c03db1d58e3bb228ace70b24d995803ddc3bc1bb2978a4d7cb77d1e740ad1e6b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 564B
Sample260928-pltkmatdjf
SHA256 c03db1d58e3bb228ace70b24d995803ddc3bc1bb2978a4d7cb77d1e740ad1e6b
MD5 74615748f95086085ffebccd3a5657d6
SHA1 6c7b11351bd3c92de91c1e2c1d9c4a0de7017066
SHA512 25b48ce411ca111ea3f97db68b2ebc17e8be9cd40c354069dd77abb05d3368f918b459433cf511cdf63ec9583165da6b26c9a867fceaf8abddd526c8445f35b8
TLSH
T1E9F0629B6F19383F2E238571B4875168CF680552FB9925E2C748011F76C904549F6FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{D9C0E4B3-C737-47E6-9D7F-CB80CFDC385C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4088 wrote to memory of 4728	4088	msedge.exe	86
PID 4088 wrote to memory of 4644	4088	msedge.exe	87
PID 4088 wrote to memory of 4724	4088	msedge.exe	88
PID 4088 wrote to memory of 4724	4088	msedge.exe	88
PID 4088 wrote to memory of 4724	4088	msedge.exe	88
PID 4088 wrote to memory of 2756	4088	msedge.exe	89
PID 4088 wrote to memory of 2756	4088	msedge.exe	89
PID 4088 wrote to memory of 3024	4088	msedge.exe	91
PID 4088 wrote to memory of 1408	4088	msedge.exe	92
PID 4088 wrote to memory of 3024	4088	msedge.exe	91
PID 4088 wrote to memory of 3024	4088	msedge.exe	91
PID 4088 wrote to memory of 1408	4088	msedge.exe	92
PID 4088 wrote to memory of 1408	4088	msedge.exe	92
PID 4088 wrote to memory of 4332	4088	msedge.exe	93
PID 4088 wrote to memory of 2892	4088	msedge.exe	94
PID 4088 wrote to memory of 4332	4088	msedge.exe	93
PID 4088 wrote to memory of 4332	4088	msedge.exe	93
PID 4088 wrote to memory of 2892	4088	msedge.exe	94
PID 4088 wrote to memory of 2892	4088	msedge.exe	94
PID 4088 wrote to memory of 4336	4088	msedge.exe	98
PID 4088 wrote to memory of 3324	4088	msedge.exe	99
PID 4088 wrote to memory of 4336	4088	msedge.exe	98
PID 4088 wrote to memory of 3324	4088	msedge.exe	99
PID 4088 wrote to memory of 1836	4088	msedge.exe	102
PID 4088 wrote to memory of 872	4088	msedge.exe	111
PID 4088 wrote to memory of 900	4088	msedge.exe	112
PID 4088 wrote to memory of 4716	4088	msedge.exe	113
PID 4088 wrote to memory of 4172	4088	msedge.exe	121
PID 4088 wrote to memory of 4172	4088	msedge.exe	121
PID 4088 wrote to memory of 4452	4088	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb0c2cc188,0x7ffb0c2cc194,0x7ffb0c2cc1a0
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,11098662614154699945,4110731880840147535,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,17362902568594535569,628482506147652080,262144 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,7639975261602035979,3927669779821282113,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,16525260567054026476,1159536029844987097,2097152 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,7909692530890256206,18313794155627805760,2097152 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,12741325326103892780,12291906791299687280,2097152 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,12728407916482322510,613980039645418400,2097152 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,8447357842991933602,15271933050052878536,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,10066548962345954969,5031415884776548428,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,4612346754733206217,12136481157151917482,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,4612346754733206217,12136481157151917482,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,7242372295983642192,17339784707326156777,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,335000764112833038,8968261803932948631,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,7525175700958345801,5009013752035020197,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,13992783111646096890,3067908467762167257,524288 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,6878965404806583555,17690955317141093479,262144 --field-trial-handle=2316,i,4416249207687604620,3920570220764153978,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4f6a2161c702c4153818b8ee70770cf02f697873c712c4b2d7eda6cb58468c2f
MD5 0f2bd5aee31b822224d2fea519eaa053
SHA1 aceff0264082c1b6db52d7eacecf4ba3ccc907eb
SHA512 d0bd072b58e1b1fa409a048142be5107cd47244ca4c6739d8526a5d1eade7e04c245759a749d861d2010275061b3b84eb1f4ffef7467bde2ce2f25914b0ed5a4
TLSH
T188613C8124A960DBFF9B4CF392CA1287F634474295976EE32FACDCEB980BB54C034940
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5932de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5932de.TMP
Size 3KB
SHA256 2fbce3e3d4cb282758ec091944ecd3fc61b08a246e8f2d93cadbe91bbb7c75df
MD5 44909bd644f6b780d12811788a079eee
SHA1 718a461b76d187e1fda82d854bae446938ba282f
SHA512 28c7568ec7145bc9ba95031eae0eb1cede66c5b8b6dd1b1ffcffc020fdee292766f9362a5e179ae66bf1ca539954ab203140131c5e73b1d4a6c925640770891a
TLSH
T1BF613D8124A960DBFF9B4CF395CA128BF534474195932EE32FACDCEB980BB54C034840
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 cbca78c871bef238fd53b150498614826d9294d25e8f2a9cb65bc178450685f3
MD5 84ee8ab88f3ecb352f99592e16753b4e
SHA1 d5652fd0d5971c69d173ada332c430f04fd03dbe
SHA512 2e55e9ee24f1cdf60863cedc5330ef3cd9a896336ca302181e3ac06898d0a50778994e699e738104dd28cc238df26248825b9b032b5a415f56dedc055e6d4998
TLSH
T10D117DB3C3D585AE8D0116F09A24EE1BCE1D0606421C7C19C5D4EF67D3F3475D10159B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5956c0539d63e68bf50e615ed089536fcc2b91d630b0083cc940be3dcc465210
MD5 1884f63206b8149fcdad7490a0553bbd
SHA1 d06f0c4a6bf9e4316c01a62e827fe79f03db59dd
SHA512 9e8e8e041588381e330d24b18e1934a7e57140853e1c5ede60c61ac300914911d53a538dc57ef44fd381b9c7c2ca43b0806e9000eeeefd14f3169a4e01cd249f
SSDEEP 192:sxZbRvWp/f74s2sxbIdpd3HW6+WNGYaQzjIgrJ:sxZb8p/fksxxEpHbG29
TLSH
T13412A7516E28A97B8CC7E20DFB15BF53E6F9503291D41E58EAFC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 136241d88073e750525ba71d75d8f4659cdebe8f93406fd86f8ca8a60a6f41a0
MD5 b842200a941abda946ca856a09f11bcb
SHA1 5ba0039f901286dc6ca138f7907e1ffc003cd36a
SHA512 1461b07a8efe0a33fa428f7332afa14633d8b67168f45c8a9304ed6d9bc80076795e25192e361414260e939c9060dc6ec32eeff7509d4fb06aae4247ff903b69
SSDEEP 192:sxZbRvWp/f74slRxbIdpH3HW6+WNGYaNzjIg5bJ:sxZb8p/fksnxEXHbGpj
TLSH
T17622C8526E28A97BCCC7E20DFB55BF53E6F9503251901E48AAFCC61C05E7ADD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c892cf62da808c8c8674969bfca5e64031fec8d185406c7c484da39a24e16b0d
MD5 3ffd7d7aeb0a540a6f79f92495fe27d8
SHA1 41c427a28c68abfc7172d0db8e765d5f411d729e
SHA512 efeada91f9a2d9ddda3814206ed1afadde909bc7d0491862848abdca10e449a7a68160e1dccc8eb24a77988112c4c4892934c61193115bcad4c5670ec5715285
SSDEEP 192:sxZbRvWp/f74slRxbIdpd3HW6+WNGYarzjIg5bJ:sxZb8p/fksnxEpHbGjj
TLSH
T1F522C711AE28A97BCCC7E20DFB15BF53E6F9503291901E48AAFCC61C05E7ADD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6832a7d291162b6e36559c2ea2449f5d9c94516e85b11c29ecfb4f56f1637701
MD5 2b79cd7a2498a0e58c4a2ac61be33b91
SHA1 6232751fa2338939490980ce51b38112694657c9
SHA512 ed5d195ca7cc46bb525f37c181c1a0810253b74400a39c1dd9bad89eee2b19993122c3c12963acaea04f473a1048ef3353d557eab6c15ca23575d24661166ed9
SSDEEP 192:sxZbRvWp/f74slsxbIdpd3HW6+WNGYaQzjIg5hJ:sxZb8p/fksixEpHbG2t
TLSH
T1AC22B711AE28A97BCCCBD20DFB55BF53E6F9503291D41E48AAFC861C05E66DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e402afab8f2ab08321c9509724f56607cdd241ab4a3b1f1e123318c18ff614e5
MD5 ffc3f4ab09f3535f590f05d57b0bce3b
SHA1 f18234fd50c2f89a3fb7745fb3ee84b266df7c0d
SHA512 e8f6819d8106c81556b2037cb0d68977ffa75e6fcf15d3f0fe2cc3f83dc43e3824e1dadd031e1b91efd684df3fb876c16e99e671ebf66fdf72c9efc6223d4c54
SSDEEP 768:ZiyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3uro1ZEL:ZiyQRbrWvvlpZu1jaXKLf33l1ZEL
TLSH
T1F5C2E92F640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ba54966-aa4b-4878-a05a-14b1e1077a58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8ba54966-aa4b-4878-a05a-14b1e1077a58.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 5d57b52088eebf43739f88b370d74a9e40ca2a0a78037795a5a6e331ecb429df
MD5 2ed525fa87185b8a11c6701829686857
SHA1 311cd0670c5d9019f86316ef043b6757edaea0e8
SHA512 d491358b1899d98ccc50ff85be31f9a71370ceca2e360dc12ce73c3d7e4176bc32c2696b246b2607e735711335cb1aedbacbda540ceb22998b95658c8bce3c73
SSDEEP 384:/iFiZcI8zsNx8TUNTUlIlfHwlMGBrip5u8iMcaJB3PUtgOIwZOyT5oU:KFQAowgNKAkd0UXskT
TLSH
T129A26D3348A899BFACFB9A45F54A3603CFB4416BD6C8AB94D6DD5A1D01EB1D8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a7e6d4fbdcfaf5e326629cdab1fb88bb4b74a722422c9407b3c8121006b0324f
MD5 b677ada5d251a408166835dd5894b220
SHA1 b1358d2c5148f9c966050064ff5298a5d87ad069
SHA512 10349a9330df0d55d8ca7e2a0ce17dac3dd029a1d82830b7d6622cb45d89e6839ad3e0cb56684204edafaa09527760f1164f8ffebb801a2b0ac808f3908bbcc1
SSDEEP 384:BZcIhsNPfHwlMGBrip5u8iMcaJB3iUtgOIwZOyT5oU:JhgKAkdDUXskT
TLSH
T1D0828D3258786CBBACE7A115F48B76039FB4416BD7C86F84D8ED572D01EA5D8030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ae21787f0e45df80650e5823ecc1e30cb70cfb35385c7ff39cf3780f323b03ec
MD5 592bbdb93592dead6b98d5c70f2fb74c
SHA1 0dda49b1c5117b10fe39346b511c23dcc47dc15c
SHA512 2e507c2b159cd9bf9521207a0a066663001999c6f6600a79763f680d30d17c1e6a87f2f8109a1d580482b3c37e38a8128f348ebd03dac897393ab36100b499ea
SSDEEP 192:SONP6iDCQmiUyYKHq5u88PMcPCsSq5HFU6:SONP6/8Hq5u8iMcaM/U6
TLSH
T11A02F839AC387CBB9EE3AD15B48B7B139FA4016FE6941F84D9E81A1C41E769C1303523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5e174718abf98f8fc30c0e216f0da111558185d124a0c3b7ff5caf7bc125b0d3
MD5 351a51b525c52b5828c0092d09653d5b
SHA1 bdad2f606649375f35ef2bd9e5f6d1ffc18a5645
SHA512 c1a8b7f1a05f2c43b5965a242f86ff5ff63f43b752f3eae0bca0be2046cdf5da0cca62ed26418a278319937fc3908b3c79765ccf010297492913201eaa8d4ce3
SSDEEP 192:SONa6iDaQmiUyZK/Gq5u88PMcPCJB+ohaNuZ6qMU6:SONa6/7+q5u8iMcaJB3FUU6
TLSH
T16B122C357878BC7BADD3A861F48736139EA4426BEB886F84D8DC261C01EF59C570B523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c8ad0d5f8231de875723808b8b54fb8e0d4fda06a2dc325ef6edefcb06628825
MD5 9f9da7e01b0a9d1274948833de65ed67
SHA1 a8f85491e3e8e2824e953b26886e042addc6530f
SHA512 265c263880aa0dbbe8aee6f615cff47b29c375ce79e0a4d1534a1bbadb6dd52e76a13991e4205ab26cbe616b8f0c541b06dcf2f5155482c66cc5e4e7b242bba3
SSDEEP 384:9ZcIhsNPkHwlMGBrip5u8iMcaJB3iUtgOIwZOyT5oU:lhlKAkdDUXskT
TLSH
T14E827D3258786CBBACE7A515F48B76038FB8416BE7C86F84D8ED572D01EA5D4030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80fc564f-7db2-4fa9-ad5e-eee3a3124c5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\80fc564f-7db2-4fa9-ad5e-eee3a3124c5f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6e0a595659af9fbfecd861ebc547ca087fff6fed8d402bb83de4dbb13b64c530
MD5 acdb02a5055a1462f71263597e94e955
SHA1 8d4faf6872b8d1d6377639604aecbeac16bf1ad8
SHA512 9912d4f6f5d323276fa29dd9b93af2cdf9efbf51921da2a6353732b2da83b2fa0899e5adda1d8b7c335567c9fae7b09317eb5115581cd0a98c042e5433e34508
TLSH
T1D441F85DA6EA0148B3B76F569BF6A86E44BE78732F06949D10010E4E0A63A41D871B37
MD5 SHA1 SHA512 TLSH

Submit Download