hxxps://mira[.]kim/

Resubmissions

29/10/2026, 20:43

261029-zhp35sf14j3

29/10/2026, 20:42

261029-zg3mvaszbz3

Analysis

user interaction
yes
max time kernel
52s
max time network
53s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
29/10/2026, 20:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://mira.kim/
Sample261029-zhp35sf14j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4652	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2545564138-786060179-1728272436-1000\{62C8CE4D-441E-4FE8-A2E6-FB3E0105F69B}	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
668	Process not Found
668	Process not Found
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 5080	4548	msedge.exe	84
PID 4548 wrote to memory of 4652	4548	msedge.exe	85
PID 4548 wrote to memory of 2596	4548	msedge.exe	86
PID 4548 wrote to memory of 1232	4548	msedge.exe	87
PID 4548 wrote to memory of 2596	4548	msedge.exe	86
PID 4548 wrote to memory of 2596	4548	msedge.exe	86
PID 4548 wrote to memory of 1232	4548	msedge.exe	87
PID 4548 wrote to memory of 1728	4548	msedge.exe	88
PID 4548 wrote to memory of 1728	4548	msedge.exe	88
PID 4548 wrote to memory of 4356	4548	msedge.exe	89
PID 4548 wrote to memory of 1728	4548	msedge.exe	88
PID 4548 wrote to memory of 4356	4548	msedge.exe	89
PID 4548 wrote to memory of 4356	4548	msedge.exe	89
PID 4548 wrote to memory of 544	4548	msedge.exe	91
PID 4548 wrote to memory of 3816	4548	msedge.exe	92
PID 4548 wrote to memory of 544	4548	msedge.exe	91
PID 4548 wrote to memory of 544	4548	msedge.exe	91
PID 4548 wrote to memory of 3816	4548	msedge.exe	92
PID 4548 wrote to memory of 3816	4548	msedge.exe	92
PID 4548 wrote to memory of 2216	4548	msedge.exe	95
PID 4548 wrote to memory of 2216	4548	msedge.exe	95
PID 4548 wrote to memory of 2216	4548	msedge.exe	95
PID 4548 wrote to memory of 4504	4548	msedge.exe	97
PID 4548 wrote to memory of 4504	4548	msedge.exe	97
PID 4548 wrote to memory of 4504	4548	msedge.exe	97
PID 4548 wrote to memory of 4040	4548	msedge.exe	98
PID 4548 wrote to memory of 4040	4548	msedge.exe	98
PID 4548 wrote to memory of 4040	4548	msedge.exe	98
PID 4548 wrote to memory of 3780	4548	msedge.exe	99
PID 4548 wrote to memory of 564	4548	msedge.exe	100
PID 4548 wrote to memory of 3780	4548	msedge.exe	99
PID 4548 wrote to memory of 564	4548	msedge.exe	100
PID 4548 wrote to memory of 1108	4548	msedge.exe	104
PID 4548 wrote to memory of 3400	4548	msedge.exe	107
PID 4548 wrote to memory of 3400	4548	msedge.exe	107
PID 4548 wrote to memory of 3400	4548	msedge.exe	107
PID 4548 wrote to memory of 3192	4548	msedge.exe	112
PID 4548 wrote to memory of 3764	4548	msedge.exe	113
PID 4548 wrote to memory of 1108	4548	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mira.kim/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb8418c188,0x7ffb8418c194,0x7ffb8418c1a0
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,618193108536311415,16400677224617784374,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,6170694844070521931,13637864378790231159,262144 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:2
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,7613045956276786697,1364135380131453603,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,8783337504166880731,9547129269783280999,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,14036354127789174964,14603805498551057230,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,11394840355621765602,3550453140249166445,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,12210267447512013664,12080787042684907095,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3632,i,12415409663123359663,8192804004318601339,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4744,i,16905616684943774930,12277524190806358241,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3436,i,7283879673970431582,5143299967948495959,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,6901270790187197489,2193488472988123306,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,14139645354240465070,12935602622853754835,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,14831258269975762228,11992454343545056509,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,14831258269975762228,11992454343545056509,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3524,i,15599223065071931098,15863355384083050655,2097152 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,1477872275286594114,360998377806533956,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,12484257569463391226,15577647813627837769,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,17056160229180152462,2802861592575498088,524288 --field-trial-handle=2852,i,6036558401955009649,1940039639267117637,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:1108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

50b930ca-2b3a-48a0-bb91-d02c64667699.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\50b930ca-2b3a-48a0-bb91-d02c64667699.tmp
Size 18KB
SHA256 5de8d373c4af90676bb82df10e31928016b4a1bc4f9b1c08a2cd80789ea96218
MD5 300c6dd590c2c05faab997e40536d96b
SHA1 309b4998e4e8c5f185f61c41093026b06b0d953b
SHA512 859b4dafc9fbe529a30826433c9d5740eaec9794c2f1cc8a2136db98aa42b85bfb89451fba18f4b3d728ef2532bf3e0056dc4905668619869289806a32ae66cf
SSDEEP 384:BQkUSv0sNpkOYWgmq2M/gMuOoosWJw2vaTZc/WtIIlQ:z0jZHn7w2vaTZcOtL+
TLSH
T115826D71A8696C374EA3E641F24B3613DEB49127DAC42F50C5DD6B2C01DF6AC334AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

605c79e2-4337-47dd-89a8-61c867bc0e51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\605c79e2-4337-47dd-89a8-61c867bc0e51.tmp
Size 8KB
SHA256 a82e628a5cf731919a8f19f7dae33b98d692e5a4760b1fd0ef169725426193f2
MD5 6c04f8b6a745fff57b43a95e199faa9b
SHA1 0723f7939582febabce04d2cf7cc398af9adf325
SHA512 f0e02e2e95cbace540bf335ad37b74ed6981570b48c2c0b1e994765ec02f310b9eb4057163f42e41aa1e4db3d05665a688558740d9934f558d5e28427bcb49c1
SSDEEP 192:WONh6L1QmiUyXaNqMgmSuOoWRsYydxvwfbU6:WONh6f/NqMgRuOoosHKbU6
TLSH
T1B302FB34AC68BC778EF3BE41B5863B139FA5113BE9912F84CAE81E1C00D765C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0604e5d-6a33-4ddd-9434-e3304d831812.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f0604e5d-6a33-4ddd-9434-e3304d831812.tmp
Size 105KB
SHA256 7fbf8b23a13854c0c33f9b9cc9b82042dfb881d0f9995938391cf2da54cfb3de
MD5 f027022507ec94f32265883243245251
SHA1 a21e2e3703475c52ae4b2881bbdf87320a7a1aa4
SHA512 b618f5fec905802eac699560ca9b2bc85f4fdd04e41ff5ea96bbc8db8724a369489826c4b1839db0a0fe4023e73b7e95ac2ee4efdd1fc7f55c8c5ffcbd19d4cc
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7r:fwUQC5VwBIiElEd2K57P7r
TLSH
T1E0B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a61abde4c403038fbcba9d7cd1146314ee5200b67fe0b69e700f452a518f4d8c
MD5 9ddfabae6252c3a2f91f8be35789fc2f
SHA1 1fd1f736b9db1aa41efece011a7e2ab1f75998b9
SHA512 1c4f17767fb56cd4750df16777f1a354330a627dd67c9adcada997a7bfcaf88da512537054fd26e282b25a9ebc7b7b93c162114af3587fe3ba7a714e36646c57
TLSH
T116D011B2FB0A08B2E02A30322200830A822A802228022A82A228800828C00282AAA080
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4aad8f19761fa37dfc59ba05a1eb3d7a6e2c0e7e8a440feae228ea8fa4acff9c
MD5 5543311c88a457329bf7f848fd15bca7
SHA1 1233b9005429853ed29f3a5e576aff4d1cfcaffa
SHA512 1cfed80fa6c2fe7a8e5e52fab52c4dc7e4a6415be97397ee97ccb9086d54eca147b6da8c9f2126d374add73c2006dfdb4b2c0f0383a6f21a6e7f5fa4a5c047a4
TLSH
T130D012B1B7490872D0163032220083054215801124025B83A124400404C10642569040
MD5 SHA1 SHA512 TLSH

Submit Download

81e16aea-cd44-42d5-a85a-2c762ebd73b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81e16aea-cd44-42d5-a85a-2c762ebd73b6.tmp
Size 10KB
SHA256 505835efefdda2b4ba014b12bdf59162a35004877e9405de0b4163d28bf5a9d9
MD5 5903dc3dbf04328a5770e037b4ca2982
SHA1 9d4eac15ddd5a3c62e1a18a1090f8db840c3fd13
SHA512 860ef9fe002dc0eb6a16f9ae7db4c560f2570ff2a856c01acaf27b27e83ea02229f80bcd3aeae03263e94e885949ed4401474f672a485973d8de357150542a68
SSDEEP 192:sxZURSWl/fzsjCMsBIdpjODHW6+WNqPDZYrVNgAl9Ig55J:sxZUPl/fzsjbRYHbiZsl
TLSH
T17532B7517D38697B8CC6D209FA55BF53E6FA503251951E58E6FC8A1C04E7BCE120B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89fe8bcd-eef4-41d7-92dc-93af95b44982.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89fe8bcd-eef4-41d7-92dc-93af95b44982.tmp
Size 10KB
SHA256 93eff02ab3f10eacc284c7afbd606c1a8c1a43f189f43e8b220b225730e8b716
MD5 61617c798383b2d58f50e37818d1fa09
SHA1 916db21347461a9f23fef7466053988218207cf0
SHA512 b594872ffd25b2e8261f42ce761b2c1ea43fa894e6e692ab57cfc8ca868ec39a2f197a7d97b6a2f1cd474d3d07fbc3ebd1916534bf880998a912a0194039f5b0
SSDEEP 192:sxZURTWl/fzsjCvsBIdpjODHW6+WNqC//YrVXgAl9Ig5bJ:sxZUcl/fzsjARYHbb/yz
TLSH
T15722B8516E34A97B8CC7D209FA59BB53E6FA503291941E58FAFC851C05E7BCE120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

981f2b6c-921a-4817-8db0-b0f4629b53d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\981f2b6c-921a-4817-8db0-b0f4629b53d4.tmp
Size 10KB
SHA256 5f70ff57797dfa24b2021d69f01557cb3842a56524b70ea815a1a0e37003ad03
MD5 dce1f55e36406849f23446b09b30f3b4
SHA1 66dafa61e6a5e7c4740822ec9715fa2f5a780660
SHA512 483ccceb246d477a4405e0f002a552b0dba31adc175b6fef508660582a2b8d29db5a0855457c7d2fd39f6cadd2ace250ad4d1ac8c244e1cb41301605f842e67d
SSDEEP 192:sxZURTWl/fzsGCvsBIdpjO5HW6+WNqC//YrVX0Al9IgrJ:sxZUcl/fzsGARuHbb/k9
TLSH
T16222B8116E34A97B8CC7D209FA19BB53E6FA503291941E58EAFC851C04E7BCE120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 cf0d6713ff6fbc25307fb5822503ce2f69f5dc1501ffcfd335a3acc1dc00524a
MD5 2a5924d506c6dedb9720d7e43fa05bbc
SHA1 760a439ef7ddd850ac7dfef51f966d6841ed18d0
SHA512 6447e893baa940896286411a83556d4ce48b69660499f3c0063232925625d2642e3f4de4a4843e0679f2c97f44ddae4b832d8a8b86c7246be82c848f5c0c1c32
SSDEEP 48:l9WjfTK0a8kk9MX8+K/jFCbA65xCIlKbTQHBknUqIfq6klSjougyFF4CgdlIQaAZ:sbKZzW+2SPCeCGqX9MoijeuA4bozJVGe
TLSH
T1789177C4204A3E93CBDC6333A2E29B473BB14AA995932F6CC9DDF6771F4A361015705A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3b79cef2421122d8ba709d339ba2a7e7a020a5b5677d19927683add449756a34
MD5 ef32be3f7dcf223badf224fcad191c99
SHA1 4e9d91dad9bfbdb56856ad82abfe8699f94a4126
SHA512 9964f08d4384cb45211d1c748d3594d0d00e23ed908f2e4b6058bd8c66e4fef2f87fb30b4fefe6d740af401789c4383d474cbd78a91860714b809c678a4d76aa
TLSH
T13F615CC430865E53CBEC2032E6E45B8B37B04AE9D5933F2CC9E8F86A5F4A3554157158
MD5 SHA1 SHA512 TLSH

Submit Download

ab76cbf7-9c2b-4207-8513-4c71fa399ca2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ab76cbf7-9c2b-4207-8513-4c71fa399ca2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4513ba9d-38e8-4357-81be-48f2831f7fd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4513ba9d-38e8-4357-81be-48f2831f7fd0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

6df4e826-c565-4042-b027-36557804b0f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6df4e826-c565-4042-b027-36557804b0f8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eba4fa3ed264db8d637afde18601f6e486164f866fbe3b62f7750680dcc41f2b
MD5 3e381ecd37cccb3c2269530fb0a610ae
SHA1 908a90ef4c6430dad40e5f30da0a2de9a379145d
SHA512 ffc0436da38ad991c72ab8b8cb87c840d79d6150fc6017543ab4686985eb858b8bb4c79fa344eba679e5ed418404a7f46e73a279f15a5be77f95f8179daa08fd
SSDEEP 24:K/Z21MdIfKRhK1CSEH7yXPArQMKIBKIh01SSt+VyXYIzz09miV2m242mC9I/w2KK:KMCIfK3K0nytNIBK+0sry1BI9K6YIOM
TLSH
T1F8913F1171FE4645787D291C82B5975F878132B33025EBAF3FBC20A68E66E085DBC8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

b5f7b6da-5a33-4573-840d-7353ffccfd2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5f7b6da-5a33-4573-840d-7353ffccfd2b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd2e25f8-c2a5-4ddc-822d-a5e096ccbed6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd2e25f8-c2a5-4ddc-822d-a5e096ccbed6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

dae97aff-ec66-4ade-b107-4baa5e3d0d91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dae97aff-ec66-4ade-b107-4baa5e3d0d91.tmp
Size 27KB
SHA256 9c0187167f756469da0ddc92b850540125beb54e17be20eec21132660d31961b
MD5 fbdbf629bc73dd6ebe6b9a6d6876dd04
SHA1 197c006c3b60bc148e39fa75baf53a362a5eb317
SHA512 6ad0e2c6dd4f4e4cc442c5b456796b970c747bfd4010e9ef6ae138bb17029d8ff152b641afaa4896837eb5939ee53570ba61eb4153c3e4c23b46691a6dade8b0
SSDEEP 768:nga0JX3Wv/xJ98F1+UoAYDCx9Tuqh0VfUC9xbog/OVWmLlEy3zIroXryaNG:nga0JX3Wv/xJ9u1jaHmLKAzzo
TLSH
T169C2EA3B284CCB7E4FC01A5DDC5A6FD77EA802C766548E8047F9984C02D77EA61264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3140d8a-4d85-49fe-bc7c-eeffee785371.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3140d8a-4d85-49fe-bc7c-eeffee785371.tmp
Size 18KB
SHA256 ca73cea26b5603a54b5af57e2158e6af2ab425e5227ff7e8e75b47b530bbca9d
MD5 d0e8d92769b07dec226e7555b4bea501
SHA1 e791274669c6c81060b80b94b3dd0bd8625ae7d2
SHA512 dbdca90bc328b78b3563660ba3a62fe04d3a8a81e85ed270df5b7c52e3089a0cdff3e89dcc92fd418ce53335d22eeaa89412cab30376db5085c86f7dae2cdf96
SSDEEP 384:iQkUSv0sNpkFYWgmq2M/gMuOoosWJw2vaTZc/WtIIlQ:a0aZHn7w2vaTZcOtL+
TLSH
T1E7826D71AC696C374EA3E641F24B3613DEB49127D9C42F50C5DD6B2C01DE6AC334AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cca3c279-3024-444a-bb72-cc5328d78374.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cca3c279-3024-444a-bb72-cc5328d78374.tmp
Size 8KB
SHA256 79ac2abe871156f7620f603685eec64757fef55751c0d0ca9cf9e2b556a83e23
MD5 e47daa964fb8bd5f0deb3fba7223a6c4
SHA1 b822f40f34a9192ae15c0f59b85501963fc6fe0e
SHA512 9a05662d00758e109f8067a2497073cf21dbb1d8adf2c30673068ee5930a28d7390c1953b6cf8df88682e2adda2d790601d56ef145ef8b14635c5d31b3f51a29
SSDEEP 192:BONeB6L2QmiUyaaNdgmSuOoWRsYyaG7F0Qqy2U6:BONc6GYNdgRuOoosWfw2U6
TLSH
T1DB120A719869FC375DA3F981F18736139EA55137EA457F80C5EC2E2C01EF5AC630A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

411d900e-3129-4dbc-94b4-229218e1ee6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\411d900e-3129-4dbc-94b4-229218e1ee6f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bda396aa82cecfeb69d7ca56856d78211a6bc74619697e9eda8c0521fe5c2c30
MD5 b2a1b6de4d5aff58f7e0433ce6383889
SHA1 c294b7532f07da600ef4f76e2ff8e6e5957cd2f7
SHA512 7f57603149b0a5d436da598c3a96006d2d6475fcf0b59ab65ba9c3b33d9f71563ccb918327f6b383d6a10e558de393b4008dca6a01ba9b12a711ef22138622e2
TLSH
T12F41EB58BAE91158B3B36F565BF6746E587E7D372F06945D00110E4E0A22B40CC62777
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads