hxxp://tw-account-update[.]s3-website-eu-west-1[.]amazonaws[.]com/

Analysis

max time kernel
44s
max time network
36s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://tw-account-update.s3-website-eu-west-1.amazonaws.com/
Sample261017-tmp12ssx8p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2328	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{0AB94C98-5C41-4DDA-9B30-E035399D6E00}	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 4968	4252	msedge.exe	86
PID 4252 wrote to memory of 2328	4252	msedge.exe	88
PID 4252 wrote to memory of 5004	4252	msedge.exe	89
PID 4252 wrote to memory of 5004	4252	msedge.exe	89
PID 4252 wrote to memory of 5004	4252	msedge.exe	89
PID 4252 wrote to memory of 2368	4252	msedge.exe	90
PID 4252 wrote to memory of 2368	4252	msedge.exe	90
PID 4252 wrote to memory of 4292	4252	msedge.exe	91
PID 4252 wrote to memory of 4292	4252	msedge.exe	91
PID 4252 wrote to memory of 4292	4252	msedge.exe	91
PID 4252 wrote to memory of 2260	4252	msedge.exe	92
PID 4252 wrote to memory of 2260	4252	msedge.exe	92
PID 4252 wrote to memory of 2260	4252	msedge.exe	92
PID 4252 wrote to memory of 3128	4252	msedge.exe	93
PID 4252 wrote to memory of 1664	4252	msedge.exe	94
PID 4252 wrote to memory of 3128	4252	msedge.exe	93
PID 4252 wrote to memory of 3128	4252	msedge.exe	93
PID 4252 wrote to memory of 1664	4252	msedge.exe	94
PID 4252 wrote to memory of 1664	4252	msedge.exe	94
PID 4252 wrote to memory of 1724	4252	msedge.exe	97
PID 4252 wrote to memory of 1724	4252	msedge.exe	97
PID 4252 wrote to memory of 1724	4252	msedge.exe	97
PID 4252 wrote to memory of 5056	4252	msedge.exe	99
PID 4252 wrote to memory of 5056	4252	msedge.exe	99
PID 4252 wrote to memory of 5056	4252	msedge.exe	99
PID 4252 wrote to memory of 4356	4252	msedge.exe	100
PID 4252 wrote to memory of 4356	4252	msedge.exe	100
PID 4252 wrote to memory of 4356	4252	msedge.exe	100
PID 4252 wrote to memory of 3040	4252	msedge.exe	101
PID 4252 wrote to memory of 3040	4252	msedge.exe	101
PID 4252 wrote to memory of 3040	4252	msedge.exe	101
PID 4252 wrote to memory of 4780	4252	msedge.exe	102
PID 4252 wrote to memory of 4780	4252	msedge.exe	102
PID 4252 wrote to memory of 1600	4252	msedge.exe	103
PID 4252 wrote to memory of 1600	4252	msedge.exe	103
PID 4252 wrote to memory of 4032	4252	msedge.exe	107
PID 4252 wrote to memory of 1040	4252	msedge.exe	116
PID 4252 wrote to memory of 4348	4252	msedge.exe	117
PID 4252 wrote to memory of 4092	4252	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://tw-account-update.s3-website-eu-west-1.amazonaws.com/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff805ffc188,0x7ff805ffc194,0x7ff805ffc1a0
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,16728166928002809295,6063422319074528265,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,5188560357669913159,10083560078183246430,262144 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,9492254724388492003,5622426036325169470,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,11470702431063181316,16403250542582062675,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,12332783409850537447,9420007355056370305,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,4938563949591555347,12823022711392028298,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,14180842811222315703,602417030144968714,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:2
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5128,i,10621393195674008354,8042050602004928483,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5288,i,14842488501813538709,3733100203943784318,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4812,i,17018187131828334477,15757816330416898686,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3472,i,10279860761714989357,4654437753065750046,2097152 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,3068167929675167203,10846364687157825005,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,7305817209449301350,10092131602092820523,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6936,i,9806809322861673207,14930278537171168606,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6936,i,9806809322861673207,14930278537171168606,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16204226955486349052,13974942061933065035,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,1030614625242160456,15456856366044147135,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,8809135234961369006,11062154521566953920,524288 --field-trial-handle=2304,i,9334745582589627511,5978166341588772613,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  PID:4092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0eb24595-22d3-4556-96e2-f3d1ce803248.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0eb24595-22d3-4556-96e2-f3d1ce803248.tmp
Size 8KB
SHA256 c3f72485d4b3ec6118d41b2b233d0bf3fea47dc55f5c1d81426736a51daa9e64
MD5 7f87d0efcaf6d437f974d267849c143e
SHA1 98fd70318293e9d4363dba69c157ff0c938f2808
SHA512 f2204f87db166f54106a3beb3d170ef2b9a27ad6a5ac897b5e6b48656d98dc9e0336193cca03f71a204cd10d4bc0f59ee74bbda7af6dff85954e213c4921b033
SSDEEP 192:EONq6nnHGQmiUySCQYcX5hQDP1JOnHodMcR2U6:EONq6nCkQNX5+DtJOnINEU6
TLSH
T10D02E934BDB86C7B8EF36D45B48623139FA5216BE5956FC0D6F81E1C01D77AC2306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

114925a7-ecce-4b3d-b32a-acff0e5bd19f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\114925a7-ecce-4b3d-b32a-acff0e5bd19f.tmp
Size 18KB
SHA256 e765799fb53cc3b00d28e6987a055d35208ce0b053f8196e7896c9efdb38ea0f
MD5 55cf1658f951cdadc296c7d1e83ce3f7
SHA1 def85c78900027b9538c53b59ecc04d154ce3e21
SHA512 597633cb8006cdbd8d7f4a389b3a79540d0f34f0db32ea47fc79aa5caa664bd669911133b4c7ef7f0d2ee1896284169963297a6b35577b165a0f07e0dd3568b3
SSDEEP 384:yQkUSv0sNo5VEi5TMQX5+DtJOnIqNJrVJ7GIIlg:q07EQHkDzOIqNhVJ7GLq
TLSH
T188827D316DA4AE374AF79180F18A3543DFB49167E6896FD4D5DD6B1C01CA3ED230B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b603be7-6104-4efb-96b7-6b6706c5dbb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b603be7-6104-4efb-96b7-6b6706c5dbb8.tmp
Size 18KB
SHA256 48ebd8af52a2cdc646d51fe8502db3b34fb2f638ed2c27330c982848c0f15809
MD5 a569b649212baa132d7e3d11939b7b58
SHA1 e6657eefa9b0f69f22d572d4720937cce62bf7a3
SHA512 d56351e1b17c4af98d83fae7d543660bc2edb7e29e28523dfdb4febdd5e7009bbce9b72c157e1fa4b38eea59e44ff70bb5d65198882b876066901c5e984ba80f
SSDEEP 384:fQkUSv0sNoQVEi5TMQX5+DtJOnIqNJrVJ7GIIlg:h0oEQHkDzOIqNhVJ7GLq
TLSH
T146827D3169A4AE374AF79180F18A3543DFB4A167E6896FD4D5DD6B1C01CA3ED330B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62c00661-7687-49b4-8a8f-3958ebf1473d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62c00661-7687-49b4-8a8f-3958ebf1473d.tmp
Size 8KB
SHA256 f727c7a5a3f3ed4d292f1657f9ae6d305789a544a7e88f178bc926faa9f95bea
MD5 bb5e6c9c93305ae6f47d517463d8f65d
SHA1 2220e1bcfc9bcdd44b5e19afefc6826b524a4250
SHA512 a65bf3fbfaa1a1feddafdd2f7d87723df35691299c0fc98966846b46389a562a9365ed92a8ccb8e373620e74cf15f7d34808b3df69fbfcc79036e5f1be0cd5d9
SSDEEP 192:kONZ6nnHKQmiUywCcYcX5hQDP1JOnHoqSSJrdg3Sq57U6:kONZ6nmwcNX5+DtJOnIqNJriJ7U6
TLSH
T10A120A31B9A4AC774EE29595B4C731139FA51127E6897FC0D5EC2E1C01DF7AC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

0f0ed7f5-b8f9-4dc9-8083-7c4a9310fd04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f0ed7f5-b8f9-4dc9-8083-7c4a9310fd04.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6084ff7b-45f3-4ff1-a92c-e0118c0b7a46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6084ff7b-45f3-4ff1-a92c-e0118c0b7a46.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f199ab39f866f94a464059ad060bda075cf9e6c4e08f759f8d2cd93b294426ed
MD5 864ec40d14e72df71a47ba565feb836a
SHA1 c176f03b25374bb3b5c26f64985271b8394f8972
SHA512 6411be2b5266de1a25f14ec73ea8addab71694af2618946d3a3ccf43440c7a911faf4e3595fe72ad0571aa7d722feba8820d4a81f37b2eed18bccc367e72580c
TLSH
T1E9516485E6D184B0EF58D970B5DE2F873AB897B959C71FB32CA4D8BDAB0A7065830044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 09cd16340762435495f2bbcbf3b581220f4c2e2e3b8752ca228170aafc2feceb
MD5 9a7266bc85c8b39a0e5b1a6bbfe2cb14
SHA1 58f653a503029a60707bc355428e72170d4f9caa
SHA512 63c8f1c4ee9ae4135a46345b66fa4e49c5f6b588da05fffcdfd36df36c12ae370a19017dfe89c13c12f29c6c25a22449ae9319ef0b62a470b75e4d360aaceef4
TLSH
T11A517285EAD184B0FF59D970B5DD2F873AB887B958C71FB32CA4D4BEAB0A7065830044
MD5 SHA1 SHA512 TLSH

Submit Download

745947db-ccea-4ad3-8e0b-08e505720c22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\745947db-ccea-4ad3-8e0b-08e505720c22.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

d2c8a08a-c542-4f8b-b995-daeb6977d6e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d2c8a08a-c542-4f8b-b995-daeb6977d6e4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fb30e58a-af76-42bf-a2e2-e99a2991f5f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb30e58a-af76-42bf-a2e2-e99a2991f5f8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 449cba3c0f0fba9b181a3b8afdd5021ac93ad07fe5548a8c32fe4ebf49615379
MD5 b5e37274625142cd9fe4d17d299f1039
SHA1 a26d8857282c69500ab9cb684efbcc5bb00a45b6
SHA512 30fd33a887a4fccd5caec0a23b7b640f3836216bec031cf673e5eccd01addc508f8c164b59aaf20d489e52921b4bc3527a8e3da4499e05f1c53b7c3fc0abac39
SSDEEP 48:Kgfir/BhBab5UpISPaK9v1lax/KYstvTyLnKzHJp5Sbx8hISXSK9X19SxXCY0lHn:KQsAKVC+ikAKR+uRmKKoS+ROK6EFL
TLSH
T1DCC1B01531BB020038BD759880B69B1B6282B1B3301AE63BBFBC51A54E6FE544DFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

a5d338f6-f822-4c4f-8a98-628a20de6fbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5d338f6-f822-4c4f-8a98-628a20de6fbb.tmp
Size 10KB
SHA256 54b566a66339f095115af6a38b8ef171a8268d0c779052d9f9d68e42edb39b9a
MD5 21d2ebf5ee5eb925d7f1df31694c1f73
SHA1 ccf6845b4eeecb8f129f365b90fdec9237964cd8
SHA512 7237511d4aa63bfd3043c555864f0d76d037acba8636986213048e555dd0311dced7911afdf21410ebd557e97b6f2cd6779ae03c83f4d6154cfb218855490851
SSDEEP 192:sxZxR2WW/f9sdfIdpDUkjH8O6+WNNn6rQ/YYB4bcDIg5aJ:sxZxjW/f9sdQ1Hk91/fpg
TLSH
T19932A652AF34A67B8CD7E209BB65BF13E6F95031A1D41D84AAFC891C04E7ADD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7555251-5308-4030-8f57-04a864461620.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7555251-5308-4030-8f57-04a864461620.tmp
Size 10KB
SHA256 e85c964eaa35472e0e7846582af3eb10cf8b25fa408c40623a5e0190175c9e63
MD5 0c70d0a69696d57b1e71c721e6b2a392
SHA1 a426264c75aa1897ac429c4e37afd4e0fdb25c3e
SHA512 b32a46bbcee2456fae91e38aea763c389bdc95fb6cd4f5295a9c5cfea90e1ed9db4190b3cda3a6b3110358adbc036012918fa31ac297cc887a64d4687848af19
SSDEEP 192:sxZxR2WW/f9sKfIdpDUkjH8O6+WNNn6rQ/YYB4bcDIgrJ:sxZxjW/f9sKQ1Hk91/fp9
TLSH
T1572296526F34A63B8CD7E20DBB65BF13E6F95031A1D41D54AAFC851C04E7ADD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7ed2480-3167-41bf-9985-1e8aecdb3a4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d7ed2480-3167-41bf-9985-1e8aecdb3a4e.tmp
Size 27KB
SHA256 cd0ebcb8c05c746bf3ac5ef82b32173ba2d132641b55fb1cfde88e5fda6bb86f
MD5 bbb483c4717f0eb57bb56a5c71b91484
SHA1 ce57010b96954bbc0ec7f1be4d243dbb4dbc9676
SHA512 ad15940e23c739adaef97a862deb5f88cafc2b3e0b96aa081e3474535ad2a69600fae401a8ce4caa71d0d03e9edb858d283ca7e552acba3d7ab8da04c1aad6c2
SSDEEP 768:JayYR7jWv3NRB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvX+ropvOj:JayYR7jWv3NRBu1ja/CL8OXVy
TLSH
T18AC2EA3B640DCB7E4FC01A9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e65ee745-1fa1-4960-83a8-b4edf232d136.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e65ee745-1fa1-4960-83a8-b4edf232d136.tmp
Size 11KB
SHA256 2b2da7f4bae7225975096c039a550e100f47da8698f6faaf2a892cb43ad9a32e
MD5 eb1a12f5455e2d90c32dca6ca18ea60f
SHA1 6ee7d9d230c25ca9971fdb3841684741b3c605b1
SHA512 d6a60990812c976c5c84d5a6b37ecf83512c4cb71a48f5421424a7e6307f8b77aadb0bd71f122b33d8e54bdbc4b486a2d0eb1edf6e3497f0f0455b5558ee3eeb
SSDEEP 192:sxZxR2WW/f9sWfIdpDUkjH8O6+WNNn6rQ/YYBL/cDIg5wJ:sxZxjW/f9sWQ1Hk91/f66
TLSH
T1BE32B651AF24A67B8CD7E209BB55BF13E6F95032A1941E44AAFCCA1C04E7ADD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cd1fb62-0c61-4f88-99ad-4c442368ab98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5cd1fb62-0c61-4f88-99ad-4c442368ab98.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e08d10890116ffbc9e1e81cbe8e5f9779bcf4140fae4bb296d9e13a73b465f8e
MD5 44c72e8c6b39304eef763fa754ccfb45
SHA1 e6109c7c40b5970e8b17a90f9f8dca263a41c359
SHA512 a7834244e728e415c72f75f8272d04452d50184071bdb47265f0b8ceb6220a9ff598a0229210621dec6fe6c761e8f930fd3f5500167e622b69e97a141ce68496
TLSH
T153410998B6FA1148B3736E5A5BF7A86E547BB8772E0AD45D10100E4F4A22B44C871B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads