hxxps://dbjgd[.]buzz/iDezL/br-pt?0929888992761354968&s=wa&t=1790717026&

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 01:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dbjgd.buzz/iDezL/br-pt?0929888992761354968&s=wa&t=1790717026&
Sample260930-cdcwpattbs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4912	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{3C0E1BBD-8DFD-463C-AEC0-CABF1D5C6434}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 4648	4368	msedge.exe	87
PID 4368 wrote to memory of 4912	4368	msedge.exe	88
PID 4368 wrote to memory of 3772	4368	msedge.exe	89
PID 4368 wrote to memory of 3772	4368	msedge.exe	89
PID 4368 wrote to memory of 3772	4368	msedge.exe	89
PID 4368 wrote to memory of 5092	4368	msedge.exe	91
PID 4368 wrote to memory of 5092	4368	msedge.exe	91
PID 4368 wrote to memory of 2680	4368	msedge.exe	92
PID 4368 wrote to memory of 5036	4368	msedge.exe	93
PID 4368 wrote to memory of 2680	4368	msedge.exe	92
PID 4368 wrote to memory of 2680	4368	msedge.exe	92
PID 4368 wrote to memory of 5036	4368	msedge.exe	93
PID 4368 wrote to memory of 5036	4368	msedge.exe	93
PID 4368 wrote to memory of 3848	4368	msedge.exe	94
PID 4368 wrote to memory of 3848	4368	msedge.exe	94
PID 4368 wrote to memory of 3848	4368	msedge.exe	94
PID 4368 wrote to memory of 5100	4368	msedge.exe	95
PID 4368 wrote to memory of 5100	4368	msedge.exe	95
PID 4368 wrote to memory of 5100	4368	msedge.exe	95
PID 4368 wrote to memory of 4940	4368	msedge.exe	99
PID 4368 wrote to memory of 4500	4368	msedge.exe	100
PID 4368 wrote to memory of 4940	4368	msedge.exe	99
PID 4368 wrote to memory of 4500	4368	msedge.exe	100
PID 4368 wrote to memory of 4924	4368	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dbjgd.buzz/iDezL/br-pt?0929888992761354968&s=wa&t=1790717026&
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc8757c188,0x7ffc8757c194,0x7ffc8757c1a0
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2068,i,18270466695026103657,7160342932888569381,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,12674007472161182140,10415779619939887340,262144 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2592,i,5817910844092853493,11065480656488858462,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6316374083228851726,12658460776662144809,2097152 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14156966212649379486,3955735106208390431,2097152 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,10054012808409749294,4689755207900219938,2097152 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,12988111752843838897,9813951226488833724,2097152 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:2
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5116,i,4540204517857212580,10629645737326808235,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5112,i,8965986389801152195,5745594670629846343,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5920,i,13931286581227534571,2227136043028199139,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5920,i,13931286581227534571,2227136043028199139,524288 --field-trial-handle=2168,i,9209645447499183786,18187728812855105447,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db998f2ab3bc4e87d03b65e45c5cbb178df73d3cf3485b0f37651dcc2814f3c4
MD5 5f5f54c76a35e981894cc5fb6daba05e
SHA1 f502dcb8644de3724c621965a3a911c911ca900d
SHA512 5b35d9868c8c7bc14be58b8d1c82589ffa8c6d4d639a122de36a7603d6e1fdaa95347b26ba4692476227aad23f224b54f96b3ed88d347aa1c403e5ce05da56b9
TLSH
T16FD080B5D9756AF4E465253C02230604714C95425D433105D55145960D9D7C354D7DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f5c9b77a58cbeca7490b1dcf4215ab3367a97e3b5665e04dd93e822b6064ff20
MD5 86ba867f321e77ce00fa04bb7ebf474d
SHA1 00b615b483c32687dc3730c6820504a6f0242223
SHA512 26fac52e4f287aa5c0d32af774d4af808b86f980309895e33da06ac6e07f14b39292f576d560fd9bf3a4478e36876b47450751d8d3a257b8401fdc4ef313d9fc
TLSH
T16F61D68A89933CE9FB6411747BE109CB377619BC56B35F4A2BE4DD38B85EF184500C54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dd1c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dd1c.TMP
Size 3KB
SHA256 2615c1dc9513aa251e3c276215d27df98d25a61d5109f70eaecc6ba518112cc4
MD5 d9c1147beaeb26881cda36efead70000
SHA1 153a9c9dd072f5da8ee5f32c3831700534c4d913
SHA512 5f61144a9f84668c5f921ca1feeae3cea729040ecd1c48be2b667a8b39d42030715f180120aa6d27bf26c3c076582849cac1076e32144e355529f5eb27591174
TLSH
T1FE61E68A89833CE9F76011747BE109CB337618BC56B35F4A2BE8CD38B84EB084500C14
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fcd069ef9b6f838fe23d8b2a50a957b38f4d51694edf974797991910c4ca280d
MD5 01fb6025c3c4c2d1b9b03ff73e8fbf1f
SHA1 31b561d3df3a23404f922766fe551573148f0a6f
SHA512 f492fab43a1fecf47d95dd457eb1f282e00a87f6cfe95022f4e364bd85be62d0c5747b93d739443adfddc2197983f4e4c3d767ed326292ae400bca2a2848f5f0
TLSH
T144218CF3C3E5866E891516F06A28AE2BCE1C0A15422C3D1A89D4FF6BA3E34B5E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f3e3d056f2b7e53c74fcc87d22b82708e8ca643fb360c7afafdd0606f0170521
MD5 e6665f833e5f9ee3259759950b6993d7
SHA1 5e041b1b1ab1bb82512ce1e5fecd1cd32e0d9d79
SHA512 4a4059a5e7e749111db61893a259a7b3ab0e5635014f8d9caf2a4f1d2d6e8203ecca6aaffded737003cf4fa20d044ee9cd1f32fabacc318832f94906ff37810b
SSDEEP 192:sxZSRYWc/f7sMWpVuLQIdpZIHW6+WNjM3l/Yr939SuIgFJ:sxZSJc/f7sMWvuLxSHbC/WPv
TLSH
T13E32B7526D38A97B8CC7D21DBB25BF63D6F9103255D01E58AAFC862C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a69e7786f8079fdd470ca28545a334dfd0c6f5a0e415e75553928f48fb940532
MD5 1bdd896ac55ecc6b1d469cf472f1f7a0
SHA1 4c68a5f54969ed5a4d309bce96ddfd745ec6aec5
SHA512 4854f9edd18caea68b0d0d235ba62bafd34c00c1d3aa7ed21564fc378ffb35d67b4163967233e32635316cdbc02547544b2f6b88aa854150bfc89cbdd80649d8
SSDEEP 768:fMy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb0roRiDX:fMy4J/DWvbtBhu1jajiLm0bfCX
TLSH
T13DC2FA3B684CCA7E4FC01A9DED5E6F973E9802C796948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c9d79fb78e8b0e9451ee2920765108d4ef4a788bb272cd496668d28cabb093e2
MD5 048890a46e3e6946f6d318e252329806
SHA1 25d128d65adf65f1e2fae0318e603d9d2071eb16
SHA512 49e8e4e82b0353b6f3990a4cea73d3e7112faff3f81f836781f712d6d0304b68dba1b6ad732bcf1c8166e10320025b800ac33ca989861a072c7e72c287519913
SSDEEP 48:KIDI1Ks04jyLLuvL1tbOIPKrCM/yAEQE5E8EwEiE6E6E+wEKETElIVEQE+KaELSQ:KIDCKs0+pOIKrCOyIQKJeo
TLSH
T129915D45317B064039BE2A5C95A9C62E12523673300EEA6B3BF840A54F6BE05CEFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af26e7ab4d2501a0a681b06be039d2e7087c367b015639c142de17ba8303b9a4
MD5 5d6dec94c352e57e1cc45c74039dcd27
SHA1 275c7378e8d2bc554f457c849f3ab3f166d669a2
SHA512 37c87721cfa33382e688fb0b01b8932922bd697e1edb1975da3a00c08c2a7fa5839f0bbc24181ce0295653e6b614f1e474a261071a9f9227ee913b13c2242323
SSDEEP 192:1ONr6wlDgQmiUyhFhvW4X58gZ9OK8tDlrXhU6:1ONr6kgyW4X58E9O/j9U6
TLSH
T1D902E934E9787C7B9EF2AE09F58727139FA5206BE6852F80C6E81A2C01D765C1347D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 beb398a105380cf85470923b76eefd7e0101078bde1fdc1a277efd17ec328d0a
MD5 834807fdbc5f6c572adf45a6a8c7faf3
SHA1 b99f3840f39e28a8706619219c574a59e99ebde6
SHA512 e20c9fbf43bc1ca82f3b73056cc05be9a09719135d6bec4e7b3746a4c2eb5fa03a3345eedcd838c12670657b661206a3adb30f6af79d6c8d245b687f8cadebf5
SSDEEP 384:bZcIJsNskXjZoOnuHX58E9O/JtfeAStt87oKkLFtgOIwZOy2eoToK:DJSjToa6O/JthS9KkLFXs7T9
TLSH
T1DDA25A71D8B85EE758F5E9C5A546E2036FB8203BD2886A5CC5F8BA3D305F5B80313C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e3c7c7f33a62f7581eb4075563a3f9b4348dc724c3b9c65e1508d8c76725fe27
MD5 2fa9667c7d3eb9555b5b486039695f16
SHA1 53394c5685024ffa55c8be7ae1b8e49ebfadfb4c
SHA512 6dc5438e20a11d865c490504fd8544e11d715490b1e14e7109f3128d0ee3478ff1460a99733b357acdac90f74adccf6b90d82d4b5a195e80cbc35192161eff0c
SSDEEP 192:1ONF6wlDpQmiUyh9RhvK4X58gZ9OK8JZvevqLU6:1ONF6kHmK4X58E9O/JY4U6
TLSH
T17E120931A9B8BC7B5EE2A544F48331039FB5512BEB896F90D2DC2A2C01EF65C134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a027d28ca0c776271914cb01eddce299ff16e418263b1b48825bb83a870b1684
MD5 dcc2f18150327e1d1c65c1a809d55014
SHA1 ef6031a8864f3c941764208dfe97c17769ea02be
SHA512 a1a51c50ee1bb343aa2533fa768e895a970055603445ea592c2d4182f112ede9fd03d02d4fd3f6f44e7ba0e947ddb67a1d0dfd17716e23fc70947346c171ddb4
TLSH
T18B41E558A6E91148B3B66E59ABF6A86D487FBC772F0BD45D00110D8F0A62A408961737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads