1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v13M-m7-eL.svg
Size 35KB
Sample260815-vb9rragg98
SHA256 1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388
MD5 bfd57f9c04b8bfc4e5434bae690e2203
SHA1 e7b3435c094295274f0af2f8397f5bb45ea184c1
SHA512 6758b4a12d192d174ef164e40e6e9404b61b978a9fb28913f7bf0882d22b005217c3f048344f661fc2e264b7060e3cbe73503e4b546688f5342e8ae0eff3613b
SSDEEP 384:chMBVd+SOAKzMf2qACRnJPB/nafePgDOx48FAIddEIRisu:c2VdxlZdIV
TLSH
T19EF2306537F43C9B8BCC03479D42FC6C46AF98B78098678D97D790E8A548368F7AC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3804	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312862242797135"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{94E0F001-4AC6-40B7-8544-94E7E44649F2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1772	msedge.exe
1772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1140	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5688 wrote to memory of 1140	5688	iexplore.exe	89
PID 1140 wrote to memory of 2424	1140	msedge.exe	90
PID 1140 wrote to memory of 124	1140	msedge.exe	91
PID 1140 wrote to memory of 3804	1140	msedge.exe	93
PID 1140 wrote to memory of 124	1140	msedge.exe	91
PID 1140 wrote to memory of 124	1140	msedge.exe	91
PID 1140 wrote to memory of 4580	1140	msedge.exe	94
PID 1140 wrote to memory of 4580	1140	msedge.exe	94
PID 1140 wrote to memory of 1552	1140	msedge.exe	95
PID 1140 wrote to memory of 1884	1140	msedge.exe	96
PID 1140 wrote to memory of 1552	1140	msedge.exe	95
PID 1140 wrote to memory of 1552	1140	msedge.exe	95
PID 1140 wrote to memory of 1884	1140	msedge.exe	96
PID 1140 wrote to memory of 1884	1140	msedge.exe	96
PID 1140 wrote to memory of 1096	1140	msedge.exe	97
PID 1140 wrote to memory of 1908	1140	msedge.exe	98
PID 1140 wrote to memory of 1096	1140	msedge.exe	97
PID 1140 wrote to memory of 1096	1140	msedge.exe	97
PID 1140 wrote to memory of 1908	1140	msedge.exe	98
PID 1140 wrote to memory of 1908	1140	msedge.exe	98
PID 1140 wrote to memory of 1240	1140	msedge.exe	99
PID 1140 wrote to memory of 1240	1140	msedge.exe	99
PID 1140 wrote to memory of 6008	1140	msedge.exe	101
PID 1140 wrote to memory of 6008	1140	msedge.exe	101
PID 1140 wrote to memory of 448	1140	msedge.exe	102
PID 1140 wrote to memory of 448	1140	msedge.exe	102
PID 1140 wrote to memory of 3016	1140	msedge.exe	104
PID 1140 wrote to memory of 3512	1140	msedge.exe	106
PID 1140 wrote to memory of 3512	1140	msedge.exe	106
PID 1140 wrote to memory of 2828	1140	msedge.exe	108
PID 1140 wrote to memory of 2828	1140	msedge.exe	108
PID 1140 wrote to memory of 4700	1140	msedge.exe	110
PID 1140 wrote to memory of 2352	1140	msedge.exe	111
PID 1140 wrote to memory of 1408	1140	msedge.exe	112
PID 1140 wrote to memory of 2368	1140	msedge.exe	113
PID 1140 wrote to memory of 2368	1140	msedge.exe	113
PID 1140 wrote to memory of 1772	1140	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v13M-m7-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v13M-m7-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x338,0x7ffff08cc188,0x7ffff08cc194,0x7ffff08cc1a0
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,18242651576586449123,13196715438486614244,262144 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
    3⤵
    PID:124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,12017452727006937704,3803285681247418701,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,683125578937872789,1370925825288246516,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:13
    3⤵
    PID:4580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,15335341054030688198,9175213155722477946,2097152 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:1552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,13784478552141821273,9679575823635746358,2097152 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:1884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,9962073478090223123,16550245387748365740,2097152 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
    3⤵
    PID:1096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,2963366720854125801,16549868578071205386,2097152 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:9
    3⤵
    PID:1908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,7788980763531190887,10207413503475816515,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
    3⤵
    PID:1240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,13912495264683332704,10892081865137592013,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:6008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,5549452879759017361,18161637017408576096,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
    3⤵
    PID:448
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,13319957356666039215,7958304103600684197,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
    3⤵
    PID:5800
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,13319957356666039215,7958304103600684197,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,7338969092840735247,11105118646434480102,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
    3⤵
    PID:3512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,3170286423775322304,1611634808365390437,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
    3⤵
    PID:2828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,15861980902462033587,1122440751439309882,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:14
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,4851375123444108012,15887529218965844469,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,4157136347785946833,11205650141181602895,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:14
    3⤵
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,6560343544371506541,16068164180482865253,524288 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:2368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=924,i,10358458547580265895,12892255305976657620,262144 --field-trial-handle=2220,i,1040877430555443598,6617097293546913591,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1772

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 015118443c87adb374435990ed3fbfec69942269f1b24e498a970c554223c71f
MD5 b8244ff8708201c834153356c9e37e81
SHA1 721835a4f22b5231f4e3ddb2e7f4c3e26af5f16b
SHA512 7c722229387540777df2c10ee683c5f3dc63f107d9a99010baca35517356b1acc051c72a19740ad7fd5c6770467c1352ca318c8731b84613f040e59917e0df15
TLSH
T1CB5174584B790DEFC7A4B1B110E5554ABBF69A9F32035F8041B82DF81A87F3814E2957
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c7cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c7cb.TMP
Size 2KB
SHA256 436515b2526b97dfa45d45a2ef40a2a9396f1e22e683026dadc476d497e15848
MD5 c6a4b66c1c1a330047e235d1a094d01a
SHA1 b00eab10f5e92c1ddbfcb65f121d51768d7ed56d
SHA512 5d221321ab2c02c6608cfebff138a27d47c76d535033b61918808d4ea38f8a445f077de814ef4ccabf01367172ec88258a9aaac1195c26140e7de7d05eca8ab3
TLSH
T1475196584B790DEFC7A4B0B110E4554ABBF79AAF32035E8040B82EF81A87F3C14E2957
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e7ee1a8581228eed79ccce18beb71c47cdc7c254a903806e8b007282606c9ebe
MD5 645be7c962c51e416568b6bc8bf5e3eb
SHA1 dbd4f2993b5a611109bf13892bba9136f03b1fcc
SHA512 4f289f36d610731f7772c3004f4c0d4cbad3c2106e1f2ae3f6255fc1c657692bc0e21ac3fa68fe34858c4e336151837be1105da8badff6cf7be208301673e629
TLSH
T1AA41BFF387F4857E8A0196F0AA146E1FCE2C0515432C7C5A89E0AE2B93E3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 aab5da5240c2743350b54bda239979ab2934005a91986c32437275c4d9e90e61
MD5 e9e7899712e186c9496af7fd16572f86
SHA1 1f9daf5d814be5b91554f649b0f48cbab6cb95bc
SHA512 f47a01838c2e8e433069a5d76b6aaf69a94e85fedeee766588540b456be1f6ee849e79f40ac2539dba3a111899f0ba12f901f9c0b87edcd17e9dc71ba000d344
SSDEEP 192:sxRNgzR9yM/jK1Ml8wCEX/fJtsMQZZq2EzoA8p4S/g6+WNIYE/6tRK5+GYIgVaJ:sxRNgzT8EX/fJtsMQ3XlD/5IevceE
TLSH
T11762F915AA245D77CCDBD20CFA51BF93D6F95573A1901E48AAFC8A0C04E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 accf690de6c118378f141b041ca4daaf0a71ef63dfe4173176086bc9a83d73bb
MD5 c7d8ab833941a5f3accbfd907b6c5d17
SHA1 5c8211e6deb9f848328076b7527e87946d85e6ce
SHA512 a5102fd32bd279f5203b06b72f5176eb4617e33011279e2265cdc9f10173e860b71e66ce747f58cb0fe622b44d3910d226d180acce988b2878bec6b284feac61
SSDEEP 192:sxRNjzR9yM/jK1Ml8UQECEX/fJtsBDZZq2EzoA8peS/g6+WNIYE/69kCK5+GYIgc:sxRNjzTqTEX/fJtsBD3XlB/5I22Ccec
TLSH
T11962F819A9645D77CCDBD20CFA51BF93D6F85473A1901E48AAFCCA0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 15fe02df85efe5d89f432bd8cbb5238f58777953e00fefdf96428c0b8b070ec6
MD5 4db4ce29d36b5c228b2af07fda485349
SHA1 1db8e7ac6713e76db79e3c120e79a678bcfb8f6e
SHA512 a74afdddee904cd78f7384a47b35fe1005ee3d3373c3933908c16351da13f18a966b695ae1793363dbff7c1e747ec4e11498e55d7fd6e52aa416c5b5e7e69a70
SSDEEP 192:sxRNjzR9yM/jK1Ml8wCEX/fJtsBQZZq2EzoA8p4S/g6+WNIYE/6tRK5+GYIgDzaJ:sxRNjzT8EX/fJtsBQ3XlD/5Ievceu
TLSH
T1A662F915AA745D77CCDBD20CFA51BF93D6F85573A1901E48AAFC8A0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 d3c801b8427902f32c43b54d000901f696086950b5b85f28017a027d3640ac1f
MD5 27c2ae84885cb8bf6729f178ce64d997
SHA1 2b623c2e7ae1e58668fdeebaacbb6e3e423e890f
SHA512 ffb1fdff65ae464cb2f8e6bccd80ee49ddaacb1a5b5c6dd1d4fad962ba61507bc367e7ad3e6efa39a173ec10d7b1ba42a6f65ef49c26e6686ac8527a9a0d7e03
SSDEEP 768:0hiimW7pLuL7jaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OVr4ZOV8Gro66i:0hiim2E7jaWgH7f3Qu1jac4ZI89+
TLSH
T130E2EC3B680CCB7F4F404ADCEC29BD9A6DE801CF96D88D9447EA884C03C66EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 8ff481a7ab954546edd60a7c880d02bb1075aa02ac08fa4e5dbef8c905baea0e
MD5 1af431d51fc5c3122b806573954dbb5f
SHA1 f4b54e3e040624556f3cbbf69606892c980e67b0
SHA512 50e65681e7716b7458fce96e6a3ad71039f9e92fa1bb1b5c2e03936b470c532e23ea2baf92a951f137cb4b774632a056c539603312d7e5da9df3c8a2ba028633
SSDEEP 96:KRS3eyEkUyW8pBgiyK43gYyciKxQy9H/oNJ/9dRWpGMgxRK4YgfRcHPuxdQh0gSE:CS3eyEkUN8piiK3gY5iKxQy9H/oNJ/96
TLSH
T1B5B1180534371291397EB61988B88C1E93C27877311AF56B7B69159B0F27E039DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a6013.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a6013.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2beb66f178561e7ecff3f129eef24e934af710ecd84cd2dfd79bcd76b208d604
MD5 ebd60958415316b836e6a4531cb21654
SHA1 9a7c4d18ac106c0e622e61d48e9e38a86a870ceb
SHA512 3c311e00726325097753f36d32168de7e46e3ea0957ed76c8ceeb11fca54d0d5b13f773fcfe3b86259795821092da52e7e30b69dcd28810fd70605a421eb365a
SSDEEP 768:SReFQR36wgqkqGg96twbK48dHeByERRFzjK3YmPi9PBtm:SR1R39G148dHSyw/4PWtm
TLSH
T1DF038EB0D8A4DE67ACEBD78AB7427757EEE00163C5D899D4D6D99E4D00830DD070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 97b3278be03d75ec7e27c84bed5efced29f29044639c07bf598686df6ebc5629
MD5 426d2f48239f9212d6676ab426e1f2b7
SHA1 b61ac0a95ab8746eec59dce7de5fef2b991db553
SHA512 1de960d66962ba0e4b6169b011d52e13eff512c212c158099c51cd21b7f01000f60b7c0a2a39885bb0c8953f789186a0e6385a8dd9f230491c980b0cca4ddf70
SSDEEP 768:aRAW3ZkqGgZD4twhK48dHeByERRFzjK3YmPi9PBtm:aRAW3jG2W48dHSyw/4PWtm
TLSH
T1B9F2BFF0A8A46DA34CEBE249B6437757FEF00163D5C85A68D6DDDB0E448219D0B0BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 076f61fd2fc7f2d18cfbc00ad0281e778a554cb5c9bd7f8e6f19beab4bf4a3a2
MD5 257276e92501b4f40453ab7ee987f7ec
SHA1 69e65cab76d2b584b52a1db414d814efb0c675e0
SHA512 075d50dca2ee7b1ff67ff24be380cb969b6d8031051ee58320a2a6b95ab3d667f11d1e87bbc4f0673918313ec8361e70e1f606c5ebecd47e6b133ea7af2c674c
SSDEEP 768:YAW3akqGgZD4twhK48dHeByERRFzjK3YmPi9PBtm:YAW3+G2W48dHSyw/4PWtm
TLSH
T1B8F2BFF0A8A46DA34CEBE249B6437757FEF00163D5C45A68D6DDDB0E448219D0B0BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8ccd20b547d956b709f8fa23371aaa09fbedc54499385345a9ac6b791afe4159
MD5 20fc8bdb412956d148ce655bfe799422
SHA1 8ab579db6169e75da82e355b60462e629aaf9f28
SHA512 21034f956cbc78c0952f60a4b14de7a30b9a3c4d2113001f39c25e4250583ee189b1ce2b3e62a78b69eb66644b076e7a4bc2c7a3d77cf36d60f9f55f3b9b03ca
SSDEEP 768:EGrv+4UNbdf3KqGQPD4twbK48dHeByERRFzjK3JmeVH1SCj:EGbsbJ3LGIk48dHSyw/DEH1Z
TLSH
T16603CFB0A4A89E734CEBE2497183B7A7BFF4016385C40BA4D5C9AF4E45860DD170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 857001924840c1fc2513d792bd7d7036ebe840559669ddda744b3149e6c40bcb
MD5 17061a29c0cd40276da67bc226264538
SHA1 a9713367c4a6f31a77136c3a187b0f0e3fb36804
SHA512 13930cd8e3d291c656c755592db9da8dc40dbc2b5cbfe9aecf31f20433e1993fdc2884886226bf57de65bb882ffe73322966a5a728f90860258270e6300ab86f
SSDEEP 768:Ykrv+4UNbdN3akqGZZD4twhK48dHeByERRFzjK3Ymx:Ykbsbr3+GTW48dHSyw/4x
TLSH
T10E03BFB0A4A8AD734CEBE249B1437B93BFF4016385C44A68D5DDAB4E45860DD270FD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4a1978b1f9e4522cdfc59da203c9824da6698928c848f9f9dae3da854d5da03c
MD5 499d3ecaf8307133724b43bd07e4df9b
SHA1 ebe40e4460a62ee5c795aabe66fa69b825b62170
SHA512 c2287b65543ba7e38bbe63f54dbad24ab2b54ab40495321cfe65b7b4b9f77fbe9a327da10777d9874bf592b4c9e5747248fbcb7864c97f5794da57e143613b34
SSDEEP 768:Qrv+4UNbdf39qGamDqK48dHeByERRFzjK3YXeVH1SCj:QbsbJ3oGLj48dHSyw/dEH1Z
TLSH
T1BD03CE71A8A85E734CE792897683B657BFF4411386C41BA4C5CD6F4E868B0DC130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38545b2c-32bb-42c8-9cd7-fb80ebd6e5e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\38545b2c-32bb-42c8-9cd7-fb80ebd6e5e2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1140_335582002\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download