d34e89925d9ee3c89858e170e88cf43e9f8bf85d5f28258149431979445c2193

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/- visual presets/screenshot_comparison_vivid-summer_vs_cinematic-lut.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 d34e89925d9ee3c89858e170e88cf43e9f8bf85d5f28258149431979445c2193
MD5 d1b44f76e97a141fe899c059a3f7e90e
SHA1 b2e9768f6198ffc03b14efe098903909555ade05
SHA512 5ecc83e6366e81a54e6885a41d438e539be8e068257e4831881d7e4483512451fe4029a4dddd29148c674a17b93b293bc294109591198f7b81ee2c078d2a65fd
TLSH
T10851867320235C19215F447DA399E082C2266144E3CE6954E4DEF6F7D588F42E9A3C76
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
628	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{FB2ED5BC-F39A-40D7-A3BE-8E6819A3D632}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2604	msedge.exe
2604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 892 wrote to memory of 2336	892	msedge.exe	89
PID 892 wrote to memory of 628	892	msedge.exe	90
PID 892 wrote to memory of 2840	892	msedge.exe	91
PID 892 wrote to memory of 2840	892	msedge.exe	91
PID 892 wrote to memory of 2704	892	msedge.exe	92
PID 892 wrote to memory of 2704	892	msedge.exe	92
PID 892 wrote to memory of 6016	892	msedge.exe	93
PID 892 wrote to memory of 2704	892	msedge.exe	92
PID 892 wrote to memory of 6016	892	msedge.exe	93
PID 892 wrote to memory of 6016	892	msedge.exe	93
PID 892 wrote to memory of 3504	892	msedge.exe	94
PID 892 wrote to memory of 3504	892	msedge.exe	94
PID 892 wrote to memory of 3504	892	msedge.exe	94
PID 892 wrote to memory of 3956	892	msedge.exe	96
PID 892 wrote to memory of 3956	892	msedge.exe	96
PID 892 wrote to memory of 3956	892	msedge.exe	96
PID 892 wrote to memory of 1260	892	msedge.exe	97
PID 892 wrote to memory of 1260	892	msedge.exe	97
PID 892 wrote to memory of 1260	892	msedge.exe	97
PID 892 wrote to memory of 5112	892	msedge.exe	99
PID 892 wrote to memory of 4736	892	msedge.exe	100
PID 892 wrote to memory of 5112	892	msedge.exe	99
PID 892 wrote to memory of 4736	892	msedge.exe	100
PID 892 wrote to memory of 5896	892	msedge.exe	102
PID 892 wrote to memory of 5108	892	msedge.exe	106
PID 892 wrote to memory of 5612	892	msedge.exe	107
PID 892 wrote to memory of 3872	892	msedge.exe	108
PID 892 wrote to memory of 2016	892	msedge.exe	109
PID 892 wrote to memory of 2016	892	msedge.exe	109
PID 892 wrote to memory of 2604	892	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\- visual presets\screenshot_comparison_vivid-summer_vs_cinematic-lut.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ff86445c188,0x7ff86445c194,0x7ff86445c1a0
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,983262695732928518,6954701848387603311,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:11
  2⤵
  - System Time Discovery
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,2435640662542228402,17548919505027307041,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3356,i,11070409887622726761,6053716322923763778,2097152 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3360,i,964503618961681991,12860941829481727710,2097152 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,2351113973913167642,15915627045064837899,262144 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:2
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,10225883215949230685,337055687374877771,2097152 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,17746407887883028002,3001806070132273379,2097152 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,15024158217879210096,4506595231811376080,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,13777062244248418161,9812236775825331741,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,8651201900458583906,14899925178077613713,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,8651201900458583906,14899925178077613713,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,9063457506562874843,5795367780585674226,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,8186675353445289317,3010241601387336242,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,11458182335163749862,6817668573659499514,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,7465131810426354185,460083854719700521,524288 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=1772 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6220,i,1130385275824969039,409634972094938815,262144 --field-trial-handle=2460,i,8595909736999485089,15175327688477389048,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ac570a0-9f3f-4323-8c2b-e05cdfc39e9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ac570a0-9f3f-4323-8c2b-e05cdfc39e9d.tmp
Size 35KB
SHA256 6e4a550fca1269f4964befbf05765e2cbae67f11f7d5433b5a25695518ae1c68
MD5 de270fc010a750ad36c3a856742d1336
SHA1 0afef4a84bb91cdc2a71845874899aa456744deb
SHA512 d0c67d30ce261f5c932e5b7c6fc254daf5be5ae588e2112955b5f33191004f92201d662f4322edc047859a6eff1a088adc79234da13f33ad61fc89ce7150e65a
SSDEEP 768:Lk3xwPgm1rXLZLKDmGA5b65Q92RQMPb7WTHM:Lk3x6qAF65dQER
TLSH
T1DDF2BF71AC60DEB36CBA96C17683721A6FB88133D5C8469094EE7F0D0687ADD430BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5782d55c-40c4-43ad-88de-20d5e87a07c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5782d55c-40c4-43ad-88de-20d5e87a07c5.tmp
Size 37KB
SHA256 76740dfa1987879532af41c475f96d402aeb3fd8fe27dbb5f674dc4e1ad0278f
MD5 85805ff035390d1dfdbacbcfbbcbe074
SHA1 3468327e42b1fd572b652e11fadae6e80d4dac0f
SHA512 d48b4b32c4fe5aafa1c3af1924139a94a50d5a3121a05674db44bcc14e60cda6cdda0766d1aca0f39b6e8ef945c977ecd0fefceacd31119c79b61bb44c4e0b9a
SSDEEP 768:uFQO3GwgV7Pgm1rXLZJDmGA5b65Q92RQMPb7WTHM:FO3S/AF65dQER
TLSH
T15003BF739C90DEB7ACBE9AC1B6877216AFF88173D5C89290A5DD6E0D01875DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6109ea42-20dc-48da-903f-5bd8836f6a56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6109ea42-20dc-48da-903f-5bd8836f6a56.tmp
Size 35KB
SHA256 c787bc4e51bad4c7b18b6984ed8610809c42d0b66c0fa274af79c47e99434c85
MD5 ce78253ecaca02faac5f5c981e960da3
SHA1 f37c44f0dbf40d080b2fd4c085a79f7ad7ee6d74
SHA512 51f42d6fb4353ce97ccbf5f59dc806d916f52ebb312c27f006280ac3836b96d2538a12fc7d99e16a1e1de8907f1bfcd5eb7ea7c3ec7a513a86b44c24fc9a0192
SSDEEP 768:Sk3c7Pgm1rXLZL8DmGA5b65Q92RQMPb7WTHM:Sk3cfkAF65dQER
TLSH
T1CBF2BF72AC60DEB35CBA91817683725A7FB88133D1C8469094DE7B0D0687ADE430BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

508b02e0-8739-4929-8d49-9131182a2be0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\508b02e0-8739-4929-8d49-9131182a2be0.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69a030e5-c912-4e61-9925-ffc36f034a36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69a030e5-c912-4e61-9925-ffc36f034a36.tmp
Size 11KB
SHA256 77c591c5f41873aae903b60e7df6afa86c8b9c17a5f44623e83514e92da271f2
MD5 b4d4f7f18fbe327344cdca5be51b928c
SHA1 24efcf15e1a06c09add49feaf75a850a4c24c00a
SHA512 7368ea8089ef686c4e62b2926ab6e81891b5edf70722b333c267320fc0fa6809a6d540892f15d502d07d7a1f6700828272795d494b15312ab74965606b01efdc
SSDEEP 192:sxR9RNb1/fslsfyYhdzoA8p4//g6+WNIY28cuG0IgD6J:sxR9j1/fslsfbQm/5IP6y
TLSH
T12732C955AE24A93B4CCBD21DBB667F53E3FD1033A0951E48A6FC851C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

883bb47c-f233-4a23-abf7-d708fad84f5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\883bb47c-f233-4a23-abf7-d708fad84f5f.tmp
Size 11KB
SHA256 de247dc7f442da498e88e2f1e22097ea1ae8a2835b18415c9dc00de44962d1b0
MD5 2e825fc8ecf5db39f2a2b56b035f2d95
SHA1 36d317aefd1a52b17392931c97916f41f2f1cb43
SHA512 53747b0876c31d353161406373c4018eaf6e7c98114f9ce8a903eab8e851ff4c8ce0860c70626664aa4024c92693d388ce90fb75285677274c9b4733033e7d74
SSDEEP 192:sxR+RNb1/fslsSyYhdzoA8p4//g6+WNIY28cuG0IgIJ:sxR+j1/fslsSbQm/5IP6s
TLSH
T15532B7556E28A93B4CCBD21DBB667F53E6FD1033A0951E48E6FC861C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 09b0cb15038316c6c1c736c2abcbfb0842fe79004b6a830c27bfe954cc90c894
MD5 2f10341066cbc06c829656d84b8bd76b
SHA1 2bfb044b61e889f9c2f3c13a898064bc3834ad91
SHA512 18ca66e51fd1b38981e78daee7b769c5bba25d8625d766777b3673637082c6d9835083ddfbe18a3ad8e80dfbdf7e7c9c0c424a9f2589e3e19f596199d0f208c0
TLSH
T10E51AA81EEA40156F79F803948C6F0473FB4C6A1E3E35D6208BAD9FECBE73846901251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 66089707736e49e08794364560211a72bad85d20b7a7e29c1ff57017fc2f0afd
MD5 013da98059d6a45cda436fcf0975f6c5
SHA1 7c6bd822a0fd27bb97e873516da6de5fabe5e705
SHA512 a37f9ba18fb432c0976bc6c21a5950aba2a7c2f30f0094c53904d4fbadca5bedac69577cfec0cb49a72a1d366cd303ea51207bce2ef1aa069b7267ea064f783d
TLSH
T18C518881EEA40156F79F803988C6F0473FB4C6A1E3E35D6208BAD9FECBE73846900251
MD5 SHA1 SHA512 TLSH

Submit Download

718bdc4f-883b-4bba-9d04-fcf2e241dbb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\718bdc4f-883b-4bba-9d04-fcf2e241dbb0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3036a9a8-f28d-4a0d-ae27-2ec53b8f0383.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3036a9a8-f28d-4a0d-ae27-2ec53b8f0383.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

68856463-5c43-4e74-a77d-edbd226b0bd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\68856463-5c43-4e74-a77d-edbd226b0bd2.tmp
Size 3KB
SHA256 b7bf67a338f7535a47e4da39e888c9b440341e3392b662d799015429a2dca870
MD5 1c2b687294ad957d07060940b243be76
SHA1 2961a0fb281c8f4c4765ef0a18ac82582a67d0eb
SHA512 6cf65b5a969ce755ad3156d45f05304413dff9f49231eec3c317a3881305e67c26f95d4daf91acbd01251daef6bf971982c628c2713b8bed24b96cd8a680c060
TLSH
T1B561BFF3C3E8876E990156F4AB146E1ACE1D0919532D3C5688E4EF1FA3E24B1E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a1bcf1cd2e5e9caeba888805ca44613ac946e237b8182ee66624f1f3b477bd09
MD5 384916f2b96146e3cc5b3d04d8480771
SHA1 8146240859ee27c86da5f70ee83abd83be6cd631
SHA512 e218025b64d9e6432e0b0bd406ef7263360c91805badb66d10c50b10850ec4f94635c2fc729634dc9e6562341c02a5d47ee075c930db29c181537eb67051fa29
SSDEEP 48:K0XaDX5ZpCbBsxISnCK9n1NCxHSYE1XryLdcRtfLPwbD2jISlwK9l1Hwx1gYmnfQ:KEYAKdiCiKkK7K4BuKyUqh
TLSH
T16E912F9271A7825038FD694C44B5B71A025135B33719E56B7BB8506B8F6FE088CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b6ef9f43-fe4b-4fdf-a8af-68110f3806b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6ef9f43-fe4b-4fdf-a8af-68110f3806b2.tmp
Size 23KB
SHA256 afc00c29dd055700a5721b45f1c186c042c408d6a4ce79ca71857cfd64812267
MD5 816dc801205eeb6bb14fe66d4157494e
SHA1 58d98cae766551fd74ea7bfb6cdfa89d104375b9
SHA512 c32bdc9aa6f95d36734071eace7990fa54a912fc40bac0e32e53153852dac5ffbb0a53ef55c58c7aefbc2a818d237a16c9c5fb54de7a1d1ab109d310fe07f4e5
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWLroHrC:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0V5
TLSH
T100B2EA2F644CCB7E8FD00A9DAC596FD76E9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd67f65c-509a-47f0-9b7b-5e9f8b86053d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd67f65c-509a-47f0-9b7b-5e9f8b86053d.tmp
Size 11KB
SHA256 4cd5c923a159762c5cf975dd5a2e2ecce51b64265f655deb7caaf4982166ad17
MD5 95a8799286da8e05b28026292a42aa37
SHA1 8f9b8ce1facbce21f984117488f2fea00a30df3b
SHA512 b38d9e992a82be4ce00086950c16ab7c1a3e7bc023db7037474d94165e9e146a59dc3286e0474fb1c851e497fcc9f6d42e984552293d143667d6822b9ea506e4
SSDEEP 192:sxR9RNb1/fslshyYhdzoA8p4//g6+WNIY2gcuG0IgDgJ:sxR9j1/fslshbQm/5I76g
TLSH
T14B32C855AD28A93B4CCBD21DBB667F53E3FD5033A0951E48A6FC861C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d817e7e3-924c-4f05-9125-1fbc2df6581f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d817e7e3-924c-4f05-9125-1fbc2df6581f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ffcb0eca-e765-480e-bf25-98dc6bd7efb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ffcb0eca-e765-480e-bf25-98dc6bd7efb0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ab39bce-a581-41c0-9885-f0f58aaea288.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0ab39bce-a581-41c0-9885-f0f58aaea288.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1348bd3-296e-4c1d-837d-8f0452f29dd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1348bd3-296e-4c1d-837d-8f0452f29dd5.tmp
Size 39KB
SHA256 3f52355bd942f90dcd913228ca435151e24e24d99d64397e37e418c6dd4e0fad
MD5 2686c26e56911385442e2dfb06be1e30
SHA1 80b74ed3bdd156b70523f6f20111650e131a84a9
SHA512 2f0e8c37997c4684943585ee6ca0b5bd8aa069323a1d041f100abfd40132e70ef380c523c947e1154e9d294ad95b8ecb2606ee4aee9d8cac8aa0fa36c53d97f0
SSDEEP 768:U/UxvxjgC+B3cL6Ygm1rX9tDmGA5b65Q92RQMPbnFj0O:BZj3+B3kV3AF65dQgFQO
TLSH
T15703C036EC90AEB39CF99680374BB35AAFF84573C1C551E049E96E0D06C769C930785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download