1d9b53e06f6dc11e0ed5e36f2b9db49ad3ec2e89d49c6a3145bac0b0f7d3bded

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 03:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v12L-m6-eH.svg
Size 31KB
Sample260817-ehhnvaek5s
SHA256 1d9b53e06f6dc11e0ed5e36f2b9db49ad3ec2e89d49c6a3145bac0b0f7d3bded
MD5 fbe7ff2e86a8b54be74f27046684d50f
SHA1 b531c269cd2db0071d54af48acfcf7e7df75f30c
SHA512 1e387530138ff05234d0aac670fa1eeabdf79f57daa7d565eaadb6241cf5638f60fbc841c7bc635de7e0986733668e33b12bdf46261311276b0267c8b77cb8ed
SSDEEP 384:ccozyutS3CQImOyA5hE2hgo910mF6ezh5O+uSHS7Ix:ccoLxn
TLSH
T151E22D6537F43C978BD803478D42FC6C469FA8B78498678D9BC790E8A94C368F76C5A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3336	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314125922862644"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{5992CEDF-B083-429A-A464-D1464789CC06}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5984	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 5984	2300	iexplore.exe	89
PID 5984 wrote to memory of 1812	5984	msedge.exe	90
PID 5984 wrote to memory of 304	5984	msedge.exe	91
PID 5984 wrote to memory of 3336	5984	msedge.exe	92
PID 5984 wrote to memory of 304	5984	msedge.exe	91
PID 5984 wrote to memory of 304	5984	msedge.exe	91
PID 5984 wrote to memory of 2248	5984	msedge.exe	93
PID 5984 wrote to memory of 2248	5984	msedge.exe	93
PID 5984 wrote to memory of 3252	5984	msedge.exe	94
PID 5984 wrote to memory of 3252	5984	msedge.exe	94
PID 5984 wrote to memory of 3252	5984	msedge.exe	94
PID 5984 wrote to memory of 2860	5984	msedge.exe	95
PID 5984 wrote to memory of 2860	5984	msedge.exe	95
PID 5984 wrote to memory of 2860	5984	msedge.exe	95
PID 5984 wrote to memory of 3428	5984	msedge.exe	97
PID 5984 wrote to memory of 5160	5984	msedge.exe	98
PID 5984 wrote to memory of 3428	5984	msedge.exe	97
PID 5984 wrote to memory of 3428	5984	msedge.exe	97
PID 5984 wrote to memory of 5160	5984	msedge.exe	98
PID 5984 wrote to memory of 5160	5984	msedge.exe	98
PID 5984 wrote to memory of 4284	5984	msedge.exe	101
PID 5984 wrote to memory of 4284	5984	msedge.exe	101
PID 5984 wrote to memory of 4220	5984	msedge.exe	102
PID 5984 wrote to memory of 4220	5984	msedge.exe	102
PID 5984 wrote to memory of 4132	5984	msedge.exe	103
PID 5984 wrote to memory of 4132	5984	msedge.exe	103
PID 5984 wrote to memory of 1376	5984	msedge.exe	105
PID 5984 wrote to memory of 5148	5984	msedge.exe	108
PID 5984 wrote to memory of 5148	5984	msedge.exe	108
PID 5984 wrote to memory of 5816	5984	msedge.exe	109
PID 5984 wrote to memory of 5816	5984	msedge.exe	109
PID 5984 wrote to memory of 952	5984	msedge.exe	111
PID 5984 wrote to memory of 1596	5984	msedge.exe	112
PID 5984 wrote to memory of 3376	5984	msedge.exe	113
PID 5984 wrote to memory of 4824	5984	msedge.exe	114
PID 5984 wrote to memory of 4824	5984	msedge.exe	114
PID 5984 wrote to memory of 4576	5984	msedge.exe	118

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v12L-m6-eH.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v12L-m6-eH.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x394,0x7ff860c4c188,0x7ff860c4c194,0x7ff860c4c1a0
    3⤵
    PID:1812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,11104452879899568943,2006186826235965186,262144 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
    3⤵
    PID:304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,1976307976116461313,6146233963286694068,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,181212017155103055,11090171208885477006,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:13
    3⤵
    PID:2248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,13992665555186140896,7182426679016614388,2097152 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
    3⤵
    PID:3252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,13040078433834221776,16178192551895087764,2097152 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:2860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,9245041197590090699,977445114606463693,2097152 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,1988903811613255367,14694933410755053511,2097152 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:9
    3⤵
    PID:5160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,13600886601607043506,14880467845198164867,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:14
    3⤵
    PID:4284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,17357237983775022067,8799874288218971921,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:4220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,10208814863500040329,16911183221269483995,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
    3⤵
    PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,1738860568912580736,17637435407800019848,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:804
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,1738860568912580736,17637435407800019848,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:1376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,15931941722232026402,9504581190499379883,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
    3⤵
    PID:5148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,515650730023763553,17112144951432624934,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
    3⤵
    PID:5816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,5020580261708949324,9325544761737900628,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
    3⤵
    PID:952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,5776607561182311193,3323501141109745849,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
    3⤵
    PID:1596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,282485656011218969,5711614100990484973,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,14049221761008270178,2060932942729773437,524288 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
    3⤵
    PID:4824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=872,i,14164992845360465690,8859770610593153362,262144 --field-trial-handle=2312,i,797682071646953063,6546740444306307645,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 835ba213e650efe6545655a62252a668c5dc1d73d09174814ac5b5e0a7d7524c
MD5 4f65ab2502a753874a9576ecd3577fa9
SHA1 f7735d1eb13c046a9c440a8958190b42a86a6976
SHA512 737928bc585e38e388ca6d4585f9c3a97e28907e301b10079a1d2a44716a36188df568f81b63f0570de5c01833729f5b32b9df28db15b08b101d5aaa14ac0bed
TLSH
T1C5611CED733EAFD3FF604CB29C90A49A32E48645062BAE82A0501DF0480EF2465DB527
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b164.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b164.TMP
Size 3KB
SHA256 e9f861568e6c27c51f267645a93b61c293e7edb61b4bbf6e0c0434c8b7ff257c
MD5 4adda0b386f5bc38bbed19ac95ef86f1
SHA1 48cf61cdbff07b248595e983fce6eb7e0bec20a6
SHA512 f542520ac5fc08d5b8167fc6da3ef78a9ce5c774b1b61496547a0bca6b481bdc064b61da4d927aa06a230ece357023fd977013dd309352a7b9aa530639b5836b
TLSH
T1DD612CED373EAFC3FF604CB29C90A49A31E58645062BAE83A0501DF0480EF2561DB127
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e8ce9943809f7c6bd458b0fcaa9348a1a250d8f711ebb4ad353779c4bb1191ca
MD5 f25f75b0f8a376f2e740446657d3e239
SHA1 b298807afb8e184d61fd16d33daaed91bcc48cda
SHA512 95940b2edb0e784f24b20904a02d7a6b30e265f556aab19b3440370c1bbff4a086939528967b2ebacf03e1e7f3f8c7b9d051a972f0cf02ad9abecac2ee21ccad
TLSH
T1D2418BF783F8857E8A0196F0AA146E1FCF2D0525432C7D5AC9E4AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bb208275-5a56-48e5-a47c-1b457b0b57f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb208275-5a56-48e5-a47c-1b457b0b57f3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3f6190850e7306eabf39609214d506b83112e53931063d0f92234090efc32ae9
MD5 c8e0455d1ca2c56fcc16bfbe01ea477f
SHA1 255c189559578e1b2c934d019dc1b5fed4060554
SHA512 1c5f2de343439ee2569f61df49d458aa14dac2e834fe32064b3dd2b8e80712803fd5fc6eea731c57537f26d1b5e547418071f3b201c099913b0ee98a79bf95a9
SSDEEP 192:sxRmRGCq6/frsxGprQ5wzoA8p4o/g6+WNIYn8VdhEGzIgDq9J:sxRm3h/frsxGYt/5ITlLY
TLSH
T1A142B6156D28AD3B8CCBE219FB55BF53D2F9513261D51E48AAFC9A1C00EB6CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 03ffed57c8d7dffe11698dbbc6344a43f84ee1dfb1ce008233454ab2d79ad03e
MD5 dc9542acfe643e67f20ca6210e14d97c
SHA1 1a44166929f5eb17dc8e569d1077bffb32ee8589
SHA512 7749a9dc39182734a9beb9e5c7d56369642b0da0064564da944dafc29d7a82dc538428b56693c342bf7d9c8f1942833d49280a97b8bbb21e59d5f4dcccb9348a
SSDEEP 192:sxRmRGCq6/frsxfprQ5wzoA8p4o/g6+WNIYn8UNhEGzIgDI9J:sxRm3h/frsxfYt/5IT2La
TLSH
T19142B6156E28B93B4CCBE219FB55BF53D2F95032A1D51E48AAFC9A1C04EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8333be2624ed8d2db5026de7be2cd020212fbc5567e7ffa6ad91aa8e76a1b004
MD5 fa868d527885323fd4f3182ee1942ce8
SHA1 272161c876e9b53022a4ff720d23cd62bc1cb3b4
SHA512 786e9fa73e2795308ead952df94930137858767a6360098d3ef0e001c1f672e11143061f3992ce7ede89fc1d8cb69ac51ab6e2c08d90cd367f5bdaf1aedb2881
SSDEEP 192:sxRmRGCq6/frsxGXZr6AzoA8p4o/g6+WNIYn8VdhEGzIgDq9J:sxRm3h/frsxGpr0t/5ITlLY
TLSH
T14D42D7156E28A93B4CCBE21DFB55BF53D2F8503260D51E48AAFC9A1C04EBADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 213ce3135b1faa222b7d29fb5c0d92eb81289f46d3b52bdd8eaff732775aec0b
MD5 f87e9a8644ebaee4a94d446db401eea4
SHA1 d1360cc16f30878ed558d27ce10addcea982dc6f
SHA512 fdb70d211d5417b9b7a571e8243bd46d94189f7b6c3bc91adbb5630e903dcee6ab26b5935897ceb749707129caf6ecb48469cf5e7c4df5d57299cae93dd40bf1
SSDEEP 192:sxRBRGCq6/frsOfprQ5wzoA8p4o/g6+WNIYn8UNhEGzIgV9J:sxRB3h/frsOfYt/5IT2LJ
TLSH
T11432C7156E28B83B4CCBE21DFB55BF53D2F95132A1D41E48AAFC9A1C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9227aa410552ecb2a411c9d9f1f04b0e4f865f25683bee5b4ab31c83d591df7d
MD5 82865357bfbf157fc8b0e09a6c63be0e
SHA1 51d1f1c78202ca2be67a37dacb09720f5f4e525b
SHA512 1b613757d17fe8280fb8c80fb13e0efdd2151b1ff52c15e86659777715e7c3a2a6ab7dacfd4f8bfbcc28fcf4087db2d032edc1801086c4c3b36f83ffdeb67de3
SSDEEP 768:wb8dTg7pLuL7r6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVUu46frohrm5A:wb8dTsE7r6Wgouf6Mu1jatV6M0C
TLSH
T1C1C2DA7B740CCB7E4F800ADDE819BE9F6DA802CB5AD8CD4447FE951C02C6BEA51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a4c0e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a4c0e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 06fba437a580714a37aaad3acc9306020d248d852be5dfc2f6e6c791c2d56943
MD5 17375ea2f8984150959f979b929e2951
SHA1 8829376429bb8169232d9a66f0b117247667f197
SHA512 262e4786626f104d69ac8a2db35479dd93ddb247e06d616310ab9c5418798c28f21cece35d3341907339aef423d66bb24be78a48d51913381299d0956b4f7ee3
SSDEEP 768:0FQS3bwghtSZQ5O0UiAXNzc4ReyIsPIPi9PW4r:XS3jeXtc44bsQPO
TLSH
T152038D76D864DA67BCFA6B82F7457683AEF41167C1C86DD8DAD99E0C04831DE070BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 375523c86e4ec41effec935b54d259956f057e83009bb2de8b5ed43f75af77a0
MD5 2ea903dd838a2dabc2ab806950932821
SHA1 5adc62b5ca3e681f8bc3d6c42ecee1c46f1174ec
SHA512 df27af49c3e86aaf499424fa8b1873366d5f9dd36c36669111e3715d5ce5a079f6a705d4c06ecbcc80dc29a46d9c56458bb4bf38061105aee0c8dc544b6bc732
SSDEEP 768:6rv+4UNbds3iBDZIO0UgNzc4ReyIsXyeVH1S5D:6bsbS33tc44bsiEH1Y
TLSH
T1E603CE32A8789A73ACF66686B54776533EF8512782D81ED4C4DE2F0C4A4B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0b7dd1183b853dbfe97096fc44daa12448dd36be7488a18be42d5a43a26954e5
MD5 77f93123524d0e020700bc1f1d96c9a8
SHA1 86295f299136b0c70c63d6074fec6ac5925992be
SHA512 d848d3a25cd3f0d74ba5def6c1711fd5bcb86cdec16ebbbf55f6c257e9060602257ea96465b0f3230fdcde6fe3c2e5a9b9455dfd064549b1928eaa66a9652ed5
SSDEEP 768:Zt3NtbDZIO0UiAPNzc4ReyIsPIPi9PW4r:Zt3NPPtc44bsQPO
TLSH
T14BF2BE71A8289D63ACFAB742B6467683BEF81277D1C42E98D5DD9F0C084329D171B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fb1bc854de134b8bbed01c201989301dbc5f6b856255cb3d13191d72584fbf0b
MD5 33676c5f526506f950b8c2ed93c33a5a
SHA1 3e8cb62d1c34b92ffcc52433a817ca735d6ede80
SHA512 fcc382bad672c310c3f4ac63e88359675f1ec08cddf090fff9c025c51042c2e9686fc422d6cc0bc6e592353e78de1846e07df14a27dbcc14af6da0ef326fdbe0
SSDEEP 768:xt3yVbDZIO0UiAfNzc4ReyIsPIPi9PW4r:xt3yXftc44bsQPO
TLSH
T1FDF2BE71A8389D63ACFAB742B6467683BEF81277D1C42E98D5DD9F0C084329D071B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 bbb8332b9c6813ea479cbb175118593b4ee12086bb3519bd1120772424eb74bb
MD5 12ff959a03d1d343dad8ed77e37ff52f
SHA1 bf2e718653f1d047e3d33d0bfdb04f2165f3a851
SHA512 e88d584cd0ebc113bfe02178ada384622cd761b2527a536c270184a279e0170316baf5a64da1aab5ffdf3e61db7fca3b43c134c005bad2257f99300678e465fd
SSDEEP 768:/rv+4UNbds3xRDZIO0UiAYNzc4ReyIs2IeVH1S5D:/bsbS3JYtc44bsbEH1Y
TLSH
T1DC03BE32A838DE33ACEA6746B147B6933EF8216B81851ED4C4DA5F0C49471DD131F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9320aa78-1262-4d4c-8cf1-1bbdc20dd0f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9320aa78-1262-4d4c-8cf1-1bbdc20dd0f5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5984_1281104706\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download