38cc63100516a57363375ec0d777d3e46cad05b25766410bee5baa817e54a8fc

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/chromatic aberration removed/screenshot_comparison.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 38cc63100516a57363375ec0d777d3e46cad05b25766410bee5baa817e54a8fc
MD5 10875530dbbc5c28239aa4a04ed4c46d
SHA1 e19d95c70b2c475a7cc00ba4662489f19a79eb24
SHA512 76dafb0fecec0af9ed9df6499d83f6407ec3f88d08cc2de9e049320e7caf9e962f0684a915df29f609a3f38a3413a4c66f65191d4e52cbf51f0e86fca8d69a2d
TLSH
T1444177B330035C29309F417C77A5F24291A2A140E74A7944819FF7FB92C5E82F4A7952
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4936	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{621604D7-5B32-4174-BD7D-0D5CE28D6BA2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 4632	2244	msedge.exe	87
PID 2244 wrote to memory of 4936	2244	msedge.exe	88
PID 2244 wrote to memory of 4720	2244	msedge.exe	89
PID 2244 wrote to memory of 4720	2244	msedge.exe	89
PID 2244 wrote to memory of 4720	2244	msedge.exe	89
PID 2244 wrote to memory of 4340	2244	msedge.exe	91
PID 2244 wrote to memory of 4340	2244	msedge.exe	91
PID 2244 wrote to memory of 1288	2244	msedge.exe	92
PID 2244 wrote to memory of 1288	2244	msedge.exe	92
PID 2244 wrote to memory of 1288	2244	msedge.exe	92
PID 2244 wrote to memory of 792	2244	msedge.exe	93
PID 2244 wrote to memory of 792	2244	msedge.exe	93
PID 2244 wrote to memory of 792	2244	msedge.exe	93
PID 2244 wrote to memory of 916	2244	msedge.exe	94
PID 2244 wrote to memory of 916	2244	msedge.exe	94
PID 2244 wrote to memory of 916	2244	msedge.exe	94
PID 2244 wrote to memory of 3992	2244	msedge.exe	95
PID 2244 wrote to memory of 3992	2244	msedge.exe	95
PID 2244 wrote to memory of 3992	2244	msedge.exe	95
PID 2244 wrote to memory of 4308	2244	msedge.exe	98
PID 2244 wrote to memory of 1624	2244	msedge.exe	99
PID 2244 wrote to memory of 4308	2244	msedge.exe	98
PID 2244 wrote to memory of 1624	2244	msedge.exe	99
PID 2244 wrote to memory of 4048	2244	msedge.exe	102
PID 2244 wrote to memory of 4196	2244	msedge.exe	111
PID 2244 wrote to memory of 3920	2244	msedge.exe	112
PID 2244 wrote to memory of 3352	2244	msedge.exe	113
PID 2244 wrote to memory of 1624	2244	msedge.exe	122
PID 2244 wrote to memory of 1624	2244	msedge.exe	122
PID 2244 wrote to memory of 2180	2244	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\chromatic aberration removed\screenshot_comparison.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff1e1cc188,0x7fff1e1cc194,0x7fff1e1cc1a0
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,4956908272644295030,5827127338756541827,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,981313225586571510,15992880835221741330,262144 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,13351130130827982650,4244614851457807566,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10169828394283894651,1405612926911362584,2097152 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,15981506125974495222,2181875432187444927,2097152 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,9273516827968717858,18417096576387635048,2097152 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,1411534008216788580,1255702626366993726,2097152 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14057911033906862673,979980231464394713,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2860078250096837456,16844872668747450704,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,11451479709994303634,352253036901335228,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,11451479709994303634,352253036901335228,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,31171166546233358,8741847444492080801,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,363371800049360858,15319142663493234308,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,10007839260992455894,2844259246890910500,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,17774799126204640540,12066277914223143072,524288 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6268,i,2277674050743614884,5638498078745349758,262144 --field-trial-handle=2252,i,489056867059319645,3127647585570046127,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e064eb0-cf48-4bca-af01-778c89ae2794.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e064eb0-cf48-4bca-af01-778c89ae2794.tmp
Size 18KB
SHA256 b8fc22690a876e708af0210bf9313d7c7296506eb9dd4a31b566bfea9cfbf195
MD5 1989481c66ec477ba78ed556bd17a2f6
SHA1 a3cf1d16a5099ad293708fd06d9515c4ef36ac6a
SHA512 96e0960856e93cdf108df184012aa66183780e507493d36119a21ff78bac1a4fd03329ee340de6c4f15cec06490ba56ad4b9ffa805e377189b7f12e767057e86
SSDEEP 192:ugzm+xasuheOwQxMGsNBZQNStphvFkEqQmiU1xaoX4BGYX59ezbCMmI9TDrhkH1u:GZcIhsNBZR5Nmr7IBGYX5ECm9TDmsMT+
TLSH
T1B3827C71AC78AC7B5DE7A155F88B3A134FF88127A7C42F84D1DD671D01DA298230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3497133a-f915-4d65-974f-4cbea5c30c9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3497133a-f915-4d65-974f-4cbea5c30c9f.tmp
Size 18KB
SHA256 c596bb30b58ccef4e26f46373585ae99842217e558dd2ca165acc4d05052d5e8
MD5 0bad0e5b7ce2bfa390329da432961a8a
SHA1 f323d860b6da265efd95ee678a1cf168df764e88
SHA512 427ce2e3a476285eb7403d8230c35dc352f6b6d46d6e46fc75e25b05f4e5f769fc49348128add20ad7b363bf97e5f1d6ee4e0b5cbf5b0e4e9e67f770fa1741cd
SSDEEP 192:uszm+xasuheOwQxMGsNBOQNStphvFkEqQmiU1xaoX4BGYX59ezbCMmI9TDrhkH1u:2ZcIhsNBOR5Nmr7IBGYX5ECm9TDmsMT+
TLSH
T131827C71AC78AC7B5DE7A155F88B3A134FF88127A7C82F84D1DD5B1D01DA298230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

74633cdf-bb0c-4de2-95f2-b7727b9c98d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74633cdf-bb0c-4de2-95f2-b7727b9c98d1.tmp
Size 27KB
SHA256 912ec3f2e2565be550755d0dc9871b4a8f93f1fa455a89d9fe8a5744f4ebeeab
MD5 e05f4f04a5b6295517e7d87dcd968a0a
SHA1 ed12626de09e2e0a6ace29bfbdad638a5ac75848
SHA512 242927649a15d8afdb1498946c4a96261a5c17d0b1c8953e7cc88b1381caa2c3ca6ce9c173d16839f9584276c929e1617fe22a43e549460dae6c0a74054363f8
SSDEEP 768:boichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzIroA/n:boichfPWvPZplu1jan+LKgzzCn
TLSH
T1A3C2FA3B640CCB7E4FC01A9DDD1A6F9B7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

822c27f9-3cf2-4091-9c2d-b6f1776b32f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\822c27f9-3cf2-4091-9c2d-b6f1776b32f3.tmp
Size 9KB
SHA256 8305daebf8bf97c9f2930d7fb8cb09647e895d740ce1dc0bbe540e7ce0377087
MD5 f7f833d7667d821b8e6b5617c4b97d23
SHA1 4c00b162b44ecc9b7a128540c434ec5921ad9a31
SHA512 e8083cf0ec0e908a91828a0374ef08d0cb822b3109ba0903297b68a98bdd9cb91a9891e0591afb2e3c42a16e7cdc86cd9e9a1bba20c83e39a30a2f739b3eb122
SSDEEP 192:sxZ8RGWl/fKs9kwIdpdJHW6+WNGYgUOjIg50J:sxZ8vl/fKs9kR/HbG/+
TLSH
T1D222D7126E28697B8CCBD21DBB55BF53D6F9503261D50E88EAFC861C05EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85d87034-ba00-4a24-be15-e1a820150315.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85d87034-ba00-4a24-be15-e1a820150315.tmp
Size 10KB
SHA256 8a5f3f709289e6f7f6df6414acab678ef7ea14cb5b328b2b15354a9e6b949cd9
MD5 503da563dfba5e9b897175914354148b
SHA1 2551c0a6adaf831a47027563686358f8e03d529f
SHA512 77ce6450bd8b12191e8515138effcbb5f00968c919e5675a5e195e786fdcdcf2658f92a70606720b9e29ab59de1e1f2c7f3822cbb243ec9cf3b30a0b9ba11eec
SSDEEP 192:sxZ8RGWl/fKs9kwIdpHJHW6+WNGYgEOjIg5WJ:sxZ8vl/fKs9kRpHbG3s
TLSH
T10622D7126E28697B8CDBE21DBB55BF13E6F9503261950E48EAFCC61C05EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b97e626-be50-42b5-95e5-110f36e676af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b97e626-be50-42b5-95e5-110f36e676af.tmp
Size 9KB
SHA256 9e3a0029f28f990b330b5c7eb12ce5c954c0986f3ddbf90d42ee15517eec314a
MD5 46e706fdd85023c61581fcabf51547f6
SHA1 a37d6900b3d23a8accf29621f91dfe42c7d32b77
SHA512 f13190cdea5f3b45ef9382cbe4a9f0a1a6012da3fa8185790d43e5b14d825d14f545f1c5086d81d425b2f73b714badb191e75e0fc79a53a5af67a617e0561b47
SSDEEP 192:sxZ8RGWl/fKsLwIdpdJHW6+WNGYgUOjIgrJ:sxZ8vl/fKsLR/HbG/9
TLSH
T1B212D7126E28A57B8CCBE21DBB55BF13D6F9103261D50E88EAFC861C05EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 747e036f9079fddf336c0a4541bc1548aa90f9c2a516c7c4e2b04427f0096e53
MD5 a12b74dc098c4928cb8af5e7fbb7d995
SHA1 8a596c01d470b8f13c4ef773a1f06c4e10cc2a33
SHA512 5f33bdfef6c018f83b4ceca473c643775e3f258fcf9753cb4bcf94beda2b3bee84560ea5f036b8841d38cec731a49dff64c050e921768365ca72d4ea25e581d6
TLSH
T16261C6CC454180AFFF9480789DDD70CB3B365D827A4F1DF38198D4B6A886BD4C38A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 09044d79916612176d1f7b47059616ad15a478b173975255f29e6b137e011012
MD5 cb79af938ef370d8a712838875d1200b
SHA1 013bcd921b76bc2ecd091341c7922640b4c33048
SHA512 e808be064c748cf31daa425267e963736bd2819b907457fb681edee2661abc1f332e845d30222fbc27ddf3841522550ed04312711e0589ee58e675320b4852af
TLSH
T1A861B5CC454180AFFF9480789DDDB0CB37365D86BA4B0DF38098D4B6A886BD4C28A890
MD5 SHA1 SHA512 TLSH

Submit Download

87f07668-e6a1-49bd-bc86-f4599b865841.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\87f07668-e6a1-49bd-bc86-f4599b865841.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

bb47ecd8-28e7-49b9-8120-1870c206494f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb47ecd8-28e7-49b9-8120-1870c206494f.tmp
Size 1KB
SHA256 5bee6a41a92695ec8af8e0b3978faeeb6b7b4e07f9b1cad80b84592c19f27d56
MD5 8c3d9ef135379809e63f97b755203cff
SHA1 ff014321b637cd0dbc72d76183c4356ba576de68
SHA512 c480a621342d73872d2aef0bf460c1b80b38d104e2b9e1553263681c74c2226ccea046d00c91029f7f04ceee90c0cf660257517cdde3f87230c0ff783f3bc5d1
TLSH
T12F41CFB7C2D5876E880556F45A246E2ACE1D050A43293C5A89E8FF5F63E24B1E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

cfbb2966-3581-4cc3-8cff-1c36b000bb4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cfbb2966-3581-4cc3-8cff-1c36b000bb4a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fec009fb-e5c2-4286-b768-9daa56bd97e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fec009fb-e5c2-4286-b768-9daa56bd97e0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d592c00f-ce61-4815-b33a-13542118fc38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d592c00f-ce61-4815-b33a-13542118fc38.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7f3751e-3108-45f4-8e2a-9a5e439593a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7f3751e-3108-45f4-8e2a-9a5e439593a0.tmp
Size 10KB
SHA256 5b22e78a7a857eccad56ded0855c65d57d11bdc20eb28d2f810269e41a134986
MD5 9f9562b80bbb691586552bed566ce4e8
SHA1 0a5f0246f76b28ee75c7e0e95fc3d3d3f64907c7
SHA512 e4640fd0b37931136ab476b21aa0fbfd98b67436d2aa71f09779aafc37feddacd0d7bbe0870c9cc558195d56dc872189d909f547dc0a4137236df0124845ee2f
SSDEEP 192:sxZ8RGWl/fKs9kwIdpdJHW6+WNGYgsOjIg5WJ:sxZ8vl/fKs9kR/HbG7s
TLSH
T1DB22D7126E28697B8CDBE21DBB55BF13E6F9503261950E48EAFCC61C05EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fdb9868a-1322-41f5-ba92-76072c0a7b2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fdb9868a-1322-41f5-ba92-76072c0a7b2d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6d6dfec-319f-4ca3-bdbc-d20137016f73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6d6dfec-319f-4ca3-bdbc-d20137016f73.tmp
Size 8KB
SHA256 d01febcce6fcde595f5439b43ce965df70705af746e182307b9fd0aaa3b28978
MD5 a2ef46431fcd1798077359bba6533a24
SHA1 5e06a6e2ec1755cb6ca09e7691782b69ec54830d
SHA512 2436a162fd3aabc0af5a29052f66bce8924793d06663e3319f7d187474e665f4f24d0b5599ed3aad62508c2a8bf4e76ce43d1aa9b419c845890fd812021bc690
SSDEEP 192:LJONk6DphmqQmiUy3aq8wGYX59ezbCMmIXkk7QUU6:lONk619JRwGYX5ECm/ZU6
TLSH
T1CA02E935A8787C7B4EF3AE45F48B2B175FD8112BAA906F84D6E81A1D01C769C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e417692a-9b0f-4a8d-8c62-104f9925ced0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e417692a-9b0f-4a8d-8c62-104f9925ced0.tmp
Size 21KB
SHA256 1af43dda4c7e0cbeebb963470a26f7476707fcda45597010405d86db2559a731
MD5 209569fb732a599f3f50b4e34688eb0e
SHA1 33c997dbfce2f1bb5d8ce9d9ec2245e196f7342e
SHA512 0a871a85608f0b04d5e41697d9d669147ea6ca029665f2ec38b6cc87c9fbbf3db1fb750ce6d5e3b1c02f21c04ac9c9fbcc8f3d7942d5deed899f2f7767c8c4e9
SSDEEP 384:jiFiZcIDzsNT8TUNTUlIlOR5Nmr7IBGYX5ECm9TDmsMT+:OFQH6wg+YyGYuCwHmsMT+
TLSH
T100A27C729C74D87BADEB9A45F84A36038FF88127DAC5AB94E2CD5A1D01DB1DC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4a5569c-ec38-4e05-bb7b-831d9e81fd8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e4a5569c-ec38-4e05-bb7b-831d9e81fd8e.tmp
Size 8KB
SHA256 94bea991b054cc43852fecf523d3706a24145d0094dd39c7eeb1a14a3e93d0b2
MD5 985f11cfd662fea4430e3fedea95de73
SHA1 c8bdae6531dbb3979c4d25dcc57da8e64f271c1c
SHA512 b8f9fea7c105bfad14cdc6b608b60ef58c0d3a8ec97d583d40952566a3acf1715daaa4ef85e0b867c592266ab75fadd1017347350013ed5edb5a836f998c1141
SSDEEP 192:LJONk6Dph+qQmiUyDza4wGYX59ezbCMmI9TDrTkIIxq5TU6:lONk615o+4wGYX5ECm9TDQsU6
TLSH
T1D612F935A8B8BC3B5DE3A491F48739134FA8522BEB857F84D5DC1A1C01DF29C230A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e9561c9-cd6b-4fdf-8908-3d0ae462f392.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1e9561c9-cd6b-4fdf-8908-3d0ae462f392.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f68582b93c2d17f075d44344a8f0caac5737a18d4b6b007552cab3c07c058d86
MD5 5b5260b1f56dbe501403cec79964274e
SHA1 f929f781b9e1afc32bdd57b3bb2a3422ed9cc1d8
SHA512 84c80ca3412306acfae48cef8c9e899fa14b8a183b8e9c19c810711889baf27f8ee4d2746a255c6a08b56408751f0118b2125c5e0b885f6ed6d5e749976f4ce8
TLSH
T17141164CBAE91108B3B77F46AFF6A86D447EB8372F07945D00010D4F0626B01C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download