eb7de6404b7dfff908ec62a84afe1559388af1669de899bff43baf520dafdf48

Analysis

user interaction
yes
max time kernel
25s
max time network
27s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 23:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 332KB
Sample260809-3rbtnaxejg
SHA256 eb7de6404b7dfff908ec62a84afe1559388af1669de899bff43baf520dafdf48
MD5 b6545fb0c5cb06a41edd7f88c1fb1652
SHA1 850c347129de21ecc9712b6f72ed49ba7304e2c9
SHA512 2c8a95a5af8e7ade88e0fbcd609974303e4d965f026aa8592e8beee292215c9f337dbf20a9fadba68f121c6e75e2cee48323c8c5d2d629e7692bdaa5651e0167
SSDEEP 768:OQLrFE7TrxJU34Z8q/WVpXsw2mNXUrJb5xkAQfNXUrJb5xkAlaa3GLwG+l5fsmlL:XgY9ay4JUnXI9GdXY5Q1FblIymMupWy
TLSH
T1497450236005E0106CF3966EEF9A5509FE145103FB32C1967ADC129F1FFADE85662BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4016	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307927112852980"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{3818240E-DA77-4A7E-B616-DE229B16290B}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5364 wrote to memory of 5264	5364	msedge.exe	86
PID 5364 wrote to memory of 5800	5364	msedge.exe	87
PID 5364 wrote to memory of 4016	5364	msedge.exe	88
PID 5364 wrote to memory of 5800	5364	msedge.exe	87
PID 5364 wrote to memory of 5800	5364	msedge.exe	87
PID 5364 wrote to memory of 828	5364	msedge.exe	89
PID 5364 wrote to memory of 828	5364	msedge.exe	89
PID 5364 wrote to memory of 3600	5364	msedge.exe	91
PID 5364 wrote to memory of 3600	5364	msedge.exe	91
PID 5364 wrote to memory of 3600	5364	msedge.exe	91
PID 5364 wrote to memory of 2816	5364	msedge.exe	92
PID 5364 wrote to memory of 2816	5364	msedge.exe	92
PID 5364 wrote to memory of 2816	5364	msedge.exe	92
PID 5364 wrote to memory of 3484	5364	msedge.exe	93
PID 5364 wrote to memory of 2336	5364	msedge.exe	94
PID 5364 wrote to memory of 3484	5364	msedge.exe	93
PID 5364 wrote to memory of 3484	5364	msedge.exe	93
PID 5364 wrote to memory of 2336	5364	msedge.exe	94
PID 5364 wrote to memory of 2336	5364	msedge.exe	94
PID 5364 wrote to memory of 4452	5364	msedge.exe	97
PID 5364 wrote to memory of 3708	5364	msedge.exe	98
PID 5364 wrote to memory of 4452	5364	msedge.exe	97
PID 5364 wrote to memory of 3708	5364	msedge.exe	98
PID 5364 wrote to memory of 1060	5364	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14548031825448094518,12004190671259618420,262144 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,8292724271763188196,4377353818754018195,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,16712302531971001755,12623002466561418244,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17842620731608677289,9935319191206336454,2097152 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,16492225568315593931,4502141956346671241,2097152 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,11615861007684402249,13237259129848452393,2097152 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,5215938710648288299,5259845798498705024,2097152 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,11310865553712106233,7974563654168830696,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,11484538952765123324,4067780944489391737,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,1776012451954808263,5208580601450253152,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,1776012451954808263,5208580601450253152,524288 --field-trial-handle=2312,i,15307853190255647066,11627882218407125309,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:1060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 31507284387569d9e14fb6ed771caf5a2b481eb7726f54c3bc31cb03ee883e47
MD5 7180809c49c60a70ee0996f996ce2c04
SHA1 141453e57929e502c6c335096323d2a6e10fbe86
SHA512 7f7941dcefb9631b92fd851e350880646a5fb0544bd771016d5e0a2451043e0e1feb304a3535dadf8c97414bac02bf63416bb890f3460f8281440769771bf9c8
TLSH
T143613C1836CE007EE7538EB9E1EBD2013FF191B47A0B8E01E6C4F87DA925F354464804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593dea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593dea.TMP
Size 3KB
SHA256 be11b9a8c41a5e1dbeaad638ac51c4e999a9f5705dcd084eb8e4245c6b516e36
MD5 c5f50d5cf6a4b3c413c75da338f113f9
SHA1 ea026842c1d9dcf876de9997c793f458ae5c81e8
SHA512 cf4c93aaa5bb4a018879aeb3f00ea6a560d701819d6a1a4f17a42e4a217bd475ff2d705251946df46db4315a76787e533136908c5dae63e4d4d554f44178d8df
TLSH
T11A612B183ACE007DE7538EB9E1EBC2013FF191B47A0B8E02E5C4F87D9925F314864804
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9bd6824734a402acda2452fd4de02e99879c4f89c157b6c52bfb8a0d00c84296
MD5 9b057848edd0192b9b43a7de174328a7
SHA1 b3610f60debe5bf2d5aa1075d7865d5e809e0a4f
SHA512 712ca659f27be1083e2bca5ec45392622ae6e02df0d99274d8f92618462ac9810f336deb432a3ecc2425f68c7e999f7cef5e655d573fd475deb8b39eafa66448
SSDEEP 192:sxZvR0kk/fYsw3cMzEdpdGHW6+WNGYwEm7IgrJ:sxZvxk/fYsIdA8HbGj9
TLSH
T1C812A7126E38A83B4CC7E219BB25BF03D6F9503261D51E98E6FC961C05E7ADD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bf2a05d4f4bdbf94244747e78f62301b1908dd0b2c0f36383c85289faecd42d1
MD5 76e447fa8026d6cc6f023ce2154775be
SHA1 1b19ea0e4a36f1b33702bdb2ab338996cd8cbf69
SHA512 1ae4e2104afb56db04e88be8bc4c002df3d874ff89b12ed4972e2e21d65517e3607b19f498af508c1309836da838762a6c78337f16926459003b7ba83f0c38c6
SSDEEP 192:sxZvR0kk/fYsc3cMzIdpdGHW6+WNGYwKqm7Ig5rJ:sxZvxk/fYsUds8HbGeL
TLSH
T1EF22C8126E38A93B8CCBE219BB15BF03D6F9503251951E98E6FC961C05E7ADD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d223dc503f0796cdc5be200833e12ea14e67bb6fd1dff794f9e14b447601488d
MD5 04ecd33c981cac8fc56c95d9ad306ce0
SHA1 060b7d59f7d696f1fe30dbd6d7d20007371c3652
SHA512 368c62985b4128991840a0ab1adee258a9ba4a34a599faa9fecbbf14184ed3f9f8dd79221a0db7e17630d196c94104fb3e6e9bcaaa71052f0bbc7ba7fe04aa1e
SSDEEP 768:memjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+DJrofDKaI:memjYDmWvmKyEu1jakPLZQDibi
TLSH
T1C0C2FA3B244CCF7E4FC01A9DDD5A6F973EA802C76A588D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 b7cf53a879a509c41a14cb007dac90b36ebcb71617b78c8bed04517d40c21127
MD5 90ce06b6810c41fd2b5f9c5a806270ee
SHA1 58dffe773d72e45bf1d93f55cc3fd9889f150592
SHA512 feed5fc91d754991fd435b0bbcdb1712345342f3b691da9780070d5e9aad9dead9b2fba88ccf1fc8aaa6ebc6af0f985a346d8e8a0d453b14e42f84e13642ea89
TLSH
T181214C11B2FE42443CBEBD8C915A9C5AC64130673018E4BEFE7B18560FA6F845EB9CC9
MD5 SHA1 SHA512 TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 c391e6a5192964196a4c80ef0b9fd36b76cac5ca57574771abc04a7817a65af2
MD5 c8c0b80d6d16b5ea0ff690541114f026
SHA1 510e8a4920d7758109dca773eda3792d604df960
SHA512 7915b4f9ab643df17dcebeaaf7a485abb89c0c630edd20ef4301b4349d4d5a3a8f9120501445bc6098177cb2530bc19874649cdd644c67499c8df82ca985729d
TLSH
T174214480F3FD9498BE5EE942C11E9803E4A13D1B110D18B5E33F50F40FC48680A2FE21
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 1af35cdacd5bad2814304e1470114c3b6540752ecbc9f8d64b2671d8a125b839
MD5 462243cca0293b482fcd04571ec7cd10
SHA1 4516b13384c2c6d384ad788bcacf0952f9b043a4
SHA512 75d67ce35e378179e5a590569ffc6041f73ed26a55b06f39315d38c45dd8c1d557f0f709866fc35c09246799c32251dcc81e4aabd5310bd82669ddfc939aa449
SSDEEP 192:w4LsNa9DQZEZosIPTZE3sQmiU1C0e4H/+jVWjzor2t+XH+2F5cFTrqYgOc7:w+sNa9Du2ossCszBf+k82EXH+2gFnFc
TLSH
T1CC421B3678749C274DE2B685F04B36139EF8512799C96F94D6EC6F1D00DE6AC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cb28a41ae82134db9eea4b542e94da4d8566e514a056995ae42f3867b431130c
MD5 4c23a3aba40b4ee10f78c08790afe728
SHA1 bb5559cae65ec9a3967cc2793a147574b89df6bf
SHA512 17d78274b6d7267fa76ac60d5a1005ce90edf622b1a8d4ccfd5c04f61be49403d794c6d17f268b662f62558952ca9175bb00e52c5eb9c85e44399dcdb24fbd04
SSDEEP 192:EONq6hZ0QmiUy4Wpc/+jVWjzor2tn5wOZKRU6:EONq6oGpu+k82A2qU6
TLSH
T18102D93968786C778EE2AE45F48727235FE5116BE9966F84DAE81F1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 148a8a27c57f8724626d7e4e4f1d28db0e50c97d82df7403ddc5cbb8d3cefaf2
MD5 df649ec385d92f8a75d6a61650e69927
SHA1 0c179c9d8cef598cd7787dfd61a446f769ce067d
SHA512 2bc2709a7a62107e09535a67dda63dacaac516f4d6fc64fcdafd09e9ea7c91d5037d322cb11ec0a7465c42492022d7a7ba554457827b8ccfd7663b4c5ae62a28
SSDEEP 192:w4LsNatDQZEZosIPTZE3sQmiU1CAe4H/+jVWjzor2t+XH+2s5cFTrqYgOc7:w+sNatDu2ossCslBf+k82EXH+2PFnFc
TLSH
T189421B3668789C374DD2B695F04B32139FF8416796C92F94D6EC6F1D00CE6AC231B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 72b5388258ccac45678ad0843b5554c1dfeab6819b7b99302be91af5ecc6c3f4
MD5 e3773da579db738b772d728989f8f83e
SHA1 9dd7aae7a54cdb5348170bc22564ca5dcd4223aa
SHA512 b3d10892c80f57a82a62b308f25612cfa2dd76b20fc774e6010d02d2e0b2a89748cf3806a297854e77291b00adc845e50b911805abab30869287ab08889d970b
SSDEEP 192:RONb6hZoQmiUy7Wzc/+jVWjzor2t+XH+245cOqrqYU6:RONb68rzu+k82EXH+2j9nU6
TLSH
T143120C366468AC674DD1AA55F48732138EE5511BDECA7F94E5EC2F1C00DF6AC230B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ba28b7b01f23fdfc90687aca8d442000400e85eaa240ee926b6bac3bdc30d3ec
MD5 50f0aa69392b4fe7e1857fd419aba92f
SHA1 c9b8a8ac6d6a1d949c8d393767d9baaa3f1ee7f2
SHA512 ce4c4b4bdb8d39f99fe7b4de82ca39c6f100ec38070f9987fbac41219f5b195cc53a3b2fe676439d78873e7d163ae54e24fa77a6c45d3a8ed9c7867a14dfeeb1
TLSH
T1AD41175CA6FA1148B3B76F5AAFF7A86D447E7D736E0A945E00110D4F0662B00C962B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads