d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v10J-m4-eM.svg
Size 24KB
Sample260818-2ety2aal3x
SHA256 d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc
MD5 8c786d4da80ac1948a137a727a12fd7e
SHA1 0fb0844fb479811339f7104eb281a91b930ca91d
SHA512 838d9d0ec608d1e47dd3722b8ccd401e03eb334982cd433a7f896e66b62a9e69b9d2d3e8209914dd8563af8734ee368742a979b7e861efd480707c961c193a0e
SSDEEP 384:c5veJtU7WSADG+2tM8LSB7XXZwuw5wE1/7PRP3uDCr:c5vQjqZmDK
TLSH
T11FB21F6437F87C978BD803479D02FC68461FA877C4A8678D93D7D4E8A988368FB6C560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4596	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315658194400061"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{D518FAAD-6EAF-4858-B7F7-638540E2EB73}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4672	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5964 wrote to memory of 4672	5964	iexplore.exe	89
PID 4672 wrote to memory of 5188	4672	msedge.exe	90
PID 4672 wrote to memory of 4596	4672	msedge.exe	91
PID 4672 wrote to memory of 3424	4672	msedge.exe	92
PID 4672 wrote to memory of 3424	4672	msedge.exe	92
PID 4672 wrote to memory of 3424	4672	msedge.exe	92
PID 4672 wrote to memory of 5580	4672	msedge.exe	93
PID 4672 wrote to memory of 5580	4672	msedge.exe	93
PID 4672 wrote to memory of 260	4672	msedge.exe	95
PID 4672 wrote to memory of 248	4672	msedge.exe	94
PID 4672 wrote to memory of 260	4672	msedge.exe	95
PID 4672 wrote to memory of 260	4672	msedge.exe	95
PID 4672 wrote to memory of 248	4672	msedge.exe	94
PID 4672 wrote to memory of 248	4672	msedge.exe	94
PID 4672 wrote to memory of 1328	4672	msedge.exe	97
PID 4672 wrote to memory of 1328	4672	msedge.exe	97
PID 4672 wrote to memory of 1328	4672	msedge.exe	97
PID 4672 wrote to memory of 4292	4672	msedge.exe	98
PID 4672 wrote to memory of 4292	4672	msedge.exe	98
PID 4672 wrote to memory of 4292	4672	msedge.exe	98
PID 4672 wrote to memory of 5628	4672	msedge.exe	99
PID 4672 wrote to memory of 5628	4672	msedge.exe	99
PID 4672 wrote to memory of 4192	4672	msedge.exe	102
PID 4672 wrote to memory of 4140	4672	msedge.exe	101
PID 4672 wrote to memory of 4192	4672	msedge.exe	102
PID 4672 wrote to memory of 4140	4672	msedge.exe	101
PID 4672 wrote to memory of 3900	4672	msedge.exe	104
PID 4672 wrote to memory of 1320	4672	msedge.exe	106
PID 4672 wrote to memory of 1320	4672	msedge.exe	106
PID 4672 wrote to memory of 6068	4672	msedge.exe	108
PID 4672 wrote to memory of 6068	4672	msedge.exe	108
PID 4672 wrote to memory of 2156	4672	msedge.exe	110
PID 4672 wrote to memory of 1476	4672	msedge.exe	111
PID 4672 wrote to memory of 4124	4672	msedge.exe	112
PID 4672 wrote to memory of 2228	4672	msedge.exe	113
PID 4672 wrote to memory of 2228	4672	msedge.exe	113
PID 4672 wrote to memory of 2304	4672	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v10J-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v10J-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2f0,0x2cc,0x7ffb9002c188,0x7ffb9002c194,0x7ffb9002c1a0
    3⤵
    PID:5188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,1233981045357408517,5492842269126218701,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,4930875503897071720,18232485844083043697,262144 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:2
    3⤵
    PID:3424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,16017575910351158431,18129143621581433327,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:13
    3⤵
    PID:5580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,6004533092712369083,6839775976094400020,2097152 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
    3⤵
    PID:248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,3434675856109746810,6410767659657540453,2097152 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,14974244368085422001,14558420709568361585,2097152 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
    3⤵
    PID:1328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,9082639978997127523,18080671420729041468,2097152 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:9
    3⤵
    PID:4292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,3957850748943495313,514962701296168510,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
    3⤵
    PID:5628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,16604419000420079614,17757383340036856227,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:4140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,18439920285747469669,14798784268212127745,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
    3⤵
    PID:4192
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8446683934759540344,13338438742027893311,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
    3⤵
    PID:1932
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8446683934759540344,13338438742027893311,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
    3⤵
    PID:3900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,1268281349966789635,12324947222849723188,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
    3⤵
    PID:1320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,16895771418351201969,15110597122812595691,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
    3⤵
    PID:6068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6772192073967622295,6903265229223754321,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
    3⤵
    PID:2156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,15358605308419883988,18025568512535724809,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
    3⤵
    PID:1476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,11189245086060930436,9599296105439914649,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
    3⤵
    PID:4124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,16873826665915519687,16211167943180107729,524288 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:14
    3⤵
    PID:2228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,1964784353068058258,6955773671049997778,262144 --field-trial-handle=2560,i,17127669872532238080,4885666169597918198,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2304

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5deb756f546dc439bef8d265f5a98b426b0ac22e45a0ece9ae58e01d8ffb73e4
MD5 d5e80f4d3ed16944e3aed49a033398d4
SHA1 d73f12e026db3ab13508c20a986eb5babdd8d777
SHA512 993d5b2ff75367255ba86c8964cde162f118e64933ea736003a9b1b3ccc0cb71031a14b7b8264e492db86c6c74452b488b5c784ee99372e8b66e2507e6f5835f
TLSH
T115515CA383E21AC0F3A3A6B6B2F06B5537F0A45F400B6A5343916D784902F59DCDB243
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599d21.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599d21.TMP
Size 2KB
SHA256 8096669e8cd8b1efbf73f5884d455454130406cb48371024f52878834678a44f
MD5 537b0806f8c8d364e99d6dee76f8fa9c
SHA1 0374a14877aa98ea2895c6c2525780965bbb81ff
SHA512 c2d8199f3d8e0f94e4762d6fedd39eac3248beac021003a4944ea72e7a3db76b3521c3caf0dced6fd72221f18ed045926807eab179a695578f3f7c6849bc82f5
TLSH
T18A5170A383E219C0F3A3A6B6B6F06B5537F0A45F440B6E5343916D785802F59DCDB143
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2567da3856fcfac11671f1cabac45dbdabec1cdaef83140acb9c92d2d9918291
MD5 08ddf1a4337f0c096b8e56c28bb054d0
SHA1 1374ba35c4da7d0f94d96d5bb0d2a72a122be040
SHA512 bd102c2762b3ef1af1859cbd53d0db069f767708f6139f944eefafd64b0d16cc538fe5750e7d33440a9c9a500aacd94e06673d13cced8732a934a78e1da788a4
TLSH
T1FC41D1F787F4857ECA0195F0AA18AE1FCE1C0525432C7C5AC9E0AE2B93E3471D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2c663ff8a33f4e5e285d488b219d0658f1853a998e8ffe2b137b54a8c5e7f317
MD5 bd944c8665b90fca6b98f5b580cc03cf
SHA1 7f6e24645ad185259c6de4d2832e6f11910f4bb7
SHA512 fe1649cdb42740c5442b1f07209f3b8ae767a0ac710e1305d1a85934cc82c7d39fc3d0d93a4a73216c2d99eec46c33ecf12438d0e9c05c6a0ce3b2f80af3efa2
SSDEEP 192:sxRSRmCw/fbsLuou8IZRQzoA8p4J/g6+WNIYZFLKLEGWIgVA7J:sxRSDw/fbsLuo12nk/5ISnY
TLSH
T10932B6166E28A93B4CC7E31DBB55BF53D6F95032E1911E48EAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ac1d1c2d7f014de0d272b9b3d15d54b93ce1827caf1c2be0b3d312152fbcf487
MD5 67f35a49c54ed1b09e53d1f4b0027ccf
SHA1 3eb8711288e91532444b038a85d8c72690ca84ca
SHA512 643b18f40f276d63e67d01d3a61f8a28c30c6f2c9fee95286a4d561c0946f0e36cf8ac8f4b598e925dee755862e5c11b0fd730087cf52b8b166b7c3adb110cdb
SSDEEP 192:sxRNRmCw/fbsruo58IZRQzoA8p4J/g6+WNIYZFLUvEGWIgDuA7J:sxRNDw/fbsruo62nk/5IS7F
TLSH
T1BD42B6166E28693B5CC7E71DBB55BF53E3F85032A1911E48AAFC861C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8eae03763cce89535c561c23db333a1fab4fe1951e34471df8e9565837c96d31
MD5 420473b20a7609f1a66ec24c051a103c
SHA1 c171e9e4fe16e76c2da94552fe4be92dba2e94a2
SHA512 4d7e973b6e55380860dd48ac59bf1ed5fea301c250d77a530ed0000562ffffe32a49f752421a5a2e5ee9c20bb1b5acec668b6e674bee6a6a508fbfae2b5110e4
SSDEEP 192:sxRNRmCw/fbsruou8IZRQzoA8p4J/g6+WNIYZFLKLEGWIgD8A7J:sxRNDw/fbsruo12nk/5ISnD
TLSH
T1B642A6166E28A93B5CC7E31DBB55BF53D7F95032E1911E48AAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 3f80f81e78c3a45cc50e0fdc61320ce41ed09a8416e9ab20481c163a79be106b
MD5 2a3637cce2d8f612abf8e813cf5b0245
SHA1 058d56eae58f6d862742f1e0d6b08d7a28f3604a
SHA512 32c3504ebf0aac0aebab27761e1f1d68dd7d05b2d2396d6afde24891b321000c9a335286878d030c0096c605a74118843d809996aa0af4809056f199f96c61c3
SSDEEP 768:K80EF67pLuL7FwWgNhfVN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPeowLWaroLQse:K80EFSE7FwWgNhfVNu1jaoeogWRLQse
TLSH
T10BD2D97B640DCB7E4F804ADDAC197E9A7DA802CB96D8CD8047FE841C02C6BEB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 15cc1a2730bf120230c29ce26a2751a2f641b5550db30eb6991f9c3330e1a9c3
MD5 099db0c2ed443e83aefee3146ce8e80a
SHA1 89e79b2e1b2dddf42871d45b3eadd5dd34a04307
SHA512 c3247b846b7af45709f010c6b56c55b099a02f7cd2abb050ba7572b512e875fff84c1ad060bc5db9c5d4ee154718ec4b7a6deef125490a36bd30d74b4a447b8e
SSDEEP 768:Zw3U//P+LeSFOUyUtKmrX4fouOToPvB2thtA9VAguPi9P+tJ:Zw3jsnnwthttXPltJ
TLSH
T17EF2B071A9A88D53ECE9E798730A72936FF09133E4D01F886EDD971D054769E0B0BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f87d768f2fa5a335bf9919803642362402b9ce049b91e4fa4b2a9905373bdf9b
MD5 c6858211a790c77acb968b0ed7ac9735
SHA1 533c391950fe5c08f3a031d10631e65a0232c85e
SHA512 d14b40d078c65ddbd05b6b0dbc713ba68c4817319d187ad2a3b512a7bc0e3a97ce0e5f3a5198fa828e7b2435c66f1df611ea53b2f0a6761171501141e1b843d6
SSDEEP 768:jrv+4UNbdD3U/pP+LeSFOUyUtKmtX4fouOToPvB2thtA9VAguPi9P+tJ:jbsb93VsnnwthttXPltJ
TLSH
T10B13CF71B5AC8E63ECE6E398720B72833FF4516398C10B88AEC95B4D064B59E170BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8efae687b88113449851aea794491389872d16bcbe58b46c68798233282da5dc
MD5 9bf404d1f38f66e999da31ac7b77f767
SHA1 beca898f9812907128a0eda9ffc8e853a15d66ef
SHA512 c065405271a68176655409c9e5609fd549127708307800ed37bd299f52af25314384fbe46291fe72ea0ab70424b4ca5e8360d3a845a45157b08c8d84ca957182
SSDEEP 768:6w3B//P+LeSFOUyUtKmrX4fouOToPvB2thtA9VAguPi9P+tJ:6w3esnnwthttXPltJ
TLSH
T1DBF2C071A9A88D53ECE9E798730A72936FF08133E4D41F886EDD971D054769E070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 60a9e76d9188dd1043086a6f9161d427629b789f06c00ab1914ac316f8deb9ff
MD5 5d7f3b37391412345b2428c3fef0a96f
SHA1 8af4b62deed4884f240e359390665bd019558514
SHA512 b5a6ad461c23e4b8a67c79eaad7b2ed0338dc461948fc3c08048ea668fd6627da1d2055837e25140007aa63f2266b261c23c952ca557ae694b1adbee6d6cead4
SSDEEP 768:grv+4UNbdH3Sc+LeSFOUyUtyX4fouOToPvB2thtA9VAwGeVH1SlX:gbsbh3JsnnwthttDEH1Y
TLSH
T1EE03CF32A8AC8A33DDE6D398720B71572FF4911396900FC49DDD2B4D069B9DE430BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ba4542e14ca6c4288b4eeb4d7844913d9401dfed03bdbc21e281a1fe78654fd1
MD5 2f998d0c14c05031c499e2e4624243f7
SHA1 5276b41dffbea2b7bda012f1dbec4acd5f392a83
SHA512 3a4ab0cd912afb21527e04c5947734cf9b67c2750e9c4f828aeeac6c6a16ec5bfba5d7daba7d27a2a97420df9b23f5c0986f42d00aaca4e8ef132f40b572841d
SSDEEP 768:Irv+4UNbdH3G5+LeSFOUyUtKmOX4fouOToPvB2thtA9VABueVH1SlX:Ibsbh38snnwthttIEH1Y
TLSH
T1A803BF72A4AC8E23DDE6E398710B72932FF4516398800FC4DED95B5D064759E170FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 340c9d4b4df2e5a9e5d1d4010a8d020a9ea202e8b70176d0572d84d1ff99478d
MD5 a583fc730c74e22b1f7a78efb2009b66
SHA1 43cae06dd7ea2724cb7014cea26ce6b4b4cc3ab1
SHA512 4257ea7256ecdcabc92a9628abd16a35aeccb019920183c083e995aa628e127b40b9de88393b3dd89b9368ddad308d161cfb9cdf4594f5586cd2104af9a54551
SSDEEP 768:ZFQL39wgj//SE1OUyUtKmbX4fouOToPvB2thtA9VAguPi9P+tJ:YL3jsnnwthttXPltJ
TLSH
T178039D72E8A8CE67ECE6E7D5B30972869EF04163C5D85BC4EED85E0D018759E070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4672_571859435\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download