b1a3b92681b81615f420c8039dc8566af2523004406bd1fc7b9bbda624c0c4fa

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 09:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 135KB
Sample260809-k7vycscm7s
SHA256 b1a3b92681b81615f420c8039dc8566af2523004406bd1fc7b9bbda624c0c4fa
MD5 6ff5f6ba73c84b25411580e7afa80c29
SHA1 f2ab10ad86edb89d3783115fe8e14b19c3e626d4
SHA512 a2ac675db2f375ebed988ca8f71f78944c036e8f7f3c6862da8e834e1f5ea3e5b4438dda1af833a06a2d21c4d2028aa3fd80cb64c42ebc5cac9a77099280cd4d
SSDEEP 1536:F/CvGMmlPtamRS4GCNL61B9vjIf70ChKvW3IHO:FqewmA4hNL61B9sE4
TLSH
T180D3737563C0153E11B3C7A6A761ABAAFEA9C38BD647C058F1AC43932FB7C049D53294
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5916	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307405246455087"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{D0D65F81-DB4E-4B1D-BA12-19E02C1C9FBB}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5476 wrote to memory of 4724	5476	msedge.exe	89
PID 5476 wrote to memory of 5916	5476	msedge.exe	91
PID 5476 wrote to memory of 5956	5476	msedge.exe	92
PID 5476 wrote to memory of 5956	5476	msedge.exe	92
PID 5476 wrote to memory of 1420	5476	msedge.exe	93
PID 5476 wrote to memory of 5956	5476	msedge.exe	92
PID 5476 wrote to memory of 1420	5476	msedge.exe	93
PID 5476 wrote to memory of 5164	5476	msedge.exe	94
PID 5476 wrote to memory of 5164	5476	msedge.exe	94
PID 5476 wrote to memory of 5164	5476	msedge.exe	94
PID 5476 wrote to memory of 1632	5476	msedge.exe	95
PID 5476 wrote to memory of 1632	5476	msedge.exe	95
PID 5476 wrote to memory of 1632	5476	msedge.exe	95
PID 5476 wrote to memory of 2512	5476	msedge.exe	96
PID 5476 wrote to memory of 2512	5476	msedge.exe	96
PID 5476 wrote to memory of 2512	5476	msedge.exe	96
PID 5476 wrote to memory of 2220	5476	msedge.exe	97
PID 5476 wrote to memory of 2220	5476	msedge.exe	97
PID 5476 wrote to memory of 2220	5476	msedge.exe	97
PID 5476 wrote to memory of 4344	5476	msedge.exe	99
PID 5476 wrote to memory of 3024	5476	msedge.exe	100
PID 5476 wrote to memory of 4344	5476	msedge.exe	99
PID 5476 wrote to memory of 3024	5476	msedge.exe	100
PID 5476 wrote to memory of 3856	5476	msedge.exe	102
PID 5476 wrote to memory of 3520	5476	msedge.exe	106
PID 5476 wrote to memory of 5600	5476	msedge.exe	107
PID 5476 wrote to memory of 4592	5476	msedge.exe	108
PID 5476 wrote to memory of 3608	5476	msedge.exe	109
PID 5476 wrote to memory of 3608	5476	msedge.exe	109
PID 5476 wrote to memory of 5136	5476	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff8e6b9c188,0x7ff8e6b9c194,0x7ff8e6b9c1a0
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,133171636811934190,6690026755237640530,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,1005154294529964120,12762059209390417046,262144 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,939981629285727653,12931706477955271859,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:13
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,11978516779930259530,15156781268287594496,2097152 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,7122081551990958944,12584128316882216366,2097152 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,16067039983190950147,2620171097981625530,2097152 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,17697964088826658837,11201590584514665296,2097152 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,3378454911724056884,6714629382229129738,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,1644212419199412136,37339038198598817,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,10444838819358480402,8176340624131857514,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,10444838819358480402,8176340624131857514,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,4023467121481443423,18355252047254559600,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,17181376262833997770,13803998934534182795,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,2821689141961885790,3276354107535848490,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2124,i,15108628410345465029,2207188265387193915,524288 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6464,i,15064535767253697646,282608618059345015,262144 --field-trial-handle=2588,i,5914411031519508119,12089643192675103342,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:10
  2⤵
  PID:5136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2de8ef0ffd38fbdad31411615ee25a289afe9dc30d0a95e24d4a835dc8a55c59
MD5 668e1072c14755115b535ae9258b229f
SHA1 c041bb39d46df64918d889cad35f29061d04d7a7
SHA512 de6a026c178d6819f81935099a1814b54ff0d2ca9a1710b86e29c9db49ccc3b4e8bd9096e7035fb04eab5dc77a0eaf0820686822b3ccf4f3bd2759f5701c76cb
TLSH
T19E614291732F0791DB27EEBA17D1E4C5B1F86856A20B6A00DC843D74E086F167EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c143.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c143.TMP
Size 3KB
SHA256 112450cc00d9f6131c36152b9e254d92d47c1b1ff334252a18a33b4624ddda24
MD5 84cc454bc1ccaa08b93e0b964f2c9413
SHA1 88ad3202898b0850234bf74ce9289663cbe4b254
SHA512 c7fb2141d1e7cc47a377c77fabb9200179ea5f3c5babb006ef2a0b1e251e3a84b9c81ea606c3249d74ac969670c775ee7458bf6f5bc82f073eeefe7e836fec10
TLSH
T14A613191732F0791DB27EABA17D1E4C9B1F86856A20B6A00CC843D74A086F167EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f73662c8a545a5f541f6673113ed58b8f45a0a4cc9848315535e7e172e9cdc01
MD5 3374708782729df85c123e8562028e27
SHA1 01693ca5843690ef3bc7d94e758baf9092e95427
SHA512 3f4b715371c2a4ce9af0e771002938e9c7c14d284533cb72f0ac92548c4c3d66c0c0049ecb3ed1eafc9a5d8852e3a9bb827be6a393548e7ac971bb9125397fc9
TLSH
T1DF41A1F783F4867E8A0196F0AA14AE1FCE5D0515432C7C66C9E4AE2B93F3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 290346a135560c581e0110370147f1cf719a2c790065d19e9698dcecf338f881
MD5 f2b7500fa99d17fe6f2f9fc64b6c5dca
SHA1 312066b2d6114873242ec8ca5aab18642130b2c0
SHA512 a505249b3634d163c7ecf2ff9a46a230b5153e7876e0b02794d126fc6e3881ea90a7c95f2099bf96b3c5a81ee1339adb6bdbb79f54fa83f371cb74f8e00d8f65
SSDEEP 192:sxRsRdbI/faseZ4YCbw5zoA8p4i/g6+WNIYE3w3z6GGtIgD6J:sxRsDI/faseZ4PwEH/5I4z66
TLSH
T1AB42B5066928A93B9CCBE21DBA55BF53D6F9503260912E58F7FC9A1C04E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1935c1fc04df3b0b8a3520018f004a28dc8bb16aeabcd90f2f3c5c90ec1538d0
MD5 abb5fccf96386a1bfb65c6b994dc1b63
SHA1 cd8fc067881b1b924499c52b04cda335c18bb2f0
SHA512 e82e77c2e3b38f7c0573b0bf35699c4fcfe07d6f0693c2dda6cca3e4a4d9c8beea506ca95ccd3e2adc90544ce92f44dbda69f5cfe0f38e0912d9c99557754abe
SSDEEP 192:sxRPRdbI/fasOZiYCbw5zoA8p4i/g6+WNIYEgW3z6GGtIgIJ:sxRPDI/fasOZiPwEH/5Inz6s
TLSH
T19432C7066928AD3B9CC7E31DBA65BF53D6F9503260912E58F6FC9A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d7770000107a394c2d63e50ba03bd41faa2c8355e32c7aae093ccbe94fc60db6
MD5 9717b14bc0d2a6e74e7393be66cc34d4
SHA1 ef518ce516a51ce8154b315942c036607844bfdf
SHA512 a969489e4c187a9ab46fe4621f116308459378ae05f6dab56334b664cbc19219e7393d706775f65db31e90b5bfd721a27a258f234b66e7de161501d1178bc94b
SSDEEP 192:sxRsRdbI/faseZiYCbw5zoA8p4i/g6+WNIYEgW3z6GGtIgDoJ:sxRsDI/faseZiPwEH/5Inz6w
TLSH
T18B32B6066928A93B9CCBE21DBA55BF53D6F9503260912E58F6FC9A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 03981625e9f3f2275cf9d251ccd453ee72e219e6e97458f6dfbb6460d4fe1796
MD5 d41949f36b69ebe0b23a900e98f716cf
SHA1 b78e12cec77a840c78b1db8a5ed043c2ea4a4901
SHA512 c570f1a785b319c8c21bb93815ae8daad7f0a24f7617b5f7ac4d51b678c164336ba4638b3d0ba6f640f6a7738e8b1a849a9bf2a78046da5b8a434c4227862ded
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVZ:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoQ
TLSH
T10EB2EB2F640DCB7F5F804A9DAC19AFD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a5b21.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a5b21.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a7d5f187f5e1920d81d0bf3af770f33bc1b5f7164ef764a1498b8e8cc01363ee
MD5 08f927267155e3f2a22e13ec0268b3b3
SHA1 f2127e92398c87cbcb47b1461885d8dacaf8a963
SHA512 c09a5c861a1684dfaaae98040043ac235de7f61e740dfbfc7543b3dc81878eadccdf4bd1105aadeeacce74138a950f09eb4194776974cdfef94478d09a293043
SSDEEP 768:Oq3QnfCEkDTd+ZgtxtNeX6+qTko0u229a4vsTI02ewBKZOWJ:Oq3e7vVTVKa4m2evZLJ
TLSH
T1F3F2CF71EC344C738DE6E7847517750B5EB88273E6C82A54EAEEBA1C009766C170BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4f1f57387c6a21bfa94ad93313ee8c5ad1d8bab1851bc6c2bd09144e57bf52bc
MD5 e80c5b22d4626e642356b5597bf729ef
SHA1 3a69b51cef4ecdc52742b8a335439e8004dd5afe
SHA512 92d55d9b702b7d8af1acea42fa6e701400c3a9a085e1a7d0aaa1e116e5a2ac5e1c4ff589c2a0eac5d0491832fb7bef963ae8db85ee8195e0e48ded5bcdc909f1
SSDEEP 768:Orv+4UNbdh3QcfVEkDTd+Zgtxt9eX6+qTko0u229a4vsTI02ewBKZOWm:ObsbT3uRvVTVKa4m2evZLm
TLSH
T1AF13CF32E8388D738DE3D784B107750B2EB852A3D6C91A54EADE7A5C019B59C230FD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 00dfd9372c1308a809e57ef8104bec12ba4d38ef43d9f8c6fc4142f510e2cacc
MD5 ac5a61541c26d66c66f7df22c8714d60
SHA1 a9e7a9da9f9eaa87e9c36ed10ab325888fd7e927
SHA512 ef9dc7c60fa90b370f01003e69d79b0474600b5c61993985db304b19ad63057c13d189ecc70d557999753f69856e080e71f88821124c241c90530b11b3ea5482
SSDEEP 768:iq3QcfCEkDTd+ZgtxtNeX6+qTko0u229a4vsTI02ewBKZOWJ:iq3r7vVTVKa4m2evZLJ
TLSH
T1D4F2CF71EC344C738DE6E7847517760B5EB88273E6C82A54EAEEBA1C009766C170BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 261bdf8f37a9bd4c83d4c70c8133d6ed0919559fb889189b2a1e3023711ba63c
MD5 192e87eb79e23bfeb3e3d82295550cd7
SHA1 1193e825b44c7e62c04010e0b6bfb69f3c044c5e
SHA512 16f4dd449a62c419a7bb480274113ef0e317dce74ab35e042eb539885da568040dae60f7de77df53b77274ef33cfba3f826573b320fbe0509d6652263e949d22
SSDEEP 768:DFQ43QOwg4fCEkDTd+ZgtxtBeX6+qTko0u229a4vsTI02ewBKZOWJ:m43AjvVTVKa4m2evZLJ
TLSH
T17F03BF72DC648C778EA6DB84B61B72079EF842B3D6D86A54EBDDB91C005729C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 51777ff935f0873748407efe20f84be639c20a0b88b3c5a38991b6cd4ae40702
MD5 5acbb6ba53cc5c009abddc108288c566
SHA1 0aa84ffc241432b8f8d5badbd2c660fd9cbb4c87
SHA512 43e64a127e9b2a7e5a46977a35880561a689a4a9fbc61cd6114c9ca7b10bf2f8925bb89d643fa94e9ebdde2a95eee855a9b5188ce1b5e39d880a9f7459dbcd55
SSDEEP 768:Urv+4UNbdG3pn0EqDTd+ZgtxtneX6+qTko0u229a4vsSI0eVH1SdW:UbsbU3flvVTVKa45EH1h
TLSH
T1F203BF32E8744D338DE79784714B750B2FB85263C6C80B90D9DE6A4D469B5AC230FE67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ce6d3ebcbb746c1765ffc789255db3db7bc913bfb24f2c110a5970ea21df83e2
MD5 7f2a4b86ad00bd6a894f148a7e9f3111
SHA1 442c87e65e6f44acbf750c835941444bde40ea38
SHA512 d1b4ed0ac333489680ffc540dc75a83f84ef3b190c3ebcd50b0067bf67a98f15a9fea6cc54ec10f9062485c55298a6ecb4e6edf5e9ca9b68e081cadc879d9cdc
SSDEEP 768:prv+4UNbdG31HXqDTd+ZgtYeX6+qTko0u229a4vsDYeVH1SdW:pbsbU3Z0vVTVKa4FEH1h
TLSH
T1CB03CF32E8648D778DE79784714B75472EB95163CBC80B80D8EE6B4D069B5AC230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads