dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
61s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261110-pkgvfatsd1
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{38D3768B-0C85-487B-A946-92EB42E39F99}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4968 wrote to memory of 5960	4968	msedge.exe	89
PID 4968 wrote to memory of 1672	4968	msedge.exe	90
PID 4968 wrote to memory of 3252	4968	msedge.exe	92
PID 4968 wrote to memory of 1672	4968	msedge.exe	90
PID 4968 wrote to memory of 1672	4968	msedge.exe	90
PID 4968 wrote to memory of 4080	4968	msedge.exe	93
PID 4968 wrote to memory of 4080	4968	msedge.exe	93
PID 4968 wrote to memory of 4320	4968	msedge.exe	94
PID 4968 wrote to memory of 4320	4968	msedge.exe	94
PID 4968 wrote to memory of 4384	4968	msedge.exe	95
PID 4968 wrote to memory of 4320	4968	msedge.exe	94
PID 4968 wrote to memory of 4384	4968	msedge.exe	95
PID 4968 wrote to memory of 4384	4968	msedge.exe	95
PID 4968 wrote to memory of 296	4968	msedge.exe	96
PID 4968 wrote to memory of 296	4968	msedge.exe	96
PID 4968 wrote to memory of 296	4968	msedge.exe	96
PID 4968 wrote to memory of 236	4968	msedge.exe	97
PID 4968 wrote to memory of 236	4968	msedge.exe	97
PID 4968 wrote to memory of 236	4968	msedge.exe	97
PID 4968 wrote to memory of 3868	4968	msedge.exe	99
PID 4968 wrote to memory of 3076	4968	msedge.exe	100
PID 4968 wrote to memory of 3868	4968	msedge.exe	99
PID 4968 wrote to memory of 3076	4968	msedge.exe	100
PID 4968 wrote to memory of 3176	4968	msedge.exe	102
PID 4968 wrote to memory of 6020	4968	msedge.exe	106
PID 4968 wrote to memory of 4320	4968	msedge.exe	107
PID 4968 wrote to memory of 5096	4968	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ff86445c188,0x7ff86445c194,0x7ff86445c1a0
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,17770963288640517538,9495215459789032406,262144 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,8839531851082416910,5383948471086922356,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,6282117411833626352,10874741708404440698,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:13
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,12577918269284965233,18352174942223225566,2097152 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,2315530707786493261,10309396248051159548,2097152 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,15660263826985789751,1180323826349868927,2097152 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,2092377659323929996,7065946270292745298,2097152 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:9
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,5278466619194553157,10636933881656761772,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,10054736052108289906,14021969146304592253,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,13270968587195493194,15175497388033500605,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,13270968587195493194,15175497388033500605,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,3600994504135902837,2826138002281545253,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,2171266660345408522,37242440223961262,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,7907835503373529320,4289325193379174742,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,1174585605558931098,6548163021832845795,524288 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,15863604925326114081,6944972345446843550,262144 --field-trial-handle=2548,i,7323072067548686838,11398353934046201719,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  PID:1760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1a7273a9-3e00-4c10-9837-58d335225dcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a7273a9-3e00-4c10-9837-58d335225dcb.tmp
Size 35KB
SHA256 2f8bb998d3e7d0098752046402909571299320cc2db7de6c6068d54549723f75
MD5 9d58cd90b7182c19620bfc58bf72e3de
SHA1 c0c6aa0e8df7c55ae08ea10172d46180dbb3df26
SHA512 5b20d1c5ef491b211d3263dedc419b24855f21ffd886627b1ab40b4c0769ce9c76c97f88d3bfbd3b754733a86a98664581db9849f58df12ef920867fb0dfdd45
SSDEEP 768:Ev3hzIgm1rXLZAMDmGA5b65Q92RQMPbC5aTZc5HKLi:Ev3h50AF65dQRMYqW
TLSH
T152F2BF31ECA1ED739DB996C066477287BFB48223C5C846D098DABE1C05CB6CE134B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6def9d05-0c7c-446f-a685-d11a32bf33f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6def9d05-0c7c-446f-a685-d11a32bf33f7.tmp
Size 37KB
SHA256 bf40bbb455c71bd3a4abf53ddd40b7e3f736e6736ba39660aa12cf9a02945a98
MD5 1a76dbca000a9110b8d5b2fb48e9daa7
SHA1 abfb2e58e4cefbf1036443693768dc0a6ea27b50
SHA512 d5c0da38aa1f70b1dbd31da0a6732e6f34f366547093d149f4442a48ce2b8c2366270009403cab217a2bd6f71e32a26b874b2cc977303a968af5a4ac35fbd31f
SSDEEP 768:SFd03cwgBzIgm1rXLZHDmGA5b65Q92RQMPbC5aTZc5HKLi:i03U4AF65dQRMYqW
TLSH
T11303AF72EC90EE77ADB98AC1B7477246AFF44163C4C896D0A5C9BE0C01875CD034BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

1a26e725-9003-4de5-9f47-f82a1965d87b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a26e725-9003-4de5-9f47-f82a1965d87b.tmp
Size 11KB
SHA256 7869eb0446a4b4e9c4a23dbac88949c969c2ec0e6a173819d92e4ea96f12bc16
MD5 a20bd5b4460dbed4efbc29f9758a2f71
SHA1 da916d0f1fd0ee284a43c72a8b29668437638942
SHA512 95ce26aa333d4cb9d7b6c06c2c34dc4fbd5c6385972ca47a38fded73d23f4581e698dd03b602a01f8991efe9c421765037c3ab626c14a0d40c07cb095b29b3db
SSDEEP 192:sxR1R0bz/fsgsgyYhRzoA8p4R/g6+WNIY2F5cfGxIgIJ:sxR1cz/fsgsgbMc/5IuQs
TLSH
T1D832A715AD28B93B9CCBD21DBB66BF53D7FD5032A0901E48A6FC961C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b2fb2c5-de4f-441b-9172-69abd03c79ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b2fb2c5-de4f-441b-9172-69abd03c79ba.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 0f7e04a3e75d3e6cfd984c2621f11fb6810d442e88069fc24c79586b2ede1dcf
MD5 f889a25e1c27cefdcab0a9376871500b
SHA1 12467c27b752ddab2fc8f9c19f86cc126330083f
SHA512 4a9f3ac724a37f2c569e7cc45d76fc7216f5e7d9b6be65f62a71465c695af83fe6870749344ba1ae83494a47d8dd97dbe6aab0f14e6836acb324085bf8e91491
TLSH
T1FC51AA81EEA40156F79F807949C6F0473FB4C6A1E3E35D6208BAD9FECBE73846900251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5c84f667365ad44c43e1185d599dba3b9172446dd4267be2fb0cc609477044e4
MD5 4348468d4e787e92e002fd7a468d522c
SHA1 c2fc45950e6f3d18225ddb9c5ef01dc33070293a
SHA512 e02836912e17c947dd9895cfd10dcc1e936f9478e0465f3b547b43c35cd7a008b7e8380dc3c640e21ee3aa754bcc41979ced997738541d8f7f15b48fed50bd84
TLSH
T106519981EEA40155F79F803989C6F0473FB4C6A1E3E35D6208BAD9FECBE73846900251
MD5 SHA1 SHA512 TLSH

Submit Download

d026ede3-64cd-4708-b98e-e0777361dc17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d026ede3-64cd-4708-b98e-e0777361dc17.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

55427878-2bf2-4222-abe1-9d24e522c023.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\55427878-2bf2-4222-abe1-9d24e522c023.tmp
Size 1KB
SHA256 6c86283a829ed0e66d08d230cd4de280b1d5f334af380e841f047cc6526d417e
MD5 fcd4c453fb8209b71ffbd710d369fa42
SHA1 879c5111c60ffddf2f6f04394de4a9fa3c5d0ab7
SHA512 a80c4699f3e352e402e5b6ff29b0d450276ae80dcd6ff342197e18b26bbdac1926e80e6f78acf05541867557e6f816f9f652178df6a9707d8b03ce41c6c4a295
TLSH
T1DF41E3F783B5867E9A1186F0EA14AE1FCE1C0411432C7CA685E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

747c5225-4482-4212-bddb-3e88c9ca2c81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\747c5225-4482-4212-bddb-3e88c9ca2c81.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c9b58122-e834-41fe-9fcb-e738c31b3620.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c9b58122-e834-41fe-9fcb-e738c31b3620.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a044db980d1784bd21f85558146c95504d88508f28b8317d44ec989f3c32cfc3
MD5 7fdc3a02b41ff7df550656abffe7881a
SHA1 3204d493b12bc5ed8e9ba729c982b3da0b56d721
SHA512 2d5a7f9adf287ad644f06a67731474393f70fe3bf1fcf580a99fe4eddbabc88811dc96ef8c653afde4b1f5982ce28f0235acf4c366896495870a16fb6b0a652f
SSDEEP 48:K0XaDX5ZpCbBsxISnCK9n1NCxHSYE1XryLdcRtfLPwbD2jISlwK9l1Hwx1gYmnPw:KEYAKdiCiKkK7Kw/KKYEe1
TLSH
T15F917DD6717B521039FD294D41B5B62A424234B33618E5AB7BAC90EB8E2BF104DFD9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cc87f3ac-02bc-4e84-8455-262cc83d955a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc87f3ac-02bc-4e84-8455-262cc83d955a.tmp
Size 23KB
SHA256 6a7d7e7e1ea56411b2fa9e62861d9cf379c51021e5f0ba0f1ecad51c91829ba9
MD5 775efe4b45bb32756120155453518a27
SHA1 f7c07e333108344c12f8e7b2267f71a06cf5f1bc
SHA512 eec8668adc6b85da81f7e1e1ae38e43e0f26cb5dcc560288d4b9f8662eb4f4702d5f48021b374af005c4c8542de91155cfb33227b6fbc2f5174da404d7c8921a
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWoroHr7:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VJ
TLSH
T199B2EA2F640CCB7E8FD00A9DAC596F977E9802C796588D4047FE994C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cee88b0c-f9a9-4535-9888-70d681cde940.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cee88b0c-f9a9-4535-9888-70d681cde940.tmp
Size 11KB
SHA256 52074d78b7e49e978b65142340b357b2dbae3c8c4cc3a5db8bc20478d659bed3
MD5 ac73c7f182a85b4cfabcc34f9f7870c8
SHA1 4398d411af29bfa628066cec16cfaccce17be408
SHA512 30c3e87f9109729c6cca4b4b310833025741dc2ad6edfb8b2c75b8b5b568c48817ee4d224a81a61a53b7b8e4f0d83c07cfcb3250811b8db85a30758e9dfc3785
SSDEEP 192:sxRqR0bz/fsgsOyYhRzoA8p4R/g6+WNIY2F5cfGxIgD2J:sxRqcz/fsgsObMc/5IuQW
TLSH
T13F32A615AD28B93B5CCBD21DBB66BF53D7FD5032A0901E48A6FC9A1C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ead2c214-7e55-4bc4-b767-f58648590539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ead2c214-7e55-4bc4-b767-f58648590539.tmp
Size 11KB
SHA256 1f9b1d99be4b86605ae0d1e580178f3eecabc5e01366d09e0e6960569a673cb4
MD5 6ba56f4e9ad6d05c80082822a4237adc
SHA1 9b3fe20effc76c91b10acf000469009d624eedbf
SHA512 da9799deecf55eddcf5270505c23d23f9a6e29ec242c27682f211332c3a063e1bb0f88f45f8f1a81dce9cf305ca7a283663bca6fa3bb01bec32f374c8b8b7e66
SSDEEP 192:sxRqR0bz/fsgsIyYhRzoA8p4R/g6+WNIY2kNcfGxIgDMJ:sxRqcz/fsgsIbMc/5IFQk
TLSH
T14632A715A928B93B9CCBD21DFB667F53D7FD5032A0901E48A6FC9A1C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7049f284-4d86-4015-9150-f8deb754998d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7049f284-4d86-4015-9150-f8deb754998d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 531a2b60b2db18708f48750d77c003c6e9429d43a6925632dc285eed97ef5c72
MD5 edb26c2ab4ffe23fa4d162b302dcebac
SHA1 226abbb11c6495863d4c27b13d973eeaf92a0127
SHA512 36cad3936f5d2330ba9f29460074578485229ca44c8a124c93cd32ba01d563966819f057bfbe6ea81de101b6db0b70218d066cb08bd656b49cc8b5f733687a49
SSDEEP 768:U/UxvxjgC+B3cpvrYgm1rX9tDmGA5b65Q92RQMPb0Fj0O:BZj3+B3avC3AF65dQjFQO
TLSH
T1F703CF36EC90AEB39CB99680374BB35AAFF84573C1C551E049E96E0D06C768C530B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d45cf1aa-f1f4-48f8-a4ff-f293fc0231a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d45cf1aa-f1f4-48f8-a4ff-f293fc0231a1.tmp
Size 39KB
SHA256 3ea6152af4276be0378a6c7d2c6f4b23d70c15f015e0307d0568f5eae5074d49
MD5 2f1eb66aab9a130f624a17d911229a1d
SHA1 511091632da23e51f76eda75538331fc07547a88
SHA512 fb997f1167cd5848a874fc0f188eec9688dbf2eed60c353210c7137734bda16f8e64664a43e0d98e31b41a8f0b18e32814cede3f4a57d4b6fefa7191d35eaeef
SSDEEP 768:W/UxvxjgC+B3TVrugm1rXLZAFDmGA5b65Q92RQMPqCFj0O:LZj3+B35nPAF65dQSFQO
TLSH
T14B03CF32ECA0AE73ACF996803647B39BAFB94173C1C955E048E97E0D05C768D430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c121cd-48ba-4026-83be-c3366211de44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5c121cd-48ba-4026-83be-c3366211de44.tmp
Size 35KB
SHA256 5c2fc4e2a70cd0cc28feeefa049e225143b9e2cd6a880732b3c59e24f9351342
MD5 f126d020d17439cab09c88ba423b9a30
SHA1 64cbab298ac2a85be19e42ebd832ee8b81a84165
SHA512 76a6f4ddb201b8e59aeca5bb93884712847890c7a19a9e94b70e42feba82b188e0903bc9fcb1f8d7fd26317a13bc5671fb5870002af7ccba44236527d108fc31
SSDEEP 768:5v3uzIgm1rXLZAMDmGA5b65Q92RQMPbC5aTZc5HKLi:5v3u50AF65dQRMYqW
TLSH
T18FF2BF31ECA1ED739DB996C076477247BFB49223C5C8469094DABE0C05CB6CE134B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b64597a-31eb-480b-acde-bdfbc7bc419d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7b64597a-31eb-480b-acde-bdfbc7bc419d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads