hxxps://dhszo[.]darkside[.]cy/

Analysis

user interaction
yes
max time kernel
116s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 17:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dhszo.darkside.cy/
Sample260804-vqvalseb45

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3076	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303371415143152"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{6345F3A2-5956-47B8-9F93-F9F2DCC7B6B0}	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
668	Process not Found
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 4772 wrote to memory of 4172	4772	msedge.exe	86
PID 4772 wrote to memory of 3076	4772	msedge.exe	88
PID 4772 wrote to memory of 4636	4772	msedge.exe	89
PID 4772 wrote to memory of 4636	4772	msedge.exe	89
PID 4772 wrote to memory of 4636	4772	msedge.exe	89
PID 4772 wrote to memory of 5000	4772	msedge.exe	90
PID 4772 wrote to memory of 5000	4772	msedge.exe	90
PID 4772 wrote to memory of 3484	4772	msedge.exe	91
PID 4772 wrote to memory of 3484	4772	msedge.exe	91
PID 4772 wrote to memory of 3484	4772	msedge.exe	91
PID 4772 wrote to memory of 3932	4772	msedge.exe	92
PID 4772 wrote to memory of 3932	4772	msedge.exe	92
PID 4772 wrote to memory of 3932	4772	msedge.exe	92
PID 4772 wrote to memory of 3736	4772	msedge.exe	93
PID 4772 wrote to memory of 3736	4772	msedge.exe	93
PID 4772 wrote to memory of 3736	4772	msedge.exe	93
PID 4772 wrote to memory of 3816	4772	msedge.exe	94
PID 4772 wrote to memory of 3816	4772	msedge.exe	94
PID 4772 wrote to memory of 3816	4772	msedge.exe	94
PID 4772 wrote to memory of 4996	4772	msedge.exe	96
PID 4772 wrote to memory of 4996	4772	msedge.exe	96
PID 4772 wrote to memory of 4996	4772	msedge.exe	96
PID 4772 wrote to memory of 4628	4772	msedge.exe	98
PID 4772 wrote to memory of 4628	4772	msedge.exe	98
PID 4772 wrote to memory of 4628	4772	msedge.exe	98
PID 4772 wrote to memory of 4752	4772	msedge.exe	99
PID 4772 wrote to memory of 4752	4772	msedge.exe	99
PID 4772 wrote to memory of 4752	4772	msedge.exe	99
PID 4772 wrote to memory of 2012	4772	msedge.exe	100
PID 4772 wrote to memory of 1544	4772	msedge.exe	101
PID 4772 wrote to memory of 1544	4772	msedge.exe	101
PID 4772 wrote to memory of 2012	4772	msedge.exe	100
PID 4772 wrote to memory of 3764	4772	msedge.exe	103
PID 4772 wrote to memory of 1308	4772	msedge.exe	114
PID 4772 wrote to memory of 4660	4772	msedge.exe	115
PID 4772 wrote to memory of 4212	4772	msedge.exe	116
PID 4772 wrote to memory of 1416	4772	msedge.exe	117
PID 4772 wrote to memory of 1416	4772	msedge.exe	117
PID 4772 wrote to memory of 208	4772	msedge.exe	120
PID 4772 wrote to memory of 208	4772	msedge.exe	120
PID 4772 wrote to memory of 2104	4772	msedge.exe	126
PID 4772 wrote to memory of 2104	4772	msedge.exe	126
PID 4772 wrote to memory of 2104	4772	msedge.exe	126
PID 4772 wrote to memory of 2460	4772	msedge.exe	127
PID 4772 wrote to memory of 2460	4772	msedge.exe	127
PID 4772 wrote to memory of 2460	4772	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dhszo.darkside.cy/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff9d66c188,0x7fff9d66c194,0x7fff9d66c1a0
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,5579362657835974789,4484328884616860986,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,8416449562062036158,8185323702204728938,262144 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,17706613133036588224,12276823895317480310,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,10778375816958317774,18147110570974498349,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,8953170705344725957,1790265321123046378,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,10195192972422282952,11932759687431358558,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,12464072588652234061,18187791895546806813,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:2
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3540,i,17791515116844441830,13624948912411287003,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5288,i,14478956835006053682,8978459844685037399,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5224,i,3263304031832459493,6407217111650774998,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,10502396726342485019,16525730733890946359,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,10948643460438208877,10904782974724225482,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,3280840206666162575,16748545297057409546,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,3280840206666162575,16748545297057409546,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,2059686000543351104,17380892878974874018,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,16220486138744247243,10218281331944723593,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,10198843381504625874,6861557347408124376,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,4372571172117871417,3814922459601099803,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,6792112594573547592,6340428026516882301,524288 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6980,i,12245716695615329135,4483795832101543040,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5228,i,18154381375674371649,17513352558496907776,2097152 --field-trial-handle=2264,i,4509494257975496326,11683459553848857163,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5fd0dfd3d3bf3e7005f86201a11a7b14e5b70a804c20d2fab2dc7e18e83479c7
MD5 59dfe5a6038e1ae4c00480b3fa70dfbf
SHA1 d8b171ed62e85a9877f2b32db7bf807cb4576c47
SHA512 0cff21ef0bd37ce3d4f98e7940c908c3201d89cc50406b17dab09361007866bd0951b42f1ffce2eceef6f25882ea83f6afe53c995d82bb88973ce086556c906e
TLSH
T1BBD09730FD10A5A1D22A0071001006001E1404B220A782D1A024181CC9B8040C2EABAA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be13616b28458c6387c05956f9a147ccda7f458340ebf7873ac98394edcb8627
MD5 699ddd325425ecb3075b2ecf09c04983
SHA1 574bded88f95f6606d83bcd845be609c7972712f
SHA512 0cf5b34f152dda920032487ccc699a09e8f70e40d7cd9cdb8416e09ae9645080624a86b5237ac7fc38d0d02bfd7100c792c95a75ee96260369e6f1a178f22eb1
TLSH
T11871D677254A0C60EB500C3191EDD6247AB1A2EFFE0FAEC82184D4B11603FB2B6D5E79
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b71cfc0365d9e883156b089a7a886d37fb1bda105efad2b1873f054c318f8ab1
MD5 42e438619752fcfa3a6fb33f240ef5cf
SHA1 cb5557a3a951849b5a05aa4e152c10c8d8c2fe40
SHA512 202493cda5438a6d73d6b717a5961d4dab0036b04f2ccf00e332940330e54fac1931b90e1273b6c31324ffd0106db20830f948f2ec24fed6f1303ee9ee1a6713
TLSH
T1FD71D533154B0C60E7600D3195EDD220B8B6A1EFFD0FAE842180D4711603FB2B5D5D79
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f3e433d225cc42da7249770394a0945d35c7bc454693bd62fb0979ad5a3d4fa0
MD5 cb09158efd84579bd0ce3247aee91b65
SHA1 df091066994b28b5dce8c22f7192dc4c0090e970
SHA512 f0276e27606e2ab60e6ca2f8c8b251ed53282e04af4d323f76b818a1be6d0780771b0e495b1359807e5705afcc213f82795cd4f06a0705dfe041eb0c5c70ddc3
TLSH
T144517AA2C7E4876ED85152F45B546E2FCF2D0A5842183C7A89E9EF9F93E14B0E10154F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 b31dce96c201117bdec53bc4bc81d689b76893f15e9aaee40c9c76a641ce958c
MD5 0e71b013eb4bd16b74940ada786b7dec
SHA1 38c5ed872c2b60f16f505e66b3d6e5d3405d87cb
SHA512 d7d469f7a7f4fbc0b1b783d9d9ce27ed88455835c180602a792b937eee13650c439c255a0ed044e567bbca9102274dd1206b1d2cd0dc6c29b33660e5640b3098
SSDEEP 96:Du+rOuIuAuuuTPuxujzz+ouYuNwNHDuvludpuVudt7uau2uiuCuouXBFuKuZuo:DLSXN5ECmX3gUjscpSclRX3lL8Fv0x
TLSH
T1F3B18CB2C3E4866D9C6192F49B546E2FCF6D0A5843283C7A89E9AF5F93E1470E10164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7d7a8e01edbd1783d7866278f6d948090b1e3761546b6adcc3bc76a78145ec58
MD5 e00f84dce4dfe2b9bdab54dba3f90807
SHA1 3a425dcf8b081727f121314dbe38c6839377d57c
SHA512 d98c710df734740492c12f73ea8527fda34355a6127bc159aaf7ca19f518113314932859ac8c426cffb97da2f56267841861fc4339f94e09e917ac9b1b700c87
SSDEEP 192:sxZDRzyM/jK1Ml8MkP/fEslDoVZIdpMSQHW6+WNLkj/Yv5cHQnIgrJ:sxZDdMP/fEslDJmHbU/1e9
TLSH
T177520A12AA346977CCDBD209FA81BF93D6F51572A2900E58A9FCD91C04E6BDD2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 59e150c7dfd26cfd1cc186597f8aa9fd20fe7bbb13f5ea08b8bf901b12aa7138
MD5 8dd0113f4f00935cfcc3630282db95ff
SHA1 ae7f8e55f2bd6fa4c442d79612cb9215bbcd5de4
SHA512 5c64fbed57b50af37f58f77f4f8639c8a0abf1f032b54797b693c3f58ccdea92a066a7b486145e9f29c18f53822c4953e994d86022a59018db879888b60ecd4e
SSDEEP 192:sxZDRzyM/jK1Ml8QUP/fEs4WpVbCB3VZIdp+SwHW6+WNkqwXXYPmOJHyrFIgbpJ:sxZDdOP/fEs4WvbIccHbSXj+yVP
TLSH
T10862FA12AA345977CCEBD20DFA85BF63D6F5146292A01E5899FCD91C00E6BDD2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3119667f54a24f534124e28c91a588cb32adabced0d311012dc6a7ed8402d49e
MD5 a5dc091a16289b30a3e0e3250f0b376d
SHA1 8fc1ae5ac2f8a352d3e3f0986cb4507834705b53
SHA512 65152cdabc060968551e01782690a00f4c31c7ffb0e634326a4661532d5fbd6c13379d61c30979c276ca81aa8f4e258adcbb06b1e607bb0c84c4b54d2be1ec6f
SSDEEP 768:2sseJ3xWvhfwn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppZroMAt:2sseJ3xWvhfwnu1jaVcL88pSz
TLSH
T11AE20B2B280CCB7E4F844E6DEC266F966EE801CB67944D5487FA884C02C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 66f3a27136496b12e62ea6a13f1ab79c0fe9b61ba75ee2b544ef9e53c758d5cc
MD5 e5b934eb3252ea8748cb3514620b0323
SHA1 18765899ed7bed1967a1a0ecec03fd67d24fbb21
SHA512 b490631966b62cfd351f39e7b91e062285ec7ca794829a034b340a606d7d48b8e9b401fd672922af58760cd3c1910a3f7e2f02d33231122c60c51f70fa862057
SSDEEP 96:KYH+KggmG3GKIY+iGEKr6+2fuKoActHtItptNtHtq:49VNPjdVNsz3Nq
TLSH
T146C14706357B061329BD3889B39196364F4232B73058A8BFBFB900965E6BE115DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 9a4a1584044c428f81461381fb64b1703e901397d1a98337f5bf46fee451e380
MD5 26e6784ccba39763b6de6a2d51add93d
SHA1 12cad545572a4d741765ed63976ab53d357d7a95
SHA512 8a150d02922d553af7b23335bf7e315fe55e2edbe16d737109b0727fb2d2415ea3ba4b97cc0ae7e44fd55ced5016fa46ebf2b4aff45c50a65c148d7753764da9
SSDEEP 192:uzm+xasuheOwQxMGsNEdQxnqT5M7x1QQmiU1ikw4MTCz+FdLlf758z1kqvRBbYy:3ZcIhsNEdoqW7zQV/edwTB5
TLSH
T117625C729C74586B69B7B146F48A32134EF49027E7C46BA4F5EDBF2D01DA6A80307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ac72aea0e30adeed5349c91f39a5c647ef63f1a2bbdc16b43391cdabde53460f
MD5 65e3e732e53fdf95f42f5cc8359db77b
SHA1 9f8f4f56d68b5b41873294ab32d432f8a52ab4d7
SHA512 97dfd0a639171f31c3702f7cd8a8da1ba1a00288f786bb59b78eb363fa5375b0f42951fad087aef3b34e3ad657bf6f5c5392992d7db69bbfd3529182d94a6f36
SSDEEP 384:fZcIQSsNkuoqW7zQt/edubA7StMa/OfOK+Y4MkRXB5:3dtm2ooSiGK+Y4MkVB5
TLSH
T1B6C24DF098E35CB6C09DA3C757BDAD1219BCD037B5884908B3E5A62DEC8A5BFD316412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d491d0ec73dc72dbebb03405ed0ebcb7112ac7847473eb0a9b32fdad5a48e002
MD5 b35918d70591331d8d2426e2da9499ba
SHA1 9aeb9db863dfe1633404aeeaa81a7e2616ee627a
SHA512 281809ee974219f7714b35cdb0ce679cfeef50c7949f4210fab9e6b3d2610d572acbc117391489d4a47ce267a5a1897e444562ca0fd5f45a895d2b410a042e3b
SSDEEP 192:uEm+xasuheOwQxMldzsNEuQxnqT5M7x1QQmiU1ykw4MTCz+FdLlf738v1kqvRBbN:SZcIQzsNEuoqW7zQN/edyTB5
TLSH
T12FA207F158E75836D5AEA303A7BD2E134EBCD027B6841A54B7D96B1CCC8527FC306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8918f6560443d8b53341b748f136d984ba73e24c208d3d7bbebe008191728dd7
MD5 619ecccabfb14a0f33c7018cb2b7bffd
SHA1 444a1b7967ba316bf85f154693285f4da4492ce9
SHA512 cfab602a4cfaabfeba365cebda28ef1b20a4496d2723e2f2acc8f426cb58353d1668b5be741c166a65ad1909a934cec3e40ac2e684586cf2983e82d888e32cfc
SSDEEP 192:uEm+xasuheOwQxMGsNEuQxnqT5M7x1QQmiU1ikw4MTCz+FdLlf758z1kqvRBbYy:sZcIhsNEuoqW7zQV/edwTB5
TLSH
T161626C729C74586B69B7B146F48A32134EF49027E7C46BA4F5EDBF2D01DA6A80307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 aadd18c5860ebf7e8ceded1eaa831ae909c88746f6fa9662a5e0c8985388db3d
MD5 0835777e18f46aa0843023783bf6de3c
SHA1 5bc7998fa7823d1d713870530e8883135ec3a463
SHA512 fa49da693c93d83586f9b33b0200cf01ad580804c32c35f543100dec112f64081cc415ebe19b060e15850d79991ae1ab4f2fb092a46df2b6af37cade81b0ce36
SSDEEP 192:FONN6vMTPQmiUyLLdhTCz+FdLlf7Y80IkqvRU/u:FONN6UTRadNd3TU/u
TLSH
T19A121A32AC64AC6B6EA3B545F48B32135EA4916BDAC46BA0FADC3F1C01DA65C1307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 76809ec32e637248fd2c0bb9be9396aa062e868476f473ce1e4b3de5eb5a38fb
MD5 c74b9acddc987d33279c05d4211defaf
SHA1 7e5a6a3cc055f37ace56a2167dcae9922501fe5a
SHA512 2dfef24ad2322ed249d16ffa131212b9b17333b4839773ec25890e591b683dae405ac034e5954589b8d2cd38cc5c83f892f65c82ab5554f543ef7628efce92a1
SSDEEP 192:lONZ6vMtPQmiUysLThTCz+FdLv847WfU/u:lONZ6UtRzTNdToU/u
TLSH
T1D502F835AC786CABAAA7AE45F48A37175FB4216FA5D05B54EAE82F1C00D764C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 30469f8334835bc8fda35c596cd045d2eaa80b93d03d6f450290027a3fc4503e
MD5 d8e22537d7ceb898529221bee55afa22
SHA1 06afe45c9d450049432d52eb0cff6d8c8f5499da
SHA512 e8a8bef4ae94c7dcdbe74440e15a95af5ed36cd6e46f93f8e27a2844f3d0e8c5b5903f1eb571caf6ccafe30d6daedee13c9155ba4a05fa6b761641ef71f78296
SSDEEP 3:MsEllllkEthXllkl2zEGC/:/M/xT02zw/
TLSH
T1E74404047FD00D45CD0450304011C35407F0DC500511D74337510433DCC75C40C00400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 76b3be8083269b2afa5008af9fa7e0c8990962675ffbf5692fe81611bb2d5d04
MD5 e63dde9a7fd9e9a2832326cd5d2b967e
SHA1 3b933a40d5a703848732c65f1c2abbaf3f7a30f3
SHA512 e1135cf7dd749e40a51b83ec59a4463f6023a5f16f096cd268a7ab9ffad9e49b1db3bf3f9fdbd7d3c263e065cb6974cb2b184d334a7b2d02b0d992733f2dcaca
TLSH
T13E411A9DB6F91148B3B36E5A9BF7A46D887BB8372E07D56E10010E4F0A22A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads