hxxp://engranajesjuaristi[.]com

Analysis

user interaction
yes
max time kernel
32s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 10:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://engranajesjuaristi.com
Sample260930-mnkpdscf95

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{FEA82509-1EEA-4901-A65F-45B75A764D78}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4712 wrote to memory of 3192	4712	msedge.exe	86
PID 4712 wrote to memory of 3900	4712	msedge.exe	87
PID 4712 wrote to memory of 3748	4712	msedge.exe	88
PID 4712 wrote to memory of 3748	4712	msedge.exe	88
PID 4712 wrote to memory of 3748	4712	msedge.exe	88
PID 4712 wrote to memory of 2080	4712	msedge.exe	89
PID 4712 wrote to memory of 2080	4712	msedge.exe	89
PID 4712 wrote to memory of 3252	4712	msedge.exe	91
PID 4712 wrote to memory of 3252	4712	msedge.exe	91
PID 4712 wrote to memory of 3252	4712	msedge.exe	91
PID 4712 wrote to memory of 1588	4712	msedge.exe	92
PID 4712 wrote to memory of 1588	4712	msedge.exe	92
PID 4712 wrote to memory of 1588	4712	msedge.exe	92
PID 4712 wrote to memory of 4140	4712	msedge.exe	94
PID 4712 wrote to memory of 1976	4712	msedge.exe	93
PID 4712 wrote to memory of 1976	4712	msedge.exe	93
PID 4712 wrote to memory of 1976	4712	msedge.exe	93
PID 4712 wrote to memory of 4140	4712	msedge.exe	94
PID 4712 wrote to memory of 4140	4712	msedge.exe	94
PID 4712 wrote to memory of 1056	4712	msedge.exe	99
PID 4712 wrote to memory of 4688	4712	msedge.exe	100
PID 4712 wrote to memory of 1056	4712	msedge.exe	99
PID 4712 wrote to memory of 4688	4712	msedge.exe	100
PID 4712 wrote to memory of 3832	4712	msedge.exe	102
PID 4712 wrote to memory of 3580	4712	msedge.exe	109
PID 4712 wrote to memory of 3580	4712	msedge.exe	109
PID 4712 wrote to memory of 3580	4712	msedge.exe	109
PID 4712 wrote to memory of 3300	4712	msedge.exe	111
PID 4712 wrote to memory of 3300	4712	msedge.exe	111
PID 4712 wrote to memory of 3300	4712	msedge.exe	111
PID 4712 wrote to memory of 3788	4712	msedge.exe	120
PID 4712 wrote to memory of 3788	4712	msedge.exe	120
PID 4712 wrote to memory of 3788	4712	msedge.exe	120
PID 4712 wrote to memory of 3492	4712	msedge.exe	123
PID 4712 wrote to memory of 4456	4712	msedge.exe	124
PID 4712 wrote to memory of 4636	4712	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://engranajesjuaristi.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc0052c188,0x7ffc0052c194,0x7ffc0052c1a0
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,12859450901393687416,15728346210712100390,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,2008802506099786321,18321622996838949514,262144 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,16245394200400586213,3476112598504949799,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,7902885832064486268,11501366404356405502,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,994801125754235001,13057441340132801075,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,12214282388070182841,7373082544507229076,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,10701078968211350823,3115825830836008003,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,9903401524228557367,5665182977182594198,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,8357315617925016222,7805213811793526964,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,3219954932401506763,3849741039725397110,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,3219954932401506763,3849741039725397110,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6260,i,11008231939876671964,1933309749464788470,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5116,i,10911516272409922687,9757977608938167444,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5024,i,10844424876525770153,3095185374345955345,2097152 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,3524077956931891874,9003982863847335605,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,9959005574247847227,9670659977777641669,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,1312716174239854130,11408347534039286236,524288 --field-trial-handle=2172,i,4916260348847234426,14738446537019467792,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
  2⤵
  PID:4636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

881873cb-2508-4025-a95a-f73efab6715e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\881873cb-2508-4025-a95a-f73efab6715e.tmp
Size 9KB
SHA256 a997547e548f08277d261a869a14bcb46e9ecb24d4e80ba056bb65af02e9bc29
MD5 07f1807e18ce477deccb38edd104ae26
SHA1 a3819c4a5029275c269c3229b06e36aa28023ef3
SHA512 06f9a6cf95fde9dbbadbb902711b89f202009bb78c74ac072502f09ea564f3fc59b7b8c28676807dce9799b7186d5c78f2dcfa06061befe8f11874e22d0c38de
SSDEEP 192:sxZERTWc/f8sNsIdpJYLHwnDODu6+WNGYRPRjgIgrJ:sxZEoc/f8sN1JiHwDODjGmu9
TLSH
T18F22C8526E78A57B8CCBD21DBA25BF53D6F95032A1D51E48EAFC861C04E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 17f4a7592efc6cd20cffd97cc9f7a1a40fe146e3a99278c75d0684ba4d801731
MD5 6aec4aa67e1b5a49818e9b7ae03d7733
SHA1 737781e23dafc9745b1074b25fac979c5ace8894
SHA512 1385cfbf33991ab3fa5e8ad15af39f19f5560c518820a777f82ddf977a37c0ba1ab32917e773397910077abad2f460410f4077f513da58d36c215a3ede9dbdf7
TLSH
T14051B98585908065F7E8C17BA2FA1ACBBA3C678055835F1136EFFDFA9C7671AC108040
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a35fc5905d1dfc278fee8a5ac82df07c496e819d4f5dd95f9bb87221bda28605
MD5 ea29cb9ec050937e598c3a21bf27ece3
SHA1 f14385ebf8deb5dcaf17b6343204e8daa0e4e7f9
SHA512 25504b4d538d14b55843c0702ff3c6ac7e1a875e7cb13a72549633e3190e82976259fc4c09380a9cae4a8057369bc9030d0986171bac54e376eeb555815a343b
SSDEEP 192:sxZERTWc/f8soSsIdpJYLHwnnF6+WNGYRPRjgIg5DJ:sxZEoc/f8s/1JiHwOGmur
TLSH
T16822D8526E78A87B8CCBD21DBA15BF53D6F95032A1D51E48AAFC961C04E76CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6f6b3fd19ab91485567b9e9e14483732d90d92ca00b9043c3c112dd96cbb3c7d
MD5 def610af6cb416034f2252bfc53a5cd8
SHA1 645eb6506d1d698d70642d136a25855ffe639d52
SHA512 9b0d4f849dde664225f232950f3ed96d3b0db877b2aa9cf5d571944214cb5098003bf40194ceefec5f6ba6b1758c095b588205018907f7f4c35a23c6252a194c
SSDEEP 768:fvK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Ero5+YG:fvK9uzYWvcQWsu1ja0HL7Q3P5+YG
TLSH
T13FC2FA3F640CCB7E5FC01A9DDC5A6F973E9802D796688D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f948e39f8cddf872847282bdd4f81f0c1b0de6dcc0a0a6a600b0527e1f3f2c7c
MD5 707702820cfbeeb0dbc9478e2a2664c7
SHA1 b9b3a26f26aeb9959ccf1034bb811df3ef0107a1
SHA512 e5fe4ceb2353a43cd7924c6314dc5b2a3cb5a16df05876bd22439d671a40f95adfcf3db0ff014619e0b5011235bbe764b9635b4b06403d17d3628cf769cabc8b
SSDEEP 96:K0mgeNiOw8YEI83viWEK6hi4EmuOXwuZPJoPTBDvjI/OSibjK66i9jm5xmH2ZSKO:zlXGb
TLSH
T1F0919C5430BB02443CBE654985F5962F128132B27058FA2BBFBC04B59E6AE585FFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f865b4ac62a49c0fd8bf43655c24f5cd3fdcd93aec930309b66d6162540afd55
MD5 3707bb631bb197017be88130b87304d7
SHA1 8ef5a9cb68b37ab99128472dfe82f67cd4cce3d5
SHA512 ef252f5c9eb79393000086665fe0ffbe2613c8d257583449d638a452a4cdc9b29ebf2eadea16b5d82b3a9b6dd0de77c53d58c79de57f341fbbd560a68b8217ae
SSDEEP 384:cZcIhsNcRwb2QKSLOjTVi0OGCj7+20LBxtgOIwZOyRpo8:Khq20anFOxj7l4BxXsWH
TLSH
T13A828E3258785CB76CE7E244F58B32039FB8806BD6C66B9494ED5F1C01DB6A9130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 70a9179129b879c4ef2161ab0038b2d2f1f95f93801f76e0c6028c158160c22c
MD5 50c538b7faf6e21d688302602e9a1135
SHA1 ad2aec43553f46fdbff497b3a5fd0fa0eeab6933
SHA512 8eb069dbe57f38ce7e510875f5632c821355d788e867250f55486b7dea69f9b23b67c33c6662b9c00976933256135500eea019f18e5b6ea7e54d3cfa44b515c9
SSDEEP 192:SONY6ygpQmiUyqWtOCTVg10OQm4zPe0VU6:SONY6lHmtOCTVi0O87U6
TLSH
T16902D734AC787CBB8EB3AE45F58B27139FA8116BD9522B84D9E81F1C01D765C2307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4b2a92ee8cb7f31e0c7872386b002fce2900ae6987df83d608184b83538e7cdf
MD5 3ded7e86575dbff39d18eeb571c69bbe
SHA1 c1d59665b38b841ce522dd06ad3f20fddc2d2483
SHA512 c03bd7589732c98d92c32359a6a2e40942a979eaaef9417a083e93d258fd52d84e5b3538b8f9f3297e42a66be30bf0ed765602838571eb8259053423fee10415
SSDEEP 192:SONN6yrQmiUy6WJOCTVg10OQmMCj7+20W3UHquxU6:SONN6G0JOCTVi0OGCj7+20fBxU6
TLSH
T17E12193568786C775DE2A584F48B32539FA8516BDA867F90D4DC1F1C02DF6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 02fc99c0b5add8490c5f988ebf30c495547911899736200540574a080b69e282
MD5 168fb592ddefd8dfbcf695a5324b8017
SHA1 4b9254188a1daae6f5e04321ff410f7d5ec8811b
SHA512 6e7c8893743bdf80eeb212a56a1152128564b944213f059805b85d3a5d8e5f9fbaa2cdb0a382fed9d780bb4cdd898a92f8bc218429c200050a48718fd2b57d33
TLSH
T11B412B9CBAE90104B3B76E5A9BF2696D487FB8772E06C55E00020D4E4A73B01CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads