1e162685cb7b29d9387f920425f8a755bb8d12e13439f5f057430927e1fc2af2

Resubmissions

10/09/2026, 19:56

260910-ynna3agk3w

10/09/2026, 19:55

260910-ym5hysvgnd3

Analysis

user interaction
yes
max time kernel
32s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 19:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
danganmake.html
Size 76KB
Sample260910-ym5hysvgnd
SHA256 1e162685cb7b29d9387f920425f8a755bb8d12e13439f5f057430927e1fc2af2
MD5 813d1fc60bdf41f2f4865455ff6eee1c
SHA1 03aaed0e302b53ea0b3f5704c404a4569365d38f
SHA512 17a5b2f5075e9f6284bccc243b4be8b080c157e2d0b31f70bf5d9fc10bf2dde48484b9b993dbdfb5d0a93e3028c727479d114d2d3fe0d9cd162bbcc85d68ec68
SSDEEP 1536:0YRERDIvnV18sRNHDnMQWXGo2K5CDI6OiXuCXWxtdbNtuhQpxbtnBKnJw+h5Jd:4sRNHVj
TLSH
T1FB7392B3D6D16C37820353C873663F6C71A356DEE9C20854A2BA16D05BEACF29F1A45C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335437211927570"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{FCEDD807-14E7-44D7-899A-34E565889A7E}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1376 wrote to memory of 5092	1376	msedge.exe	87
PID 1376 wrote to memory of 4568	1376	msedge.exe	88
PID 1376 wrote to memory of 2604	1376	msedge.exe	89
PID 1376 wrote to memory of 2604	1376	msedge.exe	89
PID 1376 wrote to memory of 2604	1376	msedge.exe	89
PID 1376 wrote to memory of 1952	1376	msedge.exe	90
PID 1376 wrote to memory of 1952	1376	msedge.exe	90
PID 1376 wrote to memory of 4776	1376	msedge.exe	91
PID 1376 wrote to memory of 2996	1376	msedge.exe	92
PID 1376 wrote to memory of 4776	1376	msedge.exe	91
PID 1376 wrote to memory of 4776	1376	msedge.exe	91
PID 1376 wrote to memory of 2996	1376	msedge.exe	92
PID 1376 wrote to memory of 2996	1376	msedge.exe	92
PID 1376 wrote to memory of 3296	1376	msedge.exe	94
PID 1376 wrote to memory of 3296	1376	msedge.exe	94
PID 1376 wrote to memory of 3296	1376	msedge.exe	94
PID 1376 wrote to memory of 204	1376	msedge.exe	95
PID 1376 wrote to memory of 204	1376	msedge.exe	95
PID 1376 wrote to memory of 204	1376	msedge.exe	95
PID 1376 wrote to memory of 2252	1376	msedge.exe	99
PID 1376 wrote to memory of 1008	1376	msedge.exe	98
PID 1376 wrote to memory of 2252	1376	msedge.exe	99
PID 1376 wrote to memory of 1008	1376	msedge.exe	98
PID 1376 wrote to memory of 1776	1376	msedge.exe	103
PID 1376 wrote to memory of 4356	1376	msedge.exe	106
PID 1376 wrote to memory of 4004	1376	msedge.exe	107
PID 1376 wrote to memory of 1272	1376	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\danganmake.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe171dc188,0x7ffe171dc194,0x7ffe171dc1a0
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,859610587598453411,17194968752377477393,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,17412223636911330470,1072606598208980042,262144 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,4502661535380594920,15079808260376068705,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,921379415682098844,1218599965807079344,2097152 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,9709565269931780759,333005177195608081,2097152 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,17376127045470345511,8779730925138243532,2097152 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,6533125705511484446,10409466372183290874,2097152 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,6716044868488316259,1253723057861227568,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,14040622457981016176,14749975954125400998,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12830245937072676914,2440637446959587666,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12830245937072676914,2440637446959587666,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,4929160358383431674,2322401862355372776,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,15794143176059222350,17268653932829749617,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,5173090375387244789,2935007815545555907,524288 --field-trial-handle=2288,i,7080400700549720748,17136881128848942735,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:1272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6569a84a-feaf-48b3-9978-db0d8c729e1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6569a84a-feaf-48b3-9978-db0d8c729e1d.tmp
Size 18KB
SHA256 6f3de259bf3dadc0f1514656d6839b901736e297f2fa70db88b417507efbcff2
MD5 54f559c44efdee68813eb3b27efac345
SHA1 e1811dd5ea2c2218973cf103e59e314d2469b07c
SHA512 9aad8328f68b1739aa1b5cddd16f0fb9ca3efbb07a49bb54a02786fdc8d7b2249a2ac22b43fc814048e04b26d07f20696bea27c1afb0a57708b97261cba9acda
SSDEEP 384:wZcIhsNybJABeFXEa+mOByuv++GuhxuvzxV+Mhdptf/oV:OhPUabOAqxGuh4184ptf/q
TLSH
T12F827D71683CAC775DAA9145F88B37138FF8902796CD6B90D5ED6F1D00DB698230EC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3438d8fe6f72cab8bd8dc56a5004e4e3fed9a58eee369428d0f81c5d40ed9119
MD5 f44137d0dcc8b717f8b5d17f70268b11
SHA1 ab24c14306e09bee0f709709c40ca21bfe238195
SHA512 674fc76136f86dc4dae2a3157aa454aba79da6e443ace04592124e1dffa0b8c0b54117f413637c7d3a8fba816552bb12fbd0128781decff5855f0bdc40bc96bc
TLSH
T170817FB8024312AEE77D52319ED21E3C747382E8F9235F5B61A4D8B1ED957A3D2364C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589229.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589229.TMP
Size 3KB
SHA256 35f42f706a26cfa446939c76689d602a4b7708b02c86bc215664aee823733270
MD5 e4411f4b75b7d35ff1d6f433abe49358
SHA1 3f3b3619b71e5ea58da7350da027a2a19e272fb8
SHA512 5eb25b1735638bc3f6f6c5c54e3e2aaea9d277c0003b37ccb7826c2cfd0d66a2043eb05041a2fddbaedf9fcc1d9683901d832f0a8c07cdb9eedefcf9d2dec2c4
TLSH
T13A816EB9024312AEE77D52319EE20E3C747382ECF9235F5B61A4D8B1ED957A3C236484
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fd2dd0484b159d57b51ae5627bb54b6e62ecc3aff672a97b3520e782cc87b5b0
MD5 ce2780eab33f01215010a22cf4d20187
SHA1 14628f844f47afa900af77418427620d0ad75d7e
SHA512 c080ebc9ee2a00987d8a02abc41eb3218b43a64a7561b7acad3b2fa8741a69f616da7dae1df3254780bee54cc1a665b0017886fccdc0debc3f29fa1495824b77
SSDEEP 192:sxZJqRLWl/f+sgDEdIdpdwHW6+WNGYCk+F6PIgrJ:sxZYAl/f+saEeqHbG9K9
TLSH
T1A522B7126E28A97B8CCBD21DBB15BF43D6F95032A5951E48FAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9516eabe57ff1afe18b3de2feab91103cfa02ec6ad04e48181dd5c93aea0af43
MD5 60ae22ebc123d4f566d35f9f650be5d5
SHA1 428cad210473612f476173d600efa83765169839
SHA512 9a9887ee973982d68c8a4f4b2a837cfae9e5857de5e0978163463ecc1e941a7c4226179527b204054d4a15d4e46cd2daa136757cb6f353f608abfc737ec9dc69
SSDEEP 192:sxZJqRLWl/f+smDEdIdpdwHW6+WNGYCk+F6PIg54J:sxZYAl/f+soEeqHbG9K+
TLSH
T1F922B6126E28A97B8CCBD21DBB15BF43D6F95032A5951E48EAFC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 223ad2efdb3e39aff4c887e3b20a4bae71f644a22f11acb31270a8827fafde5a
MD5 0e80180e55994168ffe92471c2e7183a
SHA1 0a1d9df08f7ece7fca34778111ff9474cb8744e5
SHA512 6a134d47a789f108f886c03380531dfbf5ce800793e8208568762cc611513149d44f07b1770d4b570de4c2f8cc5d3975255145a38e9923418e97d5f4b3aca8d3
SSDEEP 768:sEqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrEror:sEqbUj+WvSCs6u1jaaZLbWrPr
TLSH
T167C2E83B340CCA7E4FC01E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 11c9c298eb7192e11a9603c67f683d543f70be33bde697976c836a953fad496a
MD5 2bf1a7f43e6f3abd216bda43e27a3ed1
SHA1 94a55e12ff09a9a23dea3e43f25776f1ccc52471
SHA512 02ab0da60ecf366b973def403c0a07bf3fafddb288bfb1f1d91ac40aa427e6d5ae3e94874d425ca3f90a6438e485e8058856564d064ad9eb1438f15c53dbb81d
SSDEEP 96:KlkdQ0uS+gyKHzssgK01s2gA8s3WEtGZiKCoZ1+KOQiV:2kdQ0uS+DKHQsI1s2r8s3WEtVbJV
TLSH
T10691A32130BB0B4538FE39189255963B5E81B2A73605E4BF37B814B65E27E115CFCACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 447a35b2fdef68213ae7b888a7328172d418fc17963b728b496b8eddeef89957
MD5 c73ac076aed4e81d17ce08cc3c1f36eb
SHA1 532cd8c980e8b4d1f2ec74840390ed295ed438b6
SHA512 124ac18d5cec98590675b05784b8a75230975385df5f24d70c07bb3501cd4dd9ba77a10b9bb9d05969f04beedaef28aa91d3962d2827736dddac1bbadce8b3ae
SSDEEP 192:vONx6Db6QmiUy7THBa+jqOmWtm7RgunIU6:vONx6uCHBa+mOBHuIU6
TLSH
T11C02E93969786CB79EB2AE49F48737279FD4107BD9962F84DAD81F0C00D764C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bbb6f1281cc4050683900d0911784ea0eced3d394bb937c123b4459e79aac065
MD5 dbdef317fb671f54efc9b4bd264aa430
SHA1 2a0f9e949fb49157e227dd805ee4df01284b9202
SHA512 50c8b124289935d46735676f3864817a22da4b6552d63f891fa86184a1dfa973a551f790fedc3aed98aebe02658873c5f2eefabd482a9574d84218a96575bf12
SSDEEP 192:zONL6Db2QmiUyZTlBa+jqOmWtmtuv++PNzusqLU6:zONL6aelBa+mOByuv++JuhU6
TLSH
T19F121936683C9C775DE2A545F48736179FA8412BDA8ABB91D6DC2F0C00DB65C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0dc669848dcf56ad183ac462313f99bba836dad8b1a5f20a06df012291887b48
MD5 c68166407e6295bb4c75846a4751d699
SHA1 69e60a11662bf64c665e1413aa2469575611d289
SHA512 fe6567343a6996a3f221872a0195c257311d6a6f47caabd767687a08ec6fc8c17e2793437a6b0978f61bc0a2abe6b420750b1c18578de20b2b5796af61f647d7
TLSH
T11B412B58A6E91148B3776F6A9BF678AE447BB9772E06D46D10010E4F0662B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads