dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260818-aj3cess1az
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1100	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314857334774323"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{3BE203B1-69B4-4704-B076-01BE45A25D73}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 4324	2948	msedge.exe	88
PID 2948 wrote to memory of 2840	2948	msedge.exe	90
PID 2948 wrote to memory of 1100	2948	msedge.exe	91
PID 2948 wrote to memory of 2840	2948	msedge.exe	90
PID 2948 wrote to memory of 2840	2948	msedge.exe	90
PID 2948 wrote to memory of 5356	2948	msedge.exe	92
PID 2948 wrote to memory of 5356	2948	msedge.exe	92
PID 2948 wrote to memory of 2376	2948	msedge.exe	93
PID 2948 wrote to memory of 2376	2948	msedge.exe	93
PID 2948 wrote to memory of 2376	2948	msedge.exe	93
PID 2948 wrote to memory of 3712	2948	msedge.exe	94
PID 2948 wrote to memory of 3712	2948	msedge.exe	94
PID 2948 wrote to memory of 3712	2948	msedge.exe	94
PID 2948 wrote to memory of 4548	2948	msedge.exe	95
PID 2948 wrote to memory of 4548	2948	msedge.exe	95
PID 2948 wrote to memory of 4548	2948	msedge.exe	95
PID 2948 wrote to memory of 5876	2948	msedge.exe	96
PID 2948 wrote to memory of 5876	2948	msedge.exe	96
PID 2948 wrote to memory of 5876	2948	msedge.exe	96
PID 2948 wrote to memory of 1088	2948	msedge.exe	99
PID 2948 wrote to memory of 1088	2948	msedge.exe	99
PID 2948 wrote to memory of 4100	2948	msedge.exe	100
PID 2948 wrote to memory of 4100	2948	msedge.exe	100
PID 2948 wrote to memory of 5484	2948	msedge.exe	102
PID 2948 wrote to memory of 1712	2948	msedge.exe	106
PID 2948 wrote to memory of 4708	2948	msedge.exe	107
PID 2948 wrote to memory of 3596	2948	msedge.exe	108
PID 2948 wrote to memory of 2044	2948	msedge.exe	109
PID 2948 wrote to memory of 2044	2948	msedge.exe	109
PID 2948 wrote to memory of 2864	2948	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffc4b38c188,0x7ffc4b38c194,0x7ffc4b38c1a0
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1964,i,2115860459971234256,2461984935394745043,262144 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,3061891862690590208,6084229942376409644,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,11493014090391877703,15625664779704058990,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:13
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,2436354512002245892,4121292085682898411,2097152 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,3187255298762143877,13454181658886271998,2097152 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,7233577389554193381,17871783825454032675,2097152 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,6347401450518911312,13089988382903779390,2097152 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:9
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,15585128442140958631,3262080925135970558,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,2832433247310400050,14342081328376771282,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,64775331316074380,8242531665793792542,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,64775331316074380,8242531665793792542,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,6742950576873931312,3590210688209656836,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=1240 /prefetch:14
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,17637137126406182770,9436452681048002487,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,5482223495578920141,6537105588798084437,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,1118250644195640770,4174257629467439308,524288 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,928322970596970601,13362592489680455345,262144 --field-trial-handle=2640,i,2321856498087033214,16117729451582890056,262144 --variations-seed-version --mojo-platform-channel-handle=820 /prefetch:10
  2⤵
  PID:2864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3fcba27920ed6018b3f9e8a9d95be8bc1f0ee059760dcb4bb8593793b8a756e0
MD5 2b7adb1071d0a57a0e9446456c2ea226
SHA1 aa9eb9e5f46f44de1f04f8d958d2f18bee10e9f2
SHA512 befcf11ea7b3cd817a27e668963dd8e494f529c6941a93d3f6023882623b3118cc6ba68b9e1e4de7d3f6fa5f6aef879768b84f1cb11e2e416c3a3875893779be
TLSH
T1265131140322AAC8F7A14FBBF0D09266F2FD864B05476E9A80725F351E0EF4C1ADA023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598e7b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598e7b.TMP
Size 2KB
SHA256 f72cff4de95b0812bb49332620e102a94a961b36249442ebb8dd3d33f73d7594
MD5 73b625956aed613fcb89ae8660ab3afc
SHA1 5a290c5309cba26a2de368e23c4b93af62e0517e
SHA512 db66b298dc02b31a6743a092c155589966e75d8cbc825c58e04937cf6c3e8ae5ce7d52e3c76aaffb79d1ea1d4ed1e2c9a92c602ae20de494d3e6ddcf207a440b
TLSH
T1A45121140322AAC8F7A14FBBF0D09266F2FD964B05476E9A80725F355E0EF4C5ADB023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3cb34e37b4972dfb007bf6582c834d0b8554f5aa01c1640198f87563d7ebbc94
MD5 5e4cb544a07a10486c33cc0ead6ad31d
SHA1 f21068e5b6d34f69dbc057d5913d8e8392e7d4b2
SHA512 c9db3f59eb5b588c91e6f5a0482ebf35bca3fe850c53cc4888ab5a5452bb133665e44cec1b86ec56e7a5987d295f7414a38da5e66e26cc0c15f7c29bec2698ae
TLSH
T1B941E3F783B4867E9A1196F0AA146F1FDE2D0415432C7C6585E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c27296c9eeaa58e0d8ddd868dfb56d0e5e52ca244eb492b826b5173060796c5d
MD5 8c53c9e937a1e00a8abb9bbaa27635af
SHA1 775f0554247ed6c9fbfe3aa7d812a38f166007dc
SHA512 bda3d5ccf01bfa332d05e9eef77d2caa718ad140ada3b2fff7a207336b09cc086c0d442f709c1d924f41ba8cc3e0fae6885f404b27054ba577dd2c38a4734a33
SSDEEP 192:sxRhRklbO/f6+sn5AlDde5lSkzoD8p4B/g6+WNIYC+GuOPG0IgD8J:sxRhKO/fBsn5Alc5lHk/5In9s
TLSH
T18A42C715AA28A93B9CC7E20DBB55BF53D3F95132A1D01E08EBFC861C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2d4988e9f3347ecd4a78a5dfce43f5f6243ab55cd66d4d1b127c9608dc2970bf
MD5 1433d68b4e59d5eac00d1e7c577e910e
SHA1 a5948ea25e844e9dc3e7e3adc63789159ee9b892
SHA512 f6aa89659224fc4894b916fc672e955167f3d52432daa9633fdeeedbd9896f8e084fa2ca7bb3eef3a7bc08a91661e650f9d4f4c3676eb007e1ab8bd8d0db2936
SSDEEP 192:sxRhRklbO/f6+sn5ALDde5lSkzoD8p4B/g6+WNIYCNyuOPG0IgDmJ:sxRhKO/fBsn5ALc5lHk/5Ii9u
TLSH
T15632D715AE28A93B8CC7E20DBB55BF53D2F91032A1D01E48EBFC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ef19937370f5a44e908503c410e62704ca6a28cfea10440f1d8aba0c86974764
MD5 e35b257dea68ea672f7ebd8176ef6a36
SHA1 284700d1d5bf409fe66e39135514a1d2a988a1e2
SHA512 0c85d315783a6ddaff73871afe9670c410f556eb7a3d50415005c93f3cb97a9eb3c159b44680a7f4d8854c85eae8e85ad7d1e0010e9c3a402070a252c1202a9c
SSDEEP 192:sxRiRklbO/f6+sW5ALDde5lSkzoD8p4B/g6+WNIYCNyuOPG0IgIJ:sxRiKO/fBsW5ALc5lHk/5Ii9s
TLSH
T12532C6156E28A93B8CC7E20DBB55BF53D6F95132A1D42E48EBFC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b18272e30da00c35abf89ae5c10e05124ef3fc49537f232d69a27c66076dab9f
MD5 de495cd111fe18c6291a47441454d3e8
SHA1 7ce5d4d09ed92781add642fa0131f1be7f531039
SHA512 504998fc5d3e26c4254ffb3ea315807b3042df3af01528b3228e9d768e45f6eea86a7756506161903d3076407ac067f5c652e83ead65de68a5a64f705e8c7cdd
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvProZSD:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vg
TLSH
T1AEB2D92B600DCB7F5F800AADAC197FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1c1115965511eba65bc27dccfb565f62b0fe34fcb0f3ff44ee39fdae316cdae1
MD5 5d026eb953e5182b83997c0650255bce
SHA1 0f21e68e95956717b1d38ac726ad09955b160e91
SHA512 9dc6ef20404041742ad5d47ca62f78c958b6d0226f21206ea7ce5e9a531fc2073a94824e2b2ca62be8e84a62873ffa92f718a390f18e084a9ced8626ce4aac69
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHN6zn9Xr/WzoWgv/K4uXvyKk4qedSKQ:CbEBVj5JAdSp9/EgTK7j6dJOHN6zn9Xh
TLSH
T172912240347F42C13C3E691C81BC8D2F928234637429A66FBBA845B61F67E455EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b6737fed-3b2f-4a3f-a8f9-5cff9e814be5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b6737fed-3b2f-4a3f-a8f9-5cff9e814be5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5efe7b52477845784eed0be862a206f4513008833cd81c6dddb845f5a8f79259
MD5 22173ff1738213758b62b26d16586f85
SHA1 b55f85c75bbe9c43928859e12eb36f8a29ced165
SHA512 bfa5b5370ba32a2cf63b7652e68d1cb420d2604e08d6fdf4b00e07bb28014a774bd6ac13c5abb49f2e4ce3ce9a5b7cd2cec53485a9a3a5dd81085a22de316aef
SSDEEP 768:Hrv+4UNbd43sA7b0ae5Ip8+p3bd66j+4BRv86aLIWDTX9m6yM9M:HbsbK3sqbmW8+p3Z6n4y5xm6Vu
TLSH
T10C13BF72F8A8E9739CF2C644B24B36037FB8515355C01E94E8D97B4E41AB1AE270B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d7e8f2435d28b9aa3d3ed6d77ea1a7b280e0e9a76001253df422a1608480419c
MD5 4e34ddde358f67823558529815ac9b87
SHA1 c21836686c1a9b2895f0523d47230a24bfaae760
SHA512 3cdd87eb6eea226be803217a6e7049398b9b7a7124a92d28db8acee2c9f8a4031e124e37673669a014a9d0a08080676d1372c2391c9883a1710eb9545466dd46
SSDEEP 768:w3IzhA3VAHbgae5kp8+p3bd66j+4BRv86aLIWDTX9m6yM9v:w3IW3VGb6y8+p3Z6n4y5xm6VR
TLSH
T1F0F2CFB2F8A49D77DCA5D644765B3743BFF4425395C02E94D8DD3B0E008B1AE270B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 df9be548a7c8445a422df6fde598bf095c7903045cd98b23464b9a4c0a6db28e
MD5 376547a19e4763d775191e850380c59f
SHA1 6bb9a7c2f267a554b3605daa8ed9909f743f67c1
SHA512 6ca5d556423ab8c8145e76398bbfbbd150be06242dd617e49a6e04d0f16d6a765da529e28965985110bdd0eee055406369540f496555668953b268ee75503da6
SSDEEP 768:E3IzhA3sAHbgae5kp8+p3bd66j+4BRv86aLIWDTX9m6yM9v:E3IW3sGb6y8+p3Z6n4y5xm6VR
TLSH
T129F2CFB2F8A49DB7DCA1D644765B3743BFF4425395C02E94D8DD3B0E008B1AE670B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f0d850e67bb53d73d7cb6371d8915f3174ae2efb544aabc9d5d43691dd10342d
MD5 8c887440acdf717a79fcb2d91f8f8762
SHA1 22075e8616e10ccb193200cafe427b5dba3789dd
SHA512 40c9e39915eb7c6f5bf74ba0b7db3994d46a52fdb6d9a1df797a99348abc27d77a736d6a84870211fc05b2b309cea625ac426c2d4ffde93e39a49285aa551419
SSDEEP 768:iFZ3IzhK37wgZAHbgaedp8+p3bd66j+4BRv86aLIWDTX9m6yM9v:o3Ic3jGbU8+p3Z6n4y5xm6VR
TLSH
T17D03AF73E894DA7BECB6DB84B65A3303AFF00163C5D02D94E9DD6A0D109B1AD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f1b7c7f80899609ecaf428e97de883e1b4ebe3d01c4bd4532b3d604a6209232c
MD5 02392048b7f3f679f388896835dfe3ba
SHA1 29daf274d15438b9cf0978df590d6ce63dd2385e
SHA512 432c000903ade8a7191455aca575f88177f12b883de2dce0fecc02970efbe457ca821e6467d6d38ad70b1bacbf8688cb9691045081ca3459cc242e6b0be1b08f
SSDEEP 768:Irv+4UNbdD31xc/Np8+p3bd66j+4BRv86aLIig2bwCl1:Ibsbp31QL8+p3Z6n4yi0ww
TLSH
T12503BE73F8A899339CE6C644724A7A433FF851A396C10EC4D4DD2B4E419B29E230B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5ec5ba406214707c943272caf789e445445ae9e1f23679aa5aac4d2001005212
MD5 791dd5113182367dd7420dab921ee935
SHA1 71cc0ba19ec60e3facd69c64a0a62836a56d49f8
SHA512 3b01e20959a70a4d841560177cb5698e92412ffafc51b3e16d4f3262d7ae3798b7524bd5d4b44aad4f2afd5f09c8a0eaa0ac9381e17db845fa8e9f80fa8e46f6
SSDEEP 768:Nrv+4UNbdD3cYwIe5Np8+p3bd66j+4BRv86aLITD2bwCl1:Nbsbp3cYML8+p3Z6n4yq0ww
TLSH
T18D03BE72F86899339DF6C644724A7A437FF8519396C10EC4D8DD2B4E419B1AE230B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads