98c2aa45af3dedd5e772b52baddd76477859014a40eb77c9f896095c25310d2f

Analysis

user interaction
yes
max time kernel
78s
max time network
81s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Zyntr3x Macro v1.2.exe
Size 8.9MB
Sample260701-1bm6msgw2t
SHA256 98c2aa45af3dedd5e772b52baddd76477859014a40eb77c9f896095c25310d2f
MD5 af3ce8c886c770e2b239d26454bc8c53
SHA1 9008fbfe874aacef027c89a6f2186f7254a7b3bd
SHA512 025bedd7f0343aec85db238efae60b7f04531c876d2eae8bb27271a5e10ecdae1cb45521dbf1184c15344b58c68e9f436fb64c64d2d4a911b7988a99832c632f
SSDEEP 49152:wdMSmbRpg/Kl140f7W6GF9FM6m386VppNd1nGhqqdHN+9b7hjR7ZteeN3CXCUZ8z:h1reZj8W1yiNVw397DSKXqynLLZyI
TLSH
T15496D5216A5F996CD08BC475834B8A724D6130CB0B35B9FF449896383F6EBF46F28359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Zyntr3x Macro v1.2.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5816	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2608	Zyntr3x Macro v1.2.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 2608 wrote to memory of 5816	2608	Zyntr3x Macro v1.2.exe	88
PID 5816 wrote to memory of 5204	5816	msedgewebview2.exe	89
PID 5816 wrote to memory of 4076	5816	msedgewebview2.exe	90
PID 5816 wrote to memory of 4076	5816	msedgewebview2.exe	90
PID 5816 wrote to memory of 4076	5816	msedgewebview2.exe	90
PID 5816 wrote to memory of 4076	5816	msedgewebview2.exe	90
PID 5816 wrote to memory of 3064	5816	msedgewebview2.exe	91
PID 5816 wrote to memory of 2616	5816	msedgewebview2.exe	92
PID 5816 wrote to memory of 2616	5816	msedgewebview2.exe	92
PID 5816 wrote to memory of 2616	5816	msedgewebview2.exe	92
PID 5816 wrote to memory of 5976	5816	msedgewebview2.exe	93
PID 5816 wrote to memory of 5976	5816	msedgewebview2.exe	93
PID 5816 wrote to memory of 5976	5816	msedgewebview2.exe	93
PID 5816 wrote to memory of 5976	5816	msedgewebview2.exe	93
PID 5816 wrote to memory of 5976	5816	msedgewebview2.exe	93

C:\Users\Admin\AppData\Local\Temp\Zyntr3x Macro v1.2.exe
"C:\Users\Admin\AppData\Local\Temp\Zyntr3x Macro v1.2.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2608
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Zyntr3x Macro v1.2.exe" --webview-exe-version=1.2.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2608.5664.2633437524901250028 /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5816
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView /prefetch:4 /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x160,0x188,0x18c,0x164,0x194,0x7ff908485fd8,0x7ff908485fe4,0x7ff908485ff0
    3⤵
    PID:5204
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView" --webview-exe-name="Zyntr3x Macro v1.2.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1784 --field-trial-handle=1788,i,15882826239412842637,7134268542395613026,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e
    3⤵
    PID:4076
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView" --webview-exe-name="Zyntr3x Macro v1.2.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2184 --field-trial-handle=1788,i,15882826239412842637,7134268542395613026,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e
    3⤵
    PID:3064
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView" --webview-exe-name="Zyntr3x Macro v1.2.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2304 --field-trial-handle=1788,i,15882826239412842637,7134268542395613026,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e
    3⤵
    PID:2616
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView" --webview-exe-name="Zyntr3x Macro v1.2.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3396 --field-trial-handle=1788,i,15882826239412842637,7134268542395613026,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:6369d1fbf8a7908c7f6bdf224b992b26be08681e /prefetch:1
    3⤵
    PID:5976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0899769cd9b206030a56fbf69c63ac80238aa8ec38b70d5930a935b7f9431a46
MD5 bb91528f5197fb3247ddf0fe9cfb323e
SHA1 be6f85b7823e5121a1def33bfaa323f248864de5
SHA512 63000cb88a1fdf25be95545955c4bfb55cf4ead80fda629907760f61c929a6bebd77b824dd3bced09bc05c3bc95578c6b492a668427ca490451c9b276313c8cd
TLSH
T1CBD0121773410178C434B933010265880500C25B800981019428852D1A0C4540902452
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 09c3a7d5778d7a40315a17e4c5fc4c376f25c4505396841244743731500f06ed
MD5 9c7a25ba84b46aff0bf1bd91b8e8e9a3
SHA1 0de05b7b8a2d99643a1f89c9f4a6a031ac0448a8
SHA512 dbd410cb48f24e8fb445b1d1c768e225b33467ee2780e349d4eaf16a02ccfb6fde5fa6c5686dce2d2cda417a5cf26300f58d1bd44ef3376795051a89494be3a6
MD5 SHA1 SHA512

Submit Download

213f1745-fd53-4d34-aa39-aa1e6edc9e42.tmp

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\213f1745-fd53-4d34-aa39-aa1e6edc9e42.tmp
Size 6KB
SHA256 389594296351f99c3909526b22c556f19655753f61b10fb54dbc7a836af8018a
MD5 f205b0cf0742e6b29cd2f64c8b020756
SHA1 e8a6c52cf21af1d9a42bf629d9d26bd4bb98f67b
SHA512 1080c5f780ecd598d8672aa6e80bab85d2722e970ddb4234bef560a53e5090f41be626dd8edbc07c9242f85531eeaf554bc46d56f7ca967b0689bf5c39948172
SSDEEP 96:stA/dTPzDnb9WksJo5h16Z0ds7/x+6MhmuecJxgS1ejepK+gsVuk+28XM1C7K:st01ENondsV+Fdx/QjDGVV+G6K
TLSH
T129D194025E24797B4CC6F51DBA29BA17E2F5607271951D58EBFC8A2C08DB6CC6217C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 4c24ea99da878ff88c3814d112acb96892039b3ec9481953377ca28955ed203c
MD5 bd11bb9bd9d6eb71dcba53b56929477b
SHA1 f9c59dbbc756ce5384012b6b90f0c94872afed3d
SHA512 6dc57293d2122d0539a0fa96674179884fa6d30e25c5edfc614d39f7ce4f99c3c19eb186d813f862e21a7a54f4029c1027da0cf3930893c30135942c37e60ed0
TLSH
T128D04C51CB5411F5C3849FF15DC795547B7C4579E11B1D054290F1B295613D3F515138
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592e4a.TMP

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe592e4a.TMP
Size 48B
SHA256 9ed8d202da80e488ebf753231b44b12aaff4bad9d8cadfa94fb0bb9a215ac589
MD5 77f9dce6365002f040aa585c78bb957e
SHA1 7733d58f0362fedcf5bc5923df939c4ae3e9dd5a
SHA512 7aa2588f619545467760c9e922542e4e05caf6574464586d1fe174d8c73cb63805be68ca657ed4acd197ca168139fd07adcca7fa70afc72bbf8a7747e6f1e2ac
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5f3d5890-6c59-4c8e-834b-0796e9d8ca94.tmp

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Network\5f3d5890-6c59-4c8e-834b-0796e9d8ca94.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a036c.TMP

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Network\Network Persistent State~RFe5a036c.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Local State
Size 2KB
SHA256 9a8eade086c2f8e454e6f437952f78771783dff8570b4130f8c462c441444172
MD5 2bfa416e4c8d9876c842d5895f9e1222
SHA1 6915da7b9cf0818db21e31b6907e2190b90b6ceb
SHA512 4b8f2abceca7d1b91d904929256b513b3b5ff4a5507e5aefa91f1dc75457b8abcb431e8505b63be1144a4096431d97270869ecdf5f277a0efc6af3f5941c9dc3
TLSH
T13C5194736D44BA379AA296197D463E23CE7590B4FF021F14A5DC0B0805D755C2397C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Local State
Size 3KB
SHA256 465ae5dae8f80437e5b46bace4a94c9386a9e59794a6d6983ddec992d911b1fd
MD5 0d0a2a1a7af4eaf8b77850cb38ee116f
SHA1 5d712ec755a811ca1a2beb0750575ae028826408
SHA512 1a634db56f3670d7ed0e1970796cae97ae59a8397bdc240352c5639e34e3cf49be5c479d00e91197aafb7b24de8a4e9157f1a19a61027bceee3737dfefd2ac14
TLSH
T16D71A5776DA4A9374EA2DA097C863B06EBA45036FA857F58D5EC0F0C01C72982393C22
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Local State
Size 15KB
SHA256 b7834e36b12dd2e73dbd665affbd282848b26eb3f36e2fd9d0931ce7626b6c62
MD5 7a61d7344f42e38fdda24b9d727a678d
SHA1 67344f740b347e63297cf98059d5fa1e1f7baad6
SHA512 81bee659376bf1a43aa98ade53df2fa401ba8ba59f6547f437d30cb58a5d290136cb5e05937f9d7b4f7bfae8daaf5729b54ad87850f3584f3aa25657801d6802
SSDEEP 384:Wsrv+89zHqlDNP9oid6NBSqgIVRiAWIxBNp:Brv+4UNbdQ93TWIxBNp
TLSH
T17672AF33E928B7379DB2D909B4467E077F7860A6E6C24A64D4DD0B8D818B0D92347D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58dcaf.TMP

Path C:\Users\Admin\AppData\Local\com.zyntr3x.macro\EBWebView\Local State~RFe58dcaf.TMP
Size 1KB
SHA256 2a4be5c962953f73095bdbb4ce2da20bb27ae749c2b68027f965106b6db6f36d
MD5 c5dbc1da59cefa5b9d99afa3487bee30
SHA1 54bec6df00550f33db3aece67c545b44d3188a98
SHA512 b38928e64db0e050f69c999c5870b3f8f32a2309d1b6e3353fe3a203be88060a8d8fbc4bb329fb95c13168be6258658bd68b3f9b5f07a52a564ce88be8f4695f
TLSH
T16D3154B3EDD46B32BD91A21A35427E979F205079FB018F08B1CD87091AE745CA6BBC35
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4076-205-0x0000017456300000-0x0000017456416000-memory.dmp

Download

memory/4076-219-0x0000017456300000-0x0000017456416000-memory.dmp

Download

memory/4076-233-0x0000017456300000-0x0000017456416000-memory.dmp

Download

memory/4076-26-0x00007FF92B060000-0x00007FF92B061000-memory.dmp

Download

memory/5976-206-0x000002126D060000-0x000002126D176000-memory.dmp

Download

memory/5976-65-0x00007FF92B060000-0x00007FF92B061000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads