691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 19:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v18R-m4-eM.svg
Size 57KB
Sample260813-yft4msxcnd
SHA256 691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91
MD5 8b9081c1b97a4eac196685a1f8617477
SHA1 89a34da98763f220cbdfc9dfaff9157a8239af61
SHA512 de72e780093390de1e184eb1cd1f29908fa6e5e100cf49a698ae67d4561ee17ba3e1af4f1a74237a4ed5ef14589791d4ed0e522e662faf2e00a580e1f299cbd3
SSDEEP 384:cgSrmXAixJODd7YkfwjGHDBPBsuQnPY7Yast17SXRargsZGmDLYjUpdMp9oDrUvP:cKXl4sZTDK9oDO
TLSH
T11243737637F4BC9B8BCC034B5D02EC6C45AF94B784A8668C9BD790E89548368F7EC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311238610456404"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{A7EBEF06-1D65-456C-BD7D-9E8E6DAB9E68}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4200	msedge.exe
4200	msedge.exe
4200	msedge.exe
4200	msedge.exe
4200	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4200	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 4200	2296	iexplore.exe	89
PID 4200 wrote to memory of 4140	4200	msedge.exe	90
PID 4200 wrote to memory of 3872	4200	msedge.exe	91
PID 4200 wrote to memory of 3016	4200	msedge.exe	92
PID 4200 wrote to memory of 3872	4200	msedge.exe	91
PID 4200 wrote to memory of 3872	4200	msedge.exe	91
PID 4200 wrote to memory of 1840	4200	msedge.exe	93
PID 4200 wrote to memory of 1840	4200	msedge.exe	93
PID 4200 wrote to memory of 4944	4200	msedge.exe	95
PID 4200 wrote to memory of 2480	4200	msedge.exe	96
PID 4200 wrote to memory of 4944	4200	msedge.exe	95
PID 4200 wrote to memory of 4944	4200	msedge.exe	95
PID 4200 wrote to memory of 2480	4200	msedge.exe	96
PID 4200 wrote to memory of 2480	4200	msedge.exe	96
PID 4200 wrote to memory of 264	4200	msedge.exe	97
PID 4200 wrote to memory of 264	4200	msedge.exe	97
PID 4200 wrote to memory of 264	4200	msedge.exe	97
PID 4200 wrote to memory of 248	4200	msedge.exe	98
PID 4200 wrote to memory of 248	4200	msedge.exe	98
PID 4200 wrote to memory of 248	4200	msedge.exe	98
PID 4200 wrote to memory of 1496	4200	msedge.exe	100
PID 4200 wrote to memory of 1496	4200	msedge.exe	100
PID 4200 wrote to memory of 1704	4200	msedge.exe	101
PID 4200 wrote to memory of 1704	4200	msedge.exe	101
PID 4200 wrote to memory of 1696	4200	msedge.exe	102
PID 4200 wrote to memory of 1696	4200	msedge.exe	102
PID 4200 wrote to memory of 2272	4200	msedge.exe	104
PID 4200 wrote to memory of 2004	4200	msedge.exe	105
PID 4200 wrote to memory of 2004	4200	msedge.exe	105
PID 4200 wrote to memory of 4328	4200	msedge.exe	106
PID 4200 wrote to memory of 4328	4200	msedge.exe	106
PID 4200 wrote to memory of 5216	4200	msedge.exe	110
PID 4200 wrote to memory of 4448	4200	msedge.exe	111
PID 4200 wrote to memory of 4820	4200	msedge.exe	112
PID 4200 wrote to memory of 4572	4200	msedge.exe	113
PID 4200 wrote to memory of 4572	4200	msedge.exe	113
PID 4200 wrote to memory of 4348	4200	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v18R-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v18R-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffbcde5c188,0x7ffbcde5c194,0x7ffbcde5c1a0
    3⤵
    PID:4140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,5795830340264423011,1724631408866490771,262144 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
    3⤵
    PID:3872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,10142703625418998598,10457228197059155998,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,5176833866395214888,14762091414228499513,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:13
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,2446762526378990896,13438818651047449326,2097152 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:4944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,8165183461595655154,8786652416794662521,2097152 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:2480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,2794785354726406866,18021029186113076858,2097152 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
    3⤵
    PID:264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,16539163599113804505,18319547769967088776,2097152 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:9
    3⤵
    PID:248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,14359626955400692650,1995823863643888931,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
    3⤵
    PID:1496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,9869204529049666280,5073027986879383855,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,6962850465351313121,11254757411993391849,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:1696
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,17977519943806155903,17802754029868565690,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
    3⤵
    PID:4776
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,17977519943806155903,17802754029868565690,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
    3⤵
    PID:2272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,3711741387239592319,5529282323215788438,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,1740814729548207974,14723025448102156038,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
    3⤵
    PID:4328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,11404702771541268419,123221085825010350,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,6432701291664492253,14085720701643695607,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,5192050058723785425,7546845161269770749,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
    3⤵
    PID:4820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,12265875360155851403,516286364271466757,524288 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
    3⤵
    PID:4572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6856,i,9643634786788245367,1675899792736387137,262144 --field-trial-handle=2300,i,14079910329117557245,7917901150201324688,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b31394727b84000451c27388234efda2e8d111b22ba93465719789dc0ed477ef
MD5 f5bf8c4ca70cc999b352ac875a82d176
SHA1 0507fea641df12386e24977e2975321b1d8f1045
SHA512 48c3d1d276af16a3f0e2b2ac16d4e4fedb1c0df2ea494dc037cb74d244c4a2ea772a2219ec4c44662237a9674e15c0bf5c2645d7dd95795b0d72e12d4cdb2e3b
TLSH
T1C541B86863E40BF1D7A545B119E17E8932F4946D260B2EAC712C9EF88AC2F9403D1D93
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86bf8d0d-14cb-4cf2-93a3-5c754a813d6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\86bf8d0d-14cb-4cf2-93a3-5c754a813d6c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 105b8f696b133676cf09bbbb15be24ffc2405de45a3d5f8998e6d46d7d92a789
MD5 919a06ebd79be1403db1e53e545ce1c1
SHA1 940e420ac1e1bfab2f790374ce43799f5e11c10a
SHA512 ace0d4b7bf3bd260f2692548d7f7f9732abd520623e75b94e28b0a1c4b20aa920ef6ae55a2719b1c6f44cae4f40f364217248884b7dee8b261fac18755dee9c6
TLSH
T144419EF383F4856E8A0196F0AA14AF2BCF2D0515832C7D5AC9E4AE2793E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a9ba41366b505e6b2508e3c087901a40c5c7aede9eb48272f66d2fefb9305bc2
MD5 1a65fce07ab6f7c70fbea7deb6dd510a
SHA1 be8bd05677511676fe5885424879b1ff78eb5e34
SHA512 aad62e08d3fd84811c011991e54639418709542f1e6390b1274699155ea060ee6ab357b13231d209b7502bdb46567a19eb45e864921ec3ea93a77df7d205e411
SSDEEP 192:sxRIRxyM/jK1Ml8wCN/fQskwoZ6m1zoD8p4W/g6+WNIYGlbhJCG9IgVGJ:sxRIv8N/fQskwW1h//5ILX8
TLSH
T1FC62F815AA34A937CCDBD20CFA557F53D6F95573A1901E44AAFCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 5179448de231c878f2bbb8333781deb34e6b7914e937089476222f28b92133c2
MD5 3d53b67127520e04ee09d0a3151835da
SHA1 60022e19b7aededbad997b6304f306ae8b919377
SHA512 79e6b6658c7ffb070a21763f4d8ec9b2d7f45b0a412a35690f9173774f5eb8297f862008a8f030d6ac2d207bad217479f8cb5e74da0ae82928ac6132d02ba718
SSDEEP 192:sxR7RxyM/jK1Ml8UQPGCN/fQs1poZ6m1zoD8peW/g6+WNIYG47PCG9IgDdGJ:sxR7vq5N/fQs1pW1hd/5IKXw
TLSH
T14F62E719AA349977CCDBD209FA517F53D7F95473A1901E44AAFCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 416c022935aede236c523da68328c4780c2540fd3e1c7b3b91d5da44a3948b6d
MD5 e314a3a73488fe815a7c4e8de44f3d92
SHA1 5379da49eeeb5579a7977e8c6a486d1653d059ba
SHA512 39d21adbdb2fbced96b837e55805cfd323c721f371b5931933226beb958bb8e2d478025ab645602c9642b1bec1170362b1701dfa4d342fb5e20aa4e0ff15a7f7
SSDEEP 192:sxR7RxyM/jK1Ml8wCN/fQs1woZ6m1zoD8p4W/g6+WNIYGlbhJCG9IgDPGJ:sxR7v8N/fQs1wW1h//5ILX2
TLSH
T1AF62E815AA34A977CCDBD208FA517F53D6F95573A1901E44AAFC8A0C04E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 3ba09aa1ca8890a27771e3cff6128d025803894148b8f8a547908b3cba2e6dc5
MD5 2afcca71673c688d76cd95d18e247737
SHA1 f070f46182b252b6ab5143a66ae502fd17e458a7
SHA512 ad843c47199c78f40ac8e3d65b67d4689a8baa7a0f77b4a6eeb16a2cc502a905c82bd8b25b84232caf4deb8fc00f8d86e987707c58233e174055618d5a23a4dc
SSDEEP 768:Utiiq37pLuL7ANWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVSSEepN0ProYED:UtiiqxE7ANWgv7fgJu1ja93ef0clD
TLSH
T1E1E20B7B680CCB7E4F804A9CEC29BD9E6DD801CB56D8CD9447EA881C03C67EB551A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8cd613db402580d404a2dbfb038de3acbe79cc4acb9116cb8557dda057f1a4b4
MD5 7ce2aeb5a6769c4abe88cad3864cf892
SHA1 ce4edc54fededdce257b07f279607c7106e763e3
SHA512 ce43414785dc3b28bd673e051eddf4d3821e36eb233cb3369336f13ae3d56bf072f4104f8cdfeaaedd12c549e3e2f8e085bca89c280c681e532a3f0e00a38e26
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkdqjXNn7vWj4mgfvK4+gBvcldQzLkHLURlTpL:Cm7KmgIIJ4tWGm7g09OGlkdqjXNn7Oj8
TLSH
T104912441713A12403C7EF61981B98A1B92C274633155A57B7FA821761F7AE038CFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e3a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e3a0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 36c4d270604dd19feaac6b2fa245c8ed257effe5431d00be97be6619835ed2a2
MD5 5f79da05ef2975f67d66fc55491e091c
SHA1 bb3242653afb232849e622cc794c52787db27c42
SHA512 cad99e462137e45a3f5b7b37bcb62d447c70ab22e2268e8e679cd6c87548468dc4f0a82c77fb04bdfbbb60bf5bc380f70819cd6eb517eae93360d2c0573a03ad
SSDEEP 768:ry34q2glYycgBU7Hucys6BRvi82oP4/z6himo6tPi9PQyPc:ry343gH3imOz6ImoaPVyk
TLSH
T140F2BF30E8648D73ECFBD699B1863B827EF4127395C81E94E5D9CB0D19C7A5E071B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b215f572cb6b99581816aa8914b76dc516e1d65e5d308b7912925286c1b7d4ac
MD5 b6a518dca60f8ccc448e1582b54ffeff
SHA1 39757b0e37bc18832b442f0e7f3e2724270b5937
SHA512 eebfa6aff4ddc10b2888c42dc8a53aae160d40d113cb64552cc21f1e0953e338b56862bb2f6efbced7dcc267e469dbffb9c2fa4ea1c4c9fe3e537796f18c4ae8
SSDEEP 768:aFQ73EwgOq2lyogBj7Hucys6BRvi82oP4/z6himo6tPi9PQyPc:B73dVg83imOz6ImoaPVyk
TLSH
T138038D35D894CE67ACEB87C5B6457B42AEE012B385CC9DD4EAD98F0D15C799E030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ec3bb29e78b8aab1a24d9cc54b1f3013a28cbe8cd7dfe3491fda17dcc7bbb11
MD5 7a50b0bdacc1ba2d7135cc933c8adc59
SHA1 0a60b68c6332f60c5bad53a270273835c8184a77
SHA512 199ceeedc991e63460d0814eb9d1c50ca40f948af8acf8f0597cdb21573ffeb2b4bb2a78f885d6f0604de7eac30e78bd1235b7ea0b60d10fc35c8b18fef6d383
SSDEEP 768:Gy3Dq2glYycgBU7Hucys6BRvi82oP4/z6himo6tPi9PQyPc:Gy3D3gH3imOz6ImoaPVyk
TLSH
T136F2BF30E8648DB3DCFBD699B1863B427EF4127395C81E94E5E9CB0D19C7A5E071B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5471fd072106da6d278f649ed4dde99f660fd7cfe5cf84f583259c56f8600c46
MD5 666f68db59d3e6747e0094c722d6b299
SHA1 d3908d9992704dfaf210223380e98d7c58058b97
SHA512 91187501a9fe68ca72d54e5a1cee6698d6a5a7d150d502adba5324b151297de936ad000c05277e558b7e1d911e6e5058bd87aa1bfa94f9107e5b497a44b2f98b
SSDEEP 768:xGrv+4UNbdS39kvlYyc47Hucys6BRvi82oP4/z6himo+z2bwn+h:xGbsbw39Ld3imOz6Imoo0w+
TLSH
T1B103CF35E4548D73ECEBC288B04A7A537FF4526385C91AD0E6DE6B4E029B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6a68e413ec503fe12f7c70a9bd39ec2ed89dd34d76021b024fc22da08b9c065a
MD5 3e32a793174dc2c6fecfec0fd4b33337
SHA1 532c1597ee9238daa0690b6f4804923c7a76bd71
SHA512 8cd575d0f824fc7de73d3bb7a37c39fb0fe56cfc456f41b321c9331fd7e54a0d0a37c366a5535e320ab0350aba1c61ae9d4a605f9d50369a39363a6e85d93164
SSDEEP 768:3rv+4UNbdS3WalYycgBh7Hucys6BRvi82oP4/z6himoft2bwn+h:3bsbw3UgK3imOz6ImoF0w+
TLSH
T1C303BF35E4189D73ECEBC188B04A7A937FF4126385C55E90E5DA5B4E059BE5E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e6ef57ce1baef8d3a593d78debdacc201831ed87c0a55dcf51e5406cb97582cd
MD5 6cf283a4be8f85d2d611a04e6a30c448
SHA1 cea00d7a4c9a401c1d6fd30579dc9d875a8364c2
SHA512 b9114ee892f93f0354755ae9bd8b47345941e15367862eef4d8bf28cc6376e7d8bd3e9fe2408366cba15f9d95d2c37ea98e5ab8da0182c53333b78c2f058e82e
SSDEEP 768:ny3432glYycgBU7Hucys6BRvi82oP4/z6himo6tPi9PQyPc:ny34ugH3imOz6ImoaPVyk
TLSH
T1F2F2BF30E8548D73DCFBD699B18A3B827EF4127395C81E94E5E9CB0D19C7A5E071B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18700fe7-735e-4426-a73c-42d1a549be14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\18700fe7-735e-4426-a73c-42d1a549be14.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4200_418751557\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download