09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 02:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m3-eL.svg
Size 3KB
Sample260817-chal5a1zhs
SHA256 09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5
MD5 8a97a3e2ea7103a874e7c9a32e7ed545
SHA1 b450e9e2801ae7e10cb96224461aeddb11dc1ef7
SHA512 7303da25aa0029a146545b8d2046e553d7c07cc7ad7a6942065592fa27b645f0a9a88448251d474773f712b5eafff6d8b4ec09bfbd1a490865583802a57df4b7
TLSH
T12A61168876F87EEBC7D802530D51D8B84B2F946BD822978DD3CB94E875282AC735E570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1560	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314058587921126"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{847D300B-D4C6-4CD8-8C13-998D083DFC55}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4292	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 4292	1196	iexplore.exe	89
PID 4292 wrote to memory of 2284	4292	msedge.exe	90
PID 4292 wrote to memory of 1560	4292	msedge.exe	92
PID 4292 wrote to memory of 2772	4292	msedge.exe	93
PID 4292 wrote to memory of 2700	4292	msedge.exe	94
PID 4292 wrote to memory of 2772	4292	msedge.exe	93
PID 4292 wrote to memory of 2772	4292	msedge.exe	93
PID 4292 wrote to memory of 2700	4292	msedge.exe	94
PID 4292 wrote to memory of 1520	4292	msedge.exe	95
PID 4292 wrote to memory of 1520	4292	msedge.exe	95
PID 4292 wrote to memory of 1520	4292	msedge.exe	95
PID 4292 wrote to memory of 6004	4292	msedge.exe	96
PID 4292 wrote to memory of 6004	4292	msedge.exe	96
PID 4292 wrote to memory of 6004	4292	msedge.exe	96
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 3240	4292	msedge.exe	98
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 3240	4292	msedge.exe	98
PID 4292 wrote to memory of 3240	4292	msedge.exe	98
PID 4292 wrote to memory of 2236	4292	msedge.exe	99
PID 4292 wrote to memory of 2236	4292	msedge.exe	99
PID 4292 wrote to memory of 2964	4292	msedge.exe	101
PID 4292 wrote to memory of 1784	4292	msedge.exe	102
PID 4292 wrote to memory of 2964	4292	msedge.exe	101
PID 4292 wrote to memory of 1784	4292	msedge.exe	102
PID 4292 wrote to memory of 1752	4292	msedge.exe	104
PID 4292 wrote to memory of 488	4292	msedge.exe	108
PID 4292 wrote to memory of 488	4292	msedge.exe	108
PID 4292 wrote to memory of 5144	4292	msedge.exe	109
PID 4292 wrote to memory of 5144	4292	msedge.exe	109
PID 4292 wrote to memory of 5180	4292	msedge.exe	111
PID 4292 wrote to memory of 1352	4292	msedge.exe	112
PID 4292 wrote to memory of 4868	4292	msedge.exe	113
PID 4292 wrote to memory of 4900	4292	msedge.exe	114
PID 4292 wrote to memory of 4900	4292	msedge.exe	114
PID 4292 wrote to memory of 2028	4292	msedge.exe	118

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m3-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m3-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2cc,0x304,0x7ffc6c05c188,0x7ffc6c05c194,0x7ffc6c05c1a0
    3⤵
    PID:2284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,7414879209185454806,12351881132227019111,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2012,i,13798272420662608366,2690741187364434134,262144 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:2
    3⤵
    PID:2772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,6940461052986257191,15178615115493737064,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
    3⤵
    PID:2700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,4765066188000774533,17774214977890560278,2097152 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,5719464370293692103,3723769734185555338,2097152 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,12578454949876052009,15291744965954449221,2097152 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,10432112626206410570,6585823787718574335,2097152 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:9
    3⤵
    PID:3240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,1783184217622609804,14944599625458949509,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
    3⤵
    PID:2236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,3222504902425274669,13817587020505527279,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
    3⤵
    PID:2964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,17064198905413443486,2854346386742752662,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
    3⤵
    PID:1784
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7759175237154776319,16996865443246767023,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
    3⤵
    PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7759175237154776319,16996865443246767023,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
    3⤵
    PID:1752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,2013746713677151310,17890517143976488832,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
    3⤵
    PID:488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,9575016289128127708,17158258497909850025,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
    3⤵
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,1650889377446595256,8234003488712649117,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:14
    3⤵
    PID:5180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,12884223252386698443,9742914734200962004,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
    3⤵
    PID:1352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,10322033031455988873,3231672853585477604,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
    3⤵
    PID:4868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,7587865874318473969,11417325212935197692,524288 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
    3⤵
    PID:4900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5740,i,2335090899677879056,3013995424788105629,262144 --field-trial-handle=2568,i,18004060597836780555,4468800199678758042,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:764

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 c1f24f914ca902dfdf44427ec040a8fdda784e5e9d5b62e9d655ca11c6d082e7
MD5 84fb286362653faa3d3b61eb27748d40
SHA1 f4a03858baf1c432bc7aee40fcdd5ffbfadb59e8
SHA512 cab965c4ecb7c7c17953c568e79157fd411b0ccc9674833b2a28701c5b992ae82af9a2066a1c404a3b17c1c7053a48eb176c41524d247c4c86b13cded7b04740
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7c:fwUQC5VwBIiElEd2K57P7c
TLSH
T132B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 3b756a85ab3a49577eb66e338c86e44323e86ae1099066a2b7551ce64511de49
MD5 c909b068d4cb4a80c41275ed672c77ec
SHA1 9a7d9d0f94a92ecfcbead73e0e49fd04b989a890
SHA512 0955bcc994dea5eb60f3a12cd875702fe5dbb925ed49d074fdc55323554f0dc779e1eb35a9df7756bfc00df0cfa332b5e3556d70fda43b1164837d78b732ad7e
TLSH
T1A041EB3063EA28E9C72C0177C3D07B9A32F8C4A546035E61C4481D30C80EF9C73D0467
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 884a1a041f9170e02bae3e1dca979af7e641d1be4acaf76b72455256100d66e5
MD5 86734c7e78be5a9f542aa23bf43c1cf8
SHA1 b038b2570c1c79e5a6509b961c976a0eb2d2e56f
SHA512 640c4ff10ef7e6f089244af6b391073ec7423a9cb0c82fa632c578f9af7f311917f5df95315d61df5eb2f07e485ad5e391918f2a964228b699124f83e77173ff
TLSH
T13C41C1F783F4957D8A0196F0AA146E1FCE2D0515432C7D5AC9E0AE2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ec61832cf59010639f4800848d537e2f95ad6672400dc1ad775f122559a0e5eb
MD5 3671f866d0ceabe27b01dae320f3b202
SHA1 b36a6adfedcfffa841523d47c1f71eb070eecb79
SHA512 25c86e4f1563a4b0a7348e2f46fef12402c45f86d8afd9d3b0c3012d42adf1576ea8838c4135fef671ed3c8888ab1b02e1ace46e34e8a54fa2d3804f594cb591
SSDEEP 192:sxRjRQyM/jK1Ml8wCK/fYsJqHMZjrzoA8p4Z/g6+WNIYE/CZKUGQIgVdJ:sxRjG8K/fYs8Hy+U/5I6vB
TLSH
T12662FA156A34A977CCDBD30DFA557F53D6F81533A2901E44AAFC8A1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d248bd4754dd0448148d7863e09da333205e85e7d1b28acf1a16560be1541fb2
MD5 2ca97d1452cf42c8cc942ae06a91b959
SHA1 efe4a3597e026e42eb2a7d95e02e5fa7d75e2d5d
SHA512 3aba8a8fe006a4e30014e723fd3aca18bdbd2b7f90959680bca0c34fafd134b808b1ac23f12df6fec501d271bd729ac2679f4ee09fb5cc4ac49d2c3b5b756e53
SSDEEP 192:sxRgRQyM/jK1Ml8UQMCK/fYs7qKMZjrzoA8peZ/g6+WNIYEJUuKUGQIgD8dJ:sxRgGqrK/fYsWKy+a/5Idvu
TLSH
T14562E855A934A977CCDBE309FA517F53D2F85533A1901E44AAFCCA1C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 03c0c4e6ffce9a09ba1583a6ab704bc72225cab36513cd9453284e1868e7cda7
MD5 ecd63cde68e5bd4d2635375caed5b656
SHA1 67fea054e72eae2ca35133b155c12022a281f11f
SHA512 409a6be266059c38f40831a1b51f21a6d9bf5e52608e2e7460f9ab83b59a4346ca46f6a6587dc940e62b7d177dea95a74dc0cb3b11daad8f61d5e9461be5d5c3
SSDEEP 192:sxRgRQyM/jK1Ml8wCK/fYs7qHMZjrzoA8p4Z/g6+WNIYE/CZKUGQIgDGdJ:sxRgG8K/fYsWHy+U/5I6vs
TLSH
T11262FA15AA34697BCCDBD30DFA557F53D6F81533A2901E44AAFC8A1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 9e1de78dc05df6b62ffc1e8a8d3a1e24c104c6cbc2d1a516b7545577b7e9086a
MD5 4d7413235407bf6ee2f8139dc4c221c6
SHA1 38a2e41157c8b2fee278ab8e74692594b4ce6acc
SHA512 b8aa464709195dc0e49b798f70fc1c9fe6ac52d0974c182958cb10bad17123cd3f81f7e9085778655808ae96b033fd891fddaae2a07aed6beea580bc73bef7fe
SSDEEP 768:0hii4W7pLuL7jaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OViqZOV8uroJ6r:0hii42E7jaWgH7f3Qu1jadqZI8lc
TLSH
T12DE2FB3B680CCB7F4F404ADCEC29BD9A6DE801CF56D8899447EA884C03C66EB551A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0f521ddf01259d963344242c9d8f9a30c2ec57420a6903aa0d93d69ebd5d4e72
MD5 59b28c7a21d23b86041c9a1a2dff0c98
SHA1 f7e73af2d7276eea6a6173bf847882565ab3a2f6
SHA512 1b8e831831cac9c0c0652b1e9c4755d47ee07cff0393d7c363bd1d53104cd71ea42bf7c5fc84ebaa47019c041225ae6bb81974c87232573a8e4e298825fcd110
SSDEEP 96:KRJGXThDXzWnUCgbzK4qgVzcZRsPXQH0VAE+imkWivPgMkK4BgGkckEP+90lK2My:CJGXThDXinUDbpqgVgZRsPXQH0VAE+is
TLSH
T12C91D12175FA46843C7E6A0C81F8991B96C274E27054E92B3BF822B55F67E024DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8fdd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8fdd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1e39f97807b21dcd3cce00f7d7e3ff8d2a98036c2d1f10df83005b6504b364fd
MD5 8c3c4502314a24060b8ebb1609c7c964
SHA1 6dc399710547d246f325346f83e823d649c4c20d
SHA512 ae7370397467c69fdde82930bb3caf6eac289c8f5389a8e3cbad5c467068012e8f9b8cd78241afc247c7e756b45f03f26f142eaa4f574c276547836b58d11f44
SSDEEP 768:UFQX3swgpqGChKTGaK48dHeByERRFzjK3YaPi9PM:3X3tGW48dHSyw/MPr
TLSH
T1E8038DB1D864DE679CEB97CABB437647EEE00163C5C89AE4D6C89E4D40C60DD070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0e14c1b6f92a5720e16c87fe5ed362999ec7ed10fa69eb8a63ecd069dff2e28e
MD5 d670f7a9d079661a61cc40e22c6e4680
SHA1 f14a27eb891e0e3046f3f2c2a844656c6ec25462
SHA512 572fff7589426a5a347801ff0a64d305f9f97e876fda77fd52b0d0c1e334c30d1680efd85531f23ac1eeac0e10c8633ad009c8a529e9ef8b7e250ef6b03294d9
SSDEEP 768:rD3GqGClDkTGlK48dHeByERRFzjK3YaPi9PM:rD3fGgS48dHSyw/MPr
TLSH
T1ACF2AFF0A8686EA34CAFE2897B437747AEF40163D0C45B64D5DDEB0E448659D1B0BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1fba462a2219c6b4371e4bf66d6405155e5bb0cfc2836ab79855f490edafe318
MD5 211d71b9fc14474aef7755a823abff50
SHA1 01f3ebaabadacfd5c8b31d76ca084e6dedcf88f2
SHA512 4e6a517ce6e7c2adc656bba7c98e72418b67a20b0ab8fa4489343ad072b3b439c71ba465a12e5e035349e66254e9e64991984d1fa8ae848d4cd67213a66dd7fd
SSDEEP 768:xD33qGClDkTGlK48dHeByERRFzjK3YaPi9PM:xD3aGgS48dHSyw/MPr
TLSH
T1C0F2AFF0A8686EA34CAFE2897B437747AEF40163D0C45B64D5DDEB0E448659D1B0BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 129007d88131c187ee5c0462aa62c35b5d2e19ae53714fd68e68a6c0956be9c3
MD5 1ff6e10446d5c3944defe13142e60157
SHA1 ccb09c2c2ce9fa96e07db3fcb418bb893bacfc0c
SHA512 5e2131582cbcf6b907507ba34484246e37ea1b5ab0c712b033adafd93329403790a779e644932f89a173b302b99768de4ad5aff4f554807bc6260b04d7cc1dbd
SSDEEP 768:Qrv+4UNbdf3/qGvYDkT5K48dHeByERRFzjK3Y6eVH1SCj:QbsbJ3yG4l48dHSyw/4EH1Z
TLSH
T11703BE71A8A85E734CE792897643B617BFF4421386C41BA4C5DD6F4E828B4DC130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 3689ab3f3c270837c8f7d0627e2dac3e2db0d2d910939d5238ee566689c8bc18
MD5 cbcbed83bd69dfebac36b84ec02c3110
SHA1 88f9a1a3c29f6566f97bd7e87d71430c9f0d71f8
SHA512 a842a11bb5a16d0574fae8b452da38213e9ccbc3bd3e3bf2262fc423946d0469a81998e28d1a07e1b98b01f0191586849554da7dda9864d29520af6fcfefa905
SSDEEP 768:brv+4UNbdI3wqGZlDkTGlK48dHeByERRFzjK3YaeVH1SCX:bbsbG3RGfS48dHSyw/MEH11
TLSH
T19613CFB0A868AE734CEBE2497643B647BFF4016780C44BA4D5D9AF4E85864DC170BD2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6c19f5cd9edd886d91065c485c95c6a98ca2d0d5f5d23bab44314f0ed8edaf82
MD5 a26c90768a57fe31a2b22569a4e2ab74
SHA1 53f8ae43c8f7c036ea7cadc268f926d0a02ba329
SHA512 1acb9fd6c25ba0ae8511409e7035279c4116912268e42b2a22ba646f38237280494f93a1337b39dd3aaf41234d577b5c2560c94a8834f7b0be31b21c47e05e94
SSDEEP 768:Urv+4UNbdf3MqGerDkTG8K48dHeByERRFzjK3JaeVH1SCj:UbsbJ3lG+j48dHSyw/3EH1Z
TLSH
T18103BFB0A4A8AE734CEB92497683B747BFF4016385C44FA4C5D9AF4E85864CD170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4292_1330322298\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download