hxxp://unpkg[.]byted-static[.]com/byted-ucenter/ttwid/3[.]3[.]8/dist/pure[.]umd[.]production[.]js

Resubmissions

12/08/2026, 09:45

260812-lq41dateph3

12/08/2026, 09:22

260812-lca55stcnb3

Analysis

user interaction
yes
max time kernel
120s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 09:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://unpkg.byted-static.com/byted-ucenter/ttwid/3.3.8/dist/pure.umd.production.js
Sample260812-lq41dateph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2908	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310015299714693"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{D11B24F6-8EA6-4238-9EBE-E0E86BBAAD61}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5892 wrote to memory of 5172	5892	msedge.exe	89
PID 5892 wrote to memory of 2908	5892	msedge.exe	91
PID 5892 wrote to memory of 6084	5892	msedge.exe	93
PID 5892 wrote to memory of 2240	5892	msedge.exe	92
PID 5892 wrote to memory of 6084	5892	msedge.exe	93
PID 5892 wrote to memory of 2240	5892	msedge.exe	92
PID 5892 wrote to memory of 2240	5892	msedge.exe	92
PID 5892 wrote to memory of 5704	5892	msedge.exe	95
PID 5892 wrote to memory of 6020	5892	msedge.exe	94
PID 5892 wrote to memory of 5704	5892	msedge.exe	95
PID 5892 wrote to memory of 5704	5892	msedge.exe	95
PID 5892 wrote to memory of 6020	5892	msedge.exe	94
PID 5892 wrote to memory of 6020	5892	msedge.exe	94
PID 5892 wrote to memory of 6052	5892	msedge.exe	96
PID 5892 wrote to memory of 6052	5892	msedge.exe	96
PID 5892 wrote to memory of 6052	5892	msedge.exe	96
PID 5892 wrote to memory of 5344	5892	msedge.exe	97
PID 5892 wrote to memory of 5344	5892	msedge.exe	97
PID 5892 wrote to memory of 5344	5892	msedge.exe	97
PID 5892 wrote to memory of 4716	5892	msedge.exe	99
PID 5892 wrote to memory of 4716	5892	msedge.exe	99
PID 5892 wrote to memory of 4716	5892	msedge.exe	99
PID 5892 wrote to memory of 980	5892	msedge.exe	101
PID 5892 wrote to memory of 4924	5892	msedge.exe	100
PID 5892 wrote to memory of 980	5892	msedge.exe	101
PID 5892 wrote to memory of 4924	5892	msedge.exe	100
PID 5892 wrote to memory of 4332	5892	msedge.exe	103
PID 5892 wrote to memory of 4812	5892	msedge.exe	107
PID 5892 wrote to memory of 5908	5892	msedge.exe	108
PID 5892 wrote to memory of 704	5892	msedge.exe	109
PID 5892 wrote to memory of 3868	5892	msedge.exe	110
PID 5892 wrote to memory of 3868	5892	msedge.exe	110
PID 5892 wrote to memory of 2132	5892	msedge.exe	112
PID 5892 wrote to memory of 2132	5892	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://unpkg.byted-static.com/byted-ucenter/ttwid/3.3.8/dist/pure.umd.production.js
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffc3e19c188,0x7ffc3e19c194,0x7ffc3e19c1a0
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,9009789382259157287,833962791489575706,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,1111326821127507290,12825054103220503205,262144 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:2
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,18271857074001268866,6302568277070631759,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:13
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,11393319685242561474,13734699657856190443,2097152 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,4385993600756935213,8977895355789034904,2097152 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,4300678085483228427,2500607712161380830,2097152 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,2269224994956378006,5175080559085422142,2097152 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:9
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5232,i,3848868534813039224,11918558786620656036,2097152 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,7018993175914719657,5462461138777764815,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,1570739278330822709,18140350655819124767,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,302403422150034445,6964979646486523505,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,302403422150034445,6964979646486523505,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,13692661970868796813,9283020177829436821,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,8816652621848123976,8308873336464104429,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:14
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,16431757063900751940,5076429376936294176,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,3084851242517010462,6810464975747345046,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:14
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,2014676652144271601,6145216845256681348,524288 --field-trial-handle=2836,i,6011981314311777999,3752138064122899857,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:2132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4579094734af738a670db36af59b411ebda8819c97db21fd6e72a0dda49e2cba
MD5 75f9f2a993e59ae882dc107a02fe41ca
SHA1 a26c804697be5118d1ae38c64c3067c4e0b7e976
SHA512 6be51fb7c80c29faeaa6b96ebbbb6ba69f96d57c51aab7c9ca6b4aed30fccaac6137b43fed1523b8684f8c2163572cc935b03a548d5f823bd6b704bf91cb5c1d
TLSH
T1ACE07DC465CAC6AEBB48E4976378632E82A1360BD2C8BD0A37448CCC7205D48FBC36D1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5930661a59fb965e37b1c4cb1774bcd700adde37955b92ff04ba86c8cbe42e7f
MD5 f4f021d05ba1971a36f25d59c2d7ff3a
SHA1 e6c2f0ba8f2a47388c570bc25b34bd1a9522bbfe
SHA512 db4b982bb93e4bb6f4cdab4a2bfe3505bee6865cc86945c1e6b5e8c631d7b0283c535fa43df099ec15963af9c4e49cfade01878bce1e1beeebcd08a562b4cd06
TLSH
T1E35174F6B3F714D2C3F4A3B1ACD196983B74C43A35376FD2605A25709A873C45061062
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ab2a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ab2a.TMP
Size 2KB
SHA256 0bb32c290782726f2c6af17c302bc57a0a1a4936cc376f560675cc6e69ae2179
MD5 7bbea526da75f3b340c1d2e0ba80f658
SHA1 3530c40d7e5add83791df1b46037502ce2be89ca
SHA512 fb2e10156b9150b337ee7de23e144bb4e90573e6f5e19c390db0bcc5177d4d2ca1da6da26ef02067e278e8a4fd7d57ec6940bcdfda22acefa7a5fa9e898f0e13
TLSH
T1D15172F6B3F718D2C3F4A7B1ACE097983B74C47A35376FD2605A25B09A873C46061022
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 50c35b8a8128bcea2bf222c26afbef8c7ec8f0a83275f3b2b9b303bc5450f0bb
MD5 7788f7d98546c5161639a5b55d6a6add
SHA1 4965ea0655592c3f9b7aa8943241551b6bf82079
SHA512 f828c8aaa30f8c3ec62ea41e62e0602045a476b78b80bf7869399e09936aaa1fc91d535cb58415255f3134bee4c78ad367630adae0307d585bbbce4a979a2a52
TLSH
T13431A0F783B4957E9A1196F0AA18AE2FCF2D0511431C7C6AC5E4AE2793F3461E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d731cdf940f06002dccfc059dc7565c7a1ec8f97ce320ff6b2fe3c9d3fc38007
MD5 535107b035aa7fd37bb596221ba3b810
SHA1 c87b6d3dd5e0ee4a63ed4ebe69b540ac965df35a
SHA512 af2a23063e1098c4995efc52ef2a349d881198856a2d5018c660461aa4e70ce4babb4b402beb57c4d69bd8c75ab88c353b0d982ded1c20b161b563050c8b2aa3
SSDEEP 192:sxRhRtbw/fvsZ1HFSanzoA8pY9/g6+WNxI2/YbSaZ6gGYIgIJ:sxRhjw/fvsZ1lSaOc/5T/y6As
TLSH
T12432B7566A28A97B8CCBE21DFA567F53D7F9103261946E48BBFC860C04E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 41e6aaa76115bf750d8d435eecf5670ec95f7b282fe6739434d80c194d8942c2
MD5 e5767c5f19bbc3ad44292588e71fab83
SHA1 c0b03c411357c4709f84f6a4eef3b3dba3df521b
SHA512 4bfadcdba41aaa7ae37be86297062bd1f1e2ebf2a198a234963ef37cccfa8615ce1f37832b172dd72e98b03eff5ffcafc29933d003c6993a6dace641c92d57b8
SSDEEP 192:sxRSRtbw/fvsyhHFSanzoA8pY9/g6+WNxI2/YbzAZ6gGYIgDyJ:sxRSjw/fvsyhlSaOc/5T/R6Ay
TLSH
T12742C7566928A97B9CCBE21DFA567F53D3F9503261905E48BBFC8A0C04E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f833bf7a511f2d7b6de8ffd925df6770892f2128f1a36ba0fba6b75a89919fae
MD5 deaedbb2dee63cb11c13ff63303badaf
SHA1 fb04b5d7ce47ce9544cb1e79a9eab14f6790e491
SHA512 c19b5ecf80bd4b66cc62a6316660855118c18b765ba0cbb6b7da2605f506efab91f042c135fe5b1e1ea56c6e616063b486bec9d7adedf8dc09402235cb17cb85
SSDEEP 192:sxRSRtbw/fvsy1HFSanzoA8pY9/g6+WNxI2/YbSaZ6gGYIgDQJ:sxRSjw/fvsy1lSaOc/5T/y6A4
TLSH
T11942B7566A28A97B8CCBE21DFA567F53D7F9103261945E48BBFC860C04E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ee00955aa3f864a846540594d82c7c200dbf83a691e6098584bbfae912703c1c
MD5 622e40068319ef77050db912bca48aa2
SHA1 0e944e93ab8f5664e667939bce0da3c1b332ecbd
SHA512 c4bf65b5e340fbdd52d6e7de96b331d9091310b7611773e3699d6f2cc9d69a7ea69397cd7cb2424da73b3206951d364530ce2283b8734b4cfa0b1a1e5364d3b8
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFNroAoJ:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0V5
TLSH
T1D7B2DA3B200DCB7E5F800A9DEC19AFD76D9802C796588D4447FE994C02C77FA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d1eb7ea3-178e-4ec0-a392-207c6bc044f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d1eb7ea3-178e-4ec0-a392-207c6bc044f5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 94a04c57d297e072f98f26b1395eae48ef8aca70f550cc96879acb11a67d38d0
MD5 d1e7882df692039a706167e61d035f3e
SHA1 b5ffed38e96eee46781b8f352b25f7aacb88994c
SHA512 e42ecad5e147376ec2b8f20bae138af68745925c957c917c36d788093e5890d6a49dc679bc94c8b11f4d37850bdc111a92f3e516414eb115d8dbe8b8a4d73e58
SSDEEP 768:/W3PEMBqobGRitZu4aWADIidy8Lu98pJ/rhh:/W3jtZzaNsuVLyoJ/rhh
TLSH
T1D6F2AF75FC565EBB8CAAA284F1833903AEF8D163D5C85A955DEC5B0E00C75BE0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f8f899b40c908d0e6f7468a6f806b170ba7c9030cfe8daf1814cc62a9f7761e8
MD5 a88fbb8556f32a04589c8e7050c85bf9
SHA1 54b240b59fc50f0adedae3a32923a35908f28259
SHA512 1aa791feedccb4fa184eb36f70f4680e010ac2f7a369edb0b14333969bf9fb36afe08221fafabf8956c32601664b958769d387fde2e6542f8d327bf66818d25d
SSDEEP 768:nW3OEMBqobGRitZu4aWADIidy8Lu98pJ/rhh:nW3itZzaNsuVLyoJ/rhh
TLSH
T1C9F2BF75FC565EBB8CAAA244F1833903AEF8D163D5C85A955CEC5B0E00C75BE0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2156f9b76d4400ab18b44ded50b4db1d96672c1ceb91ac3ec3acc89d6826b226
MD5 4ae5e9596b90da1a70745039f1cf75c3
SHA1 490bdd595b5a788a8953c72295a2d87c28fb1dc6
SHA512 bfcad6c46b2f46b130f5d36e7d9fdfd0468e50dfacc0ebfb2ec14ba7a87b2f97b82875ff77f650bdbd9942b03b0fc05960a1aab8e7371568553a67ae1cd079d0
SSDEEP 768:xrv+4UNbdZ3d3MBqobGRxtZu4aWADIidy8Lu9TC:xbsb73rtZzaNsuVLy2
TLSH
T16903AF76F85A9A778CB6A180F1877903BFF4916389C90A949CEC1B8E01DB5BE1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 065fba08e9d79bba9b3925816cd42ee814439a3cda9628d11596b7914c1de126
MD5 3f9307331b5928c6604589de1db57487
SHA1 06e4de11d4af51a7439687303fa06a1b08ca4653
SHA512 4c182730944424f31ba0cd3467b554f9e3d257425e6332d7a0c59f86ef4908812358ce80a5ac4af795894403750598e1cc0f5f4264a3bbfed5deefb75e8c31f4
SSDEEP 768:5FQu3+wgqRMBqobGRItZu4aWADIidy8Lu98pJ/rhh:4u3QtZzaNsuVLyoJ/rhh
TLSH
T121135AF698C7897BD8AE5747A37E2D029EBCC163B48855907BD85A0ECC861BFC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 86fc944d5018631b02a4f20729d98c8605175c64d4e3ab2d49eaac089d0ed8bb
MD5 31b283545d26aaaeb1576b65fef4fae0
SHA1 77943dd735a07c69905f3b0f1ef0b7f8c0dbd12f
SHA512 d8a9e71ff50e3e46644c2d36e4b96ec163aa60b9579e332999b0c029df809bc7689569c55b4d0c2cb85f075cfc3e57af7b8b4a5220ed4734d43d46548afea34b
SSDEEP 768:9rv+4UNbdC3buhBqobGRupZu4aWADIidy8LqOeVH1S1C:9bsbw36pZzaNsuVL5EH1d
TLSH
T1D303BF36FC598A779CF79284B1877A077EF89263C6890AD088DD1B4E42DB4AE1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0f8e45dfd989531434d81c56f1f5c6a228941944e199ccaeb8c93c705250a19b
MD5 87e1e7ad1eae03d5498162dc59f4689d
SHA1 27d2a68610c4c1486c20469abfd2bc394146e5fa
SHA512 b21d3d5d82b4b1e38d493fe924c7d0c8a3f9aaa23a1cc1672c87f1ccf4d52a75315aca261eefb7c7a819a4e86bcb4774073542920abafbbb37dac2b5e54d570d
SSDEEP 768:Nrv+4UNbdC3qbGBqobGRltZu4aWADIidy8Lb9eVH1S1C:Nbsbw3ctZzaNsuVLJEH1d
TLSH
T16403B036F8599A779CF76280F08779077EF89263CA890AD098DC1B4E45DB4AE130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads