hxxps://s3[.]eu-north-1[.]amazonaws[.]com/poetainventarianteportalverificado-cb8e8b197ae2/REUNIAO-817732606702[.]html

Analysis

max time kernel
30s
max time network
31s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://s3.eu-north-1.amazonaws.com/poetainventarianteportalverificado-cb8e8b197ae2/REUNIAO-817732606702.html
Sample261020-s2n7macb87

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2292	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{30471F3F-E8A9-41B9-A2FC-8D6DB54FA1F7}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 1524	4768	msedge.exe	85
PID 4768 wrote to memory of 2292	4768	msedge.exe	86
PID 4768 wrote to memory of 3544	4768	msedge.exe	87
PID 4768 wrote to memory of 3544	4768	msedge.exe	87
PID 4768 wrote to memory of 3544	4768	msedge.exe	87
PID 4768 wrote to memory of 2132	4768	msedge.exe	88
PID 4768 wrote to memory of 2132	4768	msedge.exe	88
PID 4768 wrote to memory of 2628	4768	msedge.exe	90
PID 4768 wrote to memory of 2096	4768	msedge.exe	91
PID 4768 wrote to memory of 2628	4768	msedge.exe	90
PID 4768 wrote to memory of 2628	4768	msedge.exe	90
PID 4768 wrote to memory of 2096	4768	msedge.exe	91
PID 4768 wrote to memory of 2096	4768	msedge.exe	91
PID 4768 wrote to memory of 3640	4768	msedge.exe	92
PID 4768 wrote to memory of 3640	4768	msedge.exe	92
PID 4768 wrote to memory of 3640	4768	msedge.exe	92
PID 4768 wrote to memory of 640	4768	msedge.exe	93
PID 4768 wrote to memory of 640	4768	msedge.exe	93
PID 4768 wrote to memory of 640	4768	msedge.exe	93
PID 4768 wrote to memory of 884	4768	msedge.exe	96
PID 4768 wrote to memory of 884	4768	msedge.exe	96
PID 4768 wrote to memory of 884	4768	msedge.exe	96
PID 4768 wrote to memory of 1884	4768	msedge.exe	98
PID 4768 wrote to memory of 1884	4768	msedge.exe	98
PID 4768 wrote to memory of 1884	4768	msedge.exe	98
PID 4768 wrote to memory of 3132	4768	msedge.exe	99
PID 4768 wrote to memory of 3660	4768	msedge.exe	100
PID 4768 wrote to memory of 3132	4768	msedge.exe	99
PID 4768 wrote to memory of 3660	4768	msedge.exe	100
PID 4768 wrote to memory of 744	4768	msedge.exe	102

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://s3.eu-north-1.amazonaws.com/poetainventarianteportalverificado-cb8e8b197ae2/REUNIAO-817732606702.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb67b3c188,0x7ffb67b3c194,0x7ffb67b3c1a0
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,17903229608906063120,17887544180928630293,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,18070094341463882060,6661522244224252290,262144 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,9792179197609685557,8742349173392799562,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,12441990139595740725,9173554906789804491,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,6336788918841297525,17541338227994768848,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,15848963887630008079,14527567555232143013,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,16576790001293553056,14883070088230902994,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3664,i,15584276066377220144,9869373328408790818,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3444,i,15071664170074784981,358612481635673287,2097152 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,15446926614411575296,979742739878171087,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,17447818075189428771,2846572679699563218,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,7786046672283147188,6086845047738421436,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,7786046672283147188,6086845047738421436,524288 --field-trial-handle=2220,i,3741569482488763140,15404232113758379760,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

53416675-a5db-44ea-b7ec-a84181639c87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53416675-a5db-44ea-b7ec-a84181639c87.tmp
Size 8KB
SHA256 1723219f247aa690ef76da6dc15c772cc43b68a2b45d2d8f2fa575deaffe5be2
MD5 f3b5ed7c7fa9c5c786ecacbd0f42e69c
SHA1 0acc47c1b12fd0f8d139ed98d75949d3cad87fb9
SHA512 7ce1cb085da7678c3d3e98569fe5adf5616620c3a770c75c0400c74be2704e3d7bea9ce24acf4108d261cdadf1ab6543e95505acc54e76e9e08ac64fa03bcb49
SSDEEP 192:LONg6AmwprQmiUy6t6siX5FgLKBtRJiZiVU6:LONg6ipdn6siX5FgLMUsVU6
TLSH
T17402E939AD786C7B8EE2AE55B58736135FA5116BEA942F44C9E81B1C01D768C1307833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53656f49-595e-443f-b82a-c870109eb4c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53656f49-595e-443f-b82a-c870109eb4c5.tmp
Size 8KB
SHA256 7ef44c8a0f8b559a129909a1a5ab00b86a41129ff5299448b562426849d4081e
MD5 26b36461c466da213023e96161f621b3
SHA1 54722d22aeb2dbd35e4882a5fd9e7d872b63891c
SHA512 87e5e12fd5d9b23b5a47fc3434e00dad8aa21c79336c98e1599966b8843dfd26264fc595b56f74a9ae70e768588c7a7ec1a2c316147a6b48150b7fdb13606aa1
SSDEEP 192:vONs6AmwpEQmiUyTytvsiX5FgLKBtXJO6BIlRkqKU6:vONs6ipUq0vsiX5FgLMNJ3yAU6
TLSH
T1D8121C35A4786C7B5DD2A554B08735139EB9925BEF897F84C9DC2B2C06DB19C430BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74fd4d6d-5c66-4dde-bc02-3b99b102c5f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\74fd4d6d-5c66-4dde-bc02-3b99b102c5f6.tmp
Size 18KB
SHA256 dbcf47fabb3c680c04254a606fb03170b6ca6a478d66c151192a646c03b73bc2
MD5 5299edbc778ff6dee32001fb8fdb6ee7
SHA1 dbe9f163775138b55fca5c4ab9b1ace08ca647d9
SHA512 3d82fa04f53f79635939a67df477c9a52a0ca0a4164082ea8580a9b7eaab0139521c0d0448320dc5195210c974151ddc39b3a33a4616038d01dd3ffa58ce103d
SSDEEP 384:IQkUSv0sNZloHpuzV58t9iX5FgLMNJ3hkAMTpIIlM:A0DIT8TawAhkAMTpLC
TLSH
T18D827D3668786D7B49E2A520F14F36039EB8D12BDBC91F94D9DCAB2C06CA1C95307D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

44d89d51-46d5-4d36-8e67-32db0b6a4ffe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44d89d51-46d5-4d36-8e67-32db0b6a4ffe.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51d78fd2-e015-44b0-bca7-fc06bafa8b9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51d78fd2-e015-44b0-bca7-fc06bafa8b9b.tmp
Size 10KB
SHA256 daef21402b788e183ef7537eafbdfb0ed1c8aac9cd095af163650e1bf3423ae8
MD5 c660b09bc9962e64e621d80f23707fdd
SHA1 f49d323ae147e788897e90515de5fc503d44ffeb
SHA512 4bf8a0bb9b314613691198752a9840853d03efcbe86e25de25a82bc6967d66ff8ccfbc41ebee382fe4588b4bf6362d3ec6cb6ef9258cc4fe8b9af96b77473325
SSDEEP 192:sxZ2RRLWWq/fksPpIJIdpgCJHW6+WNSoy9r/Y3zJd5IgrJ:sxZmA1/fksPpBRHbtw/69
TLSH
T17322DA526E34697B8CC7D219BA15BF53E2FD903665D01E48AAFCCA1C04E66CD1207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bff95ab-53ac-4db4-9221-4391c3388313.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bff95ab-53ac-4db4-9221-4391c3388313.tmp
Size 10KB
SHA256 49bdfea0d705ca0ec784bed763648db2b29504a05b6e0374155099a2b63e4e16
MD5 e72d67b9aea9b7bb7319633d44e85ee8
SHA1 de4bd61c26892400c943b6ff6a9025d770e18691
SHA512 aec888d8d5c1d3120090ea8fbdea5ab38122b2a1f22a672086aaafb5f62de4928b65622b6a5538736178b7fab6a06df6ca54561840d65b58a72b417226d69f7c
SSDEEP 192:sxZ2RRLWWq/fksWpIJIdpgCJHW6+WNSoy9r/Y3zJd5Ig5KJ:sxZmA1/fksWpBRHbtw/6s
TLSH
T1BA32C9526E34697B8CC7D219BA55BF53E2F99036A5D01E48AAFCCA1C04E66CD2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e3b97747aece8dde156350930ac4a7a249210abac8e477a87ba632c31abbfc89
MD5 da73ad2c632e01074ac910d93ecdf762
SHA1 94c417cf2fb7bb479f3ca8b6473e5c50c93c1c07
SHA512 a691feb445715a5fbc572c32d36af75951f18a2b4ecb8377a7cd966a6ed7b2c4e18b292121c9ee260cc36be98c1a0980f2ef148dd458e3ce2ae0aa4bd30103ee
TLSH
T1BF61A382A9275391FFDF01BD99FFA5C336338884C9A36D3184ACE5B6990DB7E0813184
MD5 SHA1 SHA512 TLSH

Submit Download

27edd739-58d9-434f-b843-997a13a7f589.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\27edd739-58d9-434f-b843-997a13a7f589.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.citius.mj.pt_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

1e662436-5bea-4c67-9ec4-19826ce97764.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1e662436-5bea-4c67-9ec4-19826ce97764.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7910b13f-283b-4ac1-93e0-eb218c3ce9c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7910b13f-283b-4ac1-93e0-eb218c3ce9c8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d976ea7fc0a6b395c9355ff4ddd385a413a70554f8a0a902ea7695b1e94c29f1
MD5 30bede03fa600c907f92e20d28abdcea
SHA1 dec6d66905269820eabed489ab40e43e7d6ec4b9
SHA512 84e9afcfaf5430b172093a3c2e1bfd2b7fcafe3f5cd14a8c8797f028e7b5d7839d0e5cc88d63fb16efd09e9e4201bf55d2bc4f4676de960e323a312a1b4787a9
SSDEEP 48:K0+5UY28slbQ3YISwlK9U1mlxe1YPQMeyLZo1JTXrEbXyvIShEK9h1LExpUYSTXw:KYpOKyYSKqIKjSIEgKNieR
TLSH
T1C3913085717A025039FE398846A5872E025131733568E67BBFAC41B24E2FE551CFFEC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7e463da-c72c-46df-9a38-5da3eec946a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7e463da-c72c-46df-9a38-5da3eec946a2.tmp
Size 27KB
SHA256 709ca5b66119170f8e1c99561f1794f6e539c613b3c84936f1a38f9bc7df740f
MD5 d66c008a7e36e625d60f29e72e9478e5
SHA1 9ffc63538281b2ce897e337290c29f534153ea63
SHA512 ae511b25561ae833d558c7c53fca5ff70d02f5769039ef511088aa5339be9365dc6683e1d457a2a2a79f6791b1504b102f2a363c1e1d6d77b8b820c1cea000ae
SSDEEP 768:ss30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72nrolZMF:ss30AbSWvS2l9u1jaLmLZ120O
TLSH
T16DC2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C7A6548D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc45ca51-39d7-402d-bd20-af047ea8b533.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc45ca51-39d7-402d-bd20-af047ea8b533.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e3a675343a38dd7b0446859ef7afd2edf6ffd9b900c13034ce09bae46e2ff230
MD5 a00466c2d6eb64d539b2ca600101b72e
SHA1 5f8dcf80193a04e9d447718b84ed8724434f98e4
SHA512 2f8387cb447bad23b53d2489b8dd44358a3069fd77055a84114f52281d1065e90cffd96e5674d3debc3dc2483d71560cd88da801d09fbe1a5efb2ee935486b53
TLSH
T1CC413A68B6F90148B3B36E4A9BF7A86E447E79772F06D55D10110E4F0B22B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads