d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/09/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v10J-m4-eM.svg
Size 24KB
Sample260908-tk815stwct
SHA256 d78815299fd2ba2b3fea05f7c5662295c55e9b87f5659718b5dfc273f4fe78dc
MD5 8c786d4da80ac1948a137a727a12fd7e
SHA1 0fb0844fb479811339f7104eb281a91b930ca91d
SHA512 838d9d0ec608d1e47dd3722b8ccd401e03eb334982cd433a7f896e66b62a9e69b9d2d3e8209914dd8563af8734ee368742a979b7e861efd480707c961c193a0e
SSDEEP 384:c5veJtU7WSADG+2tM8LSB7XXZwuw5wE1/7PRP3uDCr:c5vQjqZmDK
TLSH
T11FB21F6437F87C978BD803479D02FC68461FA877C4A8678D93D7D4E8A988368FB6C560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2884	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333572995989110"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{5D5AF827-FFE0-42EB-952C-CE20A885B0B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1436	msedge.exe
1436	msedge.exe
1436	msedge.exe
1436	msedge.exe
1436	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1436	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5900 wrote to memory of 1436	5900	iexplore.exe	89
PID 1436 wrote to memory of 6036	1436	msedge.exe	90
PID 1436 wrote to memory of 4488	1436	msedge.exe	91
PID 1436 wrote to memory of 2884	1436	msedge.exe	92
PID 1436 wrote to memory of 4488	1436	msedge.exe	91
PID 1436 wrote to memory of 4488	1436	msedge.exe	91
PID 1436 wrote to memory of 5456	1436	msedge.exe	93
PID 1436 wrote to memory of 5456	1436	msedge.exe	93
PID 1436 wrote to memory of 4372	1436	msedge.exe	95
PID 1436 wrote to memory of 4372	1436	msedge.exe	95
PID 1436 wrote to memory of 4372	1436	msedge.exe	95
PID 1436 wrote to memory of 3892	1436	msedge.exe	96
PID 1436 wrote to memory of 3892	1436	msedge.exe	96
PID 1436 wrote to memory of 3892	1436	msedge.exe	96
PID 1436 wrote to memory of 3012	1436	msedge.exe	97
PID 1436 wrote to memory of 3012	1436	msedge.exe	97
PID 1436 wrote to memory of 3012	1436	msedge.exe	97
PID 1436 wrote to memory of 2556	1436	msedge.exe	98
PID 1436 wrote to memory of 2556	1436	msedge.exe	98
PID 1436 wrote to memory of 2556	1436	msedge.exe	98
PID 1436 wrote to memory of 2504	1436	msedge.exe	99
PID 1436 wrote to memory of 2504	1436	msedge.exe	99
PID 1436 wrote to memory of 4672	1436	msedge.exe	101
PID 1436 wrote to memory of 4672	1436	msedge.exe	101
PID 1436 wrote to memory of 4968	1436	msedge.exe	102
PID 1436 wrote to memory of 4968	1436	msedge.exe	102
PID 1436 wrote to memory of 4508	1436	msedge.exe	104
PID 1436 wrote to memory of 3924	1436	msedge.exe	105
PID 1436 wrote to memory of 3924	1436	msedge.exe	105
PID 1436 wrote to memory of 5080	1436	msedge.exe	108
PID 1436 wrote to memory of 5080	1436	msedge.exe	108
PID 1436 wrote to memory of 3300	1436	msedge.exe	110
PID 1436 wrote to memory of 1204	1436	msedge.exe	111
PID 1436 wrote to memory of 1116	1436	msedge.exe	112
PID 1436 wrote to memory of 5504	1436	msedge.exe	113
PID 1436 wrote to memory of 5504	1436	msedge.exe	113
PID 1436 wrote to memory of 2236	1436	msedge.exe	117

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v10J-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v10J-m4-eM.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2cc,0x2f4,0x2f8,0x2c8,0x30c,0x7ffc66e2c188,0x7ffc66e2c194,0x7ffc66e2c1a0
    3⤵
    PID:6036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,4189173896375419147,3554887756817154930,262144 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
    3⤵
    PID:4488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,7474399139575382902,4491188687104757811,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,14247316018309376492,10050043545530729455,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:13
    3⤵
    PID:5456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,1361186831822227232,2644462425288710849,2097152 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:4372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,11734311861585856548,15561465951454911783,2097152 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:3892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,7322072375814454090,8548531429673973180,2097152 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:1
    3⤵
    PID:3012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,15390530902218784811,13351389495585055920,2097152 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:9
    3⤵
    PID:2556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,6207650230360739702,2567226364727716456,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,17452284999618572171,15603822636746833901,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
    3⤵
    PID:4672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,17294972492433842547,5423673196284868311,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
    3⤵
    PID:4968
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,2409701344819118527,1994841306400953196,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,2409701344819118527,1994841306400953196,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
    3⤵
    PID:4508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,9446007709800886975,2926552965258279257,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,7713054240668310458,11386204234304867575,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
    3⤵
    PID:5080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,16621508503535202603,3386459122663313099,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
    3⤵
    PID:3300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,10669367460407050950,17538311780836353738,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,6213624347588029868,12510615387140903320,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:14
    3⤵
    PID:1116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,9385704354907382956,7256832954634592139,524288 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:14
    3⤵
    PID:5504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6460,i,14258740662320636037,17469258788065491211,262144 --field-trial-handle=2316,i,10609854604834050116,1971940278384554944,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9de1ed2b2cccc711d34d805064286612ba41acb5150b847883a177658133e89f
MD5 e12b4491e2bb33d0714202e6f5848320
SHA1 b1602e6dd7d527d227ae2e831216e856e97b221b
SHA512 09c536d3e5898ee6bf63c6623d07116458cca094d5daa020c4750a1109492668c47dd324a1233ee5cc36a2e19d06fd85535c4904fb71d4066c978506da6dfb58
TLSH
T1C75165AD23640AF6DB25C4F390D0C4A532F645FA1E831FAA6040AD780586FD891FF8B3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598812.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598812.TMP
Size 2KB
SHA256 6271592b1acfc0ee50856056ded8f178f7c7f132fe299be639729aa93e1352df
MD5 479d2051d3fe94239f96d18d72d83494
SHA1 f254bec28e6172368462dd25ee3ee52581d892d5
SHA512 bb7e29e15ceaf7747b9385ac36fdc564166a20520aa01445d547583c3262f30c84e365d12b09ce75c2b3ba64edb186cab25a1ac3e742c5aa98de2cb20346c26f
TLSH
T1765166AD23600AF6DB25C4F390D0C4A532F645BA1E831FAA20409D780586FD891FF9B3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e53b767a7eeb5cdc85546d6191121c6249ff558c3c10cc3bbda08a09eb3455ec
MD5 c722dba39c261f474a7818469176c684
SHA1 2e0064c7f34ead79dc642c579a475c51d6c36284
SHA512 b176d8362a59728bcbfb815b46f44ff422815903e72258027eb1bf2f0530c6a9d64c25869a62a8e4817a03dadf1404319b6501f2ee60819252f75f6f1908a70c
TLSH
T160319DF783F4957E9A0192F4AA086E1FCE6D0511431C7D9AC5E49E2B93F3471E180A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 06d020b1f3937bd40a9e29c220d761e2cf07d1a533a2d955b2f0302120d1eefe
MD5 8fd43f52338c712d769fb37c05b33616
SHA1 b780cbf88088ae9fea1d9b511bbc29c77e3f1e75
SHA512 614a1bbac65feb8a48806404b3d28ae5b7f7430e1f3e30824b7fa32cd081f0d42113fe20b0616238cfec19ae38d621c399dffbbe7c316e0068592704d11c9f0b
SSDEEP 192:sxR8rC7/frscdWZxWzoA8p4r/g6+WNIYohfCY2G/IgDq49EJ:sxR8e7/frscdgxL2/5Ic22KI
TLSH
T14E42B715AD28A93B9CCBE21DBB55BF53E6F95032A0D15E48A7FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1cbe54b9d2d1da49f7b1f4cfde3b04bcde3d635457824a0af4bd6c2afd0c991f
MD5 55e89d89faeee596e39848a9ee98822f
SHA1 e1750183f4bab19995c8755a63efe9ac7e2f6cf1
SHA512 634952e6f7129b544fbc4b5038601d2dd08f9544e4ce87517effdb652d1134142d72dcca312d2fa87b4c2512202f6c8de930a4c5c103a4eac64bf7066d8c8d0c
SSDEEP 192:sxRHrC7/frsUGWZxWzoA8p4r/g6+WNIYo5fCY2G/IgV9EJ:sxRHe7/frsUGgxL2/5IQ2DI
TLSH
T12832A615AD28A93B9CCBD21DFA55BF53E6F95032A1D06E48A7FC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6803d941c3d47f9720c69f48d9848f205a333c480bab2f7b15ffd73fbeb61235
MD5 d1a6cbc7781f5b9ec8309612d19bac70
SHA1 c6c4ab77b03afd783216a8db4f50c275e95da745
SHA512 23e0957f12930fb1da59d370588cad913950a53f0ca72009851d9badeaf689b55dbc2bd02673b4e3a1eb63fc9748db3cc21674ad8b518ff7c1489194b40be8d1
SSDEEP 192:sxR8rC7/frscGWZxWzoA8p4r/g6+WNIYo5fCY2G/IgDqi9EJ:sxR8e7/frscGgxL2/5IQ22cI
TLSH
T16F32B515A928A93B9CCBD21DBB55BF53E6F95032A1D06E48A7FC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 0b9ba2dabe81469ab7b8d746a3ccd5dc1aa218095c815b79f3f5463d4ed49d86
MD5 250f5ef0f286e06863655494422aa027
SHA1 aba18951913b1b0ad6c4970b02c406fbde4c650c
SHA512 e25c5ee7e908199eba4195a5c143e652ddeefe1ebf43b9c4219a204d68f54a0195f2883930d8a9973217c8b04307f0430cd0b3546e3d4c3e62188ff15443309a
SSDEEP 768:j26H4o7pLuL7MRWgs2f028F1+UoAYDCx9Tuqh0VfUC9xbog/OVyCBVuwiro91e0c:j26H4UE7MRWgs2f02u1jadCB4w54X
TLSH
T1D0D2EA7B740DCABE4F800ADDED197E9F6D6802CB9698CD8047FE841C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c37d1613c29c8e4b39782b3782ff062b5dbda11fe4ff2f5530cf1235dca18e8e
MD5 e94f15f84876f3c9b678bfbc69d5d70c
SHA1 cd768009e0516da96405b7ed9c02fa1c5b320372
SHA512 75644e13abec6b777f8b906157075487362032cab56b846531c28d3fbf3cd274161e35f5676ad2548e5580271d1c4a9a6e8ef3f85d00cd31ab78de37566b160c
SSDEEP 768:Urv+4UNbd037n5f/TBOWhjihONXyer1IRCzni9joC:Ubsbi37ntmSIqnIoC
TLSH
T17E03BF31E468DE338CE2A396B10777837FB820A7C4C54A94E9DA1F4E059759E270F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f8d521e446f942e5855781331979a05ef1979e3d16e48a32e6114810efb25e6f
MD5 a7efc1a0a309ae579ef42ad3a49f5023
SHA1 fea7167a658b93c0c4efc1d50894e44fae3e1646
SHA512 4333bcccdd244486b60d2ee81b5b45520afdcf89039bf2bb8124832e082d6c65a27dba800413899605ae0b926c8125695ed8898786834dcbfa1e2a5ef4358a2f
SSDEEP 768:srv+4UNbd03hn5f/TBOWhjihONXyer1IRCzni9jeVH1SK3:sbsbi3hntmSIqnIEH1R
TLSH
T13913B031E4A8DE338CE6A396B14777837FB82067C5840B94E9DA1F4E099759D230F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f3f10b1c7010cfdb00f7838e08357b9d49279e1ea9f6d15403dd073be2a4b4dc
MD5 beff39f1dad91c7c15b76fdf7da4e250
SHA1 1b5b2c48b09a50fa088b2a71fb86849a631b8035
SHA512 a25aa55211ee518d4106cfff406a151f3cf1d1f9e13f742a72930f76a88d3e21ae0768079088aff11234a1232dd190c8b3579ebe4782f1e033303a145d71dba3
SSDEEP 768:hrv+4UNbdz3SN/TBOWhDONXyer1IRCzniBoeVH1SK7:hbsbV3M/SIqn/EH1l
TLSH
T16503CF32A4A89E338CE2A3C6B54777437FB86057C6840B90D9DE2F4E069759D230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ae055f16bf1a9517329e15f2c2f3fce73ff30244ce8c982cb4d86da38b08b160
MD5 24831ea29a26a3e8ee378646396b9ab3
SHA1 35002813f056ec9eb78f4ade7b0817bbdbf93272
SHA512 088eef446d3a238279d703fc987e14ffc46842648e5778177a2edb1334930ad63d0cdd7b3c906a46d45ccc8ddee80db5fed686ca870987ac37757cd136846016
SSDEEP 768:Arv+4UNbd03hnof/TBOWhjiGONXyer1IRCzni9jeVH1SK3:Absbi3hngXSIqnIEH1R
TLSH
T16313B031E5A8DE338CE6A385B14777837FB82067C5840B94E9DA2F4E059759D230F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0e53575642fbdcb0fefa424ae5c7450b3ee4957dd3d9196ccd7cfbf47a7fb813
MD5 ac270347526ed3dc22b6b1cbc45de6ae
SHA1 447b9295bf555bf00b49782a13dfe1f7c0912ed5
SHA512 87f7e81bd3450a454d9e0981ce487eb707c03d37b9018777e22c4d6099da38d7ec0697f3b27e16547ff267c6b00702fba044d74b0947feb1273f9c73b389eeff
SSDEEP 768:Frv+4UNbdz3jt/TBOWhjiFONXyer1IRCzniwjeVH1SK7:FbsbV3pmSIqnPEH1l
TLSH
T1AB03C031A1A8DE339DE2A385B147B7837FB82067C5840B90E9DA1F4E059759E230F95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e673e48203d2271a63825379ae175812ccfff81fda0fe6a9f51939553df21879
MD5 b0521212e0dbe9b9d0cd953fbfd09a55
SHA1 2724b43e058dfd5b70a4c6920d4bd2b0f27f9f3b
SHA512 2e24e1d78a243c73f48b97724537c6df8706ee9d3b4bf68a9a7e248f0993a12daf80df1b18a8190447ede309454b22b85e4385a6515776083f4cce9a263259c8
SSDEEP 768:wFQO3bwgfn5ApsOWhjiuONXyer1IRCzni9jois:jO3Rny0SIqnIois
TLSH
T129F28D76D8A4DE37ACE293C2B7067787AEF410A3C5C899D0EAD95E4D009359E170BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

520e1224-7c0b-40fa-a49d-650ed26766f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\520e1224-7c0b-40fa-a49d-650ed26766f1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1436_1692502097\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download