hxxp://www[.]inboundconnect[.]com/

Analysis

user interaction
yes
max time kernel
117s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 01:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.inboundconnect.com/
Sample260908-bl13tabj3w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2508	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333037031783574"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{B727CB82-0C92-4E93-B1AA-709BCDCDED44}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe
3324	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 3324 wrote to memory of 1920	3324	msedge.exe	85
PID 3324 wrote to memory of 2508	3324	msedge.exe	86
PID 3324 wrote to memory of 4764	3324	msedge.exe	87
PID 3324 wrote to memory of 4764	3324	msedge.exe	87
PID 3324 wrote to memory of 4764	3324	msedge.exe	87
PID 3324 wrote to memory of 2736	3324	msedge.exe	88
PID 3324 wrote to memory of 2736	3324	msedge.exe	88
PID 3324 wrote to memory of 1952	3324	msedge.exe	90
PID 3324 wrote to memory of 5032	3324	msedge.exe	91
PID 3324 wrote to memory of 1952	3324	msedge.exe	90
PID 3324 wrote to memory of 1952	3324	msedge.exe	90
PID 3324 wrote to memory of 5032	3324	msedge.exe	91
PID 3324 wrote to memory of 5032	3324	msedge.exe	91
PID 3324 wrote to memory of 4552	3324	msedge.exe	92
PID 3324 wrote to memory of 1748	3324	msedge.exe	93
PID 3324 wrote to memory of 4552	3324	msedge.exe	92
PID 3324 wrote to memory of 4552	3324	msedge.exe	92
PID 3324 wrote to memory of 1748	3324	msedge.exe	93
PID 3324 wrote to memory of 1748	3324	msedge.exe	93
PID 3324 wrote to memory of 4088	3324	msedge.exe	99
PID 3324 wrote to memory of 4568	3324	msedge.exe	100
PID 3324 wrote to memory of 4088	3324	msedge.exe	99
PID 3324 wrote to memory of 4568	3324	msedge.exe	100
PID 3324 wrote to memory of 1184	3324	msedge.exe	102
PID 3324 wrote to memory of 3952	3324	msedge.exe	106
PID 3324 wrote to memory of 3952	3324	msedge.exe	106
PID 3324 wrote to memory of 3952	3324	msedge.exe	106
PID 3324 wrote to memory of 624	3324	msedge.exe	108
PID 3324 wrote to memory of 624	3324	msedge.exe	108
PID 3324 wrote to memory of 624	3324	msedge.exe	108
PID 3324 wrote to memory of 4492	3324	msedge.exe	112
PID 3324 wrote to memory of 4808	3324	msedge.exe	113
PID 3324 wrote to memory of 2952	3324	msedge.exe	114
PID 3324 wrote to memory of 4352	3324	msedge.exe	115
PID 3324 wrote to memory of 4352	3324	msedge.exe	115
PID 3324 wrote to memory of 3764	3324	msedge.exe	116
PID 3324 wrote to memory of 3764	3324	msedge.exe	116
PID 3324 wrote to memory of 5040	3324	msedge.exe	118
PID 3324 wrote to memory of 5040	3324	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.inboundconnect.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe590ec188,0x7ffe590ec194,0x7ffe590ec1a0
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,7327144805068176322,7801322906669840750,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,8139716072449597806,2147105581227100237,262144 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,9821958579332972346,16665450336738219682,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,13493003053486423118,9549910593108536902,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,1797380976742097756,4800774129629607356,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,15596986654052315210,4992732632698670376,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,5922172580526255260,2400470484582080875,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,3339575090090602738,803344072937539172,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,7802875430010567375,14680326286626048148,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,17109279018202794617,8953158289797472119,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,17109279018202794617,8953158289797472119,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6256,i,3489239674512392041,10079876646633116434,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3760,i,15043066160805433276,17214399919734085973,2097152 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,16205930916203230715,11412893383210133015,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,12277734191350394026,6551085872066014351,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,11670429224779283877,11338461680330806312,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,15984486142874068479,9306055634801015605,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,8969882188338174316,889339031451390384,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,1313166554077401953,15113286830063499539,524288 --field-trial-handle=2212,i,2663971894751410772,9387219889220407453,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:5040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 326c883b9af1401f540271a96fd8e9f9730c6cfa282c0e29c29e2900e91b398a
MD5 47ca59355f8448f8ebcacd3c996246d7
SHA1 25682d14ca06097c6386250531360e8e55c8ed23
SHA512 9bdc70deecfd6cc2e6e8265a8626c4c42b36ecc192f93668b8785489f316d3d7d76337f1040a1b880ad0d154a76022196196086a1bac689b340b4600879cc5ed
SSDEEP 48:WfFeRHAUaI0EXe3c7Lk0OqSSd+7h4SNwubWGB2fbsakifRNKE2IR5GWlMg5R4vbm:igVjesGWw7PN2GBw88RcI7R4vbm
TLSH
T1EA8180683289118DFBE1B0B2E7C10F0577314CAA0E575F5B0364CA7EAA1BB5FD11187A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe595cbc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595cbc.TMP
Size 3KB
SHA256 66038baaa7e020a14476e7895541a87004c404aeaf875eaf3f1b69a9f2eab149
MD5 7cf1b847bf7d8bd55afe85cdd23cf58d
SHA1 6e974e82e24e2bb7485664e6e7ab5f51b15e6205
SHA512 f4e6e702036d124477f43c181f996ea901f4623fd00599d0cd50e53e8cdbf89a3e09fd775ba311d3a5f6cec40837bf011cfd4d07d1e9813af3e7b48a42ec200a
TLSH
T137713C283299158EE3E1F0B2E7D20F4937B44C895E4B6F561364CC7DAA13B2FC52157A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 ccf36420f204d6770cec437858d2add0e709c8a93ef07873fd633c438c072997
MD5 504832d1e31660217129c46f8454bdb4
SHA1 5435c2a566bc54acf392e22b159b90268b544f65
SHA512 3dd9bcd8b33983d704b7819b42460ebb0fd158141a00cdbcc73fad2e1efcecd5150f2a95284fcc9b4e963da7fbdbf1ea5008a3d15b50f4141abc9a9ac7ea60f2
SSDEEP 192:DEyZk/QegITqeK6Kw/0nePiY2OufjyVzhOtVj0yAIQxPwyQsrQv6U8nSFtnS:DbZk/QegITqeK6Kw/0nePiY2xfjyVzht
TLSH
T135125BD6D7F8866E885156F4B6182E1FCE6B1A14933C3C4BC5D8EE8A93F1421D201B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c08f3eeaa9bb8cf0c70e6d85652ba9d29b96b05fede0347409513e369f256080
MD5 913a5ec2f6bbbb8232bd754c363d7ea7
SHA1 a5fac6d47e342b9e35d9293437dae9f01666bc99
SHA512 e937d6e250b5628531ff0516849547772eef00f4452bb09f1f88a511a9e3aee48bd8b220512edc25b7a83cf4ac30744061603467381c1dbff5f4032112fcfa2c
SSDEEP 192:sxZd/yM/jK1Ml8Mkx/fgsWzzIdplaH+096+WNK5m/Y49fQHIgrJ:sxZd5Mx/fgsWzskHYZ/m9
TLSH
T19B52E8116A34A977CCCBC309BA517F53D6F51472A2504E44AAFCDA1C04E6BEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4952cb21b0e6440adb186355873133900f45e3d8af79bbae7d5ee2132d98b211
MD5 77993adb4d4b2749d75fcc1a52f7a070
SHA1 5214053047f39424fa8ec72957bf89f80f42122b
SHA512 77f6867ad25b65914fcca339584d19466fc677ed0136b07bb1b59e72183daaf1d1d13391490911b6f462dd54dc87aceae281cb4234ef4eb982bdc7b975e7220f
SSDEEP 192:sxZd/yM/jK1Ml8Mkx/fgs2KzIdplaH+096+WNKHM9Y4vLQHIg5DJ:sxZd7Mx/fgs2KskHYF9kT
TLSH
T14052E8126A346A77CCDBD309BA817F53D6F51473A2504E44AAFCDA1C04E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4abd32506db0613a1aeb7444540c6df209d7cadb8cb55905a759da02fd8deb6d
MD5 7ab4b7ca7ce2de36de15c654dce38ec7
SHA1 6e1235777ac59f291ce5e4ec738b0de8f0510e55
SHA512 982a47f49077324dcb17b22c373149c9a89f61af3480a8f73eedd74fa4a84bcb904c0abf9b4ddf0920ca49d5fb71c862ec415fc00be3cb1ccfb71faa7312dfc7
SSDEEP 768:DH8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdMroVkdUnO:DH8iJPNWvx76ru1jahALocdXAUO
TLSH
T1ECD2FA3B680CCB7E4F844E9CEC266F966DD801CB6B948D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3a310279cef1da49ca52207d05d46fd9e6964c58173fcd14135b6dd96213c1d5
MD5 1d5f0322b845ca61dbfa3e5ee6f00819
SHA1 f7480211203ebfb48fcbda6a2ab7a1d26ff98063
SHA512 4b3726e9397646536ef17d34cfbca47c90c289fd831746545676e9761cf09aefa073613f41cca7ab92c0b8668fa00be76078bc2de10020274153b7bda299ac83
SSDEEP 48:Kvp8j3pzTxuXesIZvxKM4kJxYBhLWvTSyZII9KwGTKR1rZJ10NgII3t1KuEG71y/:KUacKL6SqIKKwTwQKFOq6ykK1
TLSH
T17891E205317B4242397E390CA275975B4A4276673119E53FBBAE01E20D27E285EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\ffb42fe3-d80b-471a-a16c-5aefa14a7ca4\index-dir\the-real-index
Size 96B
SHA256 7701bf2abb416fa499128c6cfbee78760a6de14d42bf5a8bfec66905167d8792
MD5 c7231bc35a0e39b05cbc27487cc67223
SHA1 b8e89df8c99561be687f337642c13db328e171f0
SHA512 f493b9dabfb4506cedcc73a56d6e25e8f4e90a0b79d60de77732c70f4f4f49879193959e34b5907af52d38735bdb535b5a3fa1aff5483b9cbdc0fa4f5af9f492
TLSH
T141B022200CA0E202C08003B038CB002332300F308B0A082B82C03AA0C0CB38A08322B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5925fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\ffb42fe3-d80b-471a-a16c-5aefa14a7ca4\index-dir\the-real-index~RFe5925fd.TMP
Size 48B
SHA256 5a9534582ec01fded37e942eb774f49da0809469a74afc82481011c8b5a0a3b9
MD5 a18f9ecafa9de6963a7de9e4fcf1dd9f
SHA1 93ede555763222fcd9a19cd5317764040ade5f74
SHA512 d22396ae657d026353e190b16926ea8e211a80e13defb15f2fbcbc2d44537c49c3af0d1f90d202e2ffec34713ba4a42d3ff996ee856488a00ad9d01029148d10
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 84B
SHA256 3c1b6aeb18560683fffd3a56d5e73105181286afd60b3e54c0ece70b35f17f04
MD5 d96992791cf613651e0a50ce084528d1
SHA1 7e76a351e275bf8c3635516b33844cd207258734
SHA512 31965768935dc9fb4776da77755366b18399eee1f59e409ecfd5e0f0c914c3a75c52456b36b45016bccfb5c4aa15bb29e27ea5780edde33d3349e3e6a0dcefca
TLSH
T14CA001B71801859E5BB1A8E820E6B21DF64F829C8DC0DDF0851880526138BF310469A1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 165B
SHA256 73732f6304103aead4ac604f9fd1acacf73ef49128cd765ddc3187fa325ab35b
MD5 fe3b5f2a9a661668f2cc4a25999893ff
SHA1 db45e240a57b37faa799e0103394a847e79e321a
SHA512 5b80d1fa41c46f6d7e6835c97d805376f65434845fef5dd6caa9d3f6d20fc3434f18def00ee25d143c20a89158db424371abfb440ee0f96853b68318356dc86e
TLSH
T1BFC08CA75622868E5B7199E920A6720EE64B4D988EE0CCE4840A701179346A384005B0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 159B
SHA256 86bb84780ad6511cae7c86e7e22d431bda7d773307ca1b7a1b6cca5b33b57ae1
MD5 4dc05808ac6b251e06f5ae35f1a0d750
SHA1 3bd3f42b7a5cba8df30ab070d328bf09f859468b
SHA512 0d80fd39b276d5ce22447956b4c409cf746fbbd18940e1f57031aef837f8846a934af1c5b47457e160fae7bf409188d3439bdac032a8904f0a2a4cfc614a057e
TLSH
T1A7C08CA75522C68E5B709AE820A5720EE70B45988EE0CCE48608601575346A384015B0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58bb8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58bb8b.TMP
Size 168B
SHA256 c8abc1eff386af79c2ea65421a7e000bbade232adf23e87c03a7ea25313ec132
MD5 4bdd8eb2fdc04e2eede459f3b4bcf8fa
SHA1 785f524e05f8962c21eebad0050b899c121623dc
SHA512 ba99d9131506fb43b001f5da7c8531a3c6fae3177ad3c70fe70a7987903f05e2d50a62ccde87bcfa7845d906e7ce918f12ccdde73696356b078750c776ae728f
TLSH
T126C08CE342628A992B60D4E460B175CCF56AAD0C9DC0DCF98408F051307C7A3D4069A1
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

4d025755-0ebd-41c5-b3d3-aa170c95a828.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4d025755-0ebd-41c5-b3d3-aa170c95a828.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 862d5cc97e1e12baea84e046441f56adff3a350afff028e7c918d3baa547c274
MD5 c0356845f63149ce80383add580f153e
SHA1 153b10b5caa6edf35c24f6446c8c3b686259bae2
SHA512 57b2a8cf76d291ba61c6a58d8a9491c8ad36dab515347bafb0b162e937c3a2b845fd7a7c12e52754426a5cb1b2b71233b5c2bb326a463d0cab766d8c3ffcc796
SSDEEP 192:uxLsN4xQKaACRJZmwPQmiU14oG4k03/irbNjLIFqN+U8:OsN4xhaOM7JkWOpQFU8
TLSH
T12C3239316C686C7B5EE3A690F0473213AFA54037EBC96F94D6DC9A2C04DB29C530B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f20bd3506288dda056e3bd5465706a44bb01fb56d3014d3788fc02e2fc295911
MD5 57adb7cb80df0b7bc556fb5cb5488241
SHA1 3448b358ca8e1483dabce1eeae9cf8ce1cbd9267
SHA512 4b52eb4b5412babe77ec239e350a6638e3f84142b288fa902f03048ee94dde0f454cc7f02ece801d8b289208924ef64eb85b19efaaaa9acc9312653cbb82a232
SSDEEP 384:JiFiZcIYsNo8TUNTUlIlphaOMMkJkWOpzFxuvzxV+MhdpkzoF:gFQYJwg66F4184pkze
TLSH
T17FC229F258D7587AD9AE9743A77D2E034EBCC067B5849A50B3C85A1CCC961BFC306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a2aac3f4c32378fecc25fcc3da1ebbd944ffdc5a44e53f4454df2f8d0ef87be
MD5 6755c759afc0d1b117686abd08d61ed8
SHA1 10b44a16357b5e29613e02c8acba48bb878f0f97
SHA512 4939404bc85a9b60a7f20d69d0da8010eede2b7caad88fee4aba03d640c417d6174b71c76b8f15e463d9256483d0bed0fd2734431c65f742d106e085eae3b0eb
SSDEEP 96:ZqONk7QsjpfmUTmDK5ih/cIPURHl8h4otop5K5DsBhPwivh50xy0SFYKDAxvYebG:gONz6kDfQmiUyUgZ903/i+Qi66aU6
TLSH
T12202E83568786CBB8EA3AE45F48777275FE9213BEAD12F84D9E81A1C40D764C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 03eb43749a8c85b1e7a1c7cc3086c4f81dfeea0d5a5b4da4bd21b3bfea6b6b6a
MD5 e808e88b5c15f5ab9ec77afec03b6d2c
SHA1 84880e01a083026b0daa2a2c2ca5be49b89bf0e1
SHA512 f5ce8630f3eaed9ba32c6982eb847ae72f958cff7d279375c1171c643f0eee8ab3b5ccacb7bb689641caa0745091ad3dfb8330328089a0f462b8ce915b5e24c0
SSDEEP 384:iZcIhsN4phaOM7JkWOpQFxuvzxV+MhdpkzoF:QhqLF4184pkze
TLSH
T1CF828D716CB86CBA5CABA241F48633175EB4D077EBC89F90D5DCAB2D05DA294130BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 618de5952950f161e3cf0039e94f45d04360a0336c7230545ca99628b8e76ebf
MD5 094c0ed010f3c532fb5113b7c0e91256
SHA1 9ee407bcdf263ab799be6dab3ae420e8a4f6326f
SHA512 887619145f5540b0229976c6b46362665cd7f2f570e679c03a83fa099b44c97b6cffb5eefb149c1dd9bbc73c4ad5cfcf534f2fe6cc18c4c0fd10dc6c3eeebca5
SSDEEP 96:4qONkpQsjpfmUTKK5ih/cIPURHl8h4otop5KIDsB7Pwivh50xy0SFYKDAxvYebsa:jONB6knQmiUy1gr903/irbNLcRFqN+U6
TLSH
T174123A31A8A87C7B5DE3A591F08732179EA59137EBC96F81D5DC262C05DF69C1307823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ae704a8-9b68-422f-9856-7c6218acc019.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0ae704a8-9b68-422f-9856-7c6218acc019.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9166b267afa461b0321847bc94a9a1102e58d6670bde49482ffe648e6b2ad7b2
MD5 a7fbe7b64c7fed16c0e96326e7b463ee
SHA1 f1c310b8be1d7adda5ae3d4d0e93845f83451ea1
SHA512 ce07129a7b01d9a76bd9ca80926c39fe03da9ef5711401994bba66774c8acd7af7633c0116837fe4016e1a3f963697210b88dd95606ebd298aabc172f93b2936
TLSH
T16041EB48BBEA1108B7777E5AABF6686D447BB8772E06D45E00110D8F0677B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads