dda8d20ea28d1b97da409ab1df46bd6d2def981ef0106b249e3e716d47b36c4a

Analysis

user interaction
yes
max time kernel
50s
max time network
50s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 15:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cult-of-the-Lamb-SteamRIP.com.html
Size 32KB
Sample261014-s31xtaxvbw
SHA256 dda8d20ea28d1b97da409ab1df46bd6d2def981ef0106b249e3e716d47b36c4a
MD5 6f1829c39740605924349d180eac0003
SHA1 1093bf5d0112d9156b9ce5c21e5dc34839e310f8
SHA512 574e98c65d6f85ce8ed3960388f1130ec320188b6a7db2b91883f4e81161c0485573e43fc086cfb78342eda6b0094176f242c31a8af06ef35301a27048ab929a
SSDEEP 384:+Eh8nhmlgmq9xn1+OZH9dr/iJ2xqSKeJi3NSzXRAcWZdM4Tnx/k:+EhkmllI1rTJ/iJ2AxeJi9SzecQLx/k
TLSH
T12BE21AB1F205A039F123C06A3AD1A3ED3425A953D7274AB4D7E2F7384AC67D61931B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3780	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{ABBCB03F-5F13-4685-BA6A-B6F00051D3A5}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 5000 wrote to memory of 4988	5000	msedge.exe	87
PID 5000 wrote to memory of 3780	5000	msedge.exe	88
PID 5000 wrote to memory of 3648	5000	msedge.exe	89
PID 5000 wrote to memory of 3648	5000	msedge.exe	89
PID 5000 wrote to memory of 3648	5000	msedge.exe	89
PID 5000 wrote to memory of 768	5000	msedge.exe	90
PID 5000 wrote to memory of 768	5000	msedge.exe	90
PID 5000 wrote to memory of 5060	5000	msedge.exe	92
PID 5000 wrote to memory of 5060	5000	msedge.exe	92
PID 5000 wrote to memory of 5060	5000	msedge.exe	92
PID 5000 wrote to memory of 4176	5000	msedge.exe	91
PID 5000 wrote to memory of 4176	5000	msedge.exe	91
PID 5000 wrote to memory of 4176	5000	msedge.exe	91
PID 5000 wrote to memory of 856	5000	msedge.exe	94
PID 5000 wrote to memory of 856	5000	msedge.exe	94
PID 5000 wrote to memory of 856	5000	msedge.exe	94
PID 5000 wrote to memory of 1500	5000	msedge.exe	95
PID 5000 wrote to memory of 1500	5000	msedge.exe	95
PID 5000 wrote to memory of 1500	5000	msedge.exe	95
PID 5000 wrote to memory of 2728	5000	msedge.exe	100
PID 5000 wrote to memory of 2728	5000	msedge.exe	100
PID 5000 wrote to memory of 4444	5000	msedge.exe	99
PID 5000 wrote to memory of 4444	5000	msedge.exe	99
PID 5000 wrote to memory of 3076	5000	msedge.exe	103
PID 5000 wrote to memory of 1800	5000	msedge.exe	115
PID 5000 wrote to memory of 736	5000	msedge.exe	116
PID 5000 wrote to memory of 1360	5000	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Cult-of-the-Lamb-SteamRIP.com.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,5323083373216699918,12903374803948109356,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1745964832016776962,17695151684468161659,262144 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,14375421323085385201,9927443525394035290,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,3733386957844242199,5348744214852296043,2097152 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,6142848323103609288,7660919407238275769,2097152 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,10569198659933723331,10354347617940721949,2097152 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,15652580849331975482,11028167979474189191,2097152 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,13641501444811779105,1717473152561680964,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,14209009367269484270,9344767520051910591,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16830080624705147308,14170439438581455554,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16830080624705147308,14170439438581455554,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,2045333068478868899,11263368706433452000,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,3891628300721421727,2515693665346893284,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,226293544300010757,16216960530705563211,524288 --field-trial-handle=2508,i,12155537294270281348,1068713490207612275,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2d402038-293e-46bb-9ed7-1ab87ab69934.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2d402038-293e-46bb-9ed7-1ab87ab69934.tmp
Size 8KB
SHA256 81575501d51808577d1e769a26bf3cd72ff21dcade0c827e2cc341c918aba912
MD5 dd55cf0a7bea1874d7035787e8a5bf97
SHA1 c4570484f3f76e9a58598537abf6f374c47a1e61
SHA512 8a0d50b14a8b071ae93215828d25dddabe8e60730f2663ebe43871e0025e4ae6c378b38ec51c71569d40ab5dcc0b999cc8695de8190a27ecc242eaa6b1d5f07a
SSDEEP 192:SONk6ygpQmiUy16tOCTVgcSMosSPzPmoU6:SONk6lHttOCTVHglbvU6
TLSH
T19A02E935BC787CBBCEF3AE06F88622175FA4117BDA552B80D5E81A1C01D766C2303936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6896424a5a3b381b45d285b4cf70ce7e98f33f311d36d19d8d3b3ce510d1fb4f
MD5 0f416c8861efd339d5180f12f5c81c0a
SHA1 34c85e241e2f5f4626ed5826171c2f0f05e68ec8
SHA512 cbf250ad342a0353aed2853b94687d52ccac9cef58d857a8e044f825113708d40d3087d248724d9c0cac9d60ad41fefdc7a127351677073192f4123030ebcfb1
TLSH
T1BAD0807479163DEDC1DE70B5113499C04394DF238101151916530D181D743933851DD8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

1b719eb4-671b-4cc5-88ea-fec6a61349b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b719eb4-671b-4cc5-88ea-fec6a61349b3.tmp
Size 27KB
SHA256 ae85f1d441ccadc82dfc1783c0b6fa662da25e8cfb82c9fefc1aa808c8e69441
MD5 428b2474fb7d10d5afc79522c256e5a9
SHA1 070e5d2f6330daad7061392f3a85ce50289539ed
SHA512 73f75272594750ceffc0762220285914628dc04298d5298b19b258b027d21d1e2113e8648bad707ef73ff921abcb2c565dc15dbce25ec1511ca74841ce12586b
SSDEEP 768:BZK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3mrov+vx:BZK9uzYWvcQWsu1ja0HL7Q3dv+vx
TLSH
T1DDC2F93F640CCB7E4FC01A9DDC5A6F973E9802D7A6688D5047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49b348b3-bb79-482c-b66e-a5c5f774acb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\49b348b3-bb79-482c-b66e-a5c5f774acb2.tmp
Size 9KB
SHA256 7252775a860513c8c601ef7a238f09a3dc39c5ecf6c2583a8c49fca287fe8753
MD5 6308b938a027fc4751dfdc8483305459
SHA1 e0798be2a9c6a7439809c40981d81c69d31a9601
SHA512 0f9f83d557212ddca19df1df3c3f5e9fd0ea75c121eff65973cd9ebe558bf68fdc375d373f5e523fa27bbb652cfa79b1033c37937586575366623d1ac4914dab
SSDEEP 192:sxZJSR2WC/flsbOtlIdpduHW6+WNGYRPoMfq+nIg5MJ:sxZAvC/flsbOtW0HbGmuGS
TLSH
T1D522B851AE38A57B8CCBE20DBA55BF53D6F9503261D11E58AAFC861C05E7ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55f853a2-c4fd-4557-87bc-7c80bb1f29b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\55f853a2-c4fd-4557-87bc-7c80bb1f29b6.tmp
Size 9KB
SHA256 8901f229687c1570bc276a8c4698b47ecbbd1f56c246b0e6d68ceb859144a10d
MD5 644c76cc1e13fcb633eab65068edfa44
SHA1 1b2227e869d4c3ed01b42a93b9fc1ee375f2a463
SHA512 fbe38a7f6de0ef75ea17d934b3c00a04fcbd8f3e77b5365122d658cb41e8041f113da29bf778aecabf000b4dfff1cca6f9ca96d509daf4b3814a392f46e521ac
SSDEEP 192:sxZJSR2WC/flsetlIdpduHW6+WNGYRPnpq+nIgrJ:sxZAvC/flsetW0HbGmkG9
TLSH
T1D012B851AE38A57B8CC7D20DFA69BF53D6F9503261D51E48AAFC861C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f8f0ee0-430a-4bfd-b590-23e77306dd03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f8f0ee0-430a-4bfd-b590-23e77306dd03.tmp
Size 9KB
SHA256 c29518746a893fe4dc60a6736e12be9189404b455ba8d43a942aae1eaf6d58a9
MD5 c5ff47580a385516db155f2a1dadcc82
SHA1 421136bbb1bbe722ca7d64c5c7ab9b8ed93d6874
SHA512 2adcc10f25414a8733bc2e527f66c61e4773e020d25e81f94af695981d2401832ec3c51f482b797363f71c37da8305c4e17c9e4d8f0b361a728e852779368be7
SSDEEP 192:sxZJSR2WC/flsKtlIdpduHW6+WNGYRPnpq+nIg5mJ:sxZAvC/flsKtW0HbGmkGo
TLSH
T1BA22B852AE38A57B8CCBD20DFA59BF53D6F95032A1D11E58AAFC861C04E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3757f5a406e811fd5d9d19fa805fa9666a4f9a83bfe35772c168cea2a6500321
MD5 e8ad4fc3e014ec28c21f44136a31df9b
SHA1 8c943d3a1f55e60dc8e9eda3efc55dcc861f6593
SHA512 837da76922b6bd619b5b3a240cf5f5b56a2803359505a58d057fb6529aa1e275b7c612d294b00e364586600203cecfe3738cb160ace62c1406d7dc9ea702abd4
TLSH
T1AB61A2CAE5E34885F7A806B047C70DC73333DC83556B2E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 13a9c3c1cffb2c7ec2e3a6010ac660291f0481f92d2781d8d0a08db8377983f5
MD5 8853d7e735b12d82bd7d9dff9efa5f41
SHA1 7024cdba0aa3c9e9c541870205ad0ac9ab101011
SHA512 82f83553491b195b53fe15d23f0c1c04be24cc920a4abae738d550ae40b7f7d4bc38c242f4aa6d04886bfbf8d89e8a99000d11aca2e456ce2c0db79b48908e39
TLSH
T1E961A2CAE6E34C85F7A806B047D70DCB3333CC8354A72E5E9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 c28db688b7faf31ea45fb310b8684cd5add2b14b4a2f9393e25af1b78df536db
MD5 74f810a6c3485299f3c8031546d87f58
SHA1 da23cf94414382afb51ee5a18fa33496c1c3997e
SHA512 869f132a410ad058a4c8590aa8e17e972070bc10c160b1b9b0d6986127158861244de38ad95805b40ed17bd27c75d7f71265bfda041ba0eea5bb00aec4289bb6
SSDEEP 3:MsEllllkEthXllkl2zEklv:/M/xT02znv
TLSH
T137440444FFC4040FC74034F04051C3500370DC3407115F437C5574175CCD5400C00430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

250d78e6-0716-4695-be4a-f30cf286c34d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\250d78e6-0716-4695-be4a-f30cf286c34d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

37a2c63d-45d4-4ee7-a00c-b143ee63c4b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37a2c63d-45d4-4ee7-a00c-b143ee63c4b3.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

77072985-4168-430d-a0ca-4ec1492b1197.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\77072985-4168-430d-a0ca-4ec1492b1197.tmp
Size 1KB
SHA256 70588c7316cf0c50830960fcaf0ca665785826faa42fc7ca07a30a1fe852b103
MD5 83d48f1c51bca012f6be9d38ef3933c9
SHA1 638512f5694de476ec6a4e99748020477b96c220
SHA512 fcc20d0c7af44c3a82c737cbec921adc270e0ddf9603f77e4b73c792d1b7643622237244000f2be6dedbd6e6439a99333957d48d22c7ce72e040132b647721e6
TLSH
T1CD219CB7C3D4867E890516F0AA28AE17CE1D0957532C3C16C9E4AF5FA3F24B1D20199F
MD5 SHA1 SHA512 TLSH

Submit Download

da979169-93de-444d-82a2-6fd3d4f5a5db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da979169-93de-444d-82a2-6fd3d4f5a5db.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e1150dbd7badd4546e62df889a4204b01445d07b3cdee8c846ea5884a8355bd0
MD5 23672997ab82515160bbbef447d044a9
SHA1 ac2d9a7255e51224cd75dd90fab669c694da94e6
SHA512 0390b46b31d868cfe47c29f5fa91085f24c2e2fa9efb5ba3e469c857446031ac67d1c9ef2a1b86345f9ba286c2529550c9e7d092cce854c02c130ec583659313
SSDEEP 48:K0mImRAthrvzMb/KXIS5MK9Z1zMxxcYKbRRyhCIfK7icry5GIPKLF:K0mJGQKjiOCCoK7iiKGcKLF
TLSH
T17091614431AB520279FD2A6885A4971A425270B7315CF9AF7BBDC1A35E6EF040CFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6679310-fd9b-4271-85dc-019cc7b5d810.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6679310-fd9b-4271-85dc-019cc7b5d810.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed6fc35f-8239-4b26-8b82-6451b2bfc8e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed6fc35f-8239-4b26-8b82-6451b2bfc8e2.tmp
Size 10KB
SHA256 fc7466c6797e5d5db57457e81ea7e3fe48df6fe9439a2e73ee5f299a6ccd60c3
MD5 5df1d06d49f82d4e06dd3ac69deb722e
SHA1 c104292fbb61de43b0ff8c57bdf1d1350eaeca34
SHA512 f148b42c97c653b0e848f8891c7b21e9dba460d908b10e58e1dfca778b31a9f64b418faa3c5143b086eba7b249fc156ff073105ce6c2dea5083caf4e323514d5
SSDEEP 192:sxZJSRQWC/flsTWpVoOtpIdpduHW6+WNGYRvkMnq01IgbMJ:sxZAdC/flsTWvoOti0HbGmaWs
TLSH
T16C329555AD38A57B8CC7E20DFA65BF13D6F91036A1A11E48AAFC861C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0bcd980-99b1-4b02-b176-19477e541d83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0bcd980-99b1-4b02-b176-19477e541d83.tmp
Size 8KB
SHA256 a0994574cedad86932ce2566e0c1fa961d8ce57a4b0a5fc885b224b4cc91f254
MD5 6c0c3908ec63084a8e11efbbf7f3b81c
SHA1 efddb525aad3d533b98b19d1b949fa07d33a4fdb
SHA512 deaba630cc6fe6d7a27d8fa7443498f47f9c7f0444525e881a200b1fd383a05b9268caa4b03c82a0ec6326da44e5cb546ef32983f8fe121334e695b110f4ea0e
SSDEEP 192:nONO6ycQmiUy8r6HOCTVgcSMosSh2BEwW3UCq9U6:nONO6HLuHOCTVHglhBc9U6
TLSH
T127120A75BC686C7B9DE3A541F4C631035FE44267EA497B80D5ED1A0C01EF6AC630792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1c8a558-b70f-4a18-927f-62839a79d6ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1c8a558-b70f-4a18-927f-62839a79d6ff.tmp
Size 18KB
SHA256 b156c77f8198f08816078abc52f4e9b134e6c64adfb3389b1a00f11ef5adc330
MD5 99f4dba9c8b58f3556bcbc6f5026c744
SHA1 a8b00f728c926253a8c274a718157f5a37cd9b08
SHA512 972058e194289007b88518b90e998b525a89a0cde1630f05cfc957f826a2438d12dd6dcdef806b19a4d59f5a6ccc1c710c96d0116d08145773033b1825f095ef
SSDEEP 384:uQkUSv0sNMUVwwRuJ7nMuo1OjTVHglhBL9PJAxJoChVIIlv:e0IRuuonOFL9PkJoCXLN
TLSH
T101828E72BC786D779AE39501F58A31438FF4926BE6852F84D5DE6F1C01CA2DC2307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da9363ed-3988-49b4-866a-fb407563ffb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da9363ed-3988-49b4-866a-fb407563ffb4.tmp
Size 18KB
SHA256 89c3e09ce118d793618ffa7dd8895a74b4a88f370236924c40180aa021f2679e
MD5 5c005f2c9780851e3e69f0b4deeecee2
SHA1 3e317f09bb80c584256704b32d1bbb81a18fa3c0
SHA512 d1837c771d584061dc5660ddc2eed08293880d1d84ba3f75a3a41c0e0d242ddecd57a62a6ca5fcec9c892a8e79c91254a2e38d0d7c0e87fcb8081134ffaeba31
SSDEEP 384:VQkUSv0sNMUEwwRuJ7nMuo1OjTVHglhBL9PJAxJoChVIIlv:v0vRuuonOFL9PkJoCXLN
TLSH
T1A4828E72BC786D779AE39601F58A31438FF4926BE6892F84D5DD6F1C01CA2DC2307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db442717-bb00-4f68-909b-b7d39b9dcc44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\db442717-bb00-4f68-909b-b7d39b9dcc44.tmp
Size 22KB
SHA256 3c52bf6e8d4865e7c0aabaf069150ac548b41b62aa8748abcfc489215fb70384
MD5 e3587617aa6dd19d3eca99a27b81209f
SHA1 ecaef4bc7f92120e2383b50063f37cc52f868cfa
SHA512 0f59d94490c2b8536b122a08c365807bb702c9af7fb1786cf2092b255ad4cf57b04dfe21654ac5efb3413e977e858701809d24629177f756bc021276c28d41d1
SSDEEP 384:7QkUSv0sNmUEwwRuJ7nMdR1OjTVHglhBLpdA8tZo5w09aEePJAxJoChVIIlv:10tRu4onOFL48/09aEePkJoCXLN
TLSH
T1F7A26BF1E8A46DF745A2D1C1A186E1436FA8517BD9881A4CD1FABB3C308F6FC2317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f042b165-c556-4b02-b356-14b4838be490.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f042b165-c556-4b02-b356-14b4838be490.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8d0ae2bfddcd3b13edab330446fb8a1018c0f61b9a1358ba4e065ff03bc469fd
MD5 8e1790e5b3e71dfbe7d3ac7b188c41c4
SHA1 c9d7adc12675f4fe5bb3ec6f54749792d0ff007e
SHA512 313a76afb97d297acfc9e7faf3f2c54c10a6fb01448937a4c47d2a2e5868554d4572cb74da1f9f1158932a60db6942f15ad2e2e4576124619737f6383c141c45
TLSH
T1EE41D848B6E91048B3B76E5AAFF6696D847E7C772F06D49E10110E4F4A22B40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads