hxxps://me-l[.]co/vfd1s4e2

Analysis

user interaction
yes
max time kernel
359s
max time network
327s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/10/2026, 02:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://me-l.co/vfd1s4e2
Sample261011-c8n77set2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4564	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{6571444F-A15D-4FAF-9548-E30BE7EA0E1F}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 4780	4260	msedge.exe	90
PID 4260 wrote to memory of 3256	4260	msedge.exe	92
PID 4260 wrote to memory of 4564	4260	msedge.exe	93
PID 4260 wrote to memory of 3256	4260	msedge.exe	92
PID 4260 wrote to memory of 3256	4260	msedge.exe	92
PID 4260 wrote to memory of 4032	4260	msedge.exe	94
PID 4260 wrote to memory of 4032	4260	msedge.exe	94
PID 4260 wrote to memory of 1344	4260	msedge.exe	95
PID 4260 wrote to memory of 1472	4260	msedge.exe	96
PID 4260 wrote to memory of 1344	4260	msedge.exe	95
PID 4260 wrote to memory of 1344	4260	msedge.exe	95
PID 4260 wrote to memory of 1472	4260	msedge.exe	96
PID 4260 wrote to memory of 1472	4260	msedge.exe	96
PID 4260 wrote to memory of 1692	4260	msedge.exe	98
PID 4260 wrote to memory of 1416	4260	msedge.exe	99
PID 4260 wrote to memory of 1692	4260	msedge.exe	98
PID 4260 wrote to memory of 1692	4260	msedge.exe	98
PID 4260 wrote to memory of 1416	4260	msedge.exe	99
PID 4260 wrote to memory of 1416	4260	msedge.exe	99
PID 4260 wrote to memory of 2652	4260	msedge.exe	103
PID 4260 wrote to memory of 2652	4260	msedge.exe	103
PID 4260 wrote to memory of 4508	4260	msedge.exe	104
PID 4260 wrote to memory of 4508	4260	msedge.exe	104
PID 4260 wrote to memory of 1436	4260	msedge.exe	106
PID 4260 wrote to memory of 3796	4260	msedge.exe	117
PID 4260 wrote to memory of 3796	4260	msedge.exe	117
PID 4260 wrote to memory of 3796	4260	msedge.exe	117
PID 4260 wrote to memory of 3280	4260	msedge.exe	118
PID 4260 wrote to memory of 3280	4260	msedge.exe	118
PID 4260 wrote to memory of 3280	4260	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://me-l.co/vfd1s4e2
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff85f6dc188,0x7ff85f6dc194,0x7ff85f6dc1a0
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,8707785485445228390,18429791583616157706,262144 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,7972303425164215639,5847659480718046623,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,17691575438034947460,13542624085469411929,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,4102186976782990101,5778286310461238631,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15684667213808902533,12392636381724271274,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,6858031622338526541,7818775419431026767,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,1616712749108855857,9609452347802508760,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,17757030479041493719,9771156074619404698,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,17431392574970437748,18070301954696359695,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9056182648220765726,14220738305673280639,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9056182648220765726,14220738305673280639,524288 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6228,i,2006790757773143536,2487850362796223466,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5752,i,8450759651427169563,910935250593251637,2097152 --field-trial-handle=2260,i,11412053939213391544,8886397959973659228,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:3280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1232

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7007d86a-92ee-40cb-a8b5-5364760fac9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7007d86a-92ee-40cb-a8b5-5364760fac9d.tmp
Size 22KB
SHA256 a68db9484d116a3d4e08fde3179640fd52d217bc47c443b5bbadb9baebdd10c8
MD5 db1c51bad117c343543b926bce3db631
SHA1 cb8910b488ebaf5b64d55ea10f9119a44190d222
SHA512 b1691d157b4230495b1e650f8c1ff1e89bb92c396830e03de86b1cb44489e9f8baa58b6b3301c896335bc2012402683643f32123640ea34f324c7f2c9701803c
SSDEEP 384:MZcIlsNBOfkVbidGdMh//S+ZGG1A8tJ4doqkLrMT3:alXM9g/K9l8PqkLrMT3
TLSH
T185A24AB4D8B46CFB98A2E9C1A546F6036EB4513793D81A5CD1F9FA3D209F1B80312D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c5b2093-2cd2-4281-bb31-72f2b3018c66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c5b2093-2cd2-4281-bb31-72f2b3018c66.tmp
Size 8KB
SHA256 84f37a0c9530629f3ed9a873dbd9edd08e140bd41ffc1cb6fb216d44947c4a0e
MD5 5fa3e7ab143b5d727fadbbafe973cd30
SHA1 ee85ee6bba950dc1000bfa920187a431fea3a16d
SHA512 eb5e53b4b687f33dcd46463f580cc2471ab4187e91e67b50bd15fd53399100a1ca6b34285ab4254689e7235ee5e56f4033e1bc2f43cef3afa1715ed9ad08913b
SSDEEP 96:KqONkiQsjpfbUmjH5ih/cIPURHl8h4otop5HaDPBKP4v+Y1xf//ojdqxERtIgBCp:BONm6JUm0QmiUy85so//S+gBCLQ2U6
TLSH
T1E502D839AC787C7B8EF39E45B0877B239FA4106BA6916F94DAD85E1C01D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f560cfe8-c2b4-4f30-8afa-12f9c34d14a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f560cfe8-c2b4-4f30-8afa-12f9c34d14a8.tmp
Size 105KB
SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
MD5 1ffead718e2d4a1c853bdde71605a629
SHA1 bec748fbabd1ff5b25bcc88b57845b8ef801ffa3
SHA512 2d9d536f4d1f11cec455a2c5b7bd5485bf92d28d29a4af0c14a218e58f3db936b6de9aa72bdb015a143ce31a5dcdb74cea83b1d9addd898b44e718cacc158e4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53395087452cfeb9ec68b5c2031bcb8961f642bc30d0158013da30b4ed1b462
MD5 c5bde68347177f1892503f24dcfa5387
SHA1 fdb150902833b025b0dfc6a33947f7c2a2122686
SHA512 fcfba050ec58b420612bb9d99ce923bde623c767c279fcfe5704fd2a60b6fb007e14c0608617c4f4557d417c8e22d24535fb7c61ff2c4c0b4c2fe8a553f6b7d0
TLSH
T13AD0C0F1A2313BD5C62C003701B00210252501B311AA53604495640C47F4045C0C3CE4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

143e1ad6-ebe2-4bd9-9a76-ffa4404f89f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\143e1ad6-ebe2-4bd9-9a76-ffa4404f89f4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

23f04536-4960-494c-a327-00aaa83187df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23f04536-4960-494c-a327-00aaa83187df.tmp
Size 9KB
SHA256 ad06307fe1a88cbcdf25027ba459d4e89b813de586415b073d226098270ab529
MD5 6a176fef4d06b60e4e2b4372e1b52a14
SHA1 53c46b0c9b7bbbddb054101fdc9034c6f33246e4
SHA512 80002bd1d4c1d7155cc8791eeebdcb3f1e603ac92a59dda5bc40779a3f9561439ad2852855c4bf34ebe962a3dd29ddcf7a5539b00db9abd130cb2d5c87c3a8d6
SSDEEP 192:sxZwRXeWq/fJsaakIdp1zHW6+WNGY36ahcAYIg5EJ:sxZw9pq/fJsP99HbGXgoO
TLSH
T19C22B7166E38A57B8CCBD20DBB65BF03D6F95032A2951E58A6FC951C05E76CD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24d3935d-a14a-4946-87fe-3befd7047247.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24d3935d-a14a-4946-87fe-3befd7047247.tmp
Size 10KB
SHA256 4b9e1251b0d59279da7352c69249729a869ae6c4d3c579abdaaf8655a695616a
MD5 9b99210ef03c56e7238e92a85ea92edc
SHA1 724c0efea3802d117e2c7d43b65b290a2c69af65
SHA512 5588af7a1add90950aa1144f54a59450105c9a61408511041f955028287f11b781ec71850e7a6043f2cc61c86d172db15363cda11dc56b2ce8c3f84740b9e765
SSDEEP 192:sxZwRXfWq/fJsasWpVMkIdp1zHW6+WNGY36chuaYIgbEJ:sxZw9uq/fJsRWvM99HbG7yA0
TLSH
T16022B616AE28A57B8CC6D20DBB65BF13D6F91032A2911E58AAFC851C05E76DD530B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4eed1bbe-137e-4569-b6f2-c0e6cd71223a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4eed1bbe-137e-4569-b6f2-c0e6cd71223a.tmp
Size 27KB
SHA256 0a6674223f3006cc53b871498b681aa485e8c664d471a9383f5ee0ba88293941
MD5 0b4ebef696587b067dc654a7811b486c
SHA1 ac8426eefeea62c271e87512243fa3ecd56927ef
SHA512 3c66a1c549114cd445ac9b63043e301c99124d84dc50da70291d244b3a67b50b26d9529ce2012719f6d0e96279f4eb80707eebf973154a4200824131a3b3f9ab
SSDEEP 768:zrKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/YroOZ:zrKlm7QWvUYe0u1ja8/L/E/jOZ
TLSH
T1FEC2FB3B640CCB7E4FC04A9DDC5A6F976EA802C796588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 138dc10fb48fc4cf519e6896018a50449a775acc27f50848138ceebbaf2df237
MD5 68cff8a853d5f03f4aa98e1b4fde089f
SHA1 ca2c4764def4ad9d47bdf4036fb8cd8d1441eec6
SHA512 4571060e0997c0d58b51a9071cc334bf49fd91769c187d40f01c2e181e4008f31d10d7d460f21705811a1a630fe211c7b8732f3bcd66f7cfb9b69adf4821a735
TLSH
T178516145C59280B2FBDA697092D1138F353C79A393AB2D6535CCF77B0B8BB455234806
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 de11720deffe62b2376b4411eb01a6e743aa486ac90f81ad428ebd7bc8751efa
MD5 4368bd66c429085c283de99157332c04
SHA1 ff7711170c84349b58bd8a72690244f984847f1e
SHA512 d9190b9c32000e202a28d6eb06211445c8c9e9a4d6327c91769ac9949aa382700fdf5b301a63fd5fece50ea51fda87bab70f7fde7a819c96152b970b95b35062
TLSH
T186515F45C59280B2FBDA697092D1138F353CB9A393AB2D6634CCF77B0B8BB455224806
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

98e31e47-9be8-4d67-a028-2a2edd0aff16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\98e31e47-9be8-4d67-a028-2a2edd0aff16.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0dce9ce2-f1cb-4683-8491-cbdb9bf32318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0dce9ce2-f1cb-4683-8491-cbdb9bf32318.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

2d2ce1e3-0e46-4b08-b814-b0e8991c3269.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2d2ce1e3-0e46-4b08-b814-b0e8991c3269.tmp
Size 1KB
SHA256 5a8b27d6d3d143fd6624c3b6114c10af639de1554f3a0dff5e87b3afc821fe86
MD5 255171a1a514bc9af9d4096b08bd6e0a
SHA1 20b937c569000c4ed69d255af88873a618c9d03e
SHA512 aef70d0f13a88141b519257cd78200bb4b5a59c30f35cffe56f9df4a8626e9d0b5f1fcc5d5fb00cc82ec379113622b134a56bf7a96dc63bc6345088c4f98344a
TLSH
T14A2149B2C3E4466E8A1222F06A24AF2BCE1D090653283C0989E4AF1B93E64B5E111D5F
MD5 SHA1 SHA512 TLSH

Submit Download

4c24ca81-38d3-40aa-bf4d-dd957e44271b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4c24ca81-38d3-40aa-bf4d-dd957e44271b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 f159c913f3b8f2fd07a856fa718df5470aea61bf4c3a33f1d5fc89a40ddca672
MD5 8af5128c2a278304fcbf3e1145bda003
SHA1 2b4a545395bceb16c8a2f97077c62bff83f6781e
SHA512 9e2ef0d8fe9ee5cf06c5ed0e823ec61d4af68215b7cdeb01b94066ea4875f5d95733449770e221716a79497dd7fb491c2fcb1fd5e9227674c88ae3ad52d46ff2
SSDEEP 48:K0Mb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLFk51Hznob7+7ISNoK9t1foxt4Yuf1k:KILSKEkOKK4KP6ce0KDqeul+KOAq
TLSH
T1DEC1F01176BB024139BE29988276871B524135733418F72BBFBC50A2CE6FE181DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aadf6be3-3653-4d53-8b2f-b41af24015e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aadf6be3-3653-4d53-8b2f-b41af24015e5.tmp
Size 9KB
SHA256 fcd73724416da3f3324be4b9987a342ad71e297dada85e11cd69b7be2cc16822
MD5 b4a6cbff6db57b9606ea43beb3539ac9
SHA1 d1db97c4fa5a30901547c2635bdbf8d00364401f
SHA512 c66580d3d293bfa039714e3cebbd9b2c2214d60918eac3403d84223a8b41c1515e879c740d674f451b64bce21f2387d0b4823ed32fadd44e0c71178bf54bd377
SSDEEP 192:sxZwRXeWq/fJsVahIdpJHW6+WNGY364hcAYIgrJ:sxZw9pq/fJsYKJHbGXGo9
TLSH
T18612A6126E38A57B8CCBD20DBA65BF03D6F9503261941E58AAFC961C05E76CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c55efc0a-1f97-4040-9a9b-0eee00b695a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c55efc0a-1f97-4040-9a9b-0eee00b695a6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7808ca3-b4bb-44c9-8dbe-cd5c31eb826a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a7808ca3-b4bb-44c9-8dbe-cd5c31eb826a.tmp
Size 18KB
SHA256 2eb70b7ebc2863bf54c92dd72111a91d7b9febde720203de24006d46524a114d
MD5 bc91d0a92b80eaa40dd25ec7c87834a2
SHA1 b0ba157ad167f1955e9b7ca927f251ecf25c13bf
SHA512 23971db734f9d4d226e5cbdfea58175c2cc27273a2cbcff909fd5c992c44e57dd15c8090cea4721e6128c64fbd507a46b758dca64da74028b542942c38e21df5
SSDEEP 192:usm+xasuheOwQxMGsNBOfQwiMUbxArQmiU1Pawj4h//S+ZMaooqoCVTEFcpbk6+4:WZcIhsNBOfkVbidB/Mh//S+ZGCMT3
TLSH
T176828D75AC78AC7A6DE3E545F48736134EB49033E7C42B98D1EDAB1D01EA1A81307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be05249c-765a-4e34-a818-064b5c9fabef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\be05249c-765a-4e34-a818-064b5c9fabef.tmp
Size 8KB
SHA256 d98069fd485f2bf2d5ac854ac2b5aa4e381763a538a6137a769dca9b466e381f
MD5 83cb4baf58495b39fbe4eba5aae2801b
SHA1 ff2031f9ae6282def8eba9bba0b045412892313c
SHA512 0c2c69c333d6ba12edb1f3ecbdf61a9bf45842b055f30380e9873ccc738beffab58a12721550c8cb1484aad12d58bd1041a812944cf1bd9140a4a6c57223e5f7
SSDEEP 96:KqONkMQsjpfbUTH5ih/cIPURHl8h4otop5H5VDPBaP4v+Y1xf//ojdqxERtIsx6C:BONc6JUEQmiUyZd5co//S+ZdNxoqoU6
TLSH
T1CB121A35A8B8AC3B5D939941F08736139EA04167EBC96F94D5EC2E1C05DF2AC630BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e4d071050080ff9658b22e6aa96b61cbf64943370abfdc96d22abe38c4178bed
MD5 eebd91489f124d5dcf81a5b0da48eab7
SHA1 67ddbe92f1cda258f3494b4e3bdb50ca50d193e2
SHA512 aa77b9fc68eb420266ce61e9dea402af6beb711672eb95ded2d0813cf3188b1fe1e234a63ea471cfee094235792cf0f7cf1c02b660af6cec0bcc22e0d6530c06
TLSH
T138413B68A6FD1048B3B76F5A9BF6A86D547B79372F0BD05E00110E4F4662B00C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads