fe321637ca47853fa005ee372bb8e0f37715ce7e9f11f24bbe23085a69593919

Analysis

max time kernel
121s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c.html
Size 52KB
Sample260812-1tyebseq6w
SHA256 fe321637ca47853fa005ee372bb8e0f37715ce7e9f11f24bbe23085a69593919
MD5 fa66ade4c188cf79cc5842b4ee92451e
SHA1 b7d1302c22a1558ece555c42d43cbfca79e18b2a
SHA512 3a1822fe3caec3198b444211279111c62b2554972e80325594c7de015f47819e0a505d6b7bb98d22f4595b968a626ac3c4795025d54ac686ef57b6a7d4146f2e
SSDEEP 1536:1Jbdi3OTyTVG0A0OH626RviLKmJbdi3OTyTVG0A0OH626hgYmx/k:vdKOTyTVv5OaNRcdKOTyTVv5OaNuYQk
TLSH
T1FF33E16A1A036C303573619FB9524756B67BC205C41362096BEDB282D0EEF85846FFFD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1292	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{D615F58A-C96E-4872-9F84-FB1C3DCDD2B4}	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
820	Process not Found
820	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4712 wrote to memory of 3108	4712	msedge.exe	89
PID 4712 wrote to memory of 1292	4712	msedge.exe	90
PID 4712 wrote to memory of 1568	4712	msedge.exe	91
PID 4712 wrote to memory of 1568	4712	msedge.exe	91
PID 4712 wrote to memory of 1568	4712	msedge.exe	91
PID 4712 wrote to memory of 2732	4712	msedge.exe	92
PID 4712 wrote to memory of 2732	4712	msedge.exe	92
PID 4712 wrote to memory of 4700	4712	msedge.exe	93
PID 4712 wrote to memory of 4700	4712	msedge.exe	93
PID 4712 wrote to memory of 4700	4712	msedge.exe	93
PID 4712 wrote to memory of 3168	4712	msedge.exe	94
PID 4712 wrote to memory of 3168	4712	msedge.exe	94
PID 4712 wrote to memory of 3168	4712	msedge.exe	94
PID 4712 wrote to memory of 4500	4712	msedge.exe	111
PID 4712 wrote to memory of 2156	4712	msedge.exe	97
PID 4712 wrote to memory of 4500	4712	msedge.exe	111
PID 4712 wrote to memory of 4500	4712	msedge.exe	111
PID 4712 wrote to memory of 2156	4712	msedge.exe	97
PID 4712 wrote to memory of 2156	4712	msedge.exe	97
PID 4712 wrote to memory of 3048	4712	msedge.exe	99
PID 4712 wrote to memory of 2816	4712	msedge.exe	100
PID 4712 wrote to memory of 3048	4712	msedge.exe	99
PID 4712 wrote to memory of 2816	4712	msedge.exe	100
PID 4712 wrote to memory of 2124	4712	msedge.exe	101
PID 4712 wrote to memory of 2124	4712	msedge.exe	101
PID 4712 wrote to memory of 2124	4712	msedge.exe	101
PID 4712 wrote to memory of 1228	4712	msedge.exe	102
PID 4712 wrote to memory of 1228	4712	msedge.exe	102
PID 4712 wrote to memory of 1228	4712	msedge.exe	102
PID 4712 wrote to memory of 5964	4712	msedge.exe	105
PID 4712 wrote to memory of 5620	4712	msedge.exe	107
PID 4712 wrote to memory of 5852	4712	msedge.exe	108
PID 4712 wrote to memory of 4144	4712	msedge.exe	109
PID 4712 wrote to memory of 4500	4712	msedge.exe	111
PID 4712 wrote to memory of 4500	4712	msedge.exe	111
PID 4712 wrote to memory of 1536	4712	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\c.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffa962ec188,0x7ffa962ec194,0x7ffa962ec1a0
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,18438939375659407920,11527626025695108980,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,6832956538287156087,670076201792407181,262144 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,18031194278650647384,5518522174567149252,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:13
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,4113383869006294347,8748917107248795695,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,17954528505886449863,12355305098007283222,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,12181148270657825153,4357293299023297053,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,5022051445097437254,15534302051530820202,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:9
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,8485212076483085442,8999215955893072658,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,8027590971655296842,8100009662315269072,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5644,i,6762785185636027317,806523489654994870,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4924,i,4946049819358752023,4890775607795048812,2097152 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,1505256443910855279,11309074658306472170,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,1505256443910855279,11309074658306472170,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,17760831417050845335,12016693077969296699,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=828 /prefetch:14
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,16657064420679789708,17771062713273622931,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,4407590161832178991,2694429480163315903,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9847501137246008672,14282570975577427158,524288 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3628,i,14048212574525019467,10751920556097798563,262144 --field-trial-handle=2520,i,2707402991377074337,17711123135007320994,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:10
  2⤵
  PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0fcc25d46a57ffb557ed4d5e24e027934fcd8aa3fa9d1979cb99f3bde47d822d
MD5 b5f90a910d97bab4a098748e6d986433
SHA1 6e65fd0d7452e5ce96daed31208253032d28568b
SHA512 5fe8e8f8b38aa7e051fd060138859c65c30ba3bd48b78a295062a84e94755f44fb83a15255530634b9009d0f67298df9a3e1df32645de7b2dc512540b730191e
TLSH
T11061D55623634DD1DF7744BD52E96898FAF4A895093B2EC06054BEBC48C6F5BC0C32A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599b1d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599b1d.TMP
Size 3KB
SHA256 dada63c2bebb1126de5707ffff4b1036c94d6db80429b50ad188deee93cebdf1
MD5 8b0c88929e27c37d56273fbc14a54169
SHA1 87b6c28f7230e3aecfcac835e0f60d10e86bbba5
SHA512 2eec7cfba746002b7fc8d368e449bf85f56a1575d0e6c2004e00598c8ea74b26b143fd51a60ecc9867eb1f3266e40d4277052d06efa7cc771852c63193821547
TLSH
T18861C45623634DD1DF7744BD52E96898FAF5A895093B2EC06054BEBC48C6F0BC0C32A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1de02d2fb863085d204baf5aaef763c64211c8c562926533d7197c7963b2b52a
MD5 5ac981a8aedf57d1335c68544b3f9385
SHA1 b13fe193808f194e757ff0b74af53b4344d20bca
SHA512 85767141168edbc2bd65e84b7b3572c5564ef4ab904dcfacfe94435d613e2285e66f92b627e136ea325d8f4cb629d2db2bf0532eddc2f8a3c3b3999a0efd5234
TLSH
T135518EF7C3E4877E991156F09B246E2BCE1D051A422C3C66C9E4EF5B63E2471D10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c6b31126bb79916a863c568f09f4f4f2211b21b3a13718e144834dffd87dd527
MD5 9dc8ef66e2a509de9fee17269ed9a4fa
SHA1 799a9743eacebc9e3ce9eaed1a698bc258911f88
SHA512 e953e21c883512168136317e2f85a7c9c1d96cf6aede012217bee3196d2ef4fcf7a0695381f2048956a1a4aee8217cf6d35a0c4d9880c2c39da3a7d3df5b61a1
SSDEEP 192:sxRfKRDb7Q/f9srhprQ5aUzoA8p4N/g6+WNIYn8ZhlGTIgDgJ:sxRiZc/f9srhVg/5ITzcg
TLSH
T1C332B7156928A93B8CCBE25DBB55BF53E3F9503261D51E48A7FC8A1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2cf319197b3508195203f928b765dd115c5e9010fd075d20c818c150892f52da
MD5 acc64c12ef6bd7cfb29f55fef52a31e2
SHA1 1a8693b56d16161a940a26a2753973ad66556e0d
SHA512 90d81f3c7b35c49b4f08437d2279725e0c0795c53d3c9bbc78d92ddaa7707753258adb230fe4edef58b76ed53ca994bb8c0d5fa75c5ae4030f9a81aed979e607
SSDEEP 192:sxRfKRDb7Q/f9srUprQ5aUzoA8p4N/g6+WNIYn8AhlGTIgD4J:sxRiZc/f9srUVg/5ITWcY
TLSH
T17632A6157928A93B8CCBE25DBB55BF53D7F9103261D51E48A6FC8A1C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a5a0a0ebc326f98ea1f0707a60462239a6531bed7168dcf8fc2ebe0023373b1c
MD5 3d653ba3d6b580624081d7009a794ce5
SHA1 3225ef5cb5a4db08fd3c0f091efe136b8c6cdd9e
SHA512 1572799db75eb191173362750cad523e84bf02e4653cfd31c96b8c6996568580005acb3d4b0b9a512418bb205c9a1a460a1f1c1659208ab06e249b8ab2449ac9
SSDEEP 192:sxR2KRDb7Q/f9sXUprQ5aUzoA8p4N/g6+WNIYn83hlGTIgQJ:sxRtZc/f9sXUVg/5ITRc0
TLSH
T11E32B7156A28A83B8CC7E25DFB55BF53D7F9503261D51E48AAFC8A1C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 273161e54399c8cca54088f5ececb011d9b0e6cfeb520c2bbd9b74c451fe6361
MD5 d86710d24bb98be2e623c53d4626ed19
SHA1 be45acb5fedfaa82cac030a0140cec867d1ea811
SHA512 22dcbc4457712dbad06bf5935b2b3f95a220216b78d46a685d0373bfd10be3a5ed8db7db7bb4dad8c2e1fc2879ea39317ab01377e566be5c997e7cd51749e094
SSDEEP 384:wum8dzAfCtgoSFfmMKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP0roh5T:wb8dz6WgoufmM8F1+UoAYDCx9Tuqh0Vi
TLSH
T176B2EB3B604DCB7E4F800AADDC19AFDB6D9802C79A988D4447FE990C03C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 1e808f0da1da351d2a06186ab8bb4b0aa107a68072945716010ea4ff3f1e796f
MD5 e935def1a994d4633d419a565ba4a918
SHA1 3e89c3a64edbe4c04216069c8cb6d1b0f2779282
SHA512 8b2464190e014f710ed2126f24b9af0f664480e3b914bb53a711a93c9926d9ab1faa970d0617e2973a94b9126d60396e7fffd6c186d3d4ed285f14b5bd5b54bc
TLSH
T1C1812105357B16403C7EFA4D84A9895F668678733129A62F3BE941B50F6BE028CFD8CD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 5241e094f62876de3e35e545b14de931b6409d21f1d4aa53fb1cf910b8840a07
MD5 699da9d09da47dba05f9608f5fb0ddba
SHA1 8d6898bc322253c0d4ad96973a3b64e8bf9ef989
SHA512 706593df71330872e88b55080746f4a95e19a40de18e905a56f1caafc8d725b3deadf3ee23cfd739fd2f76fbd4bcc495316dcbb1926a7e8c88b666a0c3c547cc
SSDEEP 96:KRklQUuSW0Wyf/gc0K4xgW0cUUfO0pH7kh1DZpVW9yogdVK4kgzVcbDJtChtnfvj:CklQUuSWLyfocIxgWbUUfO0pH7kh1DZb
TLSH
T1C2B11F05357A06503CBFB94D94A98A6F62823463302DA52F3BE951A50F6FE064CFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a34ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a34ec.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 489976632fc66d0c19f7ec6758e4fbf6dde06a6e0fb5e9d9868e915898da868f
MD5 4e81adde2e223bfbf69543482676cf6b
SHA1 bdc9ee7958694afb0f9994a6fc61995f4de3ca83
SHA512 db4bbf2600b7eee3f7410595257e3e3276434e6d9d62ff1bf5fd9b91821b44eb9a3fbcd015ee3ff76163922217493e2548054135a6e6032d0fc1d29511136f6a
SSDEEP 768:grv+4UNbda3zADZIO0ZQRIWsKNzc4ReyIsPeTZ:gbsbA34IWsKtc44bsG1
TLSH
T1CB03BE32B8289973ACFAA281F1473A93BFF4515B82D51A94C9DE1F4C468F5DE131B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6f34f07c309b18ab70707fdf1cfe43a512c05f6e82f679183d4997650ce8f9ae
MD5 2b4b26e9cc20be08b5a1bba9e5d22a89
SHA1 65e52c65a5b4e494582b532f363c90018de919fa
SHA512 91a15721fc0f59b5923213eedae23c2ba30fa8d13ad24c71fa2eed0546d55bc8c06f785093ec81a3d84d122f202d1ea5a49a789404a6e1e4d1efec56ff5f6f45
SSDEEP 768:6rv+4UNbda3wADZIO0ZQRIWsVNzc4ReyIsPeTZ:6bsbA37IWsVtc44bsG1
TLSH
T17003BE32B8289973ACFAA281F1473A93BFF4555B82C51A94C9DE1F4C468F1DE130B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dc6548216340e5949953cd80fb2840a85723ed81b7f3920138547f3b11a98ec2
MD5 294175093b78ad51f05b1497c9f26866
SHA1 6ea4ae9fe9ce6ea85547f97c67bc473e2853a35c
SHA512 228fd6cad2b2f2ba2565f9455f17170d475265c336bc2ab58b870fee97af35b943404127e5183065c7c8d7c2919a1b8d4fd02b276b7ebab31ee8748e5296cc8d
SSDEEP 768:4rv+4UNbda3zADZIO0ZQRIWsVNzc4ReyIsPeTZ:4bsbA34IWsVtc44bsG1
TLSH
T17C03AE32B8289973ACFAA281F1473A93BFF4555B82D51A94C9DE1F4C468F1DE131B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 36a86fe5657702d2e4d380d33ab1816b219c885ed60a9fdb4449a923e6a7877a
MD5 f95ee78729f6e0aa3da4147c0f4903bd
SHA1 b45121f22d6a77bbc2358ea283cfd725844acdd6
SHA512 4343a5cfe7c2db6403e5229163a0165b601803b151093bdfd9c11225fb8f5ee78313d01e44ebc0bfcd196cf107f419a12e61e5112ea5c83495b79dbb71bc03b0
SSDEEP 768:lFyrv+4UNbda3kwgKADZIO0ZQRIWs1Nzc4ReyIsPeTZ:mbsbA3SIWs1tc44bsG1
TLSH
T1BF13AD32A868D977ACFA9A81F54B3653BFF4415BC1956AA0DADE5E4C028F0DD130B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 730ac5ac59e8889b9f1ff6abcdd493072892fbe7ee09984eb335fa8dc850eb2b
MD5 0f2a9b08fecf4726bb201f3a18cb1799
SHA1 422855d27bf8f75d2a76096d5893cfdf8a63bab8
SHA512 6d8a50564a6a8b2bf3a30f92f9c18b846076cd96e3876d1bde4819bd307956470a66f44f2102f0cac4ca06dc75bbb0ea32c4c272b600c1e41ea6d68c86efe7e3
SSDEEP 768:lFWe3kwgKADZIO0ZQRIWs1Nzc4ReyIsPeUn2up8:6e3SIWs1tc44bsGU228
TLSH
T14403AE33AC64D977BCFA9A82F54A3652AEF0516BC1D9AD94D6DD9E0C024B1DD030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 704bd08df5b5f90de4fa8e32d45d73e52e2626467f7637910be0306a11b3b08f
MD5 866cc9fc56f2cf604dbe127cef23eb52
SHA1 4c01e9b9cc345a9cc899df0b27bd1ca4e52c3d9f
SHA512 19ef53d3655526ba826b66d626155287ae959ab0384735e98bce14be50cafa19ec21c9e180e2ab8e6c1eb73f12b6093aa16a98acc3bac3ada3a90c5793152c17
SSDEEP 768:6rv+4UNbds3+ODZIO0ZQRONzc4ReyIsXzeVH1S5D:6bsbS3jOtc44bsjEH1Y
TLSH
T15503DF32A8788A77ECF66686B14B76537EF8512BC2D81E94C9DE1F0C464B5DD130B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 77a16256ec5eeb862092418b06056539f97edf43fdf50730834d336b8104ad6e
MD5 e6ea47f4aebcc82d68d5db89d8ac192a
SHA1 59864cc732a73c3fbd1cff9373ee8b03752e2ebe
SHA512 564538328e61e2305d9abcd135fe6a231e4eb7066d5a0ece63df5cea619f94977da5e2a1f1b963af4df77cdb0b71f4b440e2f168d7c009b21292591540438279
SSDEEP 768:Prv+4UNbds3VqDZIO0ZQRIWsVNzc4ReyIs2eeVH1S5D:PbsbS3MIWsVtc44bspEH1Y
TLSH
T11103CF32B8689973BCF69682F1473A537FF4921B82981E90C8DE5F4C468B4DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efa5076d-4282-4f23-a422-60e2dee82570.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\efa5076d-4282-4f23-a422-60e2dee82570.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads