10cdb71296cd93a8f23
MD5 dbf57f00fbcd9bbd8120ce433ff2f138
SHA1 f478c8bab656a125179904199cb5ee18a7cc3048
SHA512 01d47ec74d4b7676fbc014cbe168d634f8f7511a0fa72bf8c295adcd68379e171dfa8a3a047cbd37a36e48f335df014b1f353551d50a5994dd8da306c079f653
SSDEEP 192:sxZK/yM/jK1Ml8Mkt/fssa82IdpozHW6+WN3pW/YHwRSY/IgrJ:sxZK7Mt/fssa836HbE/N/9
TLSH
T12F5208166A3869B7CCCFD309F945BB53D6F54472E2900E94A9FCDA1C04E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3db76dc10b08441c46c227ec171bf156030b781144b5a98744ad9186ed0bca99
MD5 290c5da1f14b3a4a7a57190222b937a5
SHA1 dc6b1a3d62cc2c18f35449948d747906a4b012f1
SHA512 e463eccd5cb283025508af56fa779bcc1f641d558a546f207e09eee01accb8f67db371a7f08e0003923480ffa76c91e0a4d6259478d6f31f4f3e840e3b5c97d5
SSDEEP 768:wbUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RTroVvj0Jj:wbUZYTMWvg0Pou1ja7eLZmRgV4h
TLSH
T1A7D20A2F280CCB7E4F844E5DEC2A6F863DD801CB9A584D5447EA884C02CB2EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 64bca0842085ff755638b90a7a743625c7398e84fecdfd1bbcf3cf68b397029e
MD5 416ce0c78ae469daf5e81c0d0b786c49
SHA1 5f857f7098ca2df459efbf9709bd4875997c3f58
SHA512 e99306f4b911780f9935b2b3a03f5ff5a99e7eacc9267448b5b79555859e41e2c4332887af19c0fa2f9159312eec0051f74c75f594bbd6db5bd3d49d9f251986
SSDEEP 96:KA1eK2A84YKR+Ou7KKsk/LqK4gyufOKYAzz:EWX5JB9+
TLSH
T1B8E14C5671BA02423C7E2A588394975A8EC271933028B42B7FAD01B15E67E31DEFCDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1ea3c99-c7e8-4626-869e-d22dcecb1279.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e1ea3c99-c7e8-4626-869e-d22dcecb1279.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0ab158f34d675b05e94b37527abf91589b79484933d04c6bc75c126428da6d67
MD5 b8415633befed7ac6b1970d30cfd5197
SHA1 88df47d1c1d34db2a79156de4742299f57f969b0
SHA512 61e7be6b4f436a2470856e7de8ca978a324438f2edf3af35d2e2cd97d5349ba3895107523112a1c13fd597f4fb3c83cb1be36dc6ffca8681d9b41c2c055e9df8
SSDEEP 384:vFZcIhsNIRlnE1krMzX5od+l8yBX0d+2O9BeRs9JKgqijUQi:lh3RoO+clO9TjKgqmUQi
TLSH
T1AB929D319828AC7699E7B285F88736134FF89027D7C46FD0D2EC6F1D019A9A8131BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 aa33a2c9ba7f1d5045436c05b3c16493138dcb217a85bfe69cc34569fdb654dd
MD5 60b0d8b1ecdd2bf5b893a47fde490bf0
SHA1 1ddd6e69550d83fa9f537ef63e5ff1ec1b41e344
SHA512 915f5e69dd34862436a181c502f1a224fc814086b8bdfd02310b63d4e4803338ebc6b01f9de4813a26f8e4657c2ba15c57e1226dd60085624106d0790885e9bc
SSDEEP 384:dFZcIhsNI0lnE1krMzX5od+l8yBX0d+2O9BeRs9JKgqijUQi:/hCRoO+clO9TjKgqmUQi
TLSH
T16C928C319828AC7699E7B685F88736134FF89027D7C46FE0D2ED6F1D019A998131BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8f3cfd94330938422a1a4f3f93e4f62073056bc24fcb63b619c000202fd4b65d
MD5 6cc168a26a7ec9f56a8c957ea979a3ab
SHA1 61584f082a8490e7d45aaebbdb4b7d6538d89f4d
SHA512 a9ee62ae13b82ddc86d87259a428079b2e744588daee8303be20b4834d7b87245ebf901bb4c10a821c33b71b4c5dc37c35df0bc83fdba77c49b1a0a7e224b0aa
SSDEEP 384:ljiFiZcIYzsN48TUNTUlIl0lnE12rMzX5od+l8yBX0d+2e9BeRs9JKgqijUQi:cFQkFwgEfoO+cle9TjKgqmUQi
TLSH
T1A2D23AF244D79876D9AEA747A77E3D024EBDD053F680AA90B3D85A1DCC460BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8df1caf91d3b2eea51dc7976662c6dd2c54d405943b950e5bf21bbbb76ab6ffd
MD5 b0e65768b4411bf2c902e9f892387f46
SHA1 e045adf629065ed17bf69b54728f49a98bd78b53
SHA512 144ceb2c82f5b6be1463f62983e2e53576ea244288bb1dcd83f6aa5d834daba2d87fc596b5ae5e047b460229802392ccd5eb44b2e37f1637ce482686fa063f59
SSDEEP 192:yON261VWQmiUyFogGX5Obd+j9jzoryMmM/aW3Q0U6:yON26WHgGX5od+l8yZ50U6
TLSH
T17702C835A8687C6B8EE3BE49B48737135FA8216BEA542B84D6E81B1C00D765C2347C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6cf6731f1227f92e51673f045c0f449839cc159506608d87e3a3f73cbdcbcd5d
MD5 7706af8f98ce8773bcbfeda6c434f1ee
SHA1 58154d069f3b32581ebe1c94de8a5dfc2a4c17bc
SHA512 70138e3aa2fb9d9f182b515c6e8041a5fcd743d48516aca83608e249105571295b6b0b273d9dc18d08702d0948650e1b1ca373a8eea92813d1589261c1e1d31c
SSDEEP 192:rkONh61w8WQmiUyQorcGX5Obd+j9jzoryMmLXQFd+2HjJAq/U6:rkONh6Gb2rcGX5od+l8yBX0d+2l9U6
TLSH
T151121A36A468AC678DE3B545F48732139FA95167DB886FD0D2EC2B2C01DB69C231BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25c9984d-5737-44ed-ab8b-b98d27e61d95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\25c9984d-5737-44ed-ab8b-b98d27e61d95.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e1ddea9b3b68f7b55f63090253ad946e01fb95e04cb34a8bf4ca0ee359ec1726
MD5 b688c2f7129d9d3355790411f9f083aa
SHA1 74f9382fb28134236da5e949148b07962e2c0e33
SHA512 3144433a0e9f2241b8fce81f28ff77bfa314577ba21d504d83d60af3cff64d296d554fd6ec4a6a46f2f5f1a4d8bcefbaa2527fa9f8edac082337da3a0777495c
TLSH
T10F41F858A6E91148B3B77F569FF6A85E487EBD771E07C59E00010D4F0966B40CDA1733
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads