e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eL.svg
Size 3KB
Sample260820-e3pb5abd45
SHA256 e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c
MD5 735c5dd9687af27db46d1760af81d1a5
SHA1 0362449843acc75186d102a08af6cf07a5b90853
SHA512 26772d0a891c6a143982ad5a722edd3afac15222392ad8c66bec616770bd539ac0f223fe367a8615d39c4c5ff3ffbaccfd34400adc4c2fd98fac718edffb22b1
TLSH
T1AA71288876F83EEBD7D802970D41D4B84B2F946BD822978DD3CB94E875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2656	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316736971871188"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{7B330295-2AC8-403F-98D4-8E329166FAD0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5248	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5312 wrote to memory of 5248	5312	iexplore.exe	89
PID 5248 wrote to memory of 4756	5248	msedge.exe	90
PID 5248 wrote to memory of 2656	5248	msedge.exe	91
PID 5248 wrote to memory of 2652	5248	msedge.exe	92
PID 5248 wrote to memory of 2652	5248	msedge.exe	92
PID 5248 wrote to memory of 2652	5248	msedge.exe	92
PID 5248 wrote to memory of 3032	5248	msedge.exe	93
PID 5248 wrote to memory of 3032	5248	msedge.exe	93
PID 5248 wrote to memory of 2596	5248	msedge.exe	95
PID 5248 wrote to memory of 2596	5248	msedge.exe	95
PID 5248 wrote to memory of 2596	5248	msedge.exe	95
PID 5248 wrote to memory of 3168	5248	msedge.exe	96
PID 5248 wrote to memory of 3168	5248	msedge.exe	96
PID 5248 wrote to memory of 3168	5248	msedge.exe	96
PID 5248 wrote to memory of 5748	5248	msedge.exe	97
PID 5248 wrote to memory of 5748	5248	msedge.exe	97
PID 5248 wrote to memory of 5748	5248	msedge.exe	97
PID 5248 wrote to memory of 5796	5248	msedge.exe	98
PID 5248 wrote to memory of 5796	5248	msedge.exe	98
PID 5248 wrote to memory of 5796	5248	msedge.exe	98
PID 5248 wrote to memory of 1716	5248	msedge.exe	100
PID 5248 wrote to memory of 1716	5248	msedge.exe	100
PID 5248 wrote to memory of 1456	5248	msedge.exe	102
PID 5248 wrote to memory of 680	5248	msedge.exe	101
PID 5248 wrote to memory of 1456	5248	msedge.exe	102
PID 5248 wrote to memory of 680	5248	msedge.exe	101
PID 5248 wrote to memory of 5832	5248	msedge.exe	104
PID 5248 wrote to memory of 4080	5248	msedge.exe	105
PID 5248 wrote to memory of 4080	5248	msedge.exe	105
PID 5248 wrote to memory of 2696	5248	msedge.exe	106
PID 5248 wrote to memory of 2696	5248	msedge.exe	106
PID 5248 wrote to memory of 1700	5248	msedge.exe	110
PID 5248 wrote to memory of 2784	5248	msedge.exe	111
PID 5248 wrote to memory of 2580	5248	msedge.exe	112
PID 5248 wrote to memory of 5776	5248	msedge.exe	113
PID 5248 wrote to memory of 5776	5248	msedge.exe	113
PID 5248 wrote to memory of 3700	5248	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x30c,0x7ff98dd5c188,0x7ff98dd5c194,0x7ff98dd5c1a0
    3⤵
    PID:4756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,9834717487149742509,13311835702023648741,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,14797417769600221991,14172766282561694134,262144 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
    3⤵
    PID:2652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,1291765158852205460,16156747387979261947,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:13
    3⤵
    PID:3032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,13032370480007678074,7294174042656325070,2097152 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
    3⤵
    PID:2596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,3128748063311445002,8808835954912805444,2097152 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
    3⤵
    PID:3168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,7269061261288762838,5799365414014677536,2097152 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:1
    3⤵
    PID:5748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,7630737625997142280,13713606272493141891,2097152 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:9
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,17637245583692775653,16766819363220389739,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:1716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,11792031059514075175,15013705189654524528,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
    3⤵
    PID:680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,11665620664480797693,5829691467203107507,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
    3⤵
    PID:1456
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,14191681188008006094,3960517607428255535,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
    3⤵
    PID:768
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,14191681188008006094,3960517607428255535,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
    3⤵
    PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,13916205761320596696,10741924543498172774,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:4080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,13463014590568616864,10655005196843878673,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
    3⤵
    PID:2696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,15503477282203425222,706578569724343351,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
    3⤵
    PID:1700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,8975112259056695202,17864307472381612381,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:14
    3⤵
    PID:2784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,10195894584647444647,14800392469000118938,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
    3⤵
    PID:2580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,12801307366096451488,7036007300353246525,524288 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:14
    3⤵
    PID:5776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6240,i,12856427002116852898,11992381940334043536,262144 --field-trial-handle=2368,i,4102944981236071880,9691174680322648699,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 09f7a16df43a1f1099f8e6a9ff81d91230937dc8298f2859a152fbea2df0bcdf
MD5 8f02f685a783d987fdc895e9eca8c900
SHA1 7ac1916ee64fe2d4cbfdddb47e1acec42f290267
SHA512 b3951e06625c9acebdb8f2a63fb3aae2c2b0af191ec557b0f396019b8025a5e49946c4d126cf490ac70d187aa0d9ef3b8c6c23d59e626bb67323dfe457c76322
TLSH
T1F35162F143212BD3E7E7497D69F2D0AE36F1C4E2E0832A110C659E3C6643F0824D109B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3d65f9d8a5ff858d9ebf242ebaa356cbfe32befe4ad2f97c94924336acbde028
MD5 fee7586c8e8674c23aad025b7e0e5b31
SHA1 cfda3c80694c5a96d677ca4485b452178013b64d
SHA512 588c716a55d20f952d50b466ec03eb2fa60ced2ca307c2e7d87aa58378f4f4158dd9691cf05d9a0c102d2a40ba646e431f77f4f25cd6ab87f9df9be1b37930ef
TLSH
T12A41C0F383F4853D9A0196F0AB14AE1FCE2D0515832C7D5688E4AF2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a80d2e0bf22748f99623b45438081b441ccba52bb7f8cacd425049a03363fd23
MD5 cc90aa5654ef2038d63fe967b113dedb
SHA1 6be47e72d466eb95529bcaf575c382420179b819
SHA512 ff42a708bcc917ef1c9287818cd00534b595d893213bcb3601a46e151d008de5006044036dbb2ff28fbaab417e3807cb9482d4c5c84d4735150b033e200e64bb
SSDEEP 192:sxR1R3Cf/fSss8tPQZmMbzoA8p4k/g6+WNIYlzZw+SGbwIgV/J:sxR1Qf/fSs1tPOh6B/5IgZMn
TLSH
T1C542A6156D28A97B8CCBE25DBB557F53D2F95032A1901E48FAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a6f0734e151973c4c1f8b18b7d381e1782d29751f32771fbcfe2fd5be5ca1eea
MD5 d6246e190474ee7fa923e45419a2debb
SHA1 df3251ab758aec648d872f6f6cea584bb4695cbb
SHA512 d628c65fb913abce46fb71ce9aaa1a53de0f36a99929058daf55a9f81fe763b20a7426f1bb28cca2a0f09d0e8e6e7b4dbe0e515c63016a20f4d931c5a4d6ae81
SSDEEP 192:sxRKR3Cf/fSsj8tSQZmMbzoA8p4k/g6+WNIYlDZU+SGbwIgDw/J:sxRKQf/fSsYtSOh6B/5IiZMI
TLSH
T15C42B615AD28AD7B9CCBE25DBB557F53E3F9503260901E48EAFC8A1C14E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bb814b49968808d70ed771c8e1df1f2b09dfd2badd917ac00e26e6d9061c0929
MD5 16b07ccda2cc1ea2af19404fd822e4e6
SHA1 1dbbc7ce6f6f9eaebb20d72aeb2ef1a004b4b820
SHA512 ff9a4700198b3c5b6385d77006044f7d2b5e31b4ae4083df8e9b6bf2192f5c9875dbfc67cbc147627a145340b60ae26fe1de4b6b6e98b13f820baa6b122fe3e4
SSDEEP 192:sxRKR3Cf/fSsj8tPQZmMbzoA8p4k/g6+WNIYlzZw+SGbwIgDK/J:sxRKQf/fSsYtPOh6B/5IgZMq
TLSH
T1CE42B615AD28A97B8CCBE35DFB557F53D2F95032A1901E48EAFC861C04E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 6b09c7c2cb21487309fc374e09607903a742e77b4b013e15e3e56f08ea6d2375
MD5 635695120455c016f3381c993f698354
SHA1 e3c3de0eaabbdee438278274ba348f22d7d86606
SHA512 8daa01713c8dc6ded6a245e344422f2bf14e601c4a2a95dd7e46cc5dc3ff208682468b6e1336686cb1ab309ffb2281e5a4f046486145a537d0a10623057d83e9
SSDEEP 768:dofAgj7pLuL7AxWgg+fJJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEeN131Hromh:dofAgVE7AxWgg+fJJu1jazeNl1Umh
TLSH
T158D2DA7B640CCB7E4F804ADDEC19BA9F6DA802CB9698C94047FE951C03C6BEB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0bc0c5f7efc8e4d6fa1fec2d7f8353370c66964591a079cbdfb3a9453b531b1c
MD5 ba37282cc21671ef4f6e1accc100905c
SHA1 da0d55075d14634432809ba3185f029cca2491d4
SHA512 7170120e3b70f00b4b15a390c10d59dc759401d20b19cd3727172b8ed296fe548f981d20b0112658c99b66af035520b7d28d958e4df77d8ffdde7bc411d7cd5d
SSDEEP 96:KRQh0gS+yoW2r7gooK4tgaocII7aglHN6zn9Xr/WzoWgv/K4ugR/cVtgDu0oKpOe:CQh0gS+y/2rEostgaHII7aglHN6zn9XB
TLSH
T1F791248135BB52413C7EA60881B4886BA383B4E53454E43B77A816E60FA6E12CDFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 3b4b4046aa7614eba87698d1e7456aa1fa08cb10a07d7d8841ef1ff4fb4503f3
MD5 020de2524050762d1f6f5b132f039da4
SHA1 62b2135c9ef092a6915888c8172beab28ceead65
SHA512 9b46e3a5ea7d65335a98e4ed27c59e60e7c86a0cccdc4a32969dc3393c83f813d62d823682ab0626bef78c8a34220b943d6ebe70c3888152283b3f73ae0ba2e7
SSDEEP 384:ndFiZcIz38Nd8TUNTUlIlm72AR6O3USRkf4cYUkW0/QPlLJQXmIkdP9IimIMWEfp:dFQz3iwg37ScIINHXmTWTbc+HjfzM
TLSH
T12F038E75DCE5DA7BADF68BC5A60A7A06EFE4006385CC68C4DDD96E4D10C719E030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3576629f7b35e7fad353d64e668672bd7505e1b54a32a6f63900d3bb4cf8f4fe
MD5 4f6d6aa0e5b21256db99c8bdf293fbc7
SHA1 987e5f720dbe34bb831abed416038c38a9992cc2
SHA512 8826ba32d5673eb73fd01d31a818ccebae96a972a8cc1a207188f61b9a0bb4505642e29ab59754ac5ac0002e838a9c746ad43c3de6e5292e4d5806d024cfcf17
SSDEEP 768:arv+4UNbdM3y9qiJJNHXmTWTbc+/YeVH1SvyZ:absb+3L8eWn1gEH1dZ
TLSH
T11A03CF329CF99E37ADFA9788704B76573EB8116385C80A84C9D97B4E428754D070BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 457c1f99c3ef2ac2a375879524a12eecefcd8b2593d637cf7760891a03f3b481
MD5 bc7215ad4bfaaf7691f6b4337e2cbb37
SHA1 4c49482b717803b5fccde3f2ab3212d1a643fbd9
SHA512 f9faa727611e4a5123087a6f2e28e999f2bfbbe1e243190df810cffbb299dd02eb64939d167bfae4f589fa451620e22648bd65678494dffd620431034181eed4
SSDEEP 768:Brv+4UNbdM3WeliJIFNHXmTWTbc+ejeVH1SvyZ:Bbsb+3ndTeWn18EH1dZ
TLSH
T13703BF719CB99A37AEF68F99704BB6077FB8115385C81A84CCD92B4E428B54D031BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 fb422243e4ea718f0569cebebe34f7708aec6a310dadcb0bd19f3a95a27847d6
MD5 b14c7ea3cf273c88eff5383ce5528cc0
SHA1 5eaaf55f8ed8b1987ed934362c10159b93e856a0
SHA512 fc30724c5cffffd722401288a9622b8756763dd8bd25cd98f73290ba55290c48c5fb91d77483d83baa6551872d77f56834bcc5e613e3216f2ca41038a5212ccf
SSDEEP 384:nrZcIo38NDf72AR6OzUSozRfY9bYUkW0NQPlLJQXmIkdP9IimIMWEfMbc+Hjfv1O:zo3PbbiJIqNHXmTWTbc+HjfzM
TLSH
T1E3F2AE719CF5AE77ADFACBC8A50A7A06AFF9102381C82984CCDD6B0E118755D031783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 32c13f205583b4608fa21b65c0f5e614bee0061e69259f974441ce4c29ba976c
MD5 aabce735e715d772bbbb795e9cdb3a8a
SHA1 803c1359d3ccdecfae2695dc39de01836abd8cd1
SHA512 2fc526520d0dcd77075bbfb7cf3b1b6b0cdec13f04229397e6eb1b17237a1e02398362e6360e116031b8cbbf0a173585a70441e8886da76bbb444ea91025019e
SSDEEP 384:n6ZcIo38NDm72AR6O3USozRfY9bYUkW0NQPlLJQXmIkdP9IimIMWEfMbc+Hjfv1O:4o3w7biJIqNHXmTWTbc+HjfzM
TLSH
T143F2AE71ACF5AE779DFADBC8A50A7A06AFF9102381C82984CCDD6B0E118755D031783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8a664e8-9e9d-4152-b47a-b373f9d38264.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e8a664e8-9e9d-4152-b47a-b373f9d38264.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5248_1755174841\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download