818154fea21d1dabc0585be6c4d797ca3030aa7664a12364564e72031bfb8247

Analysis

max time kernel
34s
max time network
36s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 10:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 5KB
Sample260808-mfxc8aywat
SHA256 818154fea21d1dabc0585be6c4d797ca3030aa7664a12364564e72031bfb8247
MD5 d6972c6fc7f7e08d34fa2c497cc48ff9
SHA1 567ceccdf74b099a5085eb52fb1851c9197be96d
SHA512 f8d3af69b8610293e1f92b21bd7fc9756f94ccaa4bfa3677061586a076fd12fa1dc2e12daf3ede3a5c0e3adf47c70bc22a37686b1c60f6f1929e64153b1e9a41
SSDEEP 96:PNyNtoXZzIEb0EaW87vsYJi58tE8t1hXVu4T0kNFDOztVYzueh848timw:PN8tkCBFJicxbVc4JOztyyTFw
TLSH
T1C5B14BB3E930602B57BA2F9674FB3359E125B70A76046448F9928B1D82FDF3F4140485
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306583109107976"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4C71D46A-BB87-49CA-AE3C-646518FF2DD7}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 4264	2444	msedge.exe	85
PID 2444 wrote to memory of 3728	2444	msedge.exe	86
PID 2444 wrote to memory of 2572	2444	msedge.exe	87
PID 2444 wrote to memory of 2572	2444	msedge.exe	87
PID 2444 wrote to memory of 2572	2444	msedge.exe	87
PID 2444 wrote to memory of 2188	2444	msedge.exe	88
PID 2444 wrote to memory of 2188	2444	msedge.exe	88
PID 2444 wrote to memory of 1804	2444	msedge.exe	90
PID 2444 wrote to memory of 1804	2444	msedge.exe	90
PID 2444 wrote to memory of 4624	2444	msedge.exe	91
PID 2444 wrote to memory of 1804	2444	msedge.exe	90
PID 2444 wrote to memory of 4624	2444	msedge.exe	91
PID 2444 wrote to memory of 4624	2444	msedge.exe	91
PID 2444 wrote to memory of 4456	2444	msedge.exe	92
PID 2444 wrote to memory of 1204	2444	msedge.exe	93
PID 2444 wrote to memory of 4456	2444	msedge.exe	92
PID 2444 wrote to memory of 4456	2444	msedge.exe	92
PID 2444 wrote to memory of 1204	2444	msedge.exe	93
PID 2444 wrote to memory of 1204	2444	msedge.exe	93
PID 2444 wrote to memory of 3692	2444	msedge.exe	100
PID 2444 wrote to memory of 3032	2444	msedge.exe	101
PID 2444 wrote to memory of 3692	2444	msedge.exe	100
PID 2444 wrote to memory of 3032	2444	msedge.exe	101
PID 2444 wrote to memory of 4696	2444	msedge.exe	104
PID 2444 wrote to memory of 1696	2444	msedge.exe	114
PID 2444 wrote to memory of 3364	2444	msedge.exe	115
PID 2444 wrote to memory of 1528	2444	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8ea0ac188,0x7ff8ea0ac194,0x7ff8ea0ac1a0
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,10028339666888295542,6340554508131907223,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,1833908640173187985,11272235017143990978,262144 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,5929245288738153981,16393562618709272399,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10320478623804819373,9343935668431857294,2097152 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,13786645687763974847,6898334020221795683,2097152 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,6337285897160804326,7505017211957927525,2097152 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10986076478100515692,64739289674470127,2097152 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,978251375869027620,11090779398995881279,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,17487750341538667419,6521953433039220692,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,12575603328634642625,1348393858366359303,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,12575603328634642625,1348393858366359303,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,9332021562883548282,2860999698099200407,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,15459207764638769880,13702665839194083483,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,15413073795129204884,15785319117565291393,524288 --field-trial-handle=2308,i,16608434935989141938,16782491442968774368,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:1528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7ee6a7a4779ff113613adc2d2067610feb8c3443d15b48b8eb610dc39a147108
MD5 a8f9d73c974332e4fa24e51792ecf213
SHA1 f9459ddac18cc93a173d3503ecd309f9e9ea30f6
SHA512 054f06dc26f1f21558ceadcced4cc041af012fe6002dc922c8d26e69dd99f1fe00d582f7c5e21bd2bc3ccce0800abc24ff8ff1dc1473bfa4ee20ddd43e0e7d60
TLSH
T176613B380B5E0482E3A116B1B0E20104707082F9FB8FDE4DEF149DF55A3232AC99289B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ba04.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ba04.TMP
Size 3KB
SHA256 fe8141164d67e7a8dc71972c3dd6442ef913890072dccadebef9edaeab23ce68
MD5 ce9ff5f83e7353716eb9edefe1a015a1
SHA1 c59e8d798dace2c0be2efa1de8d731dffb5181c4
SHA512 22587f2bf1f43b6360ce7553dcb79e1715e96170e6dd2a4b70e226a3159eab42a5932ea8483acdc4e46dee8e0a6ed722f0c3e327e7053d2493a3f7d5507a2bdc
TLSH
T12A613B380B5E0482E36116B1B4E20104707082F9FB8FDE4DEF148DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 50a8185b469449633c2ef27f61c207e048d6f6fa8eebe8fde135239f030b56a7
MD5 12913533bc2010302e0e06909db5e910
SHA1 d002ae0a758a065aa8975eea14890ec815379de7
SHA512 e35f2d8d310e84237fff1435754096e97841e459afb5825b5ef1036985842838eb172b71df410f43a0ba40b30279b6f491cce3a5269d6c8988763270209b3448
SSDEEP 192:sxZDRHyM/jK1Ml8Mkc/f2sxa/GIdpdBHW6+WNGY9IKM7HIgrJ:sxZDtMc/f2sxav3HbGP9
TLSH
T14642F9116A3469BBCCDBD20DFA55BF53D6F8057292900E54A9FCDA1C04E6AEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a062fa2494d9609319d94e7ba0fe03faf3264a01adf163fca2fa458b38312251
MD5 2d79430988c013253e20e7736e51d987
SHA1 02a310c414c4fd91f352e6d974f8c80b981c2e5c
SHA512 18a76a98055531301bb569e814461bd39667ac2d1c6e340f69f6cf3ad7b355f6c1e70690b05a603644f502a4aefbac3f3c4306d06ffada026ca29a35b1bbfffe
SSDEEP 768:Kncv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNdroWg6E:Kncv21wWvu+Z+u1jaeFLeRNWW0
TLSH
T10BD20B2B280CCB7E4F841E9CED2AAF8A6DD801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 af6c347320623525a1ee178006c4cc4afbc89f7b139cfd645001e648d8cf4337
MD5 766c60afc71e7cb0ff6bd94d6da48a95
SHA1 ceb214f46656554a150ad72eeabaa840362f668e
SHA512 53d9965fdfca1482978b849b08d26514413bd71bc0b93bf24134a5bb26364930e40eea81ecf1405c3ab95f3969090c43d5e3e5b59737e7e5b58eead30d99c93f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDWmXiKgsuKWoKXqa:mTGRXb
TLSH
T10A916442347E02812C3F790CA69985275F463162751CA5AFBFA910B28E6BF115CFECE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f0ac3e327e6dfbcb78b00bc7fbd95c7392a87c07a144430303e4c57efc964888
MD5 b6899f362191d07b6ed95de81ff791ac
SHA1 6a56418858319a908d2d32c75cd745c4eea81783
SHA512 38b2d3c5ff177542d86c9862cac7fd393ced1b1e23a2793cb91a826069cf32c9ae7eef28c2ed9cc16c2f1ea0c54dcfb218c1bf70d6c26c92b86604fef433046d
SSDEEP 384:4ZcIhsNLbLZ7aziG6we+CBd0eswTnTKwBODNZOC0:GhsseTJxswTnewBKZO/
TLSH
T171928D31AC382C7B9EE6A145F84731078EF89177E5D53B5495EDBF1C05EA6981306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c01a1b1d220b9f35900223d38e105aaf09971709322788e26907b0c598d19b75
MD5 77c65741b597319865d2b30469f78f02
SHA1 d74f08c64ff1903235c9523e8f661c21b6b61621
SHA512 4d9902053d0940b1666aefd6c62c8a37cdbb95a9ba56009fe839a712bcfd573a602c44307738feca19b74894a5835bf127601577e689ea2288cc9c5bb797403d
SSDEEP 192:JONa6v+YLNQmiUyZAZh+CGD+FdeP9ospusC2AU6:JONa6vz/bZh+CBd0esJPAU6
TLSH
T11102EA35AC382C6B9FF2AE45F48736175FA82177E9913F41D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a43ed6e0dcd0beabdef3dd886fd54ee349a4c4632df4bd04797ce4ee7db9c83f
MD5 a752df02a82db685d20dcea739eaf8ca
SHA1 2c07a333959f3070804ac038b2bf49c846c42627
SHA512 043a0354cd77fb4d52278ec0f437f341592adea10e755f00ee4c7320280035eb17c0f517d5ff4a0a8dc1bd71afd930dcc9b83d1dd860482e305d184d19286f24
SSDEEP 192:IONu6v+YLJQmiUy9Awh+CGD+FdeP9osNOeBzCHnqIU6:IONu6vzbRwh+CBd0esuTU6
TLSH
T1D7122B35AC786C6B9EE2A545F48735139EA45237EAC63F81D5EC3F1C01EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6779cd1ec46b8c3aa0176830c59d838b8436c3ae99cd97a6d6ac0dab10af8050
MD5 bc74c41b1a27e3349e37ab756ee8b987
SHA1 89c7ef2effde6d780a839d0a9eca7f9fc282363b
SHA512 94256b4b173572ce353af0e110bc64be832ad0d210b269401971bfdc9a0219fd8aac55683f70903a5b04b366a5fd2965b3b10a1ce440d945a1d31e4a078ad5dc
TLSH
T16F41E6587AFD1148B3B26E5A9BF6A86E887E78373F07D46D00110E5F0A62B44DC61B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads