034b5d6e09303e16eefde5d43f7ff40d36a26b11a7c2c6754faa9dc628651f91

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/corona light/screenshot_comparison.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 034b5d6e09303e16eefde5d43f7ff40d36a26b11a7c2c6754faa9dc628651f91
MD5 441a2da471a117515ad1143f142161cb
SHA1 a743dce4117088ed8a693bad44eb7a857ba767d1
SHA512 02ca9300e133db9c43541acb7acf700407839a7c0809d8ba29c6d14d8e0f1f685d4f54f712b25ff0e4ebe36852fb968053a2d7905d2e99ab886148b724e7a3e0
TLSH
T1605174B320135C19345F40BC77E2F28A8121A146E38AB9C4809BF7F79286E83F4A7D56
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{E21410E3-9A84-41CB-8F94-CF5EF0B5017C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3120	msedge.exe
3120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 2084	2324	msedge.exe	86
PID 2324 wrote to memory of 2096	2324	msedge.exe	87
PID 2324 wrote to memory of 3104	2324	msedge.exe	88
PID 2324 wrote to memory of 2096	2324	msedge.exe	87
PID 2324 wrote to memory of 2096	2324	msedge.exe	87
PID 2324 wrote to memory of 1140	2324	msedge.exe	89
PID 2324 wrote to memory of 1140	2324	msedge.exe	89
PID 2324 wrote to memory of 3048	2324	msedge.exe	90
PID 2324 wrote to memory of 3048	2324	msedge.exe	90
PID 2324 wrote to memory of 3048	2324	msedge.exe	90
PID 2324 wrote to memory of 3364	2324	msedge.exe	91
PID 2324 wrote to memory of 3364	2324	msedge.exe	91
PID 2324 wrote to memory of 3364	2324	msedge.exe	91
PID 2324 wrote to memory of 412	2324	msedge.exe	92
PID 2324 wrote to memory of 4012	2324	msedge.exe	93
PID 2324 wrote to memory of 412	2324	msedge.exe	92
PID 2324 wrote to memory of 412	2324	msedge.exe	92
PID 2324 wrote to memory of 4012	2324	msedge.exe	93
PID 2324 wrote to memory of 4012	2324	msedge.exe	93
PID 2324 wrote to memory of 1608	2324	msedge.exe	98
PID 2324 wrote to memory of 4936	2324	msedge.exe	99
PID 2324 wrote to memory of 1608	2324	msedge.exe	98
PID 2324 wrote to memory of 4936	2324	msedge.exe	99
PID 2324 wrote to memory of 1044	2324	msedge.exe	102
PID 2324 wrote to memory of 1908	2324	msedge.exe	118
PID 2324 wrote to memory of 744	2324	msedge.exe	119
PID 2324 wrote to memory of 2712	2324	msedge.exe	120
PID 2324 wrote to memory of 1784	2324	msedge.exe	123
PID 2324 wrote to memory of 1784	2324	msedge.exe	123
PID 2324 wrote to memory of 2248	2324	msedge.exe	124
PID 2324 wrote to memory of 2248	2324	msedge.exe	124
PID 2324 wrote to memory of 3120	2324	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\corona light\screenshot_comparison.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92168c188,0x7ff92168c194,0x7ff92168c1a0
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,15157735090001970848,9984407721385005062,262144 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,1982867627514696245,9363651376192499834,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,8125157140228218889,9362269788337249878,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,6934831594263023625,13718400155278634489,2097152 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,13046132352209360269,17487787770641172412,2097152 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,13145822768129471597,2876058123146561738,2097152 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,13202010389646133067,1186664376542588632,2097152 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9214605115335805023,5900650899858784104,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12402906656648317405,5375127533261571277,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,8936381304871351052,8961448585538797072,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,8936381304871351052,8961448585538797072,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,6418478858356671248,8893155805205242978,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,1256989116510061291,7709813749992254979,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,12882450238072833186,18333037777420853271,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,15634298345148865388,2464093689350759112,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5175181248165419263,16461494106927798364,524288 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,16162137049929527757,4100297325631364584,262144 --field-trial-handle=2296,i,11630230255012163221,11792224892384203081,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05e25798-f727-461d-b14a-8b10d3b40dbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05e25798-f727-461d-b14a-8b10d3b40dbe.tmp
Size 18KB
SHA256 48c72d572ce05024b22e5c44a1e4e790705c23bf873d9cf68dd0498b43ce46cc
MD5 f3f4e38663bbd12587102c1a4e9a25e6
SHA1 de4156159a2174174b399a406ab826e622222f7f
SHA512 d65148ebfe0eab29739882ae561cd74b230de29ceb5b3225e3f16097aba50c18dada6af7a0ce05382649d8862784884ef6720770da9e4ecf1ec0c22b19966288
SSDEEP 384:AZcIhsNXUPwVLksY5a/+WOjTV8/dwC3wJrQTMTE:+hmksitnYAhQTMTE
TLSH
T1D0828D326C381D7799E7A155F48B39138FF89067E7C52B54E1ED9B0D02AAAAC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39146594-9495-4ded-bd8b-bc271cf6ddb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39146594-9495-4ded-bd8b-bc271cf6ddb0.tmp
Size 21KB
SHA256 fe60a05315e10c6c437a66a7d019b43b8523231386b8e7e1da44a083214cf1d3
MD5 5167181e4e3cddbdcba006a426987eb3
SHA1 e845cc5a3b68ac9cd33458ec90a221cd759b28c0
SHA512 f787c368f14df23817ffe11d0bd1646055d93a9000627e36ab4ccdb527793917dad44be9f2d32d4df524255323773643019b31b326994719b5437f910cb59751
SSDEEP 384:SiFiZcI4zsNM8TUNTUlIlPwVLksY5a/+WOjTV8/dwC3wJrcTMTE:ZFQEpwgQksitnYAhcTMTE
TLSH
T1B3A26C335C68897BAEFBAA55F48B35138FF450B7DA856B50E2DC9A0D019B6EC1307C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cbb1ca9-7041-40f3-8b56-29b4356d235a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3cbb1ca9-7041-40f3-8b56-29b4356d235a.tmp
Size 18KB
SHA256 f2526b7bf32a528d77dc72da09ef84b44029c43777bd1c4816ece2acac9143fb
MD5 ec309003c5b4af257b25e98c0414ab3c
SHA1 11acf8f946eaaeae58e6b36267cebb43d047c36a
SHA512 f46f4658a1a59f2bcdfd28c388ff6635081a84b1fb26f5f1059a1faec96fd2e40f9c39f27fc7544eaf842ccdf5bb316c941967ebf3fe94e3e91125f56ecd8eb0
SSDEEP 384:SZcIhsNXUWwVLksY5a/+WOjTV8/dwC3wJrQTMTE:ghJksitnYAhQTMTE
TLSH
T148828D326C381D7799E7A155F48B39138FF89067EBC52B44E1DD9B0D02AAAA81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f34a05a-6812-467e-b730-2bb0814c291a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f34a05a-6812-467e-b730-2bb0814c291a.tmp
Size 8KB
SHA256 d0705a05cefc6b41f06c56be7c41edd7483a19ec84459f2dfa6abdb97cc22150
MD5 aa7e99b16614464db83f1d6b5371a626
SHA1 70a263796dfe55ee479d8866bb271a8c08bf2f67
SHA512 f5a95da453e1e6e14e052d36dd02424b4470cd29801d2a58fb17f455add6d5a42fd07bd93e09093360095519d5416134ff6712ee3d070c7fe6a870391f1977a9
SSDEEP 192:SONe6ygpQmiUygjtOCTVgj0+FdVmOzPqHU6:SONe6lHptOCTV8/dwAMU6
TLSH
T11F02E835AC782CBB9EF3AE45F48736135FE4116BDA962B90D5E81A1C01D766C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

0cdd82cc-d180-4c68-8c27-79b6d4db8704.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0cdd82cc-d180-4c68-8c27-79b6d4db8704.tmp
Size 9KB
SHA256 929976481572dcf8e36913fbe720e7492720c810b031e62dc9faa757665500ef
MD5 de873e872ea209dbf8c3effec19b0e56
SHA1 6ffff9ca7b308363d826706238f784f27dbb6108
SHA512 27cfb9d0092d6f5edef0d26a39bf6688844e64094a438f45ba20439ad49e31f52aa80642aee7b484f78407acd54df3419a275cd7329c69eaf38c10f1c7b92e46
SSDEEP 192:sxZGRUWf/fcsxbIdpd8HW6+WNGYRPRZ+bIg5sJ:sxZG1f/fcsxEWHbGmDQG
TLSH
T1CC22E8126E28A53B8CCBD21DBA65BF53D6F95032A1951E48EAFC861C05E76DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34148cc1-c06e-4e46-a9b9-17f6687f1852.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34148cc1-c06e-4e46-a9b9-17f6687f1852.tmp
Size 10KB
SHA256 682710bf6363f2c0a9964bd9c8740cbe3dded5896da3d612bfcfece55ccf2865
MD5 7c4c037d18e765ceafa97817c5aed53c
SHA1 fdfff5a8b5d5d5e8d978ac3e95dd3719545f2009
SHA512 f7a4becb5b97d1e59a22f79376a3d30d78a1e53f16248603780730f0a21091f34bd000f2b7d401541a2618dc71dad9e0845963b5444a808677e344e55ed07762
SSDEEP 192:sxZGRUWf/fcsxbIdpH8HW6+WNGYRPyZ+bIg5eJ:sxZG1f/fcsxEcHbGmUQE
TLSH
T16322F9526E28693B8CCBE21DFA55BF13E6F95032A0951E48EAFCC61C05E76DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

766dc953-2f79-4e8f-a951-a30130bc884d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\766dc953-2f79-4e8f-a951-a30130bc884d.tmp
Size 27KB
SHA256 debca99c25369b893a3691021e02ff7f34d02f2c761f22527f2265011efa505c
MD5 b38437dda21c937b007c447ff3526654
SHA1 e12cef895c7c375e8c7768537347962f4febf684
SHA512 1857743f30e804f0bcfe57ff9933c3a944c2d98c16b8d2985cd4dd2c53b6503cca080b3e6eb277e9a586e23441834dc794e38fb6c48d97577bc748b0a349610a
SSDEEP 768:brK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3YroK+iV:brK9uzYWvcQWsu1ja0HL7Q3jK+iV
TLSH
T18CC2F93F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 291B
SHA256 417ed9d2d10b003996a3ad1f4763aff6a09eb71132e4f734802f8447a828afb7
MD5 d9f1391b7e391acfd2d9e563823cfed7
SHA1 8fd02a66b962f6e7eda0703c956ba7c321b93b9f
SHA512 7a916b15fde987e47b816850b8e109c9c3d685ced7f795cf6b95020dc72e17114364f363e18698debab99a2425299d2fa91208c9b32cb386511b576ce08dc39f
TLSH
T102D0C29985C0C63F5314E8CB2238DB4D9684325B97C0BA4E1B08D948394B488E6E76A2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c408247b4b77a18022e31e759732530a4f1e8e90dbf1a7f3bd509a9bb1904cf3
MD5 5bf46e79b38deebb5ed63e01650442b5
SHA1 b9aa1a0bd5cb7ba1c33acd1d8f5278afc2037219
SHA512 14d9d7a13c4e306d3dc06133ece36d62ce80e68a71ce119f2d0dfba1692e465dc8255f91db32675312b65f4fc9c65dd70dd89fc8e01df0a249992ebce207def6
TLSH
T1E661738440610BE6FFA47935B6EA174F323E45A3D783AD9217ACE47768CB794B204C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8f1b0d0dfb142d828b6b251782b89292e707696664e2909b029a41caf6f92918
MD5 8484926a82b543f1ec508a2b003e3c05
SHA1 aff7289321734847ff7aba45a0333052dce6a688
SHA512 baa595b46d1a8054e98cd2789a6a910e71ab35562d8a8774f92af48baeb213663df6d15e0bbe68518c00efd1c31d27a2243332358977517d18d27719b0474de0
TLSH
T19761738440650BE6FFA47935B5EA134F323E85A3D783AD8617ACE47768CB794B204C1C
MD5 SHA1 SHA512 TLSH

Submit Download

a310d696-a47f-4162-bd6f-376d2293bff0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a310d696-a47f-4162-bd6f-376d2293bff0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

31e9c123-e303-498d-b6b9-ceb7709d0435.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\31e9c123-e303-498d-b6b9-ceb7709d0435.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

639581a2-0ab6-46e9-b211-14d182356a79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\639581a2-0ab6-46e9-b211-14d182356a79.tmp
Size 1KB
SHA256 080093f27abd890b287f22c1b8774a10b3d00019bb5bf0f61f120e35725a9b79
MD5 d3bd9b89535c0c731e6cce69c3d53791
SHA1 8b7a7ae87b9338e2fcb4b8f7293f92e0f17514e0
SHA512 c048c04af914033990ccc7fd21409cf44101f67f15e94816d592876f19369140a6b5bab8acf202edf09a950415aa924dc584bb10870df65c193d9350f744bda6
TLSH
T1E141CFF7C2D4876E881156F45A24AE1BCE1D051A42297C1A89E8FF1F63E25B0E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

7cd3f387-fa2b-4efe-831d-2aea0379861a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7cd3f387-fa2b-4efe-831d-2aea0379861a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 28c1203425ec09ec47d9b30d1b89d57d1405b49d991c14fc7ebb6623013564bb
MD5 eab577e941f15781990b3a7706812b4f
SHA1 300d8aaee47ef2b7c27fa6ebf3edb4e5c27c3aee
SHA512 03797249d292be7c7980c9aa24849bb9060ae7e29785bfd809aa10b99abecf94b7cd999fbb1b2caef79acf2b81d191830e8d9a7d2111e3ef71a64b62ba855ff1
TLSH
T14531ED81306B92D03CFDA55840B9965A126131BB311DE5EE3BB861760F7BF888DFE4C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 1865ae9eb8e432de6229a80719c5e77e20843d55eeddadf3cd84a8edfcfae1e2
MD5 1f53f4851e8726f2b382fd198a508bc8
SHA1 37178b688d6c4e36a7f9e33efaad0308388ff7a6
SHA512 e0650fc78128f252c52322addc75fd3a627d7df2da47a97da01353c3b77d0957d1bb33e28e088ff2f8f64ebed1fcb0213b907e934061641415f690464a8dd93f
TLSH
T1C331CE81306B91D03CFDA55840B9965A126131BB311DE5EE3BBC61660F7BF888DFE4C9
MD5 SHA1 SHA512 TLSH

Submit Download

a6175a62-5c51-4a1f-b635-eeb4a9a52190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6175a62-5c51-4a1f-b635-eeb4a9a52190.tmp
Size 9KB
SHA256 7821f5ab17fcbb91ecef53e3a90ff2009735e678f65012013a097596ed63d46c
MD5 a08404c31e80c729dfa9a156af230cb2
SHA1 b50f151f63aa5c840b2adb39b98ad881c1da4b0a
SHA512 50e4ba9b2f6e4e0048c075b0b9c7061147563cb15603f2af6bdb634eeceedccbd77f7c05165b975cddf3b2a7f016018f108fbd4883ac89394c7e92f2006eba3e
SSDEEP 192:sxZGRUWf/fcshbIdpd8HW6+WNGYRPRZ+bIgrJ:sxZG1f/fcshEWHbGmDQ9
TLSH
T14712E8126E28A53B8CCBD21DBA65BF53E6F95032A1D51E48EAFC861C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a73aeee5-3375-4c99-8515-dbfe0a85ca59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a73aeee5-3375-4c99-8515-dbfe0a85ca59.tmp
Size 10KB
SHA256 a0d7d1b0acd784193803c2cd39835b31278355d713ab4498d02c8357a535628a
MD5 c174bde2d1a9ccddba73345ecd855638
SHA1 3ec33c3360c6a8b584d899ef06b9aed1ce003627
SHA512 7bd32009902b8d2f921c4c049aebf89733509d90e3bf235eecf1238835e543cd5309e518b7181ec38c8607596568c0eda2527ae558d94fcf1c0ff8f61629bce9
SSDEEP 192:sxZGRUWf/fcsxbIdpd8HW6+WNGYRPBZ+bIg5eJ:sxZG1f/fcsxEWHbGmTQE
TLSH
T11E22F9126E28697B8CCBE21DFA55BF53E6F95032A0951E48EAFCC61C05E76DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5fe84ad-2bd9-483a-a0d3-bf2b0c908524.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5fe84ad-2bd9-483a-a0d3-bf2b0c908524.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f551088-dea2-49e3-8b96-d9da6c9d0799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5f551088-dea2-49e3-8b96-d9da6c9d0799.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1ede318-5c14-4541-814d-2f6d540a1325.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1ede318-5c14-4541-814d-2f6d540a1325.tmp
Size 8KB
SHA256 83dce5120c9bc636094078fb833873e2bf71d3bc1f33589c6bd359b1dd416773
MD5 142d332262db1f57fbfbacb59079cd59
SHA1 ec640d22d6c043b7d188da18a2f096dacd4e40ee
SHA512 805d1b837fb8f514e071185258c915aed04fbc4b01703edbf9bfdc5f8d71d0195af9f97e3ed57a5afb1da678c4b72faee2660c5469a53aba038031cc029897b1
SSDEEP 192:SON16yqQmiUy/BjCOCTVgj0+FdVmCggFJSJr/3UIqy+U6:SON16V8NCOCTV8/dwC3wJrMTU6
TLSH
T17212FA32A8686C7B9DE3A545F08735139FA45167EA8A3F90E1EC1E0C01DBAAC2347C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40fbdab0-c6a8-496a-8c40-1479617e4039.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\40fbdab0-c6a8-496a-8c40-1479617e4039.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d215dab3795e703998c8c52d298116a1fbb472d81317fd8d8707a2891b85a0f5
MD5 7ad19cd18090b4defbc3eab9f0aee434
SHA1 e78a53e85d340aae1a689af4ad898afca9fd1b67
SHA512 ffd5da919b3bfea4aa24d505162abe3f39bf46d0e2d51e6d8956a6cfa708e8f287f47dd395b03adf83362d812f3c86eee7dbb9184eea29c46df38f9939877fbb
TLSH
T198411758B6ED2148B3B76F5AABF7A46D447EBD372E06D09D10010E4F4A62B40C871B33
MD5 SHA1 SHA512 TLSH

Submit Download