hxxps://arabcont[.]com/

Analysis

user interaction
yes
max time kernel
30s
max time network
32s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://arabcont.com/
Sample260910-pv6xbatdlb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335176172350024"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{377C876B-DCB6-44F4-8055-D6DE5A958668}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe
3772	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3772 wrote to memory of 1928	3772	msedge.exe	84
PID 3772 wrote to memory of 2324	3772	msedge.exe	85
PID 3772 wrote to memory of 1320	3772	msedge.exe	86
PID 3772 wrote to memory of 2324	3772	msedge.exe	85
PID 3772 wrote to memory of 2324	3772	msedge.exe	85
PID 3772 wrote to memory of 3536	3772	msedge.exe	87
PID 3772 wrote to memory of 3536	3772	msedge.exe	87
PID 3772 wrote to memory of 4696	3772	msedge.exe	88
PID 3772 wrote to memory of 4696	3772	msedge.exe	88
PID 3772 wrote to memory of 3388	3772	msedge.exe	90
PID 3772 wrote to memory of 4696	3772	msedge.exe	88
PID 3772 wrote to memory of 3388	3772	msedge.exe	90
PID 3772 wrote to memory of 3388	3772	msedge.exe	90
PID 3772 wrote to memory of 3188	3772	msedge.exe	92
PID 3772 wrote to memory of 3188	3772	msedge.exe	92
PID 3772 wrote to memory of 3188	3772	msedge.exe	92
PID 3772 wrote to memory of 1200	3772	msedge.exe	91
PID 3772 wrote to memory of 1200	3772	msedge.exe	91
PID 3772 wrote to memory of 1200	3772	msedge.exe	91
PID 3772 wrote to memory of 2384	3772	msedge.exe	96
PID 3772 wrote to memory of 2384	3772	msedge.exe	96
PID 3772 wrote to memory of 2384	3772	msedge.exe	96
PID 3772 wrote to memory of 2516	3772	msedge.exe	97
PID 3772 wrote to memory of 2476	3772	msedge.exe	98
PID 3772 wrote to memory of 2516	3772	msedge.exe	97
PID 3772 wrote to memory of 2476	3772	msedge.exe	98
PID 3772 wrote to memory of 3860	3772	msedge.exe	99
PID 3772 wrote to memory of 3860	3772	msedge.exe	99
PID 3772 wrote to memory of 2704	3772	msedge.exe	101
PID 3772 wrote to memory of 4252	3772	msedge.exe	106
PID 3772 wrote to memory of 2824	3772	msedge.exe	107
PID 3772 wrote to memory of 4200	3772	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://arabcont.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa9aebc188,0x7ffa9aebc194,0x7ffa9aebc1a0
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1908,i,2123041538013246325,628697179133591933,262144 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,6904041105781828611,3898795905209160748,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,11545736827057017597,16051043583005522762,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,15807994119948703680,9999178975816095558,2097152 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,11443372845488667722,1796452896976282363,2097152 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,7678510236794144357,14455753727120730242,2097152 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10109885616998923407,144393373487313919,2097152 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5088,i,9400187734612279182,4672936242401668662,2097152 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,12221917688932252388,5618065751689676031,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,10273331471061443095,17745439408676790088,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,5667640244958817211,1883328140696873253,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,13473561559395582779,16122834273198512874,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,13473561559395582779,16122834273198512874,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,2504824556994001525,4609263472034296981,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,15145981516669175925,3316058908803889260,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,7041187932924055237,14751193122999938222,524288 --field-trial-handle=2248,i,8623843362769845713,3018246469711365016,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:4200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 1024KB
SHA256 5d2d346b49456834ed6b43f69e4dea2551d9a43fbcef8dfeb477180e68ad2ed5
MD5 8ced224fcfd9659f3ec9c642e62eb58f
SHA1 4f59f83b81b524518578c7ef5dbace15545397d1
SHA512 14c765bbb5df53142c2e6067196e2281679500c4c98b9a4e747e1d114861cd98e6d3086c823d6de6ffa8f40786ecf7c2f2b15378c8f2db6d7ed8bd17519c3b6f
SSDEEP 24576:ZS1rwBym4mzf/9JtrA2mY+CNlX7ZyJg+zcQ6YCfs:Q1MByszf/9XA2mYtNyJg+QQPr
TLSH
T17A253354D1C648F7AFBE5A3D8EDD03416CF56D49ABC8ABF084F1D103E89011A62DCAA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 f5892bb1f709f6cc840f8850a324fdc455828fbd5b7e2f6333e42c4b635914fa
MD5 aeb7a9153ac6746b0ea1427859d2e62b
SHA1 2eeab7a5c7b5f00933ac823be270856b6030ea2d
SHA512 2c00fe087d8af7d6621d69b8847bbd114e0c6c505dc4e57fd53e6abdb8ab6441c4f984fc8e06bd7068c73b1e3e55cab9b0588257180ba96ef062f21b9190a1c1
SSDEEP 48:V8mevp0kJvMchM5iuhmjkkuiUKetGoNou9DmDvKbM5mxrW7+H7huEaIsSas8Wcgf:Gp0oDKnQ/3QDmDvjuP1axfM
TLSH
T152916E35D247C4E0DFA2123284D18622B47623D1FD87CE822CAE8BB8164E7E06FA4814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 25bd113a69045f7a4b9cda128e489d76e4b60c2871961dba4705c0f9cc951327
MD5 2e5b30779fc449e8fa7711eeae833dd2
SHA1 12a1fbac4116116438ba2c9b2e2c1e6368b5d394
SHA512 3515b566078ee228b9160734c117fac36cd0cdc0bb9e87833df408ff009e44ef2791ba0138e24b20352a4a686123126d81dc14dc4f9eb50b91946a365219f5c3
SSDEEP 192:sxZm/yM/jK1Ml8MWe/fysG9feVkIdpgtHW6+WNfDR/YvG2UVJIgrJ:sxZm5ue/fysGuUHb1/xb9
TLSH
T10F42F911AA34697BCCDBD20DF945BF53D6F9447296900E44AAFCCA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c264a89698c26d07a78e676c79f93d506774b9f79842c2822831ac9b2bb4a638
MD5 2ca8a4e4502ad4f3025e06fa674fbc1f
SHA1 fdaa7ded6c88611a4a67771cd871cfc44e1a9bbb
SHA512 401b7be26b27a56c8cc9b938cd295e94f73d960e05b052c7dc493b054d6249c13e5027bec375f23e0304d4c1e05572cf4cd16b92dfed686e62216db30e778808
SSDEEP 192:sxZm/yM/jK1Ml8MWe/fysAR9VkIdpgtHW6+WNfHVVYvi2UVJIg5+HGlWJ:sxZm7ue/fysAXUHbNVVbMwi
TLSH
T1EC52E811AA346ABBCCDBD20DF945BF53D6F9447296900E44AAFC8A1C04E6BDD620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2908ceb2b6440d9f037c053f3aa219137b8057db5ab29bc077b0efe18895873f
MD5 43fc29957a2a0f24e0084ac22260430b
SHA1 862a8fe4f9abbaf0ac9c3019f93be8f9f173b970
SHA512 8705fb5bbbccfb265cff9025c627d30b97206cde6c8d17fd7a23cc7b6dc9259a58ab6364f0167bf419e8bf10576cb4636ab27ade6c370df52e0f49605f629acc
SSDEEP 768:uEseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppxrocY:uEseJ3xWvhfynu1jaVcL88pKD
TLSH
T1BCD20B2B680CCB7E4F844E6DEC266F966EE801CB57984D5487EA880C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 61f60c0f74c593c62cbb307723da91e036573bc988ff158b8148491c47779282
MD5 1c75fbc0671fd67bd8af59ef9767a62d
SHA1 0d8fbc7ab79295f84a4c109063e484755f0549d5
SHA512 9df49c7b6b56bdb329096ba04fb170111d5b7b3c495be0958d9988a4cc1cf8c0831a2175118876419ab252e9c8207229ed91a4efaf902bcdb65e2e77e86796d5
SSDEEP 96:KYH+KggmKQIKpieqcAKN2EknKusCCtJG9AbWtKTMbstHUslmiWg:49fjb1knKusCCDG9CWoMbsVUslmiWg
TLSH
T18AB14913713B074178BD185CA6F5D63A9E4237633414AA6F7BB840628E27E511EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 152B
SHA256 14d3dfa2966d4b9bbef65d1cb97b84c88a4ee562a1c4a3c9ce51ab82ecb1a77a
MD5 dd44ce8847097087679a3deac692bdcb
SHA1 da11ddfa55d341a325f14d03f5a00e2b31691772
SHA512 73c3fb353ae00b7c3782cda7e8bd16ccd803dcb8a229c4b7f15ee1616ea56b3ca66a71b2c807b98173c8a7264926e5aa3aed7c7cfb4c43852e309b14726c16f1
TLSH
T142C08CEB0404858A8A789AC42024B25DD40BC21C8DC5CEE4D808C00215346338802AB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 78B
SHA256 3e52fbd2735ce0392c5b1582263a94f547cbbb37efb4b2dd220a53673209938e
MD5 f3a7c7c8ed6752e8c5f571feed6830e4
SHA1 e2ba87b05a166df954551b802f4c7fbef815255b
SHA512 79811dded9b8ffddb7d06aaef7405feb477e8f5619b2aeddafb21e07fff8187ff4a0c17a9c1d74448701208008e4cd3430abbd1419b50a5c2a94315b7701ad30
TLSH
T102A001B70805819A9A74A9E82025B25DE05BD29C8DC0CDF4C408C0862668A3614028A5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 159B
SHA256 f8f39702515ec78d9aa3fbefaaac95bfd2d38c20f2776270dbd58da500e5bbb9
MD5 cd71415423d63a6a6623975e756605a5
SHA1 f842c868803e3e48e38b74c7ace22a898a7a0905
SHA512 84157bbdd97ed8466fb265c2adcea93211d3bc4cfc7bd633cbbd250e1ac4eebad59eed1a6f537f3a26f65c430b350c1c3f909fa3e49323c8d6f81d4375eecbdd
TLSH
T1D7C08CE304324A97873196E12020324DE11BCE0C8CC4CDE8D814B00232749235C07AB5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 159B
SHA256 3dfc91f16e4c0538831ee52921062569f2aca294c78734effba14619a42e672a
MD5 a31fe6dde4db8b8b0d8248f0af6f778d
SHA1 692bcc1f0869e655dce5398d146dda174b1e3dc1
SHA512 4ca6ebe94e91a373b1bc5c1781377d1622aee21f9a966f07192ce28af06ff39c7d98896d50a3f41c993e9b72a11b3e867d67b11da254b5f636f31a388739e8b4
TLSH
T174C08CEB1414458A8B7899C05124B28DD42BCD1C8DC5CEE4D808F00221346338842AB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe584447.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe584447.TMP
Size 159B
SHA256 4f85cb39999bd024d74b16fcede0dbcb8c8252f52c961ecfb3681cda60222a59
MD5 88908882c3be01c6f151711874ac4db7
SHA1 6bb7412f898c99923454b7d34a7c1784fd3e2d14
SHA512 5c25c9f0057eaff062960458bfe082c9e4eba4af2808c2cfff8d9079cc076ecdeb6e961c4cafe7b0244c76fd3db8b7d80e45a5ed3c9ac1a433dcc1270051f060
TLSH
T10CC08CF3042102C757709AD02028320DE02BDE8DCDC1CCF49844F0862278A2388028B9
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8e71eb35936954fda71f7b87830bc8897a139d9fac24c85864a5c9fa96ec8158
MD5 a575e856adb4e6fcb5e344c7e7d920fa
SHA1 28a485a79d3d152253d130a7aefec72581df3e5d
SHA512 af783e336841ff0349eb4ac6291e79c2277eaf6bf2e14521d96dbad337dba6ebdf634db4a76a81b2d0d58a37094ef705211f6795e1dbe27bb46f36843ff19607
SSDEEP 192:u0LsNx+QT4M7UI5QmiU10NY4MTA++FdLCgFd3E78z1MqGUMZ:BsNx+YJ79XanNdtdUY0UMZ
TLSH
T140421B32AC749C379DA3B545F44A36139FB0916B9AC42F90E6ED6F1C01DA79C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5bd673b5cd09367dbd4dfb0b79f7fce4608e29652aae664ed04a24aa11ae0f91
MD5 bb69cd5dd6ecc2f447eb51d31ce4bd9d
SHA1 9c9a570c04bf15b9927843e2447e2ca0654a9344
SHA512 07f04f0a630722316695702929f64dacc8707349e2087cdfe0a8ad4fc1dcede327059fd23f5280ffece1c3f499622007ac0c58438ce4a13ae6f5697eb492a76d
SSDEEP 192:u0jsNx+QT4M7UI4QmiU10NY4MTA++FdLCgFd3E78z1MqGUMZ:NsNx+YJ79YanNdtdUY0UMZ
TLSH
T153420B32AC74AC3B9DA3A145F44A37139FB0916B9AC42F90E6ED6F1D01DA79C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 91613cc9f1598cf507ec7594622c4d1e99ad82a1df7450b7a8aed52e42d467f2
MD5 1f395a4c4414ba6203aa60dc19a72077
SHA1 701ec3966d5f3905a6733a99f61c75b7484328ff
SHA512 9eb9e9e9909ff1edf24b764dc98c5572fddc3e95f6c8d51fa4a4a0fafd457c259ed3a897fe116934f5518270dddbe85cf5556f10e2d4dea63db099a00c4c0f6f
SSDEEP 192:lONF6vMtPQmiUyO7ThTA++FdLR847F4U/u:lONF6UtRBT+dVWU/u
TLSH
T1EE020935AC786C7BAAA7AE49F48A37175FE4216B99D05B50EAE82F1D00D764C1303C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 2cd2bc4504c921d6684ea90075180d736afd3cd5ad99428dbf6b7f0486e45e9e
MD5 1e5861b25d5b9ba7f989f492a88cedf0
SHA1 c872c8c53d7aba7cbba1f4c40f79d1c154045ce8
SHA512 e6e81cd800c84bd9fb65e6367f0503626097c2b77147ecb1d4c840e0b57f2e63cfd2d947f060456ac6c27e7f24a028aa3dc7d7f6adc5266b1bc2b59a518094dc
SSDEEP 192:vONk6vMiPQmiUyR7VhTA++FdLCgFd3Ez80IMqGU/u:vONk6UiRAV+dtdUE0U/u
TLSH
T19F121A32AC689C2BAE93B585F48A36135EB0916BDEC46B90E6DD3F1C01DB65C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f3cd7cce19c67c404c80db66aa0d5f399d53918cdc78e83f0bc97ca1fa02350
MD5 ebaaec5e8b334f451771ec95fc4b81fb
SHA1 31fc0a6dbb3e0d0cc6669900eda09bf0630b055a
SHA512 9d23c2d910768537bcfe3afaf7f13dd304adf2b4f33e0c861e20829a811ec612fdd5c0f68f750cf2db119b5015935ba91651f41ed6678fa7e3881a7d5e3059b7
TLSH
T1BC411A58BAFA1158B3776F5AABF6996E487BBC732E06D45D00110D4F0A27B00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads