62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373

Analysis

max time kernel
58s
max time network
51s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 18.6MB
Sample260823-c69fcssblf
SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
MD5 0f6417e60719dfacf3524b61cca87e8d
SHA1 f2f4fa439dc120908a53965d8f292b00e51f7647
SHA512 1eff62954cf80b2ffaa1d676a9ee61c8da9488a327b458268f6efe94dfef5f6030ab11e9ad2df305de5a8bb05c4e2beb21e027a0a0c9ba3fc94a15ca9f85e5ed
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTDeQdt+lHx37DoB:i
TLSH
T1D617B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5704	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319269148462638"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{FD53F983-1921-4FD1-84CC-BB6FEF174BB4}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe
5232	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 5232 wrote to memory of 4792	5232	msedge.exe	88
PID 5232 wrote to memory of 876	5232	msedge.exe	89
PID 5232 wrote to memory of 5704	5232	msedge.exe	90
PID 5232 wrote to memory of 876	5232	msedge.exe	89
PID 5232 wrote to memory of 876	5232	msedge.exe	89
PID 5232 wrote to memory of 2560	5232	msedge.exe	92
PID 5232 wrote to memory of 2560	5232	msedge.exe	92
PID 5232 wrote to memory of 4364	5232	msedge.exe	93
PID 5232 wrote to memory of 6128	5232	msedge.exe	94
PID 5232 wrote to memory of 4364	5232	msedge.exe	93
PID 5232 wrote to memory of 4364	5232	msedge.exe	93
PID 5232 wrote to memory of 6128	5232	msedge.exe	94
PID 5232 wrote to memory of 6128	5232	msedge.exe	94
PID 5232 wrote to memory of 1524	5232	msedge.exe	95
PID 5232 wrote to memory of 2868	5232	msedge.exe	96
PID 5232 wrote to memory of 1524	5232	msedge.exe	95
PID 5232 wrote to memory of 1524	5232	msedge.exe	95
PID 5232 wrote to memory of 2868	5232	msedge.exe	96
PID 5232 wrote to memory of 2868	5232	msedge.exe	96
PID 5232 wrote to memory of 2988	5232	msedge.exe	98
PID 5232 wrote to memory of 2988	5232	msedge.exe	98
PID 5232 wrote to memory of 5004	5232	msedge.exe	99
PID 5232 wrote to memory of 5004	5232	msedge.exe	99
PID 5232 wrote to memory of 1480	5232	msedge.exe	101
PID 5232 wrote to memory of 1348	5232	msedge.exe	105
PID 5232 wrote to memory of 5568	5232	msedge.exe	106
PID 5232 wrote to memory of 2712	5232	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffbd776c188,0x7ffbd776c194,0x7ffbd776c1a0
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,5045730173324281498,7881570085017894218,262144 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1688,i,12489756969541796690,4738686932781712582,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,10656112368366007363,951156775743313715,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=3276 /prefetch:13
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,10998912338451472200,3510558744614182518,2097152 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,5609114687443898904,433735988231436243,2097152 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,14314037748644993185,8915845565450153526,2097152 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,11287110601098774777,9524882568899054140,2097152 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,8968173110072081019,509283301467952517,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3860,i,14014242280733313713,5751904701185635908,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,13985503501767228537,10626122661469471025,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,13985503501767228537,10626122661469471025,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,12517099118246050472,7916458867250404985,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,3349615735578876318,5567774422134831202,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,11120462861071686833,17779263720073927655,524288 --field-trial-handle=2280,i,3276974878447152927,1120286662513181115,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:2712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 895687c77b571ffadc68f504f6635033fdfaa58e02bf5c583229576d678f5b06
MD5 a762f7c3722ec3f21302bbe1769ce514
SHA1 ca9b7cbb31d0135980aafb68457f1c9822744ea9
SHA512 c7fe6b4315b9ca748de73da879f55134c4d0822af54211e09400e9d5afb428ccc3ef79bdbd77b1a9a5318c801b0f77af278850f06baec1fd30d999a65ad48cbc
TLSH
T16761924D0B9A4CC2D7AF89B39FD8E4483AFEC8D811072EA083F56E3844C6F2090D8197
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a19e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a19e2.TMP
Size 3KB
SHA256 3185757930dc3ac87ca260540957b0b49a876605e21d90eeb1eafe77effee5a9
MD5 b93928f6bd573df5eefb0312689f6168
SHA1 8847a34db919d60855fbc4277786d4b3d3ed2268
SHA512 802751359dd6fc806e765ba2cf5b15f8e7093ed9d1133621428103189487c3f19f95149be23c24a321acedcb081ed8073bc4fbdf915d5381b05520d211612edf
TLSH
T19861724D0B9A5DC2D7AF89B39FD8E4583AFEC8D815072EA083F56E7844C6F2090D8197
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c46ddb3b69f14bc696fcbb403043e1d79280d5ad2ae926e0da3c23a111ab36fd
MD5 559d8b7a279edc5b9c383da57cdb4826
SHA1 a8b44a45d6db4dc59b8f3dc56e9a9f08276d2a8a
SHA512 849cf5d82af687af1462a3b8546d82efc5e63695a35edc85fd16ad208a41883deba57359c996a2da196968c09222f8e9e910279825a4c42d56e54d2f8c390c66
SSDEEP 192:sxRMROb9/ftsUpYCbnzoA8p4H/g6+WNIYEgs3lGNPIgDvJ:sxRMy9/ftsUpPOm/5IhaV
TLSH
T11732C8166A28AD3B4CCBE21DFB55BF53D7F8503261901E48AAFC961C04EB6DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 09e95ade1e1c480925d6b5d9b15611e21c1a6f1ea906290d4f04f70028e4354a
MD5 4eaed014c79878f026008eb3fa6b107c
SHA1 9d16816b3b1bd1955769be716d11dfe84d873cab
SHA512 9091a43bf11b6e48e67cfb31da5a880bf08c6123ac7dd98eb2171c15fd415974bdd835112885c998d8dead1e21f87cdf7d7f0854b0707d9e370b45eac6d4f776
SSDEEP 192:sxRMROb9/ftsUgYCbnzoA8p4H/g6+WNIYE3S3lGNPIgDRJ:sxRMy9/ftsUgPOm/5IOaP
TLSH
T1ED42B7166928AD3B5CCBE21DFB55BF53D7F8503260901E48ABFC961C00EB6DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 aa85745da4fa5f9e9e183c85372363bfb1930c45853c9e6ae14c4a0a11107dee
MD5 3d062cfe0129b6e150fd797495781203
SHA1 f90026b9520fbdb50ea3b167bc4da04825213520
SHA512 9c5cacb46956d9b15a6567c772521ec31d3257ec689e8e56853b793c8c54bb55cd2117e6715db99c9142067f1d57885758b639bd7b85d2382b83b442505cf67d
SSDEEP 192:sxR7ROb9/ftsApYCbnzoA8p4H/g6+WNIYEgs3lGNPIgIJ:sxR7y9/ftsApPOm/5Ihas
TLSH
T1B132B8166A28AD3B5CC7E21DFB55BF53D7F9503261901E48AAFC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5a0731e03c1adccf23802474ad42b51af87049b45437b58735b7aea5d32d1cfe
MD5 555948f71018a459c76130c9bbdbe107
SHA1 0fb66cbe0cb0219c156dd9d6acca1cdca7b3f6da
SHA512 428633e7b980d4da33911504b26b42818ac3495333eb56fc844687b25e54f8b4599ae1688f866cabf0605ba40658a363eecb4c6e0136769518d1480eaeef50d0
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV7:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoG
TLSH
T18BB2DA2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7e1834a7d9a0ff26bf4995810d5f469cd473f32df94ff43223923a03646d2f34
MD5 f362d96933b0a9ae75fabb5818a84452
SHA1 86c3a757b06497e17646241a7b32d3d472708fd5
SHA512 3006903fe541b0e5d95871c5091dd7ef7cf0d1bf3847a484209628b50aab89e592068c976018af525cfe3b7dc29d44ece97dd3d5de95dcad78f814e9d358bbd8
SSDEEP 768:Rrv+4UNbdT3DC6sDTd+Z2yCwmeX6+qTko0u229a4vsTYomG:Rbsb53WWdfVvVTVKa4BoV
TLSH
T1A603BE32F8699D778DB69284B20B36436F78116386C81B94D9DDBB4D018F1AC270FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 617182cc997bfd158a8410f3691899b135b3fee57e5baed441e8a9f6fe0a0b54
MD5 791475782151b71cab25e4830cc0cb16
SHA1 54cd86b545685fa0f74de6bb10ac0e269ad3182a
SHA512 c4a0500c23a07c489df80cb9b6a5b6e49f210e29a8075e87e839df6df0cd9caf934ad6e96bbead17065d637d6217d72a1112ecdcc84219e5ff9bef9dd4239e30
SSDEEP 768:irv+4UNbdG331USDTd+Z2yCwoeX6+qTko0u229a4vsSYeVH1SdW:ibsbU3lKdfHvVTVKa4GEH1h
TLSH
T1FF03BE32E87989778DE79685B24B71472F785263C6880B80D8DD7B4D028F4AC230FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 17ad425ffdad0bdd2322c3952fb64f50fb37116fc9961dd0cf5a77c5513ba894
MD5 ded6d0771b7c4bcda2309cee5c256662
SHA1 9840063f8b7231da2ff8e7442d3e140aaffcfb16
SHA512 781e6e20f9032f4bf8807d150248ae746fbe7d425a45979bf2635e7bed1c44ac415a7edce648b91b88f7facf4e45aeb9af8916f53350c634e2164af17daf5718
SSDEEP 768:MM3WCr+sDTd+Z2yCw1eX6+qTko0u229a4vsTYfah:MM3r6dfUvVTVKa4Bfah
TLSH
T11CF2BE31FCA59C7748AAD384B31A36479F755163D6CC2A8498DDBB2D018B66C270FC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 65d5651c295a3e894cb2e566c5d10cbadf0f716e1cb720726684357b2b2badab
MD5 9c5fe907c195e730203fafa35276f330
SHA1 d13daf7e281a124922e9521f578e1ac03a0ad464
SHA512 292241451177cc38c2c8f0a59dd544a984d6a1630457c69d4908820c1831d629dd807630aebcb1a88b517a4f0127a37969b5f634055f5759cbd4b28b5232e55b
SSDEEP 768:HM3DCr+sDTd+Z2yCw1eX6+qTko0u229a4vsTYfah:HM3+6dfUvVTVKa4Bfah
TLSH
T196F2BE31FCA59C774CAAD384B31A26479F755163D6CC2A8498DDBB2D018B66C270FC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ffab2dff4a359fccb0cc7819207e58f696c4d28c244e993da7883f974ea823c9
MD5 de162efc0ebbad4c985e0a4d3387b0b9
SHA1 28dce7bd3227178703ecdc6b7281936f27356ead
SHA512 eeded9d0c812245ab9455b45ff042f13188d2e15dee47ab084444831401703c8b8b534be488673debac4f7d26b80ddb2ed0fe0f37a1458d672ab8a2cbed4f7b8
SSDEEP 768:prv+4UNbdG3WHUCDTd+Z2yFeX6+qTko0u229a4vsDTeVH1SdW:pbsbU3GCdkvVTVKa46EH1h
TLSH
T1A103CF32E87989778DE7D784724B75472FB92173C6880B80D8ED6B4D068B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

955a1b1f-7f61-45e4-8ca9-4b3f94960769.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\955a1b1f-7f61-45e4-8ca9-4b3f94960769.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads