1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 22:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v13M-m7-eL.svg
Size 35KB
Sample260816-2xt2rayygz
SHA256 1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388
MD5 bfd57f9c04b8bfc4e5434bae690e2203
SHA1 e7b3435c094295274f0af2f8397f5bb45ea184c1
SHA512 6758b4a12d192d174ef164e40e6e9404b61b978a9fb28913f7bf0882d22b005217c3f048344f661fc2e264b7060e3cbe73503e4b546688f5342e8ae0eff3613b
SSDEEP 384:chMBVd+SOAKzMf2qACRnJPB/nafePgDOx48FAIddEIRisu:c2VdxlZdIV
TLSH
T19EF2306537F43C9B8BCC03479D42FC6C46AF98B78098678D97D790E8A548368F7AC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5800	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313946971769417"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{07DF4DAE-8311-497B-AB93-9CBBB489B00F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4692	msedge.exe
4692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe
3408	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3408	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1832 wrote to memory of 3408	1832	iexplore.exe	89
PID 3408 wrote to memory of 2004	3408	msedge.exe	90
PID 3408 wrote to memory of 260	3408	msedge.exe	91
PID 3408 wrote to memory of 5800	3408	msedge.exe	92
PID 3408 wrote to memory of 260	3408	msedge.exe	91
PID 3408 wrote to memory of 260	3408	msedge.exe	91
PID 3408 wrote to memory of 2796	3408	msedge.exe	93
PID 3408 wrote to memory of 2796	3408	msedge.exe	93
PID 3408 wrote to memory of 2532	3408	msedge.exe	94
PID 3408 wrote to memory of 2532	3408	msedge.exe	94
PID 3408 wrote to memory of 2532	3408	msedge.exe	94
PID 3408 wrote to memory of 2504	3408	msedge.exe	95
PID 3408 wrote to memory of 2504	3408	msedge.exe	95
PID 3408 wrote to memory of 2504	3408	msedge.exe	95
PID 3408 wrote to memory of 5460	3408	msedge.exe	96
PID 3408 wrote to memory of 2936	3408	msedge.exe	97
PID 3408 wrote to memory of 5460	3408	msedge.exe	96
PID 3408 wrote to memory of 5460	3408	msedge.exe	96
PID 3408 wrote to memory of 2936	3408	msedge.exe	97
PID 3408 wrote to memory of 2936	3408	msedge.exe	97
PID 3408 wrote to memory of 4444	3408	msedge.exe	99
PID 3408 wrote to memory of 4444	3408	msedge.exe	99
PID 3408 wrote to memory of 5380	3408	msedge.exe	101
PID 3408 wrote to memory of 5380	3408	msedge.exe	101
PID 3408 wrote to memory of 2980	3408	msedge.exe	102
PID 3408 wrote to memory of 2980	3408	msedge.exe	102
PID 3408 wrote to memory of 5128	3408	msedge.exe	104
PID 3408 wrote to memory of 2644	3408	msedge.exe	105
PID 3408 wrote to memory of 2644	3408	msedge.exe	105
PID 3408 wrote to memory of 796	3408	msedge.exe	106
PID 3408 wrote to memory of 796	3408	msedge.exe	106
PID 3408 wrote to memory of 1120	3408	msedge.exe	110
PID 3408 wrote to memory of 2876	3408	msedge.exe	111
PID 3408 wrote to memory of 5956	3408	msedge.exe	112
PID 3408 wrote to memory of 4296	3408	msedge.exe	113
PID 3408 wrote to memory of 4296	3408	msedge.exe	113
PID 3408 wrote to memory of 4692	3408	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v13M-m7-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v13M-m7-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x358,0x7ff9bac5c188,0x7ff9bac5c194,0x7ff9bac5c1a0
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8230116484700451088,12377607733205357715,262144 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,2082361891495333229,5926435377340012929,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,8462385014072002882,2478078060121353207,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:13
    3⤵
    PID:2796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,13673755901159548711,18074672423300396539,2097152 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,771117669828587579,9997837297611380871,2097152 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,8697703456222053141,9180548423723258499,2097152 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
    3⤵
    PID:5460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,5684671184100441121,17124172714109972201,2097152 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:9
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,5645560253221609820,8262660621081872439,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:4444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,10410425133436403551,5045449227906430184,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
    3⤵
    PID:5380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,8036899701440276353,17701039692328842520,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
    3⤵
    PID:2980
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6638910119194263016,4341032046485123728,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
    3⤵
    PID:2184
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6638910119194263016,4341032046485123728,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,7754448441092161113,8437271384114008181,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
    3⤵
    PID:2644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5711312136674290392,3952230226600892984,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
    3⤵
    PID:796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,16822529307499444711,1520718252440177859,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
    3⤵
    PID:1120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,16817226265676858196,11998116948435671492,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,10850266435515994421,11036991734595613698,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:14
    3⤵
    PID:5956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,5407637595583238325,12206344605251511904,524288 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
    3⤵
    PID:4296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6716,i,15606892838833399064,6353247933466546773,262144 --field-trial-handle=2324,i,15779619408540914854,2270242175262213391,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 abde676e142fd4e042815c619ca73f51e5267e9a64958bc433d86007f020d3dd
MD5 b5422b66a44020f023e01c8a5970acae
SHA1 4c512d34f3027eb4434642af0fd35cc841a259b3
SHA512 81a638212cea337402ec8b6438962b1f110063e7d15cb7195d4244462b35524f219b4e7883a3f5ee1c6e58dfc6930fd3d4cc4a242b789c1f756f409843613485
TLSH
T12A6173D5032518D2E73649B995D2C86B36F4C4BE8DCB6F144A002E7DD886F1496F10AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599e69.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599e69.TMP
Size 3KB
SHA256 9472da551645c6147f20481dbdd0ee7f838548d3c429a6bc6106c71d639bc797
MD5 12f5f0301ae29df6638559d080907ae2
SHA1 6debe0aba193ee8e5815df076efb0441745f8612
SHA512 525138d1f70bfbfa80fb4e234d5748fd221d0408a0c31a49a8a3a19733b2991d4bdc8f3b29bd45401db39dd01a7bd5e5da4d40ecfaf0b7f9a77d89ed75eb6f25
TLSH
T11D6183D5032518D2E73648B995D2C86B36F8C4BE8DCF6F184A042E7DD886F1496F00AF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d0e4476fbeed18fbd0265d9aad4d681b21ecbcc3bbe47326b7cfb390db15b06b
MD5 0405458478ce5ea506d7f3633d3cce54
SHA1 9745b9c41cec81f8f978c4329e5bf16bf0101b31
SHA512 d6be982463065d7dae562ee4c9e47e00bce865abda3607e2a8426346ca1dc052c2a2a29dc645ceca477f527a63b491a6de54abf86b404f9874dde02e6b417716
TLSH
T13A418EF383F4857E8A0156F0AA146E2FCE2D0915436C7D5AC9E4AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 45364e68011483279e34cdab88d81e08f869ac2c37ac957d061cacfd4f47af63
MD5 f5adcc656249d085a8c8525df2805e28
SHA1 a8c015ccb134e5d396c05eba68390b890cfbeaad
SHA512 3b15e2568e2a590d82973d7e42fafe51e0a2baa458b507efafed2fa388ad03987e964d5d44e5c8ebbe7df3adffb4fb0d00ee0f7c987a51d0dfe699e78b002e63
SSDEEP 192:sxRMRQC2/fvsqV1xSZu3t4zoA8p4c/g6+WNIYEgk3yGJZIgDdSJ:sxRMh2/fvsqVn0Sx/5IZVY
TLSH
T17D42B7166D28A97B5CCBE21DFB557F53D3F92032A1941E48EAFC8A1C04EBADD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5f1616e9479326b6cf17ecaae94c9d8e7742a01fd2b27ccc9ecc322b8831c8e2
MD5 303192b9fe4ff64c52843f987bd241d2
SHA1 34ff63533aec256b245fe5be6cd2627001d37f22
SHA512 fdb8efb38d5807c7f5edf8c9ea3fc52a53a5ab3eaba890f1ec7e175fff46c7b6ac1a35699c294a05411bb3b6233b52fb2b471576379f0610ad7849c7932d7c8f
SSDEEP 192:sxRjRQC2/fvsVV1xSZu3t4zoA8p4c/g6+WNIYEgk3yGJZIgVSJ:sxRjh2/fvsVVn0Sx/5IZVE
TLSH
T15F32B6166D28A97B5CCBE21DFB157F53D2F92032A1941E48EAFC8A1C04EBADD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 75451fe5a9bae180edc542584c854ce82a374541c5ad13bdfe09018043700db1
MD5 cd86e004b24ba3427d7c18db66346dd4
SHA1 68bf94ab92c52a3982578356d4b69b6ce500610c
SHA512 46ed2a9a9a26363260d94d5f46eba52b1741ee9ebdb3e786976af71e6e536d4b177b3227c6b317707a1600446b36bc99db7f4627d91327e7d9a404d3270fa678
SSDEEP 192:sxRMRQC2/fvsqV0xSZu3t4zoA8p4c/g6+WNIYEha3yGJZIgDHSJ:sxRMh2/fvsqVc0Sx/5IUVa
TLSH
T13442B7166D28A97B5CCBE21DBB557F53D3F95032A0941E48EBFC8A1C04EBADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 dc0f76fe756e8cc683ff216c3206cf33dacbec5b5cedce95b2fb0f222143bdcb
MD5 238b15741bde1fd166f0819f796c4c93
SHA1 b63eb17ce75dd9f706f60db920ff87a6001ce900
SHA512 f79e475e9641a5948b6e665a71a46e3cc7e726055cf0d01bfe94c05cf566d6320351830dd204ace4883da501513d6a1fb9f84c9a5a447664ac8968dacf856089
SSDEEP 768:40Dk6DJQD8DF7pLuL7N0DbWgQ6DjfIQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVy7:40Dk6DJQD8DTE7N0DbWgQ6DjfIQDFu14
TLSH
T109D2DA7B640CCB7F4F804ADDAD197A9E6DA802CB96D8C98047FE891C02C7BEE51154DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cb97983cd2b9a7fa9c3b05c9fbcb8bd8c0e83d24add4ea8c26b8d6b5e7e94f6e
MD5 ca832d2595e4d16616ce8321ea5c6880
SHA1 071daeb0e2ab347b41f6ccc28c92a9d1c5c118d7
SHA512 9fcd54c11e23032b83c1a3b0cfad683e4fe537814f38564c21a3a0dfe3ff84f49843edb842d06370d8852bb3220f1169d4013c88469adb0ce8102cc4e7c5c278
SSDEEP 768:Xu37LYnDTd+ZkqhZq7/eX6+qTko0u229a4vsTPPi9PT:Xu37VHPvVTVKa4ePA
TLSH
T1A8F2CF70F8659DA388FAD78472533287AEB421B3E6C41F54D9EDEA1C054762C1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 e7dbf699354e316122f9e6ffeba1894f7736b079a6eb5eccce88064b1d5c0103
MD5 0e5dce1f4141855fd57c63491e4038c6
SHA1 3214a4b7396e664137eab0a3626ecacf8fc2dd76
SHA512 27c627f7553d21d0cdcdac543e01ff7b339dd5755a7674f2d16884344e7362639d74d37029f5885123a1cca5e0c4f5b93a4ffd567a4a5fdf9ce0bba946bc3248
SSDEEP 768:5rv+4UNbdG3XfJDTd+ZkqhZq77eX6+qTko0u229a4vsSPeVH1SdW:5bsbU3WHTvVTVKa4REH1h
TLSH
T17103BF31E8699E7349E6D684714771872F7821B3CAC40F54D8EDAF4D064B59C2B0F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 9c2741aea93e147d114ce421c8aacc23bc1655c4c4141192b02e4fc6b2655778
MD5 4205b9af54fbf56b2ae5a0119a57be4f
SHA1 9bf9b355859f18f1bf65bf39eea46146bb002db0
SHA512 114197b8b379f8f639d9aee777ada381d8bde01dc46dffced2139bf9843827c14f5770c9f679cbc09b6337f2794970a7f66664ae93987edc9e9208a1f9f3e661
SSDEEP 768:ftw3mLVonZkqhZq70eX6+qTko0u229a4vsTPPi9PT:fi3m0HOvVTVKa4ePA
TLSH
T188039D74F865DE6398E6D781730276879EF421A3D6C85EC4D9DDAE0C008766D0B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1c1180f06567d33723e378dca487d85ca65ef7814e137a063030b7563a50c4d2
MD5 2cbc6fae30a657c8d102e03017113790
SHA1 08f8b135856c81c0f083b444fe561b10a25682b0
SHA512 8da7ef4a6d64fe0454d0251c5b4e0174aab1098c570ed26a27214f4b237271e9b4c0fc77f69b84da36ac30a62f177147a2ef84ec26470d816f085a26064d85af
SSDEEP 768:prv+4UNbdG3h2GDTd+ZkqhReX6+qTko0u229a4vsDNeVH1SdW:pbsbU3uHgvVTVKa4MEH1h
TLSH
T11803CF32E8658A738DE6D784714B75573EB92163C7C80B90D8ED6F0D068B5AC270BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 49bbbaaca5714216047788342b5dee96e118609862a2dcefa2ea8bb3991c8d9c
MD5 cb653d746be68a3bc19a0b37b1358760
SHA1 248fe00ae976ca6c9c1d7530c7a26cd86f51fd1e
SHA512 3ab4a58258854c10cbde4a22ce461b2b9b869b1c23e1b40f5b533bb03d4f17ad1ee14151aa7b8411004c20abe1f1154f4b41515aff19d703e8c7aef3095bd633
SSDEEP 768:du3mLVnDTd+ZkqhZq7ueX6+qTko0u229a4vsTPPi9PT:du3mWHOvVTVKa4ePA
TLSH
T140F2CF70F8659D6388BAD78472533287AEB421B3E6C41F44D9EDEB1D054762C1B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7214d13d-dc17-4a48-93ef-b17126e4c5fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7214d13d-dc17-4a48-93ef-b17126e4c5fb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3408_133943874\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download