61b14c1baaf839f23597223d597e5d03ea484af80904088a830defaef0973c7e

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 02:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v17Q-m3-eL.svg
Size 51KB
Sample260815-cf6lsadc76
SHA256 61b14c1baaf839f23597223d597e5d03ea484af80904088a830defaef0973c7e
MD5 fc198985be568c9448dca602f675d2a3
SHA1 acbab1f92a29f89b0c5551fa1c0437ac00739166
SHA512 cae28fd45619470e736d8cbf3586ace8188529cef1810bc1ba52167d16598313952df7669561a535411372356128239006cc9e323d1d9dc0220c1398d77395e4
SSDEEP 384:cmB+3n8fSEBJc1K04m3VQvtvOXmcInOD4WhU62qlOcM933g2G44AJ8pnoSfWcfGY:cNelTKpozCfF
TLSH
T1283380A637F47C9B8BCC034F5D02EC6C45AF94B78498668C9BD790E8A548368F7EC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3116	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312329406393206"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{2942D736-ADFC-407A-BB3C-CF6DABCCA578}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5508	msedge.exe
5508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe
1960	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1960	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 1960	3208	iexplore.exe	89
PID 1960 wrote to memory of 2712	1960	msedge.exe	90
PID 1960 wrote to memory of 2964	1960	msedge.exe	91
PID 1960 wrote to memory of 3116	1960	msedge.exe	92
PID 1960 wrote to memory of 2964	1960	msedge.exe	91
PID 1960 wrote to memory of 2964	1960	msedge.exe	91
PID 1960 wrote to memory of 3412	1960	msedge.exe	93
PID 1960 wrote to memory of 3412	1960	msedge.exe	93
PID 1960 wrote to memory of 1476	1960	msedge.exe	95
PID 1960 wrote to memory of 1476	1960	msedge.exe	95
PID 1960 wrote to memory of 1476	1960	msedge.exe	95
PID 1960 wrote to memory of 2052	1960	msedge.exe	96
PID 1960 wrote to memory of 2052	1960	msedge.exe	96
PID 1960 wrote to memory of 2052	1960	msedge.exe	96
PID 1960 wrote to memory of 4208	1960	msedge.exe	97
PID 1960 wrote to memory of 3876	1960	msedge.exe	98
PID 1960 wrote to memory of 4208	1960	msedge.exe	97
PID 1960 wrote to memory of 4208	1960	msedge.exe	97
PID 1960 wrote to memory of 3876	1960	msedge.exe	98
PID 1960 wrote to memory of 3876	1960	msedge.exe	98
PID 1960 wrote to memory of 4212	1960	msedge.exe	99
PID 1960 wrote to memory of 4212	1960	msedge.exe	99
PID 1960 wrote to memory of 4972	1960	msedge.exe	101
PID 1960 wrote to memory of 4972	1960	msedge.exe	101
PID 1960 wrote to memory of 4660	1960	msedge.exe	102
PID 1960 wrote to memory of 4660	1960	msedge.exe	102
PID 1960 wrote to memory of 4980	1960	msedge.exe	104
PID 1960 wrote to memory of 3840	1960	msedge.exe	105
PID 1960 wrote to memory of 3840	1960	msedge.exe	105
PID 1960 wrote to memory of 1212	1960	msedge.exe	108
PID 1960 wrote to memory of 1212	1960	msedge.exe	108
PID 1960 wrote to memory of 1840	1960	msedge.exe	110
PID 1960 wrote to memory of 5516	1960	msedge.exe	111
PID 1960 wrote to memory of 5804	1960	msedge.exe	112
PID 1960 wrote to memory of 3320	1960	msedge.exe	113
PID 1960 wrote to memory of 3320	1960	msedge.exe	113
PID 1960 wrote to memory of 5508	1960	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v17Q-m3-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v17Q-m3-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x320,0x7ffba4dfc188,0x7ffba4dfc194,0x7ffba4dfc1a0
    3⤵
    PID:2712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,14380168874618672446,5333621754247330071,262144 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
    3⤵
    PID:2964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,9371101016602551374,16417733457771882052,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,13289925292192588512,14200902589785509452,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:13
    3⤵
    PID:3412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3536,i,3034082351112225296,7855463207834441658,2097152 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
    3⤵
    PID:1476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,6100950223675976842,7522674347555203013,2097152 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:2052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,2179500404618669482,8355775491942174806,2097152 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
    3⤵
    PID:4208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,1262860441153343193,9335188916299421908,2097152 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
    3⤵
    PID:3876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3368,i,8426933486577757661,1058035501214005216,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
    3⤵
    PID:4212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,16259862317052838316,7701497466090682631,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:14
    3⤵
    PID:4972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,15604313526851108783,17276049042615873964,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:4660
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,5401447626713157504,1355580150448148041,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:3908
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,5401447626713157504,1355580150448148041,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:4980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,17296428457310524008,13193381705912271986,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
    3⤵
    PID:3840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,12282002666068617155,1179197861486526293,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
    3⤵
    PID:1212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,13451013026454206931,13463984245339108344,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,2811683580027563132,5298812798405272931,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,11682689469274945428,2530958032447120101,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
    3⤵
    PID:5804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,3723931016317690228,15728007032143012729,524288 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
    3⤵
    PID:3320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4300,i,13607911067963403350,16349937881586093467,262144 --field-trial-handle=2524,i,4723367374147187547,12315218067922874673,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7f8643dbb46ddd2973634173febb4e572f5a5b584d575fa7c4a0c91a42fdab9d
MD5 0f2e89532d75be99e658bc5c2a16920b
SHA1 ae54892c267c6fc72a0754f693150dacd34e49d7
SHA512 542766b851a56687d7eb5309b3159b20a278eca06e03bf7dedaeac59ff0f9e3fc8919025616ff47a9076845385a139b3a1847066c7111125d33df75daac0fc1f
TLSH
T190619258232219F1D33885B2D0FE639CF3F49B58C2C72E609190EE701886FD5AAD0573
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5990ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5990ec.TMP
Size 3KB
SHA256 4a27808c7aa91ab8e83a887dc58a611c191b17eb121333d5e513d5accae15337
MD5 e930e0d0a6103e852e86a426796aeb5c
SHA1 a7f0eaa6c7127ee7ab424c93211e1ca5c2b3b879
SHA512 4fc5a7646fb01d323f4ee3f57fee7c018023199d244b7d70db6c02d2b531d91fd744b18383192e3a901026f4842a63e59d4b8fd7505bb50fbae8d94e4d2d71c5
TLSH
T18161A368131219F1D33885B2D0FE639CF3F49B58C2C72E609190ED701886FD5AAD0573
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c143321df4ebfac9961ead728391d310da8a823d53968172ec2fa25677387ca8
MD5 378b279ad85d26d370759dee448c51a5
SHA1 ed1de9267eaee52d38f725ac18e301ac9e8f8fcd
SHA512 40989ab2f88bdf3403bd2211fc5739c4f001a9aff4629259a937944c0932b6ef4cbd9deffceb1dc95a2149bc6214ebf02e86bcf3b751a2a39ba99358dfa60000
TLSH
T19E41BFF383F4856E8A0196F0AA146F2BCE1D0515432C7D5A89E0AE2B93F3471E141AAF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6cfde60b9b606a5031e27fc9ad0979cc1361b3bf873bbe7747ce32a062751e91
MD5 f7b72cfc76f9149b3550bd87d2eacbc4
SHA1 209f13d90bfb15f9e93f8dfb88188df630a4958a
SHA512 1a8e5b441057d46a7e44113e3f35b0b388ffb611015f399e58d962b33b8672197c5b4a0bc9c9fae48ac68219a65035854a422a90a093dba897bd96fe60627baf
SSDEEP 192:sxRboRfCNE/fq1sGD7Z0U3yPEMzoA8p4ify/g6+WNIYZFLK0cV+GwIgVIJ:sxRboINE/fq1sGD1+PE9dfy/5ISoVmu
TLSH
T12A32A8166E28693B8CC7E21DBB697F53E7F95072A0905E44EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9185a6567c82fe3cba55a5a577d706d96819173cbc1f0b0991939b816a2d03b3
MD5 5659367b6ef99d5aeb846fabf749a37d
SHA1 0343492e21914013d01b2bda661d6f92bb48f58b
SHA512 eb1ba3ce11b912ce055c5f427385a6fcd6cf4898bd72665b88023ae4a64eb2131a3e023287a40ba27ff55ce4398b38e062d192f3a13f82d4cef7c3e7ad2766e4
SSDEEP 192:sxRcoRfCNE/fq1s36s7Z0U3yPEMzoA8p4ify/g6+WNIYZFLAKcV+GwIgDWIJ:sxRcoINE/fq1s36s1+PE9dfy/5ISyVmv
TLSH
T1A942B716A968693B9CC7E20DBB59BF53E7F95072A0911E44AAFCC71C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d36783c0f8340e1d3b2368e9583b8b9672adf686f7bbc65aaaf5e309ed55b642
MD5 223502071487e5c28d83911c19371fd5
SHA1 047baad840d5775efd440dd51fb90b3e4a56d45a
SHA512 c81295e155e87a1b47a89b63e7fdeb27b258e62e4eb7e867fac4e07860b9176ac72ae98a5a9b5062272f71f8ef4d2d18fc20eb1064157475cd2af1891a4c626a
SSDEEP 192:sxRcoRfCNE/fq1s36D7Z0U3yPEMzoA8p4ify/g6+WNIYZFLK0cV+GwIgD0IJ:sxRcoINE/fq1s36D1+PE9dfy/5ISoVm5
TLSH
T10742B716AE64693B8CC7E21DBB59BF53E7F95072A0901E44EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 075c7a19ca4c81d1fdaf8c94de158229b1a689ec5459d135326912ba4e7b9c39
MD5 65478e7060825e3d434bd04c255a4dc1
SHA1 51f55bddc1d82cc18a3efa7d1021998ccfd4fc63
SHA512 3ca289571c0f333bb7dcf83238e4e55f0622810411ae1def1ea49eac0ed55f1aeabf9f1c1196f5821ea6c6959746805ab9dd4f22f470a23154586496073c727c
SSDEEP 768:K80Ez67pLuL7FwWgNhfVN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVacowLW5roLW9jv:K80EzSE7FwWgNhfVNu1jahcogWyLWRBZ
TLSH
T1FED2D97B740DCB7E4F804ADDAC197E9B6DA802CB96D8C98047FE851C02C6BEB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22ed557a-b73a-4574-a86e-5de8e3eb3b2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\22ed557a-b73a-4574-a86e-5de8e3eb3b2f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1dd1b82e4d2a680f60e23fa8fb578af2ecef4311394438a73fac9aff8da5fa5e
MD5 20e114f348e6154bdd358a8491e28b4f
SHA1 2e241be7a0f62e69576675748b4cff22c8094a19
SHA512 26d1ecc086d2ed027fd957e38562f64d82cf8a6fdf8d2b307f480783a60b9694b20e3e37b73fbbb135d519327afec84365ff05202ee8203fd3cc3ac9c2814d04
SSDEEP 768:2FQo3gwgs9E1OUvNt1UXX4fouOToPvB2thtA9VAgjPi9Pt:9o3nHsnnwthtt+Pi
TLSH
T1A6038D72E898CD67ECEAD7D5B30972829EF041A3C5D85EC4EED89E1D008759E070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e1d53658664683c90d65c075708a7fb39b1d0d29953f020cdb88cfdc77ed8dff
MD5 d8be0314036003c479122a3df025ca0c
SHA1 7239bbaa3fbc0468a5ee497f241ced2a85ca8b1e
SHA512 77baf0cd6a550112d80e180891251c3b1e441017b15add11405aeacbac0873fe793b6b02840539861a42be70459d4cc895ba654ba2ca625a7e4c15e43a9352df
SSDEEP 768:grv+4UNbdH3wk+LeSFOUvNthX4fouOToPvB2thtA9VAwJeVH1SlX:gbsbh3csnnwthtt4EH1Y
TLSH
T1E603CF32A8A88A33DCE6D398320B71533FF4915396900BC49EDD1B4E069B9DE130BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0966f41f2ffc5ddf90eca4ae0734e9b72573234f042ede6e7f0b5e63f4c6e611
MD5 3da203bed70bce460e7f6eb41319375b
SHA1 463701fa028aeee4aeda41a9bfa09f3f832b21d5
SHA512 5605075248c833b1e413d8cf03e9b5ec8858bf0d1b32eac82ee77d0b4cc865fb7b35385de71b0a63f9e54ff057641d7c2ad6c88104d25c5990d8a356d05d0527
SSDEEP 768:j2338+LeSFOUvNt1UXX4fouOToPvB2thtA9VAgjPi9Pt:j23kHsnnwthtt+Pi
TLSH
T172F2AF71A8A98C63DCE9E394731A33826FF45163A4D01FC4AEED971D058769E0B0BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1a1d37f94b332267e44f656399a5506663966b62f095e3569d9d4944598acf6d
MD5 2c85d504947a0fee04fa082814767698
SHA1 c4bdfc0864cc7accf0350ac72a22c5b0f935554d
SHA512 3b358822d867da0e8618acadee771fe7af19470c66a3c4286bd019fe6be4eec96fbf859dcbba55b29d3df8c0d68563aec2999d36f995bfdf28db2ff10bed04b7
SSDEEP 768:L23h8+LeSFOUvNt1UTX4fouOToPvB2thtA9VAgjPi9Pt:L23qTsnnwthtt+Pi
TLSH
T1CFF2AF71A8999C63DCE9E294731A33826FF45163A4D01FC8AEEC971D058769E070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6d147e22df45cda8dbd269df3e51a27daa5c9d77d8820c5d575b8f4b20b188e9
MD5 cb14125c9873bc0a5b8b1e301257f7fd
SHA1 3f8d5c748a8930c3697d0e05c9b5cbd817ab9549
SHA512 0af4eeb54222c67af0df395ab3c24daf93345ddaff29e04c0a9b9434d916b1217b64205c4f9c6fad40cde3577e465f60709cf397a3243f985eb94c4e7443a165
SSDEEP 768:Lrv+4UNbdH31K+LeSFOUvNt1UVX4fouOToPvB2thtA9VABjeVH1SlX:Lbsbh3AFsnnwthttVEH1Y
TLSH
T1D003BE32A4AC8D33DDE6E298710B72932FF451A398800FC4DED95B5D064BA9E170FD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

351c951b-c679-488a-9dd5-b4224bc9c2e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\351c951b-c679-488a-9dd5-b4224bc9c2e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1960_556778506\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download