hxxps://ultrav4[.]app[.]link/e/DiKuNDkNc7b

Analysis

user interaction
yes
max time kernel
62s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
14/10/2026, 08:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ultrav4.app.link/e/DiKuNDkNc7b
Sample261014-kl71ss11ft

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{FF8FC60C-EDD6-4373-9A8E-11DB0840BE04}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 804 wrote to memory of 1368	804	msedge.exe	84
PID 804 wrote to memory of 4760	804	msedge.exe	85
PID 804 wrote to memory of 4948	804	msedge.exe	86
PID 804 wrote to memory of 4948	804	msedge.exe	86
PID 804 wrote to memory of 4948	804	msedge.exe	86
PID 804 wrote to memory of 4124	804	msedge.exe	87
PID 804 wrote to memory of 4124	804	msedge.exe	87
PID 804 wrote to memory of 3100	804	msedge.exe	88
PID 804 wrote to memory of 1620	804	msedge.exe	89
PID 804 wrote to memory of 3100	804	msedge.exe	88
PID 804 wrote to memory of 3100	804	msedge.exe	88
PID 804 wrote to memory of 1620	804	msedge.exe	89
PID 804 wrote to memory of 1620	804	msedge.exe	89
PID 804 wrote to memory of 2348	804	msedge.exe	91
PID 804 wrote to memory of 1096	804	msedge.exe	92
PID 804 wrote to memory of 2348	804	msedge.exe	91
PID 804 wrote to memory of 2348	804	msedge.exe	91
PID 804 wrote to memory of 1096	804	msedge.exe	92
PID 804 wrote to memory of 1096	804	msedge.exe	92
PID 804 wrote to memory of 4448	804	msedge.exe	96
PID 804 wrote to memory of 4448	804	msedge.exe	96
PID 804 wrote to memory of 4448	804	msedge.exe	96
PID 804 wrote to memory of 3200	804	msedge.exe	98
PID 804 wrote to memory of 3192	804	msedge.exe	99
PID 804 wrote to memory of 3200	804	msedge.exe	98
PID 804 wrote to memory of 3192	804	msedge.exe	99
PID 804 wrote to memory of 2432	804	msedge.exe	104
PID 804 wrote to memory of 3344	804	msedge.exe	111
PID 804 wrote to memory of 1188	804	msedge.exe	112
PID 804 wrote to memory of 1608	804	msedge.exe	113
PID 804 wrote to memory of 3300	804	msedge.exe	114
PID 804 wrote to memory of 3300	804	msedge.exe	114
PID 804 wrote to memory of 964	804	msedge.exe	123
PID 804 wrote to memory of 964	804	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ultrav4.app.link/e/DiKuNDkNc7b
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8c57ec188,0x7ff8c57ec194,0x7ff8c57ec1a0
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1981670014197849480,6755652186540629179,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,16295371755283877748,2596183442143896251,262144 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,17841372957406518444,12133307488919175170,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,3915661999624216833,7204977465747108975,2097152 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,100161738450069162,759583540283181897,2097152 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,12652272896314542854,7242098960780846481,2097152 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,15396463698043845700,16287662354026667050,2097152 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5080,i,12451174737532398932,5928860142035261857,2097152 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,9638248628195316369,9836077590398609577,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,17167777417706168964,12816569063508936681,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,16558675399329837767,2109334833717041226,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,16558675399329837767,2109334833717041226,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,4358198923288656943,8806006344893285854,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,10712479952852710941,18209242846999146509,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,10745236591792232479,12153357631650031663,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,8593211704398144578,2080755401438068148,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,3775929728925791515,16229604314284233992,524288 --field-trial-handle=2304,i,13968023277654936702,8502344598662075499,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1a8f1dbe-d48c-43f6-a079-1950a6a0fda7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a8f1dbe-d48c-43f6-a079-1950a6a0fda7.tmp
Size 8KB
SHA256 d985f39e896545ecaf53f9fa1d289ce995ff40762cb7227063296aa7ae3518e0
MD5 f86f3ddf742481baa50d6e567bcb0fb1
SHA1 685e68a275cdead6e3c011986b2e62fe30509194
SHA512 87b17d728178ca2a981b6fc70ef3adf37148d3fba9d766f436ed671f072bb89beb12413c7ca2ed4654f793b9176585fdda094cd863c55da0682b696c27dd1f76
SSDEEP 192:BON+6JUPQmiUygu6do//NB6oUINxfrqJU6:BON+6+R/jdo//NEs+U6
TLSH
T18D121B35B878BC6BAEA39981F08736179EB44167EBC56FD0D6DC2A1C01DF1AC130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a5e2dd7-1497-409c-a0c0-eb143386d840.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a5e2dd7-1497-409c-a0c0-eb143386d840.tmp
Size 8KB
SHA256 832fe520ca3571979fad7d6ad43ca03e90bf43e83a2e279057848aac84013901
MD5 17c13e1e99af02f0b38784e72b01bafd
SHA1 233b403df21d735d91a3a6389209fd81776eb65e
SHA512 2a869261972c2fe5de6c8a5fd8f55e037526f88aea52ee74097e6f91828861be4248588e151c02521539142e2abf2ff933272b3aca37f9f1a8828185400e52df
SSDEEP 96:KqONkmQsjpfbUmjH5ih/cIPURHl8h4otop5kaDqBKP4v+Y1xf//ojdqvVBlBCCex:BONu6JUm0QmiUyl6so//NBlBC2arU6
TLSH
T14302E839BC787C7BDEB39E45B4877B239FA4116BAA912F84DAE81E1C01C715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

1e9b46ed-bf6e-4839-a6d5-e4c7c02fe082.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e9b46ed-bf6e-4839-a6d5-e4c7c02fe082.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40afa5d7-241e-43bd-9335-4fab5a497cc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40afa5d7-241e-43bd-9335-4fab5a497cc5.tmp
Size 27KB
SHA256 7e64848798416d99fcf42a62281c6d528978479ea4c0328177292d3606fbed36
MD5 9637ef6d75ca6bccf4e492ed982f975c
SHA1 c411b6058915cca32adbea2dff9d694a39b8a2ab
SHA512 186adda809c320fbaa3fe82869295eebc74d6355ce8199e69576af8acef1f0850108b71626447537cf6213f12b9b87e8f274adb0ab50f7595ce2bf4080955aba
SSDEEP 768:bvKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/wroe3:bvKlm7QWvUYm0u1ja8/L/E/be3
TLSH
T1A5C20B3B640CCB7E4FC05A9DDC5A6F9B2EA802C7A6588D4047FA994C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9379c600-d334-4505-bcbc-ad62e7d85ba3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9379c600-d334-4505-bcbc-ad62e7d85ba3.tmp
Size 10KB
SHA256 db3ca1fddb801658fb0819d814addb5ea91e44de4effd6faeecc5fb2b9448a79
MD5 4a289e1de3f5af6ce0ac04810d74488c
SHA1 97fee22b5fb1499e56bebd34bb3cac6b9cb4b7b6
SHA512 af7187aac0ea338ccf9c1b99fb3442d70a1188b53ad41cbd5592397315e818221eeb9e271684991702909208c29409f576998e24493a2511ee9dac67de8b8489
SSDEEP 192:sxZmLWx/fqsHJIupkssoHW6+WNCAHXY364lCmIg5SJJ:sxZmqx/fqsHFvHbBXXMW
TLSH
T10A22B812AE38A67B8CCBD309FA55BB53D1F95121A5D51E88AAFC861C04E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 293B
SHA256 a9db14cb177be87b4b22ccb4c683ab69a4ff66df4c04900c56be1ffe231e4e7b
MD5 a8755ee7c96097ab7834c02cb7dd5ceb
SHA1 8003ce69254aa392495ba996e318124638d82d81
SHA512 527740067e8c292137fe733ee31e4883e7392b659fc395bd36f9e4458dcb6e19adb3f0fe4075b539206665dc1ad0c0cb1eb0218b57dde528c4d6f94a92ae2228
TLSH
T1F8E02B0646C6C22E7348E5C70168830C8784235FD7C17A0E5F55C95C714F589ABD77D9
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 65b860db1bd718b9c63d23c3f6dd3766c0997af766505d87fda5ddc91f9d3588
MD5 dea76f6acdb3c046a73b7eaee52793d9
SHA1 0ec8ea4228fa667e32d71be32bd8a814a75b2100
SHA512 16ae8e06108b52f00123fd54b458d1bf749e616f08d06ae5a4170e7f1d8f1173f77544281f77138efdf02a6fb750934706eb1d019ba24847cb1993ac181570b0
TLSH
T155510880056891A9C39C43FDBCF8A5873E3FD1B186BF1EA230B4D8F9ABC6745E044214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 805d5d34c70ee8c92f8f4871964dc0b5e8f6703e0607320bc5671c0ae774b2db
MD5 202c72fa4620d247d50d6f4d379029f9
SHA1 274d31f952631216a0f9fba78856cb34f7599b02
SHA512 4356dfe405aacd8c322288614a3c172dd85ad47b79b854a71f249bc13badb3bcba618f63bf49f36f97c7b1f1c26178871fac7db1c3b5776a2c7870c08c2bfb0d
TLSH
T1F6510880496891A5C39C03FDBCF8A5873E3FC1B586BF1EA230B4D4F9ABC6745E044204
MD5 SHA1 SHA512 TLSH

Submit Download

83c8d01f-2d28-4222-9cf0-a502645346a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\83c8d01f-2d28-4222-9cf0-a502645346a1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2cb8c4be-6968-49a2-b8c6-fd0cd44fbd9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2cb8c4be-6968-49a2-b8c6-fd0cd44fbd9a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

516724d2-cf4c-42f0-8bd3-3fde0ccbc858.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\516724d2-cf4c-42f0-8bd3-3fde0ccbc858.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 8797fbf20ccc6869dcc60b11e52ec4c70a1be4fa8d70652cd82125e5b89b71c1
MD5 c026a7fa27cfffa2c4f1cb051f93e897
SHA1 47df2fbc62efe47ba83385a0da4e8737a691e3bd
SHA512 fb4f7681eb6d1d96f5b7e938593a319a2393d22cdd72404d4fe6f02e751c97941238e6ac4ac29212f2083eb133d03b5d192c0f7779fedc2d6ac472d3bd5128de
TLSH
T1FC21ED10B29A6601B8BD2B0C49D8C636625274733114A66FBBA881B90E2FF005DFCDFD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 221d0f399c941f37bb57590d5ea1d658016c778c6710adadf7740a0012d568dc
MD5 5e661dede88086fd8d2d7b043643a7e1
SHA1 0d51b5d56c5f50ceb5a17fd4eca71d89095e4ba1
SHA512 a7499ff8cd7f0d71b77a69fcbb8364bb07e65250641655f6c09e2d5c3a30e133d158964c166499210412a6c1c5a7e629d8ef468414847382f4c3c7970d8ac76c
TLSH
T1F721DF10B29A660178BD260C49D8C636525174733114A56FBBA881B90E6FF005DFDDFD
MD5 SHA1 SHA512 TLSH

Submit Download

aacbffcc-2fe6-4ebd-8f8e-978c9f169e4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aacbffcc-2fe6-4ebd-8f8e-978c9f169e4d.tmp
Size 10KB
SHA256 6ec8d0716fe02a73b5b51bec4753c44bbb5fb38a2f7617ec673982341e8cf43f
MD5 386e911640634252a5c5b90e1443c620
SHA1 9320423ac5c9e658ad89b11f3b1a6c84106dfa6b
SHA512 6b8f005762aa0f8e954ab8eea7c9b47c213933994837865989e6d536c6efeff90234a0ef93dbac41f7054e0fcccd568e08df2187133731f04a117917e397aafc
SSDEEP 192:sxZmLWx/fqsiJIupkssoHW6+WNCIW/Y36klCmIg/JJ:sxZmqx/fqsiFvHbU/XAb
TLSH
T15922B851AE38A67B8CCBD309BA55BB13D1FA5121A5D51E88ABFC861C04E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ddc24066-5565-426c-bb65-577374fbc531.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ddc24066-5565-426c-bb65-577374fbc531.tmp
Size 10KB
SHA256 d1702e62b6fe320c1b44a185cdb5a82e5884f1221322a075b913d93e3bc957a3
MD5 39ee0d559cb88ebeaeb0256f512c16a9
SHA1 82be6e31fd8b44c7f80f4d41b22e5e2e92cba37c
SHA512 37d4e453e6657d632fcb76c4819a4c844b0d9df90ecf227ec014ea549be590f9b5c502be0a6b3c1b37c9beb35d22680f733f59f9ec412159703a8f23c0c5bf75
SSDEEP 192:sxZmLWx/fqslJIupkssoHW6+WNCAHXY36r9CmIg50JJ:sxZmqx/fqslFvHbBXXlE
TLSH
T1D622B852AE286A7BCCCBD309BA55BF13E1F95121A5D50E88A7FC861C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42fd61c7-d7aa-4daf-9061-b0bbeb2856a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\42fd61c7-d7aa-4daf-9061-b0bbeb2856a4.tmp
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d67f89b6-4545-42f1-be3d-2483fd3cde94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d67f89b6-4545-42f1-be3d-2483fd3cde94.tmp
Size 18KB
SHA256 3fa267ff4f34b7ceeea2d5c41d38d2c4f9773f2b15be37dfeef57566b264459c
MD5 3c4cbdc664a4dcaaf4670e01a770cbb2
SHA1 079df8224557d75fb653f85ed3f22a4bff23876a
SHA512 7c10032546c1bf6901d1f349544003ad34480341f4a1c526dafd08c32ca6599d81bb0cf4c5ed7038b92ffe0a7e5d8aa024090a9f31790ae7bada0a2d7fa92cc0
SSDEEP 384:RQkUSvRsNL7lfbTaSoU/h//NEi+PJAxJ7jIIll:DRhUJ/3+PkJPLX
TLSH
T111827D75B878BC779AA39541F18B3603CEB4912BEBC51F94D6DDAB1C01CA1DC131B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c89cc39-020b-4313-b14a-aa7e96090e2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0c89cc39-020b-4313-b14a-aa7e96090e2b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7ce5fdf-64cf-4682-b640-f7c8281a5668.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7ce5fdf-64cf-4682-b640-f7c8281a5668.tmp
Size 18KB
SHA256 dc3b8d671d32007efca5737142bf547981dd04e542aa1612d276d51c4654da45
MD5 d969b04b7551d3c068b0cfe7539d4d81
SHA1 c5db6f3a9da8bf6fa7c576f913da3eaadb8469ae
SHA512 614dd258f5ca86c64b20c747a311698eadbd1332d49b0f723acebea512ae552bdba7e67fd206c1855016ee8dbefb945516d8f38c2a55dc5cc19d77613906c927
SSDEEP 384:+QkUSvRsNLclfbTaSoU/h//NEi+PJAxJ7jIIll:uRUUJ/3+PkJPLX
TLSH
T177827D75B878BC779AA39541F18B3603CEB4912BEBC51F94D6DDAB1C01CA1DC131B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 892a63b6bcff364c78a41645c8341982b88cf7b4becbfac493eb8148e9218fb7
MD5 dfe800fd3e5bc741e10fde1d01b6b083
SHA1 58c19c05f7bbd9621c1c0b279229cc43904d603a
SHA512 7a96301ad8a2eda8b9faf39ddcf40419c4b6e7db52784e5bf4f25276fbddffe9c026e591028fad79daa5bdeac3792961cc983c4f2edecc8b2022a1d6efde6fc0
TLSH
T13B410958B6E91148B3B77E56AFF6A92E447FB9772E06C45E00010E4F0623A40D871B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads