ffb4cef470a7144575d4532983029f1826c36fde8ccf331038a219d6af104d99

Analysis

user interaction
yes
max time kernel
52s
max time network
53s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 22:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 5KB
Sample261023-2xcsgaet91
SHA256 ffb4cef470a7144575d4532983029f1826c36fde8ccf331038a219d6af104d99
MD5 30f608643d8a944cf69263621727875f
SHA1 93ab5dcec6ad562361eae325d2bffe4af4b57b40
SHA512 3c5c04f6c5553c2c3f0b4f1c6728e0c18517fb939764bdd520103419d2fffe140d2a37eb8d928cc937641abf3d8e02d0b9b6ad05ea41edb4bab0a312912d162b
SSDEEP 96:zGIG7Wbuu9gzJVd5pAJ9/4EEi2XHVCGICfM/0Cqa4oDtEFMh2Rjff97BfL:6t7WbuuOzJVd5pAEE3aICfe08SFM0jfD
TLSH
T153C128B5B681B0696BE700E7B2BBA35C653D4211350B4023F3ADF8E53C60D4B51D7EAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
692	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{E52987B9-8930-48EF-8CE6-EFEB39DE50B8}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe
5732	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5732 wrote to memory of 2592	5732	msedge.exe	88
PID 5732 wrote to memory of 5124	5732	msedge.exe	90
PID 5732 wrote to memory of 692	5732	msedge.exe	91
PID 5732 wrote to memory of 5124	5732	msedge.exe	90
PID 5732 wrote to memory of 5124	5732	msedge.exe	90
PID 5732 wrote to memory of 4552	5732	msedge.exe	92
PID 5732 wrote to memory of 4552	5732	msedge.exe	92
PID 5732 wrote to memory of 4560	5732	msedge.exe	93
PID 5732 wrote to memory of 204	5732	msedge.exe	94
PID 5732 wrote to memory of 4560	5732	msedge.exe	93
PID 5732 wrote to memory of 4560	5732	msedge.exe	93
PID 5732 wrote to memory of 204	5732	msedge.exe	94
PID 5732 wrote to memory of 204	5732	msedge.exe	94
PID 5732 wrote to memory of 5156	5732	msedge.exe	96
PID 5732 wrote to memory of 5156	5732	msedge.exe	96
PID 5732 wrote to memory of 5156	5732	msedge.exe	96
PID 5732 wrote to memory of 1904	5732	msedge.exe	97
PID 5732 wrote to memory of 1904	5732	msedge.exe	97
PID 5732 wrote to memory of 1904	5732	msedge.exe	97
PID 5732 wrote to memory of 4500	5732	msedge.exe	98
PID 5732 wrote to memory of 4500	5732	msedge.exe	98
PID 5732 wrote to memory of 4500	5732	msedge.exe	98
PID 5732 wrote to memory of 3252	5732	msedge.exe	100
PID 5732 wrote to memory of 952	5732	msedge.exe	101
PID 5732 wrote to memory of 3252	5732	msedge.exe	100
PID 5732 wrote to memory of 952	5732	msedge.exe	101
PID 5732 wrote to memory of 4936	5732	msedge.exe	103
PID 5732 wrote to memory of 5220	5732	msedge.exe	107
PID 5732 wrote to memory of 2776	5732	msedge.exe	108
PID 5732 wrote to memory of 3884	5732	msedge.exe	109
PID 5732 wrote to memory of 4816	5732	msedge.exe	110
PID 5732 wrote to memory of 4816	5732	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffeba4fc188,0x7ffeba4fc194,0x7ffeba4fc1a0
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,2171572279876107777,74684243442585820,262144 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,10121370967614656624,17179286900658509629,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,6553918603021072164,2362981215788579628,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:13
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,8014071454234746242,15033175874646043003,2097152 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,18296831572519667522,10998026686935193481,2097152 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,8610295804648351249,11313710745670612075,2097152 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:9
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,14811473460739787854,9158860443460050686,2097152 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5448,i,4506917542059327110,10832310770236127505,2097152 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,5915200065734732959,328767961777423054,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,5983411188994130375,15808462067295263155,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,4205957050793483732,4463286259616229854,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,4205957050793483732,4463286259616229854,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,13778081999865356322,7435628020428651627,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,7470464658755731297,15990976695604609812,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,14749841534473621255,7718559004533382562,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,10298241453517004568,256920956466512859,524288 --field-trial-handle=2268,i,13202859494787709795,6852721639505064357,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
  2⤵
  PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5d1d4448-8a3e-4fc5-9aff-88197fcf376d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d1d4448-8a3e-4fc5-9aff-88197fcf376d.tmp
Size 38KB
SHA256 b6bfd8add08dacbe6f6427f6391ed695b590915300b41040c388c520138987cc
MD5 036b009924ebc25a21a3ee1ad8ff42f4
SHA1 238ccccc9733fce811064bc6ef0818794732254a
SHA512 32ffe9bf3dcb35cdc640cd64fb13cd3c044c26a8006b06bdf68febde5d3a90525956468332fc21f90fa8fa8e006ff1152391528e6bdf35c4dce21449dd20547c
SSDEEP 768:v/UxvxjgC+H3f2/IO+MgbR2/9OA9at01j0iq00+IaXMSHxRz:CZj3+H3f2PgNLCHq00Na8STz
TLSH
T1CD03C031ECB49D63ACF3B385730A6387DFF40663C6CA5AA049ED290D058B6AD1307867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79e042b2-2bb8-4271-8e2c-08971b300c01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79e042b2-2bb8-4271-8e2c-08971b300c01.tmp
Size 34KB
SHA256 59d228e75e7ac910f6920d40c0c845176082583b67ccdf16aa8b68b818e9c348
MD5 5a6c315e55260aa9f2a16b54fe6c1790
SHA1 aae1533ec4a11e20589f8ad78ed809b3ba281585
SHA512 d163057526e2cc62fe40063277ee3249e69a4508b6b03fc8e5c782a0a7a73f82c33c044a1a1bc464819bdb1f2863e6b564c321d5e11e5fcb1e07c7941fc92d25
SSDEEP 768:jZ3qCFyWO+MgbRW/9OA9at01j0iq00+IaiM63U5L6:jZ3qCQgNrCHq00Na/AU5e
TLSH
T1DAF2AF71ECF59D73ADE2A295B30933839FE44217C6C94B50C9DE2A1D054B6EE270B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

831ae0c1-aa0c-4274-9667-5203ab104a0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\831ae0c1-aa0c-4274-9667-5203ab104a0f.tmp
Size 37KB
SHA256 aa43ad72ea14a68b965b5078768c30c9c0e23b79cc81b45f91652373edc4f73d
MD5 836c61879d43b67b525d6f2cff016ef4
SHA1 864f36c9c30b71412bf2427982333ab4f0976b2a
SHA512 8f5638b6b09808a3ec8e19858a01675f2151539f322eb236a9dc739ae023ff03999a42887a517bbe78e3a1d03dd473ac1b7d98983616ad8941df8c07d4f67afe
SSDEEP 768:X/UxvxjgC+H3obfO+MgH/9OA9at01j0iq00+Ia2NSHxRz:KZj3+H3oygICHq00NaiSTz
TLSH
T1FD03BF31ECA59D779CF3B384730A63979FF44663C6C96AA04AED2E0D01876AD1307867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

2d295a97-2e89-443d-afe5-fdb268a2abba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d295a97-2e89-443d-afe5-fdb268a2abba.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5db5007e-59a2-4d1a-a260-ff66fe812655.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5db5007e-59a2-4d1a-a260-ff66fe812655.tmp
Size 23KB
SHA256 13f2254adb4e1b5222eba666ea62f7bf0b497e9d9bd6294ae56269ed48780732
MD5 09c645e4d4a13309e5d01475153eb6df
SHA1 440e58a79deeb8056d94a1a0e08bd243a08f4522
SHA512 63416a88cbe96df0508477bfe7b08bed03654218f3b53670647543d5e4f7baffe80957f13bd9b255b5b7ba789d06c5f52639cb9f2aacb2f24ed7fff1cb31f128
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUnrondL:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VU
TLSH
T14AB2D92B744CCB7F4FC04A9D9C196FDB6D9802C796588D8047FE984C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9afb56ca-9035-4afe-93bf-3be2fa916d43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9afb56ca-9035-4afe-93bf-3be2fa916d43.tmp
Size 11KB
SHA256 b038609cb3aebc41ebafcb9e3ae7e9ff8710ab7b7c3952f1eb03cc534965d900
MD5 a2469bad5ed340f289cacb6417dc40b4
SHA1 0d2c95c8414dcbf630fcac8bb9f8d311da4857d9
SHA512 3b9ef993ff052f75bcdedec70031d27794d39d44cee7695b6655aa0ad98344543330249709924ef155cd9c8d204da920ffc9a9abc4719134f6de2cee079519cf
SSDEEP 192:sxRtRobo/f/sgqzoA8p493/g6+WN/9a/YopobG9zSDIgDFJ:sxRtEo/f/sgnO/5g/LzS77
TLSH
T1B532A655AD68A93B9CCBD20AFB55BF53E2F91032A0D11F44F6FC8A1C04EAACD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3820492ce047edadaa75c38940c12d0d8d3b27ca1b27d87925f08fec761086f1
MD5 d825fd37d768ec98f172199a20a15e67
SHA1 c2027c460cfa6312f7af4e34087c56ac58d647c6
SHA512 4ea895b1c08aa6ddc71495d6e441d3879fe7a4b9aa9764045e66cf023516051fba7772bae59c73bb2a83f1588daaeb49b40cf4084c5b4212575bf829425235f0
TLSH
T16061ED525794218EFF5A183185C11ECF36705A82E04FEE12AF98DDB8AD3136787F20CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 293bbe1483e962e838fda561b9d843bcd30b080b25a472a8f598e06c2bf61db6
MD5 e65e92d1d4fe0e1f5edb84b0a1507d8e
SHA1 ca04bf0c9955f9b96abcc0209379705f62250931
SHA512 218d4fc8865f8e9c6e6cb0e2a2383e769c0b609adf17cfff19999ece1eeb9749c76f9e453342cef5356b31db75e83411453d326f288b7f37cc858d4aa0a076a5
TLSH
T1B851B9524694618EFF5A283185C00ECF36305A82E04BEE519F98DDF8AD7535787F20CA
MD5 SHA1 SHA512 TLSH

Submit Download

28c36bdc-0b59-4afc-9ea9-1e8dd6cc5d43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\28c36bdc-0b59-4afc-9ea9-1e8dd6cc5d43.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

87d9aeee-37fc-4c22-a0e8-bdc70b082fa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87d9aeee-37fc-4c22-a0e8-bdc70b082fa6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d6549077-c6d4-423d-844e-ba5111f5708c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d6549077-c6d4-423d-844e-ba5111f5708c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cd057504-7c63-4b6c-9930-c4a0a9820bb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd057504-7c63-4b6c-9930-c4a0a9820bb9.tmp
Size 10KB
SHA256 2b990e5b6d42e4b4a5d00bd9fd45bcf2307c66587dd0658a7626eea386411156
MD5 bc58222aa7fb73f7645d7811c20617bc
SHA1 65f2eaadb464034b6b498c787be56a12c230b33d
SHA512 8b7646e286fdfbb6adce7a2db40b77c7e97621766b0046bc243f6f2668a8e72d550c437f0e60da9013cbddafb18b4498297b0181c385922f62847879124d5473
SSDEEP 192:sxRCRobo/f/scqzoA8p493/g6+WNIYodwbG9zSDIgIJ:sxRCEo/f/scnO/5IbzS7s
TLSH
T165328515AE68A93B9CCBD21EBA65BF53D2F91032A1D51F48F6FC851C04EA6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efcf1312-87e9-4b30-95d2-08edcaeb0435.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efcf1312-87e9-4b30-95d2-08edcaeb0435.tmp
Size 10KB
SHA256 1cda4be5d3a693b72d7e8e7c57cdd530be57629d2bfa704e52f32a829c826413
MD5 ff389dc634acd59e2cb5007142e6a2b3
SHA1 9d10cf86bb8c2a72c22a880e1fcaa131a101b985
SHA512 99e906586b6f5380e11ea7a69903f6d546ad2cedfcf642c6970e0a48ae95bb94f9c359b88af6954e24f1844145cf4d13082a684e7f1eb11b539b6819323aac59
SSDEEP 192:sxRtRobo/f/stqzoA8p493/g6+WNIYodwbG9zSDIgDDJ:sxRtEo/f/stnO/5IbzS7R
TLSH
T117329515AE68A93B9CCBD21EBB65BF53D2F91032A1E51F48F6FC851C04EA6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33ddbdc9-8041-4dd0-a84e-9d5af12ca91e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\33ddbdc9-8041-4dd0-a84e-9d5af12ca91e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f61e53f2-bd2c-411c-91d4-0b7779853635.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f61e53f2-bd2c-411c-91d4-0b7779853635.tmp
Size 34KB
SHA256 110b8b19c50abe061fd0a44aff354764d35abee932d760ba48efa67c5d65810d
MD5 0d0346980af1c16d585dcb8be0253a10
SHA1 5518ae393d784742600ed58204d65e9530a82427
SHA512 df1584d1d01e251ed1053766255d8dabd8ff6cf4b38e42f9c7e3653076fb91f6c8400dd245ab0a7401bb8b0b5d960f61c3621c20e65922c6d985af9450bdd137
SSDEEP 768:CZ3qXFXWO+MgbRW/9OA9at01j0iq00+IaiM63U5L6:CZ3q1RgNrCHq00Na/AU5e
TLSH
T132F2AF71ECF59D73ADE2A295B30933839FE44217C6C94B50C9DE2A0D054B6EE270B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads