c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 02:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m1-eL.svg
Size 3KB
Sample260817-cra91sdn3v
SHA256 c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31
MD5 2226f49d0e59c46b4a18649eb679ae54
SHA1 c969dfea4218c1fab67060e9393a7fc24cc5547a
SHA512 a155996290a9d678506c7112a083decaa035069718b565052611fd751a1fb9378bb55dbdb09a8fabc2a0f5caa91dfbc2eb1e106fb2f9cba9c2f00608c0720af7
TLSH
T1C771368876F87EDBD7D802570D41D4B84B2F906BD822978DD3CBA0E8792826C735E5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3356	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314066985050781"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{07793D23-5F04-408F-8871-DEB3FC1C74F2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1052	msedge.exe
1052	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1884	msedge.exe
1884	msedge.exe
1884	msedge.exe
1884	msedge.exe
1884	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1884	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 908 wrote to memory of 1884	908	iexplore.exe	89
PID 1884 wrote to memory of 4956	1884	msedge.exe	90
PID 1884 wrote to memory of 5884	1884	msedge.exe	91
PID 1884 wrote to memory of 3356	1884	msedge.exe	92
PID 1884 wrote to memory of 5884	1884	msedge.exe	91
PID 1884 wrote to memory of 5884	1884	msedge.exe	91
PID 1884 wrote to memory of 6064	1884	msedge.exe	93
PID 1884 wrote to memory of 6064	1884	msedge.exe	93
PID 1884 wrote to memory of 1328	1884	msedge.exe	95
PID 1884 wrote to memory of 1328	1884	msedge.exe	95
PID 1884 wrote to memory of 2384	1884	msedge.exe	96
PID 1884 wrote to memory of 1328	1884	msedge.exe	95
PID 1884 wrote to memory of 2384	1884	msedge.exe	96
PID 1884 wrote to memory of 2384	1884	msedge.exe	96
PID 1884 wrote to memory of 5640	1884	msedge.exe	97
PID 1884 wrote to memory of 720	1884	msedge.exe	98
PID 1884 wrote to memory of 5640	1884	msedge.exe	97
PID 1884 wrote to memory of 5640	1884	msedge.exe	97
PID 1884 wrote to memory of 720	1884	msedge.exe	98
PID 1884 wrote to memory of 720	1884	msedge.exe	98
PID 1884 wrote to memory of 1176	1884	msedge.exe	99
PID 1884 wrote to memory of 1176	1884	msedge.exe	99
PID 1884 wrote to memory of 5976	1884	msedge.exe	101
PID 1884 wrote to memory of 5404	1884	msedge.exe	102
PID 1884 wrote to memory of 5976	1884	msedge.exe	101
PID 1884 wrote to memory of 5404	1884	msedge.exe	102
PID 1884 wrote to memory of 4160	1884	msedge.exe	104
PID 1884 wrote to memory of 3928	1884	msedge.exe	105
PID 1884 wrote to memory of 3928	1884	msedge.exe	105
PID 1884 wrote to memory of 5200	1884	msedge.exe	108
PID 1884 wrote to memory of 5200	1884	msedge.exe	108
PID 1884 wrote to memory of 3288	1884	msedge.exe	110
PID 1884 wrote to memory of 3188	1884	msedge.exe	111
PID 1884 wrote to memory of 5436	1884	msedge.exe	112
PID 1884 wrote to memory of 4108	1884	msedge.exe	113
PID 1884 wrote to memory of 4108	1884	msedge.exe	113
PID 1884 wrote to memory of 1052	1884	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m1-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m1-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x320,0x7ffb17d7c188,0x7ffb17d7c194,0x7ffb17d7c1a0
    3⤵
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,272532888630604263,12229760752384671213,262144 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,7622962511560945919,2078288365124536263,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,2632846677258027336,17355435987698636077,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:13
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,1468481354786944270,8283859723989516499,2097152 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
    3⤵
    PID:1328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,14813074073511178628,16123968264539268916,2097152 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:2384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,15769233915318622237,4541274739237082089,2097152 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,17410722788736760920,14935390330817283459,2097152 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:9
    3⤵
    PID:720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,5220167058367109322,17688991504570082598,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
    3⤵
    PID:1176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,10240863658350614679,10245317867383558830,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,7838863389245447472,7150792365991058886,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
    3⤵
    PID:5404
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,15879487894040216141,4726943016231552630,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
    3⤵
    PID:2604
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,15879487894040216141,4726943016231552630,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
    3⤵
    PID:4160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,13883788960185944483,1481556350480713109,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
    3⤵
    PID:3928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,9942005058190608130,14426651109469598375,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
    3⤵
    PID:5200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,6360086314431439552,18400932785591466135,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
    3⤵
    PID:3288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,17869013114783450852,3510432196663351864,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:14
    3⤵
    PID:3188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,11085308082056153246,11738284955087501464,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:5436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,13786419846167003439,6535219706520810255,524288 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
    3⤵
    PID:4108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6244,i,15744517427880494164,17381171204339737225,262144 --field-trial-handle=2328,i,4483410941737542674,14096909994108746326,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 697237f1e7dd7facfabba3eb3e1e9a04c12c5cf0f98522b6da987b0f52585b0e
MD5 bdd9d11848fffd13cbb23219ef8b4a92
SHA1 677d0d9d9c35bae4f7fe2dbccb59b719db17d3f5
SHA512 2275ce64d07c605e4fad79dc231aacbe955a2e79a4cc6ceef26ec8c017586850db50b74fb47a2a761ab5925c4a8a411dd5887a665adee5ba260ba0485aa75abb
TLSH
T17E61214B236E04E9D36A4A7251D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592baa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592baa.TMP
Size 3KB
SHA256 e73c43acee5023ace6bdda0be78cbf008c5e67287264897c9ed3eaceb9d15730
MD5 255f721a273d709f34c6c9e69dbe911b
SHA1 fe9684a86cbd88cc95609cc331ff4047203f9d91
SHA512 c6d752134ea3698fc1ecd16ebd0d3a164a781b584937a3b84392e381bef6b9a511a7fb839de6a02fdb2aca197520d18e28c329c0d46079d2b35e081c3249ba97
TLSH
T1D261214A235E04E9D36A4A7254D9774436F186704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5354870926ce4d7bddb0e38bd2d98e28afa00c02463b4d468c192417858e22e3
MD5 6a50e7e70f628ed1ff2f1e7e15b525c4
SHA1 bee5fd20607fd54a7b98b4189a531b4d9adbc9c4
SHA512 655805a64495f9bc4ff79d7d1e94ddab73eab670c12a021e7cd1be8cd88a548a15c64c6205ee555d079f835f1d5f98d8c2c359bf8546f1d6ec9127a1a1aa0eaa
TLSH
T1E341ABF3C3F4857E8A1196F0AB18AE1BCE2D0515432C7D5AC9E0AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5960c1f4bd368e2085475ae211962489826b6007bfe926d2e52b67f77cc63b65
MD5 4e91cced7d4bcfd2701c0aaebb31278e
SHA1 894d6687d0da4dbd6f9285f00d8ddf9c6495bcc6
SHA512 27ab1afd351cbe3a80178eaf28260c305563c24ba17de47aa6cc729deae33a141d08f4a86e8caef8501fe4fa2c60fc02fef7b9af081aae1613f4ee82ab54b8df
SSDEEP 192:sxRTR+Ccf/fSsSzXZXBmzoA8p4y/g6+WNIYn8Ul7hX+GDIgVVJ:sxRTXcf/fSsSzpXx3/5ITeXRF
TLSH
T11A32C7166E28A93B4CCBE61DBB157F53D6F91132A0901E48EAFC9A1C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 561adec090e8aa2045e17b75dab86c6705f423aa56b46b45246161a113fd8d5c
MD5 6daf285c4e3fdfafee7a3a89465a9de7
SHA1 1251f690174051eddd676a5febf7a5c98a703304
SHA512 868b2e1a595b2ffd9ecbeac6caa00ca0ec05a1f33dba63a46cc1f19d0754ac61a28473728f95d81f92527e39ed61c4a7e62c816a1a0072dc5f9ededfbc7657b5
SSDEEP 192:sxRoR+Ccf/fSsnojXZXBmzoA8p4y/g6+WNIYn86lPhX+GDIgDhVJ:sxRoXcf/fSsnojpXx3/5IT+XRV
TLSH
T13E42C7166D28A93B4CCBE61DBB157F53E7F95132A0901E44EAFCDA1C04EB6DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ed2e8742687b3465dce1681242473062b8e5c3c42658771c2337a410852cf576
MD5 bce84eb5aa74c3373757054e50036a85
SHA1 12a30817f1759f43e6bd6c033346b6a6d925b430
SHA512 9813098dc792e4d96baad49a682507266c94bdfa506e1f1cf19511109060f672a100231df1f629e14de0e3b29d5a529bdb0192d5591bcf460a2b6d1c39ef988b
SSDEEP 192:sxRoR+Ccf/fSsnzXZXBmzoA8p4y/g6+WNIYn8Ul7hX+GDIgDDVJ:sxRoXcf/fSsnzpXx3/5ITeXRf
TLSH
T15242C7166E28A93B4CCBE21DBB157F53D7F95132A1D01E48AAFC9A1C04EB6DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 ee9942bdc1e5ed6959074f94ede221a5a5494df200bd7dced73b613553275a1d
MD5 a93f2d59c67a6d95cf9146888e4aadb4
SHA1 f980223397163aa265eb23666df630a801633620
SHA512 f47296343d5ba50b9236e71b479178998947104995ba614ffcd9eb7dade344fcfc50c847fd88d29ca226d008f0af4020d8d8eb7de87cb52afe99a88179c1eea9
SSDEEP 768:wb8dfg7pLuL7r6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZVmu46ZCrohxLg:wb8dfsE7r6Wgouf6Mu1jaCVmV6ZZvg
TLSH
T133D2DA7B640DCB7E4F800ADDEC19BE9F6DA802CB96D8C94047FE951C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6fd80088dac64b069772fd5f0bbc960c8439dd30c4ac93bfa4bffc564243d92b
MD5 beed7d367dfb602e0bbd4c9ab6a0f590
SHA1 fd2ba227477d1923c3e862bf8ac53600756e6c7b
SHA512 a03ff2477713ee9c01f285d03ade4c722a137e5490b3709fa302a29f14bfd3dcf7e18be0fe289a8ae6f3a56934547f7c6d7c62f5fb14cf5f3aeb3217e974b73c
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQp5qKC8P:CtaTHd3LeTInPlOgxU1NAj70HS3eyEkd
TLSH
T155916652347B12407C3E7B5C8078996BC6C574B33415B46BBBAD22B10F6AE524EFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 657de5507669523bd6c624c12cab34db3acfd3e32c6939ca1b557cea02e56a40
MD5 5eef33f2148c4fcecb15eb3d357eb77e
SHA1 6c76757e954770339b895c6d317bbca60a477f9c
SHA512 54ba1c0f31f48809a1e066efe82ef48ec204946a8de58f72db6ea352f522957921cd944831f957cb899a70ef62a97324de9d5e918589c6a0701e090098c139af
SSDEEP 768:Hrv+4UNbdL3quDZIO0XtNzc4ReyIsPCPi9PRf:Hbsbh3Ytc44bsqPq
TLSH
T1C813CF31F838DD63ACF6A642B64736437EF8256780C41A94D5D99F0C0A875DE272F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 65a7d09e58a93906904b6cb60c4a4aea230063ad738339730aa82e1ff788a323
MD5 b82b80f87dd83bd2121ce0d27406deaf
SHA1 fdfb2f16338193b57c4a2dfb360ca81a95fb9941
SHA512 a35573072522dcecbdd09c3343ab61267d07ebdaa856e28aa982b3369ed56726b903a426886bab3a91662b4ccc38630826c752f3bf3d5c7a9e43f3e02ea44529
SSDEEP 768:6rv+4UNbds3XBDZIO0sNzc4ReyIsXGeVH1S5D:6bsbS3dtc44bs2EH1Y
TLSH
T14003CF32A8788937ECF6A686B50B76137EF8611B82D81F90C5DE6F4C464B5DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c887cccb329d48cad3c658d47d4b1d6221658df09ed497480726c55276acb09d
MD5 ab1a1f8217288c4cdea42221f3c8d8bf
SHA1 843175cf5bfd7fdbdcde699aa53691a0700e69b6
SHA512 ed67d41f4ec7bb5ea0d76c4395710d2c412811d882883fed6d467d8ad6a7a53b5a565365329973c0cfaa8e96a0d0ab057b8f651b7828eca608830ea58face792
SSDEEP 768:trv+4UNbds3CYDZIO0X9Nzc4ReyIs2CeVH1S5D:tbsbS3atc44bsZEH1Y
TLSH
T1C103CE32A838CD33ACEA6646B14B76937EF8216B81840F94C9DA9F0C4A471DD171FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 573b33324bb754c6c6022c77e0547ca3715565ebfcf4982922b817ae385f07fb
MD5 011a37cd7812d8af83356efff3bb6d4d
SHA1 c2599552f6e8dea08b96fc1c27b84986a0304084
SHA512 0de1d1d6f37ae5cc3ce8870bd51bf7b58367e93a6ae9dc78c43c6c6fafbdc203101135d7ef18157f2180624cc11773b35731a3da6dd74b03c3cffddf8ec160cc
SSDEEP 768:trv+4UNbdL3PuDZIO0XKNzc4ReyIsPCeVH1S5F:tbsbh34tc44bsqEH1W
TLSH
T14213BF32A878CD33ACEAA645B54776937FF8612781840E94C9DA9F0C4A471DD171FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 57bbf8040b0480a18f2823f2eb903304564c77f14055dca1af572bfd31c91494
MD5 128ff2dac730c592aa514ce05945154b
SHA1 db7be8d5cb8b8d8c65650b84c685a65958a9dc3f
SHA512 495820ff6ed54ab31389c2ea46a2a2b98df2f7d814cff477878d8b89f31223ef8b406285469139450810d160987ffe93496d4a9c205c1cc24de889ad568644b4
SSDEEP 768:Irv+4UNbdS3qvZQ5O0X5Nzc4ReyIsPCPi9PRf:Ibsbk3Ntc44bsqPq
TLSH
T1EF13AD31E838DE63ACE6A782B2467687BEF4216781C80AD4C9D95F4C05875EE171FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1884_24863847\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download