d08d8cefc21783960a89cfffea6755499860559e53b0645ff5d35ecf0ba2497d

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 16:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v11K-m5-eL.svg
Size 28KB
Sample260815-thy36azbrb
SHA256 d08d8cefc21783960a89cfffea6755499860559e53b0645ff5d35ecf0ba2497d
MD5 f2f7df101c9bf5d75ce49d42491e9f8c
SHA1 bfa147420c27f8f75982ba6d99be1b938f30cd3c
SHA512 85aa10c95f787a0460395f4aaaa5184eefa4b66ebfd48e0931d021752560f69fee8e79a0788d026d5c00ca8258cc558db5121631ce5c6bd0df1410ceb6c76dba
SSDEEP 384:ckwQGRNPUTQLwwizqwaowD66Uu9dqbvCK+E9xrYTxkk4sQsDI:c5QGvji
TLSH
T125D24D6437F83C9B8BCC03478D52EC68465FA8B7C498678D97C7D4E8A988368F76C560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3424	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312834580316800"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{CF10B5D1-3CC9-4468-89E3-063C2E620DF6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1880	msedge.exe
1880	msedge.exe
1880	msedge.exe
1880	msedge.exe
1880	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1880	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4684 wrote to memory of 1880	4684	iexplore.exe	89
PID 1880 wrote to memory of 1788	1880	msedge.exe	90
PID 1880 wrote to memory of 3424	1880	msedge.exe	92
PID 1880 wrote to memory of 5452	1880	msedge.exe	93
PID 1880 wrote to memory of 5452	1880	msedge.exe	93
PID 1880 wrote to memory of 5452	1880	msedge.exe	93
PID 1880 wrote to memory of 1904	1880	msedge.exe	94
PID 1880 wrote to memory of 1904	1880	msedge.exe	94
PID 1880 wrote to memory of 5816	1880	msedge.exe	95
PID 1880 wrote to memory of 5816	1880	msedge.exe	95
PID 1880 wrote to memory of 5816	1880	msedge.exe	95
PID 1880 wrote to memory of 2700	1880	msedge.exe	96
PID 1880 wrote to memory of 2700	1880	msedge.exe	96
PID 1880 wrote to memory of 2700	1880	msedge.exe	96
PID 1880 wrote to memory of 5912	1880	msedge.exe	97
PID 1880 wrote to memory of 5912	1880	msedge.exe	97
PID 1880 wrote to memory of 5912	1880	msedge.exe	97
PID 1880 wrote to memory of 4968	1880	msedge.exe	98
PID 1880 wrote to memory of 4968	1880	msedge.exe	98
PID 1880 wrote to memory of 4968	1880	msedge.exe	98
PID 1880 wrote to memory of 4872	1880	msedge.exe	99
PID 1880 wrote to memory of 4872	1880	msedge.exe	99
PID 1880 wrote to memory of 4528	1880	msedge.exe	101
PID 1880 wrote to memory of 956	1880	msedge.exe	102
PID 1880 wrote to memory of 4528	1880	msedge.exe	101
PID 1880 wrote to memory of 956	1880	msedge.exe	102
PID 1880 wrote to memory of 3312	1880	msedge.exe	104
PID 1880 wrote to memory of 4308	1880	msedge.exe	105
PID 1880 wrote to memory of 4308	1880	msedge.exe	105
PID 1880 wrote to memory of 2336	1880	msedge.exe	106
PID 1880 wrote to memory of 2336	1880	msedge.exe	106
PID 1880 wrote to memory of 4100	1880	msedge.exe	110
PID 1880 wrote to memory of 1688	1880	msedge.exe	111
PID 1880 wrote to memory of 720	1880	msedge.exe	112
PID 1880 wrote to memory of 1844	1880	msedge.exe	113
PID 1880 wrote to memory of 1844	1880	msedge.exe	113
PID 1880 wrote to memory of 6064	1880	msedge.exe	117
PID 1880 wrote to memory of 6064	1880	msedge.exe	117
PID 1880 wrote to memory of 4536	1880	msedge.exe	118

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v11K-m5-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v11K-m5-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffa7944c188,0x7ffa7944c194,0x7ffa7944c1a0
    3⤵
    PID:1788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14132022484110158864,942160390406958292,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2188252647424459132,12652286484930771302,262144 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:2
    3⤵
    PID:5452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,5443351115388493844,15436984387574180663,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:13
    3⤵
    PID:1904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,2056530813462170871,9161941588474789883,2097152 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
    3⤵
    PID:5816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,1383894851726221938,24542362033775200,2097152 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
    3⤵
    PID:2700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,17914285239200023763,12368379981212481398,2097152 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
    3⤵
    PID:5912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,7733180994924134733,4204517058931007356,2097152 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:9
    3⤵
    PID:4968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,14718409035031461108,17827866572872081785,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,10685052564558881222,4580115650046787807,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:4528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,15774706884192481363,8781318752182022067,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
    3⤵
    PID:956
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,1629384085059928953,855981383779030604,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
    3⤵
    PID:3496
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,1629384085059928953,855981383779030604,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
    3⤵
    PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,11112337824950126930,6421294725316145114,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:4308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,15426597888324979982,2717711417234258825,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
    3⤵
    PID:2336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,18433535723580125949,1150627878446058834,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:14
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,3302437480572323311,6020141238752705929,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
    3⤵
    PID:1688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,15644879835212099712,7331830324478315700,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
    3⤵
    PID:720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2796,i,4909218525389611739,8145193954085877009,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
    3⤵
    PID:1844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,15548587391526903065,4785751655773108250,524288 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=924 /prefetch:14
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,2628770913042805369,1996666445198750867,262144 --field-trial-handle=2636,i,48892768866257843,2548161181841099937,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3e37c80a92ddda14f230ad5219b572a0426de5d6d07e558b18ce2ad33777a5fd
MD5 01f4d257706cf471683526d94d9db120
SHA1 4b9e0305e473b1393b6e4becc755fdb4060b2af5
SHA512 1a7c9a659dbec3e6fdf139f71b082bae08af70575cb8237f95751b53037c73c55531d4ca719cc2269cb0dab12beec0f69525f0d6962bae362c9bbcd85dd95d80
TLSH
T1A1E0209805C5C21FDF98684752B4534DC3913B6B93C8BF36270885857002484B297560
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 14d5071504a0b218ce62884f90815a256f7ef042e5be5cb11c1396e63cb1c194
MD5 95b5fb64e3cb5250dade33f05d70d555
SHA1 cba6e9b2c93d669a4a53e85ee631bf9a1dc7187e
SHA512 cf52e936b5c80b495b0f2cc98b854803606e269665d27bc58269fa50fec1fe45bef5695035202d1330c9390dc7e2db845e9dbc8b04bc1d00723264cb7e4bb224
TLSH
T16551A66D233F36CECB7481B994E4658932F4A45B8AA7EF22C0005D7A59D6F10EDCA853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599f34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599f34.TMP
Size 2KB
SHA256 f3481b6b9bc2c717d38c56408831b4b6ccf97ad6d54f86d067ea9213c767c00f
MD5 faf0f161917cda11e2193e5afd2d1499
SHA1 cda715a3b16d8110fbd109a36198917e97537adf
SHA512 00262f2547ddfb1045d2c9c3085e63d0c13dca836ab37e511da3d14691e3785cac4d88bab65fb679ed1d1b61accd90ce4368116f1528a73f08ee42777a7a3c7a
TLSH
T1F551D76D233F36CECB7480B994E4618932F0A45B8AB7EF22C0001D7A49D6F10ECCA853
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 251344d7ba424d8deb349dbc716ed023d3bd7b5240802fcf2b29c6399edcebee
MD5 b31935fe8f28686bd2ed0bd1d6cc4754
SHA1 fbf74c3d886bf2a1496329e9fcebcda2a5702113
SHA512 238c9e532c797bdc11ce004bea8f0866dc8206b55394f9ec01ca243ba0b6779ced33bf20baa71ef63daddbb30144dd8e6d27b477e533f7452ac576ce94dd8046
TLSH
T15141C0F383F4857D8E0196F0BA146E1FCE2D0515432C7D6689E0AE2B93E34B1E181A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 805a0896241d343a6f0a6247a365e8e82b285691d46a240f20c4b57551fe9664
MD5 daa7d057da6b59c31c7442fd17c31bdf
SHA1 06a9460c9c58f1acbb63316aff1b3a9c11d0c3c1
SHA512 986f9771c177f4aacea38c8fa7b3b49b689eeb9584ae95686c7ff00a36e7c4c4c6150788e19b67d5fc1987c1be4565e336b45e6b940e3bbe46f7501b2c26516e
SSDEEP 192:sxRWt4RdkSCtC/fJqs4g8Z+PJeVzoD8p4Ww/g6+WNIYCNauOhGgIgVbJ:sxRDII/fIs4gC0a6/5IC/L
TLSH
T14C32C816AE68A93B8CC7E21DBB55BF53D6FD1032A1D41E48AAFCC61C04E66DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 606e9cc428fac7000989cad0776638cadbbaac70ef6dbb3030ecea000dfdc1a7
MD5 e79e2d1b3b0c5a63d05fe3332da825da
SHA1 9c50b8aa9ada13720f5e4125a6082c1c2d065558
SHA512 03e87ec2b22c6f14af03a9b4a8877d6195bea8232f3c939dcee3a1bc7634ce8910649bf0dd692d04dc21f4d2e7fb3d0809c26e850d7fdad5dc940907f87a5842
SSDEEP 192:sxRWK4RdkSCtC/fJqs/y8Z+PJeVzoD8p4Ww/g6+WNIYCFeuOhGgIgDebJ:sxRgII/fIs/yC0a6/5IC/e
TLSH
T18242B716AA68A93B9CCBE21DBB55BF53D2FD5032A1941E48AAFCC71C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3a49cd2323bde4da789832a42744130a08799cb94c1147942bbc7aa62df3ada8
MD5 0248d7b58e8581dbab7e46c9ef3c0d8a
SHA1 04f3d86056da839db11f07c916033a6914dfe578
SHA512 2ce3bb21d0fd44a0e954b1d6490c5572ac511958f0bdda6f39f8de17a1c0743f82262ddb94eefcfd04ba867e2620dcf5fddba170ad9915ed27d07c6016ced56b
SSDEEP 192:sxRWK4RdkSCtC/fJqs/g8Z+PJeVzoD8p4Ww/g6+WNIYCNauOhGgIgDsbJ:sxRgII/fIs/gC0a6/5IC/c
TLSH
T17A42C816AE68A93B8CC7E21DBB55BF53D6FD1032A1D41E48AAFCC61C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 5c4b1baeb8c434dfdc8f1e591ff1414a18c428ba169c1dea19976bd554a50a16
MD5 77d71783a2ad7fbb0e5fac4e76bd1bca
SHA1 56b2ad18d8add2b8165c3bbad03c6a11c3bc883b
SHA512 bf6895b3b4a219cd337de5382b01d644e9b4e9a3619c19fbb4d49ca20fb6191ee05a674a8fe86baab4a19dea8f4a9da35c162fbb4af54261c2d37e1ca438f66e
SSDEEP 768:jC+vUN7pLuL7JQWgQ+f4+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVea0QqctroZz:jC+vU7E7JQWgQ+f4+u1jaNa0VcGF
TLSH
T13FD2EB7B640DCB7F4F804ADDEC197E9E6DA802CB9698CD4047FA941C02C6BEB52164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a850084cb561f99ba4cdb3481b76f720a5980a156600476e0a3aee52bef727ea
MD5 0a496fd3241dff1049a07b8d72886aac
SHA1 69d90424bdb692d2b5a35d2fe872c6ca7d79095a
SHA512 1f055958823174d555dd116b432805f3b83591f4e9a0802428b1b395ddee40c42a414048b0c3655259f833545cd7210d4654e0d2115a70606cfb31e0461c0013
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHLURlTp5FWtC4gNFK40gjFcrzKtZ+ygAKv:CbEBVj5JAdSp9/EgTK7j6dJOHLURlTpY
TLSH
T195919811397B42807C7E655C84FC882B87D274B33019A92B3FA801A65F6BD525EFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3951.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3951.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5cd512498d668f043824ae4f88d45773eec63c82d154cd6412f89734ea685b67
MD5 8205ec55118e701c6e198dfd4ab6b45d
SHA1 67b2309ffeff580489d3329e7ff92ef8239e45b6
SHA512 d3ca9635202de54074f2380b990e65f44f614d06c390c30c806ff0ee26fdc390b6bc15fac3a38f3821321af947f257ad65eb1d6ca045ae30da9aa8594fa87bb8
SSDEEP 768:+rv+4UNbdD3VMpptRNp8+p3bd66j+4BRv86aLITa2bwCl1:+bsbp3AL8+p3Z6n4yX0ww
TLSH
T12703BF72E9A89D339CF6C648B1867B837FF811A395C10EC4E4D96B4E405A25E270B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d6ff2a05ec5985090b09a17554c66839027e43e82c90f7568f3fd00ac3c4d0fc
MD5 e642a72628b440f6f309f2f6c68e4120
SHA1 f8deade3d11a51ae9aa15562056d03a6f492377d
SHA512 660ead7a370ce3c046ef61c45a99ad95889d232a28f928811da6475f359617648dc2f7ca2ccbc0b22b78e14a866aabebec84730773d3a13da2a74ce84ff63488
SSDEEP 768:YFQN3Awg/d4ptep8+p3bd66j+4BRv86aLIWaPi9Ps:7N3Y8+p3Z6n4y4PT
TLSH
T15C039D72E8A8DE2BACF6DB85B3567743AEF411A3C5C45DD4D9D89E0D008319E170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 abe88dd8863da53b410b50302f03a64b602b990477f1e608711d3ae77fc38270
MD5 83cd4c2d40b27f3b5e4f2120a611a5e5
SHA1 ebdd038a7164be75338e6c7e03217c38520fc188
SHA512 7c77f13166f61b7841167d5c953f6e79e3d0387a37c77389bc316f7146074e0a5a66d9826b051f19b9ab2a2c8ce44ea25968e5c0ffc09125875cfc47d077415f
SSDEEP 768:Irv+4UNbdD3mcpoNp8+p3bd66j+4BRv86aLIi02bwCl1:Ibsbp3cL8+p3Z6n4yy0ww
TLSH
T17303BF33F9A899739CF6C648B2467B437FF851A396C10AC4D4DD2B4E419A19E230BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cd80bb0c9b07b7cec0c392390e0a252ebdec8a10bb6c060666714fc356450f0b
MD5 f7e19cbcde6e7c791af1a8c5ec07036b
SHA1 173094bc8f770bef8fd4202717a6730a509341e8
SHA512 39e2ca4aba547834c706314ab77af5783a3dcd8c3e1e321e5ac014841fa800e8fbfd090cf53de5045cfc041f0e0a82cedb67c0153aed66398eeee22e2b82bf48
SSDEEP 768:Tp3A+pptR9p8+p3bd66j+4BRv86aLIWaPi9Ps:Tp3B78+p3Z6n4y4PT
TLSH
T1A6F2AEB1E8A99D239CF9D648B29637837EF81163E5C01ED8D8DDA70E148725E170B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1167356890bfd2526e67c155b6862f7fe58e2983cfce33297d3739136a912b15
MD5 0405c19fa05f05734c7ff47cecc43c2c
SHA1 2b63ee4d15a16aa8b7f55d564839061d8d1d2f1f
SHA512 70643bc6c4e65d1c3fa89906a6dc89ae886392b9e8d3820c422547fb3489a6f5788519b9dc025dd2926007b188c66e0fad82c83feba2231dd4c1162bb181b231
SSDEEP 768:lp37+pptREp8+p3bd66j+4BRv86aLIWaPi9Ps:lp3sS8+p3Z6n4y4PT
TLSH
T19EF2AFB1E8A99D239CF9D748B29637836EF91173E5C01EC8D8DDA70E148725E170B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2333ee7-c4c1-483f-8616-5f7e688893ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c2333ee7-c4c1-483f-8616-5f7e688893ea.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1880_1643311159\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download