hxxps://apps[.]microsoft[.]com/

Analysis

user interaction
yes
max time kernel
36s
max time network
41s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 07:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://apps.microsoft.com/
Sample261002-hvthnavbrc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1676	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{0FBF8FE1-4DD2-4BAD-AF06-3E8EC50B70CF}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5096 wrote to memory of 5088	5096	msedge.exe	86
PID 5096 wrote to memory of 1676	5096	msedge.exe	88
PID 5096 wrote to memory of 728	5096	msedge.exe	89
PID 5096 wrote to memory of 728	5096	msedge.exe	89
PID 5096 wrote to memory of 728	5096	msedge.exe	89
PID 5096 wrote to memory of 4356	5096	msedge.exe	90
PID 5096 wrote to memory of 4356	5096	msedge.exe	90
PID 5096 wrote to memory of 3816	5096	msedge.exe	92
PID 5096 wrote to memory of 3816	5096	msedge.exe	92
PID 5096 wrote to memory of 3816	5096	msedge.exe	92
PID 5096 wrote to memory of 3360	5096	msedge.exe	91
PID 5096 wrote to memory of 3360	5096	msedge.exe	91
PID 5096 wrote to memory of 3360	5096	msedge.exe	91
PID 5096 wrote to memory of 1544	5096	msedge.exe	93
PID 5096 wrote to memory of 1544	5096	msedge.exe	93
PID 5096 wrote to memory of 1544	5096	msedge.exe	93
PID 5096 wrote to memory of 4984	5096	msedge.exe	94
PID 5096 wrote to memory of 4984	5096	msedge.exe	94
PID 5096 wrote to memory of 4984	5096	msedge.exe	94
PID 5096 wrote to memory of 2740	5096	msedge.exe	98
PID 5096 wrote to memory of 648	5096	msedge.exe	99
PID 5096 wrote to memory of 2740	5096	msedge.exe	98
PID 5096 wrote to memory of 648	5096	msedge.exe	99
PID 5096 wrote to memory of 4060	5096	msedge.exe	102
PID 5096 wrote to memory of 4060	5096	msedge.exe	102
PID 5096 wrote to memory of 4060	5096	msedge.exe	102
PID 5096 wrote to memory of 4444	5096	msedge.exe	106
PID 5096 wrote to memory of 2040	5096	msedge.exe	116
PID 5096 wrote to memory of 4648	5096	msedge.exe	117
PID 5096 wrote to memory of 1372	5096	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://apps.microsoft.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x214,0x20c,0x23c,0x24c,0x7ff87d24c188,0x7ff87d24c194,0x7ff87d24c1a0
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,11624344978466374073,6373837066474245479,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3551605373973077064,560544772996477353,262144 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,2728060412797924724,5188208559716100562,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,8182570426920776573,2788290224386815880,2097152 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,12324969358063124973,10906393519022794276,2097152 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,3134102290919448930,17005098260057571233,2097152 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,1482361428628727450,16416463375758599430,2097152 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,594318710993878196,1087547528593951513,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,346461273197458184,7809617814991610293,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5932,i,15555580344211354050,11074315780673523572,2097152 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,18023535024557327180,15164302542442445823,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,18023535024557327180,15164302542442445823,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,14404851561036726170,17323851925844594124,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,615687764868633981,1015676187471279877,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3916,i,12876416072677822519,2702194778294786999,524288 --field-trial-handle=2356,i,1784060839536158212,3842157021548762525,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0d1ab07f-e955-40a7-9271-19b24e05e9b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0d1ab07f-e955-40a7-9271-19b24e05e9b4.tmp
Size 12KB
SHA256 5cf49c98b28343c15cbde93a412b404ad6e2b494624d545cad4b35158109b486
MD5 4d2f45109bf7abaad5a488d2c9042ffe
SHA1 31f139d605da3e246e7509968560fd60ac166d2b
SHA512 1fb58cf750b39fd71c0110a22dac8e11fb37ec4b00fa5afea90b12a5c32c3575ba6c9af029ffe8273667e359a5b312fa63df1afb62fd4838e6e9f89ace610be2
SSDEEP 192:uhzLsN4UqQvu0phv1poQmiU1Kz84BGYX59ezgHNCLjzorx1mBiXx/jkH1Jq5j9Ya:6sN4UqPY50ATBGYX5Ecw78+iXx/wo5wG
TLSH
T1BF424B72AC78AC7B5CE36585F40B36039FF8912B9B846F94D6ED1B1C01CE298131A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5294d406-772b-4716-8653-7a7c5fad9242.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5294d406-772b-4716-8653-7a7c5fad9242.tmp
Size 18KB
SHA256 3f3540eb54e30d7492a0d55f24223404a3195b4fc248546b6ef099f70ebb0502
MD5 7b06325a545fb00d14c7f43a96107e79
SHA1 1c6be23b140deaff6b500e7cb26566cf08b90c86
SHA512 f2286b73019f4516127eff655d555c9a1ec9b2e35ee9c9e1a67ae814f3fa71e579b4c82647c313f30e052c37f34cab56ce0ff102158eca3b3c67a6733601492c
SSDEEP 384:PZcIhsN4UqPY50yTBGYX5Ecw78+iXx/LoVZh6DKhHxoI:HhORdGYuZzaxzofYGHxL
TLSH
T186828D329C78AC7B1CF7A585F44A3A079FBC9127ABC86F80D1DD6B1D00DA6941316D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

082ee41a-5ccf-4acd-a08b-219585d572ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\082ee41a-5ccf-4acd-a08b-219585d572ad.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5de8f9b6-763b-4b70-aae7-15f242961730.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5de8f9b6-763b-4b70-aae7-15f242961730.tmp
Size 9KB
SHA256 b764d56e7100e05a37482b7fd7b774e409c8b2c07c802d7a0f362c6d2ab88e26
MD5 c1bcbe39c1d940fa5076bd3cb94fe39c
SHA1 6b90143f3c32edaf7eee5c829966b1eab46b8ffe
SHA512 4ce98c7b25e16c58e9dd438c1a684de3040ba544ef41a76778f916d0a31c3f3077dd96c40effce2f100ebbb4ad786fbb3d1b328ed9e927a924bc6d6cdf1a849b
SSDEEP 192:sxZ2RhW//fssSBEdpwtHW6+WNtA+/Yg4R+ZIgrJ:sxZ2G//fssSK4HbP/ke9
TLSH
T1B122C9526E38697B8CC7D21DBB15BF13E6F9143255941E88E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ba4d9a1-0cda-49df-baff-5c63a9326bb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ba4d9a1-0cda-49df-baff-5c63a9326bb1.tmp
Size 27KB
SHA256 039fa7349c9d82bad9b4954f38ee13e8b2cd7ffc264b3a2f6051d4dc107546ac
MD5 bf8518e311b0ed92e17051215fc34064
SHA1 143d1afac61b85f2b145af3186681b59e5401f1b
SHA512 c2eccf74a3fca462f3598d360c4d27fabc3252f10be0be8c20124b289f1709ddbe347695cdb92580e47f38486e6273720f60fbb772b8ef01433df6a938e14448
SSDEEP 768:TwichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzQroKLZ:TwichfPWvPZplu1jan+LKgz74Z
TLSH
T1A0C2F93B640CCB7E4FC01A9DDD1A6F9A7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 25KB
SHA256 ed0f9476c89c366f37bedbfbcfd7eb4400bd4c5651d3c972a35c215da021aa32
MD5 8ca17216bb011cd961cdc5a1e821d91b
SHA1 ce470113b0dfb73b87f25144600efeaefb0ef66c
SHA512 79009088f18187023131660a5ed898c0bc42cb269ed9fc7f5c99696754146bed03587bee2222c034bf51434d40293565ccf1426064fc11843e8d5293db1da063
SSDEEP 768:UA7MgpQ3622dM2JecLF9qV37sim++wzaltFtfmbZ:/7MaQqTeimoGwFtoZ
TLSH
T19FC2E18A9CBA189F820440F42953852EF0B0C5D99E3EF34DB05AD5990788C9F275FBF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 7fdd30586e3dd812e2846bec545e4cba50d18a98736deb64c3b4be9e96f187c9
MD5 ab9d95bbccee7b02c38d4a862a4e8d58
SHA1 07384995a42e9c0c88225297888fd3f0e14d5b69
SHA512 b21eb65287295008a06e1d73ca383c5572595f86cb6b1e22b62a1bbcaf95461703f3139d68a20343b13170bf2ef1b62eb090e6d162f9bddf5fd96e67b1c0800f
SSDEEP 96:QAIkWKyGnko5v0qancd2srBQLICCCnuTEl61lUo:QvkWKy2kh7O2sr00Cns91R
TLSH
T1F9A1504B91904421CF780EF065D8374A30BF5BB046EB2E1296F3F87A7FB27A75206069
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 143d047c9cc80730b10f0e377a326470ccd4c2691be3de9ff144564f003c9485
MD5 86889289df811ec116464841a9f78cd2
SHA1 5084e7503b1a2bdf97f0c0012e70fe2743510e4c
SHA512 f6eed0a39c18ce526711c6258ea6156ea655fef9f92c4433e89ad638c239a10b90a5ad1f11a3eaf7e2cb778f8ac5a96522bbcc11256b6e5c3d667efa2fc867ec
TLSH
T1EA615E4B94814065DFB84C708AD4338F35FE5BB0498B3E12D7E6F87A5BB27B3414A0A8
MD5 SHA1 SHA512 TLSH

Submit Download

c5d43c66-109b-4143-863b-e5cfdea52cc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c5d43c66-109b-4143-863b-e5cfdea52cc3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b4d62c0e-9cc2-44d5-abd0-c203bcc235d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b4d62c0e-9cc2-44d5-abd0-c203bcc235d5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\2a16c8c8-01b9-4676-9544-7bcc4d23906e\index-dir\temp-index
Size 72B
SHA256 9381a4edbc009060fb021284a56b087f1262a3b4d4719825602c3017e51813a3
MD5 d22f5e40058fa12b776591f78629e26c
SHA1 cdbc9f35bb8bd2a2b67390fed61c612c070abdcf
SHA512 d4b89cfcfc4c3c0b350a4301c7e9f8227d6ff0fb2d549c11117f16d4164e5ada012b5e5de7b45be6c63f6a5b7910e61b14f76646cb50a0ccad09903b520272cd
TLSH
T177A0021649858021C442CB752476029E631148BD0351035244A4D0899D585505D11C72
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\2a16c8c8-01b9-4676-9544-7bcc4d23906e\index-dir\the-real-index
Size 48B
SHA256 d50c7e7dc12763f0112d3ead70d8c6c79f18bb6d8a22ab6267fb6234e7b2683b
MD5 f315ad5c3f4f641290707cc6e82070a6
SHA1 ddf70e4a93fbd88575db16259b1e68fbd6c20b41
SHA512 12558379d87eadd5b736a252d72ead6535c046805b47df18b7686d4a5e46f0df9389522c99303194458e969d737a5a8608f83446bab27ef05ad8b443c088589e
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\d728ef8f-3197-40a3-8ab7-811468d481f5\index-dir\temp-index
Size 4KB
SHA256 ff6e6e0a136e99acc85d2c5512a7bdcef0b5bd150134785d0baa90a22ef76573
MD5 c4200c2a329ee2ad837258995b0ac356
SHA1 87617428e1a2b3126726131997878e336ef9c549
SHA512 d9e75893bbf7f0840957406406a447c7c78fdd725e23d1346f87cb17e0188e7b7f098cbb21989a8768d3b29e4803dcf2d4af3ab30046d9c8c231720119d2666f
SSDEEP 96:mXh3TGFdjmrxiDW2av0B6XiEP7nlT+Pz3xU3:Wjsdjmoyp0BSiUrIPz323
TLSH
T15381B6407C49E532D7E68C3372B55A9F7F3282DC2E9F3A02206DABE66F536086F01559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\d728ef8f-3197-40a3-8ab7-811468d481f5\index-dir\the-real-index
Size 48B
SHA256 b5e6ee57044cada2cceb65f698ef1aa7addf4779d7caeb6f4047bc96bd25c602
MD5 043a0b905c97f4a5c04d24163e3a9aba
SHA1 384403812a095471c02b31acb0d73f01663b14d1
SHA512 fccbcce62498fcbbd73de6f0552f581c5e1302ba0488d9b8c9d988a843ce73db157cde768274c083d414608cb75f85f2c5a388edcccfd10255095f90308a9999
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
Size 195B
SHA256 3dd41f610e06d1c4ce2d7accef2b0d641f62da550ea4a44b542721d8e0c2a92a
MD5 6fa710a0c71d702732b0856e56391113
SHA1 087441857b7548ccac54d3ca8eef86e86f10ff64
SHA512 9117b4cfadf96705058d9c457608092343e29e5715578f77e652b3fba3520da07b29d2b5ff68aec6a1b4dcd831311dfb853e3fafc1d25f25a22de6f19da96fcc
TLSH
T1A9D0229B80326102CF9006F21D12F3C4D82F1EC36DC5CCAC4084B0400C7725A42C3F22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt.tmp
Size 386B
SHA256 d207c65ce09da81324fab3f75f28d779ff47eb0070fd710e14536ee50e203240
MD5 03c76519ef9aec6c1f0a02ab52eda869
SHA1 9964332c5cb7dd571035247d87e4d320342c10ac
SHA512 46d3f4c1240f46bcecae4cab14550444a509098b2245d9d36566f3ab2d0442bf6482c21f5618b774f8c53ffb75952e3b1adacacc9ad3c4bd8451f1e0f5c9013f
TLSH
T141E0615726735112DBA148EA0594F298D83F2E835D40CF6C80C470410C77A2646D3F53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt.tmp
Size 383B
SHA256 87132d2ab251ab9f48bf4f3af3e5692e792f6ca5c41679ea72f22072da898040
MD5 f5ab66278c9875580aed70dd212cc83e
SHA1 3e04ae10b450b34e057901e96eab1ae7d85993bd
SHA512 921a3f0f813725b0ee893eb5b38349e2ef5af189657b528fa5e06573f2f7fd0e58ee6a9ee41a12d345cc91d4609ac5427e4d32501e893499ad77670444e8ab45
TLSH
T168E0615722735212DFA149E91594F398C83F26839D40CE6C808070420C5BF2745E3F53
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 a8626e5929ad847dba4549fec81786180342be335830940678a15dfe6937c01d
MD5 75d13cabae0f90ec421deb0c2b8645ea
SHA1 0c109583012711d432e9ce21ff074379045634eb
SHA512 27a255cc52e118df6ebbd3444cdb71dadfacca57a587f045d62bd5f2ca81cf46304220996756270c54bd024c2544db70b6ca63da7538b9894002a882555bd5b9
TLSH
T1A9A002510155429BD158837094910194767088150B413A5D45A480B49D973914512509
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 a72e93c2cb96f22730a82c00c0d2ef9ec09aebdc982156f5858fc7c823b19d8c
MD5 5587868978f0e5faeb8c17a58b0b93e0
SHA1 4011a13b787f5e0db30ada995f6536a686a9e0ad
SHA512 0e9eca1de975619556a663a98f0f197f772ef7bea07d27969c9f0c809e8cc5b904665434547a8efff5cb6e040cf5aab93543564074f6517ab6fff1f65b45a7b8
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 afb6ff085a85d2c04f0df67a0e5eee7e48146787ff826f44c5f4a190474935f2
MD5 134b3ba7627deba062053c33d0884760
SHA1 0c95db4d96127bf1d7382931bdacb3c47342be54
SHA512 912408006c74fb7c6712ed196dbf59f0ca8a7b04a916ef3c71ac58ee5f683b97dacc921e9770f2a38690e16ff62f001c4c126e2da1c66128eab96f539ddb9197
SSDEEP 48:K0s7amUW6jbKJSISejK961YjxczYxCagyLOpEIGM81bAHIISg1K9E1W1xulY/AMI:K4rCK8cuedWK+85ukKDKO5
TLSH
T1CA913751757B821038BE3A4C41B59B6F514132B37525BA3BBB7C41A28E2EE094DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3ed9b02-6e6d-4f05-9015-5349df2e4f0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3ed9b02-6e6d-4f05-9015-5349df2e4f0a.tmp
Size 10KB
SHA256 d064eb5ff3facf9df110cbd6fd838cc2b8171e47878603a3347a69055dfc524b
MD5 f7c0f59bc714da66f10588b794753f04
SHA1 cc56847e60d83832a95927b498514630f817408e
SHA512 40ea7129069b9be5ffa414659a0c5f31b44a1dd528111e96d196b89753a894c444f34d27ded8a9347bf13c9d8a2dcc623579a2665e0049b4651b6fd75785a47d
SSDEEP 192:sxZ2RhW//fss3BIdpwtHW6+WNtA+/Yg4R+ZIg5AJ:sxZ2G//fss3q4HbP/keG
TLSH
T14022D9526E38A97B8CC7D20DBB15BF17E6F9143295941E88AAFC961C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6a4d65f-b1ef-4391-8d6f-89f4342c3b61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6a4d65f-b1ef-4391-8d6f-89f4342c3b61.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af860ede-d27e-4a32-9761-baee15f90a81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af860ede-d27e-4a32-9761-baee15f90a81.tmp
Size 8KB
SHA256 fa6c91a1ef791dc2aed153c25b37896773dad9118ecc70719b48f6398ed0c69d
MD5 d25b1cf09990b92ade8afe59b3509828
SHA1 7bf6c996944410ac3effad3306d4861dda14f722
SHA512 e68d7f755a116427b78dba7a0d5ef259e7935e2740f42bb4d9c4a2a18894b951e061617523812e6970bc1fac7ae31ab93d832eaac84d440f0336cce064f74449
SSDEEP 192:LJONS6Dph7qQmiUyx+BwGYX59ezgHNCLjzorx1mBiXx/akIIJq5jU6:lONS61oNBwGYX5Ecw78+iXx/roU6
TLSH
T111121B32E8B8BC6B5DD36595B04B35139FE8512BEB847F90D6EC1A2C01DF69C130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb8c21f8-870c-4124-9af3-c6ff132c1145.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb8c21f8-870c-4124-9af3-c6ff132c1145.tmp
Size 8KB
SHA256 628e043fcba40ce590f19f9d35683e2f03ffb6450ed923beffdb17d42b08b506
MD5 370d3ac8f1a50a858994d8d26a8aa54f
SHA1 ab06c7e8e9d65329271d6f3c4783a9f1442ad1ef
SHA512 78e68ed34311aedd3c269989117ee0c9d5105d761ae008227fc06bba717ea0e98676aed5f192c000c0cba6ff57680837c483a18f609d8bed967864f34a39b3ae
SSDEEP 192:LJONJ6DphmqQmiUy3+q8wGYX59ezgHNCLjzorx1m7kk7yTU6:lONJ619ZRwGYX5Ecw78UAU6
TLSH
T18902EA35A8787C7B4DF36E45B54B37179FE8112BEA952F44D6E81A2C01C768C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f5ca14b29c9172a7e36065a9acbdf2dc5da8ce5b65a1aaec976efed2c7b7d993
MD5 adcd3628aea34d64f2f4fa49261c2eac
SHA1 98075a6c418077f9884de90c0fe8e1ef1aeb020e
SHA512 c5e9382efadcefe972498d4036a6e654544c14e8888919995349941722a1f2e0f666c4607191b6d3322e110c04ab7cbc6bd6ed80242db6db49b993bc1c036a91
TLSH
T145412A5CAAE91148B3777F5AAFF6A86D447BBC762E06D49E10010D4E0637B41C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads