e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c

Analysis

max time kernel
148s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 23:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eL.svg
Size 3KB
Sample260814-3be65svsds
SHA256 e22854a5f93a9bce2c8dcffd9e177925074bb0e0972566d673e4b83022c9a46c
MD5 735c5dd9687af27db46d1760af81d1a5
SHA1 0362449843acc75186d102a08af6cf07a5b90853
SHA512 26772d0a891c6a143982ad5a722edd3afac15222392ad8c66bec616770bd539ac0f223fe367a8615d39c4c5ff3ffbaccfd34400adc4c2fd98fac718edffb22b1
TLSH
T1AA71288876F83EEBD7D802970D41D4B84B2F946BD822978DD3CB94E875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5416	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312232220997419"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{46065C0E-4D02-4921-87B0-BAAC645FEA81}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
864	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 6052 wrote to memory of 864	6052	iexplore.exe	89
PID 864 wrote to memory of 3396	864	msedge.exe	90
PID 864 wrote to memory of 5416	864	msedge.exe	92
PID 864 wrote to memory of 3136	864	msedge.exe	93
PID 864 wrote to memory of 3136	864	msedge.exe	93
PID 864 wrote to memory of 3136	864	msedge.exe	93
PID 864 wrote to memory of 6000	864	msedge.exe	94
PID 864 wrote to memory of 6000	864	msedge.exe	94
PID 864 wrote to memory of 400	864	msedge.exe	96
PID 864 wrote to memory of 4132	864	msedge.exe	95
PID 864 wrote to memory of 400	864	msedge.exe	96
PID 864 wrote to memory of 400	864	msedge.exe	96
PID 864 wrote to memory of 4132	864	msedge.exe	95
PID 864 wrote to memory of 4132	864	msedge.exe	95
PID 864 wrote to memory of 4992	864	msedge.exe	97
PID 864 wrote to memory of 4992	864	msedge.exe	97
PID 864 wrote to memory of 4992	864	msedge.exe	97
PID 864 wrote to memory of 5420	864	msedge.exe	98
PID 864 wrote to memory of 5420	864	msedge.exe	98
PID 864 wrote to memory of 5420	864	msedge.exe	98
PID 864 wrote to memory of 5388	864	msedge.exe	99
PID 864 wrote to memory of 5388	864	msedge.exe	99
PID 864 wrote to memory of 1244	864	msedge.exe	101
PID 864 wrote to memory of 1244	864	msedge.exe	101
PID 864 wrote to memory of 4692	864	msedge.exe	102
PID 864 wrote to memory of 4692	864	msedge.exe	102
PID 864 wrote to memory of 2040	864	msedge.exe	104
PID 864 wrote to memory of 2180	864	msedge.exe	105
PID 864 wrote to memory of 2180	864	msedge.exe	105
PID 864 wrote to memory of 4940	864	msedge.exe	106
PID 864 wrote to memory of 4940	864	msedge.exe	106
PID 864 wrote to memory of 5756	864	msedge.exe	110
PID 864 wrote to memory of 3620	864	msedge.exe	111
PID 864 wrote to memory of 3564	864	msedge.exe	112
PID 864 wrote to memory of 3568	864	msedge.exe	113
PID 864 wrote to memory of 3568	864	msedge.exe	113
PID 864 wrote to memory of 5016	864	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7fffa37bc188,0x7fffa37bc194,0x7fffa37bc1a0
    3⤵
    PID:3396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,13657623177037418771,6518120405853842474,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2004,i,10209979316111200624,4439042271857526951,262144 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:2
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,2042945517294276358,16922310718355201764,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:13
    3⤵
    PID:6000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,15538330740902401869,10377763517169131908,2097152 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,8824150449973392821,2965038329951772297,2097152 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
    3⤵
    PID:400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2500,i,5753928347921188553,18419816236033184553,2097152 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
    3⤵
    PID:4992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,16508393254318024683,18055294342130442386,2097152 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:9
    3⤵
    PID:5420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,2330695483345063390,4277149802355188604,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:14
    3⤵
    PID:5388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,4288491733458410587,6079370523234548817,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
    3⤵
    PID:1244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,13801011916052816471,11701996388611102832,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
    3⤵
    PID:4692
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,13905359846544948718,12147227558914964854,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
    3⤵
    PID:4396
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,13905359846544948718,12147227558914964854,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
    3⤵
    PID:2040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,14310550705737390201,2076563134125891876,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
    3⤵
    PID:2180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,12121679789809991450,15423945283317432404,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
    3⤵
    PID:4940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1304,i,9047018290097600613,8209989474075373246,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
    3⤵
    PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1308,i,2657178314353460371,7426015510602683198,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
    3⤵
    PID:3620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1312,i,11286774279241421091,16416568775527990934,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
    3⤵
    PID:3564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,6681196789953014143,3194436676713391660,524288 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
    3⤵
    PID:3568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,2846672879441272107,1645348786824126514,262144 --field-trial-handle=2924,i,3379575269920732323,9502551432254424514,262144 --variations-seed-version --mojo-platform-channel-handle=924 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5016

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5500

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9c2093dd6d4f2c50a5c92a8ed62af04c5505a3e5d003b787c620562be308ab16
MD5 a076590a135f9342663a3148eb4ad5ce
SHA1 fec0f183deb794afddfb15905ba5a1ec26c9efa2
SHA512 7593b4924dd59d96b947100329c1727692b2660b2433280362fdc21d2d1831b665820d3473a30be9438686d998d30c575db90df521286864600566a663302a4c
TLSH
T1DF411E5303E73AD2E3A1AAB113EC465C33F0C079291B9F21C36B1E74AA16FA850D14D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596690.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596690.TMP
Size 2KB
SHA256 b74860e3b66cbdeb716aef53bba1da175639131f5f99aeca82a095c8823188eb
MD5 54bafc25c142998a0e492e312b4937ea
SHA1 4f701f0f643a5b8a64cc2f9d399e01c62f95aa1e
SHA512 efc05cff2ab124fb50f8ea60aad9f83de5ad624eca111d95ecd4a61bf72d215edcec2e36696891f1ad877a7d810cb5471c37367f1ea188e4924b251cf18c2819
TLSH
T1F6410D5303E73AD1E3A1AAB113EC465D33F0D079281B9F21C36B1D74AA12FA850D14D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7dbd956c7b91706f9f33aa7695b9128f51d4e3149b24c6e7c0bc935541ba7308
MD5 af3a1ed7e1fd196c1e7469f24776dbbe
SHA1 f6a0cde46ba612e0f441806ff765f045217822ec
SHA512 8c510758758bfae7abe001d0ed4dd18d9db0633251114bc93721fba4483600a1a331ac3a1cfd2b5dc76ee42270a1bf38ee0df087b4a58dba6a993b73d3fd8a78
TLSH
T165418DF783F4857E890196F0AA186E1FCE1D0515432C7D9AC9E4EE2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c282da33f944ce8e1ae69acd06eb7d60ecd781aa7ff005e4426035878b4b19a9
MD5 3b2d83cceb539803f09344488bb3b21f
SHA1 3ac4938ab4cf59eedee7f9e2a6ed3e3f9ecf4531
SHA512 31d08d06bbdd64ea3c7a0a78c40dec0f6daaf3d0f2813766b9ff3741c60c3708428e7191f55ef786fddbf16c3440074804fac3dd58d7686306ffee4531618891
SSDEEP 192:sxRpR6Cv/fuss/h5hTBZuam3zoD8p4i/g6+WNIYGlbZkSGMIgViJ:sxRpPv/fusY5hPuamXv/5IyGs
TLSH
T1A432B8156E68A93B4CCBE21DFB65BF53D3F9103261942E58AAFC861C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 feb1d3586f26a4dccd6d0fa1b6e5decbd86105dab6ab1899adeeb676e8b464fa
MD5 5d46835134b75c2afef56bfacf3018d6
SHA1 cae33702455d532192866d60c48ed7efedc927f8
SHA512 8248b543dd916499b1959da6f50058d5a8f996bdc7eab62d3267620d5a87df90c117f16bb379182724f0d43d93c1f9d94c53b073a722b20e33527675a3af603b
SSDEEP 192:sxR6R6Cv/fusy/h5ETBZuam3zoD8p4i/g6+WNIYG0jkSGMIgD0YiJ:sxR6Pv/fusi5CPuamXv/5IXGg/
TLSH
T1BA42C815AA68A93B5CCBE20DBB55BF53D3F9103261902E58ABFC871C05EBADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6e113f4b7c9945b1009fa4ff7d82618b6a573e91f96b847a785215f2382e4fce
MD5 f13791edf021531ae560cfe85b2719d2
SHA1 899e74b4fa6fef60c94e82959b74dc2d1250affd
SHA512 b33982d461a58483e609308b0c80bbccfc8db1bab07721396b35148140d75b9e39db04003fd1d053254daabad0be1b6642067b81267e11fb8e929e0c4e61ded6
SSDEEP 192:sxR6R6Cv/fusy/h5hTBZuam3zoD8p4i/g6+WNIYGlbZkSGMIgD0CiJ:sxR6Pv/fusi5hPuamXv/5IyGgh
TLSH
T10A42B815AE68A93B4CCBE21DFB65BF53D3F9103261942E58AAFC861C04EB6DD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 2ee3616c8811e782b1c8c234b7ae497775007353db0d6caf4e4f994aa0635544
MD5 7677de9076ccda7c0c6fd14a059ae00d
SHA1 3836e0508758a11d5877bd0928e0ee3c9142cb11
SHA512 720f2c8206e510974a7e20412177c6c3014d65e470404fa39b48e211b2d05e60dae9c583ccfba363b37f281a1198b0b003b38bf794135bde8f00bb87fc5bf39e
SSDEEP 768:UQYiZ37pLuL78NWgv7fxJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaP5pNKpropp:UQYiZxE78NWgv7fxJu1jaNP5fKCL
TLSH
T1F2D2EB7B740CCB7E4F804A9DAC197A9F6DA802CB9698CD9047FE941C02C6BFB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a0306481f34cc0e6aa5f26ac49c640e2dc07901bad05c02d5977832c2b6dfe16
MD5 322838d57d4d126f8aa84f98392b63c6
SHA1 441f48bf0efb4e1ab767b1d8d2c58eba13851f83
SHA512 4de509456aed6efd8c5eb67898d9f4d6b3c536b94a543f2e8aca73d89f87a971ddf1bbae2082cd03060c5bacd4ac5f65f41a41079d3a6787c265510aae03bd69
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkfItpfd9xWJmsgRxK44g/DcJh8fnAHcMR2Ky7:Cm7KmgIIJ4tWGm7g09OGlkfItpfd9cJG
TLSH
T18B91784135BE02513C7E695C81B9C91FD7C2B4633118E86FBBA861A24FA7E025CFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 ea9320bd745bc22ca74c9b50e68a59cc42ec372fffe2f06e5b449a30b4b411fd
MD5 97588baac967c8f2a8802caf3b0ee9f5
SHA1 cf3a9d330ead3accdf16b67ce37a9ef9dd33495a
SHA512 91cc2c0b45be5cf9e54dd4e4feb4be35e7b71aac0a24104406da8ad3fc04cf2e4a5fb93e7f4190362e344ea2fd17a49a48e05aa90d670000924e03b49f251be8
SSDEEP 768:UD37dybI7Hucys6BRvi82oP4/z6himo6QjPi9P8:UD3CN3imOz6ImojjPP
TLSH
T148038D34E8A5DE67ACE793C5A745BB87AEE0127385CC5DD4D9E99F0C11C3A5E030B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0bd6eeb2e385334c733aada4a5b1c310ebc4b72a5632fa4ebc9f7e0809c869c6
MD5 3eca3b635aa5303ff9fd1f475a1b6258
SHA1 26c1c10953b2532d51efd7c34ccbfe90d7d6cbc2
SHA512 8793e7b1b27279d06192681daa5ca30c129745ea10ac8c9863bee6f9d5843c14e8ddc5ed10760e47d307d70266588699bc92ee1d7d743693c38b1b7f5eb71769
SSDEEP 768:ri3YYlYyH57Hucys6BRvi82oP4/z6himo6QjPi9P8:ri3jo3imOz6ImojjPP
TLSH
T118F2B030E8959D72ECFBD289B64677836EE4127394CC1E94D9ED9B0D16C3A5E031F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 59af6a9c4d27fd603751565f999db74833400f335d790358b967dfd46c07fa73
MD5 becbc95960f95c9ca214ed6a33c1ec89
SHA1 dce261d5e5ccfdf7b54f1caa3a36454bbe972143
SHA512 c0c27838948c5a295de637157f7be1160add81537f8777c3c2448468ebb541a7474bfd9921692af1a78dee5e459ee1aa7ffe4e452ed7c8a3c84a46100f5451fb
SSDEEP 768:xGrv+4UNbdS3Tp2lYyg7Hucys6BRvi82oP4/z6himo+t2bwn+h:xGbsbw3Ty3imOz6ImoW0w+
TLSH
T17003BF35E4589D73DCF78288B54ABB533FF4522345C91AD0E6DE5B0E128BA5E130B863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 68f511b529790eb4e1cef9295adaa64d63ed0a37c9f631a06e71c3e71c829db4
MD5 dff4698d4d5ca19ea1c083d0e4e3e1e8
SHA1 998b46e87913bf035de69dc7b2d702579492f0cd
SHA512 9d57a1d999d80039d0a376ee94ca1ca8500633559c17e9d9261e54928856832861487164a3029bc74644eca8864fc831c45c473640e846f4de16f9f85f9f16f1
SSDEEP 768:Nrv+4UNbdS34ylYyHS7Hucys6BRvi82oP4/z6himofQj2bwn+h:Nbsbw3Vn3imOz6ImoIj0w+
TLSH
T10C03BF35E458DD72ECE79188B14A7B937FF4127344C90A90E9DA5B0D1187A5F231F863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6192c21cc0c0e0309e1f97757c6f9db50abf1e87191078bb9f50a981bd6162b1
MD5 4eccd225299b3010ffd6bab462bc209b
SHA1 d9eff9d5138b0bbb67f93cda41e749760bd8df34
SHA512 bb13d7ffcaf49d9e8460a3f49c46b5a0386922bdcf401c5a1b412dea38597a3164bb8b1fdd600736ba73aba8995302f948124d5c72357bb1c433316646b2deec
SSDEEP 768:5i37YlYyH57Hucys6BRvi82oP4/z6himo6QjPi9P8:5i34o3imOz6ImojjPP
TLSH
T1E8F2B030E8959D72DCFBD289B64677836EE4127394CC1E94E9ED9B0D16C3A5E031F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2072348e-675e-4aed-8a15-3aa215900f57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2072348e-675e-4aed-8a15-3aa215900f57.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir864_919825254\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download