691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 15:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v18R-m4-eM.svg
Size 57KB
Sample260815-ss225adn3x
SHA256 691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91
MD5 8b9081c1b97a4eac196685a1f8617477
SHA1 89a34da98763f220cbdfc9dfaff9157a8239af61
SHA512 de72e780093390de1e184eb1cd1f29908fa6e5e100cf49a698ae67d4561ee17ba3e1af4f1a74237a4ed5ef14589791d4ed0e522e662faf2e00a580e1f299cbd3
SSDEEP 384:cgSrmXAixJODd7YkfwjGHDBPBsuQnPY7Yast17SXRargsZGmDLYjUpdMp9oDrUvP:cKXl4sZTDK9oDO
TLSH
T11243737637F4BC9B8BCC034B5D02EC6C45AF94B784A8668C9BD790E89548368F7EC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5720	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312810584131725"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{99D61BAA-62ED-49B4-B6CC-C8F94E06220A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5476	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 5476	4624	iexplore.exe	89
PID 5476 wrote to memory of 5352	5476	msedge.exe	90
PID 5476 wrote to memory of 3800	5476	msedge.exe	92
PID 5476 wrote to memory of 5720	5476	msedge.exe	91
PID 5476 wrote to memory of 3800	5476	msedge.exe	92
PID 5476 wrote to memory of 3800	5476	msedge.exe	92
PID 5476 wrote to memory of 5592	5476	msedge.exe	94
PID 5476 wrote to memory of 5592	5476	msedge.exe	94
PID 5476 wrote to memory of 5512	5476	msedge.exe	95
PID 5476 wrote to memory of 5512	5476	msedge.exe	95
PID 5476 wrote to memory of 5512	5476	msedge.exe	95
PID 5476 wrote to memory of 5488	5476	msedge.exe	96
PID 5476 wrote to memory of 5488	5476	msedge.exe	96
PID 5476 wrote to memory of 5488	5476	msedge.exe	96
PID 5476 wrote to memory of 5468	5476	msedge.exe	97
PID 5476 wrote to memory of 5468	5476	msedge.exe	97
PID 5476 wrote to memory of 5468	5476	msedge.exe	97
PID 5476 wrote to memory of 1248	5476	msedge.exe	98
PID 5476 wrote to memory of 1248	5476	msedge.exe	98
PID 5476 wrote to memory of 1248	5476	msedge.exe	98
PID 5476 wrote to memory of 1148	5476	msedge.exe	99
PID 5476 wrote to memory of 1148	5476	msedge.exe	99
PID 5476 wrote to memory of 844	5476	msedge.exe	101
PID 5476 wrote to memory of 844	5476	msedge.exe	101
PID 5476 wrote to memory of 1600	5476	msedge.exe	102
PID 5476 wrote to memory of 1600	5476	msedge.exe	102
PID 5476 wrote to memory of 428	5476	msedge.exe	104
PID 5476 wrote to memory of 5136	5476	msedge.exe	105
PID 5476 wrote to memory of 5136	5476	msedge.exe	105
PID 5476 wrote to memory of 3724	5476	msedge.exe	106
PID 5476 wrote to memory of 3724	5476	msedge.exe	106
PID 5476 wrote to memory of 5272	5476	msedge.exe	110
PID 5476 wrote to memory of 5056	5476	msedge.exe	111
PID 5476 wrote to memory of 1536	5476	msedge.exe	112
PID 5476 wrote to memory of 1588	5476	msedge.exe	113
PID 5476 wrote to memory of 1588	5476	msedge.exe	113
PID 5476 wrote to memory of 4536	5476	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v18R-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v18R-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2f0,0x320,0x7ffb1129c188,0x7ffb1129c194,0x7ffb1129c1a0
    3⤵
    PID:5352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,8354109146597510994,2320664504375611237,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,4029583136269606283,9950646552254395104,262144 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
    3⤵
    PID:3800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,15638390876539050096,3726886089953889157,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
    3⤵
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,3084739521509233984,5804818370378109604,2097152 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
    3⤵
    PID:5512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,2602669201104248470,10872194638882250398,2097152 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:5488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,3095417643698006680,8737959391085853370,2097152 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:1
    3⤵
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,1404548991194510310,15294671107187213678,2097152 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:9
    3⤵
    PID:1248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,9742366597938574328,12964388388518023126,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
    3⤵
    PID:1148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,8791785039256797508,13369317974697967640,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
    3⤵
    PID:844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,15885999058515252647,18031799273628490109,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:14
    3⤵
    PID:1600
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,15629389791138453106,1971480936891594766,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,15629389791138453106,1971480936891594766,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
    3⤵
    PID:428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,12798622862927908735,12433510421313873178,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
    3⤵
    PID:5136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,7801603045567853984,2325206237923565581,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
    3⤵
    PID:3724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,13963320446034291810,4356923466038704966,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,13871270030286783646,14635873611994263569,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:14
    3⤵
    PID:5056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,2003981751009209439,13916953526222758354,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:1536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,5383011991325333590,8982795904267306707,524288 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:14
    3⤵
    PID:1588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6608,i,4147314933715111370,11912004158942276779,262144 --field-trial-handle=2332,i,15258219270073564341,4161576721346896125,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e63641f838ee9d3f747c5b9182333bd748695e62c0d9476eb3b635bf50b54c09
MD5 9cf27a91b0e75fd880cf63088df2fa78
SHA1 9e539631b46ad6474afc7c1b33057ad2dc945883
SHA512 d6553ecf61be566b29007824a7bef92a2aa655484f5834a1058dc386d37ea7f50bfbb35841d5765b03e364c612a7aa6ca0b53c709a3f24e4477cb07c7d469d88
TLSH
T109613F6513210591EB286FBBB1A294B433FA849B792B7A2150419F7A4CC7FF551E0363
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c9fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c9fd.TMP
Size 3KB
SHA256 ba4f2d8414a42b5ee8b4966f9e116f478574846bba82ea828f59aeb8ef9f094b
MD5 045425d72403ad31c1826b156cc69638
SHA1 14cfe55b879d974af0531c9b9fbff1953681ee5e
SHA512 aea247e2b92e258cae5c11c6aa0af8155959be5d63453c7dc8df2fa7480787df7451ce6bc085c23807da126ffd80f08ab6bc7902d5c26c63ddeb0b63f1dbc0cb
TLSH
T109613065132105D1EB286FBBB1A294B833FA849B792B7E2150419F7A4CC7FF161E0363
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ac36d3c8b100d9382f77aa9b71463f08a35a38eee1259d3efedc5594a5f44c27
MD5 2886a5eb4b1107fa7c7712c2c7ba2d02
SHA1 aed8629a650d229982796fc3833e756737536bed
SHA512 4c10217b1c9738b6987da6f4e644f649afb479d6e554e488c9acfce0169421c13cda528ba317065d883b274160a78da1da02b098da75e7277a0cd740350ee79b
TLSH
T1D041A2F383F4856E891196F0AA146F1FCE2C0515431C7D66C9E4AE2B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 db2948d5188a50e39136ceb8d42a3363004a98ab79fdfdff496a7838b50a5143
MD5 fd382132ec8b8d88f5770f34c33cb3b1
SHA1 31ac7f395bad17fb0fe0d7225c60e78603766221
SHA512 d30dc79d2ffc02e0d80502143b20e48c321c3f1d43bfe7c95adac3649ec438220dabc6b7133bcac1d954dbb6a2000613d2e3267aff3a8bd66a30e0b71d22616f
SSDEEP 192:sxR1RzCC/fksstWZy8nXvzoA8p40/g6+WNIYn8Ueh/GdIgVtJ:sxR1UC/fksstgZnXGZ/5ITtIN
TLSH
T1C43297156A68A93B8CCBE21DBB25BF53D6F91032A1D41E48FAFC971C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 18e24596df1c3a727cd2a2906e864dd5b445c51d5fb2d74c9c5f66a4f0a6584a
MD5 709f07ee7cc33e4623b0f02c4672fcbd
SHA1 8ec5473e0f6970da8ba222b046f656bbc930ab20
SHA512 857b236924c2a9a0cd1547a06f7acc8c8af1e44084146c096d02dc620330fe1f71cf2b12677c901e1ba237b01b708641aab997ae7210e54a67aa25ea97d3fe58
SSDEEP 192:sxR2RzCC/fksMEoJWZy8nXvzoA8p40/g6+WNIYn8uEh/GdIgDfetJ:sxR2UC/fksMEoJgZnXGZ/5ITLII
TLSH
T1EA42A6156A68A93B9CCBE21DBB15BF53D6F91032A0D41E48BAFC8B1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b077d2c7711359dfb0dfbe5ab46b993607ac5d63918cef81b36f397a85653e77
MD5 560924a17d9f12dea76e8c3182043379
SHA1 222d21d5554da50d3b9d1b982ebaa48cf4f3e6b4
SHA512 a96a9b26d8b03aa4e527bf56b72a961e544a93085e316182584fa81b48fa5d26b391a01a4ee55d0d591907a8fa23b5510e85aa041dc9ba3abb890810c41021e5
SSDEEP 192:sxR2RzCC/fksMEotWZy8nXvzoA8p40/g6+WNIYn8Ueh/GdIgDfstJ:sxR2UC/fksMEotgZnXGZ/5ITtIO
TLSH
T15542B7156E68A93B8CCBE21DBB55BF53D6F91032A1D41E48BAFC9B1C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 8bbe1031139c6c0ab3a14d2f90444f453a264c82c3626e0fac29f0624be64529
MD5 c6a7f25dd9ff2383c3719f6802c714f6
SHA1 562d027864c112c1b03a8a40e82655ae7f27dc42
SHA512 3a899dfab45d9dabad626dbfe430e42412298e0f7895cba263a3919cc15f93779fa308730eabccbac8500fc6498adf78bc9393b9b12e5b2b48f02290a9889d66
SSDEEP 768:wb8dhg7pLuL7r6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVI3mu46xyrohTck:wb8dhsE7r6Wgouf6Mu1jaX3mV6xpqWD
TLSH
T1B8D2EA7B740DCB7E4F800ADDEC19BE9F6DA802CB96D8C94447FA851C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a63dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a63dc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 78577bc09d4274bd2760f5aa730c59a21efe9fb4499615ac6e8dbe24fc13c7af
MD5 9446ff1393c301c6a04ec80cf4fd82c7
SHA1 18d70ceeb9ceb0414b576d72f3d0f218861b813d
SHA512 5bc308289c0c32b3f3024af4f9d760a437d132fc53c28f0f5553ea5aa61eee0983e2610165863994fd793fd049270f47dd93bd263c73ab06f4e5dee088c9f309
SSDEEP 768:XFQF3cwghoHXZw5O0mWNzc4ReyIsPOPi9P8tZ:qF3ZQtc44bsGPjtZ
TLSH
T145038E76EC64CE6BBCF6AB86FB467646ADF50167C1CC59D4DAD99E0C008319E070BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c7e555625d770a3b2567fd12e3868cb22708ebf4f5276da9b2efe0147b0eb785
MD5 94ccf14be18fa5807da80cd57a809844
SHA1 cb7844fb0bed30d96d6f0687ecbbc0427e6f1223
SHA512 b122b6167a65276f3954a5da34414a94f0e56d7381279cc926f7d8110ee3d4f44f53f502f9d9b0fff23347213f0fee1e00f5d7f3d5eb8e6e59fef22b31c0d9bf
SSDEEP 384:njZcI138N1v3Yw0PH7sJDZNfNoXOVSUU/MXZXnUiETRzcoXfK86sfxEZxxsIj4lq:713YoHWDZIO0mCNzc4ReyIsPOPi9P8tZ
TLSH
T15FF2BF70F869DD63ACFAB746F9423782BDF55127D1C81A94DAE99B0C054329E071B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 33bea5d680925d6c110325ccd50cbd5bad10eaedf7e18cae1d91e2754e891251
MD5 fd97d7145d99208668f5dce33e102d83
SHA1 d3486fdfc3dc65fb666d84e62a2c33a3ae44dc0c
SHA512 5e6869946368ba68197ee410c97236ef5034eaa1fa463124b99aada878f58a6474343c3251588853dfe439fc366135bfa0871e096e59d986ffedafcb830b6f3a
SSDEEP 768:6rv+4UNbds3stDZIO0ENzc4ReyIsXceVH1S5D:6bsbS30tc44bssEH1Y
TLSH
T10903CF32E8688977ACF66686B04776533EF8912BC2C81E94C9DE2F0C464B1DC130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 8398d9e1e7a06c22a8e0d23e0300cfaf03b2894380afde94d1a11d7a66722eec
MD5 ee4b9a89a7130db8dc505d91731ac44a
SHA1 327163be09c2be66bee155a42f5fa81a8b17fa7e
SHA512 76bc5591b586c17473f11bf957fc498d3793ed0fe8dd9804fa665993a4c583d0d759e56d4480c7dc65602ef9acb110362cac1ab0bdcd96331bd81e627a85bd62
SSDEEP 768:orv+4UNbd+3/nHWDZIO0mcNzc4ReyIsPOeVH1S5F:obsbI3PTtc44bsGEH1W
TLSH
T1E713CF32A868CD33ACFAA646F44776937EF8512B81C80E94C9EA5F4C0A471DD171F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 af1f3baa4c1d5aaf2f2736b82ead5760350ee2f9e2df36ff9132256bcfb59e25
MD5 8c9ec3b01c08dde08ea23366f64e6822
SHA1 5d8570c6b47850ef235b35f330909e7815e21f35
SHA512 0da48ad1e0b819b6849937465e4e5d3996289d839bb5796fa638730ab418fbffd4323cfbb1b8f30ee9c3756d5bc70dccacf69a4eb828f8527195d6d8796d4bb7
SSDEEP 768:wrv+4UNbds3epgDZIO0mzNzc4ReyIs2OeVH1S5D:wbsbS3emtc44bsVEH1Y
TLSH
T15403CF32E869CD33ACF6A686F04776937EF8616BC1880E94C9DA5F4C094719D171F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ff651ec-c910-4f44-b035-8698c5b225e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1ff651ec-c910-4f44-b035-8698c5b225e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5476_1096475583\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download