fc69138bbf80113ca84c71ccd96d414595e2e9e1bda3af362e24f47046796526

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 5KB
Sample260808-wxqrfaseme
SHA256 fc69138bbf80113ca84c71ccd96d414595e2e9e1bda3af362e24f47046796526
MD5 bffbb36984c55fe1d94d7d337ea25d28
SHA1 176987c56e1adef129fc28af75421f95c91b6389
SHA512 14765c8840dc0cdfa3c690af1d2bd263e639b21e9379e96b6c2de7bb6430d0cb8d1f7e0f07259bd051de7546837aa3dcfe556139d3b2bcc796b91e89b352b7aa
SSDEEP 96:+FLa5YQzwQ6GpNPeEZPBOtaqtTcatSjl9ZRR:+d4zt6wNmEZYtRU
TLSH
T185C14F1013FD022A419341923979AB56A796CF47FD9B5160B5FC2748BFDBC4EC623A88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306867060426599"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{93A07CAF-3E32-403F-B33A-9AF6FAA8E0D7}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 2104	1600	msedge.exe	86
PID 1600 wrote to memory of 3776	1600	msedge.exe	87
PID 1600 wrote to memory of 988	1600	msedge.exe	88
PID 1600 wrote to memory of 988	1600	msedge.exe	88
PID 1600 wrote to memory of 988	1600	msedge.exe	88
PID 1600 wrote to memory of 3140	1600	msedge.exe	90
PID 1600 wrote to memory of 3140	1600	msedge.exe	90
PID 1600 wrote to memory of 4420	1600	msedge.exe	92
PID 1600 wrote to memory of 4948	1600	msedge.exe	91
PID 1600 wrote to memory of 4420	1600	msedge.exe	92
PID 1600 wrote to memory of 4420	1600	msedge.exe	92
PID 1600 wrote to memory of 4948	1600	msedge.exe	91
PID 1600 wrote to memory of 4948	1600	msedge.exe	91
PID 1600 wrote to memory of 5008	1600	msedge.exe	93
PID 1600 wrote to memory of 1668	1600	msedge.exe	94
PID 1600 wrote to memory of 5008	1600	msedge.exe	93
PID 1600 wrote to memory of 5008	1600	msedge.exe	93
PID 1600 wrote to memory of 1668	1600	msedge.exe	94
PID 1600 wrote to memory of 1668	1600	msedge.exe	94
PID 1600 wrote to memory of 4232	1600	msedge.exe	97
PID 1600 wrote to memory of 4132	1600	msedge.exe	98
PID 1600 wrote to memory of 4232	1600	msedge.exe	97
PID 1600 wrote to memory of 4132	1600	msedge.exe	98
PID 1600 wrote to memory of 4596	1600	msedge.exe	100
PID 1600 wrote to memory of 2008	1600	msedge.exe	103
PID 1600 wrote to memory of 2740	1600	msedge.exe	104
PID 1600 wrote to memory of 2608	1600	msedge.exe	105
PID 1600 wrote to memory of 3432	1600	msedge.exe	112
PID 1600 wrote to memory of 3432	1600	msedge.exe	112
PID 1600 wrote to memory of 2740	1600	msedge.exe	113
PID 1600 wrote to memory of 2740	1600	msedge.exe	113
PID 1600 wrote to memory of 1156	1600	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff95724c188,0x7ff95724c194,0x7ff95724c1a0
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,4675167744436581840,14629006231632525248,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,17367961566878392085,1768286807363147661,262144 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,3977081355889471705,10224821277588139367,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,4690593970200462695,5476543015591719431,2097152 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10279477130340212370,3023922230088174547,2097152 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,14973663424628752299,15474312764534902876,2097152 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,8151260419786991581,4757301220863786690,2097152 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,13484949685918215220,8199012030434300780,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,15540849983772309751,18097037128907920714,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12900197719069325289,13141731561040666728,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12900197719069325289,13141731561040666728,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,16544265928550771026,14688996679740850159,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,11597584015038484178,2599341068601831121,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,17129173721835644278,7429327417264175722,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,11175589723895809451,10604005383996012916,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,465643732667881010,3760421506491123294,524288 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5116,i,14750715002601283873,8174541183237566713,262144 --field-trial-handle=2228,i,13302237533781033022,6913548824322686572,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

60af1727-6074-4d11-9082-b9afbc7d9a0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60af1727-6074-4d11-9082-b9afbc7d9a0f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 14a3745c3d71bc9535c7f50b0d951b13ca2b266e0c5e8cf737fa4c2fa4a1daf7
MD5 46906015c26db3c81ff3700b9da8b23e
SHA1 0a27517817e83d04c2d623bf57b8da404a73960b
SHA512 64fd394a2c8ab412deea2c81df275f1c643afd94124646116f21c252ec9f2f8a58df8c4c1a2a6cf33d21a575b48c1367d30b5d1cff849f64aaadfe03bfa2e47d
TLSH
T15171713B122209BAD3AA8033D0F323013177AAEAF4236E5917708CB76634B52B15957D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 c48b04c594a8b6a04c1d20e4800ecfa9adbe6f015b3bfac91962ca8d733e1f87
MD5 e733fac68f201c06218628ddde11dc7c
SHA1 373115d2ffdcc1caea3ceef880752042237e1a5e
SHA512 5873057e95a2903b46fe29da26c699ede81eb1637fd46a48acf69f0e01542861c3e09c3ddb8c627ef8c882b3f1a4dbcae089c2a63c3249f4d8a0437b0040c253
TLSH
T11B117AF3C3E5856EC91156F05A24AE2BDE2D0606821C7C29CAD4FF2B93E3075E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5f7fd3200ba071fadeb943e746abce8ded3a061445c29dfb1a87a7c715d07e3c
MD5 f4f1e64b17cd8396c582eb706aaf7cb0
SHA1 0553d6297f6b9d32e625462dc076f56e94d49975
SHA512 391ef981f5eb40fd32aa46240b06c29fd5d3fb17d2277dbc6af6057a27676ed40c6144370dbb766dbc2c5b55c44bb65a8b899792e816b23123c4967e26880c61
SSDEEP 192:sxZGR8yM/jK1Ml8MkN/fgs+O4/Idpd0HW6+WNGYIklQqIgrJ:sxZGmMN/fgs+O4wqHbGO9
TLSH
T1B742F8126B34697BCCDBD209FA457F53D6F50473A6900E44AAFCDA1C04E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b5832c94f9f86ad4c9d5476ccbfc782dbb1dba5f01c5295871ba61eecc81acdf
MD5 13c049242d6b0b8e8e05c50dc34ad603
SHA1 30d1b27d7e8db5d4fb95b7e70146d939d952ca92
SHA512 cfcc57fdb6d51431872b6de2af0745dfd0468c5a37c9ed803a337704818d3cac67a3e7c0bd372cce100e244f54ce12453bb3cf9bfbcb7e5fef48717e76718d10
SSDEEP 192:sxZGR8yM/jK1Ml8UQ7kN/fgsFwOG/IdpH0HW6+WNGYItUpqIg53J:sxZGmqQN/fgs+OGwUHbGTb
TLSH
T1F152E7126A346977CCDBD20DFA45BF53D6F44473A6900E44AAFCDA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 361a580ded940c6e149dedfa4a13616c174db5a890f70bdb35be7110de0b06fd
MD5 9bf49565be303ab8dd969f20e0c1476a
SHA1 36faec44e57b581bc22f41b4a945c7b131d8bbcb
SHA512 aaf35776a3dfebcae1e94dbdeada5e8e404f6cb5a22b7fc35a02699aa516aba180b07b8e1b96e4b9a6b63970c861d7f5076db787f3a0df4349850e218856f171
SSDEEP 768:DjsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9NrolBmk:DjsqxXlWvJD6Tu1ja54LAs9mXT
TLSH
T183D21C3B694CCB7E4F840E9DEC266FD76ED801CB66988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 09611d259f54ac2141c22a3af2dca0b465e5552f122e4265b71378b589960bca
MD5 c9a1fd377f20892c889f578efb60d931
SHA1 56e1e6f14ab6e8921cf2cfc9005ca22442cd0598
SHA512 a066fc008812ee9bbe1d93ad03e292409d3193438073464f2e8f8deaeb3c6d39f618c9c38465f1b5600c91f7d2a23b7fed3a8d2c93a41f28ec243026aacee8dc
SSDEEP 96:KYbaKYIK6m0Knq6+HuKYYj5uKiYCiE4KxCp:ExX/l9Zf2
TLSH
T10EE1F102717F02033EBD7908A3AA89374E4275A37418A4BF3B7955A64EB7E115CBC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 898cc1649a8a95c35e8e18988fa09e4453e99b987daff1c7936a7810bde399d4
MD5 baf8ea3ec9d347732d605c6bcfb6ff15
SHA1 0a36a4636bacab9f682260daeab7f9f79c930ea0
SHA512 f064fde1a4093f37501ac65629bf88ca25459eef7662e0b4ca0456d68e8c54a18d4d60473de47091b0d07eb43daaf9e9d68c7599771f4389a4601c57686f5ee6
SSDEEP 384:8cZcIOzsN4WXbhIiVRNwOWG9JqRnTKwBODNZOCv0T:JOpwHwOp90RnewBKZOG0T
TLSH
T162928D716D385C778EE6A105FA4B36074EB89067FAC82F9496DD7F1C00DA69C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2d0335c4f91610815d4ca87490307bec331ab14cd9e2e11ffc61977ac3b6932e
MD5 18e7690d4763a70d9f176d8aad7e0f2c
SHA1 f9da244b67e4b7ba398fd30ce3ac7a8f9bc258b4
SHA512 29f9d7611c3ef6c17e29f98ecb81baf05f7596a2552c8deb02ea70efe84628cbbeb150cc888e0768cd4521fda2d019a8d113ebd3205c9cdfe052eb7591ad2f3c
SSDEEP 192:tONg6JkRtQmiUyoUW+RNwOmhOmQh3rRQU6:tONg6UrIW+RNwOW06U6
TLSH
T1F602E9356D386C779EF2AE0AF54B27175FA4203BE9852F84DAD81F1C01D765C234782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1c24ed0ce1691ee1ca560da07d315f4ae58db2f8384a128e986fe73cb5e9a8db
MD5 d564c3cfd3dba3f412685535f4e38f3a
SHA1 f9d8455d84b2b92f146f463f27fbfb2d1a181fb5
SHA512 4aff96a356624320f3af1058003bd05ff7b80804c858b9dd3551bbfc551f715b0389fb69019a73860777b436530e46e841ad35fbbb6221a441fa56637dd9d3f8
SSDEEP 384:4ZcIhsN4WXbhIiVRNwOWG9JnRnTKwBODNZOCv0T:GhpwHwOp9xRnewBKZOG0T
TLSH
T196928C716D385C779EE6A106FA4B36074EB89067FAC82F9496DD6F1C00DA69C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 dd4712c625944f4262bf851aedd672c31e975bf47220cad84ff480014265e0dc
MD5 c78f6b210797b1deb58c2aabf6d3fc7e
SHA1 74e03100770201a8fdc3941b84582064e0c62a55
SHA512 0ed2a0d45fe451910723a3fc09bf4051c108fe52fd465877c528209455a2c6bdae30811ce8bde9c590c0b8f03c6891be6fc91125ce6120146e4145169356d160
SSDEEP 192:ueLsN4WQQQkRbKUQmiU11Qt4VRNwOmhOmVU9DFwSR/qr+U8:RsN4WXbhIiVRNwOWG9JnRU8
TLSH
T1D6322A316C785C779EE2A545F64B36135FB4506BEA882FC4D6DC2F1C01DF6AC230A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 93bee324728e34657535a65558eba763987a662dcc2b87e1351ffe2747aa3e17
MD5 390db881b312df3190d256c015132cc4
SHA1 a10c810c96981e70b5e710c17cb0de5f3b2ef8f4
SHA512 ac9171e112f3686397fe6906c589f5b2eba9716311591a03f1ca9a0b4975a5f949c31b9f7da72128db254d95a647f1b82c6d057aff8aa9076bb302628e73bc8e
SSDEEP 192:oONh6JkR0QmiUytU++RNwOmhOmVU9DFwVc/qr+U6:oONh6UEn++RNwOWG9JXRU6
TLSH
T1421229316C785C7B5EE26545F58B36134EB5512BFE892FC0D5DC2E1C01EFAAC230A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bfbd02a046349f5f14f133e6c8a443c6bfde6d3a0d8f571ea2aec603df32bd42
MD5 bfd37e35b65d86b5989659446abd5a7f
SHA1 31c898f81920c35eb1294f94705f3832c0081ae8
SHA512 b3ef4c46bc0214cba578156fd2d1b9642172cc4bff145b0d7a9b1d0f3b22f3514c607764fbbfe38c6bc7463ba425d2bbd96bba1af51e995cacf066fab8313866
TLSH
T18041269DB7FA0158B377AF5AABF6A86D487BB8732E06D05D00000D4E4A63B40D871B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads