c73d51902176af680f03db55e0a3cf4f4530cff4e6bb5d9579e40231813483ba

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 21:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c73d51902176af680f03db55e0a3cf4f4530cff4e6bb5d9579e40231813483ba.html
Size 13KB
Sample260912-1kldeaad96
SHA256 c73d51902176af680f03db55e0a3cf4f4530cff4e6bb5d9579e40231813483ba
MD5 9e750c0c824965aee3c8d350e68e40eb
SHA1 72b4cec324af87b5cdd784d7f8006383fbccb42a
SHA512 fe22f6df8f97a9bfba54c74dd16000bebaa0b9d92b3dbde7383f298c84ff59a115fb40639566870e666f9fa59018cccf343a835e9d2fb77b68a875cd269bb151
SSDEEP 96:lxBnAfCBSu2N70q0rNTmLsAMXIqZvupX9Dd5eoxBPmZ49:lxBjBSxf0pTmQXIqtYtDXrBPk8
TLSH
T1D752F140FAC8CA2961F7159BC9011F1BC77EF3227560DF623E5C09DABF5ACA24E90256
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4056	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338379197784715"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{E61E7A52-28ED-451D-A86D-9CB33A38166A}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe
772	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 772 wrote to memory of 5012	772	msedge.exe	86
PID 772 wrote to memory of 4056	772	msedge.exe	88
PID 772 wrote to memory of 2776	772	msedge.exe	89
PID 772 wrote to memory of 2776	772	msedge.exe	89
PID 772 wrote to memory of 2776	772	msedge.exe	89
PID 772 wrote to memory of 4980	772	msedge.exe	90
PID 772 wrote to memory of 4980	772	msedge.exe	90
PID 772 wrote to memory of 3504	772	msedge.exe	91
PID 772 wrote to memory of 2356	772	msedge.exe	92
PID 772 wrote to memory of 3504	772	msedge.exe	91
PID 772 wrote to memory of 3504	772	msedge.exe	91
PID 772 wrote to memory of 2356	772	msedge.exe	92
PID 772 wrote to memory of 2356	772	msedge.exe	92
PID 772 wrote to memory of 4956	772	msedge.exe	94
PID 772 wrote to memory of 4956	772	msedge.exe	94
PID 772 wrote to memory of 4956	772	msedge.exe	94
PID 772 wrote to memory of 692	772	msedge.exe	95
PID 772 wrote to memory of 692	772	msedge.exe	95
PID 772 wrote to memory of 692	772	msedge.exe	95
PID 772 wrote to memory of 1308	772	msedge.exe	99
PID 772 wrote to memory of 748	772	msedge.exe	100
PID 772 wrote to memory of 1308	772	msedge.exe	99
PID 772 wrote to memory of 748	772	msedge.exe	100
PID 772 wrote to memory of 4904	772	msedge.exe	102
PID 772 wrote to memory of 4588	772	msedge.exe	109
PID 772 wrote to memory of 804	772	msedge.exe	110
PID 772 wrote to memory of 4612	772	msedge.exe	111
PID 772 wrote to memory of 3132	772	msedge.exe	112
PID 772 wrote to memory of 3132	772	msedge.exe	112
PID 772 wrote to memory of 2128	772	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c73d51902176af680f03db55e0a3cf4f4530cff4e6bb5d9579e40231813483ba.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a4,0x7ffdef88c188,0x7ffdef88c194,0x7ffdef88c1a0
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,12464746278605899548,1555709155593038730,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,6377167273347133571,10921830286798534114,262144 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,15090311020728914390,1299350717278140502,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17361088945870349878,11900366984983880446,2097152 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,4659693309130058631,15116217862909461456,2097152 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,661035732073112434,14922521928919455913,2097152 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,16896058397956318893,7444965682225873157,2097152 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:2
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,14506977840298922340,12736442992629689643,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,1527674449045128942,8085414186553799287,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,426410374330040134,17327445329589978364,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,426410374330040134,17327445329589978364,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,2027335117178509768,16541947666283619982,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,5427614403146761911,12066303381225858021,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,8892660699485993702,8234864893725491759,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,246005021964550073,7337216424653943395,524288 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5812,i,13716739068638089309,102406096113427072,262144 --field-trial-handle=2184,i,8623633819898950839,152318156193324260,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:2128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e7e2bd6df381b4133ce872f1696b55d6dcd3803ba17eab1b88355cfffeec935f
MD5 91d5f3763b1cd092f915c0a40a81736a
SHA1 e8a51859bb1619d50be0029c2fe88c847ca7f5db
SHA512 2ea29a92324feb991dbf9f7c7564303dbc7b4841a10c434e4b8f845d0d1a6ce6329220d1bf7416803376c858f8780575d59ea10fae787ae0c7c43d0f7919b8f0
TLSH
T1556150805551E9D1FBD8707092C53187FD774A86DC839E3A12A4DBB95A0A7D41F490CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a3fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a3fb.TMP
Size 3KB
SHA256 c49acf3af7247efd1a087fcff10819d04dcf57db0632c109f158ed49cad8b31c
MD5 cf2e7de88c3f24293c0114d8be70a92b
SHA1 3f952f822ee967fac083c92a8eb450e90ded0650
SHA512 cd6c72a3052bf8597c84f136a687f20cab9910be2293b2365ee08cb08e1e0b9d7739e1232e92e0ba109a8e50afc372970f44ec5101cf727705b2a84e2d1524b3
TLSH
T1A16170809551E9D1FBD8B07092853187FD774A86CC839E3A12A8CBA94A0A7D41F490CF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c7a71682b732b5972b191d19d543a21dfd62b21aa150c844646801af48cca2b4
MD5 a281c3bc68d695e8182653041daacfbc
SHA1 ae4f8c12e0c39540be3ab772a9bb56ce5cf9f582
SHA512 6be3fa2243117aed6586cde5219deafb13e461342e486f250918d0d08eaf063989f8e03b81d95d528e7f0cc4c5fb8038b95ad7fd9836bc5815c838021c3fc12e
TLSH
T11D214CB783E586BF890566F05A24AE2BCE2C0506432C7C6589E4EF2797F3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4b309cca3a80d9bcfa5bccebbd966e9cf14d15250708cd0e8d19105c96b3fe22
MD5 56f13955176ef8829f57ca38919bf45d
SHA1 20429693c3c72e0b7bfe2369caf62c8810f09ad1
SHA512 e1970facecff264a77f4e2e1c4c2d4c6062cfaded540c20b6c98ab2b22891a840ba2cc2446cf2d6f7f89fb8f6fa928298aef73d685f27f12d425d1874db6cf42
SSDEEP 192:sxZnRIW7/fosPnvIdpd7HW6+WNGYapYlflIgrJ:sxZnR7/fosPAtHbGc9
TLSH
T1C212A7166E28A57B8CCBD21DBB25BF53E6F95032A1D41E58EBFC861C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 19b51105357ef40d1c36712dd5b423e0bae422c0d4302ef4d1ccfc94437a8ebf
MD5 cedf116b3a89dd2fd63295917a513725
SHA1 1524d91614bf0a8005a8008ad1aa6fcd5fe6abe6
SHA512 2e8b2a192f544dc9f4f6b792b2fed90f78ceaf1c349caa213fc7c7c334f5d930abd2ce6d7eda657eb9a3d74a3fea4870fa12f3a2963dc5aea7cea19b3a941fb8
SSDEEP 192:sxZfRIW7/fosATvIdpH7HW6+WNGYapllflIg5TJ:sxZfR7/fosAsbHbGHT
TLSH
T1FE22B9166E38697B8CCBD21DBB157F53E6F9503261901E58EBFC861C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a81524f8216abbbff3cde0ca3fcbe973ea13dd8e7aebf74399b22fab97758fbd
MD5 562e40006b63366b34436d967797757e
SHA1 2ca4f2558a1f16e8bef73f3c65085eb6ecf49da9
SHA512 d989e528f997bc5fabb9ac9dbef95cc4ba3743d7580b75932eb22e69bf1dc24224ec9e7cd8db80f43cab3a133bae7c5ef016ccb9c3c216cdde7fe886f28517b0
SSDEEP 192:sxZfRIW7/fosATvIdpd7HW6+WNGYaphlflIg5TJ:sxZfR7/fosAstHbGDT
TLSH
T11F22B8156E38A97B8CCBE21DBB157F53E6F9503261911E58EBFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9062b0485c65a47fea5d60de81b2491b6122a55e50d6e4c1f17da0a66ee5418f
MD5 c1868073e22c846cccc52a75bba3bf1d
SHA1 b17c4b9c06309d6b6f579d3b86af0a9b76c70acc
SHA512 5f5815c67982439cd81d5bdd4ffbef69468bca9e3b4e256390b53e45fad86d27e8510abfdf2be7c28af84e8deec55662f890a9099d0d7047a992a3c544999c70
SSDEEP 192:sxZnRIW7/foshnvIdpd7HW6+WNGYapYlflIg5pJ:sxZnR7/foshAtHbGcd
TLSH
T1B322A716AE28A57B8CCBD21DBB15BF53E6F95032A1D41E58EBFC861C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 230de0f388ac8bb6a089e98436e04005d564e65b130b6d83efd4e6836d8a763e
MD5 b2a6b085c1353a1b421e7b95077dd13a
SHA1 d0c814e0ab45fdc55f12fc0cccbf1c13d79c6408
SHA512 090022a3ea4c14b55ef2e5648451da96af0aaaffb92dea78e909fc28c299a42ede86d48b267b6d07f82cd8c186d251134ef21a47ebb8f9dfe2104c22d62210ef
SSDEEP 768:OiWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7lro4+fejmR5:OiWPcLKWvKeEeu1jaClLiF7e4+WjmR5
TLSH
T1F8C2EB2B640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7b4a167f945f5762c80e187cb16dcc72b77c1cce9bac165209a33e19ccf43aeb
MD5 c949b44841f5de08d50e99fa11137ef0
SHA1 dbbf870052c18c6a344932a592ab25fd6ab82126
SHA512 6a16e9f98aa9e047591f4f13c4589bdba12f8aa24933e7817641055b7fe6fda1e9a0b8ebfc6a432f695ee992b29238606682a3e145aa73adbf5e1d04166d8fbf
SSDEEP 96:KkRMNhb/LQv3uDJZQKRFJjQNpZeDR9iG0KHqQMQKFmW+DiKgwl:yPXYHF4
TLSH
T174A17C1174BB1210397F59AC81A1879D11423AB3715CF72BBBBD10A6AD2BF091DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59407a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59407a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9f4c12a83963d9363ba845ac096a574ae14d602a02955d5b7bc82e112df2e8b7
MD5 3d6697f15a1c0c9a41920cabb224dbeb
SHA1 ef2eccf3442c4b37fb946f329701309a9a88b164
SHA512 0182901efc12e8c637a533358b2ff4e6f0923e3f384dced5989d52a02fd9c454cae6d8ed905522a2eb829bda02089ae8a734fc2aada6d7962230f0095d393edf
SSDEEP 384:wNiFiZcIcvsNQ8TUNTUlIl51Qm1fKuzIGm1nd/H7xiVsa+VYzljok:XFQMpwgBx84endDxiVhgej
TLSH
T1F0A27D739868D87B9DB79A81F94636139EF48063D6C5BB90D7D89A1E00DB29C0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dd2cf32f677a43c81b4353bdca64456e9336137cf41c06e7300c3730568f155a
MD5 30d79e18c5a7521b0baef47dacb53481
SHA1 b2bf7e32933014fa676294a1915e2bc0599ffa36
SHA512 227c89f3dded6238d1faf8665637bce84728d59c8d2e2a1d5c25d51803660b4a6119ad299eadcbd8f4b48f2ca84e04c4735c57dc2588974ae675b76a8fd43d27
SSDEEP 192:aONH6IE7QmiUyq/TPuIGm1ZFh0C7sltU6:aONH6DtnPuIGm1nnsTU6
TLSH
T1DB02E839EC78BC77DEB3AD08F4877A236EA5112BA6912F84DAD81A1D40D734C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7f79a341f8ac906d1f2dc2311974f43c699099cf60d3214c0881be5ddbe1c37d
MD5 61b19ac94126240081e0e0e4cd6b38a9
SHA1 30429ab3fd22365a8ada9fef8f588fe0b07d9cbe
SHA512 d9e5452f4407fbb62e70f931dcc944d94957558c8b5c7e506b73fef9f8b6c1f55c0d36f33891ece4851b63110d74bfa31c9a276edb1178649a8797946d40e23e
SSDEEP 384:Y0ZcIBsNQ51Qm1fKuzIGm1nd/HNiVsa+VYzljok:/Bbx84endFiVhgej
TLSH
T150827D72A878AC7798B79181F94336135EB88127A3C83B94D6ECAB1E00DB35C0307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 73a39791bb9a06288d8b8a9e4f4e0fc132656ac1b8d4f4392c72ee804af2a3ba
MD5 283e91af0ea60fa51ef3c37913f6738b
SHA1 ac404d653e8201c492359df55995b6859e6a7660
SHA512 9a69ca2b5bbcef339e7c7770ccb31d815de6ac7962f224b394706ef67b04223171927f9eb2d8d0ce319fed1379286322fa4b5172724f526d329212524895e08d
SSDEEP 192:aONx6IE2QmiUyT/TTGuIGm1ZFhfZ95Fj27H8/UU6:aONx6DSIKuIGm1nd/HQHVU6
TLSH
T1AB120976E8B8BC379EA3A844F48339135EA54227EBC57F90D5DC2A1D01EF25C530B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba8c0e53-8d11-4e9e-9c53-7f299ad53bf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ba8c0e53-8d11-4e9e-9c53-7f299ad53bf4.tmp
Size 18KB
SHA256 acb7810d7b32da987423f187603d1bb3ba39b96a77b2703b7aa6709e1a0716ee
MD5 e3853783c34a26e50ec9d1074f481324
SHA1 1dd26fba0ddf2149d861388166df74d289bdc2ae
SHA512 1e2f1867e29c690556b099232a4b1a2d7b095ca92f34cc19a380705944d041823b6e0ed5b1c5708e474bae992e8d871ab227d84aa18e5cd844d99c2cff1874f0
SSDEEP 384:5ZcIBsNQc1Qm10KuzIGm1nd/HNiVsa+VYzljok:RBQx94endFiVhgej
TLSH
T19A827E729878AC7799B79181F9433A135EB88167A7C93B94D6DCAB1E00DB39C0307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f423a0d-296f-406d-9087-01f948a7d067.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9f423a0d-296f-406d-9087-01f948a7d067.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4d55975dda0cb40238e84b566f1dfd3b0f621ab0fb9e4036804435fbaa8e3a43
MD5 855835c9319c30a885951076a6b57be8
SHA1 fb90c8b98226f2835dceb61a08de9b44e413c6ed
SHA512 7b8ee140fb8e72250759628251e08698e89891c784a44a73e5951b2107b170a53d7f4b5989b35ae5086f02a35bda69f716bb1e8b0df15c51e95320a8b7ab6590
TLSH
T13E410758AAE91144B3B72F5A9BF6A8AE487F7C372F07C5AD00110E4E4B67B00C861777
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads