hxxp://silentnet[.]st/

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 13:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://silentnet.st/
Sample260804-qq3jrsbf22

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
95	discord.com
97	discord.com
94	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1172	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303237600468425"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{6F01F202-D5A4-414F-9E23-DB90FBDA8222}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{9D184B38-5560-471C-9DDC-5AA711DDC77D}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe
888	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 888 wrote to memory of 3056	888	msedge.exe	89
PID 888 wrote to memory of 1172	888	msedge.exe	90
PID 888 wrote to memory of 3764	888	msedge.exe	91
PID 888 wrote to memory of 3764	888	msedge.exe	91
PID 888 wrote to memory of 3764	888	msedge.exe	91
PID 888 wrote to memory of 1588	888	msedge.exe	92
PID 888 wrote to memory of 1588	888	msedge.exe	92
PID 888 wrote to memory of 1188	888	msedge.exe	94
PID 888 wrote to memory of 1188	888	msedge.exe	94
PID 888 wrote to memory of 1188	888	msedge.exe	94
PID 888 wrote to memory of 2052	888	msedge.exe	95
PID 888 wrote to memory of 2052	888	msedge.exe	95
PID 888 wrote to memory of 2052	888	msedge.exe	95
PID 888 wrote to memory of 4840	888	msedge.exe	96
PID 888 wrote to memory of 2904	888	msedge.exe	97
PID 888 wrote to memory of 4840	888	msedge.exe	96
PID 888 wrote to memory of 4840	888	msedge.exe	96
PID 888 wrote to memory of 2904	888	msedge.exe	97
PID 888 wrote to memory of 2904	888	msedge.exe	97
PID 888 wrote to memory of 1320	888	msedge.exe	102
PID 888 wrote to memory of 1320	888	msedge.exe	102
PID 888 wrote to memory of 1088	888	msedge.exe	103
PID 888 wrote to memory of 1088	888	msedge.exe	103
PID 888 wrote to memory of 2388	888	msedge.exe	105
PID 888 wrote to memory of 4960	888	msedge.exe	106
PID 888 wrote to memory of 4960	888	msedge.exe	106
PID 888 wrote to memory of 4960	888	msedge.exe	106
PID 888 wrote to memory of 1188	888	msedge.exe	108
PID 888 wrote to memory of 3736	888	msedge.exe	109
PID 888 wrote to memory of 1752	888	msedge.exe	110
PID 888 wrote to memory of 4028	888	msedge.exe	112
PID 888 wrote to memory of 4028	888	msedge.exe	112
PID 888 wrote to memory of 4028	888	msedge.exe	112
PID 888 wrote to memory of 2992	888	msedge.exe	116
PID 888 wrote to memory of 2052	888	msedge.exe	115
PID 888 wrote to memory of 2052	888	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://silentnet.st/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffc32c5c188,0x7ffc32c5c194,0x7ffc32c5c1a0
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,4369715119722683874,10206960849161729986,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,12279603336380170456,6790140751590521369,262144 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,18230242250925803509,1242107633425319973,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,266558520981931996,12435539815099150245,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,11329114031209179521,8969340423378937974,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,12836748214160127746,14689212728649740534,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,4149057504425384544,16472462534137025165,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,10515723745016316545,925064397777630953,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,5180248451468878433,1490047643245409026,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,18230942881229502543,10981728413192656366,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,18230942881229502543,10981728413192656366,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4520,i,5936211118954245009,5475926489135575685,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,16329951856988286135,6922641490062813442,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,5106830000723755517,18267453165296273801,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,1479064147418725467,5089908481118391555,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6192,i,9193617345376990347,12269308579601542674,2097152 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,17823120322399347954,10226164905054861231,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,15856826462760374911,18157584685579201975,524288 --field-trial-handle=2384,i,575709614073793037,3545585803881416738,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 844ae3427d65d0118558fd78bcf16af6dcde644e70269131582fa869e189f9eb
MD5 8f6efa399c73cb488b4f64d48ab22793
SHA1 25d98b8b3dbdae40cbc51015a3693f7a3a2772bc
SHA512 07a8ade88bd99425ac062c4c997e40a89eb062cf57388e7841c7fc8a023739ba5e1eb7bbca8b1295bfd4fad9a5f6b362cc32e057631f08b066dedf276c5f6f73
TLSH
T15DD080107935A5D5E255007D54509601511C9B9726635315F210880DAD3745157C15C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d44c88fa7b7d8420a93c0ac4175c0eb92a7915351e335c03b38f9061a3ac837
MD5 86dbbbcda38776edc9af6cc6d27e8077
SHA1 7eb452043674483f16ac8b7ffba902c1ba350ab7
SHA512 ad23adf020b078f2d60161d6ba4c187f34f09be1c77ad4a89f138f6b9a73cb8d7136d84f7d07b6578e0cf95735178fc266e05550a471aa5f14f2a884bf780a01
TLSH
T10761C63825237590DFC002307FD24174F47C86D8F56FAE791D1399733A08721728A6C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 4372bacf2bbc24c719e5fb704577d1458bb79a288abe500eaf666a5b4f26b692
MD5 50ce7804a89068f811bb5530fd599b51
SHA1 fd2135a7ef19f0aea7a2aafb6f8282f4b5db6e92
SHA512 debcdd0c27d49687bd458996946144bdf6defb119c0fa2dc31ab153ee592818b2ac413a69e1bf75d2fe084fcca01ba73df2baa1cb8a3ac1402728350fe26e647
SSDEEP 96:bKUXaO8JhbsdnZzD/JxZ1PdT0+Crou0X7UDG1tjEZ7k9VH0ocJo2Q42VSGzX0HBi:Jv803jCL61f9VH0ocViNk60S
TLSH
T18F02B570655E2198CFEE81333ACAB674B4BC25C8F08B6DE60E024333353635A72AD785
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 f313dbdd2d8b15c4255a901ca2fb0bdfe0d4253887cb9f4741cb9d80b55eb3bd
MD5 2beee306a2539f0f2feff4c638732843
SHA1 313404cf228d6a2a65d3a3d62930cc33a70d9aff
SHA512 0e7654efe227a403ebc129877a63cdef8adad842be987fa1e826adc601ed14b1451e9ecfd21cdaad267c8a21877c1037b8f1aaac6a4a9ea940724ddf0f13b20b
SSDEEP 3:MsEllllkEthXllkl2zEklgLqt:/M/xT02znga
TLSH
T13C4404447FC0040DC50051314011C3740370F5300511774334510513DCD5540CC1C040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ec7962d783601015f7e0e3082488a0dcdef16295228488238475637ac3caf927
MD5 854a6644bbf670e21472323780021f90
SHA1 cf0c117996872d0bc16a80e0d0948dbf59ab4747
SHA512 f303931dc7d11806fd972ca7ce898eb92d13ad37a99f42a5014ebc39de0c1dea375c92a1c83c33ab11c6d635b70e7917bf48e78a1f07ec1ff62acc8a78359f86
TLSH
T14A3158F783E4866EDE1152F09A186E2FCE2D0912431C3C2AC9D4AE5B93E2571F141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 dc460f142a1fe41ba04f8f7fdd6566228f61a18d733d8f840bd361f69237c3ca
MD5 648d1baefc0e1794c17a83c946920110
SHA1 c184ee685027c222323f7312a3756a3088760930
SHA512 4280b2ec1fd55bba5154d793ed4318131054fd8542e851301e17563ddd0727cc7dbd33ee1a7aa8991b654868eeefa09a7eed21d0d1a53ba330aecdd4a4fd058c
SSDEEP 192:sxZalkU/fusFd/IdpJHF/+76+WNGYCI46kWFIgrJ:sxZauU/fusFdwJHFfGAf9
TLSH
T1D422B9526E38A9778CCBD21DFA15BF43D6F95032A1941E58E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ca07a6736944de316cfbb239d241a84e60b63e7b61563852971fbcf14af28818
MD5 f726011df1c4b25268a1529b9ea30d2f
SHA1 58afe0295a355e414641be63bd8a5b9e26493f46
SHA512 7d23f20b41c5b3ef5741ae78bcf4eee17f588ce18661d8195af8d68e6a2060ee69f06b1d3386a6979dbf707e9fa47217d966fc81af7f34aea8bbca2fe7039908
SSDEEP 192:sxZalkU/fuszdGIdp2ZHW6+WN5/KX/YCm46kWFIg5oJ:sxZauU/fuszdneHb5c/6fm
TLSH
T16222B7526E38A97B8CCBD21DFA15BF13E2F9503295911E58E6FC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e11dafc2deb51f98c2f4a787cee7abacb2664f8db9d1cd0dbac26999b0e85208
MD5 5528683e55c3b515befbb3fe138b741f
SHA1 e5508840dc07695f86b4bb380924963ab50568d0
SHA512 51bbeb895a8da3a7fe68bc0d85f7e2be46daf6328698ed3a65f5aeafa7b4b4fcb0ca389c71b7195d5765d3af4aebc46a387eab0ef0f4b3d693608e81d740e17c
SSDEEP 192:sxZaDkU/fuspWpV0msIdpEnZHW6+WN9b8Y/RGXYG+ok6UAFIgbKJ:sxZaoU/fuspWv0m1wHbNrgXnti
TLSH
T10842B752A938A97B8CC7D21DFA15BF13E2F9503291911E58E6FC9A1C05E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 15a51707cf46ac7e9eabe6afd4d523ce134b4d0ea0984526ae1c961a07b169ec
MD5 c13859c3611370f808d95d987c6164b8
SHA1 c6db8324e831da273deb21a26273c868ea4c6717
SHA512 0119ea95ac3d7c8351c5129a65a761142d3362c3ac2b0b7a8c4caabd20f0fc310e8139f4af44c9d7c59e0bc9c6d29095e1e21e23fd71f835f7f2fbf35f3ed484
SSDEEP 192:sxZalkU/fuszmsIdp2ZHW6+WN5/RGXYC0O6kWFIg5KJ:sxZauU/fuszm1eHb5gX8fk
TLSH
T13032C8516E38A9778CCBD21DFA15BF13E6F9503291911E58E6FC961C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 01584dcf7701d3e3a1b73cf0f1469ad918f0b7553589ab288dfe2ccc2caf7df4
MD5 eb6516aa1d0da9febe6dcffe5d1f80a8
SHA1 d3d718f988bfc0ee4e234a220b405fcda15216ce
SHA512 989ccc1135b0899dcceeca65c89c961472c75d94a1c09ed4fbbee59f33a488df75c06be4476048e89c81e319fbb3a14bce9146a430fcfce6e05dd19791a27d99
SSDEEP 768:zRqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrmroK:zRqbUj+WvSCs6u1jaaZLbWrdK
TLSH
T1ECC2E93B340CCA7E4F801E9DDD5A6F972E9802C7A7588D4447FA994C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 f514b025adeb24b02ce3a1ec219cd1205e71e17a35f64972f46f1828ad511db6
MD5 03a6b957ca66bd7729544bd5bd712c8f
SHA1 472aec03a750f6a65606ed7b0c0a7243d9e8540c
SHA512 4d990cb8f4278d6cb0bb6b59f71150ab2435ca1921ca0f104d7d1e6738f67c43659fa4a1325a22d46472e3415564bcb0e247f21604fefaa9a0568a3615505a1d
TLSH
T11BD0973BF01205A4D7BA46900667069B47353CC84088F40CA012341C64F2B8B825BFA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 7342dd0e393c2428adef85c5cdf1cfbeccb6250c40ba72c70a389a7ea5cfd068
MD5 cc3288b69d76bf6f6f226de374514f13
SHA1 60e8ab56b66f4a9f6cc8b8c443308ea016270bd2
SHA512 a5e8b09efde6236de3139f5b78e85897c2cb67f686fa3279b9dc3ea04d081995ce9e36c6e6d04e3a001a0635eba1dbc8754157f5e07f3b4477352c144f22e81e
TLSH
T148D0A73BF1560795D6BA9A90066716AB472538C850D8F44CA112041858C6B9B5297FA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58d731.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58d731.TMP
Size 138B
SHA256 0b944a851e6e9153811c247ddedbaa0dd58efe2fdfd6a7bd7bb91ffe32bed208
MD5 5f21fa8adebcfdea3747a9c5802e443e
SHA1 6504250bfe6c2ec2bf58bf1b6e21cb99566803d2
SHA512 ef82e47294d72702f7167d31a04986709beee1f947c8a7346a6ad06b5b96d7cb32f481be6abefddb9091b3d880c0aa7cf83f8432732101b81a99cfd4b48b8605
TLSH
T100C02B73F0440520CB3906A00233029E470A3CCC8CC5F84CB023381410B7F232103FE2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 abe080f5dcb446918d286c6e5b1d2d1576636007d1ff40cdfdd8dae8422599d2
MD5 96bab17c9f78d6efe0a4b202a109a79e
SHA1 91473346401016f8034ebc1d54134a29dfe6e43e
SHA512 ec027ef74c8aaa043e5831b63dbc5a9e96f80f3e40a41369142a1bedca400530dce2c828fe130f27f8a16fdeac638100350239e3b4c129ec570f26beb36a367b
SSDEEP 48:K0TQ3D5FRkhFmPIm7kKfBX5jsnTRtZkpt6PI6bkK/BH5kLz08aRz5yxoIvKx2ENB:KEIgKJB0QKp+ayoAKx2eZqKiy
TLSH
T1B2913506757E5202387E3448BBA696764F9631937428F4EF7FB850620E26E214DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8b35bb6d3852617c6e2441e853b4e867ff5fa91c9efbdf6d236ef8732daa7605
MD5 a5506f9b5d266838b75c7bb03a84e880
SHA1 fdfa3b2002d3ec87231d1714280b0f7696c24605
SHA512 21231e4f27d519db34a2662cb827c4757567148cf23a94228e06e2f6fbf67ecf608ae678147028c7607675b7dc78972a883e03a6b8481c00cc43394ab0d42440
SSDEEP 384:CsN0DD87vrnEa+NOjNPeBeRs9JKgqijUjn:CAEaIOjNPeTjKgqmUjn
TLSH
T187726C3168789D779DA3A688F45736239FF8505BD6C56FA0D6DC6F0C01CB68C230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 0eb947c74e4908d7f43c0d83ce02e0201a5cab46bf56a22faa6a6a04d6ad75fc
MD5 76c8155f9628d3a5dcffcd3d1e9167cf
SHA1 c74d855a69f0a49e3fdd493c73d7e0c0d8d85cd9
SHA512 0ca976acec2cfab581431bd42d72628691a2ed7aee063626e1ead8fa848ebcfff83671b0cae64eb4ce0f9952cb7572cd79822437422204e51e9e2d2fcc8ff295
SSDEEP 384:esN0eD87vrnEa+NOjNPeBeRs9JKgqijUjn:erEaIOjNPeTjKgqmUjn
TLSH
T195726C3168789D779DA3A688F44736239FF8505BD6C56FA0D2DC6F0C01CA68C230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 03bfed51e623da62ab280c6a52ad90d1083a96cfbc206cc61d89ea385afd4e7d
MD5 8033bfee00bdf23dfd554c4b6bf084eb
SHA1 1094d1f601febf19e6431d307dc5f9663171c6fd
SHA512 21f6ec1f720357eb94100294584ee412cd5833ad47d67642554bc4ed08d0e89ba949d5fb8e9e157ae2125d49ae0bbb7bf6d543ea0762bbbcd87f77c6cb6cc654
SSDEEP 384:1sNJeD87v2nEa+NOjNh6rStxnZO8RKJXMPkGBeRs9JKgqijUjn:1nEaIOjNYS0YKJXMPTTjKgqmUjn
TLSH
T15F923A7198A84DF74896E5C4A542F1136EB84037C6892E5CD2FCBE3C308F5F8232652A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 89d7012828f4d847d23cfe0ce6b3bf0eb944450f1ba45c5e10cfa0e221afa61c
MD5 8397371f784ec4cc6ba7052eb8fa9476
SHA1 56b792ac069439fcaccee199a60cf9c350bd0764
SHA512 11a2654898044244d2c10185937979523be0eb02ac877b5a56955368a27900da24f6ba6cb0fd180e938b59da5edadb893d809346fd17eefca263442b2c14f397
SSDEEP 192:FON96Db6QmiUySde2Ba+jROmDRklNzoqdeU6:FON96O/VBa+NOjbPeU6
TLSH
T19B121C3679789C775DE26554F48736139EE8512BDA8A7B90D5CC2F0C01EF65C230B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 241906e517d13db2b497394f801e94519b3bd798cb0db1c0cd529a7f3cadaf9b
MD5 60a4afdae7be5814ba7f3df59eafc821
SHA1 b46374a1f704ca1413502117b45e09ce1a892e96
SHA512 2f47038cab9f3ba579ebb1b1437a3c4927fae01d199a9a5d8cf60476b967d9434f7b2ad23328e6babd3f6329af947fe1a0c13cdf75eec0c675189aada4320cd0
SSDEEP 96:EqONkjQsjpf1bxX5ih/cIPURHl8h4otop58nDDBfPgvE5BzatIRdy+88OmlmsR18:vON76Db6QmiUy4dHBa+jROmDRuRgbSU6
TLSH
T1BE02E835687C6CBB9EA26E48F88737275FD4103BDA966B54D6D81F0C00D764C230783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 343fbffefe6808cb093db3382e88f6a43a963e9d6804c4c11237b8c351043a87
MD5 e0dcd42f8f7043206e7f849916e482e9
SHA1 d1f3bbb82f465d1bd5d997ac7ed43723c1dbf750
SHA512 7c4cb174c2a236af7f2baa9705eee1c878771a89a49e8783096cfe97acec5af72efe6fb8b074f9cc0aa773dd08795abc850de00e11c42a1df3771ac73abe2243
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe58fd28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58fd28.TMP
Size 392B
SHA256 fed099040f5dabfe743c74be28383584640ba189c5b1c6f2783d8551c68255de
MD5 d87d8122f2301a659d49cf102dc28b24
SHA1 f534b7e858c5b5efd3061c42e6953699873ef84e
SHA512 e9ffbf6e2964b7bce155518b42acf9ef058129acee9116aab0da4145dba866bbdfac91316539fcf93eada4a9691986cfce7c29de1a3a2245abaaa93fc9ca9801
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 856490675c593181cb81053e4e4dbca3722c2f7742b349875d96effb4a6aaa53
MD5 cd0ee652bab787eefe0b4612918a98f9
SHA1 f37431e1277f3adbd7676f0f60eedcade65adcc3
SHA512 357de1abe8900094bd2b0ab82a65006bc1e894ea8413754c4e7d8bd68d7d316d8d1e89355b132f6b305feb5281cf16bb9ae19748cdc9dad3d1ae7cce207aca6f
TLSH
T132412868AAF91148B3B77E16ABF2B86E447F79772F07D49D00110E4E4662B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads