f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eM.svg
Size 3KB
Sample260814-pc72nasfld
SHA256 f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab
MD5 40ed26c24cc55b701d2198147f4dd511
SHA1 be79a6dd7f18c178a4419eb98dd433ab090071d7
SHA512 6640d83ea0c3300598f061d3914e839c94e0dec416692dbed5dc1e857898e7467011e2e986cc39131cb59505b3705d679faa8e61cff117e12fc356edaceed39e
TLSH
T10271378876F87EEBC78802970E51D4B84B2F906BD822978DD3CB94D8792C2AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4472	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311831413474220"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{77653F8B-AB37-4927-A399-360618DC5338}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6008	msedge.exe
6008	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6096	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5776 wrote to memory of 6096	5776	iexplore.exe	89
PID 6096 wrote to memory of 5388	6096	msedge.exe	90
PID 6096 wrote to memory of 4736	6096	msedge.exe	91
PID 6096 wrote to memory of 4472	6096	msedge.exe	92
PID 6096 wrote to memory of 4736	6096	msedge.exe	91
PID 6096 wrote to memory of 4736	6096	msedge.exe	91
PID 6096 wrote to memory of 6084	6096	msedge.exe	93
PID 6096 wrote to memory of 6084	6096	msedge.exe	93
PID 6096 wrote to memory of 720	6096	msedge.exe	95
PID 6096 wrote to memory of 5376	6096	msedge.exe	96
PID 6096 wrote to memory of 720	6096	msedge.exe	95
PID 6096 wrote to memory of 720	6096	msedge.exe	95
PID 6096 wrote to memory of 5376	6096	msedge.exe	96
PID 6096 wrote to memory of 5376	6096	msedge.exe	96
PID 6096 wrote to memory of 3732	6096	msedge.exe	97
PID 6096 wrote to memory of 3732	6096	msedge.exe	97
PID 6096 wrote to memory of 3732	6096	msedge.exe	97
PID 6096 wrote to memory of 5472	6096	msedge.exe	98
PID 6096 wrote to memory of 5472	6096	msedge.exe	98
PID 6096 wrote to memory of 5472	6096	msedge.exe	98
PID 6096 wrote to memory of 4912	6096	msedge.exe	99
PID 6096 wrote to memory of 4912	6096	msedge.exe	99
PID 6096 wrote to memory of 5660	6096	msedge.exe	101
PID 6096 wrote to memory of 5660	6096	msedge.exe	101
PID 6096 wrote to memory of 4900	6096	msedge.exe	102
PID 6096 wrote to memory of 4900	6096	msedge.exe	102
PID 6096 wrote to memory of 1248	6096	msedge.exe	104
PID 6096 wrote to memory of 5780	6096	msedge.exe	105
PID 6096 wrote to memory of 5780	6096	msedge.exe	105
PID 6096 wrote to memory of 5252	6096	msedge.exe	108
PID 6096 wrote to memory of 5252	6096	msedge.exe	108
PID 6096 wrote to memory of 5760	6096	msedge.exe	110
PID 6096 wrote to memory of 5336	6096	msedge.exe	111
PID 6096 wrote to memory of 3372	6096	msedge.exe	112
PID 6096 wrote to memory of 3832	6096	msedge.exe	113
PID 6096 wrote to memory of 3832	6096	msedge.exe	113
PID 6096 wrote to memory of 6008	6096	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffc067cc188,0x7ffc067cc194,0x7ffc067cc1a0
    3⤵
    PID:5388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,4958898501627663395,9228990593324735690,262144 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,12224913544748630459,15647450973043355070,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,17248752385493203223,1308317628526395066,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:13
    3⤵
    PID:6084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,8924874388274570494,6864523687102455667,2097152 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
    3⤵
    PID:720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,18237064803775779492,8769416577483184019,2097152 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:5376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,2548371084117479625,8211749060755896937,2097152 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
    3⤵
    PID:3732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,1600522125468682443,12627363217800967401,2097152 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:9
    3⤵
    PID:5472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,16296766969210604741,16642521386379815926,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
    3⤵
    PID:4912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,12805590322057764132,12806599723718384025,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
    3⤵
    PID:5660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,1910840614703333528,4788442927061247972,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
    3⤵
    PID:4900
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,17731815911605531915,11374810892880711880,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
    3⤵
    PID:4732
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,17731815911605531915,11374810892880711880,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
    3⤵
    PID:1248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,9883378710016910355,1585027911503233423,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,14864063900574818191,17006292211186598435,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
    3⤵
    PID:5252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,17695701796961398383,10597047114060332878,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,16437864924062591262,4983021943723345885,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
    3⤵
    PID:5336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,11932128741477614450,11310532657976068977,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
    3⤵
    PID:3372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,743452837176085006,2304022675280229222,524288 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
    3⤵
    PID:3832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6224,i,2684416349487438616,9154765634644735384,262144 --field-trial-handle=2344,i,17919732680361264539,7276508111016935229,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6008

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

137726eb-8d5b-4981-b3ad-ed2927a31788.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\137726eb-8d5b-4981-b3ad-ed2927a31788.tmp
Size 38KB
SHA256 fcbe27c615be80476d7a692f7efa15aade67de595b2ce1fb7c957a3e0c784d0d
MD5 15419aff1eb86aae8ddf9e67b437801a
SHA1 34317193ffde84a5c6ebe0adb0fa2e8bf0b8736a
SHA512 909b7fc0c94e9c2eccbdd961056a7c0203de572b66ff642d89e11d46a4f8d5667886cd76b0dae3348cf297be3848346d4c64ce6faca5f4f70fd90820e852d68e
SSDEEP 768:arv+4UNbdM3rwWiJawwNHXmTWTbc+/feVH1SvyZ:absb+3tpeWn1nEH1dZ
TLSH
T1B203CF319CBA8A37ADE69688748B7A473FF9116399C40BC4C9D96F4D028748D070BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 27f794d3f3e1e3be0c5ab9845162c1476fa29e17506a0f81d47be2e1428800fd
MD5 2b7cf4711ab6d54c4a6fe4638c9c17c7
SHA1 8f1f031ec3a5357d434b1bb41e111c0e1fa76745
SHA512 ccae5edc6af86812feed3d19b5a57aba2c7e8918763c592114cc0d91fd1d37c1c6f2ab18456557cbff2962116e61833f573a19d8ec401fad4303236b88ae52ba
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
TLSH
T187B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 302a929b9120bc919b0e05d3464401adc28c41406e65e1ea3bae2476518ef11f
MD5 0585b4575999d424963e92b8d0d992c3
SHA1 768963ed0a901d34566f2ee690d454735c341005
SHA512 17d8fbc5a5c21d527755c5e57e43b24f48e3983906be5fbf443a80ebd7d94159e8774e099aa8ac244a49ac5bd55135f5d3b416fd7c29609c7ac8553244bf8c58
TLSH
T16561545A3B719AD3DF15A6F351ED444A36F8FB45E50F2E1808345C382C06F9868ED163
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cb5b574c6881490cd6c70da8009b1193eaaccecc833c078f10d6eb9f66f4e388
MD5 dcd09b6233a8147162a323138eb10241
SHA1 131f4a405fdb9a7aed39868d1df626546e9ec477
SHA512 7701470d1001f2c231acada4ce72b31bac80c6db4af87113404631808e47f51cbe2ecee6700d15eb9ac83c40c7fa885d00221f98606c428d6fdfdd40ae802c2c
TLSH
T17041AFF383F4857E9A1196F0AA146E2FCE1D0525432C7D5A89E09E2B93F3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d5c43ff795950e686757a837c0d740920718dedaf396bcd797c7251044f9a317
MD5 62b0b8f4221536201e974e82fbca2eaa
SHA1 45c37759bc70f8276fe38dce3877633fd4e8acff
SHA512 913529f62551aa964e5c346c632564f67da793a31c7e2c5b41b3f7584c5bd4d84b996f05bb87d65c66cdaf605fd744bc1870730be7f5a1b8f3c1fd4ab64bbf45
SSDEEP 192:sxRSRfyM/jK1Ml8wCG/fksnsEZ7d+4G4zoA8p4M/g6+WNIYlzZLm1GUIgV4J:sxRSB8G/fksns6A4GB9/5IZvW
TLSH
T17D62E715AA24A977CCDBD20DFA557F53D7F81463A1944E44AAFCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 10f4caa3d346a91822074b2d590add4ec33685b4f0754ea99a2181f240ebf762
MD5 adb3f01465d0cf0ec3a817513679c372
SHA1 651a3d4055445dfb63d7ea6518b0eddf615c9984
SHA512 5d62b0509076c9c2fa0edc42984b6f91716e90cde4d573cc819ee3e2ef2424f5b0cbfa78577ab89ba4c8672c75e25a201c60edb6ecf7f0f2ed4c4e6241165b94
SSDEEP 192:sxRFRfyM/jK1Ml8UQcCG/fksNmEZ7d+4G4zoA8peM/g6+WNIYlzZ9S1GUIgDq4J:sxRFBqbG/fksNm6A4GBf/5I5vX
TLSH
T13C62D715AA249D77CCDBE20DBA517F53D7F81473A1945E44AAFCCA0C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 54eed7e489a0da10704218cb9410c2db1888d17a92595b44a672bc18d71a0bdb
MD5 d418486883d42a8c58510d441c410de2
SHA1 01ef1dfdc85ddc65a51f6217fb6aadf0907f1616
SHA512 00a12a68f034ca317e1b1d73e2165acb9ec1a53ddc9bb4aea9ca4259c5d0ae4218844af3e7658efc59aa6d598306cf4d6442060c58df14f0d74a38378648da2b
SSDEEP 192:sxRFRfyM/jK1Ml8wCG/fksNsEZ7d+4G4zoA8p4M/g6+WNIYlzZLm1GUIgDI4J:sxRFB8G/fksNs6A4GB9/5IZvp
TLSH
T16862E715AA24AD77CCDBD20DFA517F53D7F81463A1905E44AAFCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 8604b0c6604cfa1e62b0e1054360271758fc6230b37c9f827815d7c8e474f198
MD5 c56e33655e03a10e0a428fc9689a8582
SHA1 fa497fd0ce79bd77f34261ad9d341d23dc988902
SHA512 1df7f13dd1b87f127e95a1962b0c9d4ab3c092c7a24bc91743ef9533fe4d9c44d1e5f4cba0168c8adabd89f650d1bf928ef9cafad7ce37fc310e9928841c30ff
SSDEEP 768:dhRA0j7pLuL7ExWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3QClua13fnroPx:dhRA0VE7ExWgg+fAJu1jai8alf0gHE
TLSH
T107E2ED3B680CCB7E4F804A9CEC29BE9E6DA802CF56D8C95447EA841C03C5BEF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0829085a8c882af5c9307c9d8699bf3a2fdad1b63145a959d4217e5185a6cc9a
MD5 fd7d1ab7b22bcb01fd5652372573a395
SHA1 a33f7507b83f9498493631bc8d7eb1b303cfcbe9
SHA512 4b446106652ff5854b290303ce0cf977069c624adf321a439ab3ffe85da3391d21443f0f0189de8e4db38504aec37e49e75d42dcda3481939e3d18066c1f4998
SSDEEP 96:KR6/masMs6WURJgK6K4PgQ6caS5oqzHOxOOOfO7OJOrOvObWOfO8OqgOjObK4OiM:C6/masMsFURaKCPgQBaS5oqzHafG6MsZ
TLSH
T12C9157A1787552403DBEA61C81B8995B86C2B4B7700CA96B3F6C53964F67E028DFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0e53897027c68f2512b65637919fc812032b4d273abdf44d0bcf5eb58d6d7ef8
MD5 dd0e6d1e610899e8a8331fc9821afa3e
SHA1 9e8d1d2c8ec2eaaa042537071011dfad43ae6d62
SHA512 4fd7fb3c173c5f7cde3ae45dfbe6d466c129da97a8e4916b5763ade99558edc3b0fc4906e5d5ea84541888d08f6e142bcf99b9f459628d04e0b0e9eaa85b805f
SSDEEP 768:zFQK3hwgxrhcaw7NHXmTWTbc+HpPi9Pwt01:WK3qeWn1JPHt+
TLSH
T1AA038D71DCA5DA2BADF79FC5A64A7A06AFE401A385DC29D4DEC8AD4D108319E0307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e4178f7c97893753d888c9ba72bd68f8c70b889e0bbde798eb40d9831e38060d
MD5 9bd32157de8eac0a7256db4c633b95a8
SHA1 f5b4931be3ef92244adfd383c0c2e8e338424f51
SHA512 9e4dff581fded6254349232ea0803514fa4d5a0d85d758a61269944ca8e6b6d68e2f4c78b90518e0c2478387935fa58cf747fe72379fbd0fb8b2425b08dc230b
SSDEEP 384:nHZcIv38NSV526OZCvczRfY9bY5w326QPlLJQXmIkdP9IimIMWEfMbc+HpPOPrXV:vv3HrEiJawyNHXmTWTbc+HpPi9Pwt01
TLSH
T1ECF2BF70DCB95A27ADFAEEC965463B06AFF50263D1D81984CDDCEA0D118355D030783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 12ee4689b0971cd7a16fd857337fb2e2ab07773b670a217fb49018c8ed389572
MD5 3851fe95feec0bffa1e73c58c8a4f78a
SHA1 848dbc35c1b011a5944581363ac40681c1a88929
SHA512 d56be393793fd58381ec5a881ee8c1656b843285f6c44743660d2783db861b30537e4e9cd2f5b575b24ac387d01ef3e9b835f4764839fb329bbc9d2d237ee7d3
SSDEEP 384:n9ZcIv38NSi526OMCvczRfY9bY5w326QPlLJQXmIkdP9IimIMWEfMbc+HpPOPrXV:lv3sQEiJawyNHXmTWTbc+HpPi9Pwt01
TLSH
T13EF2BF70DCB99A23ADFADEC965463B06AFF90263D1D81988CDDCAA0D118355D030783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d25afcc50cfa9b26bfb344efb7feedd74f7fda80059d3b59dff331ebb0d75ff0
MD5 c0ca55e475e665e6e0500cb8075777cc
SHA1 7d78ff30c7e0a6730b68f464220e04ed60d825dd
SHA512 20c58675da739a5e41ee0d35d26f3bea2bc160cee1f052cd9d504b366ccbcb7d08d7d5f5b290989557c4b55f5c87dd648a5e0b54bd045b3507c686883d54957d
SSDEEP 768:Jrv+4UNbdM3JWCiJawGNHXmTWTbc+epeVH1SvyZ:Jbsb+3x7eWn1yEH1dZ
TLSH
T17E03BF719CB99A37AEF69EC8744BBA077FB8116384980AD4CCD96B4D028748D030BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6275dd6c-632b-416b-b41b-9ce0c312f9bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6275dd6c-632b-416b-b41b-9ce0c312f9bd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6096_1872436209\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download