hxxps://grabify[.]link/3K5KW4

Analysis

user interaction
yes
max time kernel
29s
max time network
33s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/08/2026, 10:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://grabify.link/3K5KW4
Sample260804-mmtkxatvdz

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303133732183276"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1131776342-1023621610-2767477260-1000\{21B8F2DB-45EA-4CE9-87E9-63D047570932}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 4908	2284	msedge.exe	82
PID 2284 wrote to memory of 4208	2284	msedge.exe	83
PID 2284 wrote to memory of 6092	2284	msedge.exe	84
PID 2284 wrote to memory of 6092	2284	msedge.exe	84
PID 2284 wrote to memory of 6092	2284	msedge.exe	84
PID 2284 wrote to memory of 4292	2284	msedge.exe	85
PID 2284 wrote to memory of 4292	2284	msedge.exe	85
PID 2284 wrote to memory of 1288	2284	msedge.exe	87
PID 2284 wrote to memory of 3200	2284	msedge.exe	88
PID 2284 wrote to memory of 1288	2284	msedge.exe	87
PID 2284 wrote to memory of 1288	2284	msedge.exe	87
PID 2284 wrote to memory of 3200	2284	msedge.exe	88
PID 2284 wrote to memory of 3200	2284	msedge.exe	88
PID 2284 wrote to memory of 3628	2284	msedge.exe	96
PID 2284 wrote to memory of 3628	2284	msedge.exe	96
PID 2284 wrote to memory of 3628	2284	msedge.exe	96
PID 2284 wrote to memory of 3080	2284	msedge.exe	99
PID 2284 wrote to memory of 2020	2284	msedge.exe	100
PID 2284 wrote to memory of 3080	2284	msedge.exe	99
PID 2284 wrote to memory of 2020	2284	msedge.exe	100
PID 2284 wrote to memory of 5332	2284	msedge.exe	102

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://grabify.link/3K5KW4
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdeeaec188,0x7ffdeeaec194,0x7ffdeeaec1a0
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,7187054858745589111,10957352967244978999,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,2380053964241618477,969315932298415194,262144 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,5094013092013163966,2233839634740205068,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,4206564109833961268,17613102340489924064,2097152 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,544251586376822406,7713152824849224210,2097152 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5216,i,12395951860447896806,17222785247346909722,2097152 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,9685117491638228437,12365879523299442507,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,15032113863583385280,12513125845144704075,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15677785537826036590,4124314045953580345,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15677785537826036590,4124314045953580345,524288 --field-trial-handle=2256,i,15358142913773952524,16734260715178227752,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:5332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9cbd4a51-90e7-4b62-a749-00763c57727a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9cbd4a51-90e7-4b62-a749-00763c57727a.tmp
Size 24KB
SHA256 406936eaa8a2324c26da4e6cf826b749ebf91d6bba05dff94da04fce345c02d2
MD5 9a8a14d2df786170c285d1646e51f433
SHA1 d549aa4860bfdfe6e002b6842654c17aeb2605e0
SHA512 bd3a830cace6cb39ad03216d5961ec835f4da82d624135144f89eaa34c430889acdbf34a4ac58bda02a3d3382fd9ba8bcfeadcdfb739cbf688e977b7761bc3b7
SSDEEP 384:nViF9CcmyWCs3sNX8TUNTUlI4kGn7fWBDEwuitfCUGZQu0amJcMhWtPfOILty/7I:cFccps3kwgeUGuqOWpfO2
TLSH
T119B23A36ECA5CAA7ECD79BD9E74A3603DEE04163858C9AE4DAD85D1C00DB1DD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8365d8597d396643eb3cb27ae8751c52f3b1ae3e25576cd2bd50becbaaae5ffd
MD5 b16e94a14013394e81faaffb1edb0866
SHA1 095be96d92aca0f788caa8c464e88fe0093428bb
SHA512 d08bfded37a6166d23fc97a47902156684e9e48ea9630c13d74b30f201e0b1cbdefd310a06a35543c33ad6c261585c043ccdbbaf6a515ba32c8540521104e42a
TLSH
T12CD022223B4AB000E2AB4132E2228740236908A128824604A218C86C4EA00C022C22C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e4479a36b7b992bbec7177088f2e15db8dffdd7e78e85279d2c83088a29343e2
MD5 03578bb8b6e22240ff9f962052e3bfd0
SHA1 e88cfa2a99ba4cde156cb76df3c1e5e4d0f31844
SHA512 14b486114c608d9c481d03eaacc4af4e96cd2250b09e5c1fbb1fe214e6bcbd9291efe72cc52c99c5a4d7d0533399a4d773de86fc6cc9233bb147b5ebe349bec8
TLSH
T177D0C0333F4AB000E2EB4132F363C740337D04A12C824604A25CC87C4EF00C022C22C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 68c728343761d459bbff10f377afa157b60fc0e1c6963366e6bc59c5bd93f42b
MD5 f4385add5db15c41d055356caf2f7586
SHA1 6974f9c68b09b9bd176115648e8a96c722fd4099
SHA512 c6b3e575880546d0f2855a1dd5387bc98d5e5627241d45318df6ac442d81451334db8409d68ceff0a4acc99449713313b1155c2918207fe4c33dbbc51ee0e459
TLSH
T142E02BABC831BC3719FE1B5820904F05EB6423172741855F7B3E920D8FB423712928AC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 97b012fdae6731df7ea18132328d67a0d389271e232a50059d3aa8ab956077e2
MD5 79a5e54f2de0e165deb337b9938abe33
SHA1 c481163a096c4d7e7f0e03730c421af6f632d158
SHA512 79a6e231b46b77c10cf41cfc6f267365f2d1edb26586267983d5042a78b9bc0bb8a4377d74265605ca27c21974082c8f1d9daf66db643ce71561d0e6b5ab03f5
SSDEEP 192:sxZcRhyMqZjK1Ml8Mk6/fRsm1aCZtszodpbeDHW6+WNAOB//YqB4WIgjNYJ:sxZcOM6/fRsm1aEtvEHbZ/Hji
TLSH
T1E262E8166A34997BCCDBD209FA457B53D7F9517392804E54AAFC9A1C04E7AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4fae41ac07de80a5387e4c6f1fd133fda3ec1b45fcfc02420d6e856458db08ec
MD5 430ec2a6bc72d0c5d8f5f56b08048452
SHA1 53165cfafec7ecb41588b0bdaa0dbf9fb664f131
SHA512 d5415610aa98f24c5d8968ef7dee8f04613277b5d6dd07b78ace414baaf35548a01a384bd61021749eebc1d1a73017d925e1d5f72782c90b793730df487235f3
SSDEEP 192:sxZ8RhyMqZjK1Ml8Mk6/fRsIaCZt2zodpbeDHW6+WNAOB//YqDo2WIg5tA3NYJ:sxZ82M6/fRsIaEtNEHbZ/S+i
TLSH
T12072E8556A34997BCCDBD209FA45BB53D3F9507291904E44AAFC9E1C04E7AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 651d18d7abaf1b4f4507289af79e93ffe95d6e230d9c89fe5a8aebdede26c27c
MD5 9dd7ae8c57ce3535e5c2baefe9ca8bf8
SHA1 42ae411589278d4b5e0d59c5b7cecdaffcbff912
SHA512 d3970861ce02bd450fc80ac93673893c9c190b78c5522e34d9398cded070a8ea2caf937ed0e05f9dcab65c8f17b0460350ce2b7ac68e6d0f0399bc5ac40ac43c
SSDEEP 768:+IM2tv5WvF32/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4sLl2cNV9rolDWr5ljo:+IM2tv5WvF32/u1ja1sLUcV2lqrc
TLSH
T1EED2FA3B680CCB7E4F840E9CDC265F976ED4018BA698495487FA494C03C77EB522B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 595847b3189caad8e3df190588ea283a9d4f0a996af583c80f9f0965abf354d8
MD5 3c2dd350f57cb63f6b5df2fada0ce66e
SHA1 ce2652a285255f2d42ddd7480982fb82b6860472
SHA512 ee23cab6af37c3fd85aa5a9500067275962336d7de0d49532201c744b170d0d9392ab9ebbd3b97d9554dbdd1d173908be4717b764af90812926c635d2c6e66b7
SSDEEP 96:KMkAKd6OezWKEADWcKHqy6UgKhCK7+Ko8iq68K3qYKAKjai6oIKp+SaUKXquWJSn:KrFjPXY9/gfrWThFLh/DNTVllpBd
TLSH
T178B25E56303B12023CBD2808A7D6D6779E8231B33119E66F7BAC14A64E67E125DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a560f17414556c61892e4f1cae76c026c02dd21b72733f3672f5558c75c3e15b
MD5 39b2bf738d39253df66eea4d9965bcdd
SHA1 8b81beaa082052b9c99c710b09209b8699f1bcd4
SHA512 3255e2a85d350806c4ccb4a915d7e39152c81861fd2575e151f64e330211839c865d7a39a0941e06d69bb6d6ec28f8e26ab698fa411944cbdb896d3893cce967
SSDEEP 384:nViFiZcIM3sNX8TUNTUlI4kLn7fWCEwuitfCUGZQu0amJcMhWtPJODWNv+xQAiWu:cFQM3kwgQUGuqOWpJODa2xQAx2P
TLSH
T12CD26D36EC64C667ACE79BDAE74A3602DEE0816385CC9AE4D6D96D1D00D71EE030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 fb86ed5a199d6921b7ff133e4a04a4cb18d2430f28170846e97c911b3afb5caa
MD5 038416876300ac24521ea8af45d66a5c
SHA1 b5c98846483687d3d07ce57a6fbc4e2b63b967fd
SHA512 d0f2d155c762c497ba1abcb15a804b0c6c0dc9ab67c71c2a78fa6034741b48b5a69b78ad8442c7bbad5c811ae0fc862291e3f6254d0a17c3f883ebd3ec0d1db2
SSDEEP 384:nsiF9CcmyWCs3sN78TUNTUlImkrn7fW8q6itfCUGZQu0amJcMhWtPdOe4KV8p0pC:XFccps30wgqpGuqOWpdOI8p0pLW
TLSH
T195C25C36EC55CA6BECD79BD9B74A3603DEE0816382CC9AE4DADC5D0D009B1ED430B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 866dad106b792bfbc246085beeaa6ffdbf0599fc902b3d90a3e9bff62edccc6b
MD5 1c1825ae4f2961de8c51e414e64e1953
SHA1 49bec338ac3210af823b60a790948678a18104bc
SHA512 1df0ef65273775cb4d639f6cf9d66f0f8158ebed1d0326d6b18b4a1990507a09ceececacffb15050abe70c51beb5a985fe35094bf0cee557a1ca88530dd8797c
SSDEEP 384:nziF9CcmyWCs3sND8TUNTUlImkrn7fWmkmitfCUGZQu0amJcMhWkWOe4KV8p0pLW:eFccps3MwgidGuqOWkRI8p0pLW
TLSH
T15CB25C35EC69CAABECE79FD9B74A3B07DEE0416782D899E8CAD81D0D00971DD0307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c511d15e098303f9a1afedb2d05f00c391bffc94902a33c885beddcb25b19831
MD5 249419a72bf64f5328cc6da79bbc68ff
SHA1 f2490ec83167deb0c17f673ff341b01466c29580
SHA512 5d51d1dfd52c18b032c217caaeff68727c2cc21fa49eada2a79ee82e0d404bc5023ef60857258c7da0ec8fdd8511fbd94024de574262932a6451c65bf21d61db
TLSH
T18B412B5DAAE91148B3B76E5A9BF3A46E487FBD732E07945E00110E4E4763A40C872733
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads