385d2d6ed3a18e7256ebad0a527a68c46a39f20b534cdd89528a3fb084525a04

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 19:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m5-eL.svg
Size 3KB
Sample260817-xzy19sysc1
SHA256 385d2d6ed3a18e7256ebad0a527a68c46a39f20b534cdd89528a3fb084525a04
MD5 6543ebf56ad638c15bd11060b03b1eeb
SHA1 1deceeb76ff2eff0c2c0e8d5b6ba97d08e6c9101
SHA512 8979dc038d83456b9f3a34b8a476c0823e3800b4c565f2522c420a3d8e2b81998746773fd3e7429db629a460ed20176871e96eaf4d5c0031540ae10b9a696c11
TLSH
T19A71278876F83EEBC7C802970D41D8B84B2F946BD822978DD3CB94D879282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5632	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314679008332074"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{741BF354-B70F-452A-8AD2-58C151DE57AC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5132	msedge.exe
5132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5228	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4644 wrote to memory of 5228	4644	iexplore.exe	89
PID 5228 wrote to memory of 4380	5228	msedge.exe	90
PID 5228 wrote to memory of 5632	5228	msedge.exe	91
PID 5228 wrote to memory of 4996	5228	msedge.exe	92
PID 5228 wrote to memory of 4996	5228	msedge.exe	92
PID 5228 wrote to memory of 6016	5228	msedge.exe	93
PID 5228 wrote to memory of 6016	5228	msedge.exe	93
PID 5228 wrote to memory of 6016	5228	msedge.exe	93
PID 5228 wrote to memory of 1608	5228	msedge.exe	94
PID 5228 wrote to memory of 3404	5228	msedge.exe	95
PID 5228 wrote to memory of 1608	5228	msedge.exe	94
PID 5228 wrote to memory of 1608	5228	msedge.exe	94
PID 5228 wrote to memory of 3404	5228	msedge.exe	95
PID 5228 wrote to memory of 3404	5228	msedge.exe	95
PID 5228 wrote to memory of 3488	5228	msedge.exe	97
PID 5228 wrote to memory of 3488	5228	msedge.exe	97
PID 5228 wrote to memory of 3488	5228	msedge.exe	97
PID 5228 wrote to memory of 3588	5228	msedge.exe	98
PID 5228 wrote to memory of 3588	5228	msedge.exe	98
PID 5228 wrote to memory of 3588	5228	msedge.exe	98
PID 5228 wrote to memory of 2264	5228	msedge.exe	99
PID 5228 wrote to memory of 2264	5228	msedge.exe	99
PID 5228 wrote to memory of 5992	5228	msedge.exe	101
PID 5228 wrote to memory of 5992	5228	msedge.exe	101
PID 5228 wrote to memory of 3108	5228	msedge.exe	102
PID 5228 wrote to memory of 3108	5228	msedge.exe	102
PID 5228 wrote to memory of 5944	5228	msedge.exe	104
PID 5228 wrote to memory of 5616	5228	msedge.exe	105
PID 5228 wrote to memory of 5616	5228	msedge.exe	105
PID 5228 wrote to memory of 2024	5228	msedge.exe	108
PID 5228 wrote to memory of 2024	5228	msedge.exe	108
PID 5228 wrote to memory of 4328	5228	msedge.exe	110
PID 5228 wrote to memory of 5056	5228	msedge.exe	111
PID 5228 wrote to memory of 4120	5228	msedge.exe	112
PID 5228 wrote to memory of 2496	5228	msedge.exe	113
PID 5228 wrote to memory of 2496	5228	msedge.exe	113
PID 5228 wrote to memory of 5132	5228	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m5-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m5-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x354,0x7ffec25dc188,0x7ffec25dc194,0x7ffec25dc1a0
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,8915411241516108021,6046984824374317236,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,12494774633106600948,883987796806434559,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:13
    3⤵
    PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,5446414581423727876,12821746463485845910,262144 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
    3⤵
    PID:6016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,13961777465914014871,17760900163744091576,2097152 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:1608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,12480990669397622809,16579964430583013302,2097152 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:3404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,10023575275010906963,12208445361504016420,2097152 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
    3⤵
    PID:3488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,7767711986399904427,5122530679154139566,2097152 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:9
    3⤵
    PID:3588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,12611828398774477219,14832129944677785286,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
    3⤵
    PID:2264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,3872292288337501610,12886008565768794552,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
    3⤵
    PID:5992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,1229208499019456578,16604767273151387258,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
    3⤵
    PID:3108
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,15084986593275606451,6914758421965562076,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,15084986593275606451,6914758421965562076,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
    3⤵
    PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,11343997838166249933,5525610292942998276,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
    3⤵
    PID:5616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,14144432483969122438,25759976734325483,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
    3⤵
    PID:2024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,4362052912038975346,9161804532327970548,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:14
    3⤵
    PID:4328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,10611879854774213501,1536132859532684104,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
    3⤵
    PID:5056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,8945486623175125908,7095666077250904264,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,4931476634777696484,17339122217493486916,524288 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
    3⤵
    PID:2496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6404,i,14549611406726610190,3410867585641797131,262144 --field-trial-handle=2296,i,6496045885684373339,10074381180900128146,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 63b5bd14a44492716ac4907e1589f036d9682376ae32235460308500cc7eecff
MD5 6ccbde12d44b3bcb74446af5a0bfef3b
SHA1 675196942e4d2285af6545f3b87a576e0bf114e7
SHA512 43c5ef5a1e9c58bb1049e66bdeb2365c0dd0052e4021e561001a4dff069af87cfa5b7a1409720b52ebd3d4b1eee8360325ed7d3b7554af1e37bf339205ff244d
TLSH
T18161FF5493611EF2CBE94AB3F2F05C9833E88446668B2A0DC05EAFF51406F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597df0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597df0.TMP
Size 3KB
SHA256 dc1f39948082768dff8ade2ad0c72438a7f3f2096b989ad9f935bf2fef6882f3
MD5 a76563408c5d6a06186b644886384af9
SHA1 66a9e6e06d7a0a691e53839a818a51243ed7438f
SHA512 ea73065c2f8d147aa0e39d741936253a27c58b8ecec1aebd0c46186707e1c40f1e44d8b55de80cd8ece6ea9de131277b3dde26d81392b751383d6241d3fe988a
TLSH
T1C461FD5493611EF2CBE94AB3F2F06C9833E88446668B2A0DC05EAFF51406F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7817b885ab1b4a0cb9eaf3ad2edc3e086d57449ed0eb1216b448dd8d86746876
MD5 15b82a1618d12d2e5b8fbd9d7d0741a6
SHA1 883207825bbc2054d575d777e9c1018b78f9081b
SHA512 057c7eb9f72a0ab83070d09011f51633b71ff6d23171227a385197f16f000b8baa6769156fd829121b4b2502ad4d327b68f8b4e19b34e349354373a864407a93
TLSH
T18241BEF383F4856E8A0156F4AA186F1FCF1D0915432C7D5AC9E4AE2793E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b55d87c6a98c79bb3d57ee420843b9fe2d7899c444be537b85202d9de4a020df
MD5 2f6ae1cbca10e86fc21fe52f31cfda57
SHA1 306811f52a49d8aca9a77ad9bb22c4be81151f30
SHA512 60946f636c131f7043423b451d13c4938ec8012cd192b7a2bec0aca00c147816912572fb356817314373bcf227739dbb93d5ee96574b18415eea246b78033a1e
SSDEEP 192:sxRIQRuyM/jK1Ml8UQSCAK/fiCsrGzEZfvzoA8pep/g6+WNIYn80uhPGujvIgDH4:sxRIQ8qlAK/fiCsrGz6fGm/5ITrXk
TLSH
T1CC62D815AA24A977DCDBD20DFA517F53D6F81573A2901E44AAFCCA1C00E6AED6203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4f9795f87ec93e8eb91c8e765b12f11783e5c55df5faa3e9fef165289a026655
MD5 f54ca39fb7c67c3bf970d1b81bca63e7
SHA1 3ac06f21e354a5756225a47f4dbf86f93ac4e283
SHA512 c0065654300a40af46b1fbe347f2d29591e1542b53480e4b163692ad5749a420514ee421c282ba18602d516c2e1b5010df2db586a42830704239ae90b168f973
SSDEEP 192:sxRHQRuyM/jK1Ml8wCAK/fiCsOLEZfvzoA8p4p/g6+WNIYn8UMhPGujvIgV0J:sxRHQ88AK/fiCsOL6fGM/5ITjXm
TLSH
T11362E8156A24A977CCDBD20DFA557F53D6F81533A2901E44AAFCCA1C04E6AED6203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 07b6631c4bf5e1f81b8f2418c614d0aac3e01a3ca14534e5a932277380c257ca
MD5 14158e50c3a4d7236cd1d44c6ea6066c
SHA1 585134ef13a109f34e8f71f53956a17a06abddb9
SHA512 9bcf995a220645e15cc85eea3ca84e1fa447ca2865217ea4155dee3ca9acf1779ea271f21121edcd259751f8d78b005bc0e9716728821269c03b3496e8fdc178
SSDEEP 192:sxRIQRuyM/jK1Ml8wCAK/fiCsrLEZfvzoA8p4p/g6+WNIYn8UMhPGujvIgDd0J:sxRIQ88AK/fiCsrL6fGM/5ITjXq
TLSH
T13362E815AA34A9778CDBD20DFA557F53D6F81573A2901E44AAFCCA1C00E6AED6203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 5ee8c889c840f1c7914ce7cafb8e44780f2c5608d56a229fa9217831b3a89643
MD5 2360e718a5f348950c862663d4810575
SHA1 5d86e43d83836e12f50fc51b01699539db480138
SHA512 a0279b3319d848685bca68aa320d6a125c9a02d710f8332eefaa64ec67eba409a433d0b61ad7f9dd3c125ea2ba6c20d085d78e5740348785d5684ef7fabb9894
SSDEEP 768:wGedgg7pLuL7X6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVgaOu4YgroSv48O:wGedgsE7X6WgoufDMu1jaPaOVYrcFr4
TLSH
T1DCE2DB3B690CCB7E4F804ADCEC29BE9FADA801CB5AD8895447EA840C03C56EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d85ba554730852b5b663beadd3a6d24396d2f423c084cc8c7247253fba4915de
MD5 3d2029c12973295e50d7039074305caf
SHA1 2a58e98f2453c584ced19af52d299ebb56493128
SHA512 54c466991acec5c527db30f1c8c29fad58662eba6bb7fafe72ec6cee0129822a43c80bd84623b2cbbcd4bb886d8528c8099af23470f4e9af201f6b12481b4acd
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHklQUuSW0Wyf/gc0K4xgW0cUUfOTNCKOcb:CeTieYgQxAl+eODgc1W+9M+XHklQUuS7
TLSH
T106916E11397B57903CFE7A48807A9C2BA28534E63318F42B37A955E60F67E025DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 06f6dfcf4ec517a2abaa4e60d3b1973f717a4a8ce3c0c55150e19ee73b3a5cf0
MD5 0462b0e61b798b2add85b07f8ad465ba
SHA1 6f3af353bbec162f223a5f0b42014d2ea83d1849
SHA512 dc30ffe825e2db64229b6c92ce36188bb6853ea3dc735f80126913fda4465bcdcd5a353e1318870a0eb02df67ca1770c97352791dfe2e9499034d10f520d10e3
SSDEEP 768:hq3VuZDZqgO0CEl8sWNzc4ReyIsPiPi9Psy:hq3VBiWtc44bsKPi
TLSH
T161F2AE31E9659C63BCFAA782B6473682BEF41167C5C81E88D5ED5F0C09432AD1B5F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7d52f30a90aa50f3c425911ecd7467ec098a169446e9092865dbb19ae949700a
MD5 1011251062189de1edee127c717f7c27
SHA1 03838a71145da5e15678c46c688f40b64966f80c
SHA512 0971901aa616bbc22ee1986e5f2b896e221807e5c88c0ac0420deec49e90ecbe34b650adb2358188a5a3c8437e613562b7357d5f1af59058dcfa61f0a88f845e
SSDEEP 768:Vrv+4UNbds3lvDZIO0CEl8syNzc4ReyIs2ieVH1S5D:VbsbS3ziytc44bsJEH1Y
TLSH
T18A03CF32E8688933ACF6A746B44776933EF4212B85C80E94D9EA5F0C4A472DD175F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ec76c1fd8e3d060ef4612cfd5266fb361182fbd178be20407321a5ce801726a7
MD5 9e93239a1782b4049f6fd6e206aeb203
SHA1 5f7a0b4d7c40a0e75fa1838af67a07088907d1ca
SHA512 da8d8d3618640d752b03e40a0b7c2af5b6c35cc8d3df8eaef50f99aa01dbfbc4c23b07ab22d42e5316e6c7c0d37044ebd06f174da5d8c6e9f3902b2d1d585177
SSDEEP 768:6rv+4UNbds3piDZIO0CEl8dNzc4ReyIsXIeVH1S5D:6bsbS3GDtc44bsYEH1Y
TLSH
T10203CF36A8689977ACF69785B44B76133EF8612B82C81ED4C5DE2F0C464B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bdbf884fc73436bdf89a5260aa5933591770ae212af76baf79d0f7169758e394
MD5 ee014ce60de21f98efd8f9288db8ff41
SHA1 b615c52344a3aa67d6450d6ead6425499560657c
SHA512 678d6663f65ed504e009bab68ee2aba06b889cfbcc865a105c12c3ed7404256fc7b981799ded8395e928e08e58f372e46adc83aaedc4226eb42128df08ea1094
SSDEEP 768:fQ3Y+ZDZIO0CEl8sCNzc4ReyIsPiPi9Psy:fQ3YYiCtc44bsKPi
TLSH
T1B8F2CF31E9759C63BCFAA742B64636427EF42167D5C81E98E5ED8F0C098329D075F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 839175a70bb308cd54a422feaa8aa6e267ef54a5a3b87112e0e18fce651d4b2c
MD5 6c1894d7232e8337177c705d81148edc
SHA1 5d10f42b3eaff73cae7f440e905f2e871152b2d8
SHA512 09976bbc0f85928e6cf6ff34520049a83699c3d2c1cda7b4405c05885360b8614d73a53be20fce3f16430654764e0feb6169b046ee746552ddd7bb07119d5495
SSDEEP 768:kQ3VuZDZIO0CEl8s+Nzc4ReyIsPiPi9Psy:kQ3VIi+tc44bsKPi
TLSH
T1D3F2CF31E9799C63BCFAA742B6463642BEF41167C5C81E98E5ED8F0C098329D1B5F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4508664f-b479-4001-b719-8a475d73e001.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4508664f-b479-4001-b719-8a475d73e001.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5228_1902869223\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download