2fdca6e78c8e07915309d31202f974f95c8d5c76d9ca7e505d9722991cff83c2

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/shadows/screenshot_comparison_smooth_shadows_interior.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 2fdca6e78c8e07915309d31202f974f95c8d5c76d9ca7e505d9722991cff83c2
MD5 9dc0d71be90231d7dc58f70346ec0280
SHA1 c4514aa3f06097b3888890aa771bfadb7d7df0a3
SHA512 b04fc34f405616b46812fd0d5020427c35fec40018e7b990da1ea4955b3c4f9a6b9b1ccb2d25ce9e1329404bb06c373adaa0f27900dfa3e66e8f829bbc54b54c
TLSH
T1E341A97320434C2A315F817DBBB9A1429166A184D38AAD40C0ABF6F7A6C5ED2F4F3D52
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{B5A723E6-6C5D-4B58-A032-04E16541C3E2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 4540	2368	msedge.exe	87
PID 2368 wrote to memory of 3188	2368	msedge.exe	88
PID 2368 wrote to memory of 2248	2368	msedge.exe	89
PID 2368 wrote to memory of 3188	2368	msedge.exe	88
PID 2368 wrote to memory of 3188	2368	msedge.exe	88
PID 2368 wrote to memory of 4048	2368	msedge.exe	90
PID 2368 wrote to memory of 4048	2368	msedge.exe	90
PID 2368 wrote to memory of 208	2368	msedge.exe	91
PID 2368 wrote to memory of 208	2368	msedge.exe	91
PID 2368 wrote to memory of 204	2368	msedge.exe	92
PID 2368 wrote to memory of 208	2368	msedge.exe	91
PID 2368 wrote to memory of 204	2368	msedge.exe	92
PID 2368 wrote to memory of 204	2368	msedge.exe	92
PID 2368 wrote to memory of 1044	2368	msedge.exe	94
PID 2368 wrote to memory of 2664	2368	msedge.exe	95
PID 2368 wrote to memory of 1044	2368	msedge.exe	94
PID 2368 wrote to memory of 1044	2368	msedge.exe	94
PID 2368 wrote to memory of 2664	2368	msedge.exe	95
PID 2368 wrote to memory of 2664	2368	msedge.exe	95
PID 2368 wrote to memory of 1976	2368	msedge.exe	99
PID 2368 wrote to memory of 4240	2368	msedge.exe	98
PID 2368 wrote to memory of 1976	2368	msedge.exe	99
PID 2368 wrote to memory of 4240	2368	msedge.exe	98
PID 2368 wrote to memory of 1528	2368	msedge.exe	103
PID 2368 wrote to memory of 4780	2368	msedge.exe	112
PID 2368 wrote to memory of 1788	2368	msedge.exe	113
PID 2368 wrote to memory of 3524	2368	msedge.exe	114
PID 2368 wrote to memory of 1868	2368	msedge.exe	122
PID 2368 wrote to memory of 1868	2368	msedge.exe	122
PID 2368 wrote to memory of 4996	2368	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\shadows\screenshot_comparison_smooth_shadows_interior.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff8bf70c188,0x7ff8bf70c194,0x7ff8bf70c1a0
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,11383196133883729778,8618465239403092605,262144 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,2623950354436966480,5894316114254291351,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,11437639211685797525,14741212803827998311,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,8618790305492256168,6228451949485996358,2097152 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,1191858037063930698,16860153010935415258,2097152 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,8568233169626851827,13064825313541343512,2097152 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,3874321410283256830,5582363829775983197,2097152 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,6445639894834380448,6131019059121921379,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,3891126845862417957,3229164256425729992,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,16211224575517861850,6239815626622108315,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,16211224575517861850,6239815626622108315,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,5629438656991528256,3064581671556810320,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,2549921057765392757,10799348350006333286,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,5201577672308828974,14751694115995227137,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,4664962749606672306,14572241817472779838,524288 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,2448690164976452781,16907842830607775883,262144 --field-trial-handle=2216,i,8591098778372687233,10321818473258635269,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4996

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5a20d446-4af0-4e55-97fd-015873505e99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a20d446-4af0-4e55-97fd-015873505e99.tmp
Size 18KB
SHA256 deed2fca8586d94895333dfab7bb26f99b5245a7add36dc2074737c50bb49281
MD5 eeefc32b0b6e58c0c4fd752f12e3ceb7
SHA1 ca33c02744dfde138497724428218bae87e7ebd9
SHA512 b10e7277a4787fb045e17f54be0ccdca1e49f0f8b7ad12a8ee07a4901ece261b1d44a189fab6267d46b9236173c5cc3835b38bf64648638d505f2aa51940cd60
SSDEEP 192:uym+xasuheOwQxMGsNyeQiMmnmwpuUsgQmiU1UllxB49iX5FQVQviILnrqcCVTEg:CZcIhsNyetpuDgydu9iX5FQCH3MTN
TLSH
T18A828C36AC3859275DE3E555F48B39138EF89127EBC82F84D4ED971D01DA2A8130BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f9174fd-972b-4017-8509-dccce0ad09d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f9174fd-972b-4017-8509-dccce0ad09d9.tmp
Size 8KB
SHA256 ae7cf3aea20902bd5b626a8891763a4e1cb37bd05e22a2659407be0b80b8329d
MD5 d6b659ef70811dca10de177100bb467b
SHA1 52a6239747dbc430c8765d93f4c115be3b6c1f3a
SHA512 a76e9ad198bf5153f0b700eb07c7c777ec567b31a7478c317422f9f03ebebb9a81b5f00d24162a5bac880c5ae9c2267a7ec8bdf0e3af88170d02445274182c02
SSDEEP 192:LONV6AmwprQmiUyUlQ6siX5FQVZJiL6LU6:LONV6ipdu6siX5FQc8U6
TLSH
T14202E839EC786C7B9EE2AE45B48B36135FE5116BEA942F84C9E81B1C01D729C1307933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

525905f7-3c56-4e90-9866-c823c4aebc4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\525905f7-3c56-4e90-9866-c823c4aebc4a.tmp
Size 105KB
SHA256 c43cdac343629dd02c753c69bd2d3d68f6a680941595b5b24e7a4c0e9af0a92f
MD5 512d6bb5eb68161105e73a7d201bcd46
SHA1 3f8132f698803f82d145294d3019bcea70f3c08d
SHA512 e38ff3ffe44f85efe82044549aaabda9821a1dcd1cc60d7c374e5a927da058dab823cdcc8869ae493cfe1f07dceeb7c09d2d0fc8d0e02bd13f3b122b9b61425d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T191B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

17d9205e-cb78-43e4-9b4a-2a7b050e54a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17d9205e-cb78-43e4-9b4a-2a7b050e54a6.tmp
Size 9KB
SHA256 268f7ed9d881ad6a93a2d4d9b1b9e24d7e44f2baad220cdd27316ce8dc25957c
MD5 09326a7a06e2ed960e0fd632a53d96ad
SHA1 5173bc0dfe34cb03798f4aeb91a9f25bb75c4faf
SHA512 d1ec0005a4180a59875f61e233dbad2390b56f5650627d659d69ebd1fc67838b49c68de95ff5a37c9ac4c69dd92ab15bec55ef6b37486a00d33658061317607f
SSDEEP 192:sxZhRsWt/fSsoAIdpdzHW6+WNGY3RVlIg5DJ:sxZhJt/fSsoBpHbGIH
TLSH
T11F22E8526E28A93B8CCBD21DBB55BF53E2F9503261951E48A6FCC61C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

356eef04-d663-4c38-9f85-17852615a10c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\356eef04-d663-4c38-9f85-17852615a10c.tmp
Size 10KB
SHA256 005adab54c6797599c6a74ca4ba1a85623c2fc369113476ff50d99c069229c50
MD5 85d18e527c9a6fb43fcffd27f7c7f208
SHA1 64366620277c5cf8ab1c2fd2417fefe8b1197cbc
SHA512 89379a84bbe4cc8150be012699b84be2138984cf1cd06fb7483794293f820c4efc2bbed87870326d48dac59262fe79a84102c250d3006335a61459c702e254ca
SSDEEP 192:sxZhRsWt/fSsSAIdpHzHW6+WNGY3VZlIg5RJ:sxZhJt/fSsSBTHbGS5
TLSH
T19722E9526E2869378CCBD21DBB55BF53E3F9503260951E48A6FCC61C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

463adce4-d678-4e90-8cdb-1f194b1a7b5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\463adce4-d678-4e90-8cdb-1f194b1a7b5a.tmp
Size 10KB
SHA256 9164bae3d2b86bd92a8c318e20a13a0284631d6c437196928972b86726c1279d
MD5 ef2eceef3a4787b41fd8dc8b767924d9
SHA1 79b1749f622fabc951289908d79111db1279d236
SHA512 abd51dd739400832dff07f30093059c285f8922f3bfe925dd14575f9699a3a23dc197a83747399e7549c21553f4bca0ffdb6fdcf4672362b995b3290f2099bd0
SSDEEP 192:sxZhRsWt/fSsSAIdpdzHW6+WNGY3qVlIg5RJ:sxZhJt/fSsSBpHbGx5
TLSH
T18722E9526E28693B8CCBE21DBB55BF53E7F9503260951E48A6FCC61C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

707c2bf4-24af-4cd9-9c77-a4a8557f76cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\707c2bf4-24af-4cd9-9c77-a4a8557f76cc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a808a92cbffe9b49c2da6b99d62af33232ed15b1d8e47d8c8185f8070e19efa8
MD5 0ad02070eb87613143a73ef8c1941368
SHA1 ce456f1ae5295d2f1c480406f2216f5df21c1723
SHA512 5eadddca632cc93fac0df542c9a1e96cd209c8c1b0c55fca4959045b4799b184b7c2c3712ad49437cb83c1ac40581fd4ce0810314a6be9fd74e213d19a32b924
TLSH
T1CE61FB86E55101B5FBE8B033B5F057BF367849B29DEB1EAED1A4E278940E721713804C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ab3104ad0caf03a1432ed85858c8ea8e541063360ccdfeea5b90dfbf187721af
MD5 40c910c8cb37442a4662e27458782022
SHA1 4266e66910d4490c87dfb9c60da9bfed964dcf7c
SHA512 ab46580117935f16a8253575aa21a85b46013697a7cfddbf95739869223b9bab90a64262c2e50e4dd239b9fc2f44fd181dd7afb27e57cd7756e632b53d436042
TLSH
T13061E986E55101B5FBE9B033B6F057BF363849B29DEB1EAED0A4E278950E721313804C
MD5 SHA1 SHA512 TLSH

Submit Download

9199f69d-1919-41de-b9f4-089e507dbe7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9199f69d-1919-41de-b9f4-089e507dbe7e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

27c6e217-4679-43bb-b1e2-61c3dd3b6b92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\27c6e217-4679-43bb-b1e2-61c3dd3b6b92.tmp
Size 1KB
SHA256 419634af25c373c37ea7d5dd1ef98272c1c9959be7537896fb56c709e048f4a0
MD5 f5c7ae16b9ec665f0788de35b03f6366
SHA1 c4396a2d12d6245d51eab7edb49bccda392759d6
SHA512 afa236ec77029fe2b567c2e9f98b645e2aa2cdeaaeed0e83c75294f4203fe3d3026d3171bd41059305ab4aea534d6a4129ae5dcbab4af4eed4b5efae858bfd09
TLSH
T10D31BDB7C6D4476E880156F46F256E1ACE1D054B522D3C1AC9E8FF1F63E24B0E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

768dba75-fce4-4182-a552-09370682ead5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\768dba75-fce4-4182-a552-09370682ead5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

91b8e3c6-86c4-4685-8b7b-5b219d962611.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\91b8e3c6-86c4-4685-8b7b-5b219d962611.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4ce1cb2f02f68db8fcb726dbcaa9245e87507bafc486eccf07b34b8569c53e72
MD5 72849e9903e377dae8919076164fb098
SHA1 b2b09949ac0114f629f90a08fe560b8b07a03c60
SHA512 f3977d6b6f7db952450909c044033bb885f70af2eb084e768625bd9039368797c2275e2361bca40cb16ede286a7e33ad09bf6c0e7a50e6680e4f2fc159b71a85
SSDEEP 192:sxZhRsWt/fSsUAIdpdzHW6+WNGY3RVlIgrJ:sxZhJt/fSsUBpHbGI9
TLSH
T14822E9526E28A53B8CCBD21DBB25BF53E6F9503261D51E48AAFCC51C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8d94ba98be3c06ead1fbf41b78e39b506f7ff7d032253480a4a11c400df35654
MD5 5888a56682c90a73bc687ef97d8e9f1e
SHA1 20733a9939766f258f7b476e3c6585ad82752951
SHA512 39ad5810cb1b2784267d53c45b9046a9e994a3dce0d68707a2c255b3b971a1f2ed8efb48aff18f631ab7cb92378c2ab92f7df5b7b224735a1cec9badd37487c0
SSDEEP 48:K0ydgMyQwBbsbcISkBK9o1yBxKRYTkQCyL2xMwuUUNb4PgISINK9s1uNxmdYHYDb:KoZeK6kyeFGK20ll6KWoaB
TLSH
T129912202357712D038BD6A4895B4876F026131B33129E6AB7FAC61B95F2FE158CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5621067-3586-4bc5-854c-8a7fdb68c99f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5621067-3586-4bc5-854c-8a7fdb68c99f.tmp
Size 27KB
SHA256 1a517efb2c1dead72d8694531d5ac83ea6eb55c5d8c265e5ba704aa16d759670
MD5 adc61c94d818b87d299da68f481f1554
SHA1 6010a6501e4fa6ae172b3fcd5f09d9e4c696f4b0
SHA512 b4479e42ad189467c1998da4c0e5c0f56778a6cd498067af1923d97f918042d86534ac4e0d35d7f8acae6959ae1ea5329dfc3f93955ee28ee8a2f604a66c1fdf
SSDEEP 768:7J30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72grolZMjnY:7J30AbSWvS2l9u1jaLmLZ12rMY
TLSH
T1ACC2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e80a95d0-7b4f-4e26-858f-ce83a57fb2c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e80a95d0-7b4f-4e26-858f-ce83a57fb2c4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6130b044-66da-479a-a7e5-b475fb025bfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6130b044-66da-479a-a7e5-b475fb025bfa.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2197458-9b05-4fb6-90f6-7adf7746ccef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2197458-9b05-4fb6-90f6-7adf7746ccef.tmp
Size 8KB
SHA256 cc79b27619349bb706165246cd7f20cad7fe2a2aa8beff25be5c703d19294e90
MD5 e491bbd01b6f256723ff9eae54a0557e
SHA1 ee40a715bb84234ca34e2a91c0e95bd5f0d5ac2a
SHA512 29c54a3224f6f9506b146e7d92b3173e85f5f655a9f9d3174a9092f01e6235d86507ab7c02cfe0aa8b7d514af2de04ca670e082b632f6a8e08961c06862161ee
SSDEEP 192:LONL6AmwpRQmiUyIElQKsiX5FQVQWlRLnrqcU6:LONL6ipvb5KsiX5FQC03U6
TLSH
T192120936E8786C3B5DD2A855B48735135EE9822BEB897F84C9EC161C05DF2AC530B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a670bc9a-81c1-4fe7-ac4c-53e35982c9f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a670bc9a-81c1-4fe7-ac4c-53e35982c9f1.tmp
Size 18KB
SHA256 b5166ecaf22d3be49cef0e67a5a3aea7fa20b456ea15685e50f1f6baf9a974fe
MD5 0a36c19003a29abcc85cfa83c4cf4cc9
SHA1 d6b67759c463ca7263cf3ae3e549e9857a76c9b3
SHA512 9d4295c00e04ef1b2aebd85bdfb6d3398ca3f235073007e6a877fc0b447d3e7b8741c689a2411747d3af8777b81f2d7ceff080426d924e115a79dac0a7535a47
SSDEEP 192:ugm+xasuheOwQxMGsNyFQiMmnmwpuUsgQmiU1UllxB49iX5FQVQviILnrqcCVTEg:sZcIhsNyFtpuDgydu9iX5FQCH3MTN
TLSH
T192828C36AC3859275DE3E555F48B39138EF88127EBC82F84D4ED971D01DA2A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2778c5f-5df3-4199-a365-beae68892982.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2778c5f-5df3-4199-a365-beae68892982.tmp
Size 20KB
SHA256 35877fb02712469e06e94164a3b667f5b9372a84531591d539a36d1dc137cfad
MD5 0dc2b2013ecf19089a1ecb7be1ffe7ed
SHA1 10045811a953132c3cd614289190cbb5a9f17781
SHA512 40aacb3d9a0ab5c6e4a425c162e4fc3d6a1a704ef2631e9dd6b777acde6d389061d83059a01ff3f1263f34612ab6f36d2dc92dc84304be46056b89904444c919
SSDEEP 384:/iFiZcIozsNK8TUNTUlIletpuDgydu9iX5FQCO3MTN:KFQUrwg8Uaacj3MTN
TLSH
T1CBA27C339C68893BADE7DA55F98A35038EF48063EAC56B94E6DC5A1C019B1DC030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7204998-df97-4f08-9c2b-f735f55738b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e7204998-df97-4f08-9c2b-f735f55738b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dac2f756a57ca558f18b563a46bbb3959a96c68c38fa3472fb089ce49d456379
MD5 c97d118e558e2bb170c4aaff364a217c
SHA1 c62435b86e079811b16d9e2aa6cc4dc0c0108854
SHA512 bf2d4b3404f7b622e8ef0b37e2034dd917004ab87d412c76b3a00b95999c5057fd8987f788f84697616d0fabc58f6b2c7182b3e220eb58de76be31b59c4e5d9b
TLSH
T1A1412998B6F91144B3B36E56ABF6B86E487FB9332F07D45D50110E8E0A26A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download