928613409da19152d0d2bb377819baa8f75c0154a7a09d35b1372fced2eede8e

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 23:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dsr.html
Size 40KB
Sample261102-269tkafz2q
SHA256 928613409da19152d0d2bb377819baa8f75c0154a7a09d35b1372fced2eede8e
MD5 9cb24ba2faa83c71edf760039c1c5ac2
SHA1 db641167c17a6ffacdbf0f11685dcb73e9d6279f
SHA512 a657926be6949699e9eb4f622cbae9e4e711cd6f01b377311636f6e1ee222d58cb17843319cdd2269f6dcc1fd999ca57e90ad56022f4a9bfa353caec50a96f52
SSDEEP 768:R1mKZohbu2QsZrB83BnMp8dXGor81/WK9yyuIYSZckS6SocOwCDVm+2t+JrpGLEF:3mKZOuBsBB8BNGogocyBIYSCkS6Soc90
TLSH
T18213D76BA698173907930086FD79D2CEE27EC87D779508906E7F4E6822D6D34837B384
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4532	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{64C4E644-0B2E-4CF1-A97E-40770FD2B4B1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5576	msedge.exe
5576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe
4144	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4144 wrote to memory of 2020	4144	msedge.exe	88
PID 4144 wrote to memory of 2404	4144	msedge.exe	90
PID 4144 wrote to memory of 4532	4144	msedge.exe	92
PID 4144 wrote to memory of 2404	4144	msedge.exe	90
PID 4144 wrote to memory of 2404	4144	msedge.exe	90
PID 4144 wrote to memory of 2772	4144	msedge.exe	93
PID 4144 wrote to memory of 2772	4144	msedge.exe	93
PID 4144 wrote to memory of 1468	4144	msedge.exe	94
PID 4144 wrote to memory of 1468	4144	msedge.exe	94
PID 4144 wrote to memory of 1468	4144	msedge.exe	94
PID 4144 wrote to memory of 5524	4144	msedge.exe	95
PID 4144 wrote to memory of 5524	4144	msedge.exe	95
PID 4144 wrote to memory of 5524	4144	msedge.exe	95
PID 4144 wrote to memory of 2712	4144	msedge.exe	96
PID 4144 wrote to memory of 2712	4144	msedge.exe	96
PID 4144 wrote to memory of 2712	4144	msedge.exe	96
PID 4144 wrote to memory of 1140	4144	msedge.exe	97
PID 4144 wrote to memory of 1140	4144	msedge.exe	97
PID 4144 wrote to memory of 1140	4144	msedge.exe	97
PID 4144 wrote to memory of 1236	4144	msedge.exe	99
PID 4144 wrote to memory of 1236	4144	msedge.exe	99
PID 4144 wrote to memory of 1584	4144	msedge.exe	100
PID 4144 wrote to memory of 1584	4144	msedge.exe	100
PID 4144 wrote to memory of 3496	4144	msedge.exe	102
PID 4144 wrote to memory of 4564	4144	msedge.exe	106
PID 4144 wrote to memory of 4728	4144	msedge.exe	107
PID 4144 wrote to memory of 5264	4144	msedge.exe	108
PID 4144 wrote to memory of 1964	4144	msedge.exe	109
PID 4144 wrote to memory of 1964	4144	msedge.exe	109
PID 4144 wrote to memory of 5576	4144	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dsr.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb48c3c188,0x7ffb48c3c194,0x7ffb48c3c1a0
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,6511526086019259120,2693476928621287400,262144 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,1370364868418906514,9601575082842990551,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,5310096883281575734,7241604876770627824,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:13
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,4390637772313293035,8372062687132663555,2097152 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,9412433276193870087,17276836890960905550,2097152 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,9327596003564834565,7958088882822971450,2097152 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,10027581519720319626,3378497721635701696,2097152 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:9
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,13850351815791244118,6591046877676213468,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,8151509183332155074,3146464237404449143,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,5119125241903368080,8141959930172151753,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,5119125241903368080,8141959930172151753,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,8351965380472636366,16769103392026669642,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,18117423228579003635,12302575800575948942,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,13007529434428334800,13694091651418499081,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7227195673610597607,7721036198294950496,524288 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6456,i,5099103965028222505,17785561088518991134,262144 --field-trial-handle=2444,i,11752087436308920193,15010135802029771090,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4448e16a-c200-45a2-9e9e-f319dcbec7dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4448e16a-c200-45a2-9e9e-f319dcbec7dc.tmp
Size 40KB
SHA256 3d15ad15590253c68d80cf585c2c2641573884daf682ea2d905756d3500033bd
MD5 501c7a9124be8acd72de853e24ee09af
SHA1 69af4eb4d02d8c6c17e030c6b5c8034d6583a4ab
SHA512 b17ee25deb8a281c6ae9f7cd3656d64c460d72daf3453b8bbafd12af57679a0ac0bb594231e662adc53d9eb1b93d25bf916178586ab34a1e596d58acc2a6bf2a
SSDEEP 768:1/UxvxjgC+D38BFc7fZrKTvp5XSwQs88uBkiT26kwrw0lkg:YZj3+D38Mtr+xILNBrTCg
TLSH
T13103C13ABC945863FCB2D391365B2787EFF05143C4C81AA489FE6A1E028B75D634B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74670ee6-bc73-4bd5-9e3b-063e16ee45eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\74670ee6-bc73-4bd5-9e3b-063e16ee45eb.tmp
Size 33KB
SHA256 eeadcb71e9a20136a41a08438cfc81175ebba61d602dbc2b39042bfb59402bb6
MD5 ac6af4f9ed553b4884f0f0a5cbba24b0
SHA1 ba0a731eaf4c70144628d4ff7e6f260aeb45f978
SHA512 c29c47f840d5920ef6b1aa44c6fbaeaaed708752c54d8f23df773b549dd953044ff67cc1858d7a4887afecfbfda9b23d1132f1962ea8b81f53e41b01bb1d60e0
SSDEEP 768:pH39vsFc7fZrKTvp5XSwQs88uBkiT26kwrw0lfL1:pH39Jtr+xILNBrTJB
TLSH
T19EF2B035BC955863AC729381765A3747EFF0A207C8C80B94CAEE761D028B75E738B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ab31255-46ca-472c-b859-d4facff13963.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ab31255-46ca-472c-b859-d4facff13963.tmp
Size 37KB
SHA256 34e327400655847d25582edaa9782ef31ea9dc1083ac93dfb8e75d5e4be8567a
MD5 9c5071292b639c2790e3e922f6e5377e
SHA1 00aacedafc5604410a70228f0697af6852df1a52
SHA512 03df18a1b8ef468ad6d16097ee25badc3add753904fc688e56514cbe15422c0a24b269d5315a0ba7abcb45d90eb7c7f591145ee5b59de73f6eb97f97e4be161b
SSDEEP 768:R/UxvxjgC+W3c1/c7fZrKTRp5XSwQs88uBkiTCg/P84g:kZj3+W3cStr+/ILNBxHg
TLSH
T1E503D039F8946863ECF39385365B275BAFF06153C4C40BA849EE7A0E028B75D6307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8eb87468-825d-41cc-a53d-c81e0b3f0a8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8eb87468-825d-41cc-a53d-c81e0b3f0a8b.tmp
Size 33KB
SHA256 388d490fdb2010034dff45fabe6e828abdccc13b77b8875c7ad7733c37c2c5c0
MD5 c35e65c7ccc812b039ae0d0514b7a711
SHA1 14349106827020901c96580955d6c24abb2c5cfe
SHA512 5555f029336c1409aec470ea94375ef2ad34e286127584cc965676fc5de6110ddeffd83630ff2533195f40acaf2a8659110cd828bc870aed57e34934e0e67381
SSDEEP 768:iH38vsFc7fZrKTvp5XSwQs88uBkiT26kwrw0lfL1:iH38Jtr+xILNBrTJB
TLSH
T165F2B035BC9458A3AC729381765A3747EFF0A207C8C80B94CADE761D028B75E738B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c911a4c2-ed39-4624-ab60-f3d59514e080.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\c911a4c2-ed39-4624-ab60-f3d59514e080.tmp
Size 105KB
SHA256 2ef96264d2b79f2f32ba7c3f4d8bc3a7cd12206153f6218f7bbe1251f2de650f
MD5 1ad9f96c1fcd1af763818d9e108bb5f4
SHA1 1e2816ec93f878922501ab302f5c8c4e7ebcd07d
SHA512 e00a04412dedd2975b5ca272c9660f6c9931bacff5f3a31e6eda9d9dbf0a5b61954f0ec88458dfe5f52a32f35c3785be60c678cc8a35853099cfde0c58ccdbe9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T1EFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

090ae27a-50b6-4c97-ab87-f621c44777db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\090ae27a-50b6-4c97-ab87-f621c44777db.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 302425909d4e134f8a5cabae8f3d479c1e7f736471f6aac9ba14337f1e9e39e2
MD5 1120e47f64995a3a77aa2fd4db17207e
SHA1 ba82144d36b563147f3e8f34220c4c966f740352
SHA512 7ec8b45f867e5339ea88aeeb0b2a81e51f81878ec2a064dd32d869a5c446b942ebef3a4d05f7c93b93136b5dcdce60ab933d9babe25cde87271efddcc8e9223e
TLSH
T1D33151CAD594042AF3944971C7D8DFCB36B374BBB1834D8303A4C6BE63B63984040878
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 25a85731e1560c4d4ca96c6708d88be56089b1d9b93ae0a2c2208af8841534ab
MD5 218a3f7c0840004d66ade9d3d949925f
SHA1 ed2ee81657280894848cd017c6397585a2fd84cb
SHA512 5bc5fb33edfacf4961a224094eff6a832bf1edbbdf5e6b53be3a6a45169eb53fd0c1673f3a1dbb78a56087c0db8adf01e849fab9cf902f1b36b4aa7e92d9c2f7
TLSH
T1783151CAD594042AF3944971CBD8DFCB36B374BBA0834D8313A4C6BFA3A63984050878
MD5 SHA1 SHA512 TLSH

Submit Download

df8e458d-f6f8-497d-9039-db9c3588c023.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\df8e458d-f6f8-497d-9039-db9c3588c023.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

25f49f51-6b12-4786-9239-cb9d4b77ef86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\25f49f51-6b12-4786-9239-cb9d4b77ef86.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

cc936997-0a63-4ac2-bb2e-70b03d724741.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cc936997-0a63-4ac2-bb2e-70b03d724741.tmp
Size 2KB
SHA256 0e6beedd4d82e8b96e87774b2729df66c1afd0e36fcc9fb9b0fd386d0cb5c904
MD5 98a38c41d881b6325fafad8f6e39be62
SHA1 062fa2b6fda2e0980d02ff9d34129230f0e09ea8
SHA512 602497d7ccdb117cc38cb513b6c63eaf9880ad85bb67e3f4456b636d0968b13f0a26288c9631cc6856a7928ed1a2d5ddabca8452b64efd6e84baaa210109fb16
TLSH
T19D41B0F783B4867E9A1186F0AA146E2FCE1C0516432C7CA589E4AE2B93F3471E04179F
MD5 SHA1 SHA512 TLSH

Submit Download

ed01422c-dbbb-4dcd-8e3e-032d39822aba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed01422c-dbbb-4dcd-8e3e-032d39822aba.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3506daa8868064dbba0736b7ba0f3f9361c9a22f4277a48ee2e828afa10ae352
MD5 1eaab9321f5a528fffcf7f852c1dd5df
SHA1 be9ca31a71a855ef753a179b6f1d1557d2ba280a
SHA512 f015e4dfa9e046561c3070d14f734c64aeaea9129cb09605a5d4125e7f98508ba45e5b6403614a3e91147ccb91cb0a439a744f55b346d5539765881b33083cf7
SSDEEP 192:sxRWRpbU/fbszSHRiz0zoA8p44q/g6+WNIYEGJP/GrIgIJ:sxRWzU/fbszSqRq/5Ins
TLSH
T1C732B815AE24A93B9CCBD20DBB657F53D6F9113260D02E48FAFC8A1C04E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e7125ca2063492369ac2a7c72f136a543149ba5daee40d78f29d7be0fc0aaece
MD5 9c7832148a92f0dfcbad3ed9fdc275b0
SHA1 52d493c0aaaff57be43a97d51e4b977eeb1be3bb
SHA512 a1bb7123f3723d8c74ae600404dd3f1e65c2baeb09077ec45b5b9b023abe0d59cd5b294242a4ab89383b93458f80907389abe821f9bc6fa6a3fdf6a1aa9ef1a5
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXqroJe5:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VT
TLSH
T15DB2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c30306a0ca876804485949fd99401b7b909e0ae5f543352f2a0c325c4419b2ab
MD5 e522d79c4fc4c254393d4aac9ab3f047
SHA1 5bcf33a1738cea1f96f7482f6ae35707a4422e6f
SHA512 3cbb1ffd5e07f9628923886cbffb9fa6e3b4d131472f32723928e867fbc91fff720320499dcf303601467c22175b89bf160e5333babbbe316a3e00b7a0444401
SSDEEP 48:KYbIVKYkYfy1FIlKWIIC0InKhukLylJI9KawgN:KYbGKYkKGFWKWIl0gKhu6eJKKaw8
TLSH
T172B1D14130BE124038BE650E80B4872A558132F3715AEA3B7F7D51E24A6BE186EFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b4fb19d9-adac-4dc2-9177-9d1d0e47d2e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4fb19d9-adac-4dc2-9177-9d1d0e47d2e9.tmp
Size 11KB
SHA256 8bf489f39ae305746850b024609c42d0a3d62fab193b239f583310a68dcb5d90
MD5 cf6d7e8e7a699ea7d10efbdf73ea9621
SHA1 61572affa21a7dfeb3b3238e6e898cc1163ff055
SHA512 26d84d75a5a7feb2b4e6aa4cdc7009f52b75a513b7d5b4b1ae0bc6dbe6de0d860f854d120a52598fdafcccace28583b5b3568197cefe718ccd33d1993225f9ee
SSDEEP 192:sxRlRpbU/fbsKSHRiz0zoA8p44q/g6+WNIYEGJP/GrIgDeJ:sxRlzU/fbsKSqRq/5In2
TLSH
T1BF32B815AE24A93B9CCBD21DFB657F53D6F9113260901E48FAFC8A1C04E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0fac0cb-700d-49d2-8f4b-48c52e86bacc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0fac0cb-700d-49d2-8f4b-48c52e86bacc.tmp
Size 11KB
SHA256 725432cb5ab85cc552bed29b8ebc1670e2cbc7556e7a062bfd6cd975bb8da8ba
MD5 98414c007b5908c7fbeb7d5c597d25ec
SHA1 f6c67696eac93939df5a4408b39c407fcaec1361
SHA512 0ac0eed4c1465b5230fafe684fe549713724f61256b810386acfd54f8b0c9cabd8269b46b7995ad6af0a7da73eb5bc6f245044393f2271fa9a8c43b939737acf
SSDEEP 192:sxRlRpbU/fbsMSHRiz0zoA8p44q/g6+WNIYEf3P/GrIgDkJ:sxRlzU/fbsMSqRq/5IqE
TLSH
T18542B825AE24A93B9CCBD21DBB557F53D6F9513360901E48FAFC8A1C04E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3589474-bcb4-45ec-aa3d-b8bec085c830.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3589474-bcb4-45ec-aa3d-b8bec085c830.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

14b55bac-ad8f-41d5-9058-58dec6f42ce4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\14b55bac-ad8f-41d5-9058-58dec6f42ce4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0e369a4-32e9-47b9-b216-b3db29e80d7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0e369a4-32e9-47b9-b216-b3db29e80d7b.tmp
Size 38KB
SHA256 7c0a85a2bd2653b715a87a4b52a250e46dac0aa934c501086c5d9659bbd7135a
MD5 d68025bbf0dde3996732a6559f8de20e
SHA1 7592709d25ebd60f53b7dab5a62ab2ea8449fe76
SHA512 765af6cfda65d88f6e28038b88a3892bb304a40679e23b77ff67ae80bb24c8335abc7fbfeb08a76c63930c463f8ccd8d02b5164a3576ac50255a08d58aa8bdad
SSDEEP 768:f/UxvxjgC+W38Wjc7fZrKTRp5XSwQs88uBkiTz6/P84g:yZj3+W381tr+/ILNBwHg
TLSH
T1B203C03AE8945863BCB3D381365B274BAFF06157C4C40AA44DEE7E1E028B75D634B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf1594d2-ed73-414a-aca8-f17db1a030f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf1594d2-ed73-414a-aca8-f17db1a030f0.tmp
Size 36KB
SHA256 023132120296f8c39a7ede7b6be0f223b53a7dab783c0b07d872241445af4feb
MD5 172ccc7851905b777f1393d255b811ee
SHA1 bd5c74a67ee08dc1ea53ff9cf155794b265b183c
SHA512 3b1a06ed24db4391e4e7013e3fcf1a94e4c5b99a5eb1c4aa0809bb8e396b175f3f5cb6bb13c95d6f8ddb4c0cc2de1e4c8932b77ad1df42e82cbaf630b8bf1429
SSDEEP 768:lFd23gwgmvsFc7fZrKTgzp5XSwQs88uBkiT26kwrw0lfL1:h23fJtr+g9ILNBrTJB
TLSH
T142F2BF36ACC48977FD769781B61A3342EFF05247C8C80A94DBDE691D018769D338BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9328a62-fd9c-4f3d-bd54-3b4206d502a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f9328a62-fd9c-4f3d-bd54-3b4206d502a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download