1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 09:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v13M-m7-eL.svg
Size 35KB
Sample260816-lkyamsvset
SHA256 1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388
MD5 bfd57f9c04b8bfc4e5434bae690e2203
SHA1 e7b3435c094295274f0af2f8397f5bb45ea184c1
SHA512 6758b4a12d192d174ef164e40e6e9404b61b978a9fb28913f7bf0882d22b005217c3f048344f661fc2e264b7060e3cbe73503e4b546688f5342e8ae0eff3613b
SSDEEP 384:chMBVd+SOAKzMf2qACRnJPB/nafePgDOx48FAIddEIRisu:c2VdxlZdIV
TLSH
T19EF2306537F43C9B8BCC03479D42FC6C46AF98B78098678D97D790E8A548368F7AC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
728	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313465782984559"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{715B40BF-4B68-44EA-BFED-D8AC825A6FD0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2512	msedge.exe
2512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2720	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1416 wrote to memory of 2720	1416	iexplore.exe	90
PID 2720 wrote to memory of 4328	2720	msedge.exe	91
PID 2720 wrote to memory of 272	2720	msedge.exe	92
PID 2720 wrote to memory of 728	2720	msedge.exe	93
PID 2720 wrote to memory of 272	2720	msedge.exe	92
PID 2720 wrote to memory of 272	2720	msedge.exe	92
PID 2720 wrote to memory of 1100	2720	msedge.exe	94
PID 2720 wrote to memory of 1100	2720	msedge.exe	94
PID 2720 wrote to memory of 5888	2720	msedge.exe	96
PID 2720 wrote to memory of 4548	2720	msedge.exe	97
PID 2720 wrote to memory of 5888	2720	msedge.exe	96
PID 2720 wrote to memory of 5888	2720	msedge.exe	96
PID 2720 wrote to memory of 4548	2720	msedge.exe	97
PID 2720 wrote to memory of 4548	2720	msedge.exe	97
PID 2720 wrote to memory of 1860	2720	msedge.exe	98
PID 2720 wrote to memory of 4708	2720	msedge.exe	99
PID 2720 wrote to memory of 1860	2720	msedge.exe	98
PID 2720 wrote to memory of 1860	2720	msedge.exe	98
PID 2720 wrote to memory of 4708	2720	msedge.exe	99
PID 2720 wrote to memory of 4708	2720	msedge.exe	99
PID 2720 wrote to memory of 5788	2720	msedge.exe	100
PID 2720 wrote to memory of 5788	2720	msedge.exe	100
PID 2720 wrote to memory of 2024	2720	msedge.exe	102
PID 2720 wrote to memory of 2024	2720	msedge.exe	102
PID 2720 wrote to memory of 1968	2720	msedge.exe	103
PID 2720 wrote to memory of 1968	2720	msedge.exe	103
PID 2720 wrote to memory of 2512	2720	msedge.exe	105
PID 2720 wrote to memory of 3376	2720	msedge.exe	106
PID 2720 wrote to memory of 3376	2720	msedge.exe	106
PID 2720 wrote to memory of 5280	2720	msedge.exe	109
PID 2720 wrote to memory of 5280	2720	msedge.exe	109
PID 2720 wrote to memory of 4216	2720	msedge.exe	111
PID 2720 wrote to memory of 2620	2720	msedge.exe	112
PID 2720 wrote to memory of 4888	2720	msedge.exe	113
PID 2720 wrote to memory of 5260	2720	msedge.exe	114
PID 2720 wrote to memory of 5260	2720	msedge.exe	114
PID 2720 wrote to memory of 2512	2720	msedge.exe	116

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v13M-m7-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v13M-m7-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x31c,0x7ff98a14c188,0x7ff98a14c194,0x7ff98a14c1a0
    3⤵
    PID:4328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,6030642198501188311,3133153247864891971,262144 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
    3⤵
    PID:272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,560423194657274413,6365211681795530563,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:11
    3⤵
    - System Time Discovery
    PID:728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,2451041826675877698,6765438035926384586,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:13
    3⤵
    PID:1100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,7644347217182853812,15023802787934620693,2097152 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,16710773511075412012,7200374090223213854,2097152 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,7556183761179833750,3357241402933873779,2097152 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:9
    3⤵
    PID:1860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,5137551763604448126,2768620153212766029,2097152 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,14096766144528959558,12578386133005835660,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:14
    3⤵
    PID:5788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,1249903063832601044,2197744999177355029,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
    3⤵
    PID:2024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,17673768351501439494,8679444681733833536,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,11327209317991986009,4046949499729002680,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,11327209317991986009,4046949499729002680,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
    3⤵
    PID:2512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,11226164862532159137,927912796877769080,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,13043056092289557834,16541626141624194290,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
    3⤵
    PID:5280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,3622814554147106622,431929967440551379,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:14
    3⤵
    PID:4216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,16040702429133680877,8803487534598294172,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
    3⤵
    PID:2620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,4654665796979256824,12852556803221825959,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
    3⤵
    PID:4888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,2627058513778841478,13098349157469316266,524288 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
    3⤵
    PID:5260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6564,i,6832846913306999411,5088508834190302884,262144 --field-trial-handle=2344,i,3762899919098906857,6880783051542801308,262144 --variations-seed-version --mojo-platform-channel-handle=944 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2512

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 73493bb3fd49439f1b99aec2dc9ae4318bdb847bdfcf594a5e67b8e29f81930c
MD5 5e9909064969cdf29f94b9f67548aa79
SHA1 96fe6e25abf4330d11ce1e476976ef8575614c9f
SHA512 5a324ba10e44b3712339164d242d414f3b9f9d362477f71a6c068ddb8f580ad0b50700f903598d2699e2db53cf2a982b863121cc8fecfdb748c7c2ee17da61a9
TLSH
T1256186760BB2869AD766877918EB9FB431F4F8464547AE0184645D3CCB07F2A5CE101B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e4d8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e4d8.TMP
Size 3KB
SHA256 590c55cc8dd940928bb1230a7d79ddf286697d663f41178f7591648e18a721e6
MD5 ca1fa24c4d9060eb54a53ad0d98ff8c3
SHA1 eab704b70ebbaa40cd89c7f05dc457408a729c7c
SHA512 c8a80d4ba36efc34af08461f4af3a469eb6fafc0c7a7e83711d2bfb8a508dd22f3679c85b70ecb414db782f1cdf64559da7e9946f4194f2a18c094c09d47a862
TLSH
T1CF6185760BB286DAD7A6873A58EB9FB831F4F8464407AE0184645D3CCB07F2A5CE101B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e9c2fc34744b8690055c4d4824db2066d264f74bc172e2edd20b0eb0588a07e8
MD5 acb9d51701f66b75518ea96dc2c2c9a9
SHA1 bb93739c0f9044bbea2683c70865f4f1849d3376
SHA512 cfcd4fe303dfe85a4bdfb1aa5eba23bccba1fc71df649f2ead370f03ff601f1a0afc4e2a307a6a52016ae43f3ebf27bae6ac299b145c855a32114e39a47c1885
TLSH
T10B41D1F383F4857E8A0196F0AA146E1FDE2D0515432C7C5AC9E09E2B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5511313636b9bfd04c78a80686c2c68a9932f5236a2ed16c3162aab79520cffc
MD5 f9bf8c6492979d922cd459d225fb2708
SHA1 3a12a119b081cd9dbc11abbae7bfb785384bb995
SHA512 9bd9474840b57fd782b81df71dc44cf71b399c85a42f76b6ce11302e2fdf64f98353f5d689e0f123a03ced4e9d6f7e3328b8c91739325bb30fd3085cfd1efa00
SSDEEP 192:sxRrR0yM/jK1Ml8wCa/fdshBcO1rrMZYizoA8p40/g6+WNIYE/LiKVGkSvIgVZJ:sxRrG8a/fdshuO1Xyq9/5IaLV
TLSH
T1D962FA15AA285D77CCDBD20DFA517F53D6F95533A2901E48AAFCCA1C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d49fd9fbe3a140661dd1412b6d3cf6d8201b132c921e00c7c4ed50528cbca731
MD5 4b7e894b4ffbd4d607fbd35a273b19c2
SHA1 ed44f24c431a62d061d5d5b47bf65920feb941fc
SHA512 1d4d4986fce8b2be28afb656a470787c070ea05d9ecb10f8a97922094e7cebf478ae9e7a6b74c0b6483e36eb5cad17d5ab824dce4bf8cefaeacd1d9d5164ff93
SSDEEP 192:sxRwR0yM/jK1Ml8wCa/fdszBcO1rrMZYizoA8p40/g6+WNIYE/LiKVGkSvIgD0ZJ:sxRwG8a/fdszuO1Xyq9/5IaL6
TLSH
T1BE62FA15AA245D77CCDBD20DFA517F53D6F85573A2901E48AAFCCA1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fe225aebb48833cf419a0c2c91691586b91bfc1f8dc22c9b4511acc8624d4823
MD5 b5c8b5e11ac0cbbe18790a3a21601517
SHA1 897ea6d4da480089d7915db9051e2317389c3d60
SHA512 c6bc3efd9c25c4aec3db2e17a753e1e6a31c30a480e08dab5746f63a904ed215f2c4294c430d7d23c4725ad11e332e3edca4a3547d839bbe62f6469eecdd9069
SSDEEP 192:sxRwR0yM/jK1Ml8UQlCa/fdszBcO1ErMZYizoA8pe0/g6+WNIYEfniKVGkSvIgDk:sxRwGq0a/fdszuO1wyqT/5IuLY
TLSH
T1D662E855AA245D77CCDBE60DF6517F53D2F85573A2901E08AAFCCA1C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 168e12cdd1745aa0badfb0836d86821910c17b0611122646369cbbcd46356957
MD5 00515ae6f51238306ce3e12afdb71f4e
SHA1 c2717197f54cf3e744b39217da11d5e441bdf4ad
SHA512 7b47320b7f209c2a1d30b31f51bd3c7870f0d1260556dc1e4f571ee760d996c9a1f62abe712389b92a828ddb8693e0d11d49bb22c4063b7b4b82842d1ab3f858
SSDEEP 768:0hiiRW7pLuL7jaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZTeOV8Lrowf6n:0hiiR2E7jaWgH7f3Qu1ja+TeI84we
TLSH
T1CBE2FC7B680CCB7E4F404EDCEC29BD9A6DE801CB56D88D9447EA880C03C67EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 077ae6b349a5e389e75ff53748882569d755f618c31eafaf918691f9bcffb524
MD5 c8f61b72c5ec8aace24d553fa0017e2f
SHA1 4fcf637e3afe984cd02e8945f3eea3f61b741ea9
SHA512 e36695f08c63a6dec66f4b1e541760e9007f3f5b43ca44d3460dd8cc5c97224c959824204a0d72614bd36d6205ce5a538f7fe60cf65ee5c1f7e3d4c49eef03fb
SSDEEP 768:WV39Kw1qGq3DfK48dHeByERRFzjK3YJAdPi9PftH:WV3w7GWy48dHSyw/TOPItH
TLSH
T1B6F2BFB0A8A96DB34CABE68976537797FEF00123D1C45B58D5CCEA0E04C619D0B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 a20527524b5deba15af19ff8822118538e47515d3360f24a4379b41568453e1c
MD5 eb705c777e463ff1c35ec9796126bcaa
SHA1 f6a63dc66006060f924467d9f4cebe8b62b97b1f
SHA512 2528ecb226cf0b7ab37c8cb909fbbf43638b4516d5158d6047a4300c0c484aab325e86e2cf5cf4dad00291e04377ad23a7ed9b044c8718bde8c5f827b8708ce4
SSDEEP 768:Orv+4UNbdG3fKw1qGI3DGK48dHeByERRFzjK3YJAdeVH1SCX:ObsbE3y7G4P48dHSyw/TOEH11
TLSH
T11913BE7068A8AE734CEB92897143B797BFF4016385C44B68D5C9AB4E458A0DD1B0FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6d6f0cb91d5c6e0e08a374001011d2f252b7e515d8e2cb8cef6e6c67588aa89e
MD5 532b9f8ba93f884d4180ab26f61187f7
SHA1 266b61d3cecefe834cae9f7ce4c2505ca776be7c
SHA512 f51031650a48c343c65650442eaa3c2e2c553b74dd98fc1f0af92e1a063205958d8a95065097ada0655b2ccddd6d2a0c76aa3a4304756fb9b7cc638622289a18
SSDEEP 768:lrv+4UNbdf3KqGJVDDK48dHeByERRFzjK3JJAdeVH1SCj:lbsbJ3LG/m48dHSyw/+OEH1Z
TLSH
T13A03BE7099A89E734CEB9289B183B797BFF4016385C54B64D4C9AF4E458A0DC1B0FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 65da95fd54642e46c6dce54947efb16c8344289ad628126391e24a3ba8c3ebc3
MD5 4254d7e9fd88ba4df0650a547a398016
SHA1 f39886546da1d4a3303e2ffa2a1935787a67eaa5
SHA512 089f9e3f408f7aa639387195f82175f30a6b8e44cf95e10e531bd11a4138e00a877060a7752814489ba0507086a9f95684fd5f7507618791d50e988f034a57fd
SSDEEP 768:z439Kw1qGq3d7CMK48dHeByERRFzjK3YJAdPi9PftH:z43w7G4048dHSyw/TOPItH
TLSH
T156F2BFB0A8A56DB34CABD6C976537387FEF0012391C55B58D5CCEA0E05871AD0B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 512610c56d26c11fb478f0c8cf27b28fe39177fcbce8e9ad973e4127d09ec72b
MD5 ccce05cdbf789d25d17b1209b0966c4f
SHA1 f79c11ad3f76ca89b30e9b12fe630022504fdea3
SHA512 4834c090942e009d5e4183abfb47a2783ca44ca9b95bf79dd76ca1955a7a57976a870066efc24627985ae302b67a57380daf69addc9a1cc873f69053a9cf168d
SSDEEP 768:Qrv+4UNbdf3fqGs/DxK48dHeByERRFzjK3YjeVH1SCj:QbsbJ3SGY448dHSyw/1EH1Z
TLSH
T10A03BE71A8A85E774CE792897683B657BFF4411382C41BA4C4DD6F4E828B4DC130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8e857df-cf62-4d5d-9c0a-019c8f946cab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f8e857df-cf62-4d5d-9c0a-019c8f946cab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2720_1799990734\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download