hxxps://google[.]com

Analysis

user interaction
yes
max time kernel
65s
max time network
67s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://google.com
Sample261102-tbcatavwat

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{9DC47DBF-335A-4C4A-BA4B-E05DF84E448C}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 4056	2624	msedge.exe	86
PID 2624 wrote to memory of 1652	2624	msedge.exe	87
PID 2624 wrote to memory of 1608	2624	msedge.exe	88
PID 2624 wrote to memory of 60	2624	msedge.exe	89
PID 2624 wrote to memory of 1608	2624	msedge.exe	88
PID 2624 wrote to memory of 1608	2624	msedge.exe	88
PID 2624 wrote to memory of 60	2624	msedge.exe	89
PID 2624 wrote to memory of 4896	2624	msedge.exe	90
PID 2624 wrote to memory of 4896	2624	msedge.exe	90
PID 2624 wrote to memory of 4896	2624	msedge.exe	90
PID 2624 wrote to memory of 3232	2624	msedge.exe	91
PID 2624 wrote to memory of 3232	2624	msedge.exe	91
PID 2624 wrote to memory of 3232	2624	msedge.exe	91
PID 2624 wrote to memory of 1616	2624	msedge.exe	93
PID 2624 wrote to memory of 1616	2624	msedge.exe	93
PID 2624 wrote to memory of 1616	2624	msedge.exe	93
PID 2624 wrote to memory of 3408	2624	msedge.exe	94
PID 2624 wrote to memory of 3408	2624	msedge.exe	94
PID 2624 wrote to memory of 3408	2624	msedge.exe	94
PID 2624 wrote to memory of 3264	2624	msedge.exe	97
PID 2624 wrote to memory of 3264	2624	msedge.exe	97
PID 2624 wrote to memory of 3264	2624	msedge.exe	97
PID 2624 wrote to memory of 5040	2624	msedge.exe	99
PID 2624 wrote to memory of 1032	2624	msedge.exe	100
PID 2624 wrote to memory of 5040	2624	msedge.exe	99
PID 2624 wrote to memory of 1032	2624	msedge.exe	100
PID 2624 wrote to memory of 3828	2624	msedge.exe	102
PID 2624 wrote to memory of 4420	2624	msedge.exe	111
PID 2624 wrote to memory of 3616	2624	msedge.exe	112
PID 2624 wrote to memory of 3312	2624	msedge.exe	113
PID 2624 wrote to memory of 1160	2624	msedge.exe	115
PID 2624 wrote to memory of 1160	2624	msedge.exe	115
PID 2624 wrote to memory of 1408	2624	msedge.exe	116
PID 2624 wrote to memory of 1408	2624	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffedb68c188,0x7ffedb68c194,0x7ffedb68c1a0
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,5815709771507535939,10286045259616752111,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,8508142563109032592,16102116908165593378,262144 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,897414544438250045,11692335886386307156,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,15763338666757983648,18144175785404133759,2097152 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,1781838421953580567,12943078002688363263,2097152 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,2317305032975678363,7888105926375843201,2097152 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,3570237292597517090,1832505701140303851,2097152 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5012,i,943475668992519002,3663279897947307061,2097152 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,8359210927998237269,3984009326606692497,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,14067077514000467331,1687674151152234512,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,17721533944160583203,12418501911094908715,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,17721533944160583203,12418501911094908715,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,5161057161480194276,5532081277555106285,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,10981502879678567790,12527668821850286574,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,1331561891136513776,10016022525396742126,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,810849297752121312,8928555996521136168,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,3139927169083445827,11712905394154054543,524288 --field-trial-handle=2936,i,10385204832624525219,4971033051698310124,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  PID:1408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

19a51893-e93b-4df0-91cc-efa4c0f3afa3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\19a51893-e93b-4df0-91cc-efa4c0f3afa3.tmp
Size 8KB
SHA256 ced0af5708e48c69927bf117a5db46a6206a8358902ead4f1146bd7726ac20f7
MD5 1d170d01fc2d006ede96e1b7d6cd8c78
SHA1 2a8471e19718549f01e6527c58b50c59d8ec5557
SHA512 92349e3348a2411031d70ec4ba94d4b4551c7b6cb46ad7edf8132d459fa3d1d651fbb39b8cde398c2e899d5780ac5a658bda0479090ae2b5cdee4d865acc2000
SSDEEP 192:LONH6AmwprQmiUy0Q6siX5FGyhaJi75BU6:LONH6ipdg6siX5FrR7fU6
TLSH
T1F602D935AC786C7B8EF3AE15B58736136FA5116BDA941F44CEE82B2C01D765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62dbb115-8fe1-42cc-b050-dd5adcee77b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62dbb115-8fe1-42cc-b050-dd5adcee77b8.tmp
Size 8KB
SHA256 33b3b1c3116de2405bc6896547f6cbb07a73629cbe44b6986bae16c829536c92
MD5 bb6a958d76f90d64633e4765968c7af1
SHA1 3e385a8ff1a8a9cd0fd31b403fcde91b1551b939
SHA512 2554e2fd045a662089bc26fc9a2fa24ac406d309b6ee2a2f2f2befd852cf0fecf2c6bd4b43fcc0ae1ed580e54d2b5432e9c5419ff2d35a93ca7f9d85f031f089
SSDEEP 192:oON+6AmwpXQmiUycQ4siX5FGyhdslR+qNvjU6:oON+6ip5E4siX5FrnGxvjU6
TLSH
T1EC121A35A8B8AC3B5DE3A554F48735139EB5416BDB886F90C9DC272C01EB59C530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

075df924-efdd-44a7-b703-fc49ba2aec6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\075df924-efdd-44a7-b703-fc49ba2aec6e.tmp
Size 10KB
SHA256 332f88333c3b5a4c14fa46c3ff0e19dc6018ac6edad01dfd84a4a15e8b26c550
MD5 0c6cccc86bca7d58b2005eadeae88110
SHA1 d4f7157a6631b2fa6e5f0eaa58da4213129d4197
SHA512 76c61dbe4dd470c62ad8f8c58e39cf7acd62b181b8a8e838f5a8a3cb81743ce6a489fad1cd1ff5052a9a9ea31d6c8958af78173b9b6286d19b0a2e1651135797
SSDEEP 192:sxZ+RMTWU/fhsAyCIdpq6VHW6+WNrKW/Y3oJ2tBRIg5iJ:sxZ+vU/fhsJrDHbz/Mdg
TLSH
T14422CA526E78B97B8CC6E20DBE15BF13E6FA547151D41E48AAFC861C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7355c7cd-49ac-435a-8a6d-ce404e8febea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7355c7cd-49ac-435a-8a6d-ce404e8febea.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eb121ae-5ac8-4805-8adc-f2650c74898c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7eb121ae-5ac8-4805-8adc-f2650c74898c.tmp
Size 27KB
SHA256 ca34549c140a578764542c1cf6415c89e8349533b387a15b0f193917fc9bc6d8
MD5 53150c3970566083af1ce279a2d1d8b1
SHA1 1f117c7c6b98a1d09fc954aeaf036a24e792f7fe
SHA512 584c64882e0538c89751dbcf9ff6bd37662144c34d4e62feb70d154efcc440a45199cc6167e0a32af424fdb6438cb8afb6eec8c1076b1a94c3336866de1abfe0
SSDEEP 768:PV30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72ErolZMy:PV30AbSWvS2l9u1jaLmLZ12P1
TLSH
T1F7C2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796649D4047FA944C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81e6a685-acf1-43e6-a6a8-824258fd26cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81e6a685-acf1-43e6-a6a8-824258fd26cf.tmp
Size 10KB
SHA256 1859c547c2290feb211a16f4681b8617dffaebcc9b084b453e7c1b62c4eb666e
MD5 cc9992b7ec885f769fa08bcfe81c7cf6
SHA1 1c60a624843774c68b96b16694e0cfb228a10bce
SHA512 4d88e0061460da3bbd68b12ac246f23fff3bbf68c4f6abf33ef54b53712a391028f5eb02d96b39e8d3bcefa1cbefa575633758442c769653deed2397955acefd
SSDEEP 192:sxZ+RMTWU/fhsAuCIdpq6VHW6+WNrKW/Y39J2tBRIg5IJ:sxZ+vU/fhsprDHbz/Td6
TLSH
T1B122E9526D68A97B8CC7E20DBE15BF13E6FA447250D41E48AAFCC61C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3afb0952e87630e035a0d22225358c47f27a07d12a635c32e23aac80e1c16827
MD5 75af27366aea23b761d1c59ca4beabab
SHA1 bc29247f080c275b92f732aeec9a511651ae65de
SHA512 bc77757322c86c9270b74b070605d2eb898ba325f897b409b53a578ac68e3cec9bd8e27970771e453beb0de04780f6acd1b994834a43690d65827db87d71aa41
TLSH
T146E0268626D8C32FA318B49701B8670CC2A03A5BA3C8AD0E2B48C4887001848AFC76F5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 79261502f530ce79466327cf099efa3126dedd367319cbf3702b25b2cf6d053a
MD5 d08813b644f71808332144ef3dbc18e9
SHA1 cc03a43286876da453422b04c8c8870c8129ae55
SHA512 317b2fb8d53b90594186427e29a62d9ae3c9e33b9a7e734e49847c3fcc5c18959d4bf61582b582dd23487f3c439f9bd72f9557a5df6ee4c667f132fd307fd747
TLSH
T11E714E8117715079CB68713895E509CEB6684CF69583CE8227A2FC7FEF062744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0e75f445adbc0f52e8d0d886cdd76d1b8ecbce9ec399fec2318755d142d05a7a
MD5 e7ad214940c377478cdcd880d3c3eb58
SHA1 733014d099153baac5f6bbae41c3a969daaff64f
SHA512 6022a8cc67e0deefc36c245659c7ea584ac4edffa22994c5bceab12fb880e936a01c43fb3fe995901fa8d1f57610c06d4607d7fe03c050812b0fa3a2a7c48921
TLSH
T19B612C81077054B9CB68A13895E509CEB6784CF5E583CF8223A6FC6FEF063744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

d1718c10-5d30-4dd1-8269-35e46027f9e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d1718c10-5d30-4dd1-8269-35e46027f9e7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

85da682e-b7e7-46da-ac3b-6e99a8bcac21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85da682e-b7e7-46da-ac3b-6e99a8bcac21.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

cede5833-ad13-4fdb-8d50-0dab1c6d252e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cede5833-ad13-4fdb-8d50-0dab1c6d252e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

58aebce6c15334b8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\58aebce6c15334b8_0
Size 207KB
SHA256 8978e6a04e6b78730bbf631199706c8b89f69f905b18813e6f3f7b98ee7c78ec
MD5 99cdf1aea35d2fb44b6a70fa40e0af73
SHA1 159d1490a706e4668d376a38caae3551e21611ad
SHA512 797fb13e6ab85d679f6fd4b3285a44e6925c747346c5b900ab1750282f47a560c8f61bde09b2cf565c30217022fda8895806daea4751ddfafe0fe5537b9a3f7a
SSDEEP 3072:OQOgp7hzBCKMJVIO/i99BLbKcIdvXnjv/L+KJZ6:3O89zB6zIO/itL2cI5r1JZ
TLSH
T127246C726300F87FB5239EA1627F7F4D3C35A127DD0686BCE1A4E9309AD6DF20116A58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 57a53efdd02695ea6214665c222fdd924a2e14eedc63a649f18f76d73fc82eba
MD5 8d38cc80ff757dc82516617a49a28c6e
SHA1 133b53341b9bb54ab3f67448f33a396e499a9216
SHA512 968c5144198657cf96e5ae02da4c7d81d639d33ec45f4dcfc17fabaa411a00427248e2a2d66cfc80cc22e23d26f101977a915d8cb23506c10cc9e3c6f5d60bf2
TLSH
T199A0027561DB1C59CB300A7014C1515527318C601A018A1388F5486488522C056137C6
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a2a31f7ee363bf0685db4ae2a40f364bfd6ad7f0124787dc59d339cd061176a0
MD5 67d8f0c6ff3b388559757d69488af8b2
SHA1 b365a222af6290e6b8c1d76b96bbf254e1f283c7
SHA512 d5ee3168532ad8312b068a4b1d98f818574f4b43305dc0062814954971bdcb23aa22649be89670dc41a3e563ca8b60ba4732713971395234862e57687fd140b2
SSDEEP 48:K0YdYcYRYtYfYLYPYwbYDY2YjISYlYwK9Yl1YHYwxY1YgYYmYnYdYdyL5IVpz8O7:KQN2K+g6bN6Ku0SG5qKq8z
TLSH
T1B4914114317A0285397D2D4944B9892E824235F33469E56F7FEE84AE4E7AE240DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9c6a9d8-f883-4418-b59d-42994d11dae7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9c6a9d8-f883-4418-b59d-42994d11dae7.tmp
Size 10KB
SHA256 b777ef1bc953767c33bc5ef040935f3762d1396ba3f9f5c92a0978734de2ea04
MD5 150bff834c175f98e0d3fe442ec30296
SHA1 7e20f3f55713b0fde17c7a8e2af505cfbea946e8
SHA512 f41391164e69ed91705666e8b8787235300d888743766957d95d7d71e0324f2938c4a4d57ee4b4cb24bc0de2287e98899241902e6cb1def889889526bb6faf50
SSDEEP 192:sxZ+RMTWU/fhsKyCIdpq6VHW6+WNrKW/Y3oJ2tBRIgrJ:sxZ+vU/fhsPrDHbz/Md9
TLSH
T11122C9526E38A97B8CC7E20DBE25BF13E5FA547291D41E58AAFC851C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e8309c1-0c1a-4566-b5ab-ca60209ded72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6e8309c1-0c1a-4566-b5ab-ca60209ded72.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

dc630e65-2591-44b2-b4fe-d072f6b6bb45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dc630e65-2591-44b2-b4fe-d072f6b6bb45.tmp
Size 18KB
SHA256 02fd2b9ae7f51a7cf5bdf6c2f1637f16209cedf32673ca62dc8e8852de1b1b40
MD5 3577ab3bcc4823866d717ecb2801e86e
SHA1 f4d0e4fdca68756cb424edf8e7c8d4990cfb4278
SHA512 5b5e67738261fad5bfa8f887794de31628c373618b6ff9e686623f111d3443e6f4e51f308e452ecb7ce817871d994c50dc6a20e3455969c63de10891b1b1f02f
SSDEEP 384:/QkUSv0sNTm8pu6XI9iX5FrnzxvjH7vBEfUIIlq:B0QNMa3z5H75EMLs
TLSH
T11B828D31A8A86D3B0DF3A610F54A3613EEB4915BDBD81F80DDDD6B2C01CA6DD134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09ec0e49-b8dc-4e4d-ab9d-a245ba68ba85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\09ec0e49-b8dc-4e4d-ab9d-a245ba68ba85.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1b4f20e-a9a1-4684-a08d-70286eea1c2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1b4f20e-a9a1-4684-a08d-70286eea1c2b.tmp
Size 18KB
SHA256 46de030fcb206968c2498c871598df42b0c8ed396ac49bb93a9498bdba76b95c
MD5 7a816c816cea09b41f76a11c27260e0d
SHA1 e24255decb5320b4fe62f07803c9161699f0cc5e
SHA512 3202013f19b17561231e37cb1ee82fa5f112a6fad4737de57f146ebad36b3c68a0ecd9f229cfc676d394ffc645038733afedaf79178291ae6adbb425b801d8b6
SSDEEP 384:nQkUSv0sNTL8pu6XI9iX5FrnzxvjH7vBEfUIIlq:509NMa3z5H75EMLs
TLSH
T198828D31A8A86D3B0DF3A610F54A3613EEB4915BDBD81F80DDDD6B2C01CA5DD134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 072187b2f8b9a040694251a2d02d50fd2b2259ba82b32d3d41d7ac69275348f5
MD5 504bfb5b16c32dbe7f5fa412ada8d342
SHA1 b6a6cda68783c19242e85c64ea83dedeb28fb7bc
SHA512 3a668b9f1e770e903ad0916542796b370c8fdde76bedd2a012e8719c1a00c72e51040144e98c157fb72966f1da96139cbd971e6fc40eacbb68172a56cb54cf59
TLSH
T161412758B6E91148B3B76F1AABF6A82D487F7C771F0BD55E00110D8E0B62A40C872B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads