e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eL.svg
Size 3KB
Sample260817-e2jp9atvbw
SHA256 e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c
MD5 735c5dd9687af27db46d1760af81d1a5
SHA1 0362449843acc75186d102a08af6cf07a5b90853
SHA512 26772d0a891c6a143982ad5a722edd3afac15222392ad8c66bec616770bd539ac0f223fe367a8615d39c4c5ff3ffbaccfd34400adc4c2fd98fac718edffb22b1
TLSH
T1AA71288876F83EEBD7D802970D41D4B84B2F946BD822978DD3CB94E875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4692	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314143759540156"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{E563E4CF-A70B-4E9C-99A9-0A5425C23904}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5184	msedge.exe
5184	msedge.exe
5184	msedge.exe
5184	msedge.exe
5184	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5184	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4380 wrote to memory of 5184	4380	iexplore.exe	89
PID 5184 wrote to memory of 3080	5184	msedge.exe	90
PID 5184 wrote to memory of 1236	5184	msedge.exe	92
PID 5184 wrote to memory of 4692	5184	msedge.exe	91
PID 5184 wrote to memory of 1236	5184	msedge.exe	92
PID 5184 wrote to memory of 1236	5184	msedge.exe	92
PID 5184 wrote to memory of 6048	5184	msedge.exe	93
PID 5184 wrote to memory of 6048	5184	msedge.exe	93
PID 5184 wrote to memory of 2780	5184	msedge.exe	95
PID 5184 wrote to memory of 2780	5184	msedge.exe	95
PID 5184 wrote to memory of 2780	5184	msedge.exe	95
PID 5184 wrote to memory of 4304	5184	msedge.exe	96
PID 5184 wrote to memory of 4304	5184	msedge.exe	96
PID 5184 wrote to memory of 4304	5184	msedge.exe	96
PID 5184 wrote to memory of 5996	5184	msedge.exe	97
PID 5184 wrote to memory of 5780	5184	msedge.exe	98
PID 5184 wrote to memory of 5780	5184	msedge.exe	98
PID 5184 wrote to memory of 5780	5184	msedge.exe	98
PID 5184 wrote to memory of 5996	5184	msedge.exe	97
PID 5184 wrote to memory of 5996	5184	msedge.exe	97
PID 5184 wrote to memory of 5912	5184	msedge.exe	99
PID 5184 wrote to memory of 5912	5184	msedge.exe	99
PID 5184 wrote to memory of 3448	5184	msedge.exe	101
PID 5184 wrote to memory of 3760	5184	msedge.exe	102
PID 5184 wrote to memory of 3448	5184	msedge.exe	101
PID 5184 wrote to memory of 3760	5184	msedge.exe	102
PID 5184 wrote to memory of 5116	5184	msedge.exe	104
PID 5184 wrote to memory of 2744	5184	msedge.exe	105
PID 5184 wrote to memory of 2744	5184	msedge.exe	105
PID 5184 wrote to memory of 2828	5184	msedge.exe	106
PID 5184 wrote to memory of 2828	5184	msedge.exe	106
PID 5184 wrote to memory of 1076	5184	msedge.exe	110
PID 5184 wrote to memory of 4912	5184	msedge.exe	111
PID 5184 wrote to memory of 1408	5184	msedge.exe	112
PID 5184 wrote to memory of 5136	5184	msedge.exe	113
PID 5184 wrote to memory of 5136	5184	msedge.exe	113
PID 5184 wrote to memory of 3660	5184	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ffc618bc188,0x7ffc618bc194,0x7ffc618bc1a0
    3⤵
    PID:3080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,793172478211217834,7373980137817749735,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,11040713492185141778,17353010691154487986,262144 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
    3⤵
    PID:1236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,15602858040573659506,14532021801828898394,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:13
    3⤵
    PID:6048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,497900181677045668,10359653631856724023,2097152 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:2780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3708,i,305359078953158482,14550654542338768123,2097152 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
    3⤵
    PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,6366162155835118280,7021721435725963112,2097152 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,771671321626298115,13461180355198657735,2097152 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,17882492164632956801,3683656793697392420,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
    3⤵
    PID:5912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,2920630361747359675,1270112499749329941,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
    3⤵
    PID:3448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,7164559560382139097,5211649712767184098,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
    3⤵
    PID:3760
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,14732611711928996162,15974664515003609038,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
    3⤵
    PID:1660
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,14732611711928996162,15974664515003609038,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
    3⤵
    PID:5116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,10026792599556281963,5377247394487718978,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:2744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,16473978244387173530,7748564649174501061,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:14
    3⤵
    PID:2828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,8404270142542895310,12948553688271274844,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
    3⤵
    PID:1076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,4849965009523058240,10115128131599173502,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
    3⤵
    PID:4912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,1347159872208808230,10391207905364871760,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
    3⤵
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,5234612847953522411,13911588390854319558,524288 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
    3⤵
    PID:5136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,4944248130680191115,1365830708039486515,262144 --field-trial-handle=2232,i,5012599469633105552,16495635515545895512,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1eb2f9d0a76052a63e11520e899949fcdce119b19173befdf09eaa210ed07ba8
MD5 83bf86576971f5a4c2fca17d6f11455d
SHA1 d10511154e71c670d98bef7d0435849be555e3fa
SHA512 f66b7f70a39137290484f230ff011f69af8245ef8fde0561498e93bb19aa0b849123620d1b249b6252cd327a48f26f77d5dfa14c33e327394e766f703b89295a
TLSH
T16151099483A58B82FBA185B75CD2D89975F0CA95CD0F7A1C86517D30E806FF8E3E0097
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5996a8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5996a8.TMP
Size 2KB
SHA256 bc500b969a687f40c2b1495cb48bb3209a2d1ebfe3d8ea98a3694fc0f02c1b5c
MD5 423c17d9f67c644d707e9f39c5011dcc
SHA1 9fabcb333d6370b7cf33bffb1bd32560077c79f1
SHA512 ab690d965a305abce86c6e0379668bf4064aecc40c92f59f282a643f81d3bfa727f5a57564be75c0056ab64ded7f9d1bbe4607430ada7364a80e36b48972d402
TLSH
T1D1512C9443958BC1FBA149735CD2D89965F0CA85CD0F7A1C86503D30E806FF8E3E0097
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 94eb4872c855501f93b901bc077dcc59009d94200437b9ba06fb416578e0c1f5
MD5 8a3ce67569b287a2c64ae62d71de52bf
SHA1 a4d5c6e66e14382c4e394993e38b30ecc885e4ab
SHA512 a7ab36bfdb114ac08432076315f60137aa4bb7d82b3daba2f1924db522aabeeb6f5a17d28a222a0ce5d2827479a142baef8e026e784d4a3272d1f912e2b6b0f8
TLSH
T18041ADF783F4856E891156F0AB186F2BCE2C0515432C7C5AC9E4AE2793F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 90bb928cebe00b5fec10b33b6d2005dc98ac304b3762a1c405c80fa388b25562
MD5 beef89f574efdab9134e991ba8f500f7
SHA1 49fecbbbf4dbfc5e7e4ff85d55f7c7e1156fca9d
SHA512 42ce86020c7eb3963ae8c0beb9ed4cf59ce606c1f487799ddceae84cce0f642575348a7e60970d266b0bd9b9ecc0821872b5551a3757f7661f467abc7fb77128
SSDEEP 192:sxRqRDCK/fKspWHFSa2zoA8p4e/g6+WNIYbC1H6bGOIgViJ:sxRqUK/fKspWlSarf/5Ix6jM
TLSH
T15F42C8166E28AD3B4CCBE31DBB557F53D6F91132A1905A48FAFC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3e112b6bbd78e8f5fcd4b1fea63c37c5a63ead79961249f2a23bb127107ea0ab
MD5 b22c3614961d11cd90a909fc98591e62
SHA1 948aa1f33aa1815a41126ba8c8da101ea6085701
SHA512 ece4302505cc9438e33938582ecd39575bd1c65145cbb428c6016cb5e5588aea71aac027a47804b2abdf13083c6746f1616d6ac8ee44e0fb5b0ab50cf0b8b570
SSDEEP 192:sxRdRDCK/fKshitZzgzoA8p4e/g6+WNIYbeZH6bGOIgDQiJ:sxRdUK/fKshiDdf/5Ip6jr
TLSH
T17542C8166D286D3B4CCBE219BB55BF53D2F91132A1905E48EBFCC61C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f2f5215b6b9c4a73e4945ea4c6df79a8bc88b3b02de0c082ac3e40b69ff1b93b
MD5 bc184d7392428e6708feafa33227076d
SHA1 8fc41603785239826debfadbd26ecc77ed3842cc
SHA512 9b9227130d4b438af52b15a1b509767ca6f51a3e6ccbe76df3b7de345c0249fab1f667ea9a76a3ba3809bba30481084e4e95037a9433b8b177cab4326cb2e199
SSDEEP 192:sxRdRDCK/fKshWHFSa2zoA8p4e/g6+WNIYbC1H6bGOIgDqiJ:sxRdUK/fKshWlSarf/5Ix6j9
TLSH
T1D142C8166E28AD7B4CCBE21DBB557F53D6F91032A1905E48BAFC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 2281d0c28e55f550e2df90ce3dbf284607d8f66b3f4370640fde61c7f2fab55e
MD5 a25eefa70a8fe2f17ca585ba0e3dd717
SHA1 d0407d09c4e5d2bc3ce6b0ff69eae9141d63e7fa
SHA512 8d7444c633181167d1057475af7d65595de48ca808574b61235cbcdf9c0218060e637cc74567fcb4725649b84cf238092dd6d3f2cac6ef04da0ba1b3d0f0c78f
SSDEEP 768:Fb1pED7pLuL7otWgikfq48F1+UoAYDCx9Tuqh0VfUC9xbog/OV8r2J8IBroSs5:Fb1pE1E7otWgikfq4u1jajr2yI6L
TLSH
T17DD2DB3B340DCB7E4F804ADDEC197A9B6DA802CB96D8CD8047FA951C02C6BFA51160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b0a95021c06ee810ea3fa32efe60859149806e657aee003bddb0b43cbc1b1190
MD5 8d311a7cf26d6aa663c042dd41e89435
SHA1 f2431589cdbf813557eb66057bc3e85b060dbd12
SHA512 c19c194e87c1d8b53c5ee9f501cdbccb54bbd4370e5f74d237235383ed967a38f62f85a0438e7412909be2ba1d63ef8a9a21114423d17eaf508cc0c88f98bc57
SSDEEP 96:KRU1gkeCGEWCPvgsEK4hgklQUuSW0Wyf/gc0K4xgW0cUUfO0pHzc5t7xxNWlqggP:CU1gkeCG7CPYs4hgklQUuSWLyfocIxg5
TLSH
T19E915811703653803C7EA60C85B99C2F92C2B462351DA6BB7BAB01564F6AF439DFCDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4aff7ea07fd0c46813d42812f1feac9d959c0631468b1a96746fab3615778a5d
MD5 4252738b64c10ff1da9d2584ddb02483
SHA1 38fe335d10ce8210d6ec0026f67e81f2ac83f37f
SHA512 668f1f674c14fc01504c54703bd49c0aff9973e4686d0030bbfb35dae7f2c8b24c7d0df610757b0b183f2093653ae47a328ec85ec9b4d7ca8f29f8446053687b
SSDEEP 768:aq3t3zfVYvHWtZu4aWADIidy8Luw8pJ/rhWL:aq36WtZzaNsuVLToJ/rhWL
TLSH
T1D1039D79FC66EE7798E76385B2423A46AEF8916385CC49D5D8ED5F4E00C34AE0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6655f8c042f9f1fd8c6578d2574f82f719e6aaed424af615b2aac341d7d1c86d
MD5 eb4b1fd5d4f883c4387c9073f5278aec
SHA1 8e31607d0d3b56450cf8ef845342d35d9d345dfb
SHA512 4bc1cc4befc28b04ad3a8844f3d981f91769552db05db70ef276344cd37ae59bf1581207a83338a5ed3474144137c9eebe5277bae231f66dcd7407c34a63cbbc
SSDEEP 768:AK3t3zfGBqobGHVtZu4aWADIidy8Luw8pJ/rhWL:AK3NVtZzaNsuVLToJ/rhWL
TLSH
T189F2B079BC56DE7798AAA344F1833646AEF89173C5C84AD699ED4B0F00C34AE0357C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 f139e7018cdf81072b7b8e0558506ad59a1e43b858e969e02d0c85a1fbf0cba1
MD5 ebf2c1d1dc1800416aec68335e3ab270
SHA1 ad972705415177d0914d1d458f1c55d1108cc3a4
SHA512 0a1ade48b9d463b38b9029e0c0bbc2dde6ab798f424f33ac9e89853c6b81a36d54c149c1b39b6ab76b4547c39d724bc35d428261cebe10b53a33fce18a694da3
SSDEEP 768:krv+4UNbdl3QzfGBqobGHVtZu4aWADIidy8Luw8pJ/rhW5:kbsbj3aVtZzaNsuVLToJ/rhW5
TLSH
T12913CF35B859DE7788AA6284F1873647BEF861A3C4C90AD5D9ED0B4E00C74EE131BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9816e92eeb49e95bf2333893b9d020ce9027782a3daa35a02af725eb98c69aac
MD5 0e84fa3ae3296f8839c72eec577ed28a
SHA1 3dc2213680b7f26ffc5ac4911e01c17f72ce8109
SHA512 661e1411be343199e54c29a0fb53080cd6d080a55cb808af5583bc12c0c7ec67bb74990b9dadb6456f4115891426ca48c84b961610a5757bcb0a257541482080
SSDEEP 768:9rv+4UNbdC3qKOBqobGHmpZu4aWADIidy8LqleVH1S1C:9bsbw3fmpZzaNsuVLGEH1d
TLSH
T10503BF36A859CA779CF79284B1873607BEF8926386890BD098DD1B4F41DB4AD1307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ae8aa0e71bc5547004d469595b288b14925ad3d1fc6063ef0d77e16fe1f2d99a
MD5 c18fa99ebf653119f2bd60d56c2b3f50
SHA1 ab4b946fe4debe769afae83782a058104d978063
SHA512 9294e1078bdfb85e76e66c2227e9eacb078d63c062ad80b081d6c74405a2003a51ed53ce1b4ef29ed2f815f4d9a9e92769528ad280f9d949d7cccff79511e13f
SSDEEP 768:orv+4UNbdC34WgBqobGHgtZu4aWADIidy8LbweVH1S1C:obsbw3ngtZzaNsuVLMEH1d
TLSH
T13D03BF36A859DE735CF7A284B1877607BEF8616389890BD0D8DD0B4F01874AE130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 84cc21e45c483b5073d2f4c0daaca7722561587392714781c8377a4693e98252
MD5 ccf713a82f117310208b8e3748a0dbe1
SHA1 12320e81c54efff4f4bd220efd3603a5253205d0
SHA512 85eb6930eddc035735e10f25b7a5227350f08090764518c4f82f9cd54b65589769d985fbec839f4547033bef2aaca20e0e703b21345282de034e06df8d62e195
SSDEEP 768:grv+4UNbdl3Bz/GBqobGHVtZu4aWADIidy8LuwF:gbsbj3ZVtZzaNsuVLTF
TLSH
T15603BE35B86ADE7788BAA284F1873647BFF8516389C90AD4D9DD1B4E00870EE2317D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfc24660-16a1-447e-a5d0-9124d800b9a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bfc24660-16a1-447e-a5d0-9124d800b9a7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5184_225673124\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download