12ca3893418a95db1dbc1e4579ffd559f8393ca5aa2b25fca4c994a4ee8647a3

Analysis

user interaction
yes
max time kernel
56s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 11KB
Sample261026-pd4evsdx9t
SHA256 12ca3893418a95db1dbc1e4579ffd559f8393ca5aa2b25fca4c994a4ee8647a3
MD5 a35113d8b0c923f7f272d01eac2d108a
SHA1 89b7132ea59d8aa65143b2f2f0dce80ec88af8ef
SHA512 0df1276619530ada954c3f7213f5d0c28a75d2568e024373a7999b13bbe881e43baa32f13765fc5c220cdcaf70180fd6d2944fc89f6a49d79b9469444578f59b
SSDEEP 192:Uzou/5lanED0PRBdoy8U8jIrq660ONMO+X0jxxt9x5T9DJK9VJE3toLIpZ:Yk8j+7+7oI7
TLSH
T165326621EED01207B51B4590F293FFA92EA8810747020DB4B99D7A75DF8EEE256473AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3220	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2BC6B465-2A78-4DE8-A4F8-0E0A7A4CAC67}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 1072	2100	msedge.exe	85
PID 2100 wrote to memory of 3220	2100	msedge.exe	86
PID 2100 wrote to memory of 2384	2100	msedge.exe	87
PID 2100 wrote to memory of 2384	2100	msedge.exe	87
PID 2100 wrote to memory of 2384	2100	msedge.exe	87
PID 2100 wrote to memory of 2736	2100	msedge.exe	88
PID 2100 wrote to memory of 2736	2100	msedge.exe	88
PID 2100 wrote to memory of 1512	2100	msedge.exe	89
PID 2100 wrote to memory of 1996	2100	msedge.exe	90
PID 2100 wrote to memory of 1512	2100	msedge.exe	89
PID 2100 wrote to memory of 1512	2100	msedge.exe	89
PID 2100 wrote to memory of 1996	2100	msedge.exe	90
PID 2100 wrote to memory of 1996	2100	msedge.exe	90
PID 2100 wrote to memory of 1484	2100	msedge.exe	92
PID 2100 wrote to memory of 1484	2100	msedge.exe	92
PID 2100 wrote to memory of 1484	2100	msedge.exe	92
PID 2100 wrote to memory of 1708	2100	msedge.exe	93
PID 2100 wrote to memory of 1708	2100	msedge.exe	93
PID 2100 wrote to memory of 1708	2100	msedge.exe	93
PID 2100 wrote to memory of 2760	2100	msedge.exe	99
PID 2100 wrote to memory of 1712	2100	msedge.exe	100
PID 2100 wrote to memory of 2760	2100	msedge.exe	99
PID 2100 wrote to memory of 1712	2100	msedge.exe	100
PID 2100 wrote to memory of 4540	2100	msedge.exe	103
PID 2100 wrote to memory of 4628	2100	msedge.exe	109
PID 2100 wrote to memory of 5004	2100	msedge.exe	110
PID 2100 wrote to memory of 2856	2100	msedge.exe	111
PID 2100 wrote to memory of 2604	2100	msedge.exe	113
PID 2100 wrote to memory of 2604	2100	msedge.exe	113
PID 2100 wrote to memory of 2604	2100	msedge.exe	113
PID 2100 wrote to memory of 1664	2100	msedge.exe	114
PID 2100 wrote to memory of 1664	2100	msedge.exe	114
PID 2100 wrote to memory of 1664	2100	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd5092c188,0x7ffd5092c194,0x7ffd5092c1a0
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,4563449356200487001,14119197930422693583,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,9591296403290590182,576103717659257057,262144 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,1938900704220684708,6109168624901947997,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2995742178477371085,4115971708893720374,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,10166802731011592744,14979566393564520350,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,11622064623183870095,9140276309672765156,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,162935859573312278,4383549499060039349,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:2
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14822961649947095258,2860688517000289277,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9739077049676950637,8381363915925349366,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,9240217523231709769,4239398006335675578,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,9240217523231709769,4239398006335675578,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,834538530439038577,4795308002104736046,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,8869823114023214683,15402551944656172639,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,9315410776306338030,5553682748103510403,524288 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5204,i,10256012272906732202,10957585021056653827,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5140,i,16159897131927179486,7266934141365545682,2097152 --field-trial-handle=2292,i,860273357233137032,39411712864456710,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:1664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2b7467e9-5d50-4521-8902-c64f58842566.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b7467e9-5d50-4521-8902-c64f58842566.tmp
Size 8KB
SHA256 1043070ddbf0b34086e3ef670c39e67a6befc11d14cb62ba51f7537709f627e0
MD5 00a7a366a3e669c61b0f5dd5a30385ca
SHA1 37426dd260a8f1f9798ae91ddfae1745f8b62af3
SHA512 72ef2720258dae4bc623dd4a461554a71e00433a1d99a186b8acad8275c7ca9d0c79627aaa66efc1b28cdc3e38278c084cec2469f80ac58c05c88679929344c7
SSDEEP 192:GONm6JUIQmiUyiFBKo//gywXFnPwoYNxDqTDqU6:GONm6+odbKo//kXxYoiSDqU6
TLSH
T1D312F835B868BC7B5DE3A594F08336139E644167EB896F80DADC6F1C02EB1AC5307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3475d3cc-9f3f-47bf-9498-8534969009ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3475d3cc-9f3f-47bf-9498-8534969009ac.tmp
Size 18KB
SHA256 5d770ea1b0b3f81cda5825efe7fbb0418f48fcea927b322568f74abc3678a8a4
MD5 e77771f93c4a4dc1ecfdb0ef9998db2e
SHA1 ed92be4d7c9cac1719daf2270b13736b36a4a55b
SHA512 f552a17124441cc30e5d34620e35f5e2c9c29455ccf3d0dd26e7661391216eb92980cbd9f82cb468d8b6f7865b683a947157f4412aed1030aa7ad0ab898960e3
SSDEEP 384:+QkUSv0sNjxHabLytuh//kXxYoHSDq2IXuVIIlr:u0WtO/c/SDq5XuVLx
TLSH
T1BE827D35ACA5BC738EA3E590F14636039E748067DAD55F90DACDBF2C02DA1AC1307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b9a474f-9010-4539-8033-bed47b765269.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6b9a474f-9010-4539-8033-bed47b765269.tmp
Size 8KB
SHA256 32eb375a38931c3f815c1a934f171818ac6c1a6b70fe851d30663619cef05359
MD5 c4066e83b248afa155932f2ddfc62585
SHA1 9dc5aa1942b8524f4da449d46192bd1f939ab7c7
SHA512 f5832d9bb8133f19095b5c79fac16367ca4b85f5ba97ae368ee12f2c315183508fbb3e981f9d1b2a6b3ae8de39072623642e906f2086cb1f4378b23363addc05
SSDEEP 96:KqONkvQsjpfbUmjH5ih/cIPURHl8h4otop5PaDnBKP4v+Y1xf//ojdpxBY6ywMdx:BOND6JUm0QmiUykBso//gyweBCX4U6
TLSH
T13102C735BC68BC778EE3AE45B08777239FA4107BAA911F44DAD86E2D01D715C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84c17955-5d91-4235-9fd2-a01fdc6eba28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\84c17955-5d91-4235-9fd2-a01fdc6eba28.tmp
Size 18KB
SHA256 5186f7b042e3f36c51c64d1ec5c89617e35fa1359b696ccd255a4974c899b264
MD5 340527c2272f8b67eb7c6f73cce86574
SHA1 37122622a5be12bca0221f9053e3859ae1fbcf52
SHA512 9cabe0050d102316567c3dbdaf4c85729d5d19341e043812fb4c70880dfc84e69da8507e0e996a6bc536a16d2ab4e3481a15a3396ab1900f33ded481f284289c
SSDEEP 384:5QkUSv0sNjUHabLytuh//kXxYoHSDq2IXuVIIlr:b05tO/c/SDq5XuVLx
TLSH
T156827D35ACA57D338EA3E590F14636039E748067DAD95F90DACDBF2C02DA1AC1307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

601303e2-9728-477e-a640-6fc6cec58022.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\601303e2-9728-477e-a640-6fc6cec58022.tmp
Size 105KB
SHA256 c232ec974e0782cd13a8942d319d172253ded086c99dd896db4bd09ec5006e8d
MD5 0a841124514bc95bddf295e0991715e2
SHA1 0c7f8d71116903710115f6bcd7457435319e2456
SHA512 f0411e7fb7b1b65af2901ce74beb7aae12751e5f298888551f71344040955011ddcfaae5bc0a1a0e03678f7366a807beeaeeecc467babcc548116b11f29e166f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T17EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

14a43958-efc3-41f5-a1f5-ab4a40d96a25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14a43958-efc3-41f5-a1f5-ab4a40d96a25.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1aeae193-8149-4a71-91ff-29e08dcbacf5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1aeae193-8149-4a71-91ff-29e08dcbacf5.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4f7666d7-36f2-46c5-99b4-5fbdcd2a6f69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f7666d7-36f2-46c5-99b4-5fbdcd2a6f69.tmp
Size 27KB
SHA256 60a9d8b7b8d18524c00575691558b8f0f7a2ab3f8d65b6f0c188a3acc3f367fa
MD5 4a9ad3c8a576e8e339f3fe429fc19af7
SHA1 dc49413f8e337a76808a7b879feb503ef296efe0
SHA512 d0968e3ecc38aba168ead11fae0150d126ae8796d66c8dffa3f2d35e6119fa90fbfa1784fa7832592ee5186202be150162b57a9241688f66cce0dafc89bd42ad
SSDEEP 768:syKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/nroYr:syKlm7QWvUYe0u1ja8/L/E/0Yr
TLSH
T112C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58b7e480-a9b3-4f93-aa1f-d4bf40cad719.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58b7e480-a9b3-4f93-aa1f-d4bf40cad719.tmp
Size 10KB
SHA256 4baacad542a350d3611f00a8b131515b8adc2bfbf605fb45dbb72c6440f4b546
MD5 aba435d3f6059e872d51f0a6ca986f85
SHA1 e85c3298154f17c41615db57e163a58a91eb6c2e
SHA512 e8e9f461e995fd439db864266b9d003ab3133324efd1cc3c233dafddc7bd2f75206b20f035dc57fa53b7024927dcb5b4cf67dfc27d15cd72185da1e674d59ba0
SSDEEP 192:sxZfiROWG/f/sjwIdpd6HW6+WNGY36gh8AMIg5ZJ:sxZfijG/f/sjRsHbGXjJ
TLSH
T10822D8116E38A97B8CC7E209BB15BF13E6FA513251D51E58A6FC8A1C05E7ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7abdeea2-e933-433f-9248-c47092292987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7abdeea2-e933-433f-9248-c47092292987.tmp
Size 10KB
SHA256 32760a5a492b0bfc5b3070302a8db93c5ca317d11eca8a5e526e25fb287b4c66
MD5 d470d0900c4978a27af22f520b2c14fb
SHA1 810145780ca07b9cd116e6c7ea1ced8a104a49b7
SHA512 efd835e04a14239b9f6e86a0deb66e6cef6fccf713ebacd281a2c4e0c71ecc4a577f040f111fa4a0fcf956cd83d654dd1d6c6aafaa90b1f377fff46ca814cb53
SSDEEP 192:sxZfiROWG/f/siwIdpd6HW6+WNGY36WhmAMIg57J:sxZfijG/f/siRsHbGXpX
TLSH
T17422D8116E38A93B8CC7D20DBB25BF13D6F9503251D51E58A6FC8A1C05E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
Size 20KB
SHA256 e5c48814bf49649b12c55414180e26a3a6a914414b7d4471e67f6282d4288eca
MD5 dc5f97cfbf3ed418afcf893ccc461041
SHA1 6a68255f275af0839302ec2e9add5cdfe6449d9a
SHA512 f1b1423156c3f0b5e6b8902446901a491f6a9f1572476091bd31029fa98f51c499802814e025bd182be6c40f1d536fb2dabb44459e1514ad539d7d402bd77eee
SSDEEP 384:kOJNu1TLt+fFpDnScwMQS1K/9+Av0p0azJ:kOLELt+fXDnAMQpv8+yJ
TLSH
T1B5A2C580E720483779594488B5910E3345A56EBBBA94ED2068E7B62FFBE7F707D35C08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 92debbb5d37fd988aa17f99546e658c2ad4ed1c1f254529f1373c2fcc18a1d45
MD5 c7449fa85d82e220b6f2ea2657c13940
SHA1 a950dbbaa7c522a19276186c049c6d87feccb3dc
SHA512 ee26eb8e0811be72c381fc850a74a0b2afe233b35a368260e1feb6b635710b6546cc05f40f6ddffe5a1baf0efb82b588f07e9fe58f9f58b0c9693375ba71327d
TLSH
T152517070DE6080A8FF9841BA94D00DBB363677A024739F3B1EBCCAF848363D949C8046
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 071336c4cc7b771aa827ec20f830bc15502d6e25af0df1c39945c99eb909575c
MD5 73ab0c84b4e87afa54c96c2544626d6d
SHA1 9797ff2252477cf3818f0cbbd8da8e94cc1d8528
SHA512 9032c73959e6a0a821eb09b36a85fbce364bbe32f80e7f92d6249ccb3d67c1d8463140b70f0708eba2d6ac8fea5fb08745c43d424477fbbabfe03df641731d9c
TLSH
T10C515170DE608098FF9941BA99D01DBB353677A024739F3B1DBCCAF859367D549C8046
MD5 SHA1 SHA512 TLSH

Submit Download

8aba9f10-14c0-44ee-9bce-9f10e0fcf849.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8aba9f10-14c0-44ee-9bce-9f10e0fcf849.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

406fd84a-147d-4208-ad3e-7e6621dbc251.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\406fd84a-147d-4208-ad3e-7e6621dbc251.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

792d8fed-7934-4811-a158-c154fac5991c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\792d8fed-7934-4811-a158-c154fac5991c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 dbe5231ec3d038259d7da46c4b171334524a4e17ae6f68521f373f9c236e138a
MD5 d18b6c7ed09bdb2592650e89ac2efff7
SHA1 ff563650e5dd46ea3ecff2fe199acbe21e25d961
SHA512 1ed3e9e42437bda31960fabd0c1442cd98f2f7911ecb91db34fde2e69151fb5ee2563823ab2d0dc30cee44ffac966a49954de32a388e438420b498d9722d4882
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yLAPGKQ6uvbG9mISivK9+1Evx4/YF2eQ:K8Y4KBm++HiKocL/2KQwGicgKZ++
TLSH
T179B10D4130BB020438BE258890B5975E52423173355CF9BAFFBE04A68A6FE541EFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6cd271d-3483-4689-bfde-83002d233d88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6cd271d-3483-4689-bfde-83002d233d88.tmp
Size 9KB
SHA256 9620e211c13780c5e7f3dbf2cb5bdcd3218fbd57cf0af237c0b7e2f3dc107a22
MD5 81eba07255d03241e3eb70021945cae9
SHA1 a2dc6d6806fdbc644b5b2a8e25c3e2e1cb2e93b5
SHA512 e7badd1bf058754e58ae4e6d58ff85438ab483ecf86fd4cf00a3a80aebb8052b1ae292727e82b81697d59d9d0e91ffc1a3cbf4d74e39286916881cae69bcbb7f
SSDEEP 192:sxZfiROWG/f/sYwIdpd6HW6+WNGY36WhmAMIgrJ:sxZfijG/f/sYRsHbGXp9
TLSH
T19422C8116E38A93B8CC7D20DBB25BF13D6F9513265D51E58AAFC891C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85af8839-eb4f-41f7-b3a7-79f7de290fad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\85af8839-eb4f-41f7-b3a7-79f7de290fad.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6d21813c44456f5806587b44738752411f9a8ac9afc75f76e220bbcbe89ae8e6
MD5 c839d914060e510c4ea2e8458b03540c
SHA1 37ad95a1c17cf6c5012832b797603be5c39077b4
SHA512 e7015f0bc97a3b1793bc2efb0693195e655af3001a179d7f7ee4b1f51e3af62d3b869f152c1469c0cb0aff56c8a457e1af38015660ceb9666816a2f46ff468cd
TLSH
T1C9413B5CA6E91148B3B76E1AABF7A96D483FBD372E06D45D00110E4F0622B40CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads