31cceb9bab6a3b063a27064b6f2fed8d818e02f6fe7e7a34303f1a4ad6732a32

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/corona light/screenshot_comparison_thin-rays.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 31cceb9bab6a3b063a27064b6f2fed8d818e02f6fe7e7a34303f1a4ad6732a32
MD5 169b41e351e27133fc1f3283e3392786
SHA1 0fb50d843d113fdd3f6e25a10a2c964b1b778a96
SHA512 5f45d1d2ad0b273d46aa93b2dd75e1779acda57fc391ae5df04dfeeb988160fb9bf84fd25699aae458ddf72e0c527d0ee1aee9c9be389659604a7eb31172a33e
TLSH
T17141857320B35C19306F85BE27D5E28690556185E38AA984B0AFB7F7D281DD3E8E3C49
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
712	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{AD631519-6E6C-4719-B75A-6E5CAB76525F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe
4196	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4196 wrote to memory of 4608	4196	msedge.exe	89
PID 4196 wrote to memory of 3728	4196	msedge.exe	90
PID 4196 wrote to memory of 712	4196	msedge.exe	91
PID 4196 wrote to memory of 3728	4196	msedge.exe	90
PID 4196 wrote to memory of 3728	4196	msedge.exe	90
PID 4196 wrote to memory of 3396	4196	msedge.exe	93
PID 4196 wrote to memory of 3396	4196	msedge.exe	93
PID 4196 wrote to memory of 1628	4196	msedge.exe	94
PID 4196 wrote to memory of 1412	4196	msedge.exe	95
PID 4196 wrote to memory of 1628	4196	msedge.exe	94
PID 4196 wrote to memory of 1628	4196	msedge.exe	94
PID 4196 wrote to memory of 1412	4196	msedge.exe	95
PID 4196 wrote to memory of 1412	4196	msedge.exe	95
PID 4196 wrote to memory of 4656	4196	msedge.exe	96
PID 4196 wrote to memory of 4656	4196	msedge.exe	96
PID 4196 wrote to memory of 4656	4196	msedge.exe	96
PID 4196 wrote to memory of 3756	4196	msedge.exe	97
PID 4196 wrote to memory of 3756	4196	msedge.exe	97
PID 4196 wrote to memory of 3756	4196	msedge.exe	97
PID 4196 wrote to memory of 4784	4196	msedge.exe	99
PID 4196 wrote to memory of 4784	4196	msedge.exe	99
PID 4196 wrote to memory of 4584	4196	msedge.exe	100
PID 4196 wrote to memory of 4584	4196	msedge.exe	100
PID 4196 wrote to memory of 5232	4196	msedge.exe	102
PID 4196 wrote to memory of 4360	4196	msedge.exe	106
PID 4196 wrote to memory of 3992	4196	msedge.exe	107
PID 4196 wrote to memory of 1484	4196	msedge.exe	108
PID 4196 wrote to memory of 5740	4196	msedge.exe	109
PID 4196 wrote to memory of 5740	4196	msedge.exe	109
PID 4196 wrote to memory of 3256	4196	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\corona light\screenshot_comparison_thin-rays.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffa184fc188,0x7ffa184fc194,0x7ffa184fc1a0
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,10004146934513060911,14612433876909041743,262144 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,8613304709996732751,1782115606051265829,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:11
  2⤵
  - System Time Discovery
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,18396798324547904890,8773308304138463931,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,17215416594163638179,3716679073611174823,2097152 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,11290617300891777899,8998409597590739924,2097152 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,2613875597251322208,2443452614937756448,2097152 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,6061856503859769173,11109550383718872650,2097152 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:9
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,6547655232107731568,7365533888815993432,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,5944803898796130735,12723174920182692028,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,427082768867022504,13663494753447917243,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,427082768867022504,13663494753447917243,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,6533357698297883763,5238090855823986958,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,4047634665211945314,421520599359144198,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,5744574568358873749,4314882104121765601,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,15835961946010254433,644899623081504803,524288 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5700,i,4306613316124969593,12870615606328319876,262144 --field-trial-handle=2292,i,3508788778178196550,4034089226299625036,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0e9690a4-a367-4fd6-9409-a56e2414ca0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e9690a4-a367-4fd6-9409-a56e2414ca0e.tmp
Size 37KB
SHA256 ffa1b438a18543cd8cd03b36b80ecf078e6cb63cde34c51cc324bcfe4d791a6c
MD5 315bfdde4db1f01aca0948456a6d1af1
SHA1 8a397ee9833436667f3aa37ce9c154e1448f3bd2
SHA512 9af5d3dc5ded81441ee9b58f54c03cea2062f5d095f5df53724ea03307263b719c06eb0eb583fab3f21c3c679488a75fb6a858daeb7a8bb15e1069bcce6158b2
SSDEEP 768:z/UxvxjgC+k34OSybNbFmt0OeRFZD1fTos7RzJl/+Pu:GZj3+k34npY1fT/RXKu
TLSH
T15A03BF3AF8D45C338CF7E244724A764BBFF455B386C91A9809ED6E0E058B7AC1307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92a2da26-c7e2-44da-9575-0c912d1eaab0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92a2da26-c7e2-44da-9575-0c912d1eaab0.tmp
Size 33KB
SHA256 defb701ec431fbf454386746062e2e9621c9de85fd13e9c062279f2b27ea9c25
MD5 98c983f9b6bdb6ac2a96593c51193924
SHA1 7540e3f0a5cfe88ad87453d0387ca52289e0c2d7
SHA512 760e13504906a128e58357429fc8c9716af51905afb344857658207ed15a54f026488d781b4af70fafd660681747f05a58e6a85345d7336eac5c5925aac4944f
SSDEEP 768:Un3lRgybNbFmtoOeRFZD1fTos7RjHxTnM:Un3lidY1fT/RLq
TLSH
T162F2AE35BCA08D374CE6E295F14A3A06BFF495639AC91A8865DC9F0F049BBAD1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99fd3abe-0183-4fa2-809b-98ae82cf3373.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99fd3abe-0183-4fa2-809b-98ae82cf3373.tmp
Size 36KB
SHA256 fdefba89e0729fae14ccce0f5566f5fa923d985273d6aa8c89e0b0a3ed47ec34
MD5 b870ea1bc332130ad2da782a6206feff
SHA1 4c234946466ed7309f672ddd79ba0312c299bd89
SHA512 09ef66cc2faeb61fef3dc48fe355c5619fe24d3e4b7a13f28d5056e0eafa6c0791ffcb7ac405259fb62cee53f14fc41ad05aec56568df4216ab1a3d2fc4c870d
SSDEEP 768:yFQ73CwgGRgybNbFmt8OeRFZD1fTos7RjHxTnM:J73/iVY1fT/RLq
TLSH
T1DEF2BF36AC90C9378DFAE795F14A3606AFF491B3C9D95684A6DC9E0F009BAEC1307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

23fe98dd-aa31-4c3f-9d4e-c68805948efc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23fe98dd-aa31-4c3f-9d4e-c68805948efc.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bbcf1ba-ee9e-41ee-ae1f-e93bc2bf5551.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3bbcf1ba-ee9e-41ee-ae1f-e93bc2bf5551.tmp
Size 11KB
SHA256 0d75341cc76f9a96c6103e54fd9aade0f7b6726479239a4dbc96bd15218fb5d3
MD5 a406546a4895a530bcc4db165f83b795
SHA1 ea4fd5c7b3aacbfa29bddd7dac4f53a6c46002f1
SHA512 586fdc05103605e35885e9179e810195839f7eb73765438e804efae302013425f41af059e2e349c4d9564af1551f4209d8183f95c21f0a6d7a1f6ac7b1d0426d
SSDEEP 192:sxRCRGbZ/fZsVK7xNjzoA8p47/g6+WNIYDFYGIIgIJ:sxRCeZ/fZsV6ym/5Its
TLSH
T15E32B8155D28693B4CDBE21DBB66BF53D2FD103260951E48E6FC861C05E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

712f1053-4998-4bf6-8d7c-09046f2b2f3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\712f1053-4998-4bf6-8d7c-09046f2b2f3f.tmp
Size 11KB
SHA256 58712a01c4db00292e1a6888d83ef3d4749944b807f0dd9236895bb0f243cc98
MD5 1d7b7a2eea7bf527335f1652c0156b26
SHA1 713b664abbea467d278ffd59e5fc9669336bb15a
SHA512 3db1a3ff9a6506a34949e2da290003f99b2c4c16b7e30337949d33dada7cdf51803d6d40934702f5a2190e2f5c8633d112cc72b3778df135a6fe329a7fe410db
SSDEEP 192:sxRlRGbZ/fZshK7xNjzoA8p47/g6+WNIYDFYGIIgD5J:sxRleZ/fZsh6ym/5ItX
TLSH
T1E832C815AD28693B8CDBE21DBB56BF53D2FD1032A0951F48A6FC861C05EB6DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7732ce4e-47d1-4786-82b3-89567d9a8fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7732ce4e-47d1-4786-82b3-89567d9a8fc4.tmp
Size 11KB
SHA256 8dd912eda22d31b4c519aa4ac015609b1bb00be50e7872dd245dc25ba7213d79
MD5 c16f96fbee863b1c894cf0fd01bb696f
SHA1 09da36755b58083b8133740ef491330a5ebe3763
SHA512 5c9ec310c7676f6697c45b81bf6607e537a6ad3f1c06f090d483ee4312aeaaf7d2abe7ead728432e6aaa8756f137b753436ed9d38aee5d60da263db36577b16b
SSDEEP 192:sxRlRGbZ/fZsgK7xNjzoA8p47/g6+WNIYDPYGIIgDfJ:sxRleZ/fZsg6ym/5I9V
TLSH
T19732C815AD28693B8CDBE21DBB56BF13D2FD103260951F48A6FC861C15EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89b8b119-a062-45e3-baff-8a0947dfc3c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89b8b119-a062-45e3-baff-8a0947dfc3c7.tmp
Size 23KB
SHA256 3372b33cc322faf5264089d64608ba68fed34e777817b52e40ea653118392c94
MD5 4aa9890bd7c91ef64d1dc3ad29af69a1
SHA1 0afe4d44a2a9f3deebbd29d63c794b168fae7ddb
SHA512 1cb21c6db66140605668c886dda644fc6e63822702ff337c10ba8205ee7cce077de4783f473a7b74f5ba5743cd48bb9ce795c1093373a37d024c10a49a2ec49c
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9ZroTym:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VR
TLSH
T129B2DA2B640CC77E4F804AADAC1A6F977D5802C796988D4047FE995C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 1bfaa33141472eea484db16a3cc2f7064a1fb6bde11bb48dbb6dd52ea007a748
MD5 a10222c44a3d929ba378ef725da41fa1
SHA1 c0b9dbc3889ff99796012aa05076d61c5eb756e6
SHA512 3e33500b8f3c435431403af1c1fd731da09f9bef7b1284195aa436e83041fc762ade104e2dede62c5a295cbb99bf41f8a8f16b44929bf8c20ea48ff1b2abd0ac
TLSH
T1CD51ED40E0458056F7E80B3071D938ABF6353DBDA683AD122858C5F58E5E77A9E363F4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8d6dce31acfa6fb22834b79730b1f8d1635a4802aa2a0a0558d678224857f95b
MD5 2d2606c22325000421cf90979d23a388
SHA1 09d35e8411e1febf27bacbdd068462357a385e84
SHA512 7d64b99e5b062ee186be8844c77c933bb9bc0fcada87ebc49c77d30539dde30954c1a800ea383a28d9d80818622f1737dea19d5eddf692ed6eb78487c788315f
TLSH
T16151DB40E0458065F7E80B30B1D938ABF6353DBDA683AD122858C5F58E5E77A9E353F4
MD5 SHA1 SHA512 TLSH

Submit Download

8b3064ea-d5a8-4944-8370-23bcfdcff71f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8b3064ea-d5a8-4944-8370-23bcfdcff71f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

026457bb-6074-4f59-9e31-70b6358c73d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\026457bb-6074-4f59-9e31-70b6358c73d1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

3ff3ee58-12ed-4027-9d57-c439038dc411.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ff3ee58-12ed-4027-9d57-c439038dc411.tmp
Size 3KB
SHA256 55247e2fe921d03a9702a0e5b39db1c3ddf5c52fbaa1201e2616ff3f317ced5c
MD5 77facc4f0d78d17cde391d5ac20eb0ff
SHA1 9be0cbc645f0592cbd34c493389cdab649050583
SHA512 72fe04996f63e12608be92e6ee55767f4bfa20cf3d1782e587dd8fdf1d143551029ded6d65ca908954c1f21de07471de66fe25e4a310a5ccfd277b4b85ab1db1
TLSH
T10961CFF7C3E8872EC90156F4AB246E2ACE1C0955432C3C1AC8E4EE1F63E24B1E24159F
MD5 SHA1 SHA512 TLSH

Submit Download

f1febd1d-41b3-473a-9718-29aa2dbcfe04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1febd1d-41b3-473a-9718-29aa2dbcfe04.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

378bbd63-fd62-49f2-b693-074df1f7b997.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\378bbd63-fd62-49f2-b693-074df1f7b997.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c19cf44c-10bf-4ae4-aadd-545cb3906869.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c19cf44c-10bf-4ae4-aadd-545cb3906869.tmp
Size 33KB
SHA256 0e8b4e1494b55a0ca65916c167efec207faa5c487d0a627a29d99533c8bd4e4c
MD5 334bf22d8c5cca2074f2f13c93858a26
SHA1 2dd7c1799ff91811c33032c3762690d1774f8c52
SHA512 cbcac92164dbe361ae0cb52ca833509119c540099b9b12af5b3ab1cacb2efd858de5122ed1eb4a4b37ae5221175ad0fbd534d29f99e744245b21a9b64b292eb2
SSDEEP 768:wn3+QgybNbFmtoOeRFZD1fTos7RjHxTnM:wn3+XdY1fT/RLq
TLSH
T144F2AE35BCA089374CE6E295B14A3A06BFF495639AC91A8865DC9F0F049BAAD1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

315d63b4-d915-4a28-b8e3-4c798cb48b16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\315d63b4-d915-4a28-b8e3-4c798cb48b16.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download