hxxps://discord[.]gift/Hwu82SsRK8n7Tmxu

Analysis

user interaction
yes
max time kernel
11s
max time network
12s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://discord.gift/Hwu82SsRK8n7Tmxu
Sample261023-bckpgabt2n

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
26	discord.com
27	discord.com
30	discord.com
34	discord.com
41	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1140	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{80A3161D-DF43-45B9-BFBC-286B75101B72}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{C834AFB1-8160-473A-AA95-21E5971202C9}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 4680	2284	msedge.exe	85
PID 2284 wrote to memory of 1140	2284	msedge.exe	86
PID 2284 wrote to memory of 1032	2284	msedge.exe	87
PID 2284 wrote to memory of 1032	2284	msedge.exe	87
PID 2284 wrote to memory of 1032	2284	msedge.exe	87
PID 2284 wrote to memory of 1416	2284	msedge.exe	88
PID 2284 wrote to memory of 1416	2284	msedge.exe	88
PID 2284 wrote to memory of 2948	2284	msedge.exe	89
PID 2284 wrote to memory of 3740	2284	msedge.exe	90
PID 2284 wrote to memory of 2948	2284	msedge.exe	89
PID 2284 wrote to memory of 2948	2284	msedge.exe	89
PID 2284 wrote to memory of 3740	2284	msedge.exe	90
PID 2284 wrote to memory of 3740	2284	msedge.exe	90
PID 2284 wrote to memory of 2432	2284	msedge.exe	91
PID 2284 wrote to memory of 2432	2284	msedge.exe	91
PID 2284 wrote to memory of 2432	2284	msedge.exe	91
PID 2284 wrote to memory of 2824	2284	msedge.exe	92
PID 2284 wrote to memory of 2824	2284	msedge.exe	92
PID 2284 wrote to memory of 2824	2284	msedge.exe	92
PID 2284 wrote to memory of 4360	2284	msedge.exe	96
PID 2284 wrote to memory of 4360	2284	msedge.exe	96
PID 2284 wrote to memory of 4360	2284	msedge.exe	96
PID 2284 wrote to memory of 1508	2284	msedge.exe	98
PID 2284 wrote to memory of 2136	2284	msedge.exe	99
PID 2284 wrote to memory of 1508	2284	msedge.exe	98
PID 2284 wrote to memory of 2136	2284	msedge.exe	99
PID 2284 wrote to memory of 4892	2284	msedge.exe	100
PID 2284 wrote to memory of 4320	2284	msedge.exe	101
PID 2284 wrote to memory of 4892	2284	msedge.exe	100
PID 2284 wrote to memory of 2004	2284	msedge.exe	103

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://discord.gift/Hwu82SsRK8n7Tmxu
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x218,0x23c,0x240,0x210,0x2b4,0x7fff6d6dc188,0x7fff6d6dc194,0x7fff6d6dc1a0
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,151919114860457801,5150644195588434749,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,9440195279186391742,180162154490177703,262144 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,17536535207520840183,9529412375615084136,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17368201655859989012,190266334476693592,2097152 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16484288722828824641,17255811853877830976,2097152 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,6102572031528804324,9487521166290359713,2097152 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14752271830823414433,4175750568635014948,2097152 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5060,i,10299433531238425476,2805219265397130033,2097152 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,3096519853015110889,8408471694743159616,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,6490103611648406462,4695746190429998634,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,17362290856402992108,2956414938331087268,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,17412456037158738213,17015991993284824942,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,18371234473970439788,2843154224305861735,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,18371234473970439788,2843154224305861735,524288 --field-trial-handle=2256,i,2423645728064780031,10604698317222837601,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  PID:2004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

941b50ef-ede6-4ec4-b21b-d912bed3a15e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\941b50ef-ede6-4ec4-b21b-d912bed3a15e.tmp
Size 18KB
SHA256 8f3f9c3202ca753baadc8ba5c181b810a3d07160a683d791af2e802563714eb3
MD5 e88eb082f8a2322e657adeceae95e798
SHA1 510c01c9ba1676e8e60eeb1e7e2461c0bb22e117
SHA512 80a4b4e74000999edaf7b6361a008a257d21cb57941a841af8b968e004edc3028610ee158d1ac63fda606cb0e6f9c764b814db057f626fd33fcece928f7fb715
SSDEEP 384:aQkUSv0sNXDw7ik8oYOjTV+WOiGewjE+2Jr2IgMtUXIIlb:C0dfrnzODjElJr5VUXLV
TLSH
T186827C36A8782C778EE6E640F54A3203CFA88167DA851F94D5CD7F1C06CB2AC235BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de3303c2-7181-4686-9a86-15693d66a51c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\de3303c2-7181-4686-9a86-15693d66a51c.tmp
Size 105KB
SHA256 4ee1e0056f41a046e8efbfc68a394a9993e9e1572e402e58600b2c2d27cdbad0
MD5 cbb9f3725f3320854f02b5fb7d1eee93
SHA1 9c687195aa5a8f617023a505ab65229bb9a04596
SHA512 a8e728ca1dd3f2320d59c0244f1a4c82c5213ac624c22798462d831fa8936055eccd554951d7106079089867cda6e052f87a3bef24aa908224fd8e90caa6ebfc
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

11418df7-d51b-4786-b05e-03a14de77b5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\11418df7-d51b-4786-b05e-03a14de77b5e.tmp
Size 10KB
SHA256 e78baf66dded111aaa55d2a0f573e2c55c6ccbd15708a85463b79296c8d44d5e
MD5 92a8080cb942ec7f8bcc2a22eccf9fb2
SHA1 ef1f818f3b93448065e502d2a15d41c99f05c600
SHA512 99f1dfa7414b8915c227cbe24d8228ff4a77dcb28d45f0ee439156a6e78f36c84cff5dd03b740038a46ed5f3f31a637f1cdea65ba8b110aaffc9bce4ce807ad6
SSDEEP 192:sxZrCRtW6/fPsW1IdpE9HW6+WNzcb/YRPVwcZIgrJ:sxZrCW6/fPsWGsHbg/mJ9
TLSH
T12E22B9536E38A9778CCBD20DBA15BF53E6F95032A1D51E48E6FC851C05E66DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 138KB
SHA256 13050a4f904230e1617429a7f6f42ab959e81a99c099d4542eb43af9beb612d2
MD5 736c7099245ac180fcdb3b9c70be5223
SHA1 65d3f171703b46e78324d2b4325a8baac7ef56c8
SHA512 68f7b15fbeef156a37a2cc5127669af56688cdab299e409239b31c0aa8a251a5dd684691ccf493f7ae517a6df97ffd9c41dd8f41d14b4799711aa73c21d2ed1b
SSDEEP 3072:+GeEWou+1+XxcWZ69ArO00oKkM01X66tsyFGKgSFs7K9riZwHHByV7NsqyCyCEFD:+GeEWou+1+Xx/Z69ArO00oKkM01X66tb
TLSH
T116D39BC5067102DCFB5A2990CB4334D9DFC48856BFC604ADEEFA5D189BA9AAD2301F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0f6c83e-5f21-4bc4-94fa-94c6e6b8ab7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d0f6c83e-5f21-4bc4-94fa-94c6e6b8ab7e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

c7055ab7-1ee1-4302-9f3d-96f4922ac366.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c7055ab7-1ee1-4302-9f3d-96f4922ac366.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

eac1d35d-b09d-4e2a-b130-dafdb8c7bccb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eac1d35d-b09d-4e2a-b130-dafdb8c7bccb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 138B
SHA256 59fc7186a07bdd200bde22ed0e8ccc38ac433cf759f96c5a40f544a476910f29
MD5 8bb9c59bd1da51e2cf8c274511667863
SHA1 7d878ea5d36cce35d2262a1e17307355b1788240
SHA512 f5a63d985c14504a0ffb6b92a82915c1b410bb68b9288ac46bb98fcc4874f5e7769afab5659a8a5a37ae0244b0086890c55c69a32d60c4d7790016150d1df5d4
TLSH
T107C02BE3F0500310CB110F40023254ACC3002CCD8885C88CE02330287475F1F6205ED3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt.tmp
Size 233B
SHA256 c1344a753a20c59384ba777b989615ed64e580c1440efbd40a656aa51b4ba79c
MD5 59036fac1322215eb69de73eca4c95b4
SHA1 879fe24fff8f7500291c10cfe40d7e528b41a83c
SHA512 bdb79738f19065e367a2e9d0e20decd29c30e9ea971867f01be0e9b6fb693d9f3debb76c9d804963f5326e24a8515182e2e291d6877d873b361d5c739dd47f99
TLSH
T17AD097A7E4316000E7F70F4105B110AD82502CC88058A08CC102303E68B4B5BE310E83
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 403a39c29d2a1913fad507adb321e2941559141409d52d9a93961bb1ac40fe36
MD5 e2a99b67d20520766fa89be68dcc118f
SHA1 e4f811baa7f30a46d7e588c26dfab6b377d151d8
SHA512 97f720797e3aa1570ff8aadef6a7043d175b2c51861caed72004006d8e2d7cf83552deeccb8a5ba876a3ed664099d12cd70211fa1e242a223348b5a12f670d2d
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBYQgKU:Xpn+q
TLSH
T1F891E051307B02417DBE254980B6965A625231F3345CFA2E7BBE44A14EAEE444EFF8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd168f3b-ec48-4ea4-9101-ef0ae59e18af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd168f3b-ec48-4ea4-9101-ef0ae59e18af.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ea09fc29-20cf-40eb-9317-900d6bc049f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ea09fc29-20cf-40eb-9317-900d6bc049f7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1f08dce-682c-425f-869c-afb9a0ab068c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1f08dce-682c-425f-869c-afb9a0ab068c.tmp
Size 27KB
SHA256 8834b04d5c27beec29b7f5b839cc1ae0f3be94efc22fce0efcdc4ea06a56df1d
MD5 76b3804600a9c827c632c57c08453612
SHA1 c18c5be1adf7302003c23c892bda1c87b853fab9
SHA512 91e899fbeb9f1c242c9eedbb70f7163d7c0b3390a2bec7f52349d53177a5438117c4ea9f0c977fbcefa3b8b0e88d51f4b2177f22c29a0739b28b09b9df9485b0
SSDEEP 768:sGK9uzYWvcQus8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k37ro/+8n:sGK9uzYWvcQusu1ja0HL7Q3I/+8n
TLSH
T1C9C2F93F640DCB7E4FC01A9DDC5A6F972E9802D7A6588D4047FE984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b786b224-d51d-4b6a-b7c2-93de11859e1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b786b224-d51d-4b6a-b7c2-93de11859e1b.tmp
Size 8KB
SHA256 f73367d85cf900d6cbdc23b8b59ad08319418020673786e2681d634dcf009c6d
MD5 f41a9036dd89c317f195b78ec5ecce8b
SHA1 1ac89b9fd7e94970ae91edb57ecfe7c8b1ed26d5
SHA512 4935ddd8a00564b81804738fb2f434813e1f100e60581ed9c4d484ec5e236ba890726dc892e2aaadc1707467700323c49e5e0ff9d01ae33de26e0afab1f59ea9
SSDEEP 192:3ONi6yDQmiUyOcoOCTVg5WOiR0ewjE+2o3UkqVU6:3ONi666oOCTV+WOiGewjE+2NrU6
TLSH
T1F1120A3678385C779DE3A645F48732138EA84167DA867B90D1DC2F1C06DF6AC234BC65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd73c916-d099-45dd-a9e4-546d1bd235f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd73c916-d099-45dd-a9e4-546d1bd235f4.tmp
Size 8KB
SHA256 b7d0e80d1ad67bb6d5bda97148eabe897bf077f206279ad8b250d141f6bf2b63
MD5 2e10110af074e80a4b45c1ec24bff8d3
SHA1 f66284996591663f8811a01902045547003d11fc
SHA512 b1cfb86c388565caf7aaeaad01fbc0b64efb3a5117339234271926ea33a97fcb7df66ab6ec39847c43f68f065da8000dff844761151ea243384a06d53d640b38
SSDEEP 192:SONu6ygpQmiUyGctOCTVg5WOiR0KzPjAU6:SONu6lHYtOCTV+WOiGUEU6
TLSH
T1E102C835BC682CB79EF3AE06F48B37139FA8116BD9552B84D9D81E1C01D766C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0fcfd2de85915829d880226222187415e4c67dc5a1a506f47a7d30f5c12df59c
MD5 1cc5acdb70c7b1c37e43d61b8541a097
SHA1 5e7024771dd79d21f118c7d781e0d8944ce1108b
SHA512 40bf1a77cca17a38524c2273e5ce0656795f0f417bccb0a1636e8395604da05de455032523783e8e5c5f8ee8f0815422fde52dbd368f500e18860a9d0c187e7e
TLSH
T14A411C5CA6FA1148B3B36E569BF2696D487EB9772F06D45E10010E4F0A23E40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads