e76a3177f9edeb809978435aa9bcdc646b827f0d6f0d0bd8e2260b2bfedf6ff1

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 19:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_e76a3177f9edeb809978435aa9bcdc646b827f0d6f0d0bd8e2260b2bfedf6ff1.html
Size 107KB
Sample260912-x67a8atarf
SHA256 e76a3177f9edeb809978435aa9bcdc646b827f0d6f0d0bd8e2260b2bfedf6ff1
MD5 c4e6ddcc01ea3860c55a67b366b7dbf9
SHA1 09e013da91949c8e8d6d98bd8e7d4f04299c7936
SHA512 a34695d25c90b3c032e42a06d55b0d0ec064327a75be34051ed5ea9c7d25d0d69a107b59350cc16bbfaab1a8a9632c735a206bb9526a6b0db6d681d12255f338
SSDEEP 1536:CXxyYn+hcy+lRWAPxQjC5jVSleQ3TtjNoGx79PGbEaovbEaoBlZ:4giQJNDhGdovdoBlZ
TLSH
T12DB3948711204CFAEFA04DB3455B485B3D6C1437AC5791B9E3FDCFA72B41DAE024A269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
684	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338259969090427"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{447BB82C-519F-4C85-8AC9-CF70AA623C90}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 1644	4928	msedge.exe	84
PID 4928 wrote to memory of 684	4928	msedge.exe	86
PID 4928 wrote to memory of 2700	4928	msedge.exe	87
PID 4928 wrote to memory of 2700	4928	msedge.exe	87
PID 4928 wrote to memory of 2700	4928	msedge.exe	87
PID 4928 wrote to memory of 884	4928	msedge.exe	88
PID 4928 wrote to memory of 884	4928	msedge.exe	88
PID 4928 wrote to memory of 892	4928	msedge.exe	89
PID 4928 wrote to memory of 892	4928	msedge.exe	89
PID 4928 wrote to memory of 892	4928	msedge.exe	89
PID 4928 wrote to memory of 3996	4928	msedge.exe	90
PID 4928 wrote to memory of 3996	4928	msedge.exe	90
PID 4928 wrote to memory of 3996	4928	msedge.exe	90
PID 4928 wrote to memory of 60	4928	msedge.exe	91
PID 4928 wrote to memory of 60	4928	msedge.exe	91
PID 4928 wrote to memory of 60	4928	msedge.exe	91
PID 4928 wrote to memory of 4876	4928	msedge.exe	92
PID 4928 wrote to memory of 4876	4928	msedge.exe	92
PID 4928 wrote to memory of 4876	4928	msedge.exe	92
PID 4928 wrote to memory of 3128	4928	msedge.exe	96
PID 4928 wrote to memory of 3128	4928	msedge.exe	96
PID 4928 wrote to memory of 3440	4928	msedge.exe	97
PID 4928 wrote to memory of 3440	4928	msedge.exe	97
PID 4928 wrote to memory of 4708	4928	msedge.exe	99
PID 4928 wrote to memory of 4916	4928	msedge.exe	105
PID 4928 wrote to memory of 3472	4928	msedge.exe	106
PID 4928 wrote to memory of 724	4928	msedge.exe	107
PID 4928 wrote to memory of 3908	4928	msedge.exe	108
PID 4928 wrote to memory of 3908	4928	msedge.exe	108
PID 4928 wrote to memory of 3140	4928	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e76a3177f9edeb809978435aa9bcdc646b827f0d6f0d0bd8e2260b2bfedf6ff1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x25c,0x7ffa2084c188,0x7ffa2084c194,0x7ffa2084c1a0
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,15937981600503144365,6625023100701341172,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,4268598969095997896,10055630418949455988,262144 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,15756738724881710715,8291339853821571614,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8369926690364025585,13107813496955801319,2097152 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,4987335135661497285,3757521949137179714,2097152 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,11364260475172888182,12994905339286487794,2097152 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,14601853780967853340,10643349790087128880,2097152 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17782890750226611534,15629231404764710129,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,5821180399823094859,1721928865082330838,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,6022151688716079563,5813529352684272555,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,6022151688716079563,5813529352684272555,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,11069297912765337513,16545298338949169482,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,17356994336699648461,12063492572792817334,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,15570780839442499630,18385009916567249473,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,5774268698363595500,3798483889903150025,524288 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5504,i,2893231626364111642,5218265762046250416,262144 --field-trial-handle=2352,i,5731594638377284786,12082309140506429962,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:3140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d47cb5f5e72a2f7acf4ffcfe75c9c5f311d27fddc8c96ac6a82621d37ce0799c
MD5 fdeefe8ae25fee0ef69bbfef2aca1ef1
SHA1 499bf61974dcf0b146b45f003cd569d5e7d6fc76
SHA512 eb61c4d252777b81e223241777a5a17045bdf99df16d4b0f1fe1b230fec66c9011a0749c54ad2bdb7223af94ac8622ff576db66209a1f64a4cb1599365d8605e
TLSH
T173510882DCB040D8FBCA41F081FDD08F36FB4D8249832E92FC5BCAB85636760924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d906.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d906.TMP
Size 3KB
SHA256 3bc058c4d7d8eea0c7195cb76da6fcd716e8f91b9f5a30d75830a81cf0cc878f
MD5 1f4642398a258ef4ca14dc116a4375be
SHA1 712b7e6a9f9a284716170e3052702155756a3c7e
SHA512 65f2a10ef314b6edbd7ccf0e4388911e13e6d4c3ad5f57e4cac5cf998c0b4b34214cdc1f73448d87330eee59fe32aa3fd7074ac504a08064d2618658b3994f7a
TLSH
T183510882DDB040D8FBC940F081FDD08F36F74C8149832E92FC6BCAB85636765924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1fc3cd40-53e7-400a-bc94-560ee561fee8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1fc3cd40-53e7-400a-bc94-560ee561fee8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a170bded2b591161594792feb61850c499304fc46381d27cb0dd42c26f661f69
MD5 f317d56c77974fff9d711392e6293c68
SHA1 2498be3f367e2c1079a67395bd232adbf350b5fc
SHA512 a0f8bad9e98a09bd11164c02150232a0ba9ba1f5fa912c96232cf02d0fbbfff3a1fe90f5d31457e7e58bbe226d767b589761c68847b79e64e21c58ec11443e93
TLSH
T19741ADF7C3D5867E991156F09B286E2ADE1C0A06422C3C56C9E5EF5BA3E24B0E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 70658665c409cf9cb01e4f68ddb435f0371a1ddc77ef8f85dd49355a0cb73ba3
MD5 856c62345a0c1c9d9dbae8a6f60f3c41
SHA1 f91fda56055f845f2a694e1f0e0225d7360018a7
SHA512 8b0adbe18aff6f580971be0599e9818939479a69a254b0f09e8e249cc8ac428dc34a196a433b8ec0053a5598c4ff0ca1c28ce56b15a4d397f3deb53741c1f969
SSDEEP 192:sxZ5lWn/fDs6eSaAIdpdPHW6+WNGYapYgdIgrJ:sxZ5Mn/fDsy0hHbGT9
TLSH
T1CA129612AE38A57B8CCBE21DBB65BF13D6F9503291941E48AAFC861C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3cdb07743d4ad2b3dfbe3a9ab8710fb01c91e0e4033e2cc35c318950dcf2258f
MD5 ad06a01c47ca2920c1a47601b2860b55
SHA1 7c5b9dcbbce28f3728d5eafd208adca966177d24
SHA512 782774441b27b917a39417fd6e756dfe0cb75e92c2e33ed221e9e4b408d4b21873e8eff056cf41ecbcb7e9f9b59ce754ecee99e51aa874967125751fbc0deb39
SSDEEP 192:sxZ5lWn/fDsXeHaAIdpHPHW6+WNGYapzgdIg5KJ:sxZ5Mn/fDsC0vHbGyo
TLSH
T14A22B9526E38697B8CCBE21DBB557F13D6F9503251941E48AAFC8A1C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8dcd2dfba64aa20c10fa858bb8dfd59e25877e0fe6dd18f53ddbd2cca8ccafc0
MD5 2c1a413030bc21878b07c8903750c0cf
SHA1 8fb50777e1806185f3d1de912c7f2ee0ef1da4db
SHA512 f5bc318bb95f0a7008a872eb9f857d28c2c2c63f4e4a181ceaeedfbfb049e4abb52f66c79610fb1ce656d7f6874c3ea04113b941f305b3f4b6625bed4efa0eea
SSDEEP 192:sxZ5lWn/fDsXeHaAIdpdPHW6+WNGYapogdIg5KJ:sxZ5Mn/fDsC0hHbGTo
TLSH
T1C022B9526E38A97B8CCBE20DBB557F13E5F9503251941E48AAFC8A1C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 09c8752186a432a74746e847d2cc32607522759f3df2e0a63d32033b72d92733
MD5 04b9a2435cc4093fe3efe5f8846eeadb
SHA1 1f3f605218a3ddb36135d713d3fb02f76d501436
SHA512 476bda7000198baba78599f37d8c4af2301209b9d8bd8e0a61fad67d79007da0961ab230852430f1e477d0d78006e61e12cd1a60bdb1568094d2a7d73182f36b
SSDEEP 192:sxZ5lWn/fDsXeSaAIdpdPHW6+WNGYapYgdIg5oJ:sxZ5Mn/fDsL0hHbGTa
TLSH
T1A122A752AE38A57B8CCBD21DBB65BF13D6F9503291D41E48AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c93fbc4ab4dcd6bd05a97a3583c14f7a21bdd2829a0cdeee19994bd2e2f5b21c
MD5 0720cdaed6b733784f3f2774d706bdd1
SHA1 8b8574cb0e48ff7bb9ecf97c7075380d40bbb3c5
SHA512 2c487c4ffd1db20af0ff803e573423b4c80e6065d09d043137289d9bf030712ab43a610e7f0f542b501615f52e418f2a3af2849fcfb379d74f8cdd8ca89fe20c
SSDEEP 768:MAWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Mro4Yfe1mRrE:MAWPcLKWvKeEeu1jaClLiF7X4YW1mRrE
TLSH
T1A9C2FB3B640CCB7E5FC01A9DDC5A6FA76E9802C79A584D4047FE944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1b5301bc57ab99e6e44572f40d4745a0756738ba48fdadd9aded1550e40e7299
MD5 3f785aaf921112dad2abb259310e0c6e
SHA1 8559ce29f70b37fe90b4f493d35329f3a012cd9d
SHA512 d7b7a46df6729b83d526f8e18cf8b8d4cb1ec763b305c29f72093618b2603a339860a75d86153537fddd444cfb29b688b1f4b7cc721497a17780ad3d99a06870
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yL5IVpz3Lkb10JF3jXYbLuLISdYK9914:KU0wKBeiiZCoKP626qoKHq9
TLSH
T17CA1D30530B702413CBE295985758B1A514335F33028E62BBFBE54D69D6FE055EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83ec0f76a924dc6857d532a6a305cc9c5f7b41948eae4e5f56b1c7230d6851d9
MD5 3c3af02ec54cd05634b98fb6c3c5c6a0
SHA1 2bdfe6c404cacc506607e2ee4eb3e9b1e06023f5
SHA512 50315aa75dde5b7306ac7dc84cf201fbe66368f9680476568b5537443a8daf1ad9e5a09688772fac7e749c31a4fb7e60ba068fd0a448576215beb7cbaa48c9e9
SSDEEP 192:aONS6IEQLQmiUyvfYT7uIGmQ2msME27Ht/tAU6:aONS6DQ9t7uIGmQ2msM9H0U6
TLSH
T1F6120A36ACB8BC679ED3A945F4433A239DA58227E6C57F90D5DC2B1C00EF25C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b453d807d297df8ce1b7d0dd1098ec90d3ea40fd1fa3028a0f71153be34072d6
MD5 9beac278cfe2ce96d5f06f12d97d9754
SHA1 594767e7a128483b55fb45069b74b4aa07a31cd4
SHA512 ce74053771b7305fde1acc1bfdb97f8068b757f628a7473e8f6f9182b9831f55a4782215869cfadc5b3fb51a523e104f14733a8dd3a6b192e73ad7c0a74ec819
SSDEEP 384:cZcIu4sNH158R1LTU5zIGmQ2msMsfi07O6R2FeoX5oE:KlTqFT2xhfi07TRW3
TLSH
T168928D725C78AC379EEBE546F9463A139DB8916393C86F40E4DCAF1E04DA658130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c4ad80f30b953d11023012e2dc2e437468288a54c62ce5bd3f2cee238a505802
MD5 a612429864d78f4f291def268e3b5cdb
SHA1 6587517cc26a3bb55165d8a78a9a33841bedcb27
SHA512 51e9b8bd7c25c8ec409bb38f9a4e3953e31582dd7b62dd3163ebbf787b550897b6084603dfddf81c683ec305a4bd33f849effb366a6110a4ade0d1df2bf1e030
SSDEEP 192:aONe6IE7QmiUyvfYTPuIGmQ2mdC7so1U6:aONe6DtjPuIGmQ2m+s8U6
TLSH
T15702E939ACB87CA7DFA3AD49F4872B235EA5112BE5952F84D9D81B1D00D725C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e156ec443eecfce5e213afe43ae16d5f29fbcfe4d2e0c000c26b7d4282d20ccc
MD5 22f0edd507e2399e1ee9e61f6781affb
SHA1 8b8313415867db8d0d5cb6e7ba0db7f4815f1d14
SHA512 e51821b12d979da23e4f3ab6b3dff85f067c912e2538700f623e3df8491be843ec5b7ffe27957ad1bf26e10e3ce828426a6c4c4fce48fb17a3fd1947304843b5
SSDEEP 384:mZcIKsNHI58R1LNU5zIGmQ2msMKi07O6R2FeoX5oE:0KSIFT2xPi07TRW3
TLSH
T1FA828D725CB8AC769EA7E546F8463A139DF8C16393C86B80E4DCAF1D04DE668130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8a3e223-f9be-49c5-9295-0ee7ae59cd03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c8a3e223-f9be-49c5-9295-0ee7ae59cd03.tmp
Size 18KB
SHA256 a79abcf9dec29470c3d019d9b64b377f7dc93356cdca29d07116f7e19e201c73
MD5 65a403f23d90d65dadd87269a276d80f
SHA1 e0242252b328c5e144ebfba7ef67befd07f505e7
SHA512 9c1ac274595aced68969b02495ae547c18205aae3575396c7b8e419448df3ac437c1b9f5d13bb5abaf9e5728bc63f1d4a9793ad82c622de95358f66b48469165
SSDEEP 384:qZcIKsNH158R1LTU5zIGmQ2msMKi07O6R2FeoX5oE:IKTqFT2xPi07TRW3
TLSH
T11B828D725C78AC669EABE546F8463A139DB8C16393C86F40E4DCAF1E00DE668130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86cb05d1-6d8c-48c1-9643-d05da59445e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\86cb05d1-6d8c-48c1-9643-d05da59445e7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4c23d14b6cde025cd1dd7a4d86ec080adfeb6ca7ed5c53babce812cfb7fe753e
MD5 b6ad5713651212dc5566a1325232d641
SHA1 f8666bfc6ca2790819ad0c1708db8ac2d3e2f5ab
SHA512 4af23af6b79115ff0c09a8821b74f811f1f78f3327aa22719e2f44d56c9b26630e9686aafdbcbd119ca668c6e151b8b4d0d42d7ce71fb03d0731ffb6ca294fd4
TLSH
T149410698A2E91148B3B77F169BF6B56E487A7D372E07D45D10110E4F0A27A40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads