hxxps://www[.]isij[.]eu/simplenews/confirm/216667/1785416537/uEaZh9PZ20Sk_E%E2%80%A6

Analysis

user interaction
yes
max time kernel
9s
max time network
9s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 15:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.isij.eu/simplenews/confirm/216667/1785416537/uEaZh9PZ20Sk_E%E2%80%A6
Sample261026-snbdlsfx4m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{8F94ADE4-D7A6-44EF-B47B-983907B2EACB}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 2708 wrote to memory of 980	2708	msedge.exe	84
PID 2708 wrote to memory of 4744	2708	msedge.exe	85
PID 2708 wrote to memory of 4000	2708	msedge.exe	86
PID 2708 wrote to memory of 3932	2708	msedge.exe	87
PID 2708 wrote to memory of 4000	2708	msedge.exe	86
PID 2708 wrote to memory of 4000	2708	msedge.exe	86
PID 2708 wrote to memory of 3932	2708	msedge.exe	87
PID 2708 wrote to memory of 4852	2708	msedge.exe	88
PID 2708 wrote to memory of 1860	2708	msedge.exe	89
PID 2708 wrote to memory of 4852	2708	msedge.exe	88
PID 2708 wrote to memory of 4852	2708	msedge.exe	88
PID 2708 wrote to memory of 1860	2708	msedge.exe	89
PID 2708 wrote to memory of 1860	2708	msedge.exe	89
PID 2708 wrote to memory of 400	2708	msedge.exe	90
PID 2708 wrote to memory of 400	2708	msedge.exe	90
PID 2708 wrote to memory of 400	2708	msedge.exe	90
PID 2708 wrote to memory of 2276	2708	msedge.exe	91
PID 2708 wrote to memory of 2276	2708	msedge.exe	91
PID 2708 wrote to memory of 2276	2708	msedge.exe	91
PID 2708 wrote to memory of 4704	2708	msedge.exe	96
PID 2708 wrote to memory of 4704	2708	msedge.exe	96
PID 2708 wrote to memory of 4704	2708	msedge.exe	96
PID 2708 wrote to memory of 4552	2708	msedge.exe	97
PID 2708 wrote to memory of 4792	2708	msedge.exe	98
PID 2708 wrote to memory of 4552	2708	msedge.exe	97
PID 2708 wrote to memory of 4792	2708	msedge.exe	98
PID 2708 wrote to memory of 464	2708	msedge.exe	100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.isij.eu/simplenews/confirm/216667/1785416537/uEaZh9PZ20Sk_E%E2%80%A6
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffd0022c188,0x7ffd0022c194,0x7ffd0022c1a0
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,3063082307837814067,2016946882089976550,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,18209387547247353652,12640126737431678158,262144 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,1839382061431626264,6610034945088098271,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,9860494680568638226,6877622695056063313,2097152 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,13789321635034195068,17087430947982959391,2097152 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,14874867996710691440,6440390756579734644,2097152 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,14564162948364982310,11813280682828434578,2097152 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5156,i,13776589254496789607,13256166457148631590,2097152 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,15385284922314070580,10422507497560283794,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,13936520121104325754,18303166263207068690,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,7962645054909056613,4259772030233635829,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,7962645054909056613,4259772030233635829,524288 --field-trial-handle=2448,i,1126672949621049560,5840707535279902069,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0a1f7e32-50f1-411c-8b5e-3f2d333cbcd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0a1f7e32-50f1-411c-8b5e-3f2d333cbcd7.tmp
Size 8KB
SHA256 f269f77ccef59a3a8cc89f054969c3a107f3201fadd4a7e91bbc0d44d597ff2e
MD5 50f451e60930df71e2a0c8710c0ac575
SHA1 d1d19c00dadc8b6d3dcabad651ba5329bd226c8a
SHA512 d231d07a3b08354e08c893d5200bf7c313d0dbc6345a8585cdab8e488a36ca6676516cc9495ac3e7f03449f50ab2b574f85648b21a1b31e03bd7ad16fdb81c2d
SSDEEP 192:YONp6wlDuQmiUyIkV4X58gZMOKoAANvesqGU6:YONp6kqgV4X58EMOzAAsgU6
TLSH
T1A1121A32B868BC3B5EE2A554F48735039FA9512BE74A7FD0C5DC2A2C01DF66C230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54705dee-4996-40d2-86ab-592cdcf3436c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\54705dee-4996-40d2-86ab-592cdcf3436c.tmp
Size 8KB
SHA256 3f09b4e9a1f86c3f08276d329a07b2d650cd4c5c2e77fa4d7b55ff7917545e93
MD5 2630a68da144597bffb37d9f6c02c380
SHA1 41632d692f7430e6c74cbfcbfffa87822018f8fc
SHA512 9c024b4b78e13920f3f2876e5f02a30066eaba02bbd8df4acfa34eb7a79b63c0f292876519463cc3ebd2f413354af81f7098a27edd3d48a902140265425b9a57
SSDEEP 192:1ONf6wlDgQmiUyckW4X58gZMOKoAaDlyqnU6:1ONf6kgMW4X58EMOzAqFU6
TLSH
T1C602FA35B9787C7B8EF2AE09F58B27139FE5102BE6552F84DAEC1A2D00D765C1307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

17ddcb8c-48dd-4472-9af2-b6befd660e1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\17ddcb8c-48dd-4472-9af2-b6befd660e1b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6f928bfe-00ad-4a8a-b7b4-5fd1cc3a1755.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f928bfe-00ad-4a8a-b7b4-5fd1cc3a1755.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b70f5215b35453dc66a56d6ad28a9048e2048c5108c9c9e8fdda9339ca99afab
MD5 3f5e08c96ec19682f3282a9425d46e38
SHA1 c38c7924a111b3d5b0c0c3035ef32c1a624b9fa4
SHA512 7061cca9f805b35b1927a2869c0848172ec8e2bff6ed6144d7faeb0107431a556d86aad2c20a15b5efe71eb4f187752f3b313ec48bec169a8eb5a09a773964e4
SSDEEP 48:KIDI1Ks04jyL2xMwuUUNb4PgISINK9s1uNxmdYHY02yLdcRtfLPwbD2jISlwK9lo:KIDCKs0+WheKiwKaq0KzifJg9pHvv+p5
TLSH
T17D911F4435BF020539BD2A8891B68B5E124236B73158E53B7FBD40A29F2FE041EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba4a7b26-5fb2-478e-8c00-d45b72a85988.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba4a7b26-5fb2-478e-8c00-d45b72a85988.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e92dbcd64573852cfc66adcb4d10b7d4243e0de1c21087c3248edc8fc12434c9
MD5 59713b03c8e585396bb016e487e3a2bd
SHA1 f5e5f057368d161a4cb72d013354c5e8726150d5
SHA512 7c62937e477c5740ab0bae15c8ad0120d415be35ccd679c19c252d662dd70345e8a5efb843636750b188c4e3fe03bbfa71d557b94d1feabf5e01c04cf61ef7ec
TLSH
T18A410948A6EA1108B3B77E1AABF6AC6D44BB79772E4AD05D10110F4F4A23B40CC71737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads