818154fea21d1dabc0585be6c4d797ca3030aa7664a12364564e72031bfb8247

Analysis

max time kernel
42s
max time network
40s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 10:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 5KB
Sample260808-mfxc8aywat
SHA256 818154fea21d1dabc0585be6c4d797ca3030aa7664a12364564e72031bfb8247
MD5 d6972c6fc7f7e08d34fa2c497cc48ff9
SHA1 567ceccdf74b099a5085eb52fb1851c9197be96d
SHA512 f8d3af69b8610293e1f92b21bd7fc9756f94ccaa4bfa3677061586a076fd12fa1dc2e12daf3ede3a5c0e3adf47c70bc22a37686b1c60f6f1929e64153b1e9a41
SSDEEP 96:PNyNtoXZzIEb0EaW87vsYJi58tE8t1hXVu4T0kNFDOztVYzueh848timw:PN8tkCBFJicxbVc4JOztyyTFw
TLSH
T1C5B14BB3E930602B57BA2F9674FB3359E125B70A76046448F9928B1D82FDF3F4140485
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5404	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306583160488733"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{397F3CF3-6C02-466D-B356-D1FC89D5EBD8}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe
5324	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 5324 wrote to memory of 5980	5324	msedge.exe	88
PID 5324 wrote to memory of 3452	5324	msedge.exe	89
PID 5324 wrote to memory of 5404	5324	msedge.exe	90
PID 5324 wrote to memory of 3452	5324	msedge.exe	89
PID 5324 wrote to memory of 3452	5324	msedge.exe	89
PID 5324 wrote to memory of 3664	5324	msedge.exe	91
PID 5324 wrote to memory of 3664	5324	msedge.exe	91
PID 5324 wrote to memory of 280	5324	msedge.exe	93
PID 5324 wrote to memory of 280	5324	msedge.exe	93
PID 5324 wrote to memory of 280	5324	msedge.exe	93
PID 5324 wrote to memory of 4148	5324	msedge.exe	94
PID 5324 wrote to memory of 4148	5324	msedge.exe	94
PID 5324 wrote to memory of 4148	5324	msedge.exe	94
PID 5324 wrote to memory of 3436	5324	msedge.exe	95
PID 5324 wrote to memory of 3436	5324	msedge.exe	95
PID 5324 wrote to memory of 3436	5324	msedge.exe	95
PID 5324 wrote to memory of 4328	5324	msedge.exe	96
PID 5324 wrote to memory of 4328	5324	msedge.exe	96
PID 5324 wrote to memory of 4328	5324	msedge.exe	96
PID 5324 wrote to memory of 4664	5324	msedge.exe	98
PID 5324 wrote to memory of 472	5324	msedge.exe	99
PID 5324 wrote to memory of 4664	5324	msedge.exe	98
PID 5324 wrote to memory of 472	5324	msedge.exe	99
PID 5324 wrote to memory of 2032	5324	msedge.exe	101
PID 5324 wrote to memory of 5968	5324	msedge.exe	105
PID 5324 wrote to memory of 2212	5324	msedge.exe	106
PID 5324 wrote to memory of 4608	5324	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff82541c188,0x7ff82541c194,0x7ff82541c1a0
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,3272184794660761431,16446890744043308758,262144 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,14197140673209349829,1145012481522022316,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,44115045886615428,3880688258362140309,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,9109445642978627185,5716090839204922064,2097152 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3160,i,17807424084813357893,8184722153071581683,2097152 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,4581007807428193423,971848967485161667,2097152 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,1942507601552324124,5951856558867442414,2097152 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:9
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,2463107854180840206,17988914650689735119,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:14
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,15081406530718022198,7992164120038805371,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3844 /prefetch:14
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,11932272052887891130,7184737582587759357,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,11932272052887891130,7184737582587759357,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14064236364171313788,18311819037320476438,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,15074489326203159216,9264601714620334261,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:14
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,11852803417495103982,78765028803870923,524288 --field-trial-handle=2144,i,244337811717784862,7200425861358592881,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
  2⤵
  PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 c92772a97b63d39440e2643370b4e11985d6dbebb8a27926c2caa68ea9f2edec
MD5 37c75b560c490bfc26e28e52574e80eb
SHA1 21b2a9339fc5e79ddc30092af802c5b19196946f
SHA512 4435c4beaf04a1fcd826361d1ba72a032b63b2f41a35992d378248541cb9a3f1bdbc4d48e615495b7800bd2b772d12d69f73e4a681a4fc217b984a1fb7059702
TLSH
T1F141FC66CBF8B8DDD79248B110E0116A32F484D9051BEEA072F09EB34AC3F7491F8123
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1780a12d6d04ea5e82c5b9d6731b8a8b7a9566a69be5bb80a53558edb6b0be41
MD5 54857f3ba524b63a593bfd27c66f9cfa
SHA1 cfcc96cb28571c58b81584cf1ec25e41a2da028b
SHA512 ce984f7ee7d432bb37413986f2f2f2c13977ff4178dc7da73d6b67e324ed208884106abcc3ee661a90796deb5b137419b6039c257c0e1d3c836092b7cea65e9b
SSDEEP 192:sxR7R/br/fxsjY3At/zoA8p4h/g6+WNIYZFLKVG1IgIJ:sxR79r/fxsjYZI/5ISrs
TLSH
T1CB32B6166D28A93B4CC7D21DBB15BF53D2F95136A1902F18B6FC971C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 93160ce124fe5b7a9cb888904eed295752b7f7e35d2ebb5b12dd202d8125f482
MD5 0b17d3dcd0a3c1183098d31a3a4a4f75
SHA1 5526bb11d4c63cf23e7c82f1f58e5e7b744c184b
SHA512 5176bfa4d3c3389bfa84ff0751f8f7ed1fe7c742cf5ef599cb76dfd33718bd6f1134fed901e59f66b404055e03e306e3dd3e0d69543b1f96b54a3d7c6bee4165
SSDEEP 192:sxRgR/br/fxscX3At/zoA8p4h/g6+WNIYZFL7VG1IgDrJ:sxRg9r/fxscXZI/5ISeh
TLSH
T14342C7166D28AD3B8CC7E21DBB557F53D2F95036A1902F18A6FC970C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 de1c01b70b3bd48e8c5a3116ec77bac837e1cb39b4e008ba54a982f07af61dde
MD5 87a9d58d3a88f2d0b115085e006cf34f
SHA1 e21c169f00c7373e24cd523045ada6a98ee7fe9e
SHA512 c67de77d5fbf1a5bfe4b19aad993dd1375d10ec35b6ed19fe3ea26967c5549c0b9e879a69688314ebab044d6332673d1b6dc8bc2b4eb362ac5fc2e05ae6171a5
SSDEEP 192:sxRgR/br/fxscY3At/zoA8p4h/g6+WNIYZFLKVG1IgDlJ:sxRg9r/fxscYZI/5ISrj
TLSH
T16232C6166D28A93B8CC7D21DBB55BF53D2F95036A1902F18A6FC971C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f672a127e80bb5036c8f1741263712d990da21ef1a425349349fdd825cd659a5
MD5 2ba8c83f4b2f1255d9f66c5d39bd4646
SHA1 92a7207abf555137317ca44aedf7db460ebf847b
SHA512 3348371fee00b336742bfc887beac955cdd8517efef66f88fca101d944842fc6688f601bf7ae1fa189fb3e2f958a41b444a8e1306a9de6092ecae201eca648ae
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGnrocmc:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0V7
TLSH
T1C3B2CA3B640DCB7E5F800A9DAC196FD77DA802C796588D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85351cee1610ef90612e0958e55ec652e6624480c98207561c72c51e6c723f4e
MD5 984020c111fbe18db277798d84b7da66
SHA1 5d9c779c409e1c3fccd1e9bd9338c859cb2cd7da
SHA512 e7a99fc27e9ba8ec86271fd6066ce25973e6efa7745c5178bd106d155e408a60eb0d3cfb1d738cc2774d3fa5c94b265dbff0cf6d7f015dfa1e84410baaa92eb5
SSDEEP 96:KRT8ZNbRRtWFKAg1tK4MgbtcjbylxWH+zC+4AwmWgFNg+mK4jg8mc2edsRgAK1yP:CT8ZNbRRIFKR1nMgbCjbylxWH+zC+4Ap
TLSH
T11791F500747E02413C7E7A0C94E48D5B978274F27029E86B7BE911B68FA6E124EFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0fbb6017977a953f465e8f7e24e12cf1fe0026f4162146af4b0d46f9add6805b
MD5 cbafc73d3387245732ba888ea55cf446
SHA1 e45d13d6d2f64ebd016541d8d9ed00b38910241e
SHA512 90ab26a703d66f70d62b5a0883fa92c47b63c176ddf56e500a3b3e308deafdfff6889fef26f78a7b6f8b29281ffb6f22b2b1c1f9cad9b675b15452f0dd63a5bf
SSDEEP 768:Pz3/Z+LeSFOUkdTCX4fouOToPvB2thtA9VAgV2ewBKZOz30d:Pz3zosnnwthttA2evZ8G
TLSH
T1F1F2CFB2AC688C27DDD5E398720B72475FF08263A5D42BA89EED6B1D05476DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 598e613bc399797eb28a43d129665e1729ae1293247d213814d712e421e9f7a9
MD5 fe645543f8026be38754601602d2988c
SHA1 f1e5dd0146f565a94109799b68c1e5e8879948f9
SHA512 30c3a05863cd979fbd1d914c634da352c04b8edc7627f06e10caee45d88dab9d97c52727f71d67ea3f0e76e48b91956a00182f2ace0aacb7c2aafd1b88f8cf0f
SSDEEP 768:grv+4UNbdH3I1+LeSFOUWX4fouOToPvB2thtA9VAw3eVH1SlX:gbsbh3ksnnwthttOEH1Y
TLSH
T16903CF32A8A88933EDE6D398720B75472FF4816396900BD49ADE1B4D079B9DD070BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b7649d14ddb6d62c1daf131cb0b340114a8c62e41b6758ec04fee6033dc0d41a
MD5 23d365289aaa9e40ecc51bf1433bbf15
SHA1 c0bf7ec84d2dcccb42acfaacff82282bce1b8836
SHA512 30b19877078319e26f7d78ae839aa05fb80b6f177fbd50424fce06e458e9f6d7c7a82e204e984ba54472b3ba7b8edd7f55249b5d2e741ae4544fc0614094a298
SSDEEP 768:Vrv+4UNbdc3hZ+LeSFOUkdTCX4fouOToPvB2thtA9VAgVP:Vbsbi3xosnnwthttAP
TLSH
T14003BE72A8A88D33EDE6D298B20B75477FF0415799C40B989EDD2B4D068B5EE530BC07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f159bb055d40d92b825024d4e3ccc36e1f6c49a42c52bce0ad44e2428a33d40a
MD5 03e50ddc0b853f0bd3bbea2815acec5e
SHA1 9419d04a7d30040771369015eb2e65acc8e58160
SHA512 dc54bbae1d557033c41059da4c29bf5c1a9a1292d762a8f9acc333f430e42961a04e1579b089f48cca3a8e70fbb9b3933064b719297b67bfe1951f0087e603bb
SSDEEP 768:Lz3OZ+LeSFOUkdTCX4fouOToPvB2thtA9VAgV2ewBKZOz30d:Lz3KosnnwthttA2evZ8G
TLSH
T103F2CFB2AC688C37DDD5E398720B72475FF08263A5D42B989EED6B1D05476DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6b96ba5-9f66-4524-9dc9-2af026573188.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d6b96ba5-9f66-4524-9dc9-2af026573188.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads