66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m0-eL.svg
Size 3KB
Sample260820-mbzmsavckd
SHA256 66ba352347bb76d950affb07d51d3dc22a9e1e0e316488fd409ecb337f490e73
MD5 95b7e2e1d8065db4ac2ce8927e95981e
SHA1 9f303ce03119c2588fcbb4f320794622c61045e5
SHA512 88d142db6604e75c03e021e409b771a60808f39568002c877a1bb39f1dcb57f89da8c819bd1a76d8cb929edd7c1405165884108a2abca02f298c6a497219887b
TLSH
T1E871268876F87EEBD7C802570D51D4B84B2F946BD822978DD3CB90E875282AC735D5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2788	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316947017811813"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{F42DD1FF-7BE5-4AB5-B0CF-7C9F582AAF2A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4776	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 908 wrote to memory of 4776	908	iexplore.exe	89
PID 4776 wrote to memory of 6020	4776	msedge.exe	90
PID 4776 wrote to memory of 2788	4776	msedge.exe	91
PID 4776 wrote to memory of 5716	4776	msedge.exe	92
PID 4776 wrote to memory of 5716	4776	msedge.exe	92
PID 4776 wrote to memory of 5716	4776	msedge.exe	92
PID 4776 wrote to memory of 3340	4776	msedge.exe	93
PID 4776 wrote to memory of 3340	4776	msedge.exe	93
PID 4776 wrote to memory of 4488	4776	msedge.exe	96
PID 4776 wrote to memory of 992	4776	msedge.exe	95
PID 4776 wrote to memory of 4488	4776	msedge.exe	96
PID 4776 wrote to memory of 4488	4776	msedge.exe	96
PID 4776 wrote to memory of 992	4776	msedge.exe	95
PID 4776 wrote to memory of 992	4776	msedge.exe	95
PID 4776 wrote to memory of 1584	4776	msedge.exe	97
PID 4776 wrote to memory of 1584	4776	msedge.exe	97
PID 4776 wrote to memory of 1584	4776	msedge.exe	97
PID 4776 wrote to memory of 4384	4776	msedge.exe	98
PID 4776 wrote to memory of 4384	4776	msedge.exe	98
PID 4776 wrote to memory of 4384	4776	msedge.exe	98
PID 4776 wrote to memory of 4748	4776	msedge.exe	99
PID 4776 wrote to memory of 4748	4776	msedge.exe	99
PID 4776 wrote to memory of 4832	4776	msedge.exe	101
PID 4776 wrote to memory of 3100	4776	msedge.exe	102
PID 4776 wrote to memory of 4832	4776	msedge.exe	101
PID 4776 wrote to memory of 3100	4776	msedge.exe	102
PID 4776 wrote to memory of 412	4776	msedge.exe	104
PID 4776 wrote to memory of 4924	4776	msedge.exe	105
PID 4776 wrote to memory of 4924	4776	msedge.exe	105
PID 4776 wrote to memory of 1204	4776	msedge.exe	108
PID 4776 wrote to memory of 1204	4776	msedge.exe	108
PID 4776 wrote to memory of 2876	4776	msedge.exe	110
PID 4776 wrote to memory of 1640	4776	msedge.exe	111
PID 4776 wrote to memory of 4932	4776	msedge.exe	112
PID 4776 wrote to memory of 2836	4776	msedge.exe	113
PID 4776 wrote to memory of 2836	4776	msedge.exe	113
PID 4776 wrote to memory of 1372	4776	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m0-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m0-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffbce26c188,0x7ffbce26c194,0x7ffbce26c1a0
    3⤵
    PID:6020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,4715985028254979422,3362546862193934615,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,11250243378736787739,16477529740064953084,262144 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
    3⤵
    PID:5716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,9771690021475642657,1400824947342083150,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:13
    3⤵
    PID:3340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,5571528844642117667,17138843058516425228,2097152 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
    3⤵
    PID:992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,7444981890821938898,4418434259073542868,2097152 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
    3⤵
    PID:4488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,13933510833591410556,17467848889122571931,2097152 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
    3⤵
    PID:1584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,17581985444427670529,10746148224942471664,2097152 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:9
    3⤵
    PID:4384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,11080138206221220503,3660586786083185620,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
    3⤵
    PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,17405172328512922286,17225953534941470964,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,1765122887329623284,2641832880932428245,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
    3⤵
    PID:3100
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,3699080085681967189,16911958791275160614,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
    3⤵
    PID:4592
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,3699080085681967189,16911958791275160614,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
    3⤵
    PID:412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,2395021515516467962,1520158550846762955,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,16950101006477132738,1010499883256610495,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,15114383603988896911,15091396025744520667,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,15217466978066637283,7726381890591659240,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:14
    3⤵
    PID:1640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,789708774655734536,5040210132745444332,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:14
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,17484449623729772117,15862837344429731793,524288 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:14
    3⤵
    PID:2836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5152,i,11244738143106116177,18061624727633949898,262144 --field-trial-handle=2500,i,5887607501481598970,17832478066116253844,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 973b275dc14473d177a1b9e41d15e7fadc49a8b36fd0483aa6af813d4c90d8ab
MD5 f997eb8e0a7290073d369dacadc36c59
SHA1 4a53e40a90e8d689ee88537755f1479bad9db19e
SHA512 af07a2e09eab976b831901350c4871032c39f87ac57b618e377ec193bd9d4af64febe3a4c56bccd4166c26a07c8f0fd7a4fe47232257824ded024cd3fe02edce
TLSH
T1B751CD90A32511E9EF6042FE48F42A7673F881944A831E81F85A7DB83481F35D2F4A1F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595971.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595971.TMP
Size 2KB
SHA256 c6cd89568dd725ac96f8612ad8ccc6aeae13b6dc3f4a7cfe123ec37d4902650c
MD5 617c1fe781608c0275d2f3c6601ceee9
SHA1 33e7d8a67c80714af13ae8e246d5073395e3fb32
SHA512 57dd43a594286478ee1dbac4f15b4fc5e7987e94ae73cb6188610921dfe275b3c75b4ee7863e086785921a7da546bc980f40f181e14420d8feb3fc4a2bc3a6ac
TLSH
T10351CB90A32511E9EF6042FE48F42A7673F881944A831E81F85A7DB83985F35D6F4A1F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 902233c9be1e5e8a9d0a0ad6844c54e58e36e03a044cf3ab1b6f1f02a42e0ccc
MD5 79737bf0980863671fcd926dee5a8974
SHA1 12ee703781b0c076e8635012e6d37eac8334dc4d
SHA512 4406c075a7ef2fa9efe729e3301469e8fae0a560901d886a47404fa02792829d335921ca7e576c6ecdc7f40a3a5e370f25bda0daf22766bb685b9d3175a5d3a4
TLSH
T19241B0F783F4856E8A0195F0AA146E2FCE2D0515432C7C5AC9E4AE2B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dda7c8b2b8518b6403e816f6d7383b4138789584541d93e48dd8ba9cfacb2739
MD5 4b0e5eeb133d66c4d8e44ff6bacc13c9
SHA1 7642b655af5050bb81c9fbc3061b29bc034d3047
SHA512 f41664ad89f2fc88cc2eec2358473da18726f57658a9ac9c5b65dd4e0facd80ca87817aeea6f4cdf21f9e2b4f29025c771fcb61bd62ffea1fa657ed33e1a3c01
SSDEEP 192:sxR22RsCp/fas6JOrZdvzoA8p4Hy/g6+WNIYE/mYiK7GqIgVOJ:sxRtpp/fas6JOFs2y/5IWsI
TLSH
T16032D8556D28A97B4CC7E21DBB65BF53D3F95032A1D41E48AAFC8A1C04EBADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5976d5201e6ed1952347d93d9a8f4644bb103ceb8f425a9bc834e3253a197b7f
MD5 e28c85b8469ac9cbef876fbb1b74a524
SHA1 e95767178d80ee00e9c279dad69690aa1ee0f798
SHA512 3e65abb2475d4307da192d8779fbf9d2d1a4e7e52cfd21d8168f324c9e973e90498641c310a76c5b753c8429bd4e38b0b77837f50a22e80776b06735e7e1d865
SSDEEP 192:sxR2xRsCp/fasaJarZdvzoA8p4Hy/g6+WNIYE2Nm2iK7GqIgDAOJ:sxRipp/fasaJaFs2y/5I3s/
TLSH
T1F542D8556D28697B5CC7E20DBB65BF53E3F9503291D01F48AAFC8A1C10EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 41ef9ece1832a69a8ff5d4d2b3ad0a19fabaff20cbf2f46062c737566fa5b8a6
MD5 ffa132351f243695eb02684fae0834bc
SHA1 752df8c45065bb219e068585035b853b1d5228a0
SHA512 862fd129ba0fdf9d97b124f18d12035e2e72a4a650e654e4877c2fa517ef8fbdcafc21a8475c010fe5843e2e1ee4d7419e400abe02b046fc61b24fa2b0890f4b
SSDEEP 192:sxR2xRsCp/fasaJOrZdvzoA8p4Hy/g6+WNIYE/mYiK7GqIgDaOJ:sxRipp/fasaJOFs2y/5IWsx
TLSH
T1FB42D7556D28A97B4CC7E21DBB65BF53D3FD5032A1D01E48AAFC8A1C04EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 e58a32b6b30dc26d79faa3789de0c1b68b7317f75b40cd96af69563eea911f96
MD5 1fe9e2d04637fcdc074d9b7df2d80da9
SHA1 b50e0edaa8dcb82eb8d580b59c02c344279a31d6
SHA512 e31b5ddb6fd8e8a5f741168263c0ed851c5219d5afab397ee8d236dffba5373968761bb152609e33f5b5b21d178e9619199a3bd9fc148c4822518f1867d5351a
SSDEEP 768:0UQiMW7pLuL7PaWgH7feQ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVFp2OVq9roM6Vn:0UQiM2E7PaWgH7feQu1jaip2Iq27n
TLSH
T1E1D2DB7B640DCB7F4F804ADDEC197EDA6DA802CB9698CD8047FA845C03C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9e5fdb7-54ef-469d-aa29-583147ca3188.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d9e5fdb7-54ef-469d-aa29-583147ca3188.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6afaa73d7b7ac60a4fbb4d4c8011a9b0f5dd06ec8ff3b3b1ea8579d7fc968baa
MD5 1c9bd3a1d8a72b8f7211b2d2298ff5d3
SHA1 09d2d793d774de25c0262cea2a2d4d0b8aab0996
SHA512 74287abc74d4e08bc0ee3acbfbd642db74eb2a3ef66be37a0e4e35b8d27f263b818be873fabbf5a5aea93b1c4a687a0382fdfe7a053e8491422cea9955572416
SSDEEP 768:zrv+4UNbdf38qGoWDDLtmRK48dHeByERRFzjK3JKeVH1SCj:zbsbJ31GlT48dHSyw/jEH1Z
TLSH
T12B03CF7068A89E734CEBE2897683B797BFF4016384C40B64D5C9AF4E45864DD170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9519cff3bb17f8870d06e27399f8b8fbbc7703759f226c111106226ec4e9099c
MD5 68c8c4160a18389376a45ad0b7eaaa77
SHA1 64cae14c8b560fafb9565f4676a0a2360aeaf738
SHA512 e7b8c27572d5ad6337c0992b9ea5015934bb0e875810aa421b4cd2c4bc5513dd7640c3bc595a106dd6079c9af2b2a3b7a41a5c5d1ff23d4b9174a29733a91266
SSDEEP 768:/h3KaqGGW9DLtmeK48dHeByERRFzjK3YKf+l3W:/h3K7Gx048dHSyw/kfi3W
TLSH
T1E1F2AEB06CA55C734CABE28977537797FFF0416384C86A64D5CDAB0E04866DD1B0BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 404965ab931aa991ac3ab449cf45154ee4edc4bb168a53877ee4052bb713eed9
MD5 47a447bb6a938aa70a757be5019be71a
SHA1 3fc062afcbf8368cef68819450e3f771232b0b88
SHA512 e46d0d92aaf0219b86cf869b156ee8a2f292eaca50dc449b23ab297e86308dce560f97cef31e20a73f86282797a28850d48ec99206872ad329b4103cce8eeb50
SSDEEP 768:Qrv+4UNbdf3SqGUrDLtgK48dHeByERRFzjK3YOeVH1SCj:QbsbJ3DGkX48dHSyw/cEH1Z
TLSH
T15203CF71A8A85E734CE792897683BA17BFF4411386C41BA4C5DD6F0E86874DD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 bbc42c9a474e9b0d3c0103f8b3de60de1a22b702f155ea2830de9c791bb051ba
MD5 3e312f07e1ac3b4c7852ba701b7ebc14
SHA1 5dd77d512c20388b88b96f41fe4d43f4685d3fc3
SHA512 d2433b59573ba062ecbd3554fa4b466e36102f7bca18af30b4b4c327599b40d357c92e491e1baf65d0c4afcb2571183d3c593d9a567d5cf63ddf34c8b5b1e3b7
SSDEEP 768:Yrv+4UNbdq3AaqG7W9DLtmdK48dHeByERRFzjK3YKf+le:YbsbY3A7Go548dHSyw/kfie
TLSH
T13B03C0B0A868AD734CEBD288B6437797BFF0016344C51B64D5C9AF4E44864DD2B0BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 940759ade9fdb0e0c6658e8150c7bdd75b7086a922d8eaa0e62731fb451674aa
MD5 2a51f6bbe0303fa55a1136a116e64b13
SHA1 d159466146a22b9a45bb0ba398c793222c4c380f
SHA512 f335480ec04d3cca96fd2ded88591f8e03c09bb5c20db67ba15b3e4b6ba07756bd2bba045491208c614f39e01afe3e596ade7a92999c9b32b032fc2bf52db361
SSDEEP 768:HFQy3gwgtaqGGW5ltmSK48dHeByERRFzjK3YKf+l3W:ay387GY48dHSyw/kfi3W
TLSH
T19E038DB1DCA4DD7B5CEBD3C5BB52B797EEE0016385C8A994DAC99E4D00821DD070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c685344-d27c-4e21-95ca-83f1ca527745.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0c685344-d27c-4e21-95ca-83f1ca527745.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4776_1341688765\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download