4d8b8b02212336224851f3482f1b6bf18d926edf23b41ecf23223c5ef30ae33c

Analysis

user interaction
yes
max time kernel
64s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 21KB
Sample261102-styfbsfe38
SHA256 4d8b8b02212336224851f3482f1b6bf18d926edf23b41ecf23223c5ef30ae33c
MD5 8a75fa2cbbb5ed9dd122f2b2dd8a2eaa
SHA1 17b6f0c7285a8830286da665f43cedcaeeb9411a
SHA512 60143dee39681e81991f5ff2f1b9d831512e14eef69fe687451d1bdece956334314797a17319015c140b7778ab8c3408db9b7f16c374992e1ebf3dd6598f0d91
SSDEEP 384:FRkRlRuZtOLtkrt/BKrk8x4shrXt7iegFokYMaYungFFJ5EMG:Fqn0ZtktkrtqkzXHJ5i
TLSH
T1A7A2A57360B51637122745CAB1E6C76A71E6C24BDA8A1414B7EC07E90FF7CA0FA1B067
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{02655D1C-82A7-417F-8010-4586EB6711C4}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4640 wrote to memory of 4988	4640	msedge.exe	87
PID 4640 wrote to memory of 4760	4640	msedge.exe	88
PID 4640 wrote to memory of 3900	4640	msedge.exe	89
PID 4640 wrote to memory of 3900	4640	msedge.exe	89
PID 4640 wrote to memory of 3900	4640	msedge.exe	89
PID 4640 wrote to memory of 2728	4640	msedge.exe	90
PID 4640 wrote to memory of 2728	4640	msedge.exe	90
PID 4640 wrote to memory of 3536	4640	msedge.exe	92
PID 4640 wrote to memory of 3536	4640	msedge.exe	92
PID 4640 wrote to memory of 3536	4640	msedge.exe	92
PID 4640 wrote to memory of 2148	4640	msedge.exe	93
PID 4640 wrote to memory of 2148	4640	msedge.exe	93
PID 4640 wrote to memory of 2148	4640	msedge.exe	93
PID 4640 wrote to memory of 3196	4640	msedge.exe	94
PID 4640 wrote to memory of 3196	4640	msedge.exe	94
PID 4640 wrote to memory of 3196	4640	msedge.exe	94
PID 4640 wrote to memory of 4060	4640	msedge.exe	95
PID 4640 wrote to memory of 4060	4640	msedge.exe	95
PID 4640 wrote to memory of 4060	4640	msedge.exe	95
PID 4640 wrote to memory of 4936	4640	msedge.exe	98
PID 4640 wrote to memory of 4504	4640	msedge.exe	99
PID 4640 wrote to memory of 4936	4640	msedge.exe	98
PID 4640 wrote to memory of 4504	4640	msedge.exe	99
PID 4640 wrote to memory of 1880	4640	msedge.exe	101
PID 4640 wrote to memory of 552	4640	msedge.exe	110
PID 4640 wrote to memory of 4408	4640	msedge.exe	111
PID 4640 wrote to memory of 2784	4640	msedge.exe	112
PID 4640 wrote to memory of 3568	4640	msedge.exe	114
PID 4640 wrote to memory of 3568	4640	msedge.exe	114
PID 4640 wrote to memory of 3568	4640	msedge.exe	114
PID 4640 wrote to memory of 4792	4640	msedge.exe	115
PID 4640 wrote to memory of 4792	4640	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffbe237c188,0x7ffbe237c194,0x7ffbe237c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,1412934174561604553,13454879389337566622,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,4094067171666827545,6917281168177012098,262144 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,3487982687218753496,7534977522316762986,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,9730308529915043079,3169219299658282665,2097152 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,9587026660818259644,318603463934015680,2097152 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,7547050347131847938,17443707300513996853,2097152 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,9570754252355637753,1059259376627230771,2097152 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2405819851152938036,10707750071629853410,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16601468708806940229,12439008104093261789,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,15729314569973090206,11661607917862145268,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,15729314569973090206,11661607917862145268,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,3046107932358520859,16447635083380874664,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,90059281213372514,14203588017190058020,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,7652205512884718401,7680980078195766684,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5220,i,8182708466253389326,3069970627931253386,2097152 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,6268957861006179333,48509902702583516,524288 --field-trial-handle=2276,i,17161313132606388384,2727041522089954229,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:4792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

053e00e6-2df2-459f-862d-077ec4639c01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\053e00e6-2df2-459f-862d-077ec4639c01.tmp
Size 8KB
SHA256 27292121ebc1873b04e95c971871a57dd4dd20b13299388804ff7ddd3cab5531
MD5 64617f39741f78fc7bb4693f4cd7ac45
SHA1 557a8f75fd8f52593303ced57a03809cbf70251c
SHA512 b2ff6cdd6990d068d9bfef88ef92505e361961de589a7ac7654ebbf8515ca2795f8b401ff68ad0c23b99168b43fb26c6790faa436b4fa7386c61158a93eaea22
SSDEEP 192:QkONB6nnHu0QmiUyIjQcYcX5hQDP16jzor/wX4FfE4g3bq52hxU6:QkONB6nOExQcNX5+Dtm8/wX88jo2hxU6
TLSH
T18B12FC31B968BC675ED26595B0863113DFA55127D7887FC0DAEC1E1C01DFAAC534AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

0ffeb120-45db-4031-90f8-63ed879cebbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ffeb120-45db-4031-90f8-63ed879cebbb.tmp
Size 9KB
SHA256 9f4355850c6923d7d3b84416fbd72201253644baea3b88af80ee4e6b07422c36
MD5 1e01987531b6e4aad98c2c187ee15c65
SHA1 ee0f1b8494fb02f8a589b287e1a2e569332019d6
SHA512 8d14b5fa31cf5c29542ba8ad76abcdc0ef0da9b264fefb783b5f2b059f26962655427ece35c8e01cbfe4917145c97c9c263570472f66fe91532e2553828e53f5
SSDEEP 192:sxZjR7Wv/fcse3y2IdpdxHW6+WNGYYB12YDIgrJ:sxZjsv/fcsgy3fHbGfz9
TLSH
T13122A6516E28B97B8CC7E209BB25BF13D6F9503251D41E58EAFC8A1C05E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f8c331c-948f-4c36-bcb7-1a7a16da505c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f8c331c-948f-4c36-bcb7-1a7a16da505c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a9761a1-90ba-481d-8e1e-8999fcc7428e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a9761a1-90ba-481d-8e1e-8999fcc7428e.tmp
Size 9KB
SHA256 357a5c7859b7c87ef070ed32cda302673502983b8fdc9f4f6aa341c2fd55eb8f
MD5 0b6a383e6f910455b811a945dd9a4aba
SHA1 7b6e969cb486d336deba50245fa77b14c44d8386
SHA512 414643b08f5ea3dbb1305e6f0c3b9379b1a5947ef1b317714c608fa0ab27bddddf0b549ee6a08a2c1122f58691a093ea390f99b576dbf479933496de13a79645
SSDEEP 192:sxZjR7Wv/fcsx3y2IdpdxHW6+WNGYYB12YDIg5/J:sxZjsv/fcsBy3fHbGfzn
TLSH
T11422A5916E28B97B8CCBD209BB15BF53D6F9503251D01E58EAFC8A1C05E7ADD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e86db07a9534bdf4d3781f594a03a80e055df9dc14c660be3abeb7c209723b6d
MD5 fbe9a3d3738a0576d05f0ccd66685696
SHA1 7195932831526b6898c69e83851af6b69b66f6cf
SHA512 45909563152cc60a35647f240471af2ffe6921629f1ac47f0ea9cd4500438076ff9d10902ebbfd60f309debbd3f20bd4ac950ffd834f60666cafbdad47d8740d
TLSH
T10B61A5B126930490FBABDA7790D405A73673A3BD44E36F460BE8D3BB874B7F4A054009
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a790180327a9e64451b29461ff33e4c968dcf2b3f97a148cd3ddba3868881717
MD5 454b5564673a8504f1ce1e02fe385f0c
SHA1 9be8f62ef3e577163e284ba4128400c8713aa2f6
SHA512 cacf008ee24a04ac11a9291d98e4aaed2b3d032a8217dbe9b546cafbc82516dd1b33d202f97246e9a47a4630a325242f601a669877b2d5a9747feb7aec1ef63d
TLSH
T17271C67166930090FBABDA7790D005A33673A3BD84E36F460BE8C3BB97077F4A054008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 864b76fb6ea9f453126523e89770e03b003a2b8c1b6004852936fdd81c827d7e
MD5 d81cfa2a8df54c0244a48540225a99e0
SHA1 610a0f61bea579471e963733f976bb7958c7c54c
SHA512 0e5841e21edcee8f86e491fa8face0d7337cebb0e7b72b18b12f2c311a9c772f13121b6ee45d6c4716610a6f4baf1f59803c45f57af0123693d7358844fb6ae7
TLSH
T18A61A5B126930490FBABDA7790D401A73673A3BE44E36F460BE8D3BB874B7F4A054008
MD5 SHA1 SHA512 TLSH

Submit Download

11b8256f-7234-4965-b6a6-a2674eabf9b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\11b8256f-7234-4965-b6a6-a2674eabf9b9.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9efbc100-6209-4577-bea4-702917049a4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9efbc100-6209-4577-bea4-702917049a4b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b7cd7ff3-f9a2-4deb-a162-d2a46a4cd1ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b7cd7ff3-f9a2-4deb-a162-d2a46a4cd1ff.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8e1f610a040bb2c1b17188de457a62a9b517604100cf1487d2d7e5195948d3b9
MD5 2ba88c70d27900bf3e905454bd371b8b
SHA1 64c1f56b070be60cc733faef2bb27329096dcb2d
SHA512 ca2da0e59723cb942a1d26372e80b385f3c9e8ccd9fb51f20f945bbcc0fb7b129dc353d4107daba8ccbeb3de64199b7150fab71572944d0766c2f1a72a6d9b91
SSDEEP 48:KgMb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLvSbvRxRqbpkZIS/qK9f1VqxP6YcdVN:KEbKKcMuqMAK9KCQ4KJmes
TLSH
T1E1915112306B0340397E394840B98A6A424275B3755DE97BBFFD84A64E6FE141CFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 167B
SHA256 f9f33538e85046c66e4a843b3e180b0053607250be75cd3362d3c76252d05dfd
MD5 a990702726a5b270b7fbdd15eacdc84d
SHA1 871ab3e012e02e9e38a1f1174e6f10f85bde3164
SHA512 2d63fd7fccfe75ad3a558eed25abf9b03c274721f50cf565684fec64969cb08240ed1bc5113433f2368c2d8cefdb429321144be7563b2824ce2737eb0c458642
TLSH
T19AC08CEB2176C00E2B70AAA05821609C782B0F4E9CC8D8FCC884F052303832B9A21813
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 83B
SHA256 431172c738e57a4eebd9c363393802d768e71d536fa84b9575ccb96888ba6cb7
MD5 8778f3c0212cca65cd6326fb47929be2
SHA1 d6e9baabe07212463ff970fa2ac55f88954e2cd6
SHA512 94027d09fc3f03c3d78d66450bf448d9c90e927021e1eaf305437f8954e8b3bf8a41196e5846e5ab6bb0c9d4afb8d0bc8aacb567a6d59f50b7ccbcf3aaf7f7ea
TLSH
T1F1A002AB1555C14F1A7057D01511515DA80F434D48C4D8F89444D05231145675D51853
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

a0252bfe-097e-45cf-b019-8290e06aef7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0252bfe-097e-45cf-b019-8290e06aef7a.tmp
Size 27KB
SHA256 205ace7b91ea62727d4b337bf8694fd370fcbfeadfa7eca954501f270f580114
MD5 68d9f45f180339d7da0da80adbe14bac
SHA1 ea16c504f21c56957c5553a946cc2e2dc7896048
SHA512 e4925e6eb338435b03d6d411813cf6af8bdc60518f6121b2d9567362238ce666a4480f6057f8990a8772efa58637ae9584b7a67f6c6dd4af736d54ea7ded3069
SSDEEP 768:q/yYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXvrop/9k:q/yYR7jWv3NpBu1ja/CL8OX8E
TLSH
T1E8C2E93B640DCB7E4FC01A9DDC5A6F9B2E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7546bf4-c720-4bb5-9eef-535ab6033e76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c7546bf4-c720-4bb5-9eef-535ab6033e76.tmp
Size 10KB
SHA256 a5fbf9a30141b2cdfd22b470b339ee672b7d2ac87330c50d28efb2a01d98b1aa
MD5 6989c18cc87b3bf3a41cab9eeefe87dd
SHA1 3ad1fa1912fa47457801e7c4d6fd5dff9a3cf6c0
SHA512 de680acde2066ec91e94087ea64dff2fbbb8513cb20d79d7e1c0922c2e391ef4f766c7ada7b24baf0a227589e868603bd7f181e65c49933a70a76578613f8f12
SSDEEP 192:sxZjR7Wv/fcsxAy2IdpdxHW6+WNGYYBV8YDIg5dJ:sxZjsv/fcs6y3fHbGfVZ
TLSH
T17222B7916E28B97B9CC7E209BB15BF13E6F9503251D01E48EAFCCA1C05E7ACD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a909e9c8-b8ae-40ff-8cdb-8b6a95f1ada5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a909e9c8-b8ae-40ff-8cdb-8b6a95f1ada5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a77c1144-3a49-4a96-a46f-4a42c14bad4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a77c1144-3a49-4a96-a46f-4a42c14bad4b.tmp
Size 18KB
SHA256 ddd61916ddabad8cce7b416c4d361eb6e4ef2c9fc7e1e2fe20c173995057b1c1
MD5 5fa5b98cb4b930b3edc701ebc8a7d340
SHA1 ac3e556606525c7a5267a2d450d9ce5ecf0178af
SHA512 a4ad8839fdf3027401eea9a182874743c7f5ee6fdbe789fd097f37597fd98d00c0a40fdd147791bb05f3b3fb5f1dfd4d8f425b563154c0edc9aab7d6fbe71335
SSDEEP 384:kmQkUSv0sNwqN1iPouQMQX5+Dtm8/wX88yo2hxH7vBE8fDIIlR:kG0OcXQHkDu7yoQH75EKL3
TLSH
T14E827E71A8A9BD2B4EE3A551F0493153EFB49127D6C82B80DAED9B1C01CE6DD234BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b477616c-be0b-4971-83b4-f2c5e0d0510e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b477616c-be0b-4971-83b4-f2c5e0d0510e.tmp
Size 8KB
SHA256 24614d4e56524f790358108cb23ffff8afc749880fb3ec358e801552e864be21
MD5 ce885159c6e8654d88885c22701e134e
SHA1 a1f0ce55bcb48031948d35b67b20710884a1a01f
SHA512 e7ed7f4a7106e24733b5f424a4d408181dd06c76c9105aa257a02b37cdd9d28b98e5bdcaa82f8d097d630f4321ecbedb5b60a400cb8ebadc6ea3ec6390e7409d
SSDEEP 192:EON56nnHGQmiUyljQYcX5hQDP16jzor/eMcgYU6:EON56nC6QNX5+Dtm8/OhU6
TLSH
T17A02EC35BCB87C7B8EF36D45B48636139FA5213BE6946B80DAE85E1C01D765C2306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caf3cf1b-186c-4428-9a7d-5b202d551a9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\caf3cf1b-186c-4428-9a7d-5b202d551a9f.tmp
Size 18KB
SHA256 636a6c062b96ac0d6727f2fb0173920125dde5e812ec46929626218fdeece318
MD5 b2a1a1d76e1b550c95d17cca2ef75a49
SHA1 4f6778c549c95dcb129083cd0243f91749a428bc
SHA512 577e4f4730db5aec88a8d7a6f8192d16856f183c97e7df988faaed9a3eac3e930872bb05aaf21a178126e2e136241c3c3fcf097b29b7aad36e5a90af8dde9b91
SSDEEP 384:zmQkUSv0sNwRN1iPouQMQX5+Dtm8/wX88yo2hxH7vBE8fDIIlR:zG0pcXQHkDu7yoQH75EKL3
TLSH
T1AD827E71A8A9BD2B4EE3A551F0493113EFB49127D6C82BC0D9ED9B1C01CA6DD234BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec851f2d-c7a9-4526-950b-a6b131b91cea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ec851f2d-c7a9-4526-950b-a6b131b91cea.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c4e0e9cf4fc317fa5ed05db0c5005ae42aa0c4f52fc54e37d66159bdca0ce6b5
MD5 1768eda7a749d81783249c561344edea
SHA1 bc33d5d68b2cc18f524598aa8e5f8420139c1b45
SHA512 0293ff1b9c1ab80e522a32cd5dfc00289e3d3f41cfe67c839e8c4e7e9a60c07b022c1142ed1d53460ef37d14981f2a3cf8c234904d881438365c263c5c0fee0b
TLSH
T13541E35CA6E91148B3B76F5AABF6A86D947E7D732F06D45E00110D4F0A62B00C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads