3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v16P-m2-eQ.svg
Size 48KB
Sample260814-qk4vmsvamd
SHA256 3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a
MD5 36e987192c44bf8a98cc83525c6860ab
SHA1 c2bbafef0aa4819ca038878ed030e235bf20353e
SHA512 51b10e0979e1185dd44631fa0e92cb6839b417135169b8d23b95268775147c7b87cb47a12307570476a595a81167526992f137c9009e50d73a3e1d80080f7f73
SSDEEP 384:cl1tz67bJ/MErSDkAPI9Fs0NsHJCixiIX1dkWs4Cl9sRCOWnCAX+3utANO:cDtimp7s4k9sySO
TLSH
T1202350B537F47C9B8BCC034B5D42EC6C45AF94B784986A8C9BC790E8A548368F7EC590
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5660	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311872223845012"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{71F6A14E-7A00-4530-950D-461BD13651D2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4188	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5988 wrote to memory of 4188	5988	iexplore.exe	90
PID 4188 wrote to memory of 4272	4188	msedge.exe	91
PID 4188 wrote to memory of 3876	4188	msedge.exe	92
PID 4188 wrote to memory of 5660	4188	msedge.exe	94
PID 4188 wrote to memory of 3876	4188	msedge.exe	92
PID 4188 wrote to memory of 3876	4188	msedge.exe	92
PID 4188 wrote to memory of 5728	4188	msedge.exe	95
PID 4188 wrote to memory of 5728	4188	msedge.exe	95
PID 4188 wrote to memory of 6080	4188	msedge.exe	96
PID 4188 wrote to memory of 6016	4188	msedge.exe	97
PID 4188 wrote to memory of 6080	4188	msedge.exe	96
PID 4188 wrote to memory of 6080	4188	msedge.exe	96
PID 4188 wrote to memory of 6016	4188	msedge.exe	97
PID 4188 wrote to memory of 6016	4188	msedge.exe	97
PID 4188 wrote to memory of 372	4188	msedge.exe	98
PID 4188 wrote to memory of 372	4188	msedge.exe	98
PID 4188 wrote to memory of 372	4188	msedge.exe	98
PID 4188 wrote to memory of 240	4188	msedge.exe	99
PID 4188 wrote to memory of 240	4188	msedge.exe	99
PID 4188 wrote to memory of 240	4188	msedge.exe	99
PID 4188 wrote to memory of 5560	4188	msedge.exe	100
PID 4188 wrote to memory of 5560	4188	msedge.exe	100
PID 4188 wrote to memory of 3964	4188	msedge.exe	102
PID 4188 wrote to memory of 4760	4188	msedge.exe	103
PID 4188 wrote to memory of 4760	4188	msedge.exe	103
PID 4188 wrote to memory of 3964	4188	msedge.exe	102
PID 4188 wrote to memory of 5824	4188	msedge.exe	105
PID 4188 wrote to memory of 692	4188	msedge.exe	108
PID 4188 wrote to memory of 692	4188	msedge.exe	108
PID 4188 wrote to memory of 5228	4188	msedge.exe	109
PID 4188 wrote to memory of 5228	4188	msedge.exe	109
PID 4188 wrote to memory of 1340	4188	msedge.exe	111
PID 4188 wrote to memory of 4204	4188	msedge.exe	112
PID 4188 wrote to memory of 4220	4188	msedge.exe	113
PID 4188 wrote to memory of 4280	4188	msedge.exe	114
PID 4188 wrote to memory of 4280	4188	msedge.exe	114
PID 4188 wrote to memory of 3424	4188	msedge.exe	118

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v16P-m2-eQ.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v16P-m2-eQ.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ff87f78c188,0x7ff87f78c194,0x7ff87f78c1a0
    3⤵
    PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,6020834797255407965,460797385447008113,262144 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:2
    3⤵
    PID:3876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,6497418349918774401,3963525213767445886,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,9557440499919506855,4267487870379663704,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:13
    3⤵
    PID:5728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,8224900070123811101,4780209252263756565,2097152 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,8062617875743786470,14890160305192854981,2097152 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:6016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,612168968633115775,8816802501234897740,2097152 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:1
    3⤵
    PID:372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,17066203865366174728,12316537990297722503,2097152 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
    3⤵
    PID:240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,7169941588034408879,4185737512547256166,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:5560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,4614625255864621479,18232368014474638284,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
    3⤵
    PID:3964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,5330201698707394607,14901070147382550719,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:4760
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,9382005816958851391,18119822197725380748,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
    3⤵
    PID:5984
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,9382005816958851391,18119822197725380748,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,8596453212964808455,2007086840729616218,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
    3⤵
    PID:692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,6075442417297278547,11887653417502539667,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
    3⤵
    PID:5228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,8478869323746932268,11490960438091657952,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
    3⤵
    PID:1340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,15722170344332162222,14648414423985681518,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:14
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,18004019919665278041,2050108089747748560,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:4220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,5390307648071681703,8636491418333888713,524288 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,5486256468926125677,3689092847127640026,262144 --field-trial-handle=2392,i,15795881864013124686,7787206585451009210,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1d68ffe8-92de-4ce6-9e14-df5bfa051e0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d68ffe8-92de-4ce6-9e14-df5bfa051e0d.tmp
Size 38KB
SHA256 490496c4ebb97df8ed9cd0cac4603967649800b9976279080b2071a0616451c4
MD5 2fb8d93631ba46f2cd416db29351c7b4
SHA1 eee15f6e6e933e515fc1616bb8c061a9d54fe95f
SHA512 d50703b430fa415ff376fc9944f5db23e2f65eeb94811ad1c6726b82c1fd0b6a3395d8f11797255ea5b57dd69917570bb44e922f7d8b6386797bdc70a76e0320
SSDEEP 768:Zrv+4UNbdi351kiJmh5+vNHXmTWTbc+H28+y:Zbsbg3c7rQeWn1l+y
TLSH
T17103BF72ECA9AA37DEF69B84B10BBA077FF8015385C81694CDD96B4D018B49D031B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f4122f5-4e0f-4928-93ea-8c73343c888b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f4122f5-4e0f-4928-93ea-8c73343c888b.tmp
Size 35KB
SHA256 1c224f15716701ea7e006804ca28edc4ae3d2971f4e0239bf0e32ac1ec52be73
MD5 c87df2b1a8595d982b85cbf51626132d
SHA1 21c957a1e2ceb6e8f35fa39cb102dc5ff5452c1b
SHA512 b6c0d2e66ab55ccc2e39b6efabc5436e468d1a82cf16d6b32a7b47e4a36b33df89bab92a63bca35d3c5881d6f22c9ad1a401274ea25e1af968d5d4fc43253ba8
SSDEEP 768:3F3Q+kiJmh5+vNHXmTWTbc+H28Pi9Pitj:3F3O7rQeWn1lPhtj
TLSH
T14AF2BFB1ECA55E27EDFAEFC5A5066B066EF80163D1D82684CDDCAB0D118356D031783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 793b4b4064c69e2652a9fc33993243b352bd528a14fc902247d0f505648e1f4f
MD5 1ff30d249aebb511b94134270de3a0e7
SHA1 3a1ea3187624fe0fcfd1a038bfd45f934ac42e35
SHA512 cd8a7d6d397940e6ddc502c9f77216c492504495fc107a44e793ce450ea9a6a7ea8bd722f415a628148daa44b6908d40ae02b83e2af5754929152937f766343d
TLSH
T1E851BB5A136DBDDDDF21B7F270D00388F2F69846A4773E92C022AE78450BF0621E2193
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ccc067e-7b65-43f2-b604-1585709cf6aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9ccc067e-7b65-43f2-b604-1585709cf6aa.tmp
Size 2KB
SHA256 5ec99fb81b07d78a4ceab955eff2ba64982640f0a856d64a147bbb30b26a4e0b
MD5 d21444952a96681252250873c9944cd6
SHA1 e8a2b6b8e8a63c183691d7c4e193a47f4cec8d9c
SHA512 f7234efc4089bb820ca77b59b4d81b4054a7dd1f6df3b3bcdfb7bb4c6194ac50236cdf15fa4e3f012645fa8024e3ac1b5294f2b113d8650bdc8e866e3b4c124c
TLSH
T17341BEF383F5857E8A1196F4AB146E2FCE2D0515432C7C5A89E0AE2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dc22104b613ef48f550da5e9271ce6caa68f49741678b3d92b526527fb12ae00
MD5 57ad600e90445de1494898fb3aabfdcc
SHA1 061f842dd756d7d203dcd502c7e0c6fa4483cc48
SHA512 88a1df44bd82e5bd9bff442d4d331b0dc3415c3e64f17cbb0ed9f67b5d8e22c0c25d854467411cba5f45df05985d19911d213292b552cc528d949037ea5e671f
SSDEEP 192:sxRKRDCaV/f/smt3EZI8T+zoA8p4t/g6+WNIYlzZ1c/GsIgV2J:sxRKUaV/f/smt36NjU/5IBBI
TLSH
T19742A7166E68A93B8CC7E21DBA557F53D3F95073A0D41E48BAFC861C04E7ADD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4f11f5846b8d562a99307582420db7a5b2a49111f77ced75cfd09a37dd3946f7
MD5 ef79ef952835dc88c7aec3f427aae6b0
SHA1 9f9a1c75903700ac9b23db6fdebb86dfc4c09a84
SHA512 864b348afdb913fcd82bebafc76a611cc25618105972faed8b58126b06c95f781407c4ed265cbf00092ba90f4b830cd75f35906547fc7b35a84d98fa38407e1e
SSDEEP 192:sxRNRDCaV/f/s9u3EZI8T+zoA8p4t/g6+WNIYlwZrc/GsIgDK2J:sxRNUaV/f/s9u36NjU/5IKBh
TLSH
T11D4296166E68A93B9CC7E21DBA557F53D3F9507260901E48BAFC8A1C04E7ADD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d553a89433e89d2bbde69385eed585b38925d272c55027e815e3035d031d1bf9
MD5 4828c6e55f9ff3335ac259457bde4759
SHA1 8561e4847f6e848e3e7ba1ba660e64e0e6a685c9
SHA512 f63e3ef20d705dd89bfff424cb32b057526d28505758c686b0479e77a9ffd052b5405f827c5a9d73a56a1a90fad9213d48ccb54fea7d84d540e3194586ce7f33
SSDEEP 192:sxRNRDCaV/f/s9t3EZI8T+zoA8p4t/g6+WNIYlzZ1c/GsIgDo2J:sxRNUaV/f/s9t36NjU/5IBBf
TLSH
T14842B7166E68A93B8CC7E21DBB557F53D3F95072A0D01E48BAFC961C04E7ADD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 3f70349cda14094ddb751be3abb1256ceb7d6cf602bdd93a1477ed833418d6a1
MD5 76a7f22e03f38fd8fb5d931b3ddba53b
SHA1 daf2cacda45929f875d6f1ccce540acf3dadf2d6
SHA512 43e6ccb17624eeca4470c99ca1b6465faca13322de27b78e580fad9214cb5aa75e415433113d92b369837bf0a57483862b9a6343c9b50b44ff9035f76cec4e88
SSDEEP 768:dofAzj7pLuL7AxWgg+fJJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHEK1316ro9Ho:dofAzVE7AxWgg+fJJu1jasEKl1xFo
TLSH
T1BBD2DA7B640DCA7E4F804ADDEC19BA9F6D6802CB9698CD4047FE941C02C6BEB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f7d322753667e3abb7c14a6f6d8786166e8ea2c2ab93a189adeb7811cd21fe2d
MD5 7218867468e0a77d93cfdeefe768fc64
SHA1 da25e04577dd01ad0c5303898881b35e60f145fe
SHA512 289225b64c5d67929e03d86e2dd55db7d9f3d98c84345cfe7c989af4e273283fdf7c57b1222e7074cf93f72ccafbc8daa63a7f5e3dc7e110ba6376cba7d40695
SSDEEP 96:KRFSr/VPTXWbAOgHXK42gZXc9lYrj8Hzc5t7xxNWlqggVNK4sg7NcD7SFkuoKPqQ:CFSr/VPTmbAvHN2gZM9lYrj8Hzc5t7xd
TLSH
T16E919446387A02413D7F661C81F8991FC6E1B8B3705DE96B7BA851610F6BE025DFC8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

902669ad-54ea-495a-b0ca-db5f1e84f856.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\902669ad-54ea-495a-b0ca-db5f1e84f856.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b016d08025786ad641891c8b0821d83b5acec2b4c15f698c824c4c3a1065ccff
MD5 d71856df76a2e62c64ae0215d1daff4a
SHA1 9f28a09738b51e92d6b63f45300176c24844210e
SHA512 56a5abfe2654ef73c20c118a5904aa19cbc7a18a4b0dc74d05bfe31f91d6a22c1923fb2a4ad615c3e35a3f7de03110ea8d89f7101c9fa07c05a9b97c768d1bd7
SSDEEP 768:VFQJ3fwgQ+5cmh5+hNHXmTWTbc+H28Pi9Pitj:0J37rAeWn1lPhtj
TLSH
T11F038D72DCA5DA6BEDF69FC5A6067A06AEF401A3C5DC69D4DDC86E4D10C309E030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7c0c84a7333f76a905fa5eb54acd0d9a591492c6d3ee9320767a88a1e13652ab
MD5 b849fd826ddd1720e43bff34509cdfe0
SHA1 24953601901252b60b39dad0f326ec181187462a
SHA512 24ef742c23497e408f0dfca6303da39fa7970a1499e891b77630d9f5e2623710c912755533ac1de9cd5e7edc9987020498ee1d4504f6668c75e3630f3ea1e012
SSDEEP 768:PF35+kiJmh5+vNHXmTWTbc+H28Pi9Pitj:PF3z7rQeWn1lPhtj
TLSH
T1EAF2BF71ECA55E27ADFAEFC5A5076B066EF80163D1D82684CDDCAB0D118356D031783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 be635b3db4b52f8dad904982219a4b4fc281f0d0a5a67e5f3b417848b3dadd33
MD5 105a4640764a2867822b0b389d7ad5d4
SHA1 5abdda52270fb8ea3a4b1eff55a5b13383b6d65a
SHA512 c0b0525557d569d1b38add15e66de8bb2e2bb37130f2d84a654795e32c6edeb6d019a72753f462938ab3d1b575315bb52bccbb060182f472d6af400fc9f86332
SSDEEP 768:lrv+4UNbdM3TwiiJmh5+bNHXmTWTbc+e28eVH1SvyZ:lbsb+3x7rieWn1iEH1dZ
TLSH
T1CD03BF719CA95A37AEE69F85B04BBA077FF8116385D80A94CCD96F4D028B49D030BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7c14a3b73c68cc35f7ee5f112dfda80ce8a662fcfb62e0e972b9ead5235d1a35
MD5 db870c880ea1159fe11661f7f647c61a
SHA1 7d6a4e2f359d85d4917459df0b2676abbc0441ed
SHA512 f0f57dcd0b12582591832bc26cedd0045f905647aabe145f01e0e8f4c3d372c7a94c7f4f1d279f3f820f6940ab3ef1577f353ffe6869d1c4841082c16f59586e
SSDEEP 768:arv+4UNbdM3IVYiJmh5GNHXmTWTbc+/neVH1SvyZ:absb+3v7r6eWn1vEH1dZ
TLSH
T1A503C032DCA98E37ADE69788754BBA573EF8116389C40B84C8D96F4D428744D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b7816ca-18f2-4749-9b21-9a02663d59cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b7816ca-18f2-4749-9b21-9a02663d59cf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4188_340366936\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download