1d9b53e06f6dc11e0ed5e36f2b9db49ad3ec2e89d49c6a3145bac0b0f7d3bded

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 01:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v12L-m6-eH.svg
Size 31KB
Sample260816-bz98msaf49
SHA256 1d9b53e06f6dc11e0ed5e36f2b9db49ad3ec2e89d49c6a3145bac0b0f7d3bded
MD5 fbe7ff2e86a8b54be74f27046684d50f
SHA1 b531c269cd2db0071d54af48acfcf7e7df75f30c
SHA512 1e387530138ff05234d0aac670fa1eeabdf79f57daa7d565eaadb6241cf5638f60fbc841c7bc635de7e0986733668e33b12bdf46261311276b0267c8b77cb8ed
SSDEEP 384:ccozyutS3CQImOyA5hE2hgo910mF6ezh5O+uSHS7Ix:ccoLxn
TLSH
T151E22D6537F43C978BD803478D42FC6C469FA8B78498678D9BC790E8A94C368F76C5A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4380	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313177783303896"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{5F774313-9303-4D07-A747-3A0C13035500}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3020	msedge.exe
3020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1776	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1052 wrote to memory of 1776	1052	iexplore.exe	89
PID 1776 wrote to memory of 4400	1776	msedge.exe	90
PID 1776 wrote to memory of 1512	1776	msedge.exe	92
PID 1776 wrote to memory of 4380	1776	msedge.exe	91
PID 1776 wrote to memory of 1512	1776	msedge.exe	92
PID 1776 wrote to memory of 1512	1776	msedge.exe	92
PID 1776 wrote to memory of 5916	1776	msedge.exe	93
PID 1776 wrote to memory of 5916	1776	msedge.exe	93
PID 1776 wrote to memory of 6064	1776	msedge.exe	95
PID 1776 wrote to memory of 6064	1776	msedge.exe	95
PID 1776 wrote to memory of 6064	1776	msedge.exe	95
PID 1776 wrote to memory of 244	1776	msedge.exe	96
PID 1776 wrote to memory of 244	1776	msedge.exe	96
PID 1776 wrote to memory of 244	1776	msedge.exe	96
PID 1776 wrote to memory of 700	1776	msedge.exe	97
PID 1776 wrote to memory of 700	1776	msedge.exe	97
PID 1776 wrote to memory of 700	1776	msedge.exe	97
PID 1776 wrote to memory of 4992	1776	msedge.exe	98
PID 1776 wrote to memory of 4992	1776	msedge.exe	98
PID 1776 wrote to memory of 4992	1776	msedge.exe	98
PID 1776 wrote to memory of 4656	1776	msedge.exe	100
PID 1776 wrote to memory of 4656	1776	msedge.exe	100
PID 1776 wrote to memory of 2268	1776	msedge.exe	101
PID 1776 wrote to memory of 2268	1776	msedge.exe	101
PID 1776 wrote to memory of 4964	1776	msedge.exe	102
PID 1776 wrote to memory of 4964	1776	msedge.exe	102
PID 1776 wrote to memory of 3396	1776	msedge.exe	104
PID 1776 wrote to memory of 2352	1776	msedge.exe	105
PID 1776 wrote to memory of 2352	1776	msedge.exe	105
PID 1776 wrote to memory of 3876	1776	msedge.exe	108
PID 1776 wrote to memory of 3876	1776	msedge.exe	108
PID 1776 wrote to memory of 5012	1776	msedge.exe	110
PID 1776 wrote to memory of 5844	1776	msedge.exe	111
PID 1776 wrote to memory of 2764	1776	msedge.exe	112
PID 1776 wrote to memory of 5008	1776	msedge.exe	113
PID 1776 wrote to memory of 5008	1776	msedge.exe	113
PID 1776 wrote to memory of 3020	1776	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v12L-m6-eH.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v12L-m6-eH.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff8eaa5c188,0x7ff8eaa5c194,0x7ff8eaa5c1a0
    3⤵
    PID:4400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,196441884947984136,2876004665746291913,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8365497054274786480,7411090588599345339,262144 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:2
    3⤵
    PID:1512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,9171866248295380126,18289256527780977671,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:13
    3⤵
    PID:5916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,3772501219346959010,13360633040084753190,2097152 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,11602116483491304989,2120321931676787947,2097152 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,4470280037969674607,16242320102358409072,2097152 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
    3⤵
    PID:700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,5513706029735103804,16822567334017349494,2097152 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:9
    3⤵
    PID:4992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,14970123721539052661,15174321567432207553,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:4656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,18246756706884547255,5361085344997073945,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
    3⤵
    PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,10038457684298406886,6735183712744656716,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
    3⤵
    PID:4964
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,13915496913888848610,3655648764388838415,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
    3⤵
    PID:1752
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,13915496913888848610,3655648764388838415,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
    3⤵
    PID:3396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,9661268610918690832,15793432484111241760,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,15173270788613593680,16605399372641478488,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:3876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,11094296681965855224,8510614426408735021,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
    3⤵
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,17619942542573954619,10602404759771746402,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:14
    3⤵
    PID:5844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,3167939770952570162,5920778818585727131,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
    3⤵
    PID:2764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,104184769125012127,12141816845900490221,524288 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
    3⤵
    PID:5008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6564,i,4737066704928737104,9836745452263187208,262144 --field-trial-handle=2780,i,12782570841438168988,1139051545830854953,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ba39e449b0b6f939171018ba737eb6e1b7a8a70693dd27046f4781faf2e9a2e1
MD5 790d895123e52cdd5a430ce51833a81f
SHA1 05b596a08273db9dded20d225ff8a813b3dc0edb
SHA512 77ed339e7577d855598afaf78baa9acecf19803ec496352a3e888a2c09492f37f39537839bc22e8967d3c00d678bb34a4a96ec9d5f99620d68107076d11e7914
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P70:fwUQC5VwBIiElEd2K57P70
TLSH
T1DEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 85847948403aafa23c9ed869e6d68bee64d6e79ce9afe166aa7690fdb0fe7668
MD5 0680c3ae63a7660f2e95a83ba1709ff6
SHA1 9b347ec6cf1a50958892a770f5ea3c8712e33f03
SHA512 0672a1759c7a592e0ab99716b5053fae685727a66fdd71417b959da563fca2c2e91b651ff4aea1807a938b5a5e87d20f898cc92c5ea7f19add5cd12ced721dc2
TLSH
T1E1611DD2A3A10AE2E7354EBA44E5F45737F4CC5A81B31E0474835E746462FE0A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590e3f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590e3f.TMP
Size 3KB
SHA256 c949901d63c9573f3debc894bd3932d1794d7077ea3b8c3884400cbab906559f
MD5 56a5c21105ba4ac634da86ef7b0ac284
SHA1 46318ddb2e9d6e2b62642e2b9f257cb02c7c81b6
SHA512 73c062c801bfeb4195e67384078a391816c081413749d86b31bc8ec69fa45334437c5bf052b1ff71075fe1e9c44f554b7cfac300cc26ca36efb7fab4a71c5491
TLSH
T17B612ED2A3A10AE2E7354EBA84E1F45737F8CC5A81B31E0474835E746462FE0A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 07db454f546c5b00697df90032672d84422ae0859ce3db2d26a75ad8cabda4df
MD5 140a5677148590601a90330ad2032d46
SHA1 89c869de4eb1c846a2f7f7a7ff327fc99f042144
SHA512 fd2d1a5eda0b87e69d682138a12e835ac5624608179c892adc77acd072a1bf727bee0f8485a5c0e725eda5a2d2724ed8b1f5acb9d0642a549c867e64df5d90b7
TLSH
T1CD319EF383F4957D8A0196F4AA186E1FCE6C0511431C7D5AC9E0AE2B93E34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 51a603d95151918b9585beb57112809aa182a93f74542c1b645daa3fee0dbe60
MD5 41c5163171e935eaa3e8735a75ee1120
SHA1 c4e5e3e5acb65e36564f69e26d88cdd3a94fc251
SHA512 fb5d4dab16990ac3fd9a0f4c38051f7b6fc7a1b86b8b74ac79ed7145446f358011a6347fa72288d152c86d318355c6d7100a1af104bc9229366da5da4bc3582a
SSDEEP 192:sxRLRwyM/jK1Ml8UQ+Cl/f/sG0QWZXoZzoA8pek/g6+WNIYn8M8hF+GZIgDEoJ:sxRL2qJl/f/sG0Qg4k3/5ITpFL1
TLSH
T1B962D815AA24A977DCDBE20DF6457F53D6F91473A1901E44AAFCCA1C00E66DD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 15fcdeabf50a62fd79c4926f1be3ca67aba3e4b47d85cff388f65f8aee5ee204
MD5 eb2e25af0c05e8860c87d38ddc708fb8
SHA1 80f9fdc94fa98f23cbf599d9a833bd95a7f8c575
SHA512 ea05786d0eb706b21aebb5080a0d877ee7252d8ea7c24171ccd1f635be2952f9083da987b310b80cd74d90522f88bf584b56038d1a7f7d6aadeae2e5b8c1b229
SSDEEP 192:sxRLRwyM/jK1Ml8wCl/f/sG0vWZXoZzoA8p4k/g6+WNIYn8UmhF+GZIgDeoJ:sxRL28l/f/sG0vg4kl/5ITFFLD
TLSH
T11962E905AA34A977CCDBE20DFA457F53D6F91573A2905E44AAFC8A1C00E67ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3d9af1e76b475cb767be0782d52d51a4775cddbed66754eb38425da15020b7aa
MD5 15ef67eb4334919834bb209efb4996c0
SHA1 b27bf8307915d350541f228906130d950824921b
SHA512 d53b490d58f11cd8e8b49cf8348e906926a795b474f055efaf538c2b07bf06d709fa6c239c9d07172e9034e64be1275edb2db18961fb944449c046972a108511
SSDEEP 192:sxR4RwyM/jK1Ml8wCl/f/ss0vWZXoZzoA8p4k/g6+WNIYn8UmhF+GZIgVoJ:sxR428l/f/ss0vg4kl/5ITFFL+
TLSH
T13562E9056A34A977CCDBE20DFA557F53D6F91573A1901E44AAFCCA1C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 1f5df6a5834eddc79cd7d52bd4c6dfacfbf666ee6ce2fca108fd227129ba8ca0
MD5 a463fd04916fa462e222eee4b4a7f516
SHA1 ca104c77bc0a14927f7c558e0ad57c6bc16a2078
SHA512 97a9f7d73e6cc3ea76c8f5cb73ea279db199455f374a720cd2bb0a9d0b31f55727592d3147988dfc6006d4ad1576dfd627fcf71e1009d4dc64c8f2ff94145c69
SSDEEP 768:wGedWg7pLuL7X6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVLfOu4Y0roS38cT:wGedWsE7X6WgoufDMu1jakfOVYfj8
TLSH
T134E2DB3B680CCB7E4F844EDCEC29BE9F6DA801CB5AD8895447EA840C03C67EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 59e91e778d7203b8b87fef1374b6a8ce016355ebb0dbffed3504b97dfd436e98
MD5 16811701f2652c07728b9968205d7f48
SHA1 02425c1e92d8c89134750eb3dbc1211ae95448e9
SHA512 76d5163dbf740e38574c0d8fec2b805609e70c8f8349d7a5b754caceff8997f95f5d810717c8fb9960e7fe87d316f837868d6b2412324caae1ba151e376caad5
SSDEEP 96:KRdqjXNn7vWj4mgfvK4+gBvcldQzLkHm7KmgIIOW4tVgGOK47g0OcOGlk95OKacX:CdqjXNn7Oj4XfV+gBkldQzLkHm7KmgIl
TLSH
T14F917204757B02543C7E7A5895AC9D2BC68235B33106E4AF77A801A34FEBE025DFC9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a82d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a82d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 53d91881367e457b2885e765af03fe4a5b7c1159e4b1767b8f09e8a684c374af
MD5 6e94438fd7fbc6eaf53bd33c8cd902f9
SHA1 af7d2014d421204cd9afe5158ba2846f5a4dbb71
SHA512 8664c861c8bf440f04a5bdababb4f9202b2f6a41b1547b9e7f9c66623966e54e739f1459b2f3c211f28b5cc3036b87677aed2af177ad814c97162c5530f7019e
SSDEEP 768:5rv+4UNbds38CDZIO00hewNzc4ReyIs2weVH1S5D:5bsbS3v7tc44bsXEH1Y
TLSH
T12E03CF32A878DD33ACF6A686B04736933EF8612B81940E94D9EA5F4C4A471DD174F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f7704b8f33ab866fb5f43e776db600176461dc9926b2b3674e57f9173283eb00
MD5 5642a787c9dbd8ede72b4de98ae14e00
SHA1 925599b2b2b3b6dbb6d1342c56ec99d64b4f7a7e
SHA512 9eb4ba9d6e875e813b26028ae8dc552cf86c57e069558c79ff44050eabf7220495005d278208a553be7bcb9144be44b958fac78b78045648ffb1d84b22a227ff
SSDEEP 768:xd3escNYDZIO00heeNzc4ReyIsPwPi9POe:xd3escgntc44bsIPE
TLSH
T12AF2BF71AC38DC63BCFAA682F55637927EF42127D0D41D89D5ED9B0C09832AD175B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5b0479ef503825b9736a59ee536c009eda8150b02fd9d2293f91291d9ffb4b07
MD5 3e387ab58ee1b193da63304f77d57208
SHA1 04e304409e2adbc3031b5aedee917ff2eeee1238
SHA512 47169be6045aedf238ddd35a8553c7a50b4f2f920607a38a6e3b79048269a0a78f5a7f0b7c63d006d178f85d0ac42619dd24215c13d2a8e8a4207ab6d8fc592b
SSDEEP 768:sd3JscfYDZIO00heiNzc4ReyIsPwPi9POe:sd3JsceNtc44bsIPE
TLSH
T188F2AE71AC38DC63BCFAA682F55637927EF42127D0C41D89D5ED8B0C09832AD175B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 893703b6a560e6ae4753bc1698cb5256cc166bb321adabbeadef9bf51dcf8ad2
MD5 52a3f25e3f3f6dc852edae92f9b1a6cf
SHA1 617c9f5fb5f70fd5a647797d087a5175d04f768c
SHA512 35a1167e55444bd1b90c9351ed58970842abd24d2eb901f27b45bb47a0d01d95b9171c7dd08cc8bc66de5398613d7690ace0bb5e980e0b2e3f8b3cd56064cd26
SSDEEP 768:8FQq3+wgascfhZQ5O00hemNzc4ReyIsPwPi9POe:vq3vscrVtc44bsIPE
TLSH
T141038D72EC64DD67BCF6AB82F6463682AEF41167C1D85DC5DAD98E4C00831DE074BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1c02b63d03813cd9770b3f60f11ea8412026282adc9c61bf17ef3981d8bf74f2
MD5 c7938bec44a4f97eec9bfeece991d52c
SHA1 d8693356d70cffe3ed2ab9ada313f0e11a4a3de2
SHA512 decdfdc116bcf077a2250e27160b902230edeaa2a650da9c4c380966b7e288ec68dbf660774958a7370d6f974c7133890a5c59705650cd569ede9d7356fcfbec
SSDEEP 768:6rv+4UNbds3LwDZIO0tNzc4ReyIsX9eVH1S5D:6bsbS3dtc44bsNEH1Y
TLSH
T13103DF32AC789977ACF6A785B50B36533EF8611B82D81E94C5DE2F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1776_1922764031\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download