hxxps://tammlinevisionaryvista[.]co/verify/29c6f734-01a4-4471-bf72-a0cb23ce4104

Analysis

user interaction
yes
max time kernel
90s
max time network
92s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 08:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tammlinevisionaryvista.co/verify/29c6f734-01a4-4471-bf72-a0cb23ce4104
Sample260803-ksmcnseq51

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT. 1 IoCs

phishing microsoft

flow	pid	Process
174	4512	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4512	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302207355991956"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{8E53A71C-63D9-4C3A-A907-63C15F955E74}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 3940 wrote to memory of 1964	3940	msedge.exe	86
PID 3940 wrote to memory of 2300	3940	msedge.exe	87
PID 3940 wrote to memory of 4512	3940	msedge.exe	88
PID 3940 wrote to memory of 2300	3940	msedge.exe	87
PID 3940 wrote to memory of 2300	3940	msedge.exe	87
PID 3940 wrote to memory of 1576	3940	msedge.exe	89
PID 3940 wrote to memory of 1576	3940	msedge.exe	89
PID 3940 wrote to memory of 4184	3940	msedge.exe	90
PID 3940 wrote to memory of 3352	3940	msedge.exe	91
PID 3940 wrote to memory of 4184	3940	msedge.exe	90
PID 3940 wrote to memory of 4184	3940	msedge.exe	90
PID 3940 wrote to memory of 3352	3940	msedge.exe	91
PID 3940 wrote to memory of 3352	3940	msedge.exe	91
PID 3940 wrote to memory of 5048	3940	msedge.exe	93
PID 3940 wrote to memory of 3868	3940	msedge.exe	94
PID 3940 wrote to memory of 5048	3940	msedge.exe	93
PID 3940 wrote to memory of 5048	3940	msedge.exe	93
PID 3940 wrote to memory of 3868	3940	msedge.exe	94
PID 3940 wrote to memory of 3868	3940	msedge.exe	94
PID 3940 wrote to memory of 4944	3940	msedge.exe	98
PID 3940 wrote to memory of 4944	3940	msedge.exe	98
PID 3940 wrote to memory of 4944	3940	msedge.exe	98
PID 3940 wrote to memory of 4740	3940	msedge.exe	99
PID 3940 wrote to memory of 4712	3940	msedge.exe	100
PID 3940 wrote to memory of 4712	3940	msedge.exe	100
PID 3940 wrote to memory of 4740	3940	msedge.exe	99
PID 3940 wrote to memory of 4408	3940	msedge.exe	102
PID 3940 wrote to memory of 360	3940	msedge.exe	105
PID 3940 wrote to memory of 360	3940	msedge.exe	105
PID 3940 wrote to memory of 360	3940	msedge.exe	105
PID 3940 wrote to memory of 632	3940	msedge.exe	106
PID 3940 wrote to memory of 632	3940	msedge.exe	106
PID 3940 wrote to memory of 632	3940	msedge.exe	106
PID 3940 wrote to memory of 4152	3940	msedge.exe	107
PID 3940 wrote to memory of 4152	3940	msedge.exe	107
PID 3940 wrote to memory of 4152	3940	msedge.exe	107
PID 3940 wrote to memory of 1976	3940	msedge.exe	111
PID 3940 wrote to memory of 2928	3940	msedge.exe	112
PID 3940 wrote to memory of 3044	3940	msedge.exe	113
PID 3940 wrote to memory of 2876	3940	msedge.exe	114
PID 3940 wrote to memory of 2876	3940	msedge.exe	114
PID 3940 wrote to memory of 2876	3940	msedge.exe	114
PID 3940 wrote to memory of 2244	3940	msedge.exe	123
PID 3940 wrote to memory of 2244	3940	msedge.exe	123
PID 3940 wrote to memory of 4956	3940	msedge.exe	125
PID 3940 wrote to memory of 4956	3940	msedge.exe	125
PID 3940 wrote to memory of 4956	3940	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tammlinevisionaryvista.co/verify/29c6f734-01a4-4471-bf72-a0cb23ce4104
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0x7ffd9b02c188,0x7ffd9b02c194,0x7ffd9b02c1a0
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,1066887808347355053,17873094664279933049,262144 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:2
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,2311632092705324732,18188627394303863381,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,14493689954601330442,3104221077779665226,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,18071233373536320296,3568808632565939267,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,7575421942114959077,8269022503374987849,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,575044347994544602,17223947527958752676,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,18209925547531373672,3435125398189345024,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:2
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4996,i,7338151933002039902,467506502609697538,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,11033054130927765854,16314930776242110227,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,13765505479155056417,11928370068422337169,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,579624355986029158,2028617029393778912,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,579624355986029158,2028617029393778912,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6088,i,7057325260085412139,1428797518999608094,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6364,i,11655708568124828895,14199272273434381245,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5176,i,11661363264350428900,16947448011234951264,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,3597341303978643792,4493345268698973332,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,364228733905131504,13602521273456213121,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,2017019772393909208,4843514929879717262,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6632,i,5648325595883009673,4254119675824162583,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,15369156193868184657,7277583167360338331,524288 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5664,i,6166380208338498580,15996732939903522078,2097152 --field-trial-handle=2832,i,5065132747322172436,2704871664770890709,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:1
  2⤵
  PID:4956

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03c9714ceda41208919b91db8014de24ae37606ed2abc96a2531b3653937df48
MD5 8c2296de8b61220530f453b2f30415dd
SHA1 2c66c88bc6a0f8267af3c1881fe9195ca1582177
SHA512 c741a1ee72d19a8af3a3823ca6df21b2e3afeeede73da7c80eb421ce9f7370fb162d00a8565078ba3856a8ccf78493a4b12f92955afe287b59ec5f2dc6911402
TLSH
T1E7D023307A3671C0C21E0030E4110B40236E40B230CF43476194440DADB40C1D2DFEC7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e1ba35951d20f7e590d13818ab70f6a15504fc8b9e6bf0282e069167fdabfcf1
MD5 bc7e708c2bd07098f99204dce134208e
SHA1 163e0cb345a5dfd1dc31167efc883a3a21bfd6de
SHA512 afcf2fa8f6d12e14ee8548ade7c290a5af1c5921b570b9b24e04782f92d8099c6c04ebff403e5bfd1b02b68e4c3349991021f119b806165070b21b742c10f72e
TLSH
T117716239105005F1FB9203B353C269C97CB1F3FAFAA3FE56E1699DB95B06781C619144
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6c3a3789b361249b092bbc47042c6be2150a0a11350bfe7e52dc7d4ab1e4739b
MD5 c9bc49ceaa4564899b7c54c1ce2c9f1e
SHA1 51099a7690bfed006292822f387f96b1181fbaf5
SHA512 d81e7980544cb447be1c7ff61a7caeade98a0c56004c4822ef3465c454238fe3f1d442faac09fa7fc365672dd6283eba044be471c8b13b62c54595620e9f97a2
TLSH
T1AD4185F783E1456EDE11A6F4AA14EE2BDF1D0511832C781A86D4BE27D3B30B1E11265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 df058aafb43d286441a4be89cf997a8451365782a736c10178849a731adba4b6
MD5 c7a4bb41711d07300ef02b5f4d8dc832
SHA1 b5537543e946eb1722b75360baf8f847c1bf77eb
SHA512 f7769e45efda8b8497bea08e4b6223f1aa0f3305caa0c83b87ed8c7e57271668f31df9171c8cac3a4bc3ef179c4250ab6948843aa29e930d3b9adb7c881a662f
SSDEEP 192:sxZ7Rrk9/fOs3I7hIdpplVHW6+WNQ6U/YzS1qBlIgrJ:sxZ7q9/fOs3IeRHbi/Mf9
TLSH
T12F22B7126E28A93B8CCBD309BA55BB13E6F9103291D11E58E6FC951C05E7BDE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a194ae17faf6dd0e6c2962579e29e738ed29710b9164bd137f3f5eaac9c9e995
MD5 8ce4415dec103e3a0b77006872ccc132
SHA1 7c17df92ba13abe1c29992bb956f05e2f866d86a
SHA512 f23f5e8be50fa6139e6ee9b6f30d66d8453cf66ed4bca434b4c55c5fbac9b1a46852eab554444c34eda5c42efea8f19cd0bad995d2807d366887d2c9ccd76a09
SSDEEP 192:sxZ7Rru9/fOsAAOqhIdpKrQRlVHW6+WNR+nf1fKmXYzNPqtlIg5EJ:sxZ7c9/fOsAAObbHbO7Xb7O
TLSH
T19242E852AD7458778CCBD209BA54BF17E2F9503280D04E98FAFC9A1C05E7BDE620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9ef61f963b351a2de3c0b172bd3c092d716f4021d3276d95e15d9830577a7b68
MD5 12e7c8305563f1d7b495c8d5477740eb
SHA1 1b63a11e1e73c1a65f85d06ae804e06f8da718a8
SHA512 ac383f222c9b2c0d5699233c79444285cac201156b13fd2c5026ad72a72ed9fadbdbf7ea8f7de5da2203f65ef64545ae3ffdd2f5badcaf71055cb372ba9089f3
SSDEEP 192:sxZ7Rru9/fOsAAshIdp40RlVHW6+WNQKmXYzA8qBlIg5EJ:sxZ7c9/fOsAA9tHb0XlfO
TLSH
T1E432C852AE34A87B8CCBD209BA55BF13E6F9103291911E58F6FC961C05E77DE620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3a53d89d7c472e7360543c23ca19e983397d1f1a5ce54298c5202f1149674bc2
MD5 3e223819a119567f750a74a45eeb96a5
SHA1 c552fbe204a18a07a508c8135eae94d891882313
SHA512 d73e5c75e70b7dc2c0c4b28655d58ff748a91ebb6b7f8fb765dd98e244285667dc4ebda3d07a2649d53b9ba6c24a79917ea3379ff735527f0cea9281b24c2baa
SSDEEP 192:sxZ7Rru9/fOsAI7hIdpLelVHW6+WNQKmXYzCMqBlIg5uJ:sxZ7c9/fOsAIeyHb0Xffk
TLSH
T11A32C812AE34A97B8CCBD219BA55BF13E6F9103291911E58F6FC951C05E77CE620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ce26111374793680aaff73e3800ff15f82f943aa2eaddd243de01a01d913b1d2
MD5 07eecfe799a3538accdcd08b8f6ae98f
SHA1 036be4e126b3389653181441e4f3010890506a1f
SHA512 e67aa3897fdde045f7ced35b876e3b78b41d2bc61126b3825b05c9b35dd6af5c281caead131fb48e7dd0c43d074c209e742b49ddd7eb5dd0c148ce963d9cbadd
SSDEEP 768:aMk7u70Wvqica8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBXroyLOYW6:aMk7u70Wvqicau1jai5LA3BE8W6
TLSH
T13DC2F93B740CCB7E4F801E9DAC566F977E9802C7A6988D4087FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 537681a46de1d87fc3b762e367228c1ca8941bb35abdc7ff6e60992818d6b705
MD5 dc8bd8751f605e855fcf3bf997d60090
SHA1 186f2b85dc1be8f4c1edf7564308a260b18ec5cf
SHA512 f033d59485cc80cf022630522a7837f3bb5f9b3ea3c34eda1ccc79c703ba277b3df73f5cd53c0288be82db1ecd68f12b5f42699bf00055a5241a84222223fa46
SSDEEP 96:KIbCKc3/WKQouWF8BVr/7gfH6z99gKV19jgxN9qDL+YKz9:sSdWF8BVr/72H6B9J19juN9qDw9
TLSH
T1A2919856303B06413CBEA98CA2A685364E4231933856B46F7FB800664E6BE174FFCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593c25.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593c25.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 62e77d5a9e7f8b9ffb59c247effb55f94c368aa0daa3aac64f7333bf6eced37b
MD5 c3115b5c24a2b80d3629fee8e94fd174
SHA1 7e65af223864f3f78bc4f723914abf19fee8b2fa
SHA512 1b34cb73368fa84eb46581e638d63f87b9962d8338ace6c6c415e164ee0b942fd08e6a09158148187b2c7aafbf267df6f972b089e6002aa6cef16dc6ef431240
SSDEEP 384:MBZcIhsNe4jbXAKEddm1Q8SO6HlytEDq1tWl+:MJh8sPmQ8SOoy6DqjWl+
TLSH
T1BD928E305C746D3B99A7B142F4CA3A035FF88127A7D46FD4A6EDBB1C05DA2A9130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bdf2bdc5b83f26fdd5e0961f05de1c50289605c5d281bf6f68f19540fed6dc23
MD5 b3ad0b227e61f404a51219d9349339db
SHA1 b6fbb2a63b7e7ecbaac71491a6e1a1c1ec36e97a
SHA512 0734150574702df7b4151860f6ab6494ea45ba79baab04452bf0c99ddbc086657b0b87d52f9f7dc1e6e5cb01ee74a854a8fc40361545330e0145ac78ee26cf81
SSDEEP 384:NAiFiZcIfIsNu8TUNTUlIlCjbG4AEddm1Q85O6HlytEDq1tWl+:NbFQwzwga1FmQ85Ooy6DqjWl+
TLSH
T15AD219F148E7993AD9AE6743E77D2D024EFCC163B5849A94B3D85A1CCC961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f46c4f072349f484f2da137e0b24be819b7107c3be98ea16b44a41bcee69cca0
MD5 89417317e252b52106f6b7ae7456d628
SHA1 ee45a680e6ad79ec4133d57484a6bea9d244e317
SHA512 68098a290a48b5cacdf7b235c21fe567a9f8ebba778e20cee88e9661f9ec765fd362d3b2e41ec309bb7b0fec6f525684450bce4ca3a99263d1f40194063b39c1
SSDEEP 384:MBZcIWsNejjbG3AEddm1Q8SO6HlytEDq1tWl+:MJWx0FmQ8SOoy6DqjWl+
TLSH
T119929E305C746D3B9DA7B142F4CA3A035FF88127A7D46FD4A6EDBB1C05DA2A9130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b8cfbef939abdfec48f19b46fa9a28f2cc2e865f464461698e92f859e76bd55f
MD5 864527f9e6aed3c72bc08e3974662c68
SHA1 ace3507a47b2f3b82926bb6895fcb6a579a581a0
SHA512 5f14f23d25b3de74d975236129d82b2b7138eb77802b860ae01d93af1308ac1897a34250d34fba1758096470a7bd3502c5d68b4313320bef4f12a069142a4534
SSDEEP 192:MONE64BAQmiUyp1gW5GBPKrs+FdGGm1/aDGV9U6:MONE6eAKuWDddm184U6
TLSH
T1D602E934AC786C7B9EB2AE45F48737175FE8113BA6D45F54EAE82B1C00D764C234282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8765b75ee7b78a1a3ec411cf290e8102c23a2d0b9fc2b1fb37f195a3d65bbc23
MD5 eca24a2380e81de30f928d92f6b3c3ca
SHA1 74741946632a952be1bf17dc3f630d49021d4414
SHA512 01205c26b54167afcab735f7bf95eef86dce745f8859a2fedf4e10897b706368e07c0d8811c93b564d18feaccd02fa5e357c61f5c3ee03ff4021075fb8a50f31
SSDEEP 192:aONX64BFQmiUyQgW5GBPKrs+FdGGm1pFE8fWwOqqU6:aONX6ej2WDddm1Q8LOU6
TLSH
T1AA12FB31AC74AC6B9D92B541F4C736136EE5422BEAC46F94E7DC2B1C01EF7AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e6518dbd0b1f2d6db2a8e565654c48c22c2824226395dbeda09402b01d1507e7
MD5 b63bd4129330474234f3ae5702652604
SHA1 fa80fc9cd839e85c6be076f17b104ab8adb1b877
SHA512 38f42642140492ff1576c6d12bce7bf48240658ddcd94fa1f3fd4f3ff1f3d9df260ea79520a451b317c09f0e59beda7e17a6a671fc337e9bf283a611296c327c
SSDEEP 384:1BZcIWsNeCjbG3AEddm1Q8SO6HlytEDq1tWl+:1JWO0FmQ8SOoy6DqjWl+
TLSH
T131929F305C746D3B9DA7B142F4CA3A035FF88127A7D46FD4A6EDBB1C05DA2A9130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 08d4735caa0845d1395941e738645cd93a8f757c9c5303446b4f31a983a58951
MD5 7c6b24b291a7331190fed1b4de83907a
SHA1 0592ca70b805b84b63ae6afb3b67fa3b4af3abac
SHA512 1bc7ec06921bb03659afcf8693d3ce5d60e5c480c1485d1b7c1263ec604ae84c03516f8939a533ad20525fb8f912da98fc1140d39ea9cc9d0e4b7c498f66cad6
TLSH
T1D4412C58AAEE1149B7736E5A9BF7686D447B78762E07D55E10110E4E0A23B00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads