hxxp://+355688954607

Analysis

user interaction
yes
max time kernel
98s
max time network
99s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/10/2026, 13:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://+355688954607
Sample261002-qlvclazvbv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1092	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1531437071-3039716239-3530695936-1000\{E192EBB4-2542-4306-B21A-314C03B94EF6}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1531437071-3039716239-3530695936-1000\{EC5CBF7F-4DAC-4439-9230-57497B4FD810}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4516 wrote to memory of 2160	4516	msedge.exe	84
PID 4516 wrote to memory of 1092	4516	msedge.exe	85
PID 4516 wrote to memory of 3608	4516	msedge.exe	86
PID 4516 wrote to memory of 3608	4516	msedge.exe	86
PID 4516 wrote to memory of 3608	4516	msedge.exe	86
PID 4516 wrote to memory of 4064	4516	msedge.exe	87
PID 4516 wrote to memory of 4064	4516	msedge.exe	87
PID 4516 wrote to memory of 5032	4516	msedge.exe	88
PID 4516 wrote to memory of 5084	4516	msedge.exe	89
PID 4516 wrote to memory of 5032	4516	msedge.exe	88
PID 4516 wrote to memory of 5032	4516	msedge.exe	88
PID 4516 wrote to memory of 5084	4516	msedge.exe	89
PID 4516 wrote to memory of 5084	4516	msedge.exe	89
PID 4516 wrote to memory of 1148	4516	msedge.exe	91
PID 4516 wrote to memory of 1148	4516	msedge.exe	91
PID 4516 wrote to memory of 1148	4516	msedge.exe	91
PID 4516 wrote to memory of 2548	4516	msedge.exe	92
PID 4516 wrote to memory of 2548	4516	msedge.exe	92
PID 4516 wrote to memory of 2548	4516	msedge.exe	92
PID 4516 wrote to memory of 2544	4516	msedge.exe	93
PID 4516 wrote to memory of 2544	4516	msedge.exe	93
PID 4516 wrote to memory of 2544	4516	msedge.exe	93
PID 4516 wrote to memory of 3196	4516	msedge.exe	97
PID 4516 wrote to memory of 3196	4516	msedge.exe	97
PID 4516 wrote to memory of 3196	4516	msedge.exe	97
PID 4516 wrote to memory of 3680	4516	msedge.exe	98
PID 4516 wrote to memory of 3680	4516	msedge.exe	98
PID 4516 wrote to memory of 3128	4516	msedge.exe	99
PID 4516 wrote to memory of 3128	4516	msedge.exe	99
PID 4516 wrote to memory of 1316	4516	msedge.exe	101
PID 4516 wrote to memory of 3636	4516	msedge.exe	106
PID 4516 wrote to memory of 3636	4516	msedge.exe	106
PID 4516 wrote to memory of 5100	4516	msedge.exe	107
PID 4516 wrote to memory of 5100	4516	msedge.exe	107
PID 4516 wrote to memory of 5100	4516	msedge.exe	107
PID 4516 wrote to memory of 2492	4516	msedge.exe	108
PID 4516 wrote to memory of 2492	4516	msedge.exe	108
PID 4516 wrote to memory of 2492	4516	msedge.exe	108
PID 4516 wrote to memory of 2224	4516	msedge.exe	110
PID 4516 wrote to memory of 2224	4516	msedge.exe	110
PID 4516 wrote to memory of 2224	4516	msedge.exe	110
PID 4516 wrote to memory of 2328	4516	msedge.exe	111
PID 4516 wrote to memory of 2328	4516	msedge.exe	111
PID 4516 wrote to memory of 2328	4516	msedge.exe	111
PID 4516 wrote to memory of 1620	4516	msedge.exe	113
PID 4516 wrote to memory of 4768	4516	msedge.exe	114
PID 4516 wrote to memory of 4768	4516	msedge.exe	114
PID 4516 wrote to memory of 5552	4516	msedge.exe	116
PID 4516 wrote to memory of 5552	4516	msedge.exe	116
PID 4516 wrote to memory of 5552	4516	msedge.exe	116
PID 4516 wrote to memory of 6128	4516	msedge.exe	118
PID 4516 wrote to memory of 6136	4516	msedge.exe	119
PID 4516 wrote to memory of 5136	4516	msedge.exe	120
PID 4516 wrote to memory of 2680	4516	msedge.exe	121
PID 4516 wrote to memory of 2680	4516	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://+355688954607
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffa8bb8c188,0x7ffa8bb8c194,0x7ffa8bb8c1a0
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,9350629621642939727,4806147771765715052,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,17193295903000065531,13220587040866831478,262144 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,15434538332720581901,6754647839095888376,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,3521569855931313823,6948724520946373878,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,8747890579999109525,17553933193075690063,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,5260224851946973865,3740512333696932020,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,6372386536082933520,1423421583013385332,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,7060263894237303915,15546984317269150755,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3420,i,4250280820897889217,18170845977625833253,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,7503313069266865341,18124638686907398600,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,2523445576413617074,1352380532870193089,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,10938646171757092940,10746138166664177367,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,10938646171757092940,10746138166664177367,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,10398328543741511906,3711821381872777623,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6316,i,11956081830165224120,14828010647584932523,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5372,i,4974507085542414832,10980767988618529584,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4396,i,6105357378883080810,751718238803290163,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6456,i,3691245462964468812,8601024661495376420,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,10323224916541227025,10762614874051081430,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,12435816654222509198,7870640771282798643,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=136,i,6179374631789630785,15430085527318981643,2097152 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=784,i,2040418671105687951,13340987412279449748,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=780,i,2024734083283583483,11047770006727221322,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,17843963735914004920,11968893168176145257,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:8
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7280,i,829187657374041925,2874045215191317076,524288 --field-trial-handle=2196,i,6072751290956096201,18445296524702984840,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:2680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5ca829e7-3b67-4976-9d96-94eb8f3a1e6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5ca829e7-3b67-4976-9d96-94eb8f3a1e6b.tmp
Size 30KB
SHA256 37a92143a9922061c5ad2542a73018000d76ff367f89b8ef4ef93d66b2db99c3
MD5 4e37e0d21e0c07115c2a02cbc7ea3fff
SHA1 e45f5bd227caf1f06b1e0ab73c872aba14532533
SHA512 608ef9d3822e9d6731eb8bf3c535c48c5d1944c1f71574375d6ca21847e2f23485a27ee026be99e0e3e772b05aabb2016cca0b2b9a5ddad28fa76f74df013665
SSDEEP 768:iF80uwgdDk4pCM5OKcod0sxwz6JXsJUuN:Z0At75ONoPk6JXsim
TLSH
T17DE24BE94CE7587EC9AEAB07A37D2E224ABCD137B1A09554F394470DCC6217FE306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69f29424-b1d6-47e1-b509-557de1a21db3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69f29424-b1d6-47e1-b509-557de1a21db3.tmp
Size 18KB
SHA256 a365c38ce6ce6506e99fa1f8f2dc2a111e4eb00c84e1e84077c2fb7c92256ec7
MD5 4def60953a7c9d2777985bfef4382a07
SHA1 a8705ffe23fd7585a0fec371360477e682afe860
SHA512 bf4abc87ea28fbe75e0623ed021d4e474175e3aeaa83fb2977833ca856e5af69e5c75516a22c01e69da38e9398bdb4243a0f20a71679222c9e7e68cc11187771
SSDEEP 384:YZcIhsNmksVM9DH+042zCaXM5ZcKcx+nTEtgOIwZOymLa7ofN:mhEDJ4pCM5OKconTEXsJUuN
TLSH
T12B828D329C787CBB9DE7E641F08A3B138FB89127A7C4AB44D5ED571D00E6298230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97857e9d-8b06-4392-8a07-5c37a597fc69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\97857e9d-8b06-4392-8a07-5c37a597fc69.tmp
Size 8KB
SHA256 40471a356d361207dbeed3ad507db15df88cffe749d4431deaaec5e197189cdf
MD5 6b8e1fa890c83da2c0564e5bb4d341ff
SHA1 c211dc9cdc32639dd37fdce2a4b37cbd1ebd0efb
SHA512 0774d7fd79f8592156430175217ea9804aa4ef6520c02062f1a650c8d595007a0e28edbfc1464f7d04737c28bf99d1146d1e1a8e3ef7ad4bb88b1463bdbe4e19
SSDEEP 192:SON/68+UQmiUyLcFGCaX/U5ZcKdkBxZElQY2qv/sU6:SON/6BkjFGCaXM5ZcKcx+LTEU6
TLSH
T1A6121B36AC787CBB4ED2A581B48B3A139EE55217E7C57F84D6EC161C01EF25C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed7c7479-3034-4793-9d0a-97bac82d7be9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\ed7c7479-3034-4793-9d0a-97bac82d7be9.tmp
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3d55f2c99b845161db37b100a47911bb408c97298230373b32b80504c093bdac
MD5 8c772c59cfb695752e285fc03e7d22ef
SHA1 ff46f5b2251e7cc5c8e51640b09a38994028a644
SHA512 be52bbbac241192660826ed6b064f8e1f1b9d15d161649f6af945c26fd833decc6799a8da172d8dc1a18290617adcecb8499c61c274c41423022dd426cb064a6
TLSH
T120D02BB8C7781A70F0231035B7260244398DC5084A07100AC0B012EB0C813920200060
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1a7c83785b2bc080d6540913a6a9a7de7fd010fea8201cfffcc5b5a758ac94fa
MD5 e3ebe3246c3b49c7151597af41618e2b
SHA1 7020bb553d83326aace747a0c04a412378be4fc8
SHA512 067e5ed65d99d6b8dfa155ebb8b6a96e359641227b4323b62abccd856d0e9a04a733c41488f4e0102643c2189ec1e7090eefbcdc7cd0e212ed693e66b26f6e74
TLSH
T17FD0C074C7382FF0F036103D93310100398CC6458B03210ED06000EB4CA02C30180CE0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f584a210a80810dcf70390eb86fe52a56c51ec17c3dc5bdad617c5592045fbf3
MD5 3f81b351aa581c722c62b505045d7be4
SHA1 aee3577cce62b5fc7e839373f1bbc460a57709e4
SHA512 e189804c66664bd7981164d77ac00dcad8e4a021039a525920cfc7e66607550c4e3dab61b8edb330b231c90ec362bf990464188fa10869f34c8d8a72aea189a1
TLSH
T109D02BB887B81E70F0231035B7250244398DC5084A07510BC0B012EB0C823D20200060
MD5 SHA1 SHA512 TLSH

Submit Download

65008333-e3fc-4960-b242-2d6f36c27197.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65008333-e3fc-4960-b242-2d6f36c27197.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7200f3d2-1d1a-4911-91e1-9506bebf3caf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7200f3d2-1d1a-4911-91e1-9506bebf3caf.tmp
Size 13KB
SHA256 805c8250321fd6d3a999af8eeab79dde8f1b4e17e87014d5471b1e716d2ca5b6
MD5 6f75329aa19a955dc8f33b8752492664
SHA1 8a84f7e08d3ee6214406ac1749f024b83fddb691
SHA512 be7ff1dafd81c451789bf45a79c342e7ece25d7632ec8aec651cbea6f084a67d3b13632d53506529ff58d0aaa2ce0818e9d9313239b430a5b98b8fe00436a2bd
SSDEEP 192:sxZuRvZucBzE/ffsa7ndpTEbPAHW6+WNvhfHX0/Yhe8RIg5DVm/QVgIi1m5:sxZuimzE/ffsa7TfHbRE/8G/lC
TLSH
T10D52D9526924E977CCCBD609BE35BF13E6F5402299911E5CABFCC51C04DB6ED220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84358e43-982a-41a1-8a7b-878f499d09f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84358e43-982a-41a1-8a7b-878f499d09f1.tmp
Size 27KB
SHA256 3cc4ea8288aed667e720c77f977ef0c8d1e148a3f71e94693a02064ccd53289f
MD5 6369ee81c2d8a45ea2d90f78de037358
SHA1 575ea87d1ccc3ab2a692d6ba6f71768c04a519a6
SHA512 812678a106014066e40ad86e7c17b029d0cea0c4e8d2775fbb40237436f3b70d4cc7357b6b24b705da063b8092760136cf9f0163242fbdf135a436ddd676d169
SSDEEP 768:gbG2PL5WvR3X/8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYsLlCc57Gro7nrsB:gbG2PL5WvR3X/u1jaJsLks79fsB
TLSH
T168C2E82B640CCB7E5FC01E9DDC5A6F9B6EA802C7A7588D4047FA944C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9551a73b-2c51-4daa-8855-b88d1552d67f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9551a73b-2c51-4daa-8855-b88d1552d67f.tmp
Size 12KB
SHA256 595c8406deabe6d512e408855c63c0f8917173975678b62935d928489ac3316f
MD5 fb5bfeccf5e662410f54c57e6fedc8c2
SHA1 26e56faeb440d538296d1ae094f7701cb3a28ec4
SHA512 901c74fe2db2a4af3cb3aa66e7bcc0c934ee3ba2cdbb1a1910bcaa2dfd93afafa59e876de9047b56617340d60644c3ec4f7fbdf44b9ee006eb103482f9efc0f8
SSDEEP 192:sxZuRvaucBzE/ffsjMndpTEbPAHW6+WNiX0/Yhl8RIgrVm/QVgIi1m5:sxZurmzE/ffsjMTfHbN/Fc/lC
TLSH
T14942D8526924E977CCCBE609BE35BF13D6F9002299950E9CAAFCC51C04DB6ED220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 44KB
SHA256 34a6a0b4c6521f99ec398ce7663437ea2cbb0d86b4d1322f65ae2b45a53007b2
MD5 f069cb36af3b6c360161ec41ba4e24ba
SHA1 98c3aba0d33b9daeeda530528c6d8a2debcc1067
SHA512 0ea2853fe3ff003193dd3aac8d7e895b91513dbe13e126a540462207ac18c215eb753ed77eded3a948ab5f0adac084270bccce77abf77ff99d5a375a5f607043
SSDEEP 768:DkwV7Apz1QrSXVvr4Qc/8Dc08rHPTynh06oYE7BsMlu1U/zWbw+FaBfTPr1feVrF:DHVsz1Q+Fvr439HPTgx5E7B41U7V+FKU
TLSH
T1F923021F23F52C97C23D1E603BF184E0BD64287CB49163E0A11B50196EB49C7EAB89BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 57KB
SHA256 a53d035f52d3675d0e31c7765f9f0a32f095ff2855086958c01ece2aa0955058
MD5 7b9ae80f9b83b2d45f8abc7be74d5e92
SHA1 126a451e48e4c1788e8454c04913529886130e70
SHA512 e6df6d142cbfe4d119d1087be4ace4345509bfefddffccaa11ae07e7a0f2551f6c247aecbc4cdf1e7bd3fee0a90b426fe7e5dd0475d7b857696e5b812a9a1034
SSDEEP 768:m8SI58qWC+YGJty9o7m8ruzzuUbmM3I8JXkixjZ5kX9GsFwy+uqIxI4lLnjtB7oq:m8SQWq9oDrEb73D0cQXoaTqsVHglYr
TLSH
T1F14302B13A592D4DEA84D6B74FCC9E5C1F77425BC7A28B948D807C2DDF000A6D481B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 31b619573303262dedec7a774c8a9b35d5ebb8e51ef832b4a996be23e7d99ccd
MD5 7f11036c176dc7a5027b54fea3e07a60
SHA1 30957ac08c8b18f65d1f8e680a69a15aa0647e14
SHA512 7e6ea7da025c91432471938d534692cfde1e193d8cb75dfdd024f06243a0c981a95e4550bf447906aff965593e4f28047b91132ac5f76367cf35866663bbc2fd
SSDEEP 96:VKzv5WkLkYiD70X/0CMFpoQXSw2ou4ssWKhyWQxW1B:QboVDQbMFkDouASW1B
TLSH
T142C174AD60E59D35DB6470B84BF2578236F129C380639F6E5A42C474BF727C26810EB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e960750a70432f4f3a6156b2a6bf1eb01b46c361c681b933d961ad8c7a6bbf0f
MD5 97e8681c5eff610af1403ec30e2e0e22
SHA1 f310cbc5f23080a746db5b9b50c3a854304c49b6
SHA512 1146dc9f2a6a2ebca22807925f98a572ea3bdcce7968af30d06186e912edcd5182cfef6ee356125e51b428a5ffc65ae36ec1782e8f5e6b0c44769ca2b7e6b08e
TLSH
T1DB613B4E59E4DC0AE768707C9FF6218A3A30558145B35EAE2F8BC9B86FB27C0705417B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 502d6536bf7421da4453c3d49351ee4f4fe1e3f82744f59c05bc42ad9d5dc2ae
MD5 45b8bad86915a279125623336dd9277c
SHA1 c2996031c8f864c82cea5afe31bd22aa3fc984f8
SHA512 3b6b38a55c74c76799e7fc69d23742448578ee5e25921dfe1fc4bd455824aa52e2d16f644f39075a922617fcbc213a330811e2dbd29e8433f2c52e071ad0eeb5
SSDEEP 3:MsEllllkEthXllkl2zEBtll:/M/xT02zOt
TLSH
T1ED4402086BC01E15CD0018314021835013B0D85106159B43345A04126D8B9910C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

becca313-d3a1-4e18-a241-0012afeca588.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\becca313-d3a1-4e18-a241-0012afeca588.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7354ec44-b826-4be1-978b-d93373161fdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7354ec44-b826-4be1-978b-d93373161fdb.tmp
Size 8KB
SHA256 6fd440461139c09ac72062f5f57356bf0d6c9dfa8891837ef2e9d07fb3f15aff
MD5 a58801aff78f2e5c249081697acbb323
SHA1 cc1c55ad984d2d1c4e8c7116e1fedc81f9fbc19f
SHA512 3557b992a1ef5bb3dad37c0302c78649ef19e4f77d195db2aeb90fc0a0b63d96f34667eaa776c6b8cb314f799c7014cddf5852082f1c3458ef5662b33dbf656e
SSDEEP 192:DlrpzG9E+19JDyXpEiMIVlGiM/ZMc/3a3tzZ9+MpCwMzGcXtCdj1QG7s7Czu2/kq:DlrpzG9E+1LDyXpEiMIVlGiM/ZMc/3aX
TLSH
T152129BF783E4862DDC3152F4AA246E2FCF6D1924436C783AC9D5AE1793E2071E1416AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f93cbc7-0126-4538-bef5-14b2918951b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9f93cbc7-0126-4538-bef5-14b2918951b5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

bb927349-d75b-4ea3-8c41-53318c45df99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb927349-d75b-4ea3-8c41-53318c45df99.tmp
Size 209B
SHA256 eaad74a970669779e141745571f5862641b67d27b610a7831b8345b800b59bb4
MD5 6246c577316cb2dcdf1192aba18c7ae9
SHA1 48bc08f2a4c1a5ab5899b1d3dff74d2529be14c8
SHA512 f785e9a9ecded16baab9fd563624b135101a8eb7cf708bf8e8190083b0c7126a3becd1628d6b1965d6a4256da09201e5277644efdf172c2cc90819dc3da2291c
TLSH
T1B9D02263230A70B5A96C2E85526AAC8FC3BA00282CC2DADA24DA9898093286C0D5B184
MD5 SHA1 SHA512 TLSH

Submit Download

f5d1c930-9226-43c6-b819-6c8f7167b7b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f5d1c930-9226-43c6-b819-6c8f7167b7b4.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 73d5c2a7e0bae1f3a58ed226aed45e4568820890e587f2debbcc8f53b22c4148
MD5 965645e4961b8df19c20f69c2fc3eac5
SHA1 e43d3158e7e65b1e3fc2611a9649a9a541c3ef90
SHA512 7e1f1762d2662233bf4ba84150ab41a1d081f7258911fcb3f17d7b225104ef77a7551ead8fa89d2ac8877ee3e6c05dcba50efe447cd5812bff14bc161d892d86
SSDEEP 24:KLIttW9kiL0k2C0mI9Ihq2KsVhkI21uSmSw8WFGKnyXLMf0pvg7ITIXKnh21qS24:KgzIhKIQUrydc8IXKh287yhsI3KdGcC
TLSH
T1CDA1FF01B0BB0605387E2E0980768B1A9A4271E37179E77B7FBD05E54E6FE084DBC9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3184687-dda0-49b8-aa5a-299fd716aad0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c3184687-dda0-49b8-aa5a-299fd716aad0.tmp
Size 14KB
SHA256 0d084392638c10a7b5efe450965a625907e99be0399a023bafa57464a8cd9621
MD5 b4e77ae4f0353336a919fa51f5cae24b
SHA1 eb78ae33bad9afc46a3ae75a044e7de6199c285b
SHA512 910644f8193ad6fe83ae42ec861bc1f173e7a677f1b026c6f78200fc66163a3de20148bc838beb0858956a4114e467aee5a130abd73f6bd96ba3f79ca4520cdd
SSDEEP 192:sxZuRv8ucBzE/ffswWpVg1ndp9EbPAHW6+WNrrG9aBX0/YFVRHIgbDVm/QVgIi1M:sxZuhmzE/ffswWvg1TZHbbm/qg/lC
TLSH
T14262D8525934E9BBCCCBD609BE35BF12D6F9142299D11E4CAAFCC91C04DB6ED220784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c639ee35-dc84-4a90-8d21-cf072a1e7b41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c639ee35-dc84-4a90-8d21-cf072a1e7b41.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

c9a6085b-0509-4b1e-b3d6-7bc305738ac7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9a6085b-0509-4b1e-b3d6-7bc305738ac7.tmp
Size 12KB
SHA256 d566684b135f868a68e9805a2ad9d218b288b428468978387cf2590c1aba31a3
MD5 b0d2eda043bbb6d61b5c1f0cc0c856e5
SHA1 a7a680733f52d7d0c2ac63ac00390af31f618239
SHA512 b14f2bbd90075232bbe1bfefcf2f710a02f60eca0132bb3378d9a6e226e533975f76b11e6584eb229f4ad6b9cf03b6bcaff306ed67aaec05d65dec6559c43648
SSDEEP 192:sxZuRvZucBzE/ffsi7ndpTEbPAHW6+WNiX0/Yhb8RIg5ZVm/QVgIi1m5:sxZuimzE/ffsi7TfHbN/xM/lC
TLSH
T19D42C8526924E977CCCBE609BE35BF13D6F9002299951E9CAAFCC51C04DB6ED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccefe913-f891-453c-a838-96ef3c180b1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ccefe913-f891-453c-a838-96ef3c180b1f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc11be16-c2e0-407a-ab13-f1ee2f07735f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bc11be16-c2e0-407a-ab13-f1ee2f07735f.tmp
Size 26KB
SHA256 d21f5be0469a97facb21a28816372c6104efec502a9346ce4288aa2e12925b7a
MD5 4d60873b78d06274a45085418e14f4c5
SHA1 aa9d2590a8c5df49a47fda8a47ec577d184ce0c4
SHA512 e17407ad8b1fcc2dda6d0ff47ebd383a84859908bf49b868438f0f700c3306309595579c3c61d01a1b82616433693e7bb223147a230179c571eff7b2bcbaf2f7
SSDEEP 384:niFiZcIIzsNm8TUNTUlIlkhVM9DH+a42zCaXM5ZcKcx+bTEtgOIwZOymLa7ofN:iFQ0vwgdDZ4pCM5OKcobTEXsJUuN
TLSH
T12AC23BF248EB987ADDAE9743A37D2E038EBCC167B5849640B398550DCC961BFD30AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca84ba98-151d-4847-acf1-5b374b5c4c65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca84ba98-151d-4847-acf1-5b374b5c4c65.tmp
Size 8KB
SHA256 08968053f8523b231fee5654f44df74cb017f4df105d2f8c24c3b0a77214af8e
MD5 d04301fa81de95eb5f81fb939688e4e3
SHA1 f3f9c5e660fb7efb37e060a4e0e1efe003850d51
SHA512 14dd00512d24ce9c1fa4c17add40c547670eec22eecb77e383e3ec39aad6fe7d40d1b4cd68d9dbc754ec4c8bdea22c30fbe9aa28b4effeb823ea2382e816be56
SSDEEP 192:SONE68+7QmiUycc1GCaX/U5ZcKdk80LGA3U6:SONE6Bte1GCaXM5ZcKC13U6
TLSH
T1F402FB39AC7C7CB78EE2AE45B58B3B139FD5116BE6906F44DAE81A1D00D724C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c4d9165-7234-4765-9b45-bba289d460b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2c4d9165-7234-4765-9b45-bba289d460b7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fd91a04b-c732-4334-a0eb-1edd71a9036b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fd91a04b-c732-4334-a0eb-1edd71a9036b.tmp
Size 18KB
SHA256 a04de891925587a51c5b0593fef1cf09b6c1abe2a6bebce653a2261c30e2ddd3
MD5 3951191f52bf9e7de3b752ba05f3e16a
SHA1 4def135a99bd8fc7839a3cbd3fe0fc4df27f59df
SHA512 99aedaa7149a3274d56d3c6566e12f8e5d390745e772646517641d6438acc10d79c48b0510cf94b991f40e5e57a6fb8fbcf843daaf9a259a277e4286dc0c230e
SSDEEP 384:bZcIhsNmkhVM9DH+042zCaXM5ZcKcx+nTEtgOIwZOymLa7ofN:DhtDJ4pCM5OKconTEXsJUuN
TLSH
T162828D329C787CBB9DE7E641F08A3B139FB89127A7C4AB44D5ED571D00E6298230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 390a2a3eee3388feba8f50ac936fae7f3dd905cc31b6e50a6dfb50c828c3e81d
MD5 720f310158c40becd9bf50e068068fb2
SHA1 9869eb1fee6c573cf29911f3997eaca243e1ceb1
SHA512 a2e0e147b056f24fba2d685f6cfc2be7cf17a31c1f8df27605d1a435d08396533520ca37c35d5323925c8297589b839afb60768451093b1d08125082eb0c0002
TLSH
T1AD41264CA6FA1148B3777E5A9FF6A86E847BBC672F07D05D00110E8E0A36A40C871733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads