31414f686e0de454393615863a1b15acd3c79e1509da64a176ca83d4256f4659

Analysis

max time kernel
40s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extensions/ublock/about.html
Size 5KB
Sample261024-vcadaaa12x
SHA256 31414f686e0de454393615863a1b15acd3c79e1509da64a176ca83d4256f4659
MD5 05317ffa233bcdc5f22004f5b012c4be
SHA1 d7a19a78c373ac959a85d2c81907d3cd5af74b63
SHA512 2f10508968e0e71f14d27900d6bbfe95ffe447cfedc50cfeaf627882d3d8caf95bea23161d037a435254ed86828fe02fca62162b8fc4aaa360f3100068df46f5
SSDEEP 96:ge2o8TO8Tqi4djXKytZk/sjwiPUSQW79qT8FSA+RYGKJT3D:mq8eE7zxO1kYGKJT3D
TLSH
T106B1DDB389A0405B0F15DDC49C306B1D9AD3D29FED834D4AF2EE0E958BCEAD2D807189
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1212	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{398C9459-A14A-4D03-B446-C494C8C2FB2A}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 3388 wrote to memory of 1724	3388	msedge.exe	87
PID 3388 wrote to memory of 1212	3388	msedge.exe	88
PID 3388 wrote to memory of 2036	3388	msedge.exe	89
PID 3388 wrote to memory of 2036	3388	msedge.exe	89
PID 3388 wrote to memory of 2036	3388	msedge.exe	89
PID 3388 wrote to memory of 2968	3388	msedge.exe	91
PID 3388 wrote to memory of 2968	3388	msedge.exe	91
PID 3388 wrote to memory of 4504	3388	msedge.exe	92
PID 3388 wrote to memory of 4504	3388	msedge.exe	92
PID 3388 wrote to memory of 4504	3388	msedge.exe	92
PID 3388 wrote to memory of 3472	3388	msedge.exe	93
PID 3388 wrote to memory of 3472	3388	msedge.exe	93
PID 3388 wrote to memory of 3472	3388	msedge.exe	93
PID 3388 wrote to memory of 3644	3388	msedge.exe	94
PID 3388 wrote to memory of 3644	3388	msedge.exe	94
PID 3388 wrote to memory of 3644	3388	msedge.exe	94
PID 3388 wrote to memory of 4264	3388	msedge.exe	95
PID 3388 wrote to memory of 4264	3388	msedge.exe	95
PID 3388 wrote to memory of 4264	3388	msedge.exe	95
PID 3388 wrote to memory of 4956	3388	msedge.exe	99
PID 3388 wrote to memory of 2060	3388	msedge.exe	98
PID 3388 wrote to memory of 4956	3388	msedge.exe	99
PID 3388 wrote to memory of 2060	3388	msedge.exe	98
PID 3388 wrote to memory of 4196	3388	msedge.exe	103
PID 3388 wrote to memory of 4820	3388	msedge.exe	110
PID 3388 wrote to memory of 3056	3388	msedge.exe	111
PID 3388 wrote to memory of 2396	3388	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\extensions\ublock\about.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe9b59c188,0x7ffe9b59c194,0x7ffe9b59c1a0
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7899975256986861476,11937710224059088413,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,3423849121712690936,15316922794865116651,262144 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,11591023149514721320,11002189394479391259,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,9255926798278687095,7328192637029382822,2097152 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,123473882047798104,16117508650106605591,2097152 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,3038960272214190919,8595185156136247775,2097152 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,1246749877654957667,1450104923605418320,2097152 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:2
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,2407064074103005845,8088678417354710913,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,6767310499265962006,13222609817173651048,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,14056537372651128564,2327901517823051178,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,14056537372651128564,2327901517823051178,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,16916653962935673105,6638512300613889711,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,8894321541159998571,16925838873118803570,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,14761436383909320958,13730560250658254407,524288 --field-trial-handle=2360,i,6337205843658404770,8872925647861391311,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:2396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

61b17a60-0e20-4a7d-99d9-a012ff0de420.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\61b17a60-0e20-4a7d-99d9-a012ff0de420.tmp
Size 8KB
SHA256 2755e68971cdb58ba76fafef29cf859718e15f71b33fba3928d664d795e8e400
MD5 b66949d9d989fb87fee70468725de96a
SHA1 f6d483e7322102894738dbaeb4fbc65f71f548ab
SHA512 1c560ea6ca2f42d831bff5a75971a51c4cc9675d5908a9e053a169ffbeeb5f9677dc30c9c9e3250b095236e3a7f76726649023e7c84694321ef932736316c7a6
SSDEEP 192:1ON46wlDgQmiUybRW4X58gZDOKaFbAIDloQUU6:1ON46kgSW4X58EDOJbAseU6
TLSH
T1E402E935B9787C7B9EF2AE49F58B37139FA5102BE6512F84C6E81B2D00D765C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ba48a90-c7d3-4d3e-8ed7-9dbff6101208.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ba48a90-c7d3-4d3e-8ed7-9dbff6101208.tmp
Size 8KB
SHA256 3a422717898e1f82cae61e75978ec1fb8b7c182ae821ebcad93971c171e3531e
MD5 55e3f8032a7527255a68cd2f5c07f198
SHA1 dd92f14a552f4b240231823e6662e6ef022ac69b
SHA512 57536d392a4a16d0e3367e12f3c5c15c35b6924b27ad45c55a65bb903e69c6a3ee9f4e412fe77c2ece80b1e4f45b8ce3ac840acecfff79ed35aeef3f10cf49b4
SSDEEP 192:eONI6wlDDQmiUy8Rp4X58gZDOKaFbAWWaQve3qTuU6:eONI6k1Xp4X58EDOJbAWWarKuU6
TLSH
T1A2120631B978AC375EE2A585F48732039FA95157E6857F90C6DC2B2C01EB6AC230ED13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

249c58b2-471d-42c6-8707-7f9d7d61daca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\249c58b2-471d-42c6-8707-7f9d7d61daca.tmp
Size 9KB
SHA256 1b439f32d595b686c7a4f493b6a4f348c4c17a2665ae699cbda37fff608be48b
MD5 e7843b802c36ad4b54c0e512cfbe7ec5
SHA1 8f7035d126be5caf5b0d62ee7d621a686975586d
SHA512 d75afa32f53813754beedc1c79e27943f8e13063833696ee02bd60e7524e7e7fd1cf098e3f808011fd6200784949a7122bc661cb3108ddb51e5987eae1b0d3db
SSDEEP 192:sxZARmWo/fFse/Idpd1HW6+WNGYrvll+2IgrJ:sxZAfo/fFsewTHbGW99
TLSH
T19B22A7526E28A97B8CC7D31DBB15BF53E6F9503251D41E58AAFC861C04E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4194efdc-21ff-4fa1-b6a5-e27024e310a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4194efdc-21ff-4fa1-b6a5-e27024e310a6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83b117dd-a0d1-414f-a8dd-3403d748f3e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83b117dd-a0d1-414f-a8dd-3403d748f3e9.tmp
Size 9KB
SHA256 db81e2d7003cc563b1aebed1ca4b178ff9b7c38db01c8368d86e15bcc641a3a0
MD5 1a74dc394854a515663e094a887bee99
SHA1 1af920c79dca6c75cc33d3c8d995b40c61fd2750
SHA512 87d79bbabced47b843b240208e905b1a03a8d0d3c40934d1a4553c205edb2f70984827270b7af296d76c961caccf5ea3e2449e44fa5d61efae9d993d854d7648
SSDEEP 192:sxZARmWo/fFsT/Idpd1HW6+WNGYrvll+2Ig5MJ:sxZAfo/fFsTwTHbGW9e
TLSH
T1D622A7526E28A97B8CC7D319BB15BF53E6F9503251D41E58AAFC861C04E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 5a0d6f96c589d28b7ae36d5e05fe541ee91b7b2e7844563962c972e39dba8f44
MD5 997c07bf5ac05a3685f54731c7920524
SHA1 3cdfb81cc00f614091e2a4859ee653c3d4f09aaf
SHA512 ff55415a60e9bdab63888bf0871a0fd51b51fe4f2cf8c44d5ee214d538554380e8f396a4360bd58ae86427afd759f3fb4fd0227fc690f7c45f6f812bb331f873
TLSH
T14A516EBE455A48D0FF1850F0DEE989873EB8A97D55C3CE0A37B0DCBAA9027797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f4a604426c3dd834c0ac4f942a8c3fa57b48d050c17ee00c363a1bbb08a526d5
MD5 96ab81a86bbffa4997ca46e809f02ef4
SHA1 8a8fbea4c11a83d30681b9a3c73040cb2a7ba158
SHA512 de958bd416702aa2e38ec9f0360a5f38f17dc26211d2985fae40dd38bdd098b62e029fa3ec37ca198309eb7327b45703b6591fa0e00383aee4029e211513e153
TLSH
T18F516FBA454A48D0FF1850F0EEE885873DB8A97D55C3CE0A37B4DCB6A8027797804C80
MD5 SHA1 SHA512 TLSH

Submit Download

438e02b0-6fce-4121-b55e-356d1d09727f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\438e02b0-6fce-4121-b55e-356d1d09727f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

122b09b8-5389-4038-9473-6bad2fd7c869.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\122b09b8-5389-4038-9473-6bad2fd7c869.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

544c5509-4fab-4744-8ed0-f3df04d45e00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\544c5509-4fab-4744-8ed0-f3df04d45e00.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

aa948760-8ea4-489a-b3c8-1a1d76b9ab6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa948760-8ea4-489a-b3c8-1a1d76b9ab6d.tmp
Size 27KB
SHA256 c6ea71706dbe155ee568575726ba934a1653b34117ac55eee228989ca185af27
MD5 95f18bfcb55d1a158d93101b6cd66cd8
SHA1 4ee5ce1e32d5c2006d25e51edd0863c61363cc6c
SHA512 436101c549f9ff94937d161adbe75c0088cac1b6d77845ae0131720cbbec350c15dce668fb5f23bc106c6641ae364d818209cae499ef5695104f2877674cbc24
SSDEEP 768:EFy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb9roRYm:EFy4J/DWvbtBhu1jajiLm0b2im
TLSH
T132C2FB3B684CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adfe9697-8858-4490-9598-c9fc412e0aa1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\adfe9697-8858-4490-9598-c9fc412e0aa1.tmp
Size 18KB
SHA256 b556823f67ba3487320f9125379ae324e615d63e3ea20601604d27c5d99222bc
MD5 4d1aadb2091ae217c59fabc5953a83db
SHA1 2e664f9110496601b8bb79286abe1d528784fa8d
SHA512 09aacfbabde9c99c39f630baac7db34411e432173dd770077281c3b7a1a7e86ba9280319b4d378bbc52af77ee9ed68d45704e9c668ea1c3f0ae133f549a3e6fb
SSDEEP 384:wQkUSv0sNSUUxZeYrHX58EDOJbAWWaSKu2IDuwIIlh:Y01Jza4Odql5DuwLL
TLSH
T176827D32A8B9AD339AB2A651F54A36439FB59017D6C46F94C6CD2B1C01CB29C234FE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 75d378159196fba060c73ea68f912beef518e5c37a9eb84787555dc6d2d870dc
MD5 cea5f734aede99a3e9467567c3bc2e75
SHA1 af208d3b6b0aaa2048d2378e7db0ab6a333d0aa8
SHA512 ea741a81c7805ffe3a7d0c775ee380b17eb07ea699a8fddf3cdb6f9020830fc0394238ab56a51edbd081b0ca4e5aad8732bd9225141cd298e2e7037c55bfb0d0
TLSH
T197413B58B6E90109B3B76F5AABF3686D487BBC772E07D45D10110E4F0A22B41CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads