35acd995ebf467329f947b73b1ddc0a59c124a6025a04d7bc9c6b649e890b561

Analysis

max time kernel
75s
max time network
72s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 22:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Untitled attachment 00010.htm
Size 10KB
Sample260825-118tmsba67
SHA256 35acd995ebf467329f947b73b1ddc0a59c124a6025a04d7bc9c6b649e890b561
MD5 d09ec6bd4d08369e0cf01f643368ae4e
SHA1 0b0ab25d72b972b8a1d59e211c0c0307c7b8ec66
SHA512 b746655f8fbe2eadbdb02899a55f6c1c29c26a48f50ca0f74ac1f0a9cdf9a348b2be19af4b4a069b0dc0479a7044bb24ecb47b2294244db5101163278e9afe05
SSDEEP 192:CeNNR4ipEJJ1no4WK1SwBaAFwSViKNrZSWgIud/wBixFzbjx5P:34/1nlWK1vFwsjhgIuKBirLPP
TLSH
T1A0225162C3417E2E89378035F221AE99C3E145C5C77306A4F5AF702BABC586857A33AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2264	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321693006608806"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{A610A5C2-3C38-46B6-BB7E-3D40E71CD04B}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe
4156	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4156 wrote to memory of 4372	4156	msedge.exe	89
PID 4156 wrote to memory of 4736	4156	msedge.exe	90
PID 4156 wrote to memory of 2264	4156	msedge.exe	91
PID 4156 wrote to memory of 4736	4156	msedge.exe	90
PID 4156 wrote to memory of 4736	4156	msedge.exe	90
PID 4156 wrote to memory of 3800	4156	msedge.exe	92
PID 4156 wrote to memory of 3800	4156	msedge.exe	92
PID 4156 wrote to memory of 5732	4156	msedge.exe	95
PID 4156 wrote to memory of 5592	4156	msedge.exe	94
PID 4156 wrote to memory of 5732	4156	msedge.exe	95
PID 4156 wrote to memory of 5732	4156	msedge.exe	95
PID 4156 wrote to memory of 5592	4156	msedge.exe	94
PID 4156 wrote to memory of 5592	4156	msedge.exe	94
PID 4156 wrote to memory of 1992	4156	msedge.exe	96
PID 4156 wrote to memory of 1948	4156	msedge.exe	97
PID 4156 wrote to memory of 1992	4156	msedge.exe	96
PID 4156 wrote to memory of 1992	4156	msedge.exe	96
PID 4156 wrote to memory of 1948	4156	msedge.exe	97
PID 4156 wrote to memory of 1948	4156	msedge.exe	97
PID 4156 wrote to memory of 3264	4156	msedge.exe	99
PID 4156 wrote to memory of 1004	4156	msedge.exe	100
PID 4156 wrote to memory of 3264	4156	msedge.exe	99
PID 4156 wrote to memory of 1004	4156	msedge.exe	100
PID 4156 wrote to memory of 5860	4156	msedge.exe	102
PID 4156 wrote to memory of 3860	4156	msedge.exe	106
PID 4156 wrote to memory of 4512	4156	msedge.exe	107
PID 4156 wrote to memory of 2208	4156	msedge.exe	108
PID 4156 wrote to memory of 1164	4156	msedge.exe	109
PID 4156 wrote to memory of 1164	4156	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Untitled attachment 00010.htm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff9fc45c188,0x7ff9fc45c194,0x7ff9fc45c1a0
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,9626957751769871143,6552488899657335196,262144 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,17564691813763237845,9350184551501811215,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,16602143523339619797,16440392536177272182,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:13
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,6734258952751893500,9745144010947064654,2097152 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3684,i,9793299164420008103,9496320104591238365,2097152 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,8309190430819312368,12285669938060243786,2097152 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,13078921952089408002,15779349220275996103,2097152 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,4447306831425681345,7469530035974013984,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,8901261252729360922,6793456572228273432,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15764281877046237981,793643254190038445,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15764281877046237981,793643254190038445,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,5611532635021927720,4151435421585476462,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,154538233055419491,12584593799086322346,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,1637423047020246423,5473284224290938507,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,13197907391131840667,8529760433400917403,524288 --field-trial-handle=2268,i,11889113339201841475,17141753269441405342,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:1164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

47f6db6b-c3a2-4650-bee0-68217bb8c209.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47f6db6b-c3a2-4650-bee0-68217bb8c209.tmp
Size 32KB
SHA256 4b791a71216e529ef0ea1f12a73ca14c10ee4336a1aa2322cb9d2debcc1945db
MD5 6d205eeac3c02ccc27607804f32908dd
SHA1 15cb99d876d2ce92f697b34388537c2c0df8e599
SHA512 f921e503b0de0ff5855d3447cb95acd49336986a8760a5994d5b2cd0599e9a7ba847a6c693ca87c628be9cbaa2049306bd855e96b2614c509a959858eff702eb
SSDEEP 768:SFQC3Rwg/Uq5LALOAam6aQMGdjWca4Ghf92Y0:pC3hmaME6p2F
TLSH
T16EE29E724CA8C577ECB79B95F72E3257EEF04163C8D89A80D5DD6A1D029718D230BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 743b1a088e2e81c870752916f39cc87cacad251bcca1b2606ee9d62596903fdc
MD5 1502ad607abff6891eba8795363cd9d0
SHA1 e97d129b2d468a9ff4e3cce53a2f1e76b194313c
SHA512 c8a4b6e8240897fe9257385be3fa7f66ccc7b6398a47592453e6201f79fb99f1df43e2a638cdff1c228b8a5c78f5bd7463ce54122d0033eb5685428d12b6e543
TLSH
T137310194332409EBC7696EF551F48BE7323D8BB94A079E11C58473BD5D72BA5B012028
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 45e2d45c9977c67392909237a04318889e51136c27c11c36121bf5f54ae67f0e
MD5 674e6dfd64b62458f87e200fab62cd55
SHA1 b0cd3ab3e29481dfe96b3ef1775da2b799feb411
SHA512 d44121bcb1c0246d94215b9810804c802e984e652b07529febca60c18eb47aad273e89a424202aa7721b02cdf070e752abd4841e23c5c9d888ccaa567858729b
TLSH
T125418DF783E4866E8A1156F0EB14AE2FCE1D0516432C7C5AC9E4AE1793E34B1E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f299cbc2dc5483d522b30fe1f8bc8abb793e2c2570f06be2469ebcad11a6d93e
MD5 a31599c2eea5e03d7e336cae29f7cc62
SHA1 d1f454dc7f327d915b6cadb741138082146d2728
SHA512 4e324dfda71ce8b1d5bb44b1c20964e84b5739be3bd3a7531766098bc637fd79a62923cd6379e48afceae84397fa3412e727898545f5064c69b2bf59023ad785
SSDEEP 192:sxRWRWbH/fEsBrx+v/Wu8zoA8p4//g6+WNIYZ7Pl3sWGCIgDTJ:sxRWaH/fEsBN+vdtW/5IT4p
TLSH
T1E642B8156968A93B9CCBD21DFB55BF53E2F95032A1D01E58EAFCCA1C04EB6CD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b2b3771cc319878ea2e22d4f664150d586ac7486a0e02929729d6e731620927c
MD5 0f1efaadfbfc38b25e41876d2ceab4bb
SHA1 ea2f92afd7cef221bc451758f237c4003b87ca5a
SHA512 5c345ec0ed349671d5ad4d29f3dba12134a9f3781884bd7ed15b0f3ce05d9dd05f3ccf65d70e2b7838ce065e0f505f3b4f19385914992e9f0ca3209913fe67ef
SSDEEP 192:sxRNRWbH/fEsvrx+8/Wu8zoA8p4//g6+WNIYZ7Pq5sWGCIgIJ:sxRNaH/fEsvN+8dtW/5IC4s
TLSH
T1EF32B8156968A93B9CCBD21DFB56BF53D2F95032A1D01E58EAFC8A1C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9df3abdecaa17e6b233243744cd59ab13d250916b271e6688dfdc985a3b63cec
MD5 16e1741edd5e263c6de4f15d9f29c5b6
SHA1 b9fbf6219a25181ad4587a09ee37b1b1d891472e
SHA512 3109d6e13e5002c2e7039bd5b38632a829485761d71d20fcabbe414bf40963faac3fae0011de07dacc86be20de344b1ff38d40db3530d4ba06747cdd4421009b
SSDEEP 192:sxRWRWbH/fEsBrx+8/Wu8zoA8p4//g6+WNIYZ7Pq5sWGCIgD9J:sxRWaH/fEsBN+8dtW/5IC47
TLSH
T14732C8166968A93B9CCBD21DFB55BF53D2F95032A1D01E58EAFC8A1C04EB6CD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 037ea351ac8d09679ca9c3d18ba107dbacbe4544e32055e5408000825dcbfa90
MD5 b96116d3ad24e3597f8b396c490bcb45
SHA1 a74d83b3f629722fd47ba2d16a7c1fa00d1afff1
SHA512 ea272d21f3e6691b8bc20c00394895361c032c2ea071a857639e74bbf123ad41f9ca76e5793b6011c5a241bce8a97b51d36510308d632271ccc8504a628f998a
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR6jroOpI:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0VI
TLSH
T149B2CA2B604DCB7F9F801A9DAC196FDA6D9802C796588D4047FE990C03C77EB912A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 340ca107376e14d63f5e6a8f88eb96cea6625bd4a603f4ad3eccad81486a2299
MD5 0acf5ad0a5f487d21a39c3a469f5b4b1
SHA1 ca73c7cc90b97a0a7a2f0868c57bce1f50a2791c
SHA512 90dbfb17f4ac16e1260dfd394f02eeb8c7809470694bd31e74dafa3dca66f7aa2cd29697c42550700653321b96f89419ce8920c5caed5a36e2494dfc6588f3c8
SSDEEP 48:K2V6RF7PjkzPgPIgtkKpBxDkdl0KA7l5yF1I1K2IAvZW7XxHLLu746Ib/LKUyc1V:K0yAKb6CG16K2I5qYKXKew
TLSH
T1BB91579171BB52002CBE651C86B8C957E6C571F33008B82B7BD855B22FABE051EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 5ac713a4448ab176523c31938bba4d09b136d410dfde157ce79600fbac6618b5
MD5 247cf787f2cabef4c4f5c9caa3ba3bb1
SHA1 a85819a3961b5a903de9bee19a8b96efb3d04463
SHA512 0a2968e96194e3fc5a2e44ee05a60887f75ce02e82b060cbc5ccbbe44a8195ee5db0bb14bb6ad52e2bfb441857c224df185952aa10e7c5200aa89290295c9b38
SSDEEP 768:hx3RUq5LAL3AAam6aQMGdjWca4Ghf92Y0:hx3sKmaME6p2F
TLSH
T1B9E2AE715C6898339CA7A296F72A7247FEF05163C9D84E84C5ED6B1D039758E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 55b8219f2123f661331888a9fe45f28cf1c6283f91995839eb3e1b23f8269425
MD5 16c8848d99878aacfec415ea7ed72a5f
SHA1 fa492b04ab1021cde28bd2c22e21bbdee2887bde
SHA512 02ca9a9d5460515e6b418edea6b39c19ae30fc8a866fe4f96feae2f1d395c19b804244ca687cd09846b85041fa136c3c4c3f3e76441c2284f4646b2182e5dd4b
SSDEEP 768:ax3QUq5LAL3AAam6aQMGdjWca4Ghf92Y0:ax37KmaME6p2F
TLSH
T1C3E2AE315C6898739CA7A296F72A7287FEF05263C9C84E84C4DD6B1D039758E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 8ea56307f95b9a36307f338c5cef6dbeb34597db3560a460616ffc2ef2d975f1
MD5 b7757b42765fcbfe3610bd51d4fb7942
SHA1 e7463eb081b9da1479bdfbb4b101e1ff21521d90
SHA512 c4bf005c2cbd0dbb0d29b7fffcc3325a0420ccded680d1bf8992cc3af39a83f4f17e1ae4ce6644cb50328d6dd008d28c999d9b3e8ef893edcdd790ae77125e79
SSDEEP 768:/rv+4UNbdq36Hq5LXnAAam6aQMGdjWca4GhfBaPeU/:/bsbc3tnKmaME6pCH
TLSH
T1D5F2BE31A86C9573DDB79A89F21B6787BEF421A389D40E80C9D91B0D439758E3307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 58a5bd54e9b1b5353ce73160c7373912171cc6975a85499929f943f7754a8e29
MD5 3439516c92e06dba077b4bed4b4fb974
SHA1 9b5d7168d4c8b2d720269b63c1042ea739885a57
SHA512 26dd22e0a946129ada8e5f32bb47f3d708820efcb4c2f06cf087804044fc2e8fd3c82239735d7f731e8871abb302a5ee02e536161c6a241036468f202e9a2ab7
SSDEEP 768:Krv+4UNbdq3h+q5LAL30Aam6aQMGdjWca4Ghfw2PeU/:Kbsbc3SWmaME6phH
TLSH
T132F2AE32A86CD5739DB75695F25F7647BEB052A389C80E80C9D92A0D439B48E330BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads