hxxps://bruh123590[.]straw[.]page/

Analysis

user interaction
yes
max time kernel
22s
max time network
22s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/11/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bruh123590.straw.page/
Sample261107-sdlftscx8s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5460	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1570888168-524493533-3242721904-1000\{76294F4A-E3E7-4DA1-A7CF-1CA6E69D8723}	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
680	Process not Found
680	Process not Found
680	Process not Found
680	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe
1508	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1508 wrote to memory of 3176	1508	msedge.exe	80
PID 1508 wrote to memory of 5460	1508	msedge.exe	81
PID 1508 wrote to memory of 3888	1508	msedge.exe	82
PID 1508 wrote to memory of 3888	1508	msedge.exe	82
PID 1508 wrote to memory of 3888	1508	msedge.exe	82
PID 1508 wrote to memory of 4112	1508	msedge.exe	83
PID 1508 wrote to memory of 4112	1508	msedge.exe	83
PID 1508 wrote to memory of 2552	1508	msedge.exe	85
PID 1508 wrote to memory of 2528	1508	msedge.exe	86
PID 1508 wrote to memory of 2552	1508	msedge.exe	85
PID 1508 wrote to memory of 2552	1508	msedge.exe	85
PID 1508 wrote to memory of 2528	1508	msedge.exe	86
PID 1508 wrote to memory of 2528	1508	msedge.exe	86
PID 1508 wrote to memory of 4656	1508	msedge.exe	88
PID 1508 wrote to memory of 4656	1508	msedge.exe	88
PID 1508 wrote to memory of 4656	1508	msedge.exe	88
PID 1508 wrote to memory of 3716	1508	msedge.exe	89
PID 1508 wrote to memory of 3716	1508	msedge.exe	89
PID 1508 wrote to memory of 3716	1508	msedge.exe	89
PID 1508 wrote to memory of 5728	1508	msedge.exe	90
PID 1508 wrote to memory of 5728	1508	msedge.exe	90
PID 1508 wrote to memory of 5728	1508	msedge.exe	90
PID 1508 wrote to memory of 3256	1508	msedge.exe	91
PID 1508 wrote to memory of 5668	1508	msedge.exe	92
PID 1508 wrote to memory of 3256	1508	msedge.exe	91
PID 1508 wrote to memory of 5668	1508	msedge.exe	92
PID 1508 wrote to memory of 4588	1508	msedge.exe	94
PID 1508 wrote to memory of 5148	1508	msedge.exe	95
PID 5148 wrote to memory of 228	5148	msedge.exe	96
PID 1508 wrote to memory of 6000	1508	msedge.exe	99
PID 1508 wrote to memory of 6000	1508	msedge.exe	99
PID 1508 wrote to memory of 6000	1508	msedge.exe	99
PID 1508 wrote to memory of 1396	1508	msedge.exe	100
PID 1508 wrote to memory of 1396	1508	msedge.exe	100
PID 1508 wrote to memory of 1396	1508	msedge.exe	100
PID 1508 wrote to memory of 3768	1508	msedge.exe	101
PID 1508 wrote to memory of 3768	1508	msedge.exe	101
PID 1508 wrote to memory of 3768	1508	msedge.exe	101

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bruh123590.straw.page/
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ffe0a8ec188,0x7ffe0a8ec194,0x7ffe0a8ec1a0
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1732,i,16764883668938854333,8858537718729697044,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,6775005639201116227,12804810466480434880,262144 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,1547783288301751880,17891972636847676795,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,11083948119699149010,4190062395029612821,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,364733733929800389,546751668169066360,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4920,i,7239377673062947508,4487890245417138706,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,4334291883417339618,15005682623784756611,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5152,i,16623029043056393202,15099852752951089071,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,7511446426660011386,3153381513009490830,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,916461014435133323,12417872948644540001,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8101499460691782520,628588881097745314,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8101499460691782520,628588881097745314,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,3269347740418126910,4709676156147242744,524288 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5148
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6772,i,15938138543278205222,16644596038956329405,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3440,i,5047444177826542911,12467657074879826665,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6888,i,5794321042308926036,14777099874526416183,2097152 --field-trial-handle=2384,i,424430644989949491,9183957906828067813,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:3768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

34909d3b-bc47-4dcb-a389-ff045a949e69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\34909d3b-bc47-4dcb-a389-ff045a949e69.tmp
Size 26KB
SHA256 b0a85f02f86bedee5c51ac409fd3b256d4b142b095629cb8372db12fbf176317
MD5 cf1cc60ea17d54840b47a5dc25610578
SHA1 fb47d1dd9a38b26141c7c047be276ad9c48b92b2
SHA512 b483bad20d87c37b37dfcb72a9a72d011fe16d7359a839e4a16486985e27e2a16e96f94a85c4ec89cf9de7c5b3d75a7c45f10cea7ecdc9cb9c9eeff6762d089f
SSDEEP 384:nUiFiZcI638Np8TUNTUlIxBwqk+cbzWfg9tF5zsdAUlrIbsa+VYIgL/7IzeoG:vFQ63KwgwUwx9tfsdZVIbhgM9
TLSH
T1EFC25C36EC94C9BBECEB8FE5A74A7606DEF04253959C9AC4C6D82D1C009B59D4307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb58490731045c4d4ef8ae90fd5b5394608566e0de59eb2fcf0ecafd0e27c1e4
MD5 a1449147626cc89b1f49004bd7e5d7ce
SHA1 e848ee4aaefc37442c33cbecb41170227e80799f
SHA512 09a97d82a24abaaf732d89be9ab3b4434bd39ecb04c04633d236c4752119bff4b381aa75666a5cca804d38dfd7487cee9fe3800fd60f91ad3cfffc59a6e0ec34
TLSH
T1B5D02B1BBEAD02A0E11331390637420031C4E140480310188490033228C268104E44F0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c9a92cbd849eecadff108aa705c8bffeefa88b48debb99ebb0a61da60d1ea55d
MD5 3eab7477df5ca8aedeabf1695c6ec99e
SHA1 47e45efb75000cd4d9e036210864e45f420f2323
SHA512 0465738c688cb93e5238241731fb0a05395e81c567aa2fffc33a9f478454ed7814c50cbc62e962000f8c572df3a8f4d2780caaf1956dec8d990b4097d0125ee8
TLSH
T11ED02B1FBAAD12A0E12331390637420030C4E540480310188450032228C268100E44F0
MD5 SHA1 SHA512 TLSH

Submit Download

0608ec21-75c2-4752-9a58-3b2da1907f0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0608ec21-75c2-4752-9a58-3b2da1907f0e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

42fcad53-ccde-4b2d-8f78-a373a5596d0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42fcad53-ccde-4b2d-8f78-a373a5596d0f.tmp
Size 28KB
SHA256 384d310da0f638363652b3c15113a294034adabfffd8d9100994dbd7165fede1
MD5 998057979322b56fa5b41084200476ac
SHA1 3ca4f36b38d758e7a01a15407d682b8a17e16727
SHA512 44f23e26b1363a54508999b08276c62208eea5152af4fce9ef8738d6ec09fd1415b8c5f26494ed3cd8ab1ea4e2995f82ffbca3ffb02078853766ba0b61866db4
SSDEEP 768:SPcas8Tw23fWRmLJQV18F1+UoAYDCx9Tuqh0VfUC9xbog/OV3VOLl/hf0+7Yroqm:SPcas8Tw23fWRmLJQV1u1jaKVOLph8+x
TLSH
T1B5D21A3F640CCB7E4FC01A9DDC16AF976EA802C7A6688D4447FA994C02C77EB51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

495865cf-d10c-409e-b261-bd3ee8e26337.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\495865cf-d10c-409e-b261-bd3ee8e26337.tmp
Size 414B
SHA256 48967add2ddcbe616eec9a3c16f50d13d85a8562ff9e5644efaa039e7de513ac
MD5 ccc692ec0439bbaccb0514099dc5e1e8
SHA1 3d23e38e90b8ec280fb35d7fa9bee230c89ee684
SHA512 a66d973d98cdc2fc00d0a6eb32d37827f48eb38b45e636e116425bc5ffbea45b1a9a08cf00eea39bb3a42eade368cf9a1778c9b0e5975b5db005e20a73118538
TLSH
T1B5E02BAAC935EC271DFD0B1C64605785D75153DB2A41454F3E3CC20D8FB272646DAC5C
MD5 SHA1 SHA512 TLSH

Submit Download

1734c936-0ed3-4063-a1c4-6b4b45399b3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1734c936-0ed3-4063-a1c4-6b4b45399b3f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

442e3020-26c6-4609-af24-1cccdf05d07f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\442e3020-26c6-4609-af24-1cccdf05d07f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

517983ee-2739-4e59-a65f-3b66e2979e72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\517983ee-2739-4e59-a65f-3b66e2979e72.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e7af2f07cd43831af4201f036427b2b6383bd9ac3794e2f484d25f0aa621f254
MD5 626e939f584bdf40329a547d01aba5d5
SHA1 7ca6f3b55ff08a9bf536f99b5ae9450b50183f62
SHA512 7cd283eeab90e2a3a710912fa66fff17126fedf0316b15fd68e4b532c6d811dbf94767a78cb23eac9fb44df041ee09ff0cbf89bbe3bed6af1f2c36fdd898c576
SSDEEP 96:K8cAKF62iU4K5CeWgKXqfCusKjKUUgK9a+2vOKY4nwAKtSWGVCKGQ9XKKwcO21W/:ir/+SvIrlfrljh9DdgslV9rn0DRO
TLSH
T177B2641571BA12453CBE291881B5972F128235B33119EA3B7FFD44A68E6BE085DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aa04061a-b5ba-4c91-83bc-a8add3c2ba43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa04061a-b5ba-4c91-83bc-a8add3c2ba43.tmp
Size 12KB
SHA256 438835199ccf2891337976cfd8d79c3d3a404ca28bf4274ed418e1777056d496
MD5 11191b95565c1167d78ff1e8b6c3e37a
SHA1 fd5b7ed3306e4c6296914c245f03d7a160f6f529
SHA512 58b6e14d96d7244cd77ff1028775d020fbabca4253b0573dcb4a137c419cdf460b175db53ec081a5cb4a5ecae15d68a77645ff37a5edb4ef5bcbfa67c014dcd5
SSDEEP 192:sxZpRlFP/f8s6UoqHzodpLRz/W6+WN/mm6Z/Y0YAneHy8IgjiJ:sxZpZP/f8se9V/b8/5pij+
TLSH
T1B442E955AD28A93B9CC7E209BA15BF57D7F95032A0951E48E7FC8E1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9bc6f65-0665-4377-aa54-289aca562615.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9bc6f65-0665-4377-aa54-289aca562615.tmp
Size 12KB
SHA256 715a34132b8a9a82ff38b6b16954ccfbb3b479b2c78892987860488ec4eec798
MD5 b4caf3141810e538ac064eee34df50cb
SHA1 b33aad633b5e00594a312a7b875f10092ba543db
SHA512 f2abd93df9f3d9396d2ba6bdb5b4e6038584b124089873c3d95f72e0418f17fa77019682d64119a93ba13f5b0ead208a33c9b6ed86b51a99771b7e7de1965808
SSDEEP 192:sxZpRlFP/f8sIRUoqHzodpLRz/W6+WN/lSXY0YueHy8Ig5QiJ:sxZpZP/f8sIT9V/bsX5niC+
TLSH
T17F42E955AD28A93B9CC7D209BA15BF53D7F95032A0951E48E6FC8E1C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c30a6f77-b475-4f18-ad1e-3d33747a7477.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c30a6f77-b475-4f18-ad1e-3d33747a7477.tmp
Size 25KB
SHA256 cde6cf95430e0ec729d18eb603f1bfadf38f6d18a5c1af15221bc16767c2243f
MD5 9a84412442837685ddd2a4e9e3b1dc5a
SHA1 3554704f3d2ca057032a3be6f4e72e75acb0fa53
SHA512 9375e11b49d2f1637da39d94f990975053dec447d0c23800f2ca524cc23e4938ba467ecb688965f309eb45743561db53569382208f03d103a13bfc73891ef97c
SSDEEP 384:nMiFiZcI638NS8TUNTUlIxBwqB09gbzWfg9tF5zsdAUyosa+VYIgL/7IzeoG:3FQ63Vwgwz9Ex9tfsdZyohgM9
TLSH
T144C24B36EC95CABBECFB8FE9AB4A7606DEF0115394AC9AC4CAD45D1C008759D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f533bffe-c7a9-49ef-9cda-316090768c65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f533bffe-c7a9-49ef-9cda-316090768c65.tmp
Size 27KB
SHA256 5a18864b4f245a1ff4a6205c41cd251462ffa0d65701dbf7f0e98577d2044a5a
MD5 53bac69465c1fb3e7003b34b296c293a
SHA1 0e337957580f3e081cf0c116200aab0a43d5b947
SHA512 184b0e00a7d2e50e590f7b0e488849c4c1b15a6e89f7ed74062db54fee7d63fd5d8d0c4af1e4e2cf1b038ed1145af79f0fed337442dc5f9c9200a2bf04cbbb63
SSDEEP 384:n8iFzQkUSvm38NV8TUNTUlIRpwqq//bzWfg9tF5zsdAUlrZbH7vBEnkt3gL/7IzZ:nFdm36wg4rXx9tfsdZVZbH75EOLLp
TLSH
T139C24A36E854DEBBEDE78F95A34A3607EEE0525398DC8AD4D6C92D1C008B1DE530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4588-250-0x0000028482F50000-0x0000028483F50000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads