22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m4-eL.svg
Size 3KB
Sample260814-pc72nasfld
SHA256 22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a
MD5 ffd188160146fda63495f76c915854b8
SHA1 09601cd3c4bef976ca683b68265fc2a4e14c5611
SHA512 91a977f2fa58fe62436789064706aec5af63e3bde95527e33e5f26fad7233b1251035739ed0256f88470437cfb9aaac867f0b0f10b180955866570671e3eacc7
TLSH
T1F771388876F87EEBC7D802570D51D8B80B2F946BD422978DD3CB94D875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_1236515711\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_1236515711\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_2114374061\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_2114374061\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_2114374061\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2308_2114374061\_metadata\verified_contents.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5712	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311831392342204"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{FA7CDD4B-3B82-4A22-AD79-C3D5C22FD709}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2308	msedge.exe
2308	msedge.exe
2308	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2308	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 3324 wrote to memory of 2308	3324	iexplore.exe	90
PID 2308 wrote to memory of 2632	2308	msedge.exe	91
PID 2308 wrote to memory of 4252	2308	msedge.exe	92
PID 2308 wrote to memory of 5712	2308	msedge.exe	93
PID 2308 wrote to memory of 4252	2308	msedge.exe	92
PID 2308 wrote to memory of 4252	2308	msedge.exe	92
PID 2308 wrote to memory of 5760	2308	msedge.exe	94
PID 2308 wrote to memory of 5760	2308	msedge.exe	94
PID 2308 wrote to memory of 3592	2308	msedge.exe	96
PID 2308 wrote to memory of 3592	2308	msedge.exe	96
PID 2308 wrote to memory of 3592	2308	msedge.exe	96
PID 2308 wrote to memory of 1952	2308	msedge.exe	97
PID 2308 wrote to memory of 1952	2308	msedge.exe	97
PID 2308 wrote to memory of 1952	2308	msedge.exe	97
PID 2308 wrote to memory of 2428	2308	msedge.exe	98
PID 2308 wrote to memory of 2428	2308	msedge.exe	98
PID 2308 wrote to memory of 6088	2308	msedge.exe	99
PID 2308 wrote to memory of 6088	2308	msedge.exe	99
PID 2308 wrote to memory of 4764	2308	msedge.exe	101
PID 2308 wrote to memory of 5496	2308	msedge.exe	105
PID 2308 wrote to memory of 5396	2308	msedge.exe	106
PID 2308 wrote to memory of 5056	2308	msedge.exe	107
PID 2308 wrote to memory of 1684	2308	msedge.exe	108
PID 2308 wrote to memory of 1684	2308	msedge.exe	108
PID 2308 wrote to memory of 2924	2308	msedge.exe	111
PID 2308 wrote to memory of 2924	2308	msedge.exe	111
PID 2308 wrote to memory of 1764	2308	msedge.exe	112
PID 2308 wrote to memory of 2044	2308	msedge.exe	113
PID 2308 wrote to memory of 2044	2308	msedge.exe	113

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m4-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m4-eL.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x368,0x7ffebdbcc188,0x7ffebdbcc194,0x7ffebdbcc1a0
    3⤵
    PID:2632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,712293101747129981,17707952138150002072,262144 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,8413358924353111354,5864251742733146994,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,2087735447849006123,18204881869772407471,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:13
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,12588325331577850870,7895133848537382578,2097152 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:3592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,8509833245094010938,15678737246500497457,2097152 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
    3⤵
    PID:1952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,7882321787638528416,859076407102869546,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
    3⤵
    PID:2428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,2532194622093863386,9172546197918931761,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,6722559185149438509,13915126513485379976,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
    3⤵
    PID:2056
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,6722559185149438509,13915126513485379976,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
    3⤵
    PID:4764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,698195520835126423,4736292377781911761,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,12891911236181904420,14000665428163476841,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
    3⤵
    PID:5396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,2197914339769949042,5555684228555031614,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
    3⤵
    PID:5056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,16887481812594887961,3055137998615595464,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
    3⤵
    PID:1684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,7359168937600137184,13578889032761706931,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
    3⤵
    PID:2924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3396,i,17915243358424180406,8604495112091753067,262144 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,7753213937387452145,1500732543787925114,524288 --field-trial-handle=2328,i,15141148653051071259,3918979428077151149,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
    3⤵
    PID:2044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 27651eada16962cb9cc1e7ccc2d48126f9ec9b5f64f3215de81453c37de92bd1
MD5 804bebbff5bd61e8dab29bf24679160b
SHA1 ab42a2c962fc8eb779346d882db0644db0ae4fc3
SHA512 128562366730a21906ebfc560e740d8c64878095cd9b7c9a74298bfd56386c7b8c2e857785d8111171179cfddb11c2c04b9324d3aa17f7dd9b0e8e770e852065
TLSH
T15BE0E5A5C920B82759F89B1860954647E750135B3B50994F3A3DD12D4FB063B468685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ee1195137ab881d15839875ee8917e16e6a60563b4a26b55a15986b3eff94913
MD5 8cb2f7fc8394cd6d5014b2776878445a
SHA1 32146a1580fceeaf8a62f0a63a92cce8083d32cc
SHA512 3aa17c333e8269edcc4e0f53181c80028c22160bfda0dcbd4ea13a40ed8da517a285afb83dd825b9029ee47e59a7639d7d5cd49465782f8ed3aa2e948d6b087d
TLSH
T15941B0F383F4856EDA1195F0AA186E2FCE1D0515432C7D9AC9E0AE1793F3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 4df798e4d8fe68fe6942acd88a8b3a5a3aea41bdec937358b6dd449ab07d2317
MD5 844383be4086a9a501cf0cc3cddc2acc
SHA1 33d8bfde8517e99c305299a384cc2b70b9ca79ef
SHA512 d7c21fc89fc9bf8fa952047d54be9e60fabeefbbd568f452a8b5e86e01790fbe26ac4d65066cac8bb57e47124bd6a4bbcf8c23f2f97fb5d7d99fd9c315c67f8f
SSDEEP 384:sxRfPqAe/fRsPeN/RI/GF/5IW4ksGQ1ZBO:sryAe/fwsWY/5IW4ksGQ1i
TLSH
T19772E9159A289D779CDBE219FA557F93D3F81173A1905E44AAFCCA0C04E76ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 91d0c359c4586339a8fdfc75a9fda50ed9f5a1cf97b3031d137e2883fe50512b
MD5 10cb5287d54874705579266586608d80
SHA1 8e5a0e4f8bca60a97c662787c48d820fbe38e83a
SHA512 fddb29580e26d93291089f3eff4bb225cd82e3b96d2491f44add2b5a5e6d015aa04a3ef54e6e8345e727567714c9cfdf0197ead73125875e9385402eb8d1750b
SSDEEP 384:sxRfP8e/fRssHN/RI/GF/5IW4XsGQ1Zjv:srke/frtWY/5IW4XsGQ1V
TLSH
T1C772EA156A349D7B8CDBD219FA557F53D7F81173A1905E44AAFCCA0C04EA6ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 c1c439ac01c41846ef47560092605e2e1f95c6ecf02beb633d00326889a5965c
MD5 a554017ed967074ec6a12499a3fd9521
SHA1 f906835db53bda6ffc0add180b87a3aeeab6fcba
SHA512 4d77f956462df7177c4cec027877f6ceaf9e4bf6f0a599ebee8c928f659eb4d6ea79a25bd19015f789a8eda7a1eae50ead7da3505839d2061194e35c69cfb2f3
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkobbDwzroA4X6:Ob4YZnE7yTWg1NfwBu1jaTobHwAXX6
TLSH
T1C1E2FB3B280CCB7E4F804ADDEC29BD9A6DA8018F5AD8C95447FA850C03C6BFB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 eb31699066635db92071a005ad640b5f701b03fb7b311c873c1f81278622c641
MD5 cf7e6605749d627c23987f555441e4c7
SHA1 a2301930941f14e81f591022273eb3adef755967
SHA512 bb6af0fe83db4dd4137ab40665aded7048564a9622bdb4131cfc8c1ba11def21ba4e283f1d6089e703b66e2dbabfaeba58945a631364a184b34c8326934e9e2f
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9V7y:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRB
TLSH
T1B5B25C11713F4690387EB90C9178981F86C2B4A37519E52F7BA801A65F67E138DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 c29523e46c5bb2742847650789797cad2c0172065bd8348d7a31284086fc4cb6
MD5 2158f2833500518f05637bd72352c2e4
SHA1 ba8aa946b48c9376cb82ad68a8e46a37413f39ab
SHA512 660edaaee8939c0242c7824e27d1113aa465d298c7a7f49be807c1cda9efb4020119ebecbef7f5a6aa72163095ef232558afa5029145306a91b126b77895ed28
SSDEEP 384:n5iFiZcIR8NLg8TUNTUlIRLPvuTbkLueffoGGBxiYSzv7/m682NVOOPrXLpe8C/t:QFQRQgwgpuMpGBkzjf8IVOi9PtS
TLSH
T12BD25B72E864C9B7ACEA9FC4A6497647EEF411A3D4C89AD8D6D89D0C00C75DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e7595a5e13fd1166cfb0c9b1c4ede29db7be93c44478c50b48c12b2d69e80da1
MD5 b6278cf4cd75a5d21c5f1c3918456f29
SHA1 9aec8477ef584f12c8dd09e7bc9bd5e247bbabf9
SHA512 9f52d3e7d75c505d06e5711671474713b408c356b8f4086b10818485f51c5af66e99cabefa762af6bf6538056cd6aaae049747b07b9a9b8ed68af3e24ead6e0e
SSDEEP 384:nAiFiZcI/8NLg8TUNTUlIRLPvuTbkLueffoGGBxiYSzv7/m68r5VOOPrXLpe8C/t:bFQ/QgwgpuMpGBkzjf8tVOi9PtS
TLSH
T128D25B72E864CAB7ACEA9FC4A6497647EEF411A3D4C89ED8E6D89D0C00C75DE0707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 736b33ebe3556ed73ec79d1102c2e1741cf7a2eed9f54ccc16bc934b7d655bd5
MD5 2fa273b03fa3322f7aac1b97184f735c
SHA1 0f7e3a21cffcb4edc21267d03a8657ec66e145e8
SHA512 8307a4eb7124040aaf81fa41f89734a151a753ccdaa556a117601b6135d2184653a6963635ce6d878c7b0e1beda7872153b52495e9f37b068dd2bb57a26bb596
SSDEEP 384:nbiF1tNn/s3n9Sn8Ng68TUNTUlIRiPvuTuIReffoGGBxiYSzv7/m3LXOObjI9G6n:2F1j+9SX6wgUuV6GBkzjaX29M+
TLSH
T1F1C25B36E855CEB7EDE68F98B34A7A4AEEE0126781DC59D8DAC86D0D00C71DD0703C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7356d645d0b159ff91d4dcae332dacad99319428d5a45579235544bb603d2392
MD5 f4755a42da92134e7592589d4c366825
SHA1 9568b596362808843efb573cc56dbf0334836cee
SHA512 5995895073362a4567ed6917eab5fe2ac3bee07c0e1e1be1337a1f8acd6d9799f3568303126805b7be8ff06652af91311b896fe1292294b3c03c8bcb8135369b
SSDEEP 384:naiFiZcIR8NLg8TUNTUlIRLPvuTbkLueffoGGBxiYSzv7/m682NVOOPrXLpe8C/t:RFQRQgwgpuMpGBkzjf8IVOi9PtS
TLSH
T17CD25B72E864CEB7ACEA9FC4A6497647EEF411A3D4C89AD8D6C89D0C00C71DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 88543e1384f7077ab133324f40dae096333315349d6eaf6ec673d68a8ddfd0ed
MD5 a16483d1b774b58b8bbe7b2b46d61b74
SHA1 dd2b22114fa47f89be93d9ee4956ab110a122cbc
SHA512 344d942746f1f1db62f7cd9a077f3489c1540564ed311216e986905bdb7f6991b61a1f3803a6c3d793e4cd412aec04b71950ffb154b0ea9c3ef09734d2ceb292
SSDEEP 384:naiF1tNn/s3n9S78NLg8TUNTUlIRyPvuTokLueffoGGBxiYSzv7/m682NV5R8LEV:RF1j+9eQgwg8ufpGBkzjf8IVx
TLSH
T12FB23A32E855CD77ACEA8BC8B74A7686EEF411A384C89DD8EAC85D4D00C72DD170BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bb79b924157ad252ce90a85d11aac718293f8e96257bfe6f86a2140accd08e71
MD5 a19d77898f6a054f1934682947f7bb49
SHA1 abdebd4634624d934f8137179b71fd311f83eecd
SHA512 14bbce9dfbea4c6adf0f7c2d2bce3979055be34cfb2ef871dbdceb70fe7596c65d6fbfd4af78d2051abb82d9531ee292f8d1416d6fd1fccf1bbbe3d9afabb817
SSDEEP 384:nwiF1tNn/s3n9Sn8Ngg8TUNTUlIRiPvuTWiLueffoGGBxiYSzv7/m682kVOObjIH:LF1j+9SXgwgUu3pGBkzjf8/V29M+
TLSH
T185C24B32E855CE77EDE68B94B24A7A8AEEE012A384DC9DD8E6C86D4D00C71DD0707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 88b3706ce4342b3aae7d2cae689c67c2cc08cc1a82142aa2d20765799b16782c
MD5 1cf92343660e419985e1ee9a56e1b79c
SHA1 105e58795c48de5277ec4c44cbb1ac8248156763
SHA512 0a854f9cbc87a8e3afc56c0a64009556539cf225c40fcd54fff94972acc71aa5f43478999b3a8fba3dbb98506752e8f292527efe7827ec2f4f4e3f232ed3ff50
TLSH
T1CE3121E08C391AC1D4BE0DAFB44B25FC94E89326F5D034386859ED68967D65E354087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 004caaa21520df5124231909d0fcb3ce34b8499f4a23c1639b90c5aae94a17f5
MD5 9163faae5844d6e074a89c9d923d519b
SHA1 46c1227e4e137de9883d55e07f11326ad7f7bd98
SHA512 c0c6aa4a7b4abc7fb7fb64051fbcbd46a5462fd373d0cc57d70c41fa2a88b84f3356852aed80ad87cddb6cfc324d8314df79d41a97bbacd924df93263d1316e6
TLSH
T1973141E08C3D1AD2D4FE0D6FB44B25FC94E89322F89434386858E968963D61E354083F
MD5 SHA1 SHA512 TLSH

Submit Download