hxxp://polaris-elvingerhoss[.]newcode[.]law

Analysis

user interaction
yes
max time kernel
4s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://polaris-elvingerhoss.newcode.law
Sample261104-tlpc5asyfv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4468	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{0F42E3A7-0991-43AF-B2DA-54714408363B}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 4832	4464	msedge.exe	85
PID 4464 wrote to memory of 4468	4464	msedge.exe	87
PID 4464 wrote to memory of 1748	4464	msedge.exe	88
PID 4464 wrote to memory of 1748	4464	msedge.exe	88
PID 4464 wrote to memory of 1748	4464	msedge.exe	88
PID 4464 wrote to memory of 3792	4464	msedge.exe	89
PID 4464 wrote to memory of 3792	4464	msedge.exe	89
PID 4464 wrote to memory of 4816	4464	msedge.exe	90
PID 4464 wrote to memory of 4816	4464	msedge.exe	90
PID 4464 wrote to memory of 4816	4464	msedge.exe	90
PID 4464 wrote to memory of 4308	4464	msedge.exe	91
PID 4464 wrote to memory of 4308	4464	msedge.exe	91
PID 4464 wrote to memory of 4308	4464	msedge.exe	91
PID 4464 wrote to memory of 2804	4464	msedge.exe	92
PID 4464 wrote to memory of 1416	4464	msedge.exe	93
PID 4464 wrote to memory of 2804	4464	msedge.exe	92
PID 4464 wrote to memory of 2804	4464	msedge.exe	92
PID 4464 wrote to memory of 1416	4464	msedge.exe	93
PID 4464 wrote to memory of 1416	4464	msedge.exe	93
PID 4464 wrote to memory of 4980	4464	msedge.exe	96
PID 4464 wrote to memory of 4980	4464	msedge.exe	96
PID 4464 wrote to memory of 4980	4464	msedge.exe	96
PID 4464 wrote to memory of 2080	4464	msedge.exe	99
PID 4464 wrote to memory of 2080	4464	msedge.exe	99
PID 4464 wrote to memory of 720	4464	msedge.exe	100
PID 4464 wrote to memory of 720	4464	msedge.exe	100
PID 4464 wrote to memory of 1164	4464	msedge.exe	102

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://polaris-elvingerhoss.newcode.law
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff928dac188,0x7ff928dac194,0x7ff928dac1a0
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,13129715984768060998,9689316738384410549,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2431627187883375864,206859678330516860,262144 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,7736160063583967497,9351297282441615490,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,10227828739846157512,11104617928755162220,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,6754129642362864059,16976047212541713874,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,5707327319723636400,8152377514111306244,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,5034306733103429403,10690129655628787461,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5084,i,9772597836361561175,13395696405260180520,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,17282278399401408468,17899118120246543072,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,234855825386304362,279438925280460167,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,11668284707755965638,525576027138985799,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,11668284707755965638,525576027138985799,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6168,i,1574705834056990155,15317330163849136626,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6324,i,4529110738746579910,16305537474616686833,2097152 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,16808074296693630065,6236858436240158474,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,15364527933010458496,6481999371270965353,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,18163525015956822984,6140543915272048809,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,9838610118332794956,16970334410818961612,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4572,i,5975483453344562296,11212957581675092989,262144 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,7307638814809690661,10981942008120363969,524288 --field-trial-handle=2224,i,12437276301383999766,4773404499582225016,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
  2⤵
  PID:4380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2015434a-413d-42f3-8fef-dc9486604f26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2015434a-413d-42f3-8fef-dc9486604f26.tmp
Size 8KB
SHA256 eb4fa575c2ecb340ad52b6359088d7cf7e050e2a5a560f25b88a661fd43cdbf6
MD5 fb452c42cc5334b4069ee60e3cf4df5b
SHA1 92b0ebb691b73bf2f70d78e76add2682e04afa26
SHA512 439399689c3fa2c7466f5a60e737e8f406e694a24216ef0f83d4bcd3a18dc9cae7e1c72a057233b9031d8a4f0f05ae139090556506ad4c27ef14d75b72b5d4e2
SSDEEP 96:gqONkGQsjpfuMVwptaL5ih/cIPURHl8h4otop5YiCDoBIPuva6zx8X5Fxux++YvL:LONS6AmwprQmiUy4c6siX5FNHkJiEYU6
TLSH
T1D102EB35BD686C7B8DE3AE54F54B37239FA5116BEA946F84CAE81B2C01D764C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88d150a1-a936-4412-8adb-bbb3d0803e8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\88d150a1-a936-4412-8adb-bbb3d0803e8c.tmp
Size 20KB
SHA256 8d1b0d694725c03e04f090df7455110e4ced820459e1069bf0a4e1a518f41044
MD5 fa961cc09d5c5bc78d785e4a19922ab5
SHA1 b22efb63b2c93e10ee9181b2c4d873703382612c
SHA512 41c5e61a1ef6474dcb17c9e71e6df995387a81654add8a139d03d3e7af4fa439a2b253fbee8467d9e01131cbed67ac1c249daadf0ec3934c54220edb4180207a
SSDEEP 384:7iFzQkUSv0sNo8TUNTUlIlBZRxpucPLP29iX5F1Vu9H7vBEqEIIlh:WFd0twgRRxnjiaK9H75EqELT
TLSH
T1BFA26D33A8649D3F5EA2DB64F10A3603DEB49167DAD5AF90DADD5A2C02CB1CC134BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

897cd776-87de-47f7-a0d5-8774fe08e7f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\897cd776-87de-47f7-a0d5-8774fe08e7f0.tmp
Size 8KB
SHA256 b7aa6d8cbf4313c820621963afa99e815a39b9405a33f21c1becaa44895d7c73
MD5 c08098a6f50e83b38dcbf0a93b8e8a1e
SHA1 af752a218cacbf4ac91cce44396d4beb4963c9af
SHA512 9f552d227c0e42aea8cee0c4432453644e7748f545c1ef976dff9d25db1175cc3e7b212c239731776bb28a7c82250af59536b9e9d68669a5a6320af82c8cb273
SSDEEP 192:iONx6AmwpBQmiUy4cesiX5FNH7Jd6/lRbqCU6:iONx6ipfwesiX5F1V69U6
TLSH
T1B0120B31A874AC7F4DD2E564F04736139E795167EB896F84C9EC2B2C06DF69C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c1039da-e15f-4196-b78f-98c90194e76e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c1039da-e15f-4196-b78f-98c90194e76e.tmp
Size 18KB
SHA256 0d492a079e4801743f3f61e0bd6d0188949022b60338ae2f13579c07ac1ddc08
MD5 08a233e006743dc3e2e15ecc3561e850
SHA1 f5badd6d0bfcd039ff6a4e671a9f71d17b90e147
SHA512 6864694d077248aee35bc824198d8290db03c6c4c1672f99599fa2540af561cb9ccf8503372f19fc6688a825f2bf8479c54a0eaa3d32492d2923d7253064d272
SSDEEP 384:RQkUSv0sN4BZRxpucPLP29iX5F1V29H7vBEqEIIlh:D0zRxnjiay9H75EqELT
TLSH
T192827D32A8746C3B4DE2E660F10A3613DE74916BDBD95F84D9DD672C02CA2CC274B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfe134b7-9fbc-488b-850e-95b01c6c48bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\cfe134b7-9fbc-488b-850e-95b01c6c48bc.tmp
Size 105KB
SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
MD5 48ffe64f366166704c21161efe0b504f
SHA1 a6403dde2edbd6b341ad301811396e7d3aea1af5
SHA512 ad78beb367abbdbb0a58e28566138180a03a9826f30f2dc412a05e0ca179742f6e123202adf44a50da1f4b71145ff6cb0cde66f326d4e9b116ce56b2281ea253
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

1e59d791-565f-46eb-980e-401054101c13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e59d791-565f-46eb-980e-401054101c13.tmp
Size 10KB
SHA256 221dbf016c36c965cf697ac2739375fa019239444ebf70067524c11a9468c42c
MD5 8ceed0dbfa6b9b18d49a99e1dae767b9
SHA1 b4cb4e833c67c4d3d63235bf7ad19ac8e908942a
SHA512 80fec85182db7710af8ecd89bbf9e0ebdb5e35e246a4e58f0ddd1bf04ba1b5df440dbb09afee4d4c60ef76e9031930bb6cb971e08a29b5db5cdc4defa58c6a7b
SSDEEP 192:sxZdRvW+/fDsPI3IdpG58HW6+WN7oX/Y3ixJt6Ig52J:sxZdU+/fDswY3Hb0/IE
TLSH
T10022B6126E78A97B8CCAD21DFA55BF13E6F9403291D11E48AAFCC61C05E66DE224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5195b5ed-f48d-418e-9218-613caa7b596b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5195b5ed-f48d-418e-9218-613caa7b596b.tmp
Size 9KB
SHA256 052a543a2decddb5a31a7f6e3035a18c86ac9854e7836c7c0dbde14d0bf14ea0
MD5 d3c7bc1510f205dfa24583a4706af74f
SHA1 c4cf6a30f73fc8b29f7182b48cda334adbea877f
SHA512 8acab0b1552bebba77b85b301d08ab17bd8c90feeb0ec31116cdfa551957a9a75e76c084447793ed0443513a3b3f412eb70f4e78aa77a9028296d07b95cdca77
SSDEEP 192:sxZdRvW+/fDsoI3IdpG58HW6+WN7oX/Y3ixJt6IgrJ:sxZdU+/fDsvY3Hb0/I9
TLSH
T1DB22B6126E68A97B8CCAD21DFA15BF13E6F9503291D11E48EAFCC61C05E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73ff2f00-0437-43df-a3b3-a2ccce37e177.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\73ff2f00-0437-43df-a3b3-a2ccce37e177.tmp
Size 10KB
SHA256 c457fefe4cbc257aeed7d55e3edf3f3b6c250b039c74aeb2236020c05bd621f3
MD5 d1cf490fed1e58d3eb395c838d31e00e
SHA1 c1011c8a1f6cdeb889be9817a610dbc809e0d3a3
SHA512 30a6846a0f7bc8fb18b55cea6ff3ddcd6342086552336dfa49e339d2c9f6bec12b28a938ac5ff3d29bd144d1c2f678c226e3682d2470421a79764c66e9884883
SSDEEP 192:sxZdRvW+/fDsgI3IdpG58HW6+WN7oX/Y3AhJt6Ig5cJ:sxZdU+/fDsHY3Hb0/Mu
TLSH
T17B22C7126E68AD7B8CCAD21DFB15BF13E6F9503291D11E48AAFCC61C05E76CE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94d81aa6-beb5-4ddd-a17a-a4fb465c47cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94d81aa6-beb5-4ddd-a17a-a4fb465c47cb.tmp
Size 27KB
SHA256 449f4e0883183cf03160a80621086e617486264a10c9f1a707fb3a1868c419c0
MD5 dc857fb2b4d883024409b4b2ed453334
SHA1 64fb169fc6c1d2bc4bc54c267561bfad6f0a5506
SHA512 6ee9cca06eab6e425992efc7733e028a812fd0e237fa6f818ada6062a4b92e620230f594a65d5a5b2107a787ab1ec2b29b1b7be6ebf301f956a1672901581148
SSDEEP 768:h730AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72WrolZMD:h730AbSWvS2l9u1jaLmLZ12tA
TLSH
T160C2EB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA944C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4107af0a46f83e3715ca4bf6398f748a1c2c83ba2d4fc112a010005557212bef
MD5 0441164ff749050d5bc0f7ee05be7a37
SHA1 78ea4181a17c2192a700dcd39a4a15c9e904f2c2
SHA512 e35df3e113d9b6cedfe684239b0bb6c623e1e1a7db358cffc52e5fd794e4c3a5f0d29251d66cffd51249652c72e7e03f96243f5e82fed23c637deb8e5c3895d5
TLSH
T168E0209405CDD23F712478C70EBDB70EC1803A1AD3C06A1F2B45C4C4F00294066C5770
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ef66f3fafa99eaa323c19e4a02aa846c4e1160bdd9b965b00513ef7184272f55
MD5 7c58cf4265ae624297b719ee76b5c00d
SHA1 d44bc7e4b17222b59ea1f0b0ac560f640e8ad7de
SHA512 963bbf08d85b7919b3c33e4c69be1ff54659fd295d496986c9fbb288168d07a161349c6323a2fcf37f8537196aa75d990ea8c3bbd73d1da2af17e8be1aee0a13
TLSH
T14881D8500B9B4A87FB9961F1CEC972ABFD70B44250739F816350DB38460AFC64D69396
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f928e36d703ab698fa98f1ed66c4a3d6b0e9dd23d0e02d4e9d1c0d2377a4c156
MD5 c6397e50e15ef9a1ff1d7a001d9c3040
SHA1 41c85d692883bfe4da82421c2dec8448ac4663e1
SHA512 1cc1d6bdd1d23dfe164b879efed29e6f392cc23459596653f233d06ee0d8dcc67880a78ea7657df8041fea8b442a86beba705db10099e7bd05bc1f0d4f28d4b4
TLSH
T1FA61A4410B135A97FB9835F0DED930ABFD70798061739ED29350EF78860AF855D96290
MD5 SHA1 SHA512 TLSH

Submit Download

d02f0032-679d-4d57-9af2-4e50fbd8ebb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d02f0032-679d-4d57-9af2-4e50fbd8ebb7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

64cbd2bc-59b9-4dd9-91b2-68548dc939a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\64cbd2bc-59b9-4dd9-91b2-68548dc939a6.tmp
Size 2KB
SHA256 bbd80fc56d6d369856e1fbc1a71983a70285b749baa724830644c6547fa1e24d
MD5 a93035aa7efdd321e8523a5f60c7f6f0
SHA1 ea65e4b91588060ae08545bd19050e22220721b5
SHA512 c1311fb185f8993650835f6d2b262b3a6170843fa1056567fbc1d3531a02a681db7da65c3ccbcd11b18c0beefbba5def537c7ad951436bd5f2028a0137df66d7
TLSH
T10A41BBF7C3F582AEC91116F15B14EE2BCE1D190547283C298AD5EF1B93E2075E10925F
MD5 SHA1 SHA512 TLSH

Submit Download

795633d5-85d8-454d-9ed8-eb801c67fe17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\795633d5-85d8-454d-9ed8-eb801c67fe17.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f8dcfc20-0ed6-4c47-b921-924a580a4e39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f8dcfc20-0ed6-4c47-b921-924a580a4e39.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d305be75bf7c22f5f31038842db78734b3b8e6ba2e0f3d84fbdc00fc29417f73
MD5 e813e2bc600597a67c9d6372c1afe327
SHA1 6404b20b09bb38eaf99efc11e6b43614da2127f1
SHA512 7b66f173049ebcb4344a884e26f054acf6f41cc1d78a9a39b86a1f7cf986d2d6811ff09a75b4e4dd11cd0c9895c067cee7dd9fd352d0eb48e815145a37b4fd5e
SSDEEP 96:KVFsXTtDnr0XmaarrKiSahr2FdOPnYfnSx9nBhx0dksaVxKi4aHx2/X8VOc1GKcO:GH7cZl
TLSH
T193912812336B12813DBD268984B6972B414271B77018F52BBFBE85A2DD2BE544CFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e33071f2-2f9c-4378-8302-9b2060eac831.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e33071f2-2f9c-4378-8302-9b2060eac831.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e8b8e2c5-3648-4ebc-b12e-fd703b72e470.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8b8e2c5-3648-4ebc-b12e-fd703b72e470.tmp
Size 10KB
SHA256 0ac22b672cfbfc784bb0c8ee318ab6f0c62b5448c778555cc33898bb97be6fc7
MD5 a24ba232bf14c72b03602a0ac1ceee25
SHA1 db1902d189fd864571ee06f329c3120a9190e2c8
SHA512 50030249de3f1cbcd8345aa6eadf03bd03235fcbfedac248e5fa2e32494f66f0daeee103410f9eb8e5d7c9f92884ac98cbe0b79e6dca92e58bb9226d85407a08
SSDEEP 192:sxZdRvW+/fDsgI3Idpk58HW6+WN7oX/Y3OeJt6Ig5cJ:sxZdU+/fDsHYNHb0/9u
TLSH
T10D22C7126E78AD7B8CCAD21DFA15BF13E6F9503291D11E48AAFCC61C05E76CE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f802af84-46fb-4746-8863-53f4291a9fca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f802af84-46fb-4746-8863-53f4291a9fca.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

901ec20e-defc-4377-ac4a-60f7756ea580.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\901ec20e-defc-4377-ac4a-60f7756ea580.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e02560c9-efff-43c8-91ca-ccb78cab451c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e02560c9-efff-43c8-91ca-ccb78cab451c.tmp
Size 18KB
SHA256 05e515ae86bc93b4f682846dee555adbff771eb2b60c7c4df37e6315c45cd0f4
MD5 c8f25f6e2525cc933f36e965259f5662
SHA1 edfe20e11d03301d7e12d038f414b54a3fbe52c2
SHA512 9b682d3cc77fed79b83ba9ccb958c74674904b908b458e211657063b1203f4bb5dd90b13f73e4fbd927fcc8827029966bf79eedf76492231a09109b6a61b8747
SSDEEP 384:hQkUSv0sN48ZRxpucPLP29iX5F1V29H7vBEqEIIlh:T0CRxnjiay9H75EqELT
TLSH
T11A827D32A8746C3B4DE2E660F14A3613DE74916BDBD95F84D9DD672C02CA2C8274B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd99f505-ae18-47e1-8eb2-176c21125030.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd99f505-ae18-47e1-8eb2-176c21125030.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d3c6e230ec3d28fae839bb293f1b4a7ff095b2a643469dfb36d03a1a0de8cf4d
MD5 ebdaa366a848660ba18633332a69f1f5
SHA1 7e29fe233156119f97520335367345318476c963
SHA512 e1b77ffb571b56c09a95e5b8e63b0d222b651efa8159dea40f5e816f45191990dd0320cd9516a94784c0a0a0be9b97d704c71608378cdef9ef7bb1d0484d3bd5
TLSH
T12F414A5CAAE91159B3B72F4A6BF2686D483BB8772F06D45E10110E4F4A22B40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads