hxxps://amycti[.]com/

Analysis

max time kernel
118s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://amycti.com/
Sample261023-sd4bmsywcw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{0B525871-2D40-4F04-940D-789C42366BCD}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4684 wrote to memory of 5072	4684	msedge.exe	84
PID 4684 wrote to memory of 1644	4684	msedge.exe	85
PID 4684 wrote to memory of 5012	4684	msedge.exe	86
PID 4684 wrote to memory of 5012	4684	msedge.exe	86
PID 4684 wrote to memory of 5012	4684	msedge.exe	86
PID 4684 wrote to memory of 4588	4684	msedge.exe	87
PID 4684 wrote to memory of 4588	4684	msedge.exe	87
PID 4684 wrote to memory of 1728	4684	msedge.exe	88
PID 4684 wrote to memory of 1728	4684	msedge.exe	88
PID 4684 wrote to memory of 3776	4684	msedge.exe	89
PID 4684 wrote to memory of 1728	4684	msedge.exe	88
PID 4684 wrote to memory of 3776	4684	msedge.exe	89
PID 4684 wrote to memory of 3776	4684	msedge.exe	89
PID 4684 wrote to memory of 4344	4684	msedge.exe	91
PID 4684 wrote to memory of 1752	4684	msedge.exe	92
PID 4684 wrote to memory of 4344	4684	msedge.exe	91
PID 4684 wrote to memory of 4344	4684	msedge.exe	91
PID 4684 wrote to memory of 1752	4684	msedge.exe	92
PID 4684 wrote to memory of 1752	4684	msedge.exe	92
PID 4684 wrote to memory of 2472	4684	msedge.exe	95
PID 4684 wrote to memory of 2472	4684	msedge.exe	95
PID 4684 wrote to memory of 2472	4684	msedge.exe	95
PID 4684 wrote to memory of 3444	4684	msedge.exe	99
PID 4684 wrote to memory of 3444	4684	msedge.exe	99
PID 4684 wrote to memory of 1756	4684	msedge.exe	100
PID 4684 wrote to memory of 1756	4684	msedge.exe	100
PID 4684 wrote to memory of 2968	4684	msedge.exe	102
PID 4684 wrote to memory of 4252	4684	msedge.exe	109
PID 4684 wrote to memory of 4752	4684	msedge.exe	110
PID 4684 wrote to memory of 3524	4684	msedge.exe	111
PID 4684 wrote to memory of 3208	4684	msedge.exe	113
PID 4684 wrote to memory of 3208	4684	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://amycti.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffac5bdc188,0x7ffac5bdc194,0x7ffac5bdc1a0
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,5600019253574650163,7466712128415251579,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2656758433302541638,10380907918282057216,262144 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,7988026783952144447,6373283792086786070,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,5820274806581208170,8494245835085024526,2097152 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,5430327986324561708,10830076322347864070,2097152 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,13225333523047444715,13556001235834528830,2097152 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,1020846297921040172,8094357262061612562,2097152 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3592,i,7244182116595641040,4239746428422015751,2097152 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,3470668305799165344,3664464634897368445,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,14888404611197157983,10843115758429781717,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11182890166867555051,15750598991814572553,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11182890166867555051,15750598991814572553,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,2683167067603904896,14584908168814104716,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,7030959120243534678,15796523830965980651,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,13753635005516572924,3878904338058840841,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,273329646425126033,17026298862068041434,524288 --field-trial-handle=2280,i,1101823399518034128,11499010870757825850,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

265f9992-1dcd-4978-931e-5e5b510e4cbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\265f9992-1dcd-4978-931e-5e5b510e4cbf.tmp
Size 18KB
SHA256 bc6ac1560361ce7ec04978e983d599a57099231ab1c6f5abb867ed2d68e31153
MD5 2f2d6c9bc9f506dcf7699efef78af27b
SHA1 fc638b91eeb61c5e08a452eda23ad024ff2c3c16
SHA512 e080b349fd7bdffae9b070cc20e90cfc517a54038de5688b88864e5c90b0be417c24485df2fda6d8c7753af649dcd1a6668a847756dd07f14aca5294dbdad3df
SSDEEP 384:gQkUSv0sNFSd5zTvuBGYX5EOFNw482IouEIIld:I0VRAGYuOFiR5ouELH
TLSH
T1AC827C359CB97C778DA3E511F58A36039FA49027DBD86F90D6DD2F1C05CA19C230BA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b16c75c-1334-49b1-98fb-a97711fe9f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b16c75c-1334-49b1-98fb-a97711fe9f61.tmp
Size 8KB
SHA256 5236e36b41cbf127d69252005926fd419f2bde065c1d24c5b30760a40356ba1c
MD5 0ffe979c3b5b8e08293e3e689760b8a7
SHA1 3dfb4669f72050ee91d2054b61b6ab61a7d2aaf3
SHA512 e2fc1d8dafaf1570dd701f6495f2b18f4a8eb1c1f23593236c8f3002b544240d1a3e22ae6b8a0b477761c69fe0a113fef91c76cae88359768f14e4c533b6cf06
SSDEEP 192:OONo6DphiqQmiUyPm/SwGYX59ezvCnyRWNdetEkII4Crq56xU6:OONo61xjSwGYX5EOFNQ48U6
TLSH
T157120935A8F8BC7B5DD3A951B48735035EA8512BEB897F50D6EC1E1C01EF19C130A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43fcb541-994a-4d3d-b9ff-39c4862b177d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43fcb541-994a-4d3d-b9ff-39c4862b177d.tmp
Size 8KB
SHA256 0c6c453e64d115f5280cf0637ed7bbd90b589b2cf071d60c213eee0dd9b48717
MD5 1ec13a94b092d42b1ae4d8dd6db96a08
SHA1 5c5cd8843e502862b7c822cad6b3b3bd7b6e2dee
SHA512 548714d20c854cbae6133096d20a87515c0a3a76c1a75810c011df88392d127fc2c123487d0dd7ca65d63b675292de6e7e0ffbc93e0dcc79b900a3a11a3c5864
SSDEEP 192:LJONs6DphmqQmiUy8/q8wGYX59ezvCnyRykk7RYU6:lONs619XRwGYX5EOHWU6
TLSH
T19602F935E8B87C7B8DE3AE45B58736139FE8212BAA956F44D6E81E1C00D768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44d603b2-e994-4d32-bcd4-4764ab20a1f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44d603b2-e994-4d32-bcd4-4764ab20a1f7.tmp
Size 18KB
SHA256 1f8af4934b8180e6f919e1d07aa6086b8afe77da37125aa15e66e55308661c27
MD5 e25d05ace1bb9a4a9b84785405eb38b9
SHA1 3aaed8be97874abfc42649c46ba2a8499c17f2c6
SHA512 4002c64241543a4fcc0f7da95e43faf9fe7dde3db61be2633c3745ab0abea204215d808820487c0ddf6da06b2032a996c30fcb55ff559a8011e0775bdbe966ba
SSDEEP 384:oQkUSv0sNFvd5zTvuBGYX5EOFNw482IouEIIld:g0qRAGYuOFiR5ouELH
TLSH
T1E6827C359CB97C778DA3E511F58A36039FA49027DBD86F90D6DD2F1C05CA19C230BA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

09146e2c-280e-43c8-98d2-70e9d5b1ff7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\09146e2c-280e-43c8-98d2-70e9d5b1ff7d.tmp
Size 10KB
SHA256 33905084b8b04350dc4b042ee97e88f897cb97db6a453d5a808da9ac8e907d25
MD5 fb7afcecc86c2344870ca078154d8161
SHA1 270dce31d1f840e2b3d7d40a8ee385b50ef0b96d
SHA512 8e35e8d0571ec25834cff09c6edf042605d4c93ffcc3f70aa8a1d8ce13373d7cb69d30635f5e8d0a250e2b3bc33d383141163c255060e02576fdb1e08d47a3a3
SSDEEP 192:sxZARtWq/fysaRIdp51HW6+WNOw//YgVAqVIg58J:sxZAiq/fysaarHbl/9y
TLSH
T14B22B8526E74B97B4CC7D20DBB15BF13E6F9503191D11E58A6FC8A1C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ea87416-2ab8-4f2a-b4cb-72dbfcf2342d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ea87416-2ab8-4f2a-b4cb-72dbfcf2342d.tmp
Size 10KB
SHA256 4ec010a0098466b07ce46dd66ec173ff8197ece7e3503d5ae3e0c0372ff6d2d7
MD5 d9cfa844319ac53e8cea72f9d96958b9
SHA1 c73752d2b328f0de6d4f866326c0f44e68d82e69
SHA512 69b2c256d256887a124268e23ffb3874d15aaa06f37122fbfc6c8ee6a2b77b792c1958e4cc3001e1b0275c5d8ec9734342f461ab2827dcbcc81f0e909784ca77
SSDEEP 192:sxZARtWq/fys1RIdp51HW6+WNOw//YgVAqVIgrJ:sxZAiq/fys1arHbl/99
TLSH
T11F22A8526E34B97B8CC7D20DBB15BF13E6FA503291D51E58A6FC8A1C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15b01e2a-ba33-4448-a32c-41bd6586927d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\15b01e2a-ba33-4448-a32c-41bd6586927d.tmp
Size 10KB
SHA256 7b9d09e844ac44215528177f35bc02d5ecd27f62c637a6957bc23f8248221022
MD5 e7f9e5a5b0e2832ca3e2c40573007392
SHA1 ed77a3c4900f05815983b0c3e1cafa0487744932
SHA512 d9e1ba1126277efb6870ffa368f766919f0a4daba2d89b80dec6d6edbefe54032f01c6e5c65a7e2660dfa2a413960dac1d1256a4f0c0d2c12d337e55b2f1453e
SSDEEP 192:sxZARtWq/fysNRIdpj1HW6+WNOw//YgRTrVIg5uJ:sxZAiq/fysNa5Hbl/tw
TLSH
T13032A8526E78B97B8CC7D20DBA15BF53E6F9503291911E48AAFC8A1C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c6d056d-cbae-4ec7-b281-6fb90d325dc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c6d056d-cbae-4ec7-b281-6fb90d325dc6.tmp
Size 27KB
SHA256 b7d937cba8f334929405771135cdbb219836001ef042ef4074670ef1c82595a3
MD5 d1e0647fc6b902255fbbf7cd32b475f5
SHA1 8e17c4f976dcdbbc5df6af40dd002e69618cb6e8
SHA512 b9a08ee9af4f60453f214d8cb5ff3d073d37e3da1b1d797e30c890d2c023d467bfcce7b99fa82e676ecfc2018b17646aa5fbaa2f04d5e1740e945b5ed95cf54d
SSDEEP 768:zkichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzkroj1b:zkichfPWvPZplu1jan+LKgzv5b
TLSH
T181C2E93B644CCA7E4FC01E9DDD1A6F9B7E9802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78c44eba-057e-496a-8518-007231e7ed57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78c44eba-057e-496a-8518-007231e7ed57.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

95143844-1c2f-4611-add3-f0657c8b66d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95143844-1c2f-4611-add3-f0657c8b66d1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 4a34a5266dfb4bab8f5944b56e1ccac4afdf843fe63760328505b70d64ed40a3
MD5 3da23d865016e138ad680e61d6078576
SHA1 4a754cde3fbc0ee5e657fa286edbf3cc72d30cb0
SHA512 cf1af9fe34b6266b551df0b5697a568eabf81401d8c5e56b17360923ccdc98c379e8cb2664409bb6982d523a99457d9593150a15b464e7204c7155c00ea5b8b2
TLSH
T17761C6C01EB9F5A9FBF84378C5DA13A738F498B8358B1F52105BC1B9640B72558C032B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d7d3506963d5ed66065d6220cb082c13ec4fd60b6d3a95770a4c0432c6c7da84
MD5 8add5346c239bb645fb5b76fa4730f8e
SHA1 4596e63d2390fa279f61d364d6313a3594aaaa5e
SHA512 9322c3e11556dc2a6bb2a02ae344e81bde875d05267df2ed0b2763e8fdce6541c3d5270a8752d3c7692cd9e07b27382f10bb34d23b384746f00f3f936a27a133
TLSH
T16561B5C01EBAF5A8FBF84374D6DA136B38F498B8358B1F52105BC1B9640B72559C032B
MD5 SHA1 SHA512 TLSH

Submit Download

5687b6ed-5dd4-47ec-97fa-49117080910e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5687b6ed-5dd4-47ec-97fa-49117080910e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7757dea3-c0b6-4494-9c3d-cf07c16af188.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7757dea3-c0b6-4494-9c3d-cf07c16af188.tmp
Size 1KB
SHA256 45a222ac0ee8c2dd1471073d3d05a73928575c722794cb7575c5522d0362d5d1
MD5 85bd3dbe833d7cb5e18ed4d5ff818348
SHA1 598a8d4f56dbdf24ce86bb2c30b5b050e18de502
SHA512 6ee0b4a0f9be6c0c41720b9dd0a919390de7ae3b0af1d80b25bf178ad63d585125dcb46c6a84e8cb8a2e570e75dd4e97f292435b60cf43ca5e70070aaed154a9
TLSH
T1ED2178F7C3D5856E990156F09A24AE2BCE2D0A15822C3C19C9E4EF2B93E2475E10595F
MD5 SHA1 SHA512 TLSH

Submit Download

a9f749a2-a838-41f5-9a20-7545c7a4309e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a9f749a2-a838-41f5-9a20-7545c7a4309e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d88dfd49-0998-4335-a6ab-89a9fac1e72e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d88dfd49-0998-4335-a6ab-89a9fac1e72e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e317bbcca9727da5291680f8ae3152d281ba36d38f70d03ff3494175cb5bdde9
MD5 d83c59b891cf3a08e8c6d10dad22c8f6
SHA1 bde4a8e975659d14783bcb7b8e362ad2ab0929e8
SHA512 c074c3bde4b25e6f4b183be523729c39ab8648e095a5af755948e64c9d7e75b4ddd9b0f216e208a547e7acc55de7be87ec527e9615738bdfb27b8737efab7f5b
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGu0yLVUplXD34brOrIS94K9d1P4x9oYePnI:K4HmKg4Gyq8K7qITSKkU21
TLSH
T14791400172BF2211397F2A8C45658A6F025131B33498FE3B7FAC51A25E6EE441DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8312438-3b78-46b3-bfb0-bc2313aa61c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8312438-3b78-46b3-bfb0-bc2313aa61c6.tmp
Size 10KB
SHA256 97bf857ef06f8503c10136326b92483a06f94f26b31882e6e2c259310af566de
MD5 1ceaf2d72679d8c28db35178c00e8054
SHA1 c7662f7bb8735abe85184b552fd100e4d12a7f3e
SHA512 5cacd87313d0200ae6a2d8bc6559788030c0b2be5a26241797dbecebba2ecd1136822ceb65501b2bee5d3585188e8a7c688a9f8d3dde41a18b1e9feb7136d9ad
SSDEEP 192:sxZARtWq/fysNRIdp51HW6+WNOw//Ygi0qVIg5uJ:sxZAiq/fysNarHbl/mw
TLSH
T13722A8526E64B97B8CC7D20DBB15BF53E6F9503291911E58A6FCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ba19790-28d2-4d25-9c77-04d8c0b5ae8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2ba19790-28d2-4d25-9c77-04d8c0b5ae8c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af879ca0-d290-4e89-9509-0b260cfc6538.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af879ca0-d290-4e89-9509-0b260cfc6538.tmp
Size 26KB
SHA256 a898eeb1a45453a5b6bd1214a260ea04c626fc7f8e8312d461674e8d1ff63a9a
MD5 368ddf69122b109de7c9a6dab828e233
SHA1 afcf54b97637fc546558ef5d44a35cf6b23d3748
SHA512 15ade7ec57a32aefb2113a46c1594c2825e5e615dc989d384ef3bb66a9b14291211817d65ab2077a635026a67293d10607a7d790441ac3bf7a8a4e1b65093928
SSDEEP 384:/iFzQkUSvFzsNf8TUNTUlIlvd5zUvuBGYX5EOFNI482IouEIIld:KFd9uwgbmAGYuOF+R5ouELH
TLSH
T1E8C22AF248E7A87BD9AE9B13A77D2D038E7CC017F5945A50B788191CCC861BFD30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7005cad5-f93a-46ac-9c6d-92260cc9b5c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7005cad5-f93a-46ac-9c6d-92260cc9b5c9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 68f7bf0f773c08f5d09bb94752d5fa78338131403d9ed3397168969f222c418d
MD5 d2a07a9f62347d1bfd7667553dbaa6b5
SHA1 f5c30e0aea5882eec16b235b690907ed7b64344a
SHA512 5dc46d373f61a29fda844ae092b6e73cc1169a20c3aa446f260ec7c49769d79b69c2d92e10ccb8f34437f1557c85d699b293001bb53c20a2342794114a6e57fa
TLSH
T167413698B6EA1148B3B36E5A9BF6A8AE447F78772F07D05D10000E4F4B67A00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads