66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 02:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m0-eL.svg
Size 3KB
Sample260814-chal5abj7x
SHA256 66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73
MD5 95b7e2e1d8065db4ac2ce8927e95981e
SHA1 9f303ce03119c2588fcbb4f320794622c61045e5
SHA512 88d142db6604e75c03e021e409b771a60808f39568002c877a1bb39f1dcb57f89da8c819bd1a76d8cb929edd7c1405165884108a2abca02f298c6a497219887b
TLSH
T1E871268876F87EEBD7C802570D51D4B84B2F946BD822978DD3CB90E875282AC735D5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1288	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311466579611293"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{96FEA48B-B462-45B5-936D-BF70FDE5EA92}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5756	msedge.exe
5756	msedge.exe
5756	msedge.exe
5756	msedge.exe
5756	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5756	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1136 wrote to memory of 5756	1136	iexplore.exe	89
PID 5756 wrote to memory of 5880	5756	msedge.exe	90
PID 5756 wrote to memory of 2060	5756	msedge.exe	91
PID 5756 wrote to memory of 1288	5756	msedge.exe	92
PID 5756 wrote to memory of 2060	5756	msedge.exe	91
PID 5756 wrote to memory of 2060	5756	msedge.exe	91
PID 5756 wrote to memory of 260	5756	msedge.exe	93
PID 5756 wrote to memory of 260	5756	msedge.exe	93
PID 5756 wrote to memory of 1888	5756	msedge.exe	94
PID 5756 wrote to memory of 3024	5756	msedge.exe	95
PID 5756 wrote to memory of 1888	5756	msedge.exe	94
PID 5756 wrote to memory of 1888	5756	msedge.exe	94
PID 5756 wrote to memory of 3024	5756	msedge.exe	95
PID 5756 wrote to memory of 3024	5756	msedge.exe	95
PID 5756 wrote to memory of 2720	5756	msedge.exe	98
PID 5756 wrote to memory of 1500	5756	msedge.exe	97
PID 5756 wrote to memory of 2720	5756	msedge.exe	98
PID 5756 wrote to memory of 2720	5756	msedge.exe	98
PID 5756 wrote to memory of 1500	5756	msedge.exe	97
PID 5756 wrote to memory of 1500	5756	msedge.exe	97
PID 5756 wrote to memory of 792	5756	msedge.exe	99
PID 5756 wrote to memory of 792	5756	msedge.exe	99
PID 5756 wrote to memory of 1744	5756	msedge.exe	101
PID 5756 wrote to memory of 1744	5756	msedge.exe	101
PID 5756 wrote to memory of 6064	5756	msedge.exe	102
PID 5756 wrote to memory of 6064	5756	msedge.exe	102
PID 5756 wrote to memory of 3456	5756	msedge.exe	104
PID 5756 wrote to memory of 952	5756	msedge.exe	105
PID 5756 wrote to memory of 952	5756	msedge.exe	105
PID 5756 wrote to memory of 4180	5756	msedge.exe	106
PID 5756 wrote to memory of 4180	5756	msedge.exe	106
PID 5756 wrote to memory of 2680	5756	msedge.exe	110
PID 5756 wrote to memory of 5548	5756	msedge.exe	111
PID 5756 wrote to memory of 5108	5756	msedge.exe	112
PID 5756 wrote to memory of 4252	5756	msedge.exe	113
PID 5756 wrote to memory of 4252	5756	msedge.exe	113
PID 5756 wrote to memory of 4500	5756	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m0-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m0-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ffcef4ec188,0x7ffcef4ec194,0x7ffcef4ec1a0
    3⤵
    PID:5880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,17873936478927190193,894143579420940699,262144 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
    3⤵
    PID:2060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1621515529754464759,14720026417143529794,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,10888237235644850123,8356169389156886698,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,17063076317040847637,10836636819029232680,2097152 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:1888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,5300967860272295366,1714759762873668294,2097152 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:3024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,18125812229502205876,16264144314958123618,2097152 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
    3⤵
    PID:1500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,12817855466618296348,7652096738685551774,2097152 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:9
    3⤵
    PID:2720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,17407954029040055995,17614512791536090430,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
    3⤵
    PID:792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,5569712120842007554,12349197935011524354,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:1744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,6860960340906855250,15445938165993934186,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,13270654686450537550,1199754227411429386,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
    3⤵
    PID:2920
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,13270654686450537550,1199754227411429386,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
    3⤵
    PID:3456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,17049085427595752689,1909893321446601691,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
    3⤵
    PID:952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,13511930932939607168,9707865950088564003,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:14
    3⤵
    PID:4180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,3371243337627836404,17590047721449257194,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
    3⤵
    PID:2680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,13371314832312211499,9437076215206449188,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:5548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,11515017548293822754,9956180959913389244,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
    3⤵
    PID:5108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,10699170196204890140,17259428046708438891,524288 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:14
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,14967742423621995317,3748516140440714981,262144 --field-trial-handle=2336,i,17300883704498935773,15465029528760941702,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 540e1f002cb6976b6bddfa9fd959030c7a4bbb70b9e3e7df0a2f4bce1f548ed5
MD5 53a6079109848448e38edf57ed10cbff
SHA1 89eaa85bc157de2982973325f539de77ae5006fd
SHA512 54aef5836fd36193dcd04aa64ee900070118da4fe6c94029e644a91dc73a3cbdb1f7b911139e0a632944161b1b881d81d9c9e18fcdfa64ed496b43136315b34f
TLSH
T120511AB013B2D9D3D765877357E26A8E36F0945B26072E5980643D758906F2CDCF142F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 acf9404fd112120d4a633883bb6439612acd60236ca2928484ed018ec5f41055
MD5 fe2973ba02c551658313e1decf39240c
SHA1 47c6b4201e7fbc8b5d17ff540494a7b712935cb7
SHA512 6bb7dfd358ac3bbc858b26f96f3ec0a891b5a3e9bdaae9fcffb7191c755ed2fe236e4e2359a83eb5d75009ba5044fbd002f02cc04c66ae0699783adac404a25a
TLSH
T1E741A2F783F4857E8A0196F0AA186E2FCE2D0515432C7D5AC9E4AF2793E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 490a04915eb1b48f0f5aacddbd975f33a59c4e1f576fc9930c1aee366653504f
MD5 0f647d9a175acb0eec96ef96d183991b
SHA1 19b9f6fdc925440de960104c1aa74421984db341
SHA512 af9093bf9ee8cabf44a92c4417388ca899e4c35d4a5b98ba60894cb6d0ea06c62addb0d0ab5df51344393f5a2e267ca5c70536cf79b289af5ab5dc4bee868448
SSDEEP 192:sxRJRyCL/foks9N5Z4qN3jzoA8p4P/g6+WNIYo5o9YqGQMIgVPJ:sxRJXL/foks9NX4qNiK/5IYin
TLSH
T18942B7166E28A93B4CC7E61DBB56BF53D3F9103361902E48EAFC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 92181945c324e646abf9182373eeab3770428e619b40db210b5788f24a019484
MD5 e9c01b006d9fcd2f0f8ed48704699fa2
SHA1 4b12279ceac47dcff4bae3f85a4a3360bed33bc6
SHA512 ba6067445660a33df0976cf93c8579e43fda84c8ebe15ffe93ac276307e44d881d9e8c0c7723aba6cad337bab93c0c7a2841f98944266ec80e2eab513998076f
SSDEEP 192:sxR2RyCL/fokshj5Z4qN3jzoA8p4P/g6+WNIYoNm9YqGQMIgD/PJ:sxR2XL/fokshjX4qNiK/5I2it
TLSH
T16542D8166E28A93B5CC7E61DBB56BF53D3F9503360912E48AAFCC61C04EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c484f291c7a29cf5e0299dc1777d78f57dcb53930d8a7f65d685475d340aedad
MD5 73019d4abde5caf2517be4d66b043541
SHA1 1585d5b8067c7fc3acf7cb67764581b7508221d0
SHA512 82dcf2e07bab714ac029935441d1519280c9c0dad68ecd56c54141e44f12c390f8a853ce2e39c02ef53e910f83ff99fb99f97788de885e98945382ead383b5f8
SSDEEP 192:sxR2RyCL/fokshN5Z4qN3jzoA8p4P/g6+WNIYo5o9YqGQMIgDlPJ:sxR2XL/fokshNX4qNiK/5IYi7
TLSH
T1D642C8166E28A93B4CC7E61DBB56BF53D3F9103361D12E48AAFC961C04EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 b2a6a408599eaccec2641b07ec846663c7944f3035cf9e1ddcf85b80049e9ca4
MD5 bc25d24b243aba649fa889f3daa1b6b1
SHA1 fd00c33b4e23a642b4bc85dc93ec7134cb2c4bb2
SHA512 117953c3093b107951df688a70451a65e7df2437c0104db9913f41fb24f2da173efaac094e1700b3ea4341f65138bb5b0bd8281e292219a4aad13b9db2dd9edf
SSDEEP 768:j26Hvo7pLuL7MRWgs2f028F1+UoAYDCx9Tuqh0VfUC9xbog/OV2LBVuwmro9VMe6:j26HvUE7MRWgs2f02u1jaFLB4wdPlE
TLSH
T100D2DA7B640DCABF4F800ADDEC197EDE6D6802CB9698CD8047FD941C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4df2044950b1ffd6172c18a98e6531b47953caf000863b58d18686081e780486
MD5 fecda30f50d3c0a5cc4a006b1daf9fde
SHA1 b376fba558312bdde7e09a8482554c33ba5f6fe9
SHA512 56b48528c007b00a044408daf46653d4cf9e208b5614e6e7f64af21e7924a3743544dd6555c1f3fceb56ea9f0fdf07cb80f172612ab2a888fca74454351a65bc
SSDEEP 96:KR3gFB31lpWRekgJpK4ggHpcvHG5FaHoZs4q26gWeDzgggK41gCgcwgziGuFKes0:C3gFB31lERe1JDggH2vHG5FaHoZs4q2n
TLSH
T1D191F25076BA42443C3E661D80E88E1BD9D2B4737115A52B7BE811765FABE028CFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6708888f9a68109da6784f8e1f8be2ec3a1f2a90060898a28bcafaa857814fe6
MD5 b8dc6bf974eee67d0254db1ecc8d98b3
SHA1 adc532b66cb04cefe4f6f6a9e5b2ed92f0bdd256
SHA512 0dc5c92dea4d94326729a0f4db076a8c9f4ec268af7dfa0245ffe521d9a92f7d99ec1a4b2deeba2dc005632c04beb58e2654ab67974a561d02e5a0993729f470
SSDEEP 768:BI3Z085VsOW8FsmbONXyer1IRCzni9sPi9PItS:BI3zXdbSIqnXP7tS
TLSH
T128F29D34E565EE135CE2A7C6B206B746AFF81067C6C84AC4EEE95F4D00C769E070F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4fe6dfc7410dcf5ec09c7b180c965038fade5fce5798cc25532de52db0212acf
MD5 c39bebcd9a1d25546d473fe332b70356
SHA1 cd89787f979f9c8733c3bd113b1704dbe46f2b35
SHA512 40975e6268ff5b0210c149996dec92460b2a85a65f8628a322376ab2347cefb924e53a2182bb9316af1ceaa9912940da94dddcaef04c4b04ed83566c2f4c6400
SSDEEP 768:hrv+4UNbdz3w9/TBOW8FxONXyer1IRCzniBXeVH1SK7:hbsbV3maxSIqnUEH1l
TLSH
T15803BE36E5A8DE338CE2A3C5B14B72037FB86057D6840B90D9DE1F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b33de006245d74e47ecc9edf43cc43e7dacd4901db0b6d61ae80eaffe04cd47d
MD5 42e2a77127f8832853edd5fa71252a64
SHA1 6f948507d296dd43fc1c9b8d95174754a156b005
SHA512 8ca46e53c20992b32e2195556a56e29b53e5c1b226830a7156477364935c96692311e1d1cfd8ce7ff7a43d086c4dc3e79d149aba398ef3c0d1712380b3806f01
SSDEEP 768:9b3WQ8K/TBOW8Fsm4ONXyer1IRCzni9sPi9PItS:9b3vad4SIqnXP7tS
TLSH
T1ADF2BF30E5A9DE134CE5F7CAB1472342AFF8206BD9C44B54EAE99B0E059761E070F81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3bcc50e90406eda2f99ddd28cba2a28705b5788ad85dfaf1215eb2584878b27b
MD5 91fcddb9608f51be103ae07adf9329b5
SHA1 387bf031ad1c66261ab0b430a1607bf6eb9a654c
SHA512 401f876c2ce7405892a7da7b700de918d4417ed741de50633208a997b37cf76003acecc6fb0a9e35400d927f6b0da714b4db5d26a7efc63c52dd2fac6af16b3a
SSDEEP 768:Cb3Z08K/TBOW8Fsm4ONXyer1IRCzni9sPi9PItS:Cb3gad4SIqnXP7tS
TLSH
T13FF2BE30E5A9DE134CE5F7C6B1472342AFF82067D9C44B54EAE99B0D059765E070F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a297af51ab1894168761a0b3612e4938d0c70b4dfccecb2616eb29b39305816c
MD5 4d45443d9b4210c69f0900348d422480
SHA1 39c997a739fff7d436d1fd5720c4158277360bc7
SHA512 37ac762700d4c8f5a24e41bd04de6914d0a496d8423169bfaa9e6ee49fd2e2ef3bf43322ad8790b4499cf21caa71d53185e8de7b130371cfd6263e5374bc2d3f
SSDEEP 768:Drv+4UNbdz3C8E/TBOW8FsmBONXyer1IRCzniwseVH1SK7:DbsbV3madBSIqnYEH1l
TLSH
T1FF03BF31E1A9DE334DE6A385B147B3437FB8206B89840B90EDDA1F4E069759E170F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

356c60b7-0517-4e77-963f-d4738dfe2912.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\356c60b7-0517-4e77-963f-d4738dfe2912.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5756_973242390\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download