66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m0-eL.svg
Size 3KB
Sample260818-vmfcaael4y
SHA256 66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73
MD5 95b7e2e1d8065db4ac2ce8927e95981e
SHA1 9f303ce03119c2588fcbb4f320794622c61045e5
SHA512 88d142db6604e75c03e021e409b771a60808f39568002c877a1bb39f1dcb57f89da8c819bd1a76d8cb929edd7c1405165884108a2abca02f298c6a497219887b
TLSH
T1E871268876F87EEBD7C802570D51D4B84B2F946BD822978DD3CB90E875282AC735D5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315463813362084"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{AE023867-402B-4987-9EB6-24ED680A2FE6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2532	msedge.exe
2532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4436	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 4436	2300	iexplore.exe	90
PID 4436 wrote to memory of 1004	4436	msedge.exe	91
PID 4436 wrote to memory of 360	4436	msedge.exe	93
PID 4436 wrote to memory of 5088	4436	msedge.exe	94
PID 4436 wrote to memory of 360	4436	msedge.exe	93
PID 4436 wrote to memory of 360	4436	msedge.exe	93
PID 4436 wrote to memory of 2860	4436	msedge.exe	95
PID 4436 wrote to memory of 2860	4436	msedge.exe	95
PID 4436 wrote to memory of 3280	4436	msedge.exe	96
PID 4436 wrote to memory of 3280	4436	msedge.exe	96
PID 4436 wrote to memory of 3280	4436	msedge.exe	96
PID 4436 wrote to memory of 4816	4436	msedge.exe	97
PID 4436 wrote to memory of 4816	4436	msedge.exe	97
PID 4436 wrote to memory of 4816	4436	msedge.exe	97
PID 4436 wrote to memory of 3428	4436	msedge.exe	98
PID 4436 wrote to memory of 3428	4436	msedge.exe	98
PID 4436 wrote to memory of 3428	4436	msedge.exe	98
PID 4436 wrote to memory of 3452	4436	msedge.exe	99
PID 4436 wrote to memory of 3452	4436	msedge.exe	99
PID 4436 wrote to memory of 3452	4436	msedge.exe	99
PID 4436 wrote to memory of 1340	4436	msedge.exe	101
PID 4436 wrote to memory of 1340	4436	msedge.exe	101
PID 4436 wrote to memory of 3176	4436	msedge.exe	102
PID 4436 wrote to memory of 3016	4436	msedge.exe	103
PID 4436 wrote to memory of 3176	4436	msedge.exe	102
PID 4436 wrote to memory of 3016	4436	msedge.exe	103
PID 4436 wrote to memory of 4228	4436	msedge.exe	105
PID 4436 wrote to memory of 4560	4436	msedge.exe	107
PID 4436 wrote to memory of 4560	4436	msedge.exe	107
PID 4436 wrote to memory of 2172	4436	msedge.exe	109
PID 4436 wrote to memory of 2172	4436	msedge.exe	109
PID 4436 wrote to memory of 3536	4436	msedge.exe	111
PID 4436 wrote to memory of 4100	4436	msedge.exe	112
PID 4436 wrote to memory of 3984	4436	msedge.exe	113
PID 4436 wrote to memory of 2368	4436	msedge.exe	114
PID 4436 wrote to memory of 2368	4436	msedge.exe	114
PID 4436 wrote to memory of 1576	4436	msedge.exe	116
PID 4436 wrote to memory of 1576	4436	msedge.exe	116
PID 4436 wrote to memory of 2532	4436	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m0-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m0-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ff860c4c188,0x7ff860c4c194,0x7ff860c4c1a0
    3⤵
    PID:1004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1928,i,10945087277018299866,12223399936796323701,262144 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:2
    3⤵
    PID:360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,9209509948135197875,16059101028936674445,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,10581648801677041725,2176979425245590840,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
    3⤵
    PID:2860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,16715354161267921710,635315082763636911,2097152 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,10435083292383575791,5143088350218636614,2097152 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
    3⤵
    PID:4816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,2011118312507100640,1761246528595075875,2097152 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,3631411274420229422,7674479928424933250,2097152 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:9
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,13115822750089393033,11998150134780535053,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:1340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,8068351552890746819,3318125955881624201,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
    3⤵
    PID:3176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,1060103726825524876,3749055421788506428,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,11703847746166951388,14215221138157917587,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,11703847746166951388,14215221138157917587,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
    3⤵
    PID:4228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,4964913382831865626,14653932016668873715,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,16634936154925822614,12140530421841330358,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
    3⤵
    PID:2172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1320,i,14890183012351396000,5274304922726007081,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
    3⤵
    PID:3536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1316,i,4421593327576242861,390433359234548935,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=1464 /prefetch:14
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1324,i,4043814474768380519,2797091654843926275,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
    3⤵
    PID:3984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,11636929153045755101,365806811857958091,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
    3⤵
    PID:2368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=924,i,16959317020518115614,2728484356575402814,524288 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
    3⤵
    PID:1576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,1423403123858378893,6534377700445121637,262144 --field-trial-handle=2648,i,12531405423885840156,15412496148727810327,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59051d4dd39fbba2cb147421fe92e0979bae63f18667ccf8efe87a74cf549bae
MD5 608fe4c6902a3a03cca96e0fed92fcdb
SHA1 ac6d31a5e89554f4e91d5846b56efb402440ced8
SHA512 069848c82e9b5256924902fe61a195b7aa9d11f6dd8c44a7717cf352e1c0326dd9bf483c42f88d3487cab4516274099c1d0da53535a2efd8709b7be2d9718515
TLSH
T116612CED733EAFC3FF604CB29CD0A49A31E48645062BAE83A1501DF0480EF6461DB127
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b099.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b099.TMP
Size 3KB
SHA256 88f862fe0c2ca8f359212f50f2a6047d4c0f247657564a5a98758e3324bb2116
MD5 3b886eeb4157dedeb7f8139e2b9a3193
SHA1 ee1a1321e4182b5fd1bd3aaf8a2d3b90f44a0ef3
SHA512 97c1325bd69f88eecec92bd84b09de7548da3763a6d524affb9918e0faea6f4da0515cf33507c59a5b33eb6bbce5f6276067e52fc1cfa06fd0fc6d7416b16de2
TLSH
T1AF612CED773EAFC3FF604CB29C90A49A31E58645062BAE83A0501DF0480EF2461DB127
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f9b7065399e020edd7337287225e6bb68e4053d0352ab89239131a9942ddb8db
MD5 95914326042dcef7f6da6c8e87d25e50
SHA1 89edd0b93fee6e74fc5d5b8d7e450529ece642ca
SHA512 3b9a86d27a87f6916629355732a3c88fecc7c3573a7f5f26d13a777e2f20264c6a2d847d134c14ea03bae65cc2cf26aad1d69b7b77277d99c04ab8de9e0594d7
TLSH
T19E419EF787F4856E8A0156F0AA186F1FCE1D0511432C7D5AC9E4AE27A3F3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bc1f687d32da8a9a507f203e4bee5c030b1fbd616deca299211b3f27ced213c4
MD5 775262315d01c382adcef5936953e149
SHA1 5d0e20b034030e0ce687525e8102a2f0111d6b1f
SHA512 ca2de8adb84e175d546f51b3f3e30744f6038b4bfa59761b0d529821558b787b0ea57800e143fcd00ba120db46dfab3dd5ceddfc167d21d48072aecea91d510f
SSDEEP 192:sxR7RaCBl/fxs38AqZuDM6zoA8p4N/g6+WNIYn8kmhGG0IgDSFJ:sxR7r3/fxs38A8uDqY/5ITnyM
TLSH
T1AC42B7156D28A93B9CC7E21DBB65BF53D7F95032A1D11E48AAFC8A1C04EB6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6fcffb37ce65e1cf45f6bb2b1c6b862bc0785d7f9c7570d6689a8eb71a70535b
MD5 679c1548459b00da431b0ec5e8f4597b
SHA1 726534d13917bb015385dc488536c57cc60d289e
SHA512 aba6b5d03d0135655342d6785eff3047ab26c00953fab9de250122b9c70e98d35208547632e7ac3097fb4bb9b50d136463c050371ba6bb17f7f535a80bc2b62d
SSDEEP 192:sxRwRaCBl/fxscBAqZuDM6zoA8p4N/g6+WNIYn8UUhGG0IgVFJ:sxRwr3/fxscBA8uDqY/5IT3yF
TLSH
T16132A7156D28A93B8CC7E21DBB65BF53D7F95032A1D11E48AAFC9A1C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0a8b793892dcacba17c69a34c375067830273ad295ea2b5bccc0b2d835ef175f
MD5 64db87cbded1762383ddddded374e23e
SHA1 20cd86e36c56912f3027117bf9ca56eac94c55ed
SHA512 64afd754a0433fd8c26be8874fca35430bda731c18bfe5be12601236282bc586ba6e98a881466d8dbd28425b3b357cda5337ea837eb3ed2e7849aa918eddfda2
SSDEEP 192:sxR7RaCBl/fxs3BAqZuDM6zoA8p4N/g6+WNIYn8UUhGG0IgDAFJ:sxR7r3/fxs3BA8uDqY/5IT3yy
TLSH
T1954296156928A93B4CCBE21DBB65BF53D7F95032A1D11E48AAFC9A1C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 e3ffe243764cc9b31369a0f2dc6bea7b923546fbb62c9e6b88587a63b46630d1
MD5 ef7c5ae24151e08aef14cc25e6bc8ccb
SHA1 5d0535e8f43282d20866952c6e19dba8529f2fc2
SHA512 c53dd0a4813d00ad4a56fa2883ad3c76a8645c3e14887637b4fc46bddeba98e3cbb1d1d89c727f720d65291b73f30a0c8b8a9340a2ece26168eab781a886c9cd
SSDEEP 768:wb8dRg7pLuL7r6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVLQmu46Hroh3W50:wb8dRsE7r6Wgouf6Mu1jaIQmV6UM2
TLSH
T1AFD2DA7B740DCB7E4F800ADDAC19BE9F6DA802CB96D8CD4447FA951C02C6BEB51160DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d55546ffa38f0d21cdb2dda4838ca982652edbefece875041e61855454cb2f90
MD5 45865e3ac695155a3df031dfa0ec5f61
SHA1 af3d497b0e17761207588f7773c5b35403ad2f09
SHA512 5fb0e1758282080b155b2383ed1b62c6ea4e6abd0dc687148db94868ad32840551c81e5247914ee8d8f17d8c96260224e5512d85920c68fbc7120cf5106b48f6
SSDEEP 768:Vrv+4UNbds3xGCDZIO0UiAeNzc4ReyIs2ReVH1S5D:VbsbS31etc44bs+EH1Y
TLSH
T1E903BE32A878DE33ACEA6746B14776933EF8216B81C51E94C4DA5F4C0A472DD131F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a31bb0af4d74118b0c39ff2831d18aec6b98ef107f3f19c0859a889c50bc805c
MD5 f947d73cd2e9261ef5dcf37333ac787a
SHA1 28d303552de11a6fbb779dd2c96087db73c9369d
SHA512 dbb992c52c5988b48fb45d0456f35dc8447fa36106ff3aa5a2299b3bee4a7a098d38a8afeead37f7d685b074c782b6c7d17951348d459105bd942ab3650e7abe
SSDEEP 768:kj3LvYDZxuVO0UiAVNzc4ReyIsPRPi9Py:kj3SVtc44bspP5
TLSH
T126F2AE71B8759D63ACFAA381B6563782BEF41167C0C52E88D9DD9B0C09432AE171F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0e4c05e86c936735834c3bd236ae997ac87d8e04181a70ef75f2535381e7b253
MD5 b24ad6d8903e2823f51f50e9314054d5
SHA1 d7594652e197efec2fc5d4ad418cafd1058f66b8
SHA512 c3113dfcc2329b90286444c27a7ddfc8e2f58aea7f3ac75cd2774613c08616e6910dd7074d3d51ce975ef4ae3cf7831673fbfdf919eb04dafd725dc4da8eb465
SSDEEP 384:nyZcIuR38N/bPnP390JDZNfNoXOVSUUUiWFDWETRzcoXfK86sfxEZxxsIj4lBRP5:A63qvYDZIO0UiAxNzc4ReyIsPRPi9Py
TLSH
T17FF2BE71A974DD63ACFAA742B65636837EF81137C1C42E84D9DD9B0C09432AE171F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8f5e1f77dcf42ab23b331df46c879a6913ca1624a0f86891870bbff11568eaaf
MD5 da7e28399430d098225476e59aefd8e5
SHA1 13605adc7c3e5cc86626573cac80b32c9dee784a
SHA512 f64257937a49a383a5de3ef410fcd3a117890c3e53f903cc63a6001634fd8bc96d3eb69451319ea699a6ee22b6e041916597d50b310669180f198716764ce97f
SSDEEP 768:6rv+4UNbds33BDZIO0UgNzc4ReyIsXceVH1S5D:6bsbS3ctc44bsMEH1Y
TLSH
T1AC03CE32A8789A77ACF66786B54776533EF8512B82D81ED0C4DE2F0C4A4B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5a4c2ddb3f19269a4a14b61c0cd2e80a18f0c9dac0d57c23d94d02fcca01bc02
MD5 5b3f4f47fe9a6b9e04f2ec0fde374118
SHA1 f75580ad3a5130d11a4a75552ea24bcf1d9154aa
SHA512 0b1c4ca4449dfd6d2c5544f0f3709619814b106a42a7f6c7f90602481c5807086e4b38f773bee5dbeb75a4b000a7432781594968829cc0bc44e2e2a6310cb3fe
SSDEEP 768:krv+4UNbdF3quYDZIO0UiAANzc4ReyIsPRTT:kbsbf30Atc44bsp/
TLSH
T16303AD31A938ED73ACFA6345B10676937EF8216B81C51E94D9DA1B4C090B2EE271F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e0b22a14b8880ceecd29212014ca73f1edd4508803358af1f4242869b185c2e0
MD5 8521cc7b765a630b6d0aadf0bcaef17e
SHA1 cccfdb91af010051311db2ffc6c292d72b36b845
SHA512 6e8340b0a2fbc77ef1424a5a95bc3e98b062484843a5db49e5be57a5f8db22832210de19664a1eb64c9db471c538e8c46c971fb3a1e04cb10902eea5c3b55a20
SSDEEP 384:n1ZcIuR38N/wPnP390JDZNfNoXOVSUUUiWFDWETRzcoXfK86sfxEZxxsIj4lBRP5:N63LvYDZIO0UiAxNzc4ReyIsPRPi9Py
TLSH
T175F2BE71A8749D63ACFAB742B6563683BEF85137C1C42E84D9DD9B0C09432AE171B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4436_1393604770\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download