hxxp://soyjak[.]st

Analysis

user interaction
yes
max time kernel
898s
max time network
610s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 06:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://soyjak.st
Sample260724-g3bgdatdrd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3552	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293475676392659"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{21C80CB7-FFD7-473C-AAC6-069CA9757176}	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 1672 wrote to memory of 4968	1672	msedge.exe	83
PID 1672 wrote to memory of 1556	1672	msedge.exe	84
PID 1672 wrote to memory of 3552	1672	msedge.exe	85
PID 1672 wrote to memory of 1556	1672	msedge.exe	84
PID 1672 wrote to memory of 1556	1672	msedge.exe	84
PID 1672 wrote to memory of 4044	1672	msedge.exe	86
PID 1672 wrote to memory of 4044	1672	msedge.exe	86
PID 1672 wrote to memory of 3328	1672	msedge.exe	87
PID 1672 wrote to memory of 3136	1672	msedge.exe	88
PID 1672 wrote to memory of 3328	1672	msedge.exe	87
PID 1672 wrote to memory of 3328	1672	msedge.exe	87
PID 1672 wrote to memory of 3136	1672	msedge.exe	88
PID 1672 wrote to memory of 3136	1672	msedge.exe	88
PID 1672 wrote to memory of 3996	1672	msedge.exe	90
PID 1672 wrote to memory of 1864	1672	msedge.exe	91
PID 1672 wrote to memory of 3996	1672	msedge.exe	90
PID 1672 wrote to memory of 3996	1672	msedge.exe	90
PID 1672 wrote to memory of 1864	1672	msedge.exe	91
PID 1672 wrote to memory of 1864	1672	msedge.exe	91
PID 1672 wrote to memory of 3468	1672	msedge.exe	94
PID 1672 wrote to memory of 3468	1672	msedge.exe	94
PID 1672 wrote to memory of 3468	1672	msedge.exe	94
PID 1672 wrote to memory of 4984	1672	msedge.exe	96
PID 1672 wrote to memory of 4984	1672	msedge.exe	96
PID 1672 wrote to memory of 2336	1672	msedge.exe	97
PID 1672 wrote to memory of 2336	1672	msedge.exe	97
PID 1672 wrote to memory of 1176	1672	msedge.exe	99
PID 1672 wrote to memory of 648	1672	msedge.exe	105
PID 1672 wrote to memory of 648	1672	msedge.exe	105
PID 1672 wrote to memory of 648	1672	msedge.exe	105
PID 1672 wrote to memory of 2124	1672	msedge.exe	106
PID 1672 wrote to memory of 2124	1672	msedge.exe	106
PID 1672 wrote to memory of 2124	1672	msedge.exe	106
PID 1672 wrote to memory of 2308	1672	msedge.exe	107
PID 1672 wrote to memory of 2308	1672	msedge.exe	107
PID 1672 wrote to memory of 2308	1672	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://soyjak.st
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff90f1fc188,0x7ff90f1fc194,0x7ff90f1fc1a0
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,4596177475155738768,14390907097925044918,262144 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:2
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,14695094186352564707,2064734492699540675,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,10451254634451241176,15362419477140331023,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10214852677101490103,14607023998960952423,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,9630710289469840716,5611621284251281395,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,1105064745493159266,1496126793639687534,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:2
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,867061535808000003,16026303566119180697,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3456,i,8160323742642715893,8905858559807141100,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,8164428295708673486,778485502664598108,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3915019362130000,12306006787705242360,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,7369383483957486649,3539123369282703323,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,7369383483957486649,3539123369282703323,524288 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5956,i,12813685305040516146,6564242030224580713,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6296,i,11921773346880262461,3268226207762909029,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6444,i,8510484664582369632,9332829431829960831,2097152 --field-trial-handle=2728,i,10480702809917723963,3778120668647703516,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:2308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c756e7f0173c2e46dad26d72efbfb0a42b35deefa8d8ed2308e4410b46b600ee
MD5 509bff51589c8be5e43f296423d20aac
SHA1 bd50ef22bf1362528eb591a13feb31f3231bdc04
SHA512 0a6364f7f6dcf2e0b00fd8e5b79f4583839b1b3e47f62102d14f4cf4f19c507ca7d7aa64e2f107b5f954db5341186688dd1fa2c0c0a1fc1e46de166184e5949d
TLSH
T1ACD02370B53577D2D21F007D44706B015515817772B7B7517166680DDF70085F1DF9E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

07490321-6f9a-40b0-9d33-a8cdb84863b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07490321-6f9a-40b0-9d33-a8cdb84863b4.tmp
Size 27KB
SHA256 19099f64ae02bcf42f08c0e79cfa9b1764e0c620974db41661f100036d6dcd98
MD5 3a4afce27f2ab7b8b2c7d45d29177406
SHA1 e04c3a35a010482d25cfddc858ae1b8015a5829f
SHA512 a1f6e574602d51b6198120e73ae26744097a650a6f51dd6cc59c833fb3c7ef375a394c7e1081af61a0db1f9316ba0869bb31b431f856cba81477d166094dc507
SSDEEP 768:ydyqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7FroIBR:ydyqbblWvJDjTu1jah4LAs7+IX
TLSH
T1E2C2FA3B654CCB7E4FC00A9DED5A6FD73E9802C7A6588D4047FA994C02C77EA512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 127KB
SHA256 e5f1dabe89a7a1d0ae94bd8e14a273cb5144a6541c34a54192411677c18c43a2
MD5 f944721bd55cbb39c452593638459aa1
SHA1 085940738cf5737b614a586d0f2005ff0445d6e5
SHA512 33c8c2882fc81062027733dc7f1d52f2194957cf94b34c6d71e393ed90f37a378a5c7122cbfe4dc35f7e63c26f7c4440886e9b3884663aea2a8183087611b3af
SSDEEP 24:5bglATIKl7DCmTpHTyxpEo1HM9kvfkzyfkmoyfkoRfkIRfkwhNfkm7usyfk6sRfn:qlg116z1+ukYkwkAkgkw9kugkxkY
TLSH
T107D3356D2F958FEAF0F12770E684BF4CB3D96E6251EFC35E1BCC1906BAA00D01048A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6a6c893c8c57bea7f169fd33eb944f8c8daf106f77e09266980b6d56235e7763
MD5 7281354496ff2834ec84a3963dc09730
SHA1 ef0ef67465944dcc9ce6c693bd54bb72aa73d9f1
SHA512 f4a2d1f60b6bd298ef61b3bfcef5834e140e0c2483b1d75ed0b6c8202f1402d34e3cff974936cca1dbc53bd68389ff1edf8effebdb3cb9c4b1242fdf6a3debcf
TLSH
T11171643D196608A1D3A1883278CD12847EB1C9EEFE335DAE0179F974E51D71B412F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b8db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b8db.TMP
Size 3KB
SHA256 4e2ca40202280516c9e64fed76a602eaa61e64b4419d0d020e566b4b67588f0c
MD5 938e01227d872bee81339430b48d75be
SHA1 88e1ca104347cd82c06eab562ffeeb7453adaf60
SHA512 3ecc80d1f8b7b8451c461b6dc438e3a126ebb03ae147fb0bb8133db92eb742915b6520b29b3e090d8ff8ac91af4a77abdc3b287ed10aa72ece2cb0fa1c044841
TLSH
T13271523D192609A1D3A1883278CD12847DB1C9EEFE336DAE0179FA74E51D71B812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6f976d8f1935fd77efd73e2b1bf40779ef21a95e5135e5059276068d9d22c215
MD5 162832e79ba6724442cd69b6a6caa8cf
SHA1 a12bb6a1749cea13bafbf78adb29b02527f9d43f
SHA512 88888d150eb89f54a63ff38b85edc4244b8249805547c5567708b05b1d5fe8b2aa7bbe81421ba9b701e7c25a362a7816ab94c5eb465a8f401316a47232ab6250
SSDEEP 48:YALlNGOmombmFpnF7m9mLsyzEswHwEs6CKsJes6V/sQUsHlisIzdejeEsZ/50oa:DEOtIyF7WMzEHwWSMV1DlwdejeEsZh0f
TLSH
T1F491BDF3C3E4866D991662F46A54BE1BDD8D0625831C3969C9E2AF0B93E30B0E30171E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d6f263b8b71e43787004237da0ff340e7741caea6d01d55b7cee509ae7fbf663
MD5 cdadb8082df50fef831bd6a2654b1a0d
SHA1 1c66c92d67f3fa89e3f8b4f9ecc0651476d129a6
SHA512 9db365e8bcc9c74445590effd2289bd7e926527d2395323a26c79a6e501f582337fc6cd8031fa69ba151061cb6eb729099b6950c3c37a9d5906f8feed40067a3
SSDEEP 192:sxZARekvW/fUsfbWpVRKhcIdpguYdfHW6+WNHBBu2q/YAn3V7OIgbhJ:sxZA7vW/fUsDWvRKhFgvZHbHXm/FUv
TLSH
T10A32B6566A24997B8CC6D21DFB15BF13E6F91062A1D12E48A6FCDA0C05E77DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4ed0c1b7bfcbcabe982f02a04ff1397f12a7d584d58f1bcea4b44671cf3a3ac3
MD5 d32c51d55b9776fa0caa26bc2e13bf04
SHA1 8c75233002ef8fe872cd9a5fa6a3f874d31a2af2
SHA512 0a745cee35014d5e7591750b0b86dca160ea52902f2ae04c7ec882142135be25d78249cc6cfaa337a2ffb580998fe2b8399ab40192e8786c77e98051050d2628
SSDEEP 192:sxZAR1kvW/fUsG0KhDIdpguRvHW6+WNHu2q/YIZL7MIgrJ:sxZAsvW/fUsnKhcgqHbHm/Q9
TLSH
T1AD22C7566E28A97B8CC7D219BA15BF53E2F95072A1D01E58E6FCD60C04E7ACD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 846813bc8fbb1c557990fc6cc539b9cf98ee91657c8782e4ef3e00b8bb111ae2
MD5 1111fe14fdff783632b0d8897790f50d
SHA1 2e96fc29d28e17b2b3989c496d661e61149dedd5
SHA512 53c50c786c2fd42e9499c93cec00177b252f7fe5c9530806298ee7dd55db7dba692cfac5209bbd53ead1fbe5241f079bed234f20707233982f08479f7aad0966
SSDEEP 192:sxZAR1kvW/fUsf0KhDIdpguYdeHW6+WNHu2q/YIZL7MIg5hJ:sxZAsvW/fUs8KhcgvoHbHm/Qh
TLSH
T1C622C6566A28A93B8CC7D219BA15FF13E2F95072A2D12E48E6FCD60C04E76CD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e83e841ce28d8dde235382131bbd463473a488bac3df0b9458c81c2bcc7ef396
MD5 d87cb71faa4446247d9aa470d652612a
SHA1 1a170a41701fff4d21b005fb3763ee0d58bc7d92
SHA512 73077cb7c0a5591e7ebd8c4bbd2b0025591b53a2df2083916757bd384d3fb6b37d174e3c13488585436173454db07bf780eff2c82adaa44e44d912ba8ff5c842
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyuEVQUK+agembzIfcgKU1cCgAswpLikJ:KYbaKYIKOfuKQY+S2gKnKY
TLSH
T129917916757E0342783D2858B3A69A374F4532633018A4EF3FB850A25E66E224DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 aba272439b25fd938e1a4e3842088412bdb09c3b80ff2917d659f40f701444bc
MD5 222ca6edc3e6276294ee3cbcd9380b6f
SHA1 ab9a7af50271cb8077bb374779439e025da2f2ff
SHA512 fbdf81e52701a042a8389a468b74426e87fa63fdb25b2414e2bab4ed687445493953564a0a6be43bfff6f1ac07203ba978d54bec3d2dbef9613bdfc3c2501c9c
SSDEEP 192:u4LsNHkQVYkRbnoQmiU1a634VRNKFCk5dZc0vCSRZqYRaU8:psNHkcbIHoVRNT6bNOU8
TLSH
T1CB32083668385C7B9DE3A551B48B32136FB451779BC92F8495EC1B0C01DF69C231AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ca0f8c92287e6d55e3c0741947aa62cf2e8a91a92a2c9b61533bfe2e9f19d4e5
MD5 0466b00b50cb1b8fbec3150da1ebfcab
SHA1 7eb715f5132168c802266ba00cdf2d414293c810
SHA512 1061bc5727a52baad7a4629a582bce85b29b0307ecdcd91e03a7628c4d406effea1ec19c764714e326ca020aece210fca2bc739ca5c9067dd16102a9ec00dc25
SSDEEP 192:tONb6JkRtQmiUyrcW+RNKFCk5dZDh3KREU6:tONb6Ur3W+RNT6bVBU6
TLSH
T17F02FA35AC386C7B9EF2AD05B58B37271FA4117BAA952F40D6E81E1C00D769C234693A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 08f5c0961cd340cc7553145c920b7e3653edadb0de76a53d53301567c21aab5c
MD5 86629b39f73628949256cc5d7e11b660
SHA1 1ad1e120e5bca89e0025925e1acb0cfd21a2877f
SHA512 3dc7ae4ccecd4d7b336df5916069afc023fbafefc292240e332efe023687fd3ec80c52def3f455b1c4287d67cb7c2dc0ed2da0ac5db6d17f30e139963b02e377
SSDEEP 192:VONy6JkRCQmiUyYcY+RNKFCk5dZc0vDVcZqYRaU6:VONy6U+2Y+RNT6bOOU6
TLSH
T19B12FA36A8385C7F9DE2A811F4C732135FA5926BEB897F40D5DC2A1C01EF59C134A93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 1197c5d2ef611dcb46c1d01c6725485871151260895038cffae275fa7d6e3aa4
MD5 aebc6c13bda5a5b332a5745706bb266c
SHA1 8af02b919fd34d234efbd5caea6a4168e742ee01
SHA512 9ae51d71b76dcad429060351f7d61af0a13630de7791486904467bf96468a1506fc192f12728a18029fef09498303c09591a52f7a6b23d9896c375c55933e386
SSDEEP 384:rZcIhsN6KjcbI1oVRNT6bNW/AStMn5o55EMOObjI9G6w7BH:zhiNeHTsXSN55EM29MBH
TLSH
T155B25C76DC644DE788A6E4C1B486F1172EF85137D69C2B4CA1F8BB3D319F8B80316526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88eaba3fff28d0e1c64d30c0f1c85c1dd2204617d1fb8e0e5ceca38c7f60e8f4
MD5 778cb7f5b2a92b740086061aedbbd0a1
SHA1 d2f6f495bff9e0635da0e89d8498c8e92d59bc93
SHA512 f30625028a3cb07d9bb983a4a08df5c704d64421f1f88239a4e9c1fcd57fdef084e5311a11dd82ad16777f79d0a340745873fd65f8df6db90aab5b08237fa0b2
TLSH
T17B41275CBAEA1148B3B36F5AABF668AC487BBD372E06D05E00110D4F0A63B45C861737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads