3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 07:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v16P-m2-eQ.svg
Size 48KB
Sample260817-jjp7jawbme
SHA256 3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a
MD5 36e987192c44bf8a98cc83525c6860ab
SHA1 c2bbafef0aa4819ca038878ed030e235bf20353e
SHA512 51b10e0979e1185dd44631fa0e92cb6839b417135169b8d23b95268775147c7b87cb47a12307570476a595a81167526992f137c9009e50d73a3e1d80080f7f73
SSDEEP 384:cl1tz67bJ/MErSDkAPI9Fs0NsHJCixiIX1dkWs4Cl9sRCOWnCAX+3utANO:cDtimp7s4k9sySO
TLSH
T1202350B537F47C9B8BCC034B5D42EC6C45AF94B784986A8C9BC790E8A548368F7EC590
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1688	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314261444228139"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{EF27207C-266A-4A42-8ADB-4F1B79E0EDB6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5928	msedge.exe
5928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5136	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1096 wrote to memory of 5136	1096	iexplore.exe	89
PID 5136 wrote to memory of 2700	5136	msedge.exe	90
PID 5136 wrote to memory of 5852	5136	msedge.exe	92
PID 5136 wrote to memory of 1688	5136	msedge.exe	93
PID 5136 wrote to memory of 5852	5136	msedge.exe	92
PID 5136 wrote to memory of 5852	5136	msedge.exe	92
PID 5136 wrote to memory of 4996	5136	msedge.exe	94
PID 5136 wrote to memory of 4996	5136	msedge.exe	94
PID 5136 wrote to memory of 3108	5136	msedge.exe	95
PID 5136 wrote to memory of 3108	5136	msedge.exe	95
PID 5136 wrote to memory of 3108	5136	msedge.exe	95
PID 5136 wrote to memory of 2400	5136	msedge.exe	96
PID 5136 wrote to memory of 2400	5136	msedge.exe	96
PID 5136 wrote to memory of 2400	5136	msedge.exe	96
PID 5136 wrote to memory of 1720	5136	msedge.exe	97
PID 5136 wrote to memory of 6136	5136	msedge.exe	98
PID 5136 wrote to memory of 1720	5136	msedge.exe	97
PID 5136 wrote to memory of 1720	5136	msedge.exe	97
PID 5136 wrote to memory of 6136	5136	msedge.exe	98
PID 5136 wrote to memory of 6136	5136	msedge.exe	98
PID 5136 wrote to memory of 3304	5136	msedge.exe	100
PID 5136 wrote to memory of 3304	5136	msedge.exe	100
PID 5136 wrote to memory of 4320	5136	msedge.exe	101
PID 5136 wrote to memory of 2468	5136	msedge.exe	102
PID 5136 wrote to memory of 4320	5136	msedge.exe	101
PID 5136 wrote to memory of 2468	5136	msedge.exe	102
PID 5136 wrote to memory of 3232	5136	msedge.exe	104
PID 5136 wrote to memory of 2856	5136	msedge.exe	105
PID 5136 wrote to memory of 2856	5136	msedge.exe	105
PID 5136 wrote to memory of 4788	5136	msedge.exe	108
PID 5136 wrote to memory of 4788	5136	msedge.exe	108
PID 5136 wrote to memory of 4968	5136	msedge.exe	110
PID 5136 wrote to memory of 4684	5136	msedge.exe	111
PID 5136 wrote to memory of 5428	5136	msedge.exe	112
PID 5136 wrote to memory of 1340	5136	msedge.exe	113
PID 5136 wrote to memory of 1340	5136	msedge.exe	113
PID 5136 wrote to memory of 5928	5136	msedge.exe	115

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v16P-m2-eQ.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v16P-m2-eQ.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2cc,0x2f4,0x2f8,0x2c4,0x300,0x7ffda6b1c188,0x7ffda6b1c194,0x7ffda6b1c1a0
    3⤵
    PID:2700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1992,i,12437861564270267498,7239009696684423812,262144 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,16806868695288166928,14331603762788168807,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,9630467514560492920,12945633287692617476,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:13
    3⤵
    PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,17052224590634169454,13947345466273230711,2097152 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
    3⤵
    PID:3108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,13481224368858569728,14377778241833952669,2097152 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
    3⤵
    PID:2400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,10056631836657452331,7123019842377455595,2097152 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
    3⤵
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,7282431299780548969,16432204138671551841,2097152 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:9
    3⤵
    PID:6136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,360850923416091488,16499782603935854004,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
    3⤵
    PID:3304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,12748895968400165708,8625113066797318261,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:14
    3⤵
    PID:4320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,1913436793897957319,13896396622322532162,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:14
    3⤵
    PID:2468
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10293842154350163664,1020115539679155387,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
    3⤵
    PID:1544
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10293842154350163664,1020115539679155387,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
    3⤵
    PID:3232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,7691543610732007682,17946206462595996535,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
    3⤵
    PID:2856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,10175943064310779999,2226653967708737577,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
    3⤵
    PID:4788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1408,i,13105572384383074591,11498643802234243322,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=1288 /prefetch:14
    3⤵
    PID:4968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1420,i,1467796088386058921,7528616135051843741,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=1296 /prefetch:14
    3⤵
    PID:4684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1428,i,12181445375204545980,10905457373414601741,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
    3⤵
    PID:5428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,9554589715348358413,16335711221521424090,524288 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
    3⤵
    PID:1340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6832,i,10661731745330339240,14858480673590519141,262144 --field-trial-handle=2516,i,13089571358175834375,13766602662577901958,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2863f96483f6601215232959201cf15f7809e87041980ff9af19ff3975c253b9
MD5 b77a022b8cacc35a15b86df3bc99ece8
SHA1 711537d4f6c97b8d762fd12852f3462848ef9899
SHA512 b2cc2739d53553619ec3d925a71fea078b0ba4b556b26d66e43c9641d6bd695fae75fb31eaffb6c3dc5b4b483dc8032076836b3b44652aec2227a8c7f3fdf4b3
TLSH
T1AB514F43831E159FD735C97A2DA85A3F3AFAC267058BAE1470902DB4D70AF4453DA223
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b6b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b6b4.TMP
Size 3KB
SHA256 f21c8cec1c9c4a2874f92df2ba3fd1bc7240c560ca52f2deab2e522cc7b43a65
MD5 9f817855dfd2f2132b5e206bf358dbe6
SHA1 ae2c8785537e3889f151296636341b23649e59d4
SHA512 28993d609da24e9bbbae0bbb19bc66caeb7e6e3d15b532a4cd06ee282ae9e1e82cb7c3fdcd7450b015a3b2f92fb4558776e7145ea5dfb00e3877e22440415498
TLSH
T171514F43931E199FD735C97A2DA85A3F3AFAC267058BAE1470902CB4D70AF4453DA223
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b21cee08938dffbbad130ad68091b20d2ad4b624187b3f082796814cc209dad7
MD5 28c45bd2f3f4ea9de9b93b0c771a81cf
SHA1 db4f7bb2fd23092ff88e87af13025810ed09f301
SHA512 6b9f184f1ca94c9ecfaf82dfc376a4972036bd035708ae5817ed8f6b9935d9e3205219cc2b5b7478ee9aaa8bc93e9070662d26f0164c9e7f93355fa73f2b829b
TLSH
T1E941ABF783F4856E890196F0AA186E1FCF2D0915432C7C5AC9E4AE2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 76a8c14272c1b9b4aaeb33eecb945a0c98a1a6fc207c97faa0b5b60fd511bffb
MD5 51b49fa1b55d955091ce5015beeddcb4
SHA1 d055ba529cd8680fcd96faa8afc563654926f8e5
SHA512 2fc952fd6e30a88568a258002e1d958a3fd51d70470bd36640422a3df403218775e78b4ee279ce83a8628661e21d4e354c36d310e4489004e8ce140af31f6028
SSDEEP 192:sxR5+5RslC8B/fMRsIHsQcBYCblL+zoA8p45j/g6+WNIYEg5U3SFGNvJ5IgVDJ:sxR5+5S08B/fMRsIMQcBPlLjMj/5I4YP
TLSH
T17532B7166928A93B9CC7E21DFB65BF53D7F9503361911E48BAFC861C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 78656fd845a5ec3796df0264fa1c0dba33771c8c076ae0a390106f93f6040202
MD5 3858ae3197c882729b2957d0cfc41523
SHA1 c1a1b59552a57bd8b12294defee0a7ca545d31ab
SHA512 1cf4cec6da5dd1a128b9b4d0c40eb1977ea5c207b1d62c1efc6028c9ca01989df0faffe6553147fa3afc9f7f1c14d480d08d218d953a84b59f866f5ddad5fa38
SSDEEP 192:sxR5n5RslC8B/fMRs8PHsQcpUYCblL+zoA8p45j/g6+WNIYE75K3SFGNvJ5IgDvi:sxR5n5S08B/fMRs8PMQcpUPlLjMj/5IB
TLSH
T16E42C7156928A93B9CC7E21DFB55BF53E7F9503361911E48BAFC8A1C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 598abd682c2f014784fc711e7233cce0d192177c74e58e65e3756dce31f6d131
MD5 343d9a54ce3f1fd534e32c453b298207
SHA1 0c2c16160d77430b36b27303e73eff122b4f3046
SHA512 6efb394a89e27a9db17e25cf85d8efa24daf96d4756a59b40a2aa07a7e8c0d1b5358657f47e69667336c37943ed57dd0183f7b29d8963dd576c76dba1b9136f9
SSDEEP 192:sxR5n5RslC8B/fMRs8PHsQcpUNZB7UrRCL+zoA8p45j/g6+WNIYE75K3SFGNvJ5u:sxR5n5S08B/fMRs8PMQcpUjtIRCLjMj6
TLSH
T19A42C8156928A93B9CC7E61DFB55BF53E7F85033A1911E48BAFC861C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e82e373a7fbadcf0d93071c4521178f4b65eed1100fa64437c43a6371dc92156
MD5 cdf6a6d5ecc8ec904532e393ca134581
SHA1 53462345cb9320fbff5028d81fe5e87a802f305c
SHA512 a06abe06465addca8a27540d9d48e95d5ea0437bc630d79aa212158cf6af58e1427b005e63587931b09fc7383255ce329f8d3015ea2be63bcb0b7dc32c5b61bd
SSDEEP 192:sxR5n5RslC8B/fMRs8PHsQcBYCblL+zoA8p45j/g6+WNIYEg5U3SFGNvJ5IgDvq1:sxR5n5S08B/fMRs8PMQcBPlLjMj/5I4l
TLSH
T1FB32B7166928A93B5CC7E21DFB55BF53D7F95033A1911E48BAFC861C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 7804c27ec1bb04f590e74d313cfa8134804bedb804dbb85dde2c7d4477941aa1
MD5 506be69fa28d75550a122a35e5d9b499
SHA1 02f72dc286996ae7126fb33cdbbc7adb0c3ebb40
SHA512 c38012db967c6c06a0a13277aad8fc1255eda470d874240c1c26f62f3df0dc799e6a247dec25d3f810da83bc2026fa348e93a350c7cc4e244b5f15047711db77
SSDEEP 768:40Dk6DJQD8/F7pLuL7N0DbWgQ6DjfIQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVwb:40Dk6DJQD8/TE7N0DbWgQ6DjfIQDFu1q
TLSH
T16DD2EA7B640CCB7F4F804ADDAD197A9E6D6802CB9698C98047FE981C02C7BEF51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 483a95d9ea0f7a04a6c69306632b726b42b5958790b508e750695b013b18dad9
MD5 f20527e0ee17145e6e0e1068da175c8b
SHA1 776b3e4f8dfd7324dc546c411be82e465a3f00af
SHA512 ae25ad3af8a1178da76a214efe7b7358ba745fbcc8cf7fabfe3d61a1238c6e39433aac25267262540adcd7a7e5daa457ce6516c61bdbc405179dce0bf8e1720c
SSDEEP 96:KRS3eyEkUyW8pBgiyK43gYyciKxQy7HlyLf1vz3W7gugn3K4Wg53cdF4LO8gK9aw:CS3eyEkUN8piiK3gY5iKxQy7HlyLf1vj
TLSH
T118919A01377A4A603C3EA71882B8AD1F96827463341CA83F7BE917610F66E065DFD5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 65bf3d227344f12a212149e6236b0374216c337ecf0d1718d8b6123be384164d
MD5 09625e477b91f01fd599fed6b44c19eb
SHA1 b88094ebf4901c02ba96b1a20adc1118c31fd1d3
SHA512 485cff39286753d702a0c04cc68be2045c6e2f68684bf4705093b85dbf3df59c8a6f15a4420618bbb057b653e4e75964041a99ae438500368a713802edf3f15d
SSDEEP 768:o93ZClLDSknZG2WgeX6+qTko0u229a4vsTiV:o93+OvVTVKa4nV
TLSH
T1B4F2AE71F8629D7388AAE785B2477283AEB41173C6C81F48D9DDAE1C050326D1B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 c4dc84c02c53c577164d66c4da6154eb771fcd588f60680981c83644748686cb
MD5 66c674cac34d12cd11bafbc712376075
SHA1 4d02d4f972f8b09eeec13296f5eaf4dde4f51415
SHA512 47e9d53357095da7d89003af684e602fed3020f3d831573d07892297f022352681aeb8766340b47ad46de11b818d384b050f4d9d1d655b742131063f8368d8df
SSDEEP 768:AV3ZCl1DTd+ZG2WQeX6+qTko0u229a4vsTiV:AV3zyvVTVKa4nV
TLSH
T141E2BF31F8659C7388AAE685B24732875EB51173C6C81F58D9EDEE1D050726D1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5dd2219fe91c2720b3ac8c539bd6333ac83ecc188d787fa74f6f55926c74d05a
MD5 093cfa2991eb8a6af82326758744ada9
SHA1 351435a4722f51808bd4724cde536715da6e8b04
SHA512 f92ecb8433e0e72eee073ced69574ac89776ae2cf6e2f7cebe3423055f19125b86e307d4985a5b91e66521162d6bb9adccb588712ea6512015fd4d586084b908
SSDEEP 768:prv+4UNbdG3DWwDTd+ZGyeX6+qTko0u229a4vsDbeVH1SdW:pbsbU3W+vVTVKa4iEH1h
TLSH
T1BA03CF32E86589778CE6D784B14B75472EB92163C7880B90D8ED6F0D025B5AC270BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 51087a786a8ebcf23413ca543ef1133718d5a99fba7915f29189a55c1a0a46b2
MD5 8815631a5dcc84a881aabb49219bebf5
SHA1 b633abfcb797073b4249b545a2e6fc04560090dc
SHA512 208108bae533b11b025f1b4ad643e15fd186eb56d652620294f4cff579f15d625fd91acfe85a3fa2427b1e6a68942eca528976423ee1fd67516aae0acf729656
SSDEEP 768:Urv+4UNbdm3ZTr1DTd+ZG2W0eX6+qTko0u229a4vsTiD:Ubsbw3w0vVTVKa4nD
TLSH
T1B503BF31F8699D738CAAD684B10772876F7811B386C50B54D9DEAE4C054B1AD2B0FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 7d04b6915c8b80670219ae6121a4838851046af127c2b26ff836edeb10ed2d41
MD5 f0875995620a75abc201af08bf54c0d2
SHA1 c0ff35d73c8e2f607dcf57250859fe92d8320c51
SHA512 57597b191216c68c985347de0337efb2522aa03e290be8557f8e1cc51703d9ccf1389125628e2c8e6e64c53435b4008b163c12084d6d9e357d3b547fbece4876
SSDEEP 768:grv+4UNbdG3UCBvDTd+ZG2WkeX6+qTko0u229a4vsSieVH1SdW:gbsbU3u2vVTVKa4cEH1h
TLSH
T1DC03BF31E4699D7389E69684B14772872FB821B38A840F94D8DDAF4D064B19C2B0FD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c9c9640-9238-4ab2-a1c7-722bf458e682.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2c9c9640-9238-4ab2-a1c7-722bf458e682.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5136_2077634874\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download