ae99d60079b9fc7ebed79cb99f7d8754702a7c2f0edcf52e5339941b022ef01f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 20:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ae99d60079b9fc7ebed79cb99f7d8754702a7c2f0edcf52e5339941b022ef01f.html
Size 1.2MB
Sample260912-ytssqstemc
SHA256 ae99d60079b9fc7ebed79cb99f7d8754702a7c2f0edcf52e5339941b022ef01f
MD5 1c12f7b1452944852402c0137c8021bd
SHA1 223d82d1ae3f6b91ef0d215982e12fe727c0bc98
SHA512 bec17c91b017419ff3ed7b779aa143322e62580a9679c6f6010cc5a182f23514b320717b8aae17f736e357c747474c634e21ed1eb6ddf5418bddb813e702798c
SSDEEP 12288:5CeSXyMTNrjTEY0+kC6bhxs7jb+Lo1Q6sWm:5CRyyjT3kC6bhxsiLoFsWm
TLSH
T10645C7DB9231717FF833A8B596C8A949F3988CC1E5164AB5BC70A61343EBBE61351331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3600	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338262589384862"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{6A28BFEE-7C23-4386-B696-070EB19C34FC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3824 wrote to memory of 4768	3824	msedge.exe	83
PID 3824 wrote to memory of 3600	3824	msedge.exe	84
PID 3824 wrote to memory of 1700	3824	msedge.exe	85
PID 3824 wrote to memory of 1700	3824	msedge.exe	85
PID 3824 wrote to memory of 1700	3824	msedge.exe	85
PID 3824 wrote to memory of 4576	3824	msedge.exe	86
PID 3824 wrote to memory of 4576	3824	msedge.exe	86
PID 3824 wrote to memory of 1384	3824	msedge.exe	88
PID 3824 wrote to memory of 1384	3824	msedge.exe	88
PID 3824 wrote to memory of 1384	3824	msedge.exe	88
PID 3824 wrote to memory of 4268	3824	msedge.exe	89
PID 3824 wrote to memory of 4268	3824	msedge.exe	89
PID 3824 wrote to memory of 4268	3824	msedge.exe	89
PID 3824 wrote to memory of 4592	3824	msedge.exe	90
PID 3824 wrote to memory of 4592	3824	msedge.exe	90
PID 3824 wrote to memory of 4592	3824	msedge.exe	90
PID 3824 wrote to memory of 2424	3824	msedge.exe	91
PID 3824 wrote to memory of 2424	3824	msedge.exe	91
PID 3824 wrote to memory of 2424	3824	msedge.exe	91
PID 3824 wrote to memory of 1380	3824	msedge.exe	92
PID 3824 wrote to memory of 1380	3824	msedge.exe	92
PID 3824 wrote to memory of 1380	3824	msedge.exe	92
PID 3824 wrote to memory of 3928	3824	msedge.exe	96
PID 3824 wrote to memory of 3928	3824	msedge.exe	96
PID 3824 wrote to memory of 1236	3824	msedge.exe	97
PID 3824 wrote to memory of 1236	3824	msedge.exe	97
PID 3824 wrote to memory of 1772	3824	msedge.exe	100
PID 3824 wrote to memory of 4536	3824	msedge.exe	106
PID 3824 wrote to memory of 4904	3824	msedge.exe	107
PID 3824 wrote to memory of 4732	3824	msedge.exe	108
PID 3824 wrote to memory of 4000	3824	msedge.exe	109
PID 3824 wrote to memory of 4000	3824	msedge.exe	109
PID 3824 wrote to memory of 1000	3824	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ae99d60079b9fc7ebed79cb99f7d8754702a7c2f0edcf52e5339941b022ef01f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,8513625191997632605,9674659523220417526,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,17438198510216016373,8329330830928951923,262144 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,9236040799330080093,1212605650989854721,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,8048407510935979853,1564205803905363906,2097152 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,10548496149067842744,5279191477641409153,2097152 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,4674304114702830784,3555936941660056918,2097152 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,66273246125827504,4178160014551468712,2097152 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3652,i,383412134202887200,3893317316413466597,2097152 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,3272152338760347497,1986117987357408762,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,6956029493546590867,5354841589523116208,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,18118520051340792276,1796111658105168512,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,18118520051340792276,1796111658105168512,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,9350498740788940407,6645222243677087784,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,1718628845736826400,438570532762787769,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,6695127223277693184,2850096183323097712,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,8755033085651806147,13074040507778028333,524288 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6328,i,70492742741587987,12333309815085875271,262144 --field-trial-handle=2292,i,7556572104081082763,7928748798602652943,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:1000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1ed8a827ff488a963a4bcdde833c70c488111562e2a6bf6560b34d2a96bd8f2f
MD5 e4bcc70ad963f08775fad4fc20ecffb1
SHA1 b87441055ff0e608e623f6e8d8c9a580254b8066
SHA512 a365256d8fc46179d3e4d52630f701fc7bbb3e3eff2c436965f643a7e9715f66a9d89d5f36835ff6768cc2e019ec8d64a5879b632adde67bd7503021cd1c8771
TLSH
T110612E86E48E4463DBB491FD9DE12CCB3938C6F046AB1D5A0398D8795F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5958b5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5958b5.TMP
Size 3KB
SHA256 cdc74a9ca055f28417c5aff0ab5cc2db28353ca9b5f6064c780381b794e8e159
MD5 12ef378ca94203bae66926d8729ebd7c
SHA1 931f149e048b0e45cc70fcb7249363a81e2b8187
SHA512 807fffe98e82456c71f2758e0c4313869d8ffde880fe00b6642823ce7cdfedd511e78587cebcc2dfbf966e13641ee27d89ce210680dd9ec2c82be34ccd0a47f5
TLSH
T151612E86E48E4463DBB491FD9EE12CCB3938C6F046AB1D5A0798D8795F27F9272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eee858c-803b-4765-849d-5da650652b69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7eee858c-803b-4765-849d-5da650652b69.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d50d611642ced133b3e0a96b157d4bd13532f9bb6b2906462573b3c41569e4fa
MD5 b5ce5977d2156178d32af117ec53c5fa
SHA1 5cd6bea3ead21067fc1385c9f14afd626a28b13b
SHA512 5ea0822d6d59124b379c2c396936f86cb1f37ac79b610a0c3ebadf43b209ea6cfbd5dc8299ba20d98e5463dfb8104faf6d5d9af937d515a624876221f7c15c79
TLSH
T1E7318BB7C3D486BE891117F05A286E2ACD2D0A0A422C3C2689E4EF5B93E2471D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8cb091b526d74990f7e82754a266f31cc846e103be8b02d28dab0bc18f84b5ba
MD5 357081c3ab88d23ee61882565b2579c0
SHA1 2e48c74b98240409fa9c3570c0eccf43c392a533
SHA512 bb49f428056efc09c68c92a8fa66893516a778b3561dd8619616fb7b637840274a10c55b8fa30cc2e721f6330d510381ad327681aea6666591e109c8d2aa5baa
SSDEEP 192:sxZXHbRDW6/fx4sdeMIdpdaHW6+WNGYrbD55IgrJ:sxZXHb86/fx4sdeVkHbGA9
TLSH
T1DD1297526E28A97B8CCBD21DFB15BF53D6F9503251941E58EAFC861C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fa828bfe1a627dd542f32b443ded0e67d6c7472037cf580fc464027774dac264
MD5 90def4ce150e0a4edae49506ee9af009
SHA1 ab9b0b2a227f937c54b7aae8f359ae3fe579c1ea
SHA512 40537f0dd30cae2b67a89f0d19d649b3a8b4fd30357350446744c9df3704223dae7649d1304f187fe95d2a5b13c6b7dda077f24c0a9edf22858bbcbb994870dd
SSDEEP 192:sxZXHbRDW6/fx4sxeMIdpdaHW6+WNGYrbD55Ig5pJ:sxZXHb86/fx4sxeVkHbGAZ
TLSH
T1342297526E28A97B8CCBD21DFB15BF53D6FD503251941E48EAFC8A1C05E6ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2c87c23ca242f9497efcd1d672116db405e003f788f0186f75d06a639957a207
MD5 06447df9e664ff3b1901d3ae791f40fa
SHA1 3779472c53ee4704cb2e35b3088c4a89b08ce3d1
SHA512 0d05f8226b20ad025ecaedf84881432dd15973c7441e51973329a72d97cfb5cfcc51ee6eb6561cc5be0c46e2918693ee55c21c639d1d9b5d0d1d4c73d3dbc9d5
SSDEEP 192:sxZXHbRDW6/fx4sJeMIdpdaHW6+WNGYrKD55Ig5TJ:sxZXHb86/fx4sJeVkHbG9v
TLSH
T10422A9526E28697B8CCBE21DFB157F53E6FD503251951E44AAFC8A1C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c627e8aa42172d658b5eeace12eba6965fdbe1139b1910604031602d69c93cf4
MD5 3f31b68892d1378dffbf0860a940ed83
SHA1 efc90d25c5f63dca726a0642b246f4d05b2ee9e4
SHA512 3bb03c89b118a1c4ecdac07d5ea2645082dfb254c0703081de1d858ebeca864d9912006ea1bcc8bca7afd6d2429a7224d312e89f27ddf38da86510878401101a
SSDEEP 192:sxZXHbRDW6/fx4sJeMIdpHaHW6+WNGYrQD55Ig5TJ:sxZXHb86/fx4sJeV6HbGzv
TLSH
T14622B9526E38697B8CCBE21DFB15BF53E6FD503251901E44AAFC8A1C05E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ff44cfd18776082f81f8cf3f80eab1ac2ed1e9327576f82784993e2eba01bab2
MD5 63b6f68c5d76d135f5db1a1873de6664
SHA1 e28c216f6c072c3f1f0e4ce4bcde1f3dc7d4a5a6
SHA512 3dddc2a7199e0614cefa01464d4a6cc67b68636f55299805eb1198f34c7bfd957b6b90fb82a9f21cf61ebf2cb30ed70b1223fddc0567e4650a4798ea154ecd24
SSDEEP 768:0Jy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbDroRUn:0Jy4J/DWvbtBhu1jajiLm0bwOn
TLSH
T1E3C20A3B684CCA7E4FC00A9DED5E6FDB3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0cdb4c4aff59b49456c017940a4f0281e354c48751c043fa1b49a2f56d166cd4
MD5 f59ef74471f7cd4088ef56377046806e
SHA1 fd5879ada7e5bd0c7f2316cd59d6257e18718443
SHA512 35e676e5914a08f5ad85f43e8f8ba867ceeafdc0ea059798b6484e7e7fa7bc6dcd1a794b6549b3c9d2757a4569453a085e4b86e24531982d84d75c60ad0bfdaa
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLISbEIHKZuUzylhIFKqgQs:KIDCKs0+iSVEgKZuSWhuKqgd
TLSH
T11591308031BA5201397D2A4981B1D71F9643B6737018E66B3FBC6472AE6BE484DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3fa277b-620b-45a9-8943-f7fb25831df2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e3fa277b-620b-45a9-8943-f7fb25831df2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5f8f2948898c02bfec8a2f47f8f0457f7e90eff0d16b557434d1bbb51d61f463
MD5 55a1128923257c9b9f051cc83f93bad4
SHA1 6249c8786ac2cf11e04eb5ce757944afaa339a32
SHA512 137e9faabb98a78366ccaf797e711021b171f4ff2a804635c79ff1e3105bf8c6d6ae75ecb6bc6dd57adb120bd2a08678cf8237ee538eebf84c49f01e55a65771
SSDEEP 192:ueUsN6wQHa7ZlDZB3QmiU1xNG4HX58gZejzorxJgXA7R+2ZUPL/PU8:0sN6wZZfxJHX58EC8xJgXw+20DU8
TLSH
T1CB421831B878AC3B5DE2A145F44B3213AFA9512BDA892F94D6EC1F1C01DB6AC530AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ff6c5a9bbd560fbbe89254555561a2260b510807608c96d52d93a782e1f23670
MD5 cf79e16cc02ad18f2c5359e830151564
SHA1 768567989140393a65da506b49437e804b1acfc2
SHA512 bd8d92237a3387722bbb7b6605fad7fc36acd099b8c6347e48c4649a45f55271a695693186e9818af15068b5a3f69de5d7002e79fcb6b7cf51fbb7451aecc9f9
SSDEEP 192:ueUsN6wQHa7ZlDZBdQmiU1xNG4HX58gZejzorxJgXA7R+2ZUPL/PU8:0sN6wZZVxJHX58EC8xJgXw+20DU8
TLSH
T14F421831B878AC3B5DE2A145F44B3213AFB9512BDA892F94D6EC1F1C01DB6AC530AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f677032f9c56ad361ede9b61967160feba2c7caeaf98117585d0859ce7d51667
MD5 e275d89bc518589344b18266319a9362
SHA1 1252903cb79aeeaf314fbee3c40019f1f0764e3f
SHA512 c4eda904c6d821cebcdcd4016f051685c264826f50750a0dc3613d98bd1a5427526f21829ea967022ea044109d6c302a0488124d662b8b8b935c2e877cd34b57
SSDEEP 192:1ONO6wlDgQmiUys0W4X58gZejzorxJlDlyFU6:1ONO6kgUW4X58EC8xJLqU6
TLSH
T1DD02F835F8687C6B8EF3AE09F48627139FE5112BE6552F44CAE80B2D00D765C130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3945e566554a0f37a33cb316637be2be007d2b3ec9c97ecc504890c443971e0b
MD5 0feac11ba90addabf2a1c7874cae4664
SHA1 3b2aeb910264bd406af777b1d8aaa056ef6bbbca
SHA512 78b45d9a251115baa031ad6700cf55501b1b7395309a982d146f23130ba744e4cc39f532dd15e5e2703e654b662cdc0cce6029d504d07a210ac1543bbb6e5f4e
SSDEEP 384:t9ZcIisN6pZZfxJHX58EC8xJgXw+20Dsa+VYslZoh:XiV7daHwl0Dhgfa
TLSH
T1BB826C71A978AC3B58F7D285F84732039EF8906796CD6F94C6EC9F1D00DA698130AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 03cdfd1c3f1e90d7693b1baefd35f70c714486d5d78cbca664cc6d2574ebe832
MD5 b51a9925b755a21aaac24adf99beac34
SHA1 f99ba2f2195831458d9d110e7232dc606c36e340
SHA512 b433fe69d10f88c1d430833fad9027beec27579db491a2004f96ad511187a63546ac3923f24d6b3f24f749a6af4c88aa756a93dfb829472c17c51dc980218ac8
SSDEEP 192:1ONb6wlDaQmiUyS08G4X58gZejzorxJgXA7R+2jveL/PU6:1ONb6kW0r4X58EC8xJgXw+2iDU6
TLSH
T17712F835F468AC2B5DE2A545F08B31139FA9511BEB896F90D6EC1F2C01DF69C530AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 4f6e77f1c0f946e14054a6e203283950e484d08edd20326283392b7413a4ad43
MD5 ad63cb63e82954910f9cf4f0238ddf09
SHA1 f2b942caba5beab735b863aea937bebe79251073
SHA512 295ffaf62cd655c96f1b627297631b070cde717b0fb7b75069a4892f82e26535b80f54ae2144250f5c402d629f8ec10e369ac1f3e97813d661b36916482bc135
SSDEEP 384:lPiFiZcI+ssNC8TUNTUlIlpZZfxJHX58EC8xJgXw+23Dsa+VYslZoh:wFQFjwgB7daHwl3Dhgfa
TLSH
T1D6A26C729968DD3B9DF79B85F94A32038EF88067C6C9AB94D7DC9F1D009A5D80306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd39ef7c-0aa5-4680-8002-853e91e8638d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cd39ef7c-0aa5-4680-8002-853e91e8638d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aac172b416315026a944502175b1981ca3e96bc9d91b01dfd820b1f82e6a88d9
MD5 5fa3597ec8c44c34e44e56bed3338770
SHA1 e187e0ed362c0856059e97b1e58b345f207e4ccd
SHA512 921558a8d6139642bd0558264db93bf5a3a46c27de2f2906ee8660a4a4e2347c832ddbc5ba1d7f9c17de988f69e716fbdbbd15b1e5e17b46a976b8fc015adc26
TLSH
T139412948AAFD1158B3B76E5AAFF6A96D487FBC371E06909D10110E4E0A22F40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads