d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 23:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v10J-m4-eM.svg
Size 24KB
Sample260814-285ydsvsat
SHA256 d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc
MD5 8c786d4da80ac1948a137a727a12fd7e
SHA1 0fb0844fb479811339f7104eb281a91b930ca91d
SHA512 838d9d0ec608d1e47dd3722b8ccd401e03eb334982cd433a7f896e66b62a9e69b9d2d3e8209914dd8563af8734ee368742a979b7e861efd480707c961c193a0e
SSDEEP 384:c5veJtU7WSADG+2tM8LSB7XXZwuw5wE1/7PRP3uDCr:c5vQjqZmDK
TLSH
T11FB21F6437F87C978BD803479D02FC68461FA877C4A8678D93D7D4E8A988368FB6C560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312229798535265"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{3E10C161-FBE7-48B7-A685-ED3BFF034396}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5144	msedge.exe
5144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3368	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1392 wrote to memory of 3368	1392	iexplore.exe	89
PID 3368 wrote to memory of 2892	3368	msedge.exe	90
PID 3368 wrote to memory of 4344	3368	msedge.exe	92
PID 3368 wrote to memory of 2356	3368	msedge.exe	93
PID 3368 wrote to memory of 2356	3368	msedge.exe	93
PID 3368 wrote to memory of 2356	3368	msedge.exe	93
PID 3368 wrote to memory of 5312	3368	msedge.exe	94
PID 3368 wrote to memory of 5312	3368	msedge.exe	94
PID 3368 wrote to memory of 784	3368	msedge.exe	95
PID 3368 wrote to memory of 784	3368	msedge.exe	95
PID 3368 wrote to memory of 3364	3368	msedge.exe	96
PID 3368 wrote to memory of 784	3368	msedge.exe	95
PID 3368 wrote to memory of 3364	3368	msedge.exe	96
PID 3368 wrote to memory of 3364	3368	msedge.exe	96
PID 3368 wrote to memory of 1832	3368	msedge.exe	97
PID 3368 wrote to memory of 5332	3368	msedge.exe	98
PID 3368 wrote to memory of 1832	3368	msedge.exe	97
PID 3368 wrote to memory of 1832	3368	msedge.exe	97
PID 3368 wrote to memory of 5332	3368	msedge.exe	98
PID 3368 wrote to memory of 5332	3368	msedge.exe	98
PID 3368 wrote to memory of 5160	3368	msedge.exe	100
PID 3368 wrote to memory of 5160	3368	msedge.exe	100
PID 3368 wrote to memory of 1276	3368	msedge.exe	101
PID 3368 wrote to memory of 1276	3368	msedge.exe	101
PID 3368 wrote to memory of 2108	3368	msedge.exe	102
PID 3368 wrote to memory of 2108	3368	msedge.exe	102
PID 3368 wrote to memory of 5144	3368	msedge.exe	104
PID 3368 wrote to memory of 1444	3368	msedge.exe	105
PID 3368 wrote to memory of 1444	3368	msedge.exe	105
PID 3368 wrote to memory of 5668	3368	msedge.exe	108
PID 3368 wrote to memory of 5668	3368	msedge.exe	108
PID 3368 wrote to memory of 1728	3368	msedge.exe	110
PID 3368 wrote to memory of 3200	3368	msedge.exe	111
PID 3368 wrote to memory of 1704	3368	msedge.exe	112
PID 3368 wrote to memory of 4760	3368	msedge.exe	113
PID 3368 wrote to memory of 4760	3368	msedge.exe	113
PID 3368 wrote to memory of 5144	3368	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v10J-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v10J-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x354,0x7fff4a00c188,0x7fff4a00c194,0x7fff4a00c1a0
    3⤵
    PID:2892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,18371330447636863422,3079980573115269988,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,10645263090581289153,12839986558584145945,262144 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:2
    3⤵
    PID:2356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,7344739415131365734,4466178117339677436,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:13
    3⤵
    PID:5312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,14892248809286292437,4473057742305443459,2097152 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,4203962178250992678,13405211927113426442,2097152 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
    3⤵
    PID:3364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,2219080314742840342,1934393842537710969,2097152 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
    3⤵
    PID:1832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,18240497271687406956,1231653952133320118,2097152 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:9
    3⤵
    PID:5332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,8395008676391184896,9027818467580124322,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
    3⤵
    PID:5160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,11580802333970834434,2953664073892345986,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
    3⤵
    PID:1276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,7011546152904496884,5823619598164648004,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:2108
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,7189843180138111999,10209502072819098397,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
    3⤵
    PID:3732
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,7189843180138111999,10209502072819098397,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
    3⤵
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,1652335818709353344,2069978564666652173,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:1444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,5887237681957178212,17530372910417805154,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
    3⤵
    PID:5668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,8246781403650711199,15062888502823997909,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:1728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,348908461145709073,15135038727153778019,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
    3⤵
    PID:3200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,1982416068275492553,2946391526045790391,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,11747390250275044296,1619135210672232895,524288 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
    3⤵
    PID:4760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2984,i,611421463566696705,568541354334836757,262144 --field-trial-handle=1944,i,18232128789265174542,6797133545784999528,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 81ef275003c56a21436470b5c2abccdde8827f6244e22c9c1c7be30368173d12
MD5 1f2561119dd13858904491c449d2971a
SHA1 65d59b22d445218755e036e9103055702509cfcb
SHA512 6985d225a4176df66966f540df944c912ab24200af2473e7b96c61cbce73b6953d2fc0f8deecd029b1194f3a37d8b364415080ed68e1c8c945f16f29c83149fc
TLSH
T1AB51B7E303271DC2C7E582B254E1ACFA7A3AC6FA41CF9E95788EA4B4864331E35D5024
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d49c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d49c.TMP
Size 2KB
SHA256 9a9f775f8bd58d146014d2dd335f062b164c55b805ec1e2cfd3e7fbffe022f4c
MD5 324f770523ec7066bb5886fda0aa4777
SHA1 4d94746603c99b1cd08756b4fb07efd2eda0007a
SHA512 d4eb4b4979dbc7b8baf1838edb949301d60a57064c7bc2f36dba165d49798504c583618aff2cce8a4aec898b095e4eeb7bd645135be19c9060c401c18fd1f8be
TLSH
T18B51C8E303171DC2C7E582B258E0ACFA7A3AC6FA41CF9ED5788E94B4864331E31D5024
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

d4779782-858e-4d34-bfa0-561593c9b2e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d4779782-858e-4d34-bfa0-561593c9b2e6.tmp
Size 2KB
SHA256 49dc89f529352f1a20a42037e235f2cc9ef6abfaefb11ca4deed6386aed1a265
MD5 867fd8240ce261e2e1adeda13f9972ef
SHA1 4da7c29a9c68e239372d3bbbe62f7e881ff00b7b
SHA512 b3bb08b913103bbb4a6099fe8de467fa4173020f917d363e504504801710d0a0c88e256549428f3f71d8b78e7ee01c4016b6dc7d8e85159229688f853dedf967
TLSH
T1FA419DF383F4856D8A0195F4AA186E2FCE2D0525432C7D5A89E4AE2BA3E3471D141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c0975b9d60347685b3cbb7cea2eddc448baf8617bf4b10881d027a4c479c5adb
MD5 e783ac1c5b14a2ad62aaaa4ba148467a
SHA1 3802b809e02f2834a75a3c30c6ae8cee2799da1a
SHA512 3793fdb3399d24b70ca4ab9ed6718fb2425880d259b1bfa3abe2ee7418f22dcff32a3c2a642037b99595505f8f1e94bea5734dfcf1e5e213227e9d649460610f
SSDEEP 192:sxRFRrCH/fTstHBPZZzoD8p42J/g6+WNIYCNWuOvGaIgVeJ:sxRFcH/fTsthRNTJ/5I2fc
TLSH
T11132C8166A68A93B8CC7E21CFB65BF53D6F91032A1D51E48AAFC8B1C04E76DD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 16db53f538275858aa55cee6577db27a27412378a66605232d1fc92df21922de
MD5 5e06795282c0a1a7a3bea804b4c99791
SHA1 3eb97584e545fe266e19ce9d09d987e00b0f2860
SHA512 70a562870d0ee9f20e49cfb6cce073d698e6c587c145d9d9d009481272b9e2dbcb6e8302cb2d56493bd01c709820ac9c7f9b22af628190e65288283e34791690
SSDEEP 192:sxR6RrCH/fTsiTHBPZZzoD8p42J/g6+WNIYCNWuOvGaIgD/eJ:sxR6cH/fTsahRNTJ/5I2fu
TLSH
T18942D8166A68A97B8CC7E21CFB55BF93D6F91032A1D11E48AAFC8B1C04E76DD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3232723b8a1e7b22c4b9923a8ee13a534916ee32e0d75f780cb9def3e0c41db1
MD5 e8f9750408390cb1f3321beae0cbd665
SHA1 fbf92fbe10d3e2c6fb509334564d633c4fdbc3fd
SHA512 3e0b7b2e7de1b8b16d8d37940ed4fbf706318776af6cc2c66676b0adda3159094ce24d34e83cf6d053466e697c0a4e95a8d5ece6d98f823bc161396f987fea0b
SSDEEP 192:sxR6RrCH/fTsiTH/PZZzoD8p42J/g6+WNIYCtCuOvGaIgDNeJ:sxR6cH/fTsafRNTJ/5IKfw
TLSH
T15142D7166968AD7B9CC7E21CFB55BF93D2F91032A0D11E48AAFC8B1C04EB6DD121740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 1e215aa2e1cb808c552498527fa0f8783a73bc1cf9b4bc4c15b20726c3655111
MD5 047aafc0b1548fb6f9232af640660884
SHA1 678482c523fd758e462082efaef22c4f138b6788
SHA512 b10907482af07df62daab8476d8b9498f0e574cccc26950fcdf8199adb410ce4d52a3118fe085290a8bf1f8cc78db3b4214de68aadba7582a069c5641e1d7484
SSDEEP 768:jC+vQN7pLuL7JQWgQ+f4+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHb0QqcDroZO8:jC+vQ7E7JQWgQ+f4+u1jacb0Vcw1
TLSH
T166D2EB7B640DCB7F4F804A9DEC197EDB6DA802CB9698CD4047FA941C02C6BEB52164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d95701fed4152ce6f541dbb760f66f20d51beffba9c5ff6b641208220708914c
MD5 51cd85f0e6ffbef86eb590c7e2774055
SHA1 c13b505b8cbf39becde50029edb1a63f72d8d41c
SHA512 a4b7b9e82272fd9c3318315828e7f341cdbf65c3737cf744f385c1e9395e5296d679664b15dabf5ca118403a36ba485b02781623eab0a7ab18ed5d7ce24d9323
SSDEEP 768:hz3KO6JR+p8+p3bd66j+4BRv86aLIW1Pi9PY:hz3I48+p3Z6n4yXPH
TLSH
T106F2AFB1F8A9AD639CF9D644B25637836EF414A3E5C01ED8D8DCAB0D118715E1B0B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 0d44e7e4e749c1133c467108e4eb70553f22b8e707e4dc490354a1b01df3fe91
MD5 0d98b30c808e0db11cf6193799ffdca5
SHA1 e57a4327db4740c4e3e3781afa725e3e2075b1ec
SHA512 d9dc14f5e6d8725bae3306d18c80c921a26d635f0e7ed76e0e13f36aa93b07906800c6506981023cab35c4d0fe657c88636760a84a084e0b593b8575d9e18de8
SSDEEP 768:xrv+4UNbdE3xS6JRPp8+p3bd66j+4BRv86aLIW1Pi9PM:xbsbe3th8+p3Z6n4yXP3
TLSH
T10913BF71F8ADED739CF6D644B2563B837FB814A394C10ED8E9D8AB4D018619E170B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 7fcc9081779fe4055aefcec2edd786ab4e8b7376439a225da2386e5dfa496f89
MD5 3ade4c3895b012b39ad5e61e71782510
SHA1 29d1078212e63e316a994595bf501dd0373f7764
SHA512 24b0113c36e09f927c4def881bd5860bbcefe74084899b991a8f3b63891811813c340a90993ec9e3dac19635667b5fa3ccab7e377aafd1561f6b8116fdb2e657
SSDEEP 768:WS3KO50np8+p3bd66j+4BRv86aLIW1Pi9PY:WS3k8+p3Z6n4yXPH
TLSH
T121039E71E8A5EE679CF6D781B3567B83AEF414A395C40DC8D8D8AF0D00C319E1B0B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 92c3c11bf0cfe06a8a59b006b1d6992bbb8bcecc342a87deb24d0d2695ca5cfb
MD5 d86f2b467d4d1fe7214b31dcff3920e3
SHA1 76298cbda8b1ee8bcd5032af5eb835baa0bf113b
SHA512 d99ceea3960e905e8d109c6093a533faf721ab09cc30ad7ac6147de6842dec8db6beeb52f48bc25e27d85e8ddd823367c0350794efeabafbf14f1aed3f4a57fb
SSDEEP 768:Irv+4UNbdD3Fc4Np8+p3bd66j+4BRv86aLIiy2bwCl1:Ibsbp3zL8+p3Z6n4yk0ww
TLSH
T1D103CE73F8A899739CE6C644B2467A437FF861A396C10EC4D4DD2B4E419A19E630BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0662bc18b131d18c048b2018b7fe1efeb1d228850971abd2f5aba0dbee8b4339
MD5 47acf08f26f4d633e7b24efb037fc295
SHA1 ff1902f19890c001fd6ca890f34c0eaa60d571f7
SHA512 ff3cacaccc1830430272e8a60507e161423334285e23bc17469b082997599398fa4dae731e1f00b99b31d8234f3c8a8d46e16a0d3007d823d168f169a2baf026
SSDEEP 768:Urv+4UNbdD3QoJRNp8+p3bd66j+4BRv86aLIT12bwCl1:Ubsbp37L8+p3Z6n4yg0ww
TLSH
T1EA03BF72F4A9ED739CEAC644B14677837FB811A399C10EC4E8D96B4E005A19E270F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd37b9b8-68b7-43eb-af7f-327b897314da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fd37b9b8-68b7-43eb-af7f-327b897314da.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3368_417360074\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download