d08d8cefc21783960a89cfffea6755499860559e53b0645ff5d35ecf0ba2497d

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v11K-m5-eL.svg
Size 28KB
Sample260814-d6341stfqa
SHA256 d08d8cefc21783960a89cfffea6755499860559e53b0645ff5d35ecf0ba2497d
MD5 f2f7df101c9bf5d75ce49d42491e9f8c
SHA1 bfa147420c27f8f75982ba6d99be1b938f30cd3c
SHA512 85aa10c95f787a0460395f4aaaa5184eefa4b66ebfd48e0931d021752560f69fee8e79a0788d026d5c00ca8258cc558db5121631ce5c6bd0df1410ceb6c76dba
SSDEEP 384:ckwQGRNPUTQLwwizqwaowD66Uu9dqbvCK+E9xrYTxkk4sQsDI:c5QGvji
TLSH
T125D24D6437F83C9B8BCC03478D52EC68465FA8B7C498678D97C7D4E8A988368F76C560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3868	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311522992157467"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{403B8B0D-44D0-49DC-82EE-742A7F87CB4D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
888	msedge.exe
888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4136	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 4136	4148	iexplore.exe	88
PID 4136 wrote to memory of 2400	4136	msedge.exe	89
PID 4136 wrote to memory of 3868	4136	msedge.exe	90
PID 4136 wrote to memory of 5832	4136	msedge.exe	91
PID 4136 wrote to memory of 5896	4136	msedge.exe	92
PID 4136 wrote to memory of 5832	4136	msedge.exe	91
PID 4136 wrote to memory of 5832	4136	msedge.exe	91
PID 4136 wrote to memory of 5896	4136	msedge.exe	92
PID 4136 wrote to memory of 4080	4136	msedge.exe	95
PID 4136 wrote to memory of 4080	4136	msedge.exe	95
PID 4136 wrote to memory of 4080	4136	msedge.exe	95
PID 4136 wrote to memory of 1020	4136	msedge.exe	94
PID 4136 wrote to memory of 1020	4136	msedge.exe	94
PID 4136 wrote to memory of 1020	4136	msedge.exe	94
PID 4136 wrote to memory of 3380	4136	msedge.exe	96
PID 4136 wrote to memory of 3380	4136	msedge.exe	96
PID 4136 wrote to memory of 3380	4136	msedge.exe	96
PID 4136 wrote to memory of 2212	4136	msedge.exe	97
PID 4136 wrote to memory of 2212	4136	msedge.exe	97
PID 4136 wrote to memory of 2212	4136	msedge.exe	97
PID 4136 wrote to memory of 3240	4136	msedge.exe	98
PID 4136 wrote to memory of 3240	4136	msedge.exe	98
PID 4136 wrote to memory of 5140	4136	msedge.exe	100
PID 4136 wrote to memory of 1296	4136	msedge.exe	101
PID 4136 wrote to memory of 5140	4136	msedge.exe	100
PID 4136 wrote to memory of 1296	4136	msedge.exe	101
PID 4136 wrote to memory of 6128	4136	msedge.exe	103
PID 4136 wrote to memory of 5524	4136	msedge.exe	104
PID 4136 wrote to memory of 5524	4136	msedge.exe	104
PID 4136 wrote to memory of 1108	4136	msedge.exe	105
PID 4136 wrote to memory of 1108	4136	msedge.exe	105
PID 4136 wrote to memory of 4312	4136	msedge.exe	110
PID 4136 wrote to memory of 4300	4136	msedge.exe	111
PID 4136 wrote to memory of 976	4136	msedge.exe	112
PID 4136 wrote to memory of 2376	4136	msedge.exe	113
PID 4136 wrote to memory of 2376	4136	msedge.exe	113
PID 4136 wrote to memory of 3820	4136	msedge.exe	117
PID 4136 wrote to memory of 3820	4136	msedge.exe	117
PID 4136 wrote to memory of 888	4136	msedge.exe	118

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v11K-m5-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v11K-m5-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x35c,0x7fffa11ac188,0x7fffa11ac194,0x7fffa11ac1a0
    3⤵
    PID:2400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,17958817592924034522,2576201060729402549,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,7120134184401423439,5819323351588961614,262144 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
    3⤵
    PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2216,i,12523332140467353363,8840668686390765500,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:13
    3⤵
    PID:5896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,11507203131191929075,3965078265190054330,2097152 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:1
    3⤵
    PID:1020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,61820957965547973,14652333810356879032,2097152 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:4080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,6037391703384953922,12485759647974713985,2097152 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
    3⤵
    PID:3380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,9791265239208812965,18214124061119559052,2097152 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:9
    3⤵
    PID:2212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3088,i,666396043501045528,9856936751017239983,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:14
    3⤵
    PID:3240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,16460432566724507766,10695899047916687366,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
    3⤵
    PID:5140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,17585143821294219863,7439168344285854486,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
    3⤵
    PID:1296
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,638639935455107950,5222238326698257374,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
    3⤵
    PID:1032
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,638639935455107950,5222238326698257374,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
    3⤵
    PID:6128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,3327031623682864248,9133298110570090000,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
    3⤵
    PID:5524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,13746352203103404523,9026372346541279118,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
    3⤵
    PID:1108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,9780877625511018421,6291095591758385930,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
    3⤵
    PID:4312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,15605152863554891062,1301907834248194017,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:4300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,6842149605368778997,11540438238551607816,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
    3⤵
    PID:976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,4440384341910200501,3638428629180130107,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:2376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,5472696167091771475,7860088433177456087,524288 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:3820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5696,i,3528669895523331024,15641139782367903820,262144 --field-trial-handle=2676,i,11218286956586238492,15098367159692374040,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:888

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6124

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a7368b48c848b3bdd44fa81a429b9d3a7f3f18b5903d8d88a30bf7ec56035874
MD5 a0db2843233e971e5d8514dba00315f0
SHA1 42b6da09528a0f97fca43729873415228f0c5109
SHA512 b8d10a722b83071a68947c259bddb0747d8960a5c0c8c40a552c647bbc53c92c91e13e55d60768fdd8d91f160c7c4afede80a396e890c9e117eeb9d1b23cfebd
TLSH
T17741FC5CA33F8ECDE7A80972BCF1C6843E7DB8CE028BAE5154A4127E5AC638405611E3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f737.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f737.TMP
Size 2KB
SHA256 997b20a310ac4ccb9ef3a1faf27f3aaa7c6e0b7b70ce96afd0240ab88f3408dd
MD5 7c894647204878ac689c760521047073
SHA1 4ac7e1e29dcb73ac61f77e3b36cb7b1bbd89e98e
SHA512 0336efc111627bf82b79d12f365a7587c9c8e1e4ce5197ca20b4d3b1bb128e3b576fda97eac72fbbd49e378ecb8fd6eb03e8fb3e2e69260add3d459a4b25d849
TLSH
T10641FC5CA33F8FCDE7A80972BCF0C6843E7DB8CE028BAE5154A4127E5AC638405611E3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 998e9e860530aac82fc746d625eedb664174979c9a67ebe52866981305e1dc30
MD5 8b08900db7aa9c254356bbdb65d51600
SHA1 f6c17dfca5ad3327009b35955123f0cf45fcafad
SHA512 6ae10f9f9f9adeefa0e5eedacba43af96bb70a6c52be6e30cce3ce41fd2dcf165c6b7157809b9af8bda45a9dfbba23587ef61cb8f1034d503a85afa7b309370f
TLSH
T1C3419EF383F4856E8A1156F0AB186E2BCE2D0915432C7D5AC9E4AF2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a138250f0ed5d9435b38a0ae6b83c353476da52b2126a6d43a4c84dfa9ad0aac
MD5 0872bb282f55aa03346010f89c4ded61
SHA1 b5f4d9f2fc14087ebda395e24e35970482e006b5
SHA512 6305dd76a16a705c07e3f8d172830c98b06c720569c418e09767c2ee78033905af53d5fdcf940881bb85dda6f8a45e12cf6ad096af6b4f1f93d2c416c485c061
SSDEEP 192:sxRIRsCj/fos3sAyoZ18zoA8p4k/g6+WNIYn8UghaGbsEIgD1bJ:sxRI5j/fos3sHWf9/5ITrjD
TLSH
T15E42B6167A28A97B4CCBE219BB55BF53D7F95072A0E01E48AAFC961C04E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 19b147213fd7616bd268010f148d5422d30222e24d82a1f5a24a2fa4bf1839f9
MD5 4a9c3c50464a752920136b0938122c16
SHA1 7f618346f4f764dc559b399368e674042c16ee6f
SHA512 1bb384ce045beaf470dc43f7da4c81c473479018281189e0e3a08946cfa74653b470a072acefa10ba25b546f64f174ceec42fcd05e7dcb9707d9e71ea6e3a350
SSDEEP 192:sxRjRsCj/foscsAyoZ18zoA8p4k/g6+WNIYn8UghaGbsEIgVbJ:sxRj5j/foscsHWf9/5ITrjv
TLSH
T1AF32A6167E28A97B4CC7E219BB15BF53D6F95072A0E41E48EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b63f44f62b321ec2274169d3907e328ec4f1f36f978b3ff8a21194b2ab7fd4a7
MD5 a647388a24d9ba0d78af5d9e2394fb1a
SHA1 e7cb6f4ed4ab269c631bd7362751cb367f7555d6
SHA512 973d392ee6abd975fb38bbd7b299c516aec3862613cb3bc70d9ca93b4ae6afd1a76ca28d32e3a19b59bccaa5c5772a795cf1a6610f7f66d1e392a30df2ebca8c
SSDEEP 192:sxRIRsCj/fos3sAioZ18zoA8p4k/g6+WNIYn8N6haGbsEIgDPbJ:sxRI5j/fos3snWf9/5ITyjp
TLSH
T11E42B7167928697B5CC7E219BB55BF53D3F95073A0D41E48EAFC961C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 bf34a59be2e0cedf3eb5c3d5873290d646466f45f6fd97b75d8bb368027a5747
MD5 8c34770d8404a6ed7cbb8cc6433d6b4b
SHA1 b4a4b8d68243362bd838607cd9e58c7cbb02e09a
SHA512 fd61e0bcb53796e9577716ef45faeb1ff5baae6566ee65967c8ac5410619b2d1cbda00c836e629d5fff59b97ad5447574745d4eac80e757bd246cfc91cde9fc7
SSDEEP 768:wb8dKg7pLuL7r6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVexmu46MrohZr5L:wb8dKsE7r6Wgouf6Mu1jalxmV6XLR
TLSH
T19ED2DA7B740CCB7E4F800ADDEC19BE9F6DA802CB96D8C94447FA951C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 563049c9f90658ab3d74b5cb74de21c346307c895b14da863fef5c4807817371
MD5 837bf9271f9fa4d88e02da8ad5857929
SHA1 3226bb0d1922674ba465b3fadb447bd9b118b6b7
SHA512 f6ddd2e323b0afcd0487320522b2c75dd5e42315930fc8c6df2b23fac38718bba0e4db2e012ab02136d60ad020d4fd2561f04a6a228113a85a6dbde7cf03b64b
SSDEEP 768:jF0rv+4UNbdf3hwg20g1DZ1OO0khDuNzc4ReyIsPqPi9PVY:ibsbt32tutc44bsCP1
TLSH
T1C613AE32E858C967ACFA9B85F54B3683BEF410A7C4C51A94EAD95E4C09471EE170FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f81cbfa03ddc46e98b212f47b5a9ff52d7f9cfde937a4f3d48b3a5d4ca353027
MD5 ba2805de9e5498faec247a6fe858ee48
SHA1 b75389aa9dbdeb4c81a3d8bbda737749b1a1098b
SHA512 bf2b17f9ab8955294ef7714f7dfba05248eaadcde740b03b4ac4c581722908ab4f6edc606f5effef2c3ed7e240d404f86b520d2fb3274ed9d42b895b8c9b2d1e
SSDEEP 768:Yrv+4UNbdz3B8F1DZIO0khDxNzc4ReyIsPqeVH1S5F:YbsbF3Wtxtc44bsCEH1W
TLSH
T17113CE36A868CD73ACF6A646B1473A937EF82167C1C80E94D9E95F0C4A471DE171F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 22c1de8b24f2ee2adb017a092c0e6d8d15ce738bade8ff84d89f372e5f44d10c
MD5 91cce90570441739ef0c3dc69b0b008a
SHA1 f858ebbed1d705b572cca9f21c1e65f972a5f9a4
SHA512 009895e101320bcb42ad8d936113cdb06d8018ee20b50a6d32d2ec342cd03c21aad0fc895ce125cca3d810a993d297fc38f6cce3dc74bee57b32af6011b73f0f
SSDEEP 768:0rv+4UNbdz3i8g1DZIO0khDWNzc4ReyIsPqeVH1S5F:0bsbF3YtWtc44bsCEH1W
TLSH
T13E13CE36B868DD73ACF6A646B1473A937EF82167C1C80E94D9E95F0C4A4719D170F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2c6ebc503ccc28cd032c512cfaf8161a9856c88cdd65f29ba504b3b4af143068
MD5 ae52beb9682456e8910e08e688531940
SHA1 ceea7274cd7b330c21f349d2855285feba0e9613
SHA512 7e70bf2d72f1e9338305a7b12674f33be5ccad273efac17af96c434c670f4475f2fe084321b5483e940a65dd99670a79ca835527ec8d2abae8ee16b6924de6dd
SSDEEP 768:6rv+4UNbds3ijDZIO0khnNzc4ReyIsXbeVH1S5D:6bsbS3ANtc44bsLEH1Y
TLSH
T17303CF33E8689977ACF66685B14B76137EF89127C2981E84C9DE5F0C4A4B1ED130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2c0d4a04089b37ea544b41f68a263dc3a2914bdd52e1092c783ba6ee488263bc
MD5 f8f118531f40981f978e26917fa3991c
SHA1 46739d4aa39d9db5c529305b305f9ccb929d5053
SHA512 4f6f4ce44646b493a417bf06f7ae36c70002c63992aa9a75181fbff8f68631e4734ef9b2ffb90b3182e7519ed3380877610e8a820c6de4f2ab4a43ce9e3cb288
SSDEEP 768:Arv+4UNbds327DZIO0khDqNzc4ReyIs2qeVH1S5D:AbsbS3Ytqtc44bs9EH1Y
TLSH
T12E03CE32A828CD73ACE66686F04776933EF82167C5C80E94D9DA5F0C4A472DD170F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73958e22-8f30-4505-88f1-fe368e4f69f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\73958e22-8f30-4505-88f1-fe368e4f69f5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4136_917400375\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download