hxxps://bmxloads[.]com/scnew/indxxl[.]html

Analysis

user interaction
yes
max time kernel
19s
max time network
18s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bmxloads.com/scnew/indxxl.html
Sample261113-vb2q5sys3l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{72E67A79-3641-48D8-8ECA-543BE6EC7C48}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1376 wrote to memory of 4048	1376	msedge.exe	86
PID 1376 wrote to memory of 1532	1376	msedge.exe	87
PID 1376 wrote to memory of 4992	1376	msedge.exe	88
PID 1376 wrote to memory of 4992	1376	msedge.exe	88
PID 1376 wrote to memory of 4992	1376	msedge.exe	88
PID 1376 wrote to memory of 1068	1376	msedge.exe	89
PID 1376 wrote to memory of 1068	1376	msedge.exe	89
PID 1376 wrote to memory of 2080	1376	msedge.exe	90
PID 1376 wrote to memory of 2080	1376	msedge.exe	90
PID 1376 wrote to memory of 2080	1376	msedge.exe	90
PID 1376 wrote to memory of 1508	1376	msedge.exe	91
PID 1376 wrote to memory of 1508	1376	msedge.exe	91
PID 1376 wrote to memory of 1508	1376	msedge.exe	91
PID 1376 wrote to memory of 1620	1376	msedge.exe	93
PID 1376 wrote to memory of 1620	1376	msedge.exe	93
PID 1376 wrote to memory of 1620	1376	msedge.exe	93
PID 1376 wrote to memory of 4688	1376	msedge.exe	94
PID 1376 wrote to memory of 4688	1376	msedge.exe	94
PID 1376 wrote to memory of 4688	1376	msedge.exe	94
PID 1376 wrote to memory of 2156	1376	msedge.exe	98
PID 1376 wrote to memory of 2188	1376	msedge.exe	99
PID 1376 wrote to memory of 2156	1376	msedge.exe	98
PID 1376 wrote to memory of 2188	1376	msedge.exe	99
PID 1376 wrote to memory of 3156	1376	msedge.exe	101

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bmxloads.com/scnew/indxxl.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffff749c188,0x7ffff749c194,0x7ffff749c1a0
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,2455565449147868563,16840081550449306665,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,6173128925860280518,7336117497871573821,262144 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,14796994420440566399,13019209235876240152,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,8168801614567541711,14519451636653357873,2097152 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,2617438090919927671,6763884691583688182,2097152 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,6510550803756134601,15560955283195699122,2097152 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,2374245229420311709,6670353743557854486,2097152 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,8144570096290456423,5376643694998061958,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11009421509765905663,13109208032682783715,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,6463693358124334363,9536731554716206221,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,6463693358124334363,9536731554716206221,524288 --field-trial-handle=2324,i,986254196498876875,16465804545004571090,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0cfd0d71-9ffc-4c6a-a9e9-36c291e4c7f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0cfd0d71-9ffc-4c6a-a9e9-36c291e4c7f7.tmp
Size 18KB
SHA256 3264f0a81c6a4ea1d3e127a40951da6fb4c82ea3b3699057daca1a565c5780b6
MD5 26157a87e1d16773ca52d36e5ab9b6c3
SHA1 1cf2421e96f3f4ff1ecb82b36cc05a319e384ac8
SHA512 600e813bf7023e34e1281ec766bed89270a7321580b2286ceece898a90f092447d5c67b19b0e9b013068f1825cf76023812150c18b0acdd4e4e5a8f6e6b24f95
SSDEEP 384:AQkUSv0sN20uuWZtbTO3h//ySLNH7vBE3XbIIl8:o0wWSx/nNH75E3XbLO
TLSH
T172827D35B864AC3B4DA39195F1473A239FB880A7DBD95F90D5DEAF1C01CB1D82307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

167730b7-e650-4db1-b821-53e2f09be8d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\167730b7-e650-4db1-b821-53e2f09be8d4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

39f187c9-d043-4d11-a8a7-3b95780dd27b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39f187c9-d043-4d11-a8a7-3b95780dd27b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f6bfe20-b19a-4da5-bac7-adc92d02a851.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f6bfe20-b19a-4da5-bac7-adc92d02a851.tmp
Size 10KB
SHA256 5ac54038be0d2ac38edf6d3ad31693253812cb81f4661f36e2d170e31428960b
MD5 2a0dfd9caf63245da4a5016bd03172b1
SHA1 ea1fba87c784be8c31b9caceef809e064ed0896c
SHA512 b8e7ff9d7e9bd3399a030a06e513e4982bf0ffba6d47d26053002501cd1b7e9e5308b00c0eb6b122e9fc6e997eeb1a7966c823c621f0e947fc474febd387a1c2
SSDEEP 192:sxZoRZWu/f7syXIdpcIHW6+WN7W7/Y362IVRIgrJ:sxZoCu/f7sy49Hb4/XH9
TLSH
T12422B856AE38A93B8CCBD20DBA25BF13D6F9513251D11E48AAFC8B1C04E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62071f5d-9d18-46fe-81c0-1b09f94fceb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62071f5d-9d18-46fe-81c0-1b09f94fceb4.tmp
Size 27KB
SHA256 b5863362463273e2d54cf40d244e3457bbd80993ed541a0100359960ed6d1682
MD5 df217c778ef4505b9f12e656f1bcd4e2
SHA1 036a8fad2f6295fa4b322f642cdfd26308e769cb
SHA512 f85ff29bc6251f24b821ed6029d4f49da13de3918738034a7be067eb3c9481ada27dc85a1c875856e4fc58e68d155c895153b272c56ced4c7fb3bf7ea830d357
SSDEEP 768:n/Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/0ro17g:n/Klm7QWvUYe0u1ja8/L/E/f18
TLSH
T12BC20A3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89a93c7e-ec4c-4bae-a81f-896593a6b6f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\89a93c7e-ec4c-4bae-a81f-896593a6b6f6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2c3b8d5a-9743-4d73-95c3-01a238f6ec0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2c3b8d5a-9743-4d73-95c3-01a238f6ec0e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8cca79c5-2690-4b4d-817b-c86acf89d6fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8cca79c5-2690-4b4d-817b-c86acf89d6fd.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ffc62db46ff72f372842b8652554b1d0f96937fb17563a94b4a4c276f4bb2f76
MD5 7e6fe77e020728d418ca90657f5e7d3f
SHA1 b7509f38c0f73141b5323cffcc79eb1f79791b26
SHA512 35bf0f58244d51eb0214966bfc4a954153e167beae745aba6e47564fc466b7b4763b79946c20341a8fdec3ec17411a572da1676987bde355d7ea4a14f3979117
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLMb6G02aDbqpyIS+DK9a14Dx8TYRi+K:Kg1eKeAiOD+KsAHLOKkYm9
TLSH
T1A2915E0531BB021439FE75BC50768B1A46427473351DE66EBBAA80A54E6FE040EFF8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3593d9bde38233b4cc270e473bf3e7a7dc31fc9acaa89abf28e5191cbe25cf9
MD5 f121b76d2568b46e4fd986c88dbedce7
SHA1 110acc1f86675e1d0a8277a2e23b3dcd0b4d059a
SHA512 9eb2d3df4e5a070d98774426734fd15aa32306c5d2d86c4f156ddd03e6333751ec5f7f938eed58c44f8e5a3ba703d0d2295151e821e0f313a67811004c2ccdb1
SSDEEP 96:JqONkLQsjpfbUNH5ih/cIPURHl8h4otop5lpDfBlP4v+Y1xf//ojdixSYiywMxt3:wONH6JUWQmiUynpFo//WywSPNxtq6pU6
TLSH
T173120935B868AC7B5DE3A594F0833A239FA44167EB856F80D5DD2F1C02DB5AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3dd732b-ae0d-4aa2-a5f4-d2c2088fd157.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c3dd732b-ae0d-4aa2-a5f4-d2c2088fd157.tmp
Size 8KB
SHA256 e09749c10ed49565647d4f9cd576f1e9f90846f64c5357c260ff2c48369ff558
MD5 eb554943f3176fefb839d357801c8a21
SHA1 f3a645311ae428f3c8373bbf9aec8b0932c52e28
SHA512 3c69fbe374943e2052a041674d91d12fd0bf994471a79b8b8ad814190e31d639e8f16cd967466d2d392af0847abf51be6cb3290d6c31124164ecaaf092bf160c
SSDEEP 96:KqONkYQsjpfbUmjH5ih/cIPURHl8h4otop5laDfBKP4v+Y1xf//ojdixSYiywg5B:BONs6JUm0QmiUympso//WywABCReU6
TLSH
T12B02C639BC68BCBB8EF3AD45B4877B239FA4106BA6951F84DAE81F1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3117a545a18c7e57e92d5ccd4da4d113f7b508dd2bf07a9ec22247ffe2c970bc
MD5 3182baf5641fbc9d1dffbb41bb63ae78
SHA1 42a5291e9538b021d35b479518377670ef3050b1
SHA512 37b953a4c37285c67e8acf9f798f09f09cdc53b64d8df42810f14627cee61643354f237fb01288c6e8f69137169a84d22549e82c8925c9d8a4c84bb31ee1ad57
TLSH
T1B5412858B6EA1148B3B76F5A5BF6A86E487E78372F07D45D00010E4F4A22B00CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads