22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m4-eL.svg
Size 3KB
Sample260814-e3pb5acp8s
SHA256 22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a
MD5 ffd188160146fda63495f76c915854b8
SHA1 09601cd3c4bef976ca683b68265fc2a4e14c5611
SHA512 91a977f2fa58fe62436789064706aec5af63e3bde95527e33e5f26fad7233b1251035739ed0256f88470437cfb9aaac867f0b0f10b180955866570671e3eacc7
TLSH
T1F771388876F87EEBC7D802570D51D8B80B2F946BD422978DD3CB94D875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5812	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311552995989924"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{FC982B3A-7517-48E9-AE71-7F7D898AB9AA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
260	msedge.exe
260	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
996	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 996	4628	iexplore.exe	89
PID 996 wrote to memory of 2136	996	msedge.exe	90
PID 996 wrote to memory of 4448	996	msedge.exe	91
PID 996 wrote to memory of 5812	996	msedge.exe	93
PID 996 wrote to memory of 4448	996	msedge.exe	91
PID 996 wrote to memory of 4448	996	msedge.exe	91
PID 996 wrote to memory of 2120	996	msedge.exe	94
PID 996 wrote to memory of 2120	996	msedge.exe	94
PID 996 wrote to memory of 3404	996	msedge.exe	95
PID 996 wrote to memory of 3404	996	msedge.exe	95
PID 996 wrote to memory of 3404	996	msedge.exe	95
PID 996 wrote to memory of 1064	996	msedge.exe	96
PID 996 wrote to memory of 1064	996	msedge.exe	96
PID 996 wrote to memory of 1064	996	msedge.exe	96
PID 996 wrote to memory of 248	996	msedge.exe	97
PID 996 wrote to memory of 260	996	msedge.exe	98
PID 996 wrote to memory of 248	996	msedge.exe	97
PID 996 wrote to memory of 248	996	msedge.exe	97
PID 996 wrote to memory of 260	996	msedge.exe	98
PID 996 wrote to memory of 260	996	msedge.exe	98
PID 996 wrote to memory of 1880	996	msedge.exe	99
PID 996 wrote to memory of 1880	996	msedge.exe	99
PID 996 wrote to memory of 1256	996	msedge.exe	101
PID 996 wrote to memory of 580	996	msedge.exe	102
PID 996 wrote to memory of 1256	996	msedge.exe	101
PID 996 wrote to memory of 580	996	msedge.exe	102
PID 996 wrote to memory of 2548	996	msedge.exe	104
PID 996 wrote to memory of 1520	996	msedge.exe	105
PID 996 wrote to memory of 1520	996	msedge.exe	105
PID 996 wrote to memory of 4804	996	msedge.exe	106
PID 996 wrote to memory of 4804	996	msedge.exe	106
PID 996 wrote to memory of 804	996	msedge.exe	110
PID 996 wrote to memory of 4708	996	msedge.exe	111
PID 996 wrote to memory of 2564	996	msedge.exe	112
PID 996 wrote to memory of 4484	996	msedge.exe	113
PID 996 wrote to memory of 4484	996	msedge.exe	113
PID 996 wrote to memory of 260	996	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m4-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m4-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7fff1f77c188,0x7fff1f77c194,0x7fff1f77c1a0
    3⤵
    PID:2136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,3009600305944689015,761039867539025521,262144 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,8130434162966158765,3247818419693850346,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2188,i,5160714878000316761,5342844767559817606,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:13
    3⤵
    PID:2120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,18365109723228013979,3314060968540906186,2097152 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
    3⤵
    PID:3404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,17872438084434085950,12985148018239799399,2097152 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:1064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,2009958340041428485,11858262483256740498,2097152 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
    3⤵
    PID:248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,12747119798834472323,10332173008006016627,2097152 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:9
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,13683865944558574387,1176595541472840650,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:14
    3⤵
    PID:1880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,12172843115582355643,195409551930845123,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,17019758432910550545,17019141241606591573,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
    3⤵
    PID:580
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,11651952675877141235,13091425670129736989,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
    3⤵
    PID:4976
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,11651952675877141235,13091425670129736989,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
    3⤵
    PID:2548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,17298213362788572009,8442048154597263730,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6612,i,2150977346554022974,1737945640759994028,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
    3⤵
    PID:4804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,10906900471720279917,8858035597900728492,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
    3⤵
    PID:804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,2987266483049389332,5897840332477948688,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,2107005595493729336,9784786949749392173,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
    3⤵
    PID:2564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,15779694587538520290,13744278761810483645,524288 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:14
    3⤵
    PID:4484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6772,i,2236427276759851420,11267543087878223186,262144 --field-trial-handle=2760,i,9427961832637494686,6130794987738596963,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:260

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 578d7e35eca67a6bcb3bdb243cdc784a5d6c86808d1679973013f335f0665b48
MD5 40fd4db502ca0e830a29ed361c644546
SHA1 abf1987111953c4505fcc3a2ea73637bd626d873
SHA512 34a112f21a742d330d2485bd9716040531fb0b6c5a900a360aa0d97457764f9925f2f836eccf50535147aca1d4869fa95724beb36144d6cea8b84c4af65c5beb
TLSH
T1585162A38325CFF9D71585B371E1588C36F088B523876E12A04BAEB69966F1C72D1533
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596d27.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596d27.TMP
Size 3KB
SHA256 d13640cdc0d81e0fe77897b15c06a5c78b18512cf33fb896adb3095a741ae1f5
MD5 3dbb67558d88641906f15f5228a4b954
SHA1 cfa0276b8cc27b75836af0042ad6f1b0e69d416f
SHA512 58e81ecb6636955a348bf6b251efa43d9298dbf63b5e6fe20bae271de42d6057b0673edb176e2de2c8f48d7b9a0f1a8e928a04cbe9e145e349f0a5ed17ebef2b
TLSH
T1B85172A38325CFE9D71584B371E0588C36F484B523876E13A04BAEB69966F1C32D1133
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33b293c8-9121-4193-9499-ed6cc2c2a592.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\33b293c8-9121-4193-9499-ed6cc2c2a592.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 096904a9114ae4c817742ecbbc48fd0c48a57d14bd8dd0fca8d88543f72616e9
MD5 404c0e13ff82636019cdd57922919e7c
SHA1 13cd301b7562e9d0d2613082d7f3ab70d385ea70
SHA512 db5f9291bc7ab6bd8145e98d5f2aa605625e6aae42b14c01bbbd25f6a8cd720489c54979379001f301fb48918735044ce03480b6b4d914d213b71a0c52b3a0f4
TLSH
T1E2419EF383F4C56E8A0156F0AA146E2BCE2D0515432C7D5AC9E4AE2793E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cb9aedb892da646fc28c766ff461d1bd8aeed39a165ac85dc77c27992e5b0afc
MD5 5919b775ec3b1c4a1dff6f294d385aaf
SHA1 3384fab98eb5f68deeb5a6b876f564d035a8491a
SHA512 73f267d81c8ec57523fc38054bc1667e478c560c036de87cc0154050ec130434e97d3fcc51b32972d0d527b99a65414aca254b127b0cb574e79e42212b194bcf
SSDEEP 192:sxRnRbCF/fjswuchZ8OQzzoA8p4G/g6+WNIYEgm3PGIPIgVqJ:sxRnAF/fjswucvRQiD/5InFY
TLSH
T1633297166E68A93B4CCBE21DBB557F53D7F95032A1D41E48BAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b7b9594f142383bc4622a9559494cd0b8b774b57701c9f5ff136af60388bd81d
MD5 4d88e08bf915932024f8d4fe2e677876
SHA1 971adf0915a837e18c328a7092b5063269d570af
SHA512 21b402ac91eb9d57879b43e622c636760f88a3ff4f977dcccae7339a656d1816dfc2c261bd7d95139f83106c72f8e24afb8a52f2ef23e7d1661ea1f9a588c2d7
SSDEEP 192:sxR8RbCF/fjstuThZ8OQzzoA8p4G/g6+WNIYE7A3PGIPIgD5qJ:sxR8AF/fjstuTvRQiD/5IEF4
TLSH
T16F42B8166D68A93B5CC7E21DBB557F53D7F95072A0D01E48BAFC8A1C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0a6a12cfe8c9b813a3982c38303694f12d380a22bf05255a8b6256b7a3ba6758
MD5 d9bc817671d9ddbc566f50f0c12901bc
SHA1 1fb682ef0327ea9d6c60ba98b3ef68450f0ec252
SHA512 5edbb369bca27cb1d0132a3d0eb9f039e9eddd10076a51d185703eb553c1a0642430d5f01067e11abc1fde2d47d2df455b3e6de089528e90eff0c3c158189f16
SSDEEP 192:sxR8RbCF/fjstuchZ8OQzzoA8p4G/g6+WNIYEgm3PGIPIgDrqJ:sxR8AF/fjstucvRQiD/5InFW
TLSH
T14542A8166E68A93B4CCBE21DBB557F53D7F95032A1D01E48BAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 a140af080824d94067ede965b20ee67c44d75f8fbfa858869f4daed9de5bab63
MD5 7b6c6d5be9a4767db110d374c55e629c
SHA1 f05d6483a58b9bfffad620ce513afff565c96e7a
SHA512 cc535a3eb0e9c3d003d8872d2a80fbca7e01d02e2eab625ab0e867f1b9646c54eae6c82e25eb250eeec2af0460c716ef0d3abaa2bcec6ff13e064e3a41c45b68
SSDEEP 768:40Dk6DJQD8mF7pLuL7N0DbWgQ6DjfIQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OV8/:40Dk6DJQD8mTE7N0DbWgQ6DjfIQDFu1u
TLSH
T161D2DA7B640CCB7F4F804ADDAD197A9E6DA802CB96D8C98047FA891C02C77EB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e7ea4cd32908b1ae6048f68b70706ea659eec2aa8b47d8ce978ded09e0069e15
MD5 018978a9e72e77d6d99477dce2165d9a
SHA1 c626c184a09153926a14c68666594c00cdb4b41d
SHA512 1d637c78a0ff83f45939c8875e15bfa142632a9ec2753a30d3b24e1c1ac977625882c2633055f839bf9bde86a0dc641cbc890fa7ac005f571914e8f68c07141f
SSDEEP 96:KRgRkQiOCYWm7LgYYK49gKYcY4rKQ1HfItpfd9xWJmsgRxK44g/xcnvORgMQKViN:CgRkQiOCPm7UY89gK3Y4rKQ1HfItpfdc
TLSH
T140913090357A13403C7E7A0CC1AAD91A52D178B3344CA87B77AA21A60FE7E074CFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 de761a9bdbb6156594494d8c3cf63bd1cb4d50e962fe1de4a656765cfc6d9a19
MD5 0db38b267ea256db8ff71c44a77425d5
SHA1 521cfb518dd818950d6b51b8d6a3b505c1c9843a
SHA512 63c9fe25e15cd935a873333463905f421171e609258b7782e7303cae56c2404d9257538863a1a72ffc9716144701fe4fe5d964a0e2b658017b743062b2ce9427
SSDEEP 768:DVhu3RQpynZ/+l1treX6+qTko0u229a4vsTBPi9P8v:DVhu3nZvVTVKa4EPj
TLSH
T19F039D70E865DEA358E7D38173067647AFF421B3C6C81DC4D9DDAE09048756D1B0BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 720cdb16607abb39c610aa9e69083d77d4a2a1a7ac70ec80fac230d383e7eb82
MD5 e008f5d64ef5fb0c7019bf31211283fb
SHA1 78aeb5ad6841ee6f530efb806c15f725eb5edb43
SHA512 e81c4227a6d28b1d71ab291f2eabfb03a2fafe0d345c7ea12e932d5f591379abf56e8208656d76e31ce7f6e8aff2ebc4880be429113f23ad38661d2bdebd8825
SSDEEP 768:prv+4UNbdG30kNDTd+Z/+keX6+qTko0u229a4vsDJeVH1SdW:pbsbU3ievVTVKa4UEH1h
TLSH
T18803CF32E8698A778CE69784724775472FB92163C7C80B90D8ED6F4D025B5AC270BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 e56dd069d2cc83037ca2b01fbe1831bf704458038a545c5b5bf3d53f88757639
MD5 bec08a03d8ae3383ee44e85cd05d307f
SHA1 6470ae06d294ab5c0d7b381662cc7d99e155db34
SHA512 7addfd76e97582bb343f0b5b2537e8f705cbab3232d99e9a8ee98faa7a336b6b8db7974500e4be28b91ac44c1ce34bc9bf74621766b7ce394386fb2acef50a4c
SSDEEP 768:Irv+4UNbdG3gDTDTd+Z/+l1tYeX6+qTko0u229a4vsSBeVH1SdW:IbsbU3xEvVTVKa43EH1h
TLSH
T17E03CF31E4699E7348E6D784714776872F7921B3CAC40B80D8EEAB4D064B19C2B0FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0a6bb2e6f7796829653009cb24ddad30999efb4aaea6ef83b1386d4afcb55e25
MD5 a9f2085972df92709ed5c4fd45e3b160
SHA1 4ef36692ecb37a8f3460574db00d1cb9073f6a4b
SHA512 6020e6a430fa9ca53319a88f4d476766987aaae053732209360f99ba1539a2e05925bd1284c3941f33660cdf1e07ad4da827d4a52a6958ddf42714e6f543c359
SSDEEP 768:Tn3PQe5DTd+Z/+l1teeX6+qTko0u229a4vsTBPi9P8v:Tn3u8vVTVKa4EPj
TLSH
T10AF2BF70F8659DA348EAD780725736436FB921B3D6C41E44E9EDEB0D054726C2B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 87cb181350cb1c0a003cd9f5e8ceec812e48bde67bef8c1b979961682aa2585f
MD5 e12c16e29493e1bf861788dc9955de7c
SHA1 fe4e19611fbc92f5dae168c4bbcbd397d94be2dd
SHA512 126e15a0940f4221bd830ee316e7d231a6ab939fc315e2a4de5689880f56aa5c7c47230b75c751417e1a5190084b39827b1ac045121a46b95080a4de47858acf
SSDEEP 768:bTn3RQp5DTd+Z/+l1tneX6+qTko0u229a4vsTBPi9P8v:bTn37pvVTVKa4EPj
TLSH
T1AEF2CF70F8659DA348EAE784721736436FB921B3D6C41E44D9EDEB0D054766C2B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47d0a333-ccf5-476d-9739-3d230abc3228.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\47d0a333-ccf5-476d-9739-3d230abc3228.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir996_1295970158\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download