hxxps://weazy[.]witco[.]app/profile/preferences?condo=HFn4332DQhHysyxtS?nogetapp=false

Analysis

user interaction
yes
max time kernel
20s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 20:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://weazy.witco.app/profile/preferences?condo=HFn4332DQhHysyxtS?nogetapp=false
Sample261014-za6e6aaa36

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{AB2A3AFF-F263-477D-9386-99221C2552F4}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2880	2328	msedge.exe	86
PID 2328 wrote to memory of 4052	2328	msedge.exe	88
PID 2328 wrote to memory of 1588	2328	msedge.exe	89
PID 2328 wrote to memory of 1984	2328	msedge.exe	90
PID 2328 wrote to memory of 1588	2328	msedge.exe	89
PID 2328 wrote to memory of 1984	2328	msedge.exe	90
PID 2328 wrote to memory of 1984	2328	msedge.exe	90
PID 2328 wrote to memory of 2996	2328	msedge.exe	91
PID 2328 wrote to memory of 2492	2328	msedge.exe	92
PID 2328 wrote to memory of 2996	2328	msedge.exe	91
PID 2328 wrote to memory of 2996	2328	msedge.exe	91
PID 2328 wrote to memory of 2492	2328	msedge.exe	92
PID 2328 wrote to memory of 2492	2328	msedge.exe	92
PID 2328 wrote to memory of 4404	2328	msedge.exe	93
PID 2328 wrote to memory of 2356	2328	msedge.exe	94
PID 2328 wrote to memory of 4404	2328	msedge.exe	93
PID 2328 wrote to memory of 4404	2328	msedge.exe	93
PID 2328 wrote to memory of 2356	2328	msedge.exe	94
PID 2328 wrote to memory of 2356	2328	msedge.exe	94
PID 2328 wrote to memory of 4584	2328	msedge.exe	98
PID 2328 wrote to memory of 1704	2328	msedge.exe	99
PID 2328 wrote to memory of 4584	2328	msedge.exe	98
PID 2328 wrote to memory of 1704	2328	msedge.exe	99
PID 2328 wrote to memory of 3112	2328	msedge.exe	101
PID 2328 wrote to memory of 3372	2328	msedge.exe	115
PID 2328 wrote to memory of 3372	2328	msedge.exe	115
PID 2328 wrote to memory of 3372	2328	msedge.exe	115
PID 2328 wrote to memory of 3012	2328	msedge.exe	116
PID 2328 wrote to memory of 3012	2328	msedge.exe	116
PID 2328 wrote to memory of 3012	2328	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://weazy.witco.app/profile/preferences?condo=HFn4332DQhHysyxtS?nogetapp=false
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb5a95c188,0x7ffb5a95c194,0x7ffb5a95c1a0
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,16524864256966673962,4916076369303858239,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,9283380806368824133,8282310855102089734,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,4621594316298451663,10402269484176658123,262144 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,4481507068645384361,4594246887004641246,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,1228281296662169654,14305654549487486763,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,9908572866685426259,3185920849248682148,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,5830659460668904910,15666198224704882723,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,14381014042438029368,11991518399173631479,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,12944639998313906871,15788472597873854509,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,12325537849843966758,15668120548033587023,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,12325537849843966758,15668120548033587023,524288 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4176,i,5420005344414292917,8385736376600109008,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3624,i,16232042740994577285,13170086464889916972,2097152 --field-trial-handle=3052,i,7758045032033990962,9027917589768121372,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:3012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7f691c06-1094-4e69-88bd-771f33a763f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f691c06-1094-4e69-88bd-771f33a763f8.tmp
Size 8KB
SHA256 ab651cd815957d561e9e4fe2182ebe3478f05cbe7e95fc72afdae93942b62452
MD5 2bbdb6151a19c174e6178b0ac5c1979b
SHA1 2777afb0ddad19d7ddda2cec4fddf10d29eee76b
SHA512 8670ec28cd142eed57ec2795e4759edebf32e8220cc728ac85215870c3b83042de46a59d5d78471146cfcb8c2781a9bf6dbefd7869d075541794702853404026
SSDEEP 192:LONg6AmwprQmiUyXp6siX5FgLKBtRJi/giVU6:LONg6ipd+6siX5FgLMU/jVU6
TLSH
T15F02F939AC786C7B8EE36E45B54736139FA5116BEA542F44C9E81B1C01D768C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a8f57b0-a965-4d76-b08b-1b6dad775c6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a8f57b0-a965-4d76-b08b-1b6dad775c6a.tmp
Size 18KB
SHA256 98c78b826539a10fd58ce57cb061b4b908f5018de7c556801e531ef7e6f13e73
MD5 da2445655f8762b743889918e1c9a946
SHA1 f62a30e7465ad9dcc2038befebaf3315c9886230
SHA512 8145c25cc8b4c66a625d130232fcb0ed7825941f8f16f3fb3cb8784da17f3e72eb9d5e5e0de88264e56c606df4fbaa658d12ce7d060446c9de0ccf36e082c24d
SSDEEP 384:NQkUSv0sNWbolVJpuXAQgu9iX5FgLMNJt/YPJAxJnCh0IIld:30umXaws/YPkJnCWLb
TLSH
T11D828E36B8747E3B9EA2A551F14B35039FB4922BDBC81F54CADCA72C02D62DC530B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92f936ce-e10a-4c8c-96d5-e927b828b5b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92f936ce-e10a-4c8c-96d5-e927b828b5b6.tmp
Size 8KB
SHA256 dcbfd59764d01bc5aeec812286be17a60744c1da4af3165280955dc72373f521
MD5 1f8701a2f33841f2ed048c285ad2be3a
SHA1 fb28a956f5f19951d101a5a039b1ba110ed71bed
SHA512 a3fe1ed265ad30e749481cedf97bb5f87314fa9b5c0254c10a3211d6516edb44ec5c5dd50b537a62ad092f0cbd924bc954a9639888f82aafdaf63d8fff5c85d8
SSDEEP 192:WONv6Amwp2QmiUycHpbsiX5FgLKBtXJO6QlR/Vq9U6:WONv6ipSjJbsiX5FgLMNJM/YU6
TLSH
T1D0122B35A878AC3B5DD2A555F08735139EA5521BEF487F44C9DC272C06EF19C830B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

39a29e66-8988-426a-8490-f00c5f52752e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39a29e66-8988-426a-8490-f00c5f52752e.tmp
Size 10KB
SHA256 66efd8d665cec33893c63cb05e433c7719a2802ba138a2900e8e36b48db47ee1
MD5 d8949ed2e190b2e0e6a1cea720dece30
SHA1 b62e0f3e4501ef737b1b3d5e4e5cb81cf214673e
SHA512 04c2043d7110893422a5c174fba6d2ab2f5e07c06dae7e45492f516a369218a930045fc48993f743b6861c748af1edac5e08d79dd564afdf640510b97996000d
SSDEEP 192:sxZhRiWs/f5s9mIdpJkfHW6+WNKr9+H3LJXY3Hsw1wq1Ig5rJ:sxZhPs/f5s9HwHblX/HiL
TLSH
T1B622B512AE386A7B8CDBD20DBA55BB53E6F94032A5941E44AAFCD51C04F67DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

570921b3-b889-40f3-93fa-1c747cbe1c1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\570921b3-b889-40f3-93fa-1c747cbe1c1a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5cdb2fbe-0d8f-4897-baf1-ec175721ac92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5cdb2fbe-0d8f-4897-baf1-ec175721ac92.tmp
Size 27KB
SHA256 507cf690b55b8f6990fdcc46b5617d7b7ba14cfb3feda4c04f871ada29e71662
MD5 5d675025a54e13fcdb335a67beccc22d
SHA1 b40b2381043716b5553adae5addc793f188ce334
SHA512 79bd9e066e762e11c331914b58a416d00dd50bb6433432e217c0e2f0ed7f648aad4f085336b84b0e63daaebcd93e4d96a03f01aa7e5b1d09bff12f25c48b9d93
SSDEEP 768:425X30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ725qrolZM+:425X30AbSWvS2l9u1jaLmLZ125Bt
TLSH
T128C2DA3B644CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4047FA944C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e8f65a3-eab5-41c6-a89a-bc4b964d411f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e8f65a3-eab5-41c6-a89a-bc4b964d411f.tmp
Size 10KB
SHA256 3f19bf3619b8b31b77f84278714a0f585d417da2f485015567b66ca83fa415f2
MD5 6c5d4982ee2712079325d41928bc0e80
SHA1 c18bd15204a02042ca896f6c77cb5480e4e4191a
SHA512 102f92ec01c17a0e4aea6b644d850505119b8568cd46c9d510eb8884480ec57d255fc86d98874d40347d3620355818cbcb010d24ac7b652e107ac0dc5fd1f5e4
SSDEEP 192:sxZhRiWs/f5sR9IdpgfHW6+WNfyY/Y3Q1wq1IgrJ:sxZhPs/f5sR++HbZ/ki9
TLSH
T1D622A712AE38AA7B8CCBD20DBA557F53E6F95032A5941E48A6FCC51C04F66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

816ba79b-4842-4ac9-a601-77ddb08822a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\816ba79b-4842-4ac9-a601-77ddb08822a1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 4.8MB
SHA256 773d3362e0727160fbeebfb8972745e646f71b363e13b38811df1737a4a0f4ed
MD5 ef7a51a8afb761c2506d571b9ca62771
SHA1 9a83c43f26ed08bf77bcc20d8ba2071328bd9177
SHA512 27f55c678fd2a92537d7b09cf6df4ecd8b2808b2024f85b6b37414f426756ca816dedd5d93917f00a3811a736169a0738b4cbe0191d8e34f9313e30390ed5815
SSDEEP 98304:ai4K4Zb/UZGzKlEBT4hUI42SPQjirS0ZkL2mTjWA3dW:ai4Jh/EUBTHjgjcS0CLZY
TLSH
T1083633BDB9C9AF27021FC17157EA67BAA92C46524B61CD7A0E3E36349E313C7044C9B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 4.6MB
SHA256 06fef5d13f7dc9ba9c554754bae8dc5d24312e6c586d281e8562450c7324954e
MD5 9257a8549c65e72084bbcacb404ed2dc
SHA1 3dd5a4260a5fefc9db0403a4d87917077b287b17
SHA512 75c344232878445d62f97374335ec01eb5587c718ab1a582007fee55808e437db7e190f8c40a0cf16df111873714726b9392b67933d9db61fe969e6071d71178
SSDEEP 98304:NPsCBEIWk5Aoi7R9PCnxrThaxBBuP0opgSkoiG2YonV40cunXNzXhdxn5QZOKdFh:NPXBE3kVYR9KnVTMPuP0mHiG2V40ciNq
TLSH
T1922633A541E7E1AF0CF19FD37249B5DAA8CB0A4891A983DBFBF15340B9C418FB198453
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 95KB
SHA256 6e3bc644e99495c5152c66fa9e8e67ffb9e5492d7fc62709710942be4756305e
MD5 25b518b6481e52914dec583e975ddf98
SHA1 f267d9eed6a8e32eea9c16e44b7bac6a33a492fc
SHA512 62cbe8eb1b89b57e985c2aea38e0ad6854b28a78c705f6c51ad9bd4e0fa9e46dd7de794cf5e74cc2e80054274bba17bff53c6949a2a3f7475ba86c28a40afa4d
SSDEEP 1536:yZIKAAndKlJUxtAR2iBlE8xX0A0bN3UIl9KL1qvMNEl+k0ZFdtghREz0ulvrQInW:SPAmUu42ixB0bNXlwpqE6l/0rdDz1VPW
TLSH
T1C0A30237B336F12F83A90A358E7C4A699A3DC26C8D1415D2FD9E549C20AEF077419AF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 95KB
SHA256 c4370539462cba9e59b91ca96dd70ef8a867261f37fbafe85bc03c480cc49e30
MD5 0ca8557e40fb40b702cb1f08d33af957
SHA1 0de09b7bd04c3e2d757dc964e10e2afa690a9470
SHA512 97a810e671403f5423844cbf5ad8b43f268e494344d73bd348f86c17d45dd065879dc64f48717ce1c621c24475709b1e01b614031d961c47269e48ad80795cc2
SSDEEP 1536:620lapda/R7u0Zxbhu+DyiQh001JuoUxn76uKfRn5AbwjmfNZO56nNdou+X2QVXU:J0WWZxVu+Dkh001JuoUxXKPA7EgNT+7U
TLSH
T1AA9312F828ACF6F2BB450D8B5025122E090BC1F4A6BFDEDD1077857D628A6F743190E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba432a9b-d3cf-4f00-bf7a-96da1c059671.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ba432a9b-d3cf-4f00-bf7a-96da1c059671.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6a61b78b-f945-4593-944f-e0db1cf48d09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a61b78b-f945-4593-944f-e0db1cf48d09.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5dee61f807044fe53551b396060e64dbb4265cef350abf49312999d856e296bb
MD5 3fddd2cbaf10d8a32de340bc1dd6c88e
SHA1 fea14df255308a5952287f78689106aea4d871d0
SHA512 484c99055a1e0afaa68ee1ca9cac54c718a0b081e957fe89f0a557bb86996b8d80b75bf9d35af116e47bcccb5aea0519f9ac368d4f7b41539acc66fae3794823
SSDEEP 48:K0+5UY28slbQ3YISwlK9U1mlxe1YPQMeyLZo1JTXrEbXyvIShEK9h1LExpUYSTPM:KYpOKyYSKqIKjSAUoK5qyR
TLSH
T193914FC175AB421138FE2A884665C72A02523177346CE67BBFBC40A24E2FF551CFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d9e4ee48313e18f7f03c07473e04fb8763c8114cf7372ae25a4c74c89aef5bb4
MD5 965a45cc02c800742f8b24bb06b62c24
SHA1 c0be685f4ef30e743aefdbdf07a14ef4754cb010
SHA512 647758eb4a33efb528fddc3780ff3a6ddbe53250e5413f63b6448e7573055192f52c54a097b4c2032cd9930519ebdd19369ca36785c6cc96a4db0b244ae1b2ef
TLSH
T1AB412C58B6E91148B3B72F1B9BF6A86E487BBD332E06955D10110E4F0A73B40CD61737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads