hxxp://view-source[:]hxxps://games[.]crazygames[.]com/en_US/road-to-glory-sxx/index[.]html?isNewUser=false&__nextLocale=en-US&czyExpClientGoogleH5=rewarded&czyExpClientSuppressFirstDayPreroll_CZY_20818=enabled&czyExpClientOptable3=disabled&czyExpClientAdsDummyAA=disabled&czyExpClientAdsDummyAA50=enabled&czyExpClientVastVideoCache=local_cache&czyExpClientAdsConsentGate2=enabled&czyExpClientGooglePPID=enabled&czyExpClientContentSignals=disabled&czyExpDisableInterstitialsFirst12h_CZY_18471=disabled&czyExpGamePageReco_CZY_19213=disabled&czyExpOfflineMode=enabled&czyExpClientPersonalisedRecPhase1_CZY_20721=enabled&czyExpClientFullscreenMobileRendering_CZY_20866=enabled&czyExpClientArtworkAbTesting_CZY_20701=disabled&czyExpClientDomainProbe_CZY_21425=enabled&czyExpClientModelGamePage=knn_v3&v=2[.]11

Analysis

user interaction
yes
max time kernel
1s
max time network
11s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/10/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://view-source:https://games.crazygames.com/en_US/road-to-glory-sxx/index.html?isNewUser=false&__nextLocale=en-US&czyExpClientGoogleH5=rewarded&czyExpClientSuppressFirstDayPreroll_CZY_20818=enabled&czyExpClientOptable3=disabled&czyExpClientAdsDummyAA=disabled&czyExpClientAdsDummyAA50=enabled&czyExpClientVastVideoCache=local_cache&czyExpClientAdsConsentGate2=enabled&czyExpClientGooglePPID=enabled&czyExpClientContentSignals=disabled&czyExpDisableInterstitialsFirst12h_CZY_18471=disabled&czyExpGamePageReco_CZY_19213=disabled&czyExpOfflineMode=enabled&czyExpClientPersonalisedRecPhase1_CZY_20721=enabled&czyExpClientFullscreenMobileRendering_CZY_20866=enabled&czyExpClientArtworkAbTesting_CZY_20701=disabled&czyExpClientDomainProbe_CZY_21425=enabled&czyExpClientModelGamePage=knn_v3&v=2.11
Sample261011-sdtgfabg39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2836	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4744 wrote to memory of 1904	4744	msedge.exe	81
PID 4744 wrote to memory of 2836	4744	msedge.exe	82
PID 4744 wrote to memory of 4940	4744	msedge.exe	83
PID 4744 wrote to memory of 4940	4744	msedge.exe	83
PID 4744 wrote to memory of 1820	4744	msedge.exe	84
PID 4744 wrote to memory of 1820	4744	msedge.exe	84
PID 4744 wrote to memory of 1820	4744	msedge.exe	84
PID 4744 wrote to memory of 1516	4744	msedge.exe	85
PID 4744 wrote to memory of 1516	4744	msedge.exe	85
PID 4744 wrote to memory of 1516	4744	msedge.exe	85
PID 4744 wrote to memory of 2564	4744	msedge.exe	86
PID 4744 wrote to memory of 2564	4744	msedge.exe	86
PID 4744 wrote to memory of 2564	4744	msedge.exe	86
PID 4744 wrote to memory of 2356	4744	msedge.exe	88
PID 4744 wrote to memory of 1612	4744	msedge.exe	89
PID 4744 wrote to memory of 2196	4744	msedge.exe	91
PID 4744 wrote to memory of 2356	4744	msedge.exe	88
PID 4744 wrote to memory of 2356	4744	msedge.exe	88
PID 4744 wrote to memory of 1612	4744	msedge.exe	89
PID 4744 wrote to memory of 1612	4744	msedge.exe	89
PID 4744 wrote to memory of 1344	4744	msedge.exe	90
PID 4744 wrote to memory of 2196	4744	msedge.exe	91
PID 4744 wrote to memory of 2196	4744	msedge.exe	91
PID 4744 wrote to memory of 1344	4744	msedge.exe	90
PID 4744 wrote to memory of 1344	4744	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://view-source:https://games.crazygames.com/en_US/road-to-glory-sxx/index.html?isNewUser=false&__nextLocale=en-US&czyExpClientGoogleH5=rewarded&czyExpClientSuppressFirstDayPreroll_CZY_20818=enabled&czyExpClientOptable3=disabled&czyExpClientAdsDummyAA=disabled&czyExpClientAdsDummyAA50=enabled&czyExpClientVastVideoCache=local_cache&czyExpClientAdsConsentGate2=enabled&czyExpClientGooglePPID=enabled&czyExpClientContentSignals=disabled&czyExpDisableInterstitialsFirst12h_CZY_18471=disabled&czyExpGamePageReco_CZY_19213=disabled&czyExpOfflineMode=enabled&czyExpClientPersonalisedRecPhase1_CZY_20721=enabled&czyExpClientFullscreenMobileRendering_CZY_20866=enabled&czyExpClientArtworkAbTesting_CZY_20701=disabled&czyExpClientDomainProbe_CZY_21425=enabled&czyExpClientModelGamePage=knn_v3&v=2.11
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff97c6ac188,0x7ff97c6ac194,0x7ff97c6ac1a0
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,6696333625433122813,11834271079953826665,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,11230926991233868636,1750771798372245686,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:13
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,3327006360509004142,14683126411043581194,262144 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,7346523649511559142,10887085633086515562,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,2183037478649378191,15564494447026334608,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,3201722280959197315,11261908989280633409,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,10954169888479587539,12952013325441614581,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:9
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4152,i,10771051554224468468,17062807182985270847,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4164,i,3842462419515430635,2843011568632566794,2097152 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:9
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,14966391179087531682,1739763547058359669,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,793490642300013287,3495619693621601973,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,8719670467603223584,13429020712590169894,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1120
    3⤵
    PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,13919880432793151355,6786168250713933663,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,13919880432793151355,6786168250713933663,524288 --field-trial-handle=2080,i,4060413162200402861,11067656020195149552,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:1600

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ac4941d-175a-4484-aa9d-ef2d35671b8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ac4941d-175a-4484-aa9d-ef2d35671b8a.tmp
Size 8KB
SHA256 b3f6af3d320e9f9a12570f75e386bb3e85cb928ae66b3c534aadc1615a1b3add
MD5 d2ee9ff6bc0885f1a4d740e7c414fc05
SHA1 0a109663364307145be62249d81d3afe3c7f8e50
SHA512 dda889f427791684b8a3a0f32b536c32ba36dc02d8c6cf7a7991ef74bee912120f3dc508b162054d6afb106baf7541b9f939e835ed6c979b34d19d970e71d68c
SSDEEP 192:VGNt6QhLxQmiUyApi1VZ/5P1KFRpA0wr6/GqvssU6:VGNt68LPHI1VZ/5tKajyrssU6
TLSH
T1BE120B31B898FC3B4EA3A994B48736239EA45127DB886F54C5DC2E2D01EE59C430B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d6db7f4-9966-4b6d-8cbf-26da210ea7ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d6db7f4-9966-4b6d-8cbf-26da210ea7ee.tmp
Size 8KB
SHA256 7ab37da03a13c604b26607b5815e62ae2fd26f710c4ce4c0097ac7324009442c
MD5 5d42dd20c5cde419a79021746118f48f
SHA1 791db25ea1dd86f2058657063fa2d06f13cf7eee
SHA512 37431026dd5308b4534dbaae090ab56130bf0d3cdbdd16da8873c4816662faf965b94b80769fda04e4c26abfdba825dc7522e974aab1a5bcdc10408d1a682b24
SSDEEP 192:VGNJ6QhLFQmiUyc3izVZ/5P1KFRpXOEoNU6:VGNJ68LjPyzVZ/5tKbUU6
TLSH
T19502E734B8A87C7B8EF3AE55B58737239FE4107BDA946F44CAD81E2D01D769C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ee7efd6-59ae-44f6-88cf-4464a80d7253.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1ee7efd6-59ae-44f6-88cf-4464a80d7253.tmp
Size 105KB
SHA256 c43cdac343629dd02c753c69bd2d3d68f6a680941595b5b24e7a4c0e9af0a92f
MD5 512d6bb5eb68161105e73a7d201bcd46
SHA1 3f8132f698803f82d145294d3019bcea70f3c08d
SHA512 e38ff3ffe44f85efe82044549aaabda9821a1dcd1cc60d7c374e5a927da058dab823cdcc8869ae493cfe1f07dceeb7c09d2d0fc8d0e02bd13f3b122b9b61425d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T191B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 48ff4460fd06c20ad400cc57a94de8c221ccbfa21edec3a46f2c49ac2dc47f1f
MD5 fbaa312c71fa74dbad82d379926144ac
SHA1 6e0bf96548f833cd7614c6765856fafe71e03430
SHA512 2d2ebdac18f3a47bc8e1e57d915d4c68ef660758f3bb190bf31ed052c9ec0f3596e027f16d0a68538ff77ea830cf92d80514892ef27ebd35e8f39a74547351b6
TLSH
T1CED02B74C1C85D80C451343C1733416330C4F810C407150088D0125C0CCC7C30274120
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd94736ea2245d6ade3fbffcc7b96a4e02aa9006ed4e41a5043255d439ea58f9
MD5 e53ea538d9037e80c26dbca906c95c2a
SHA1 3cc7813658c79810edbc35fe6a3ca8c395b7624e
SHA512 8174d6db3c0d382d910834f9b1d7abc302dee09d5d2d11a936ba3569bc7c8b1cbe1b2607b445af84029edc933a7a9ebfe5db06ab4e68c6976dce45bb6e680fff
TLSH
T184D02B7481C85D80C851343C1732416330C4F810C407160188D0125C0CCD7C30274120
MD5 SHA1 SHA512 TLSH

Submit Download

2cf7188b-bb02-4eb5-92a8-6c4d646c92a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2cf7188b-bb02-4eb5-92a8-6c4d646c92a0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

35fe2bfe-d817-45d8-98ab-851c246f083a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35fe2bfe-d817-45d8-98ab-851c246f083a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 418KB
SHA256 98c08e3565011a8bb5fed44dfa363ba5f43bc96625c7765ddc44ba198cc0ddba
MD5 3c3b74e13f221f1a3b8d5eb317e68d17
SHA1 f411ca9756625feead5c18ee77a1bfb60d5553b7
SHA512 abdb317ff2f80a11df9837f029d65bb32662f2ae145e69f8d244723bb36e754da5f671c8fa01cf50f56358e0d76d151c70e2a233fbf7400ed0d70992b4256b29
SSDEEP 6144:q0LiTtIPquWXxQeklBpRRG9NkunSYCZF7GdWtZHO72lQnygWU6+QlZkHtGvcFWHJ:q2iBm9WXxQZ9lGkymQnyvU6DUFWp
TLSH
T10594231AC9B1735C0DDDCE1D9C22479178C2001B6FF75BCEF2A86A66C16D62994C8EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 70KB
SHA256 d0d5efffc11f7135d12e78e818514c0765f3641eddc772f7aee91941311065d9
MD5 c4587ebbade72784cce85817a6827b09
SHA1 3b83c8fe2089f42baff8a6bf04e90f48992a5c7e
SHA512 d6e3ced9db2bd2cfcd31c9b75e94405a734314d69ca560adfa612775902fec73995db72c927521b076e7198b2dd2d8ca5e8a0ba862f5b1687ce59d7b4b757d49
SSDEEP 1536:T1DuYlBxm4LyeCG1TQyU5OkSy/O2XQSiofluCOSZ/:ZCAjm4LWqQl5OkSym2XTht
TLSH
T1496312A2E460F03D6E39745D143C3585C81BA1A9CBE78E99BEF53B201E7102777836B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 27KB
SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
MD5 8b2b699d8117447930c6ec35be5ce1bf
SHA1 4755bb0de47453d0c7c9d3554c0817fe43b16faa
SHA512 0ec74a140efea57cfe62e43b184deb3367c941e338a1394a4fc2483ec391e52e9caaf43200c3a970660cdf74a5692a7a083ac79675397fe4cb90b585e3b1964d
SSDEEP 768:tOtXHHGSKIj3A/HUtFb6ofBs0ltoijHHkJtmZx5WOCL:8Br7A/gFb2smijHymn5W
TLSH
T1D8D2D16FBDE86F44943C5960790232E1419E9A70B384AF372175B2B175378AE6783CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 78KB
SHA256 c51d9e869e0c0c33890c49481966936f532a51f5060466c976529108d66e82a9
MD5 b32eef1e27452fcb546ef7204f6ed69e
SHA1 1e937b35be82446d5a2a0e2c9c2e129032bc92ae
SHA512 e09dcddab9462eab546d01e4cffba7e7d03d425f3bb945a47a93a6073c286f8aa74e67cd85378c215d063fbaf81289fc9b52d379f3e1d265921e29c438a4f5e3
SSDEEP 1536:U3PVcGnF03qiWqk0mywNSSaf6c9N+2ObYFuIpW7KwOzQl2qOzJ:U3tJF6qi00NeQSYFJW7O82J
TLSH
T15D7302B1112863679EB87B65ED237470FE439AE07238A92031625F3CC47CF719E1A5E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 72KB
SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
MD5 e23f701a0478bb09e5547db5f18b17de
SHA1 cdff049aee29553f0533f7d692d37fae129b7a6f
SHA512 370329619cd303f5ce5bf42692bed1ef7f8c04f4a26181ad42269ac5f6b81fd1ca87034a629b969cffaaa46a626f1eb60fb70e71dabb9f11148b5cd038bb6959
SSDEEP 1536:SVJ0GggPe5RTRIY+6gr24bw02G3LkxUsljvsEQ+:825wY2K4bw03Lhs2y
TLSH
T1CA7312B9871A01B55393D610C935859E3AAD5E1EDF02F85B3FB969A8B08F1B1CCC0D24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 59KB
SHA256 484fed28305e8a1256870a26f905be957ee23b5c5dc9c0daa5b01435e7de3408
MD5 4a71d19f1524347cefdace1552ca0ce8
SHA1 88807a5961fcea0ac750386a58fe15cd2bcac4dc
SHA512 56265d2a570ce38ce785c4465efc3f93013dfbf663cfe379647c3447d8da4d640634333d13d8655286591766d53ec04ffed8c9bbbed0c0275e303aa4e6f2cf08
SSDEEP 1536:I7NouaEbzqNcgQMXR/ZSnTn4M1U6nnZ1Sop:IR3aEbzq6eRBkn3Z1H
TLSH
T15A5302E98EDBC7BE8506083278A11D875DCE4685B53EEC1D9058223F53D4CBAB7E825C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 20KB
SHA256 25acec5db0baf3c006e081eb3a35df762004e315fdd2bf5c842d8ceac59efb0c
MD5 f563c7f842d1fa1e9276434b853d0d9d
SHA1 904987b103e2029024e1e5517fd5ca6d140e3130
SHA512 4f6731eb919f82e79ce79bbb3b6ba14e491bcb9a1b23f58f1251c8a73f640e20d7f58b76639178c441ff1c6722359383cc579052d8a3efd7bd0c7dec8036a1d3
SSDEEP 384:nKs2QxnGOw5Dl6HWWf0auKZSpu6ctONZ0LeQPNYer0/4ilPwn6+IxGwlP6Ft6BqM:npZMhaCKllt0evPNYQ09lPwnhwhSyqR+
TLSH
T16592E074EC23D9A0C58708C53708E89CBA185FE6A398046D86FFF81D36CA6419F670B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 39KB
SHA256 ec84c60f4d537b060a76931a7bd5eb5e0127b2c85d48508ebddf525b5935b958
MD5 469022354e30e99e1406b207472cea35
SHA1 d7e80ba0422f51ff8cc668525e9abe2873f50e28
SHA512 ebd29f7487456ec95a3d7d17e0635538f06d81f99472d04f447bfae81e5904ea1e1097350a76dbf9044232f40bae45715398d65aac72dab529d195f1f3318e8f
SSDEEP 768:dXJMoGzCkYpi2/HPBY6gJcEquLletXW15Dk3/MOvP4cO6NM/ziJ:TMoG+lZfZY6GLlwZ/MO341pbiJ
TLSH
T15803F1C2F8BD15BB9E540538514FE14DCA5C08B2E50F633AABE0ED216F95F2EC721901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 16KB
SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
MD5 70174baa8df618959b52d33daffcf977
SHA1 0231d481756e7ab0f2981cce9188f5264ca52c24
SHA512 6868981093a1a62be90e19d61ea7707a1339e948e8c9bf39f9f32099f30087645cdd373f51538250db85c224f3a9722968828e1efbf1dec9c240cb41f9309f12
SSDEEP 384:wj/7tiSG1hvqvic6UGgrauZoMYVT0BxzEFz5Sdf2/fIGvUP:wN+qvRxrauUVTsESdf2/AGu
TLSH
T12272D07FCD04DC51F328950E8D442896C8409CBEED9B7FA73A6D1B7AC8083D7C28568A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 16KB
SHA256 13125c6bbbcc02f9012041ba28a0293d69ed69c35e32ee56226ac5af30e0874a
MD5 d5b2ebad8b9dd5e6b19f2284b7b9e60f
SHA1 c2a8a5130ddbe1f565822644565c86e1c833544e
SHA512 86eea4038c36715d650eee45e9c5609a17fa923d08dd5c9a4e0692425a229f04aae3af0fc1c6987fb426cc9aaf7bd43a7debff185330df7fd97e6cc93562a005
SSDEEP 384:zVsJpK1L8lLggw78SLYcuUGIeJfZvk9rykeeu1:zN1LXgQ8SLYcuUGDk9+x
TLSH
T1C572C0DE06067D70D607091B2197C221A2BD5E8E1210996BE58EA0DB3887E5FF63E52F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f11d4c19-2dd5-488e-a06c-4dd0ecf641eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f11d4c19-2dd5-488e-a06c-4dd0ecf641eb.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

cd3572b3-fd4a-4d4f-9eed-881f02a5964c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cd3572b3-fd4a-4d4f-9eed-881f02a5964c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\71e7800e-0c49-4fcd-bfce-e8ecc9ef5c06\index-dir\the-real-index
Size 72B
SHA256 3f99e621d43add1aff9aab5b4f4c31553cee7d54a8913e41a4f309b373512977
MD5 4fb59b31ed66b0b9e2b0ac4abb3576ed
SHA1 2bd9715c11d3070c76de9aa099ffa52947b163ed
SHA512 da5d0b1dd4c3a048a7d428ddce8dab7ecd6dc6b2811d7b902768dcc1dc650f5bee705d0183a9e885724e103fcd88afdcc1f416e76f3485c1314f1bb44b78fe65
TLSH
T17CA0021403C001B5C41251B3265202857343D8115214170780994655CCB04405D9220E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d427cbae-fa5d-494c-9f4e-1d5bbfc83ab7\index-dir\temp-index
Size 1KB
SHA256 11693fbb51ecf8682c8ea695783c1114199ea91e055665a930aa8d4533b04c86
MD5 b9c70817ead1cbf89500dda799698d84
SHA1 f0d7eebe1256acfc4b90e32eddb9db36891fac8a
SHA512 961b78da6c784005b4537db5e0423fe1b4c34a8aa40d056d458bc0c4f1529a87d08b3ca54cbf6f3b3c05177de6a48d890c6f1a4cd1edc877dc15cb833e19c08e
TLSH
T18A21728A4E920EABED886278183D585A7330E3CC1314760F53BEE239AC56780BD464C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d427cbae-fa5d-494c-9f4e-1d5bbfc83ab7\index-dir\the-real-index
Size 1KB
SHA256 e3aba24e25a2428297eebdea128c28650aad16b3db3259bdc1ce929a159a1f49
MD5 0bbebe8f685efbcf1bc004fe0179e643
SHA1 a41512aa7f172a1876484429f91a6bf6c2e82db1
SHA512 7bdb243b0df9d4298f5cbb92b1a5707d91039c8e845b981bc55afe40ecfdd0f912e70623a9fea729db5c4e47ae67724a54fd6e64e754257e6eb228c2f1787d0d
TLSH
T1D321549641520B67FC442376096D68977335E6485348374F53E6F139DC81B84ADCB9D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 362227027cfaa44954e2e6da3ce46bec080d2d6af9af22cc1b5f6c2ec3547192
MD5 ad7284ed5196033ea4e552023fe6dc0f
SHA1 8908206fdb16e3162332a6b0ce90eb78e7748eae
SHA512 1c6f3b98adad229a3680ac5416194577ebcaf48df5f0a6de7c49ff585541220b11ce380edbd97e25ba5c59dfd1ab86cc80ac7d8ad92aefca532b2bae680f63ae
SSDEEP 96:KT2BaWkss+Wcfl02+KML0I+Ae2XYmf9fKZNv9RPWZsG01PKMe0DPAnfkJiDuKYMA:C2BaWkss7cfG22L0Ive2XYmf9fKZNv9H
TLSH
T17391EF02337A424239FE7A0D5478C66B424235733225EA2E3FBD4156497BF142EFC9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads