0a4f18cb8a4e87656375d123c62a0db1ebd5c55552a49cbd11c26356734e570d

Resubmissions

30/09/2026, 03:18

260930-dtkrxashmd

30/09/2026, 03:16

260930-dsgzmade343

Analysis

user interaction
yes
max time kernel
72s
max time network
73s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 03:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IgDRkQDlzNnvSJAEA1TEQXskAeQQL4IKM6YI55MepK26zC8.html
Size 130KB
Sample260930-dsgzmade34
SHA256 0a4f18cb8a4e87656375d123c62a0db1ebd5c55552a49cbd11c26356734e570d
MD5 183e9cb57457ae33ef7f69c4cd0dcad4
SHA1 cd3f28f8af2d761c5f4855b04604bc69f37ff7bc
SHA512 fcf94e6c6771575b4f91454ee3c111cea789fc1adc6c45d1246c87b7282b9bd6b7141bc1c5de69a7e64435f6ef81e6c05f57faefe8cdcd9cdd14ff21d2b8603d
SSDEEP 3072:a+2QogHu5EpmiNzMp5lBYOvOn+XbL/j8ZprEbFYEicyVcyK8gy:a+E80OTAp5gOi5ZBAi53CThy
TLSH
T143D37D4C65B293A8D2511AF96924AFCB7CEE81EB8C00C358FB2DCE6DE714D6641C7712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{4E78C977-6EB5-4160-84E9-346C663C6F1D}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 1672 wrote to memory of 5092	1672	msedge.exe	86
PID 1672 wrote to memory of 728	1672	msedge.exe	88
PID 1672 wrote to memory of 4768	1672	msedge.exe	89
PID 1672 wrote to memory of 4768	1672	msedge.exe	89
PID 1672 wrote to memory of 4768	1672	msedge.exe	89
PID 1672 wrote to memory of 5044	1672	msedge.exe	90
PID 1672 wrote to memory of 5044	1672	msedge.exe	90
PID 1672 wrote to memory of 1808	1672	msedge.exe	91
PID 1672 wrote to memory of 1808	1672	msedge.exe	91
PID 1672 wrote to memory of 1020	1672	msedge.exe	92
PID 1672 wrote to memory of 1808	1672	msedge.exe	91
PID 1672 wrote to memory of 1020	1672	msedge.exe	92
PID 1672 wrote to memory of 1020	1672	msedge.exe	92
PID 1672 wrote to memory of 4072	1672	msedge.exe	93
PID 1672 wrote to memory of 2176	1672	msedge.exe	94
PID 1672 wrote to memory of 4072	1672	msedge.exe	93
PID 1672 wrote to memory of 4072	1672	msedge.exe	93
PID 1672 wrote to memory of 2176	1672	msedge.exe	94
PID 1672 wrote to memory of 2176	1672	msedge.exe	94
PID 1672 wrote to memory of 3468	1672	msedge.exe	98
PID 1672 wrote to memory of 4692	1672	msedge.exe	99
PID 1672 wrote to memory of 3468	1672	msedge.exe	98
PID 1672 wrote to memory of 4692	1672	msedge.exe	99
PID 1672 wrote to memory of 3236	1672	msedge.exe	101
PID 1672 wrote to memory of 3344	1672	msedge.exe	112
PID 1672 wrote to memory of 984	1672	msedge.exe	113
PID 1672 wrote to memory of 4004	1672	msedge.exe	114
PID 1672 wrote to memory of 5000	1672	msedge.exe	122
PID 1672 wrote to memory of 5000	1672	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\IgDRkQDlzNnvSJAEA1TEQXskAeQQL4IKM6YI55MepK26zC8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x294,0x7fffbbc6c188,0x7fffbbc6c194,0x7fffbbc6c1a0
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,112749780113300825,14310149092068915877,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,13191434116440742548,9177334432484199994,262144 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,7404278263420961583,8302480613848395877,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,14925134905983497326,2337597544080319863,2097152 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,5551247060691320979,17264621199587286070,2097152 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,2638281592681699186,6756372239651564161,2097152 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,16946994357563519917,3957097446607039829,2097152 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:2
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,11689862925624806070,11171439863988444332,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,7256369474482956725,13056082234790477560,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,16074652449916963360,16557531926853950035,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,16074652449916963360,16557531926853950035,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,2103181340180567854,10138814659561487066,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,12730814452081355033,5285505547793577690,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,14491941059132948021,15162990490673262235,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2888,i,11449242647063361089,15336725560351218273,524288 --field-trial-handle=2220,i,8299919081265703311,14901090945053581653,262144 --variations-seed-version --mojo-platform-channel-handle=992 /prefetch:8
  2⤵
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1d7fd4dfb7cc5d88fcd2450e58c31d1ea457f6ed95d44cc5e054922552e3ba81
MD5 7127b006583d7b7676feb33ae197c67f
SHA1 23ac596b30ef98a7ab562453a16eaaa5bf017c3a
SHA512 9cf24492128d7bc1156dc507c738eecbb3dd5adc966f59dfdfa900b5e5ce15876e189adcb3f167b543f70ca6ea85145b74edad1bad76ee4ad91da630caaabb9d
TLSH
T1C9514F8246A2FEC0F7A9073161D712A33730844D80B32E4A15A8CCB9BA4FF56B134C74
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6adf27df7ca7c759bd3aa632c9862e162c9e009815d27e49b4ba9e9c5b46f729
MD5 b9182178c5f6484ad50125639818a50d
SHA1 7eb9a59816fee81e29d0c0fcb6b30ed931a6b041
SHA512 50e2c6c6b266cd9df8045d2b91c5e221014079b31ce7d4d881ec2390c61d0dcf676160b47ac3072f2521e83c8c5cff8ac7f912bf2c32699299d61023d2523d87
SSDEEP 192:sxZeRIWc/fpsffIdpdeHW6+WNGYYBapfIgrJ:sxZelc/fpsfQ0HbGfg9
TLSH
T10F2297516E28A97B8CC7E20DBB15BF53E5F9503261941E58BAFC961C08E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9965b1d79953f33ef972354fb1c1b31bc9896a4f1ea0ef70432891d5405bd4bd
MD5 e0b175c3673ab96512f907af1eea6036
SHA1 a5f88eb3d0fe95cef7997fde1b856dc780e1eb3d
SHA512 f9fd1ab65bc1563a0c9f199d8c06e2c5d92bace629909a21438943422b7014293931cc4bcd9a82d6cca6208f327ee8121f69fecbdbd3b7397fd13f78c3f64168
SSDEEP 192:sxZeRIWc/fpsrfIdpdeHW6+WNGYYBapfIg5UJ:sxZelc/fpsrQ0HbGfgy
TLSH
T1C022A7116E78A97B8CC7E20DBB15BF53E6F9503261901E58BAFC961C09E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4281a0000df4ae71d1a54cde0b907909e369dc73409de6d999e5a7861322fea4
MD5 cf1ee15e73093744025bfaee415d90cf
SHA1 736fb591c2bb900021d18be7fc4d63ae18c91e3e
SHA512 65762fa548a42d79c974bb4ecdc1c5e78fc23ce273887664ce211b14cec49ffd6e3c53071b33d11d2c8d0d209fedc87d16b93fad818696891ec20ae1376c57bc
SSDEEP 192:sxZeRIWc/fpsqfIdpdeHW6+WNGYYB1pfIg52J:sxZelc/fpsqQ0HbGfXw
TLSH
T1DC2296516E68A97B8CC7E209BB15BF53E6F9503261901E58BAFCC61C05E77DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 295279206cea8ccb5c9354dd282e18dbd38e3558f2e373557784856a38ac1feb
MD5 399f8c0e1af772849ba2f452ece734da
SHA1 1b5b1b25632a38fba140f01fd038c5dfbc7518a1
SHA512 39bc12edb70b8d2fe6dfc72924cbcda0d44278aa10b586c4d747044fe0f1f02130aac441184ccab148b585acd95061cb9a8bd3c2fad508523b6e6c92fc856585
SSDEEP 192:sxZeRIWc/fpsqfIdpHeHW6+WNGYYB/pfIg52J:sxZelc/fpsqQ+HbGf1w
TLSH
T19D2297516E68A97B8CC7E20DBA15BF53E6F9503261901E48BAFCC61C05E77DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 26b2589d9a0ca4d4b27f3912db40b0c80a9ec2530215cd732405e395eeade1a1
MD5 682d4b0f1e5de01ee389e27661f81c84
SHA1 5715c5d1a5a91b13a7f7e93a571f062fc44d8895
SHA512 ade14ed071b4cfe9dcc1811a99d5f6a4f249aeabd7e8159dc1266c0916e243462cdc07a6e556b7485804e6db454a98a31afe1b98b3b4c466d692a4d39154eddf
SSDEEP 768:I1yYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvX/ropXoB:I1yYR7jWv3NpBu1ja/CL8OXse
TLSH
T12EC2E93B644DCB7E4FC01E9DDC5A6F9B2E9802C7A6548D4047FA944C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6e3629e0491a865fba91cc516c3429cf10149acae0e482cf1fe4856da711f3d5
MD5 dcc55b3ec45a4dae76ce2c32f92e744c
SHA1 6f7e510ddbd21b98e9cdfb24896c728bc4a00f37
SHA512 8538cf9319f73d9826ffdda298d51f88d1b50c740a0c6ba3c8c1dc5b8963f322b1157944f8d433627b04c7a07a00495cf5a57382d6f39f50dd84ac5d8362e10e
SSDEEP 48:KgLuvL1ttOb9wVISrOK9715OxjeY4JbPyLgvmqwaOPbmdGISCPK9e1kPxYfYlWbj:KIogKV2qOPyKQETnqKUAyL
TLSH
T1E1912E51717A020139BD68C8D1A5971E429231B73078EE7ABFB901B14E6BE098EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599d8e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599d8e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 74fbd87ac4d1151383b450a67e956f6caef4863bc0bd76dacae26070052672d3
MD5 dda248c2cedbbdeac8a0a79d568e6d30
SHA1 31b41d47564e62e9f2698892de7eb7f60f40fbca
SHA512 0b549774bb82384eae2c5f5d6b425d29661033aaf95383c13235f021f0c86c0cd35be7cfcbda3a8bf11fce6479154da2d97b49bab11da4e25cb7f1b48232e3c6
SSDEEP 384:2ZcIhsN6FhiYfzQX5+DtXO7y8zHRztgOIwZOymbob:kh9H0kDdO7dzHJXsvI
TLSH
T101828E329DB8DC776EFBA585F18632139FB85067E5C46BC0D4ED6B1C02DA6A8130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 97393ec1ee974f70530cabaf3fcc18ad81901737d8f49917973d83d073bcdf7f
MD5 53cf2eccc6259d321b7fdb42f7e4e9ba
SHA1 4df0a6ec7ae46f2742ac0879c035e117c625978b
SHA512 73782580f6ede8795c04f02909e03e7259e09459ecd2b93f6084b78883b3ad0b815b5260b143c013c628a291d29b3fde4abb2184d9838145a2da38e443285389
SSDEEP 384:piFiZcIzzsNC8TUNTUlIlAhiYfzQX5+DtXO7y8PHRztgOIwZOymbob:AFQXLwgQH0kDdO7dPHJXsvI
TLSH
T1EFA27C338CE8CD7BAEFB9A85F54A32139FB40077D4C4AAC0E6D95A1C019B6D8130BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d3172ce31095b4c18c61582014c0b0282bc2ab53bda6e39fd15d8531e7e4473d
MD5 7ae540f20e365da40b2b19c791ed6203
SHA1 129597e23db2a79e030e094ae5fb9b7011e9a7f4
SHA512 e9575601e816c115b03bb83bb3e9a162243498a28e2ba7cef667897cfc5188eb80cd6b23778ce77b9a3c61d4b18896cc31ecdfd15ed3715fd3206170dbb2ec61
SSDEEP 384:3ZcIhsN6AhiYfzQX5+DtXO7y8zHRztgOIwZOymbob:/hsH0kDdO7dzHJXsvI
TLSH
T1DC828E329DB8DC776EEBA585F18632139FB85067E5C46BC0D4ED6B1C02DA6A8130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d175262778a0e332d7b2f1dc8935a15dbf194034ca3e071944f67e0a025daff2
MD5 dd7cf30f3a32fe5ec41fe3f3aae2fd52
SHA1 56533448d4e7da2bf5ee8a205f8a80a6e4a84105
SHA512 a7190f29f08403f38ca4f68d10c37ccb4dd0c0876dec952aeecbe15929e5b926e877627bc3dcb0ef0109c9d65645e3faf7bc3c5b4e0f4b067a70af2c0f517020
SSDEEP 192:EONz6nnHtQmiUydxhYcX5hQDP1XO7uFfEzg34rq5RzU6:EONz6nLyhNX5+DtXO7y8oHRzU6
TLSH
T188121B31ACA8EC775EE2A985F08732539EA51167E5887FC0D5DC3E1C02DF6AC235AC52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 740b3f31e5104cb9f6f1ac38e758041fbbe19e7f3167ddf72bc648315b5ef3dd
MD5 5eef63ed6bf01ff813b6dcf1f0ac2c00
SHA1 c53db29b9d89e22c57efd8a2c241656e02e3e293
SHA512 bda23581c2e11ec63a8c7c462446b42685fcb503adb9e8a7cddb48fc3976402ae59051514feef7005c871c18c4ffd5dc91e3379852df6c8c8fdaf8c1f5b72717
SSDEEP 192:EONK6nnHGQmiUy3xQYcX5hQDP1XOEMc9yHU6:EONK6nCyQNX5+DtXOg0HU6
TLSH
T1FD02EB34ACA86C778EF7AE45B4873313AFA5217BE5856FC0D6E81E1C01D769C2316C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5e5bcc030e8be08ffbc36e5c883fad1c152cb927f037be6d51f02b65f82b22b4
MD5 9728605f3c5023488cf6f711d7052123
SHA1 d4152eb7ed51f5cbc234997c9421b1ad688de0b1
SHA512 7f42a8dc083cda35d3da03badf9c36531ef25d89c14765548ea72eff74dca34b24d36871ed9e3a3f232aa8ea0d9a6f89dde9cbbd2fb6dbb7391bc2e7a530c694
TLSH
T177412B58B6FA1148B3B76F1A5BF6A86D487FBC772E06D49D00110E4F0A26B40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads