691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 04:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v18R-m4-eM.svg
Size 57KB
Sample260817-fe5vmsem3z
SHA256 691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91
MD5 8b9081c1b97a4eac196685a1f8617477
SHA1 89a34da98763f220cbdfc9dfaff9157a8239af61
SHA512 de72e780093390de1e184eb1cd1f29908fa6e5e100cf49a698ae67d4561ee17ba3e1af4f1a74237a4ed5ef14589791d4ed0e522e662faf2e00a580e1f299cbd3
SSDEEP 384:cgSrmXAixJODd7YkfwjGHDBPBsuQnPY7Yast17SXRargsZGmDLYjUpdMp9oDrUvP:cKXl4sZTDK9oDO
TLSH
T11243737637F4BC9B8BCC034B5D02EC6C45AF94B784A8668C9BD790E89548368F7EC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2768	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314156988098446"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{48E3E1F1-F27B-48CD-8949-B55FF2910F26}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4420	msedge.exe
4420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3036	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 3036	2292	iexplore.exe	89
PID 3036 wrote to memory of 4188	3036	msedge.exe	90
PID 3036 wrote to memory of 4636	3036	msedge.exe	91
PID 3036 wrote to memory of 2768	3036	msedge.exe	92
PID 3036 wrote to memory of 4636	3036	msedge.exe	91
PID 3036 wrote to memory of 4636	3036	msedge.exe	91
PID 3036 wrote to memory of 4644	3036	msedge.exe	93
PID 3036 wrote to memory of 4644	3036	msedge.exe	93
PID 3036 wrote to memory of 2572	3036	msedge.exe	95
PID 3036 wrote to memory of 2572	3036	msedge.exe	95
PID 3036 wrote to memory of 2572	3036	msedge.exe	95
PID 3036 wrote to memory of 3428	3036	msedge.exe	96
PID 3036 wrote to memory of 3428	3036	msedge.exe	96
PID 3036 wrote to memory of 3428	3036	msedge.exe	96
PID 3036 wrote to memory of 1128	3036	msedge.exe	97
PID 3036 wrote to memory of 1328	3036	msedge.exe	98
PID 3036 wrote to memory of 1128	3036	msedge.exe	97
PID 3036 wrote to memory of 1128	3036	msedge.exe	97
PID 3036 wrote to memory of 1328	3036	msedge.exe	98
PID 3036 wrote to memory of 1328	3036	msedge.exe	98
PID 3036 wrote to memory of 3112	3036	msedge.exe	99
PID 3036 wrote to memory of 3112	3036	msedge.exe	99
PID 3036 wrote to memory of 4332	3036	msedge.exe	101
PID 3036 wrote to memory of 3824	3036	msedge.exe	102
PID 3036 wrote to memory of 4332	3036	msedge.exe	101
PID 3036 wrote to memory of 3824	3036	msedge.exe	102
PID 3036 wrote to memory of 4624	3036	msedge.exe	104
PID 3036 wrote to memory of 1532	3036	msedge.exe	105
PID 3036 wrote to memory of 1532	3036	msedge.exe	105
PID 3036 wrote to memory of 2044	3036	msedge.exe	108
PID 3036 wrote to memory of 2044	3036	msedge.exe	108
PID 3036 wrote to memory of 4840	3036	msedge.exe	110
PID 3036 wrote to memory of 2916	3036	msedge.exe	111
PID 3036 wrote to memory of 4872	3036	msedge.exe	112
PID 3036 wrote to memory of 3864	3036	msedge.exe	113
PID 3036 wrote to memory of 3864	3036	msedge.exe	113
PID 3036 wrote to memory of 4420	3036	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v18R-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v18R-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2fc,0x300,0x304,0x2f8,0x30c,0x7ffbb0d5c188,0x7ffbb0d5c194,0x7ffbb0d5c1a0
    3⤵
    PID:4188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,13118336787150409259,11816220264514956078,262144 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:2
    3⤵
    PID:4636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,1269466862314510691,1038214382432958727,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,16316379943794569029,15390585208644253613,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:13
    3⤵
    PID:4644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,9764484784473903044,13315465526128189317,2097152 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
    3⤵
    PID:2572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,2062327522177287010,4046189350748228626,2097152 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,6976315323983481481,6000548266149784559,2097152 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:1128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14578236662549571371,3489611394907761446,2097152 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:9
    3⤵
    PID:1328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7534135804948106572,13281480488610108312,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
    3⤵
    PID:3112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,10059180511665470028,11995135908675102385,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,4635678352649029121,4055157464992960318,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
    3⤵
    PID:3824
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,4429445745740691102,7518761054952639245,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
    3⤵
    PID:1668
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,4429445745740691102,7518761054952639245,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
    3⤵
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,9969260009318088295,14336605097407038083,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
    3⤵
    PID:1532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,3179657814576069804,5201608260750451342,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
    3⤵
    PID:2044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,11819369642164663008,5577860348432446315,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:4840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,1351973916371982071,9107942577537484335,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
    3⤵
    PID:2916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,2275916279962800816,14142786484103794827,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,12303717152920038704,10223313472013458804,524288 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
    3⤵
    PID:3864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,15716347939696836470,7103725987835860692,262144 --field-trial-handle=1960,i,12890563534622116229,6784505654543131213,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 069b3e80f171a75542686e1f04eb6da43dbf06402c56809c4e6df4ff2221c37e
MD5 5b53f2dea6cc85c8cb21f31e431112b7
SHA1 7f3a84c7f6b0fbbdc57dfe15124741c6a82542a3
SHA512 ba8456cb1c96c32752583de3dd5257631eef67187a6dbd8cc75b7b0811da3d1d6250006c1882502870bf891d521fddb32557579fd43410eb2945b9d15a82cd86
TLSH
T1B5517390272B5BD2F7F456F07ED9DF993631A455118B2F128C28A432788FB34703A660
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5976bd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5976bd.TMP
Size 3KB
SHA256 2192574c64fc882056157d23fb4337f42b879e2b429168fb2c91c4eefb71ae05
MD5 f167d4a63aeaad7cbd142f372b23a846
SHA1 8b220f0004fbc1fd6dca4541d500b91c058d90b9
SHA512 ca8e1f482dc09f8a3d2e3c4629931dd702f798288d5fdbeb1fadebf936b172a99257f964515d1635b98a7094165a24dac01ce4bb02c1c4beca190be57e43fa57
TLSH
T1A7518490272B5BD2F7F456F07EE9DF893671A444118B2F12CC289472788FB34707A660
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1f51d654e6e63536d029161f2641d284a62d131ce1ae0469cbb990a796bbd494
MD5 a6f0853b4a322fee3864883d9b75cd02
SHA1 68a3f7bdd32a02ece1604618f648799a5f3ce1bf
SHA512 86d28c849d184ba8c2d9393fc7454298646579e8631feb749fcaefc5421556e494d4e9602d2f3c7c9da9633fea25def21390aeff94801d7e419ab53cd6e65d4b
TLSH
T17341B0F783F4857E9A0196F0AA146E1FCE2D0515432C7C5AC9E0AE2B93E3471D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 db1d41f5a6239d7e126b312267462e03cfd54c9173883c675327d426d179ccbd
MD5 d44e8b11c7a053c9dc94b2c585f48f9b
SHA1 75e9a7ba240c88d2aaed3cf2e52489333f99ad5b
SHA512 a033f1f2ce084b1194ceb854a6204e2b00c21d26b39fdc8beaa49d6142f06f05e43dee604e6e5d37b4398e17ae229972e4b4df65bda6133acc7f50e83db9f940
SSDEEP 192:sxRkRVECG/fjs2O8bNaizoA8p4Gy/g6+WNIYlzZuioGQIgDvgHJ:sxRkrTG/fjs2O8av/y/5IOwEp
TLSH
T15A42B6166E68A93B8CC7E21DBB157F53D6F9503261D41E48AAFCCA1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 769098498a4b1d6f09362405e8aee0d0a80dc5be9c5ba99d695b0349e68fea76
MD5 924e1e9709145d328760f5531beb2e37
SHA1 f65ad7d35a78e61fc2dc8e796f312432c7224276
SHA512 0b387ef2242995193c14aa41b37e40061af16bd7ca9a3c06b25e84410a2f4bfb2bd8f07e87618a4c97d5a4db23223fb54cb51c2e24f7b6bda16a62b291afe8fd
SSDEEP 192:sxR7RVECG/fjsEO8bNaizoA8p4Gy/g6+WNIYlzZuioGQIgVgHJ:sxR7rTG/fjsEO8av/y/5IOwqp
TLSH
T1FA32A6566A68A93B8CC7E21DBB157F53D6F9503261D41E48EAFCCA1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c91ea9631cfde978f4d1fb748c12674d4533c5d8baa87d6beaa7ffcd0b764fe
MD5 bd7796a8ebecf0dfcb7bb6044070f1a4
SHA1 6b39c0700380609d82afa681d1b5a2949222d939
SHA512 11abf679b74d4ead638261fc01364a267ad67165309d96c5b3c4c0fc1ba2f53e2d7d34f8a7f5cd0a88d0b554bedec49752698ef76efac106e027b908b6040007
SSDEEP 192:sxRkRVECG/fjs2rWZ6FdNizoA8p4Gy/g6+WNIYlHZWioGQIgD9gHJ:sxRkrTG/fjs2rgONv/y/5I0wep
TLSH
T1114295556968AD3B9CC7E21DBA15BF53E3F95132A1901E48AAFCC61C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 012ecf8c55731735b40724c652e7a7d749cc18faf3d3b97965506e4c3595cf68
MD5 3c1e782c4632faf7294b0ae0868326a7
SHA1 31aadfdb8863ecb663d88c898152a25f4862601c
SHA512 61674b12b00d9c969aab32ef948971e40e4c9983cee727671768159f11dfc08decf7fcded853c111314d5e1f19d1c5b6daac2002a7660de31982cb3fc12c87ba
SSDEEP 768:dofAqj7pLuL7AxWgg+fJJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV0+N131Yro74:dofAqVE7AxWgg+fJJu1jaP+Nl1j74
TLSH
T189D2EA7B640CCB7E4F804ADDEC19BA9F6DA802DB9698C94047FE941C03C6BEB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98214dcb-8163-4f32-b779-3b4775d76ea6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\98214dcb-8163-4f32-b779-3b4775d76ea6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5674237fd89648a4f6d142cc7c398291eb4dbb365ccc69fae588d6b7cc2430af
MD5 8374cd8903891daec820c0c7b300bdcb
SHA1 3e63d4ed4d0b909f2c4acb88f6488454205c8cc9
SHA512 4ff06feb2d7e114e58f2a88a2ca67038b9fc7a64a133bf6425c916c856f6f6487fd94b41ee0f59d51ced9043a9198e7390dab56da834d174c63165b5c526c464
SSDEEP 768:4FQ13IwgyaVjyXcJTVTlNHXmTWTbc+HrPi9Pn:b13wleWn1LP0
TLSH
T1B3038D71DCA4DB6BEDF69FC5A60A7A07AEF50163C1C858D8D9D9AE4D10C748E030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f4397d76d8fe60a311a61ef114a857cb2b38d6cbde10ee3ccf4a34786a8702d7
MD5 2894dbc6e7cd549e365a366225d64d0c
SHA1 cce9fb90c7b6cf2342c8616e37bdf375f63aa12d
SHA512 b838e8ecdb9908c0eadc89e54a1658f832e1f42c1c09cc88ee0e1f9d5b48b23a5407e5b1fd1e2036172177e78bb4c1c1405451aaa780c67cf8749d4babb27d3b
SSDEEP 768:Qrv+4UNbdw38aVjgmiJJTVTvNHXmTWTbc+HrPi9Pex:Qbsba39VQeWn1LPPx
TLSH
T1F413BF71A8A8AE63DDF69BC9A10B7A037FF8116381C40598CDD96B8D16C748E030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 736c42634bf45fe97ef1aba2178f39f3b6dec867166f6d1b08c4889323fe2413
MD5 a66be02000f959a59cb4d02c528f4558
SHA1 9d45ea5f2bd59cd3173b22eb0e472f870ce8c03b
SHA512 fb9a1989c72648681954ed9eefbc2225d0b66a9c3624a6c3803fa175b41021a510b0fd473cb07cacfd0db1a523a63bb7ce0c7bacadda35755cef8757dc1f8f4f
SSDEEP 768:rn3DaVjymiJJTVT6NHXmTWTbc+HrPi9Pn:rn3KbReWn1LP0
TLSH
T1F8F2AE70ACA8AE67DDF69FC9A6467B03AEF91163D1C81588C9D9AB0E15C344D0317C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f0089484a9328aa1d6758eff46c0a77c8b69138520a578f3c4f90ea46bf24fca
MD5 60b4023c7b0098fce03e7ad271788915
SHA1 5cc8eb24ed5fd9ef09d4a15bb07f8aedaca6d303
SHA512 712d5ec6a9650d217b1b4def93d2326775597a4797a8f98bb228d778eaacd3fc871ea3bb6fe6de74e29587c515b4ca7863aa8c47be3d7a6624c2a5239e8c62ae
SSDEEP 768:sn38aVjymiJJTVT6NHXmTWTbc+HrPi9Pn:sn39bReWn1LP0
TLSH
T130F2AE70ACA8AE67DDF69FC9A6467B036EF91163D1C81588C9D9AB0E15C344E0317C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 50e2f094ae0796186fbd9094071599ae6d3962cb3e02c6ce9d5c3a9a2c4ec533
MD5 a9a6a25ee766911461f7dd747b30eec6
SHA1 789bc27c4ace90a6c06887b2594d9b2c012aaed7
SHA512 43f2967bf24fbcfe12fec5077c6db973a623e1a3a2847c9b0d0b9560ad57bac2cfa482e0a8c632e638efcea976a987ad9f9356a397e51ba1d6b378f3cf6b99ae
SSDEEP 768:arv+4UNbdM3bXHiJJT8NHXmTWTbc+/peVH1SvyZ:absb+3LpeWn1hEH1dZ
TLSH
T13C03CF319CA98F379DF69788708BB6573EF8116385C40A84C8D96F4E428748D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2b78623a845239782abb73849de4b9ead61c1ad52580513507b9ce8ef9ebf4ff
MD5 fd49086d6cbb864204b4add0c77417e1
SHA1 1ad2e7134a21f544af3951b739673cdb721a7a0b
SHA512 02836f14cc71c2dd29a098ced84f5bf03741864538bf88dd474e16a34420befec0b61ecf248203c73a8a663b0cffd3b4c47c5046c764abd6689e017e12f43235
SSDEEP 768:brv+4UNbdM3EMMiJJTVTKNHXmTWTbc+ereVH1SvyZ:bbsb+32NeWn1IEH1dZ
TLSH
T12403BF7198A89B37AEF69B89704BBA177FF9116381C40594CCD96F4E068748D030BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22bf7811-8864-4b31-b1b2-1fb6271b70fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\22bf7811-8864-4b31-b1b2-1fb6271b70fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download