6a72610cc8ce195bc784ebd30073675f06912888bf00387750f0ed80828537cc

Analysis

max time kernel
60s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261030-pcvrbsbz2x
SHA256 6a72610cc8ce195bc784ebd30073675f06912888bf00387750f0ed80828537cc
MD5 5fbf19bb26bd8a19b5ba52fed73b6530
SHA1 e70db240e1cc379aa0db5d79c986a7850a557a27
SHA512 6ec8d00e5ba499341bb9cf39ea994e7012e710ba265a2d9c41d7694f0da57603417b8363cc59d5aafb0d4a4ed03155c1b75d9ae78ae309bd6ef8ce0e4a4e4c32
TLSH
T154413F1BD27C436B01C415B2654A52C12B5C708433A461AC39AF8899A3F69EC1B7BFEB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{45526F26-5B0B-4B67-8972-787FCD00C9A5}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 5248	4704	msedge.exe	84
PID 4704 wrote to memory of 4648	4704	msedge.exe	85
PID 4704 wrote to memory of 6140	4704	msedge.exe	86
PID 4704 wrote to memory of 6140	4704	msedge.exe	86
PID 4704 wrote to memory of 6140	4704	msedge.exe	86
PID 4704 wrote to memory of 2828	4704	msedge.exe	87
PID 4704 wrote to memory of 2828	4704	msedge.exe	87
PID 4704 wrote to memory of 3036	4704	msedge.exe	89
PID 4704 wrote to memory of 2568	4704	msedge.exe	90
PID 4704 wrote to memory of 3036	4704	msedge.exe	89
PID 4704 wrote to memory of 3036	4704	msedge.exe	89
PID 4704 wrote to memory of 2568	4704	msedge.exe	90
PID 4704 wrote to memory of 2568	4704	msedge.exe	90
PID 4704 wrote to memory of 5844	4704	msedge.exe	97
PID 4704 wrote to memory of 2512	4704	msedge.exe	98
PID 4704 wrote to memory of 5844	4704	msedge.exe	97
PID 4704 wrote to memory of 2512	4704	msedge.exe	98
PID 4704 wrote to memory of 2324	4704	msedge.exe	100
PID 4704 wrote to memory of 4592	4704	msedge.exe	109
PID 4704 wrote to memory of 3804	4704	msedge.exe	110
PID 4704 wrote to memory of 5548	4704	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff93093c188,0x7ff93093c194,0x7ff93093c1a0
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,65037252476372170,15196397211456866620,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,10027357566758875620,6202580977052937720,262144 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,13430284259702838906,9327497907013626476,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3483710625807295164,12034910643572910823,2097152 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,2853733389473161492,18085244696962093314,2097152 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,17575236206217532126,8645032647453595310,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,2835251941389508770,11890581263071076594,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16841402713516883013,9192048200880627367,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16841402713516883013,9192048200880627367,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,4166335682360653274,14562809897688492498,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,12253278243208333602,5449474732319224303,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,18418511349257712771,13139549782540313140,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,2110298841186796907,14180561459677843272,524288 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,5926517691789298978,7491044550811528594,262144 --field-trial-handle=2308,i,6746625840407825100,10220387217418688580,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5fa7c580-1aed-4622-ad6b-eb268c49ad25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5fa7c580-1aed-4622-ad6b-eb268c49ad25.tmp
Size 26KB
SHA256 548ca585fa682c4c97975d60879d0cc3f3d0afd7d68c724894b979da398f2f90
MD5 e73898c3c7977e4d7fd316431e63b0a7
SHA1 2ec4bb58c47fc8d060a161c6489a5b0645f6222c
SHA512 2c9d4a363507db7476fd872dfdab9af96610c43971e00298734e0fe9b8512660167a4b351b0730fd2c5499ab75007f7d6d1581232c314ca9bd873992aed9af2f
SSDEEP 384:nFiFzQkUSvg3sNz8TUNTUlI4eaKMkR1w2f0BCpBxvhToJzcuLil32ItTgL/7IzN8:MFdg3awg2u8BCpzhoisil35bLo
TLSH
T1AEC24A36DC99DEABEDEB4E95E74A3643DEE04113C98C9AD4D9C92D2C00DB1AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c7a7eee-4ed0-4b41-ab6d-bede6bc6f623.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c7a7eee-4ed0-4b41-ab6d-bede6bc6f623.tmp
Size 26KB
SHA256 6bf5455678a0afd61585e8bfd942e96fc43bd90fa146fb9f2760ae646bb1ded3
MD5 0ce25316fce08bd05cabebb2104fc0ac
SHA1 0446e7bf55d245a892c194969a8a711b12c1f0bb
SHA512 9db6f75ff79d35c3626e270ee0fed10f1c708d2f8d958a065e42138a443b860f9e0cd6c5c6240b340b1b726d1b2566a9b116ec79ed81839822550273c073f3e3
SSDEEP 384:nCiFzQkUSvg3sNz8TUNTUlI4eaKMsR1w2f0BCpBxvhToJzcuLil32ItTgL/7IzN8:JFdg3awg2i8BCpzhoisil35bLo
TLSH
T16CC24B36DC99DEABEDEB4E95E74A3643DEE04113C98C9AD4D9C92D2C00D71AD530BC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0a14874f-d4d2-49be-8b9c-66f6bac2fcf3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a14874f-d4d2-49be-8b9c-66f6bac2fcf3.tmp
Size 11KB
SHA256 0543caf54c8b6e9cb7c6df55c87e57f50554d402c47faac9cbf3a4f6f3d6b127
MD5 b8e35d458e0c70231691795351416688
SHA1 f4f1269ff60e689f332eb19c91797fbb83b7ec1b
SHA512 87fd90c9aa4550de54abaf7c8fe9d7834f91f46bf22fe5b3f7a17d53f7ec2633e37d9ac609db40834f9a53cf0d073a743184f795685590c03fa08cc0c5d1e7eb
SSDEEP 192:sxZeRUkH/fUsjNaQZLf8xzodpHSHW6+WNGYorjjSW+EIg5utuJ:sxZedH/fUsjAO46yHbGNSWrst6
TLSH
T18B42C7156D38A93B9CCBD21DBB557F53E2FA103290911F44AAFC8A2C15EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b15fb03-6a36-4319-9081-4e999bccc957.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b15fb03-6a36-4319-9081-4e999bccc957.tmp
Size 11KB
SHA256 c2c6a1090f0e1fad08b69e80a590bc75ed92b3be6ad475f08a2350a0699358a7
MD5 cf39d9e4c3762a572e75b3b5beb5b381
SHA1 286204bd51bf2ec787e47e86cd3d46561c12e0e3
SHA512 f276b52a69b9771a21cb35e08b18597da53223cf47dfbf704aede0803e08f70f23e9ef02f3324707aa194725a47f4fbf3bde2cc03d0ab11df3065dfa612f48ce
SSDEEP 192:sxZeRUkH/fUsjRQZLf8xzodpHSHW6+WNGYosjjSW+EIg5utuJ:sxZedH/fUsjRO46yHbGgSWrst6
TLSH
T1D542C7156D38A93B9CCBD21DBB557F53E2FA103290911F44AAFC8A2C15E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2aa6f969-20ae-4288-a01d-1d1c45cc7bdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2aa6f969-20ae-4288-a01d-1d1c45cc7bdb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4394b4f8-c45a-49cb-9ba9-c116ae04add1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4394b4f8-c45a-49cb-9ba9-c116ae04add1.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81e3b82b-3621-4a14-8578-7fe2db0af2e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81e3b82b-3621-4a14-8578-7fe2db0af2e1.tmp
Size 414B
SHA256 8b3b76dfb0d1308635001d1d1ca569c3409a08c755a9f93f738521d1f72fec32
MD5 d36f796e2bfffc5925548c29b5723d3e
SHA1 5bd1652f77e080a97a8504f9c3afe15c0b4363d6
SHA512 c24a9803fbc9cf5c053e41b1474ace1f9a1cb83555b6e78b2117c259f1305b97bd955520e46416191d246b012a91ac3059a3e0953b91ce650a18614c82915d07
TLSH
T15CE022AAC861EC3B18FD0B7D60950246EB11236B2A41994B3B3D900C8FB5A36428A96C
MD5 SHA1 SHA512 TLSH

Submit Download

dc003c86-d320-4bda-8b88-d7b6e4548fc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\dc003c86-d320-4bda-8b88-d7b6e4548fc2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6e340328-6cb3-483a-9b57-ed23a38244f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6e340328-6cb3-483a-9b57-ed23a38244f7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

81e52e97-63a4-437d-8c47-94a9047ebf07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\81e52e97-63a4-437d-8c47-94a9047ebf07.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

d08e7320-bcdb-4df6-a00c-5a23c115852a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d08e7320-bcdb-4df6-a00c-5a23c115852a.tmp
Size 1KB
SHA256 8784d1be4e9df25f76e7b8961b05d25202e3941a4f81fe9d1e6febc0d22e2c31
MD5 d2110f398f277cce0ed3e0b766d47fa0
SHA1 d4b3318ac3ebce7786cbefbac1737214eb22d670
SHA512 ec75eea1782de710c893659eb6d086b43861bee0fbc5d312fc6770ab50eb1ac351a94b80ca2296bbb448a5445c859807f8087e31b1377349d9bc42156874567f
TLSH
T1F231B3F387F4856E9A0196F0AA18AE2FCE1D0515432C7D99C4E4AF2B93E3471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 29b0291ac26bf81ea29d1d1bd0372b54a7c47263beffce91d44003b6d6ecaa68
MD5 0cf1b5924a3ac53af7c7db7509c32ee0
SHA1 59795df5561c93576beda0fe5dab96d8c9a8b3c1
SHA512 c2f2dd69668f4660129ee34739db105a1318c1be142639996a979dc28cb7000d6955f98ef16bbddfcaacea87447050a788396229c633b64ad936ddbcae40c2a7
SSDEEP 192:sxZeRUkH/fUsaNaQZLf8xzodpHSHW6+WNGYorjjSW+EIgjtuJ:sxZedH/fUsaAO46yHbGNSWrjt6
TLSH
T1E242C7156D38A93B9CCBD21DBB557F53E2FA103290911F44AAFC8A2C15E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 86e39c87dfe58854d3fa72400aaf81e24eaa02094083c56c7406de902d182e47
MD5 0c60f9fe8a56dec29cf9465cc3945e39
SHA1 e47089e88b4a46e3eae13bca126958cdfa44e527
SHA512 6da78084039f924c4db6c7492f06a3b578df2cf9d820dd776ffab44c75efe206782112382ef06971f90b854dbea8d9dd3c342af919e9107d0f836666749aa52a
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgI:ST/2dXOJhJlpfnpp3tNXVrN3gXhL
TLSH
T1FAB2215571BB021039FE391881B6972E168231B33119E66B7FBD44B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

be05913e-b275-4d12-9928-366bfc07089b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\be05913e-b275-4d12-9928-366bfc07089b.tmp
Size 27KB
SHA256 72855ebbdd8bc4a4c37ff5cf1567214f75450261c3f70f789750de79d133e0fb
MD5 7fbcb94e6f4a7e73b5c6c43e21856dec
SHA1 7107ca2f34286a7f62d8c992b6a3efcef154a33f
SHA512 bdfd399ae6a14590466ccabc71dadcc4af0c662974bd8df3ce08a813eb45449c7ea69db79480c52fe1e45d9876119943b8f662035605cd8ac691692736b59cae
SSDEEP 384:nhiFzQkUSvg53sNz8TUNTUlI4eaKMkR1w2f0BCpBxvhToJzcustml32ItTgL/7Ia:IFd43awg2u8BCpzhoi/tml35bLo
TLSH
T1B4C24B36DCA9DEABEDEB4E95E74A3643DEE04113C98C9AD4D9C92D2C00D719D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1674b33-6ae5-4495-afb5-494cbb79355f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1674b33-6ae5-4495-afb5-494cbb79355f.tmp
Size 26KB
SHA256 11b3635defd28b97e2ea484b79447b1503bb0c729cdde3ac81ee0617569f74a1
MD5 a640f8ccd654b3326cde02aa91d331be
SHA1 5011803c282ac0caf8356584da24d48ddf424a74
SHA512 0005fd646b84ed325a0b6cb3ab9b7052471539c249f02077519e9c5d7cdc9bffdbf6ead2d96c3f116c54680fbb3a774e48c98d39d261bdb0f0a77b662db36ba6
SSDEEP 384:nsiFiZcI63sNH8TUNTUlIm2aKMY62w2f0BCpBxvhToJzcudil37O6R2FeoUt+gLR:XFQ63qwgcpjBCpzhoi0il37TR8k
TLSH
T13BC23A32DC95D9ABECEB4ED6A74A3603DEF44153D58C9AC4D9D82D2D009B5AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef1382e1-1a55-4716-9af7-3b22f535f5eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef1382e1-1a55-4716-9af7-3b22f535f5eb.tmp
Size 25KB
SHA256 d148d05334d3790418917f4e4719189fb4ce47e8180cf2a2486faefdf55e07fb
MD5 ed4e82c4a69a30bf4ae9a9b5fc69da9a
SHA1 78a2e2e0bac086fea4fce297a40524ca645bc1d2
SHA512 b188207385b5edc3a4d94fc4bb16c0bd503a7060c066743bfd8858af93013e36505d167506142f0652f4c5c79832a4eda3e0f4e4fef4c1480cc14270bfc9b5ba
SSDEEP 384:nWiFiZcI63sN98TUNTUlIm2aKMiB4w2f0BCpBxvhToJzBFZ7O6R2FeoUt+gL/7Is:9FQ63AwgcyZBCpzho7FZ7TR8k
TLSH
T197C23A36ECA9DABBEDFB8FDAAB4A3A03DEF40153949885C4D9D91D1D008759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d2697738dc9223d46fa4d79a4c8612515f11040ea2a3e4aa1247268e00ab4b3d
MD5 5f595e94f147776e0e29a6c2167960ec
SHA1 463d69b4edafd77af6f6b53db0dc878e1a9ac60c
SHA512 d73ac287e2bf4bd2c248fdb013492fda10623da6bc0af002775fc36f9648aaa6bd5cc8ed67dc687f93fac13558b8e6bd8820dcf79733c353b9a6d330632ad353
TLSH
T15D412C58A9EA1158B3B77F5A9BF2B86D447FB8772E06946D10110E4F0A63B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads