hxxps://image-zeta-ashy[.]vercel[.]app/l/burkin

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
32s
max time network
33s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 22:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://image-zeta-ashy.vercel.app/l/burkin
Sample260809-13mdeswfph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 4904	4460	msedge.exe	85
PID 4460 wrote to memory of 3528	4460	msedge.exe	87
PID 4460 wrote to memory of 3320	4460	msedge.exe	86
PID 4460 wrote to memory of 3528	4460	msedge.exe	87
PID 4460 wrote to memory of 3528	4460	msedge.exe	87
PID 4460 wrote to memory of 2284	4460	msedge.exe	88
PID 4460 wrote to memory of 2284	4460	msedge.exe	88
PID 4460 wrote to memory of 2104	4460	msedge.exe	90
PID 4460 wrote to memory of 2104	4460	msedge.exe	90
PID 4460 wrote to memory of 2104	4460	msedge.exe	90
PID 4460 wrote to memory of 1680	4460	msedge.exe	91
PID 4460 wrote to memory of 1680	4460	msedge.exe	91
PID 4460 wrote to memory of 1680	4460	msedge.exe	91
PID 4460 wrote to memory of 1176	4460	msedge.exe	92
PID 4460 wrote to memory of 1124	4460	msedge.exe	93
PID 4460 wrote to memory of 1176	4460	msedge.exe	92
PID 4460 wrote to memory of 1176	4460	msedge.exe	92
PID 4460 wrote to memory of 1124	4460	msedge.exe	93
PID 4460 wrote to memory of 1124	4460	msedge.exe	93
PID 4460 wrote to memory of 3148	4460	msedge.exe	98
PID 4460 wrote to memory of 3484	4460	msedge.exe	99
PID 4460 wrote to memory of 3148	4460	msedge.exe	98
PID 4460 wrote to memory of 3484	4460	msedge.exe	99

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://image-zeta-ashy.vercel.app/l/burkin
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc57fbc188,0x7ffc57fbc194,0x7ffc57fbc1a0
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,6317292204878380168,15024401608836562453,524288 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,18125114482437666641,7321511003012679976,262144 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,6611754218832465,3877641140054324380,524288 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,7778338687987621274,12143153679071519373,2097152 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,6704394344530532786,7413935986549344664,2097152 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,16895469821470023649,17773931146624997523,2097152 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,12544818558869685039,8156518375942776543,2097152 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,10143596648751578298,8143801814472495799,524288 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,10391066005842716216,2822899927450462622,524288 --field-trial-handle=2304,i,11641955101603305209,14226402607639969080,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fb538aee2c0dd5b3177d13d79b8aa466b915997366373079206868ea95e5508f
MD5 df27ae88092ef1cef8e20dd6ef954e87
SHA1 a69b781e2a4253cb3c2fa9884569485d13332de5
SHA512 d11064e0fc387b35b975f4b64cf04c96e0e65faa1296af191a22f22584f453a436cd9ba31fab179488c89cc676fbc8d191d8beb469d9b20d0de4848720da546e
TLSH
T1D1D08010727971C7F31700BE545557425606C56675B7F301E031550DAF25059B28B1C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

078bca79-47f1-40e0-9e16-894600491e9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\078bca79-47f1-40e0-9e16-894600491e9a.tmp
Size 13KB
SHA256 a8ddfbedea09d059f8092199eeae183d8fec7a1842a1c4014da9cf7655762cac
MD5 30492ec2d7c6245c5b957a15c298979c
SHA1 2966b1aaa44e4299969b4443f8b035a0936d382d
SHA512 7cf2e1ec5fe0e620296c4e4bdfa6ad2162e13e830d594fa5a85774d757d5fab2a1d59257ad358bea8b39da82bbbd3eca497fad2d9f15bc647613ec5360a46c48
SSDEEP 192:sxZpRWyM/jK1Ml89kH/f8sLWpV570Edp11HW6+WNFjvMbP/YAcW2gIgFJ:sxZpo/H/f8sLWv57rvHb+/bv
TLSH
T16852E711AA34697BCDDBD20DFA567F63D6F81462A2940E5499FCDE1C00E7AEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9944144a2e7b23427f2a2617a7881307863cac7df59e1ad6d1b971d233c71d42
MD5 e8cad2d30fb75265608ad4f27199a88d
SHA1 7927a4897bf60badafac819d255188709f26dce6
SHA512 5eabb3cccf03a6eca4205751a4c6f82167d14024b6c358b661eb8bebc2ef836e10e2977d0755454105f1990602c1b006e4313f42c68e54825175f1c639552c1c
TLSH
T15571E53B0139446DE353C17182DA82123C7B4EEAF5C35E45B0D05B3D59823F2DE66A8B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 657B
SHA256 db239083ddd8edb3d6a525862d0bd64b689a7e91156b052108d2e95d04097b39
MD5 ff7475a4ea07176f82024c23a71171b0
SHA1 8bb4b57d3bd8bcb251812685f9b5ad7598b08ca2
SHA512 8bff0a809193c7276ddca3a80eb2c4b53097084583c27ca0e934745e74adf0f3da708e200d0a2272c7020bcc3bdfd79edf0d8c62129e2b305d6123f6ef080be6
TLSH
T154019EF782E048AFCB055AF06A18AE17CE6D0215431C7D2985D0BE2793B34B5E00154B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 dd9fdf597d0a0e9fe488fad16a5abe71af8e735b2063b9ec9ba7dd90546167b7
MD5 8654539c12f2f982638ee0a8ae9e5979
SHA1 8f535e8d21b9d9981cfa67e1f3519cb93f13ae27
SHA512 a226995e9cdd20761d1298748b7e0c1db3c52dff085241ff15081309c6ddec09f345cc0e47be8be0932fd1033b91c7ca6fab852ac1b3704114964dd639118d18
SSDEEP 768:ZRsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9prom4U:ZRsqxXlWvJD6Tu1ja54LAs9CmV
TLSH
T13DD21C3B694CCB7E4F840E5DEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 93ac0d40f1b2b676b2240ca6e063183f485d292eac03a61fcc005b0d0c81fafd
MD5 635f16f452cdd8855158542ee9af942c
SHA1 4977b32e9f08e4feed6fcb6e2d08ea405fa02480
SHA512 b402ba5aec7c769ebc164516aa8eea1d77dc2f4c48e4698b5f86eba168434bcbd4e9287881c60fe0318ec3b274cfe845510b3fba6079901fa3d80cb05d88c39b
SSDEEP 192:/ONc6JkR8QmiUyGF1q+RNX+Fd10IeRfFXVclq5gU6:/ONc6UMN1q+RNkd/7DU6
TLSH
T14E12F7356C382C7B5EE2A845F48736135EE55167EECA7B90D6DC5E0C01DF6AC130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 36ccdf9a4e448b3aff6b2417ee20a2d29f934b03e6ecb89118b41c778a2b2790
MD5 6d8b05d05073566a83eeab535b9c0150
SHA1 b3b4da275a1bbb82ad2324c0338091bb306c6be9
SHA512 b623c2159392f73585a07daca2d4cd10e946be5b3f0a418e80266101aefedc341429c5b6d047f182b0ef53471c753cb945ada5395a07822608de0cc544a2a561
SSDEEP 384:UsNZTPbMMf/VRNkd/egQAStvYlo75mkcal4:U2ftHkwmSN75Ual4
TLSH
T1DE8229B5E8742CE745A1EEC9A18BE5136EB8103B898D1A5CF2F47A3D309F5F81302825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fe1ba1963afed55204545d624518bba744eaa31b3b3057fb27a87fd61f3d8ca0
MD5 b71570985e18f3b376166a899e6e3cd9
SHA1 5e5a4d3449ffe0e8034ad1cbf10ea1f68bd1a6c8
SHA512 6806b39ff04d6ded659712f2606a3815dca03143565a6f422824a011a66540ce07f4f334b3f9fc1b0bd165060ca54ca6a72abbb081d7a3fe8e81765d20ac0687
SSDEEP 192:tONu6JkRtQmiUyFF1W+RNX+Fd10IeReh3SPR7U6:tONu6UrU1W+RNkd/FSlU6
TLSH
T15F02C835AC382C7B9EF2AE09B58B37175FE4117BBA992B84D6E81F0C41D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bbe6811bd2fe2e7156a70b823e7344a82f578b1850891746b86350ff5f3f1c39
MD5 6198d33d0462ab72763ef8165acfce59
SHA1 f7c4738d85813ddb9f1f28ca17efc56af262c53e
SHA512 5e750d981533d883943731cdb49cd05316abf450ecca76d5f546f4915c6c249a37d71ac8f5b60bbddbdc3ad8af6885380166fbba4cd21774d1e708a86f528698
TLSH
T134410B58AAEA1248B3B37E5A9BF7B42D447EBD772F06D59E10110D4F0A27A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads