hxxp://inuahyaart[.]uk[.]com/secure/cHRoa3ZjcHE=/cnR5d2tm/?z=b2Q9MXN5eTZhNmEyNzE4MjA3YzJfdmxfaW50ZXJ2bF8xbndjLjF4czlpdTAuQzAwMDByZzd6Z2EyemhmMDNvX3ZxMjE1Ni5nN3pnYQ==&c=b3RjbGZldG9paGxyMHl3NHJmLTMwMDYyM3U=Aa1MfO

Analysis

max time kernel
30s
max time network
31s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 11:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://inuahyaart.uk.com/secure/cHRoa3ZjcHE=/cnR5d2tm/?z=b2Q9MXN5eTZhNmEyNzE4MjA3YzJfdmxfaW50ZXJ2bF8xbndjLjF4czlpdTAuQzAwMDByZzd6Z2EyemhmMDNvX3ZxMjE1Ni5nN3pnYQ==&c=b3RjbGZldG9paGxyMHl3NHJmLTMwMDYyM3U=Aa1MfO
Sample260810-nmr8hsgl21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3096	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308350778516995"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{2401E67E-6F51-49C1-97C2-CF24ECFCBC6C}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 1680	4444	msedge.exe	87
PID 4444 wrote to memory of 3096	4444	msedge.exe	88
PID 4444 wrote to memory of 1788	4444	msedge.exe	89
PID 4444 wrote to memory of 1788	4444	msedge.exe	89
PID 4444 wrote to memory of 1788	4444	msedge.exe	89
PID 4444 wrote to memory of 1116	4444	msedge.exe	90
PID 4444 wrote to memory of 1116	4444	msedge.exe	90
PID 4444 wrote to memory of 3992	4444	msedge.exe	91
PID 4444 wrote to memory of 3992	4444	msedge.exe	91
PID 4444 wrote to memory of 3992	4444	msedge.exe	91
PID 4444 wrote to memory of 3800	4444	msedge.exe	92
PID 4444 wrote to memory of 3800	4444	msedge.exe	92
PID 4444 wrote to memory of 3800	4444	msedge.exe	92
PID 4444 wrote to memory of 4068	4444	msedge.exe	94
PID 4444 wrote to memory of 4068	4444	msedge.exe	94
PID 4444 wrote to memory of 4068	4444	msedge.exe	94
PID 4444 wrote to memory of 4232	4444	msedge.exe	95
PID 4444 wrote to memory of 4232	4444	msedge.exe	95
PID 4444 wrote to memory of 4232	4444	msedge.exe	95
PID 4444 wrote to memory of 744	4444	msedge.exe	99
PID 4444 wrote to memory of 3320	4444	msedge.exe	100
PID 4444 wrote to memory of 744	4444	msedge.exe	99
PID 4444 wrote to memory of 3320	4444	msedge.exe	100
PID 4444 wrote to memory of 2800	4444	msedge.exe	102
PID 4444 wrote to memory of 2068	4444	msedge.exe	103
PID 4444 wrote to memory of 2068	4444	msedge.exe	103
PID 4444 wrote to memory of 2068	4444	msedge.exe	103

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://inuahyaart.uk.com/secure/cHRoa3ZjcHE=/cnR5d2tm/?z=b2Q9MXN5eTZhNmEyNzE4MjA3YzJfdmxfaW50ZXJ2bF8xbndjLjF4czlpdTAuQzAwMDByZzd6Z2EyemhmMDNvX3ZxMjE1Ni5nN3pnYQ==&c=b3RjbGZldG9paGxyMHl3NHJmLTMwMDYyM3U=Aa1MfO
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x24c,0x7ffe171dc188,0x7ffe171dc194,0x7ffe171dc1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,8630757434474953643,16267122234105534354,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1792,i,1911436602053358790,18200137252966695913,262144 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,3590496888760865407,3452834836068451928,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10046027465785917581,8008111720622070933,2097152 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,9485878196644300548,5121828728766901397,2097152 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,16635780423722452380,14633205446019411088,2097152 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,17091976188761202634,3019471679935222017,2097152 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,2859479114405304746,2977422968313790952,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,13110829470882152225,17747229721149197137,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,10583634045876879280,14392007099905045222,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,10583634045876879280,14392007099905045222,524288 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6296,i,5423321081633533842,2520168187102054331,2097152 --field-trial-handle=2272,i,912968193640251498,15402002377859695891,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:2068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 633f94217b6c374561a67bb8fa70697205f576eec4805168613d6d175d7fa0ff
MD5 7da1c46161a7a68609abba9b53debb57
SHA1 aefe5f547ceac2a67aad54e3b977d8bcbcd50e56
SHA512 ef69c92f49bbe8c3d2ebb1ad415cc759f5ada2c30b102156126f0dd4f314c24790ffecddf62f2a596be3d00fd7b88a6817ca4ff965934d31a282cf066ebff5a7
TLSH
T1488170B8024312AEE77D62319ED20E3C747382E8F9635F5B51A4DCB1ED95793C236488
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b002.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b002.TMP
Size 3KB
SHA256 bf7e40ef774eb8380e410433d8670320914323e17e94e1bb11a2e428a99d48fd
MD5 a387ed23b809e3991752310f737484d4
SHA1 bfdf0861174018dbf23d6e39d4f5102b8d00b96c
SHA512 e3487f7fa1296e4ed70fa1da895d57660eed3bc4b17e72614ef60ff792ad8cf727d528f74feb808e1f7a8b203142149763a7f230feb493c574f453d1cabfa0e3
TLSH
T1F58160B9024312AEE77D52319ED20E3C747382E8F8235F5B51A4D8B1ED95793C2364C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 171991aaf83db6392da30d0d8e85f0068b2e99064f731db10e204cf6da5eae30
MD5 6f487ddcf21c4171323f2c0e2782a612
SHA1 4dcfd49fdc40b6c7a0db746c1a1dab3396f6a2ea
SHA512 c1aad54b83185e1e6021b1df190e1fcbcad5777a543513361ef0362961d04946afb6ea15e86c72ad41deb8ca46ba738b3465e318127725bc999c9c9b8e317a26
SSDEEP 192:sxZ/RQkj/fXsn0ZIIdpxGD6HDs6+WNNOQ/YC2gk4+IgrJ:sxZ/dj/fXsnA5fH5V/kf9
TLSH
T11132D8166E38A93B4CCBE219FA25BF53E6F9413291941E5CE6FC951C04E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8469b734feddc5d8e57b63b2af45381df45c19f9f4adfc7c8a417f45492b43cc
MD5 e87fd92bf3839f8eb6f6ac64b69d3c86
SHA1 fa0375a88b7c3661ef6bb6734fc53f6d83258583
SHA512 6978ea7106aa845061b49dde7fabe511c76bbe7cd12d90aa593ca25b1291d71a0bba47528bc08fb118ca55d8f1854dbb1183f5424134461f095f5586fd5ada53
SSDEEP 192:sxZ/RQkj/fXsk0ZIIdpxGD6HDs6+WNNOQ/YC2gk4+Ig51J:sxZ/dj/fXskA5fH5V/kfB
TLSH
T1AB32D7166E38A97B4CCFE219FA25BF53D6F9403291941E5CE6FC951C04E6BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 742e144b1de9c613b77558540bb187ee7353fabe7bdcd18dd3196932305af364
MD5 dfa43b4f38bacd7f509fd7ab2469cae4
SHA1 8a6b73f93967d57e639f63369c8d6006fcbdcde0
SHA512 4836d8a980c03a6ca36a409fe843e83054fc9dad91e4df2dfb00e2f51fd1bee3e2c5a050d035b053807defec2498aae88191ce2358bca67fd5f63cc4f7df37c3
SSDEEP 768:5DqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrqroqC:5DqbUj+WvSCs6u1jaaZLbWrBr
TLSH
T146C2D93F340CCA7E4FC01A9DDD5A6F972E9802C7A7588D4447FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 10e439258b045340721c07dd6dd534b84074655521cbe74739103a2e55971f23
MD5 a457cc59c76fbccf8b1d1ec31f15f4e0
SHA1 547496e86113398d24b76b9d027367e090bb88cc
SHA512 e1212ab9912dd57032ac9ebff1698f1c6f41735ea0cf6d9688e0a7920fde033cccdea274f47f7a2ef824e370050621be27eaa87e2ae4026ab7545151f416cf39
SSDEEP 96:KlkdQ0uS+gyKHzssgK01s2gA8s3WEtGZiKCo9UAKt6mn:2kdQ0uS+DKHQsI1s2r8s3WEtVN7n
TLSH
T1F291305135BF0A053CBE3508A659DA364F41B1AB3659A4BF3BB800B21F67E112CFC9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 529df0ce336161338f8d15c8e20104e256b8eec21a2218e0826231ddbab3ad95
MD5 013abb4843852a0f997b7497ce30abbf
SHA1 1514e9cf89153dbd83fb263f3eab59bc3205d810
SHA512 cddd6537442d95b1fedba5ee61cd20e56eea6cc15a6e26d3a50b6fe5c296bfc8004966a324ceaff3ec97afe4f2924b89c615dcf2d6c02a444d4d502736f5c4cc
SSDEEP 384:6ZcIhsNERaq2o9K5Ea+mOByuv++UD6HlytEDq1zCUa:4hnhISabOAqxUDoy6DqJa
TLSH
T154928D3555784C336EFBA185F48F3A179EF8812BD6C96BD8E6DC6F1C00DA5A8130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b0931aedc43d2bfc1531f90dc774cd5f30d70526945d3f61dfd88549fcd27bff
MD5 456d29013b87ac618435503811b3e26d
SHA1 70bcb32ee323776fe3b193057f6278d7a4e55d5e
SHA512 baa737a155b6d59b681afe1e5e70df3058572099a28f3fd87b94013bcd0fa91aaecbfa864d824672d9152cd5db930023cabc981f2e2335990fc2a40d80014ad4
SSDEEP 192:UONl6DbfQmiUyoi7Ba+jqOmWtmtuv++xNzrqEU6:UONl6Zk7Ba+mOByuv++HDU6
TLSH
T18D122B3A683C9C775DA2A584F48B36179FA8412BDA4A7F94D6DC2F0C00DF65C230F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1a2608976283ce6c086d725d4cec2d2c0e4dc24098b053b5702e08adcb9de618
MD5 01d4ee0c9dc9c78d4d36f38ffd4d281f
SHA1 60564afde168539d2e995a35a33a0277a04934f7
SHA512 071a60b6e8730737ad09b1e24eebb34aa8517d33ef812cbc1fd0051e478ae527dbafdd8ffbe4604fc7e09fbdce4154235899306fe7442ac2bb82ef555d437f64
SSDEEP 192:vONx6Db6QmiUyCiHBa+jqOmWtm7RgUIU6:vONx6uyHBa+mOBHNU6
TLSH
T1ED02E83969786CB79EB2AE49F48B37275FD4107BD9562F84DAD81F0C00D765C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3b7596d067439de42d93a2fdaf7574e2ff6f183c262cd70eb48f7858f8385deb
MD5 faebefdbfd28f18f4f9ad64aad759fb2
SHA1 34cf376c569747d63683ea774d8606271762ff47
SHA512 6cf59fc53405130ae684295b6f642c2876500fb5a099a4d34cbc09ee825936270ea37f2085416f856a01d52638c113697e0398663fcd6d615a20101a5308fb25
TLSH
T1D2412A5DA6F91148B3B76E5E9BF7A86E44BEB9732E06D45D00110D4E0A63A00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads