4a5fe2ec0e69f9ce70422d087c3b1e6ac01b5023f0c1a32a0ac0ef02d1745ee0

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QuantV Latest/optionals/Optional presets/- visual presets/screenshot_comparison_brighter-nights.html
Size 2KB
Sample261009-w2f3ssdd67
SHA256 4a5fe2ec0e69f9ce70422d087c3b1e6ac01b5023f0c1a32a0ac0ef02d1745ee0
MD5 13c4792a4f13068e0ccdffc7f167a644
SHA1 cc63cfb1852e73f12c8676e7b264c61cedc6635f
SHA512 13e87e7f03c23ded68f9d0bab75de1bb0807ee7b0eee57ec479f8869cc0ad5b27a30c53b6a3419250df3038e86b146e46bacb94c343a2c8ff407bb1f8e58f864
TLSH
T15B41B87330031C19315F81BE73D5E185C0266145E3CE7854F4DBF2F79285E81A8A3C66
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1092	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{C37DD02D-0741-471D-BD53-840A246C537A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3652	msedge.exe
3652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 1476	2196	msedge.exe	85
PID 2196 wrote to memory of 1092	2196	msedge.exe	86
PID 2196 wrote to memory of 2344	2196	msedge.exe	87
PID 2196 wrote to memory of 2344	2196	msedge.exe	87
PID 2196 wrote to memory of 2344	2196	msedge.exe	87
PID 2196 wrote to memory of 4144	2196	msedge.exe	88
PID 2196 wrote to memory of 4144	2196	msedge.exe	88
PID 2196 wrote to memory of 1512	2196	msedge.exe	89
PID 2196 wrote to memory of 4688	2196	msedge.exe	90
PID 2196 wrote to memory of 1512	2196	msedge.exe	89
PID 2196 wrote to memory of 1512	2196	msedge.exe	89
PID 2196 wrote to memory of 4688	2196	msedge.exe	90
PID 2196 wrote to memory of 4688	2196	msedge.exe	90
PID 2196 wrote to memory of 3912	2196	msedge.exe	92
PID 2196 wrote to memory of 3784	2196	msedge.exe	93
PID 2196 wrote to memory of 3912	2196	msedge.exe	92
PID 2196 wrote to memory of 3912	2196	msedge.exe	92
PID 2196 wrote to memory of 3784	2196	msedge.exe	93
PID 2196 wrote to memory of 3784	2196	msedge.exe	93
PID 2196 wrote to memory of 4216	2196	msedge.exe	96
PID 2196 wrote to memory of 3200	2196	msedge.exe	97
PID 2196 wrote to memory of 4216	2196	msedge.exe	96
PID 2196 wrote to memory of 3200	2196	msedge.exe	97
PID 2196 wrote to memory of 636	2196	msedge.exe	101
PID 2196 wrote to memory of 3780	2196	msedge.exe	110
PID 2196 wrote to memory of 4756	2196	msedge.exe	111
PID 2196 wrote to memory of 3232	2196	msedge.exe	112
PID 2196 wrote to memory of 4004	2196	msedge.exe	121
PID 2196 wrote to memory of 4004	2196	msedge.exe	121
PID 2196 wrote to memory of 4664	2196	msedge.exe	124
PID 2196 wrote to memory of 4664	2196	msedge.exe	124
PID 2196 wrote to memory of 3652	2196	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\QuantV Latest\optionals\Optional presets\- visual presets\screenshot_comparison_brighter-nights.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa1549c188,0x7ffa1549c194,0x7ffa1549c1a0
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,3103166787570329057,12504354506320599942,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,5563257400240850472,6685880128240989296,262144 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,13660666981410351146,1437385834735995352,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,8275824466603481861,15539733812066419915,2097152 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7287172345406055692,11166888961437142194,2097152 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,1909926216744079012,16131811898004281508,2097152 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,12741340221150659179,10110634762353444375,2097152 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,11242941465737792467,17622361705300645053,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,12504888644363753706,15847157102462723652,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,2316694250307223198,13776489247584315191,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,2316694250307223198,13776489247584315191,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,5873272730056919961,12493359350692218726,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,5247867046523246636,14851251454954410022,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,3524919340953187313,12400062114673313318,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,3080152061637292380,18315048373932032832,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,12058497524064162294,13348509914736216627,524288 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5184,i,17484317858565080370,3560016135521313827,262144 --field-trial-handle=2384,i,1919154187132251769,7970716795385764231,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

07ce6eaf-f99f-46a2-b2bf-1e4a317ef97d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\07ce6eaf-f99f-46a2-b2bf-1e4a317ef97d.tmp
Size 18KB
SHA256 d210f70cd114124cf67c8292c12622f9dda577649d018a1f19c372dc368b7719
MD5 2a8de4746a4b2ebd7b22029973816c5e
SHA1 24ead083009df73a88b1494b31aec645143847c1
SHA512 cab18317a850e470324260d5a110207328280e20c1458483183c0445a05bcf9fb8ff318d9b1319c551b43fb28ad3d053e0b60ee15f46e6a2da2258bb4852129c
SSDEEP 192:uPm+xasuheOwQxMGsNsXUQrDCDPBGJQmiU1Nt6Wj4p5u88P/uhgKpPwoj4lAaqyF:rZcIhsNskx4nzZMp5u8i2ppYozqMTY
TLSH
T111827E766C3868376DE7A525F88B36179FB88027E7C85F88D4DCAB1D02DA5981307D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bf65836-59a9-43b6-8324-9b76d84fe660.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bf65836-59a9-43b6-8324-9b76d84fe660.tmp
Size 8KB
SHA256 923be2bf9e62e59afdbf9557c1d21cfa24d31c372f4d3f065ace3226018123e6
MD5 da97aebf3ea19a375ea3fb12d3985347
SHA1 c9fe943d93051bfca1e10aff7c03ddab3a830338
SHA512 ddf1d7a311f95c5ca17c26917bbb47bff1db2d4c9e65f776211353865c05050318ddb33631981911c2c0f06458068f5cdff86085d4990bb9c7d1142e551ba747
SSDEEP 192:SONtB6iDCQmiUyS6vHq5u88P/uhgVSqWoiU6:SONtB6/MHq5u8i2AgU6
TLSH
T12802F9396C287C7BADF3AD15B5877B275FA4013FE6951F84DAE81A2C01D769C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44e2e583-5d94-4273-8f6a-5fdbf912eb54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44e2e583-5d94-4273-8f6a-5fdbf912eb54.tmp
Size 8KB
SHA256 c65ced574d7ab14feecdddd80343c283e2080b5dfdd3b3772c5936fad44315a8
MD5 2b9dbb3e274e2135a3c068768c2d91a6
SHA1 38acde7be8d41329ca78926ca121b9dc1fa53e13
SHA512 c1d07c192f92d89103b359ba664fa9cbb4361f6933227ee203ac26f2a44b45e44dd80c3f184bdcb57c06199b090cbf60561ce904ae629c46fbc942f3fa0155ef
SSDEEP 192:SONF6iDCQmiUyPe6vcq5u88P/uhgKpPwojbuZaqyU6:SONF6HE1cq5u8i2ppYoyqU6
TLSH
T163121B356828BC3B6DE3A861F48736139FA8412BDB896F84D5DC2A1C02EF5EC5307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

2ea3f388-0894-44b4-b379-4518d0a6969a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ea3f388-0894-44b4-b379-4518d0a6969a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d72ef64-723a-4973-82b8-4822f1ebca45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d72ef64-723a-4973-82b8-4822f1ebca45.tmp
Size 10KB
SHA256 98d0ac5f1ccda2b0c2809c84a1ac85a02a79a778c9f153ab21560600c40337c9
MD5 66ac52349900330fd79f88d765380957
SHA1 43682dc5cc274e2237759e4137515a0f32dc59c5
SHA512 3062331721d87dd010a825bd07e92219182bfe215906fb7c4e7f10b18739ed2856e8b598e2100ebbbf615f6b97cb53c9b3c35d5dec03f08d17ed6e25f9e8ea22
SSDEEP 192:sxZXRdWd/fzsjV4IdpHjHW6+WNGYaNMYIg5rJ:sxZX+d/fzsjVJDHbG/j
TLSH
T15B22FA516E28693B8CCBD21DBB56BF53E6F91032A1951F48B6FC861C05EBADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

727c8274-00d2-4372-9e52-0b48fcbc1815.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\727c8274-00d2-4372-9e52-0b48fcbc1815.tmp
Size 10KB
SHA256 d9fd6a860f9af21d580c87f38324a3ef8342c59f842462e7439710ca9d34ce2c
MD5 31234ffd304104d2f0986b1c011eadbd
SHA1 8ce29b0f347071e63f4ee4720eeface584727b3a
SHA512 013e548d4c22d67354a8026e7bbcc2871dec1cec2bfb89d772abfe72bdbf52722344b1717d32429bfde0f417f5371e5ce0518e074cceabc34602d639aae11975
SSDEEP 192:sxZXRdWd/fzsjV4IdpdjHW6+WNGYaHMYIg5rJ:sxZX+d/fzsjVJ9HbGNj
TLSH
T1C722F9116E28693B8CCBD21DBB55BF53E6F91032A1951E48B6FC861C05EBADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a51456c20967794d725c32de710decafc693f8f501f2d0194179fd00c339c4b9
MD5 b630a4135f51a16130f0097ced4a44ba
SHA1 5da5c9514e764722bd0f03b63fdb55c3d1c429a7
SHA512 9ac3516b048f79637244496c519262c66b94234b1462b3e1e81be7c559e978af9039f536293ec08da2a2de347c22968a8ddda13904fb4ca30c28e92318cdaf19
TLSH
T101E026E945C9C23FF308A447127C970C83E13BBBA3C4AD8E2704C984BA07040A6C37E0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 552ee8e456b66daeb0cd6f8c1e32550ae787ff52d78aa5336827b13aacb79bb3
MD5 551f6c85430ee1e236d70b98b7f70ee4
SHA1 e816ac2d3d2970c4afba9afafe87b9bd9c0d3a1d
SHA512 b097c0e5e8ef7870eebde5dc9df6113b02d2b34b2b5a2bd4c43b1d02e2866eb40b0bb07dd3b5164b8a6674333dced9c84b02feb6095c39134ea2ed32e8046857
TLSH
T1FD61708CEE818577F794C8B187D132B77AFB44B958833D31A3ACE8E98B567423360044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 597299cee3fc2eb9c5e3abc9f6a24444bf720930a1e82cff4293380c3064eadb
MD5 a3d953bc92783684ee39e353bcf61535
SHA1 0ec8e24ffdde72c3340af3b37986842bead61ff8
SHA512 b0206c7ba023fbac3f7b184a68a837680f4e0ed5bd6779bde755ca037011b859e905b1746c6f298ac2bdfadfc922fe16de6892c31e03e15303de4a7b8054ed4c
TLSH
T18961728DDE808577F794C4B187D131B77AFB44B958833D32A3ACE8E98B467423350044
MD5 SHA1 SHA512 TLSH

Submit Download

22370187-a5c8-44fc-811c-0be13be5b546.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\22370187-a5c8-44fc-811c-0be13be5b546.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

ba38d6e5-8d40-4aff-b4ae-d05be052df9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ba38d6e5-8d40-4aff-b4ae-d05be052df9c.tmp
Size 1KB
SHA256 e8f4b2993064e4641ef57fab3b3442f3691e64b1b564085fd2b4563d6015a7a9
MD5 e8bdb5af646d3eba8cf09507a465d76f
SHA1 6b44d5af967fb580501e5596872b56de6622b54c
SHA512 a80c6df147f7e8f142f57d49d0c0c70cfd21f652d21193f7fbeaa12cdbd5d8ebed96dfa12d61576e41b645a71ecb79dc47075aece0d6b0ea3e5cf81ebb0fc67b
TLSH
T1F741E1B3C3D4876E880516F49B24AE2ACE1D055A422C3C168DE8FF5F73E24B0E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

d25cff46-a027-4942-8a49-8496b2f8b1ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d25cff46-a027-4942-8a49-8496b2f8b1ef.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e99668f4-b341-4f4d-8379-ce9cbbaff725.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e99668f4-b341-4f4d-8379-ce9cbbaff725.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3f95b77dbff5338396adb160ec13a42b35a003d881b1354c9c7c9e8de89d4870
MD5 b854a1be21857418819c47249ad29f64
SHA1 9b76c3e5378e02b450661c38c9531cfbf596dcca
SHA512 e40c877a2680949f9197a7fc9520fcfc236194fd821dd77371b4c5178219ef27daaaa9e8f10e18be176300fedcb6b6d7dc778b9cb10267dd387d5dd46847bc7b
SSDEEP 192:sxZXRdWd/fzshV4IdpdjHW6+WNGYaQMYIgrJ:sxZX+d/fzshVJ9HbGg9
TLSH
T19012D8116E28A57B8CCBD21DBB55BF53D6F91032A1951E88FAFC861C05EBADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eaf624e6fc8be187339f16262c0bbd568e1659f62ba539cc838d7a8e7e57db8b
MD5 3ec1d92f7670a71d8cd3fe5f5f39eb8f
SHA1 db328d5facfb2198d92698fe50453ba73c27e6fc
SHA512 e1e2f66271bcf58735b734b56a7adcbebee370efc6b22bc372d450925c96aaf842d5d720e174819046db978c1239fba124b86162d0ec12d62ef25df303de34eb
SSDEEP 96:Ko5aKiwyMnur351JgV9Iz//gK31/RgbP/4x3HWK8U6l:YRMnur351Js9Ir/z1/REP/4xydl
TLSH
T1D1914041307B424138BF79495574861E425271B330AAF56BBBAC44AB8F6FE089CFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3c12b8a-73cf-4473-85da-09dee207739e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3c12b8a-73cf-4473-85da-09dee207739e.tmp
Size 9KB
SHA256 cde22efacc50b98d0350e1636a1341b579c3cb33ee9497a142e038f372166450
MD5 2bf50f71891325f0c3ba6ae8640a3da5
SHA1 7fa311d34cfd66e00bba1d6c929966aa49fa7703
SHA512 a8e7ee797e6a238d8d5d911ed742a29f83e6483a21e5691d8d6b619b87282bf8191cf6c3d70f7fa50fadd44b5e880bb00ee14c6e9dcd3c8fb2855c66ec1b8af1
SSDEEP 192:sxZXRdWd/fzs6V4IdpdjHW6+WNGYaQMYIg5xJ:sxZX+d/fzs6VJ9HbGgt
TLSH
T1B922E9116E28A57B8CCBD21DBB55BF53D6F91032A1D51E88BAFC861C05EBADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f359040b-fe26-40d1-8022-155ba02c5322.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f359040b-fe26-40d1-8022-155ba02c5322.tmp
Size 27KB
SHA256 b6ee5360d328890d5253c8d4584d0e1869d34fcc9c415ab3392064cf1d399cc3
MD5 272cce9edb64b949af2554231d3e6f79
SHA1 1ed135d48ae9f6bb3059e165bd7422050a6f742d
SHA512 cfd71cf5e7a789494dc74b0515b74a926cb92ec31909a50d1d529248c29446cecef7cc275ea723417c1abb89d3651b65af1f281ab5a05d37aa3d3ac65bd0981f
SSDEEP 768:zsyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3IrojZ9g:zsyQRbrWvvlpZu1jaXKLf33zjZ9g
TLSH
T1A0C2F92B640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06f7a933-294d-40ef-8f84-74b904a3cc46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\06f7a933-294d-40ef-8f84-74b904a3cc46.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba92b9f4-b632-47d0-918b-2005d598676e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ba92b9f4-b632-47d0-918b-2005d598676e.tmp
Size 18KB
SHA256 4a5122b6124c6b793005e90f751733db86c53d7a54310971f57baf2c5d37a413
MD5 82f90b8c5c6598551d1bb1d121b268bd
SHA1 25fc8b9e6eff61778c09717c9931a25a6a290146
SHA512 1378c4c409f949fb47e86ecbb7905f5d1b44be6f607acabe22872d88870a2f74411b4a473d2ddb0dd358bf490b0f8ac37ef2bf573baaad0eb82bbac2fc267620
SSDEEP 192:uZm+xasuheOwQxMGsNsSUQrDCDPBGJQmiU1Nt6Wj4p5u88P/uhgKpPwoj4lAaqyF:xZcIhsNsdx4nzZMp5u8i2ppYozqMTY
TLSH
T1CC827D766C3868776DE7A525F88B36139FB88027E7C45F88D4DCAB1D02EA6981307D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d32467e5-86a8-4ab9-96b1-3eeb903f276a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d32467e5-86a8-4ab9-96b1-3eeb903f276a.tmp
Size 21KB
SHA256 3ed711bb906efd9c0f9fe628d4dbb50b5f6582167bfbf9320b97b8c9a1df3963
MD5 1833108bff44bbdc36c3c96aaf8bb696
SHA1 8b73d4bb1eba8cabd8d4401df1fee0d5485bb540
SHA512 62af84407b89f6a89267f511845d8f276fc215880ad373dda19e10db26932725fed4461290857757addbe5d9985ea4228b6f1651d62d1a71e4feaa50a68811ae
SSDEEP 384:KiFiZcI3zsNk8TUNTUlIlkx4nzZMp5u8i2ppYooqMTY:BFQjdwgz2k2bAqMTY
TLSH
T1FDA27C735C68983BBDEB9A25F98B36138FB84067DAC59B84E2CC9A1D019B1DC0307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cd43865-643b-4806-b41a-da126741dc8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5cd43865-643b-4806-b41a-da126741dc8c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 397b8b6f9c549720d0247dccb7820bfeeab795cd35f8f36bec0db197f9987671
MD5 ecd6015ec62e910e67857379ee61e8fd
SHA1 423671c1863ddf81d917905ffacf850f7f0b9423
SHA512 5f5f04dc947a63e087a7e37fba2ff6b3ae28f192caf265eac41a4e3d5121c6f6e5a8dc23e067dfbe467911fea76478f04c7f35f9dd0a7edecbea7a2c4672443a
TLSH
T14E41F55DB6E92048B3B36F5AAFF3A86D447AB9272E06955E10110D4E0A23B41D871733
MD5 SHA1 SHA512 TLSH

Submit Download