22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m4-eL.svg
Size 3KB
Sample260815-peccrsbl91
SHA256 22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a
MD5 ffd188160146fda63495f76c915854b8
SHA1 09601cd3c4bef976ca683b68265fc2a4e14c5611
SHA512 91a977f2fa58fe62436789064706aec5af63e3bde95527e33e5f26fad7233b1251035739ed0256f88470437cfb9aaac867f0b0f10b180955866570671e3eacc7
TLSH
T1F771388876F87EEBC7D802570D51D8B80B2F946BD422978DD3CB94D875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1368	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312696592707780"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{14B82032-5FD0-446A-B428-FACD05D061C3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6824	msedge.exe
6824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
7044	msedge.exe
7044	msedge.exe
7044	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
7044	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 6536 wrote to memory of 7044	6536	iexplore.exe	88
PID 7044 wrote to memory of 6140	7044	msedge.exe	89
PID 7044 wrote to memory of 1368	7044	msedge.exe	91
PID 7044 wrote to memory of 4784	7044	msedge.exe	92
PID 7044 wrote to memory of 4216	7044	msedge.exe	93
PID 7044 wrote to memory of 4784	7044	msedge.exe	92
PID 7044 wrote to memory of 4784	7044	msedge.exe	92
PID 7044 wrote to memory of 4216	7044	msedge.exe	93
PID 7044 wrote to memory of 6872	7044	msedge.exe	94
PID 7044 wrote to memory of 6872	7044	msedge.exe	94
PID 7044 wrote to memory of 6872	7044	msedge.exe	94
PID 7044 wrote to memory of 7060	7044	msedge.exe	95
PID 7044 wrote to memory of 7060	7044	msedge.exe	95
PID 7044 wrote to memory of 7060	7044	msedge.exe	95
PID 7044 wrote to memory of 2776	7044	msedge.exe	97
PID 7044 wrote to memory of 2776	7044	msedge.exe	97
PID 7044 wrote to memory of 4940	7044	msedge.exe	96
PID 7044 wrote to memory of 4940	7044	msedge.exe	96
PID 7044 wrote to memory of 6508	7044	msedge.exe	99
PID 7044 wrote to memory of 1224	7044	msedge.exe	104
PID 7044 wrote to memory of 3092	7044	msedge.exe	105
PID 7044 wrote to memory of 3744	7044	msedge.exe	106
PID 7044 wrote to memory of 1184	7044	msedge.exe	107
PID 7044 wrote to memory of 1184	7044	msedge.exe	107
PID 7044 wrote to memory of 5212	7044	msedge.exe	109
PID 7044 wrote to memory of 5212	7044	msedge.exe	109
PID 7044 wrote to memory of 6824	7044	msedge.exe	110

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m4-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m4-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:7044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffb88b1c188,0x7ffb88b1c194,0x7ffb88b1c1a0
    3⤵
    PID:6140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2120,i,9814332892629465975,15025981717928918839,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1932,i,7073014764366147237,7284723007617302451,262144 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
    3⤵
    PID:4784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,5811642389729010904,7542935157927314710,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:13
    3⤵
    PID:4216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,2613329184504842542,15461888231920378175,2097152 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:6872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,17472981649825928773,11248397346645810470,2097152 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
    3⤵
    PID:7060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6963882634548618366,907284211703437552,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:4940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,9323276805989434522,17271362673603231291,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,1736002117219036102,15345384177209821721,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
    3⤵
    PID:2912
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,1736002117219036102,15345384177209821721,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
    3⤵
    PID:6508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1268,i,3646685720137023433,18342080982835961239,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:14
    3⤵
    PID:1224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1272,i,12227980691358656682,6217613063904613244,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
    3⤵
    PID:3092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,7267977066866850701,323947561756954215,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
    3⤵
    PID:3744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,8406467942813328074,10163165138591990377,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
    3⤵
    PID:1184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,5203881394789322384,10966925882660709204,524288 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=920 /prefetch:14
    3⤵
    PID:5212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5976,i,5277113288240351240,3450214484404165374,262144 --field-trial-handle=2764,i,6576975525452052200,3060761920902301000,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1148

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 26f154a0ad6ae926976d5b84222ebf83b85962a729acb046c0cc24fb01781f5e
MD5 67f2d77659c6f5f31472ad53070acf6b
SHA1 21a143b4ba94c3525ec2a48b64e0bd8e51727cef
SHA512 6b78f92212e903ee9a67673539e11792a402d5e8791575c36f4dd8d1a5dad9df97569e4d65045ebb41cc21679696cac30d8155974595784ae32724b19e9a00bb
TLSH
T189E0DF5442E6CDA49ED29647E0B4B2364F52BEEFF29CF9BD32487B8C2490020D39B0C1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ed9213056ae74bab1723509a60f5bff2d26eb586bac34d2fd71f1ce6e2853860
MD5 a743c3d6de41ca00ccb2cafd2fb5884f
SHA1 f457b825e75a96a9d306a3be49238c0b20ec0e44
SHA512 7edb56dd603f7d38bf5dc4235910af5ad8db833164905db50591542be6a6f2b5ddc6d59e79a0b535a1ab59473a1802e677bd8870886ae79d59bdbf14a68a774d
TLSH
T1B7D0C2A8A8ECA94ED6E409BE97A5F0100F6402820416DA120160F9C136A52E41BAA020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6fcef18db0a03fb8023bea798c0242159bf17ba7cfdb53319979c334243d0b2b
MD5 cb3144cfb103a08ba71b1395c7d53536
SHA1 a0c2884585d0704f870d161678277b5658e5f169
SHA512 e0927c44239634bcd133b76412492d09a02ebaad75344015976474e965cba3a5035bb60bc788bbd30d32e653c8c32f26788279ee902c2ca2ceb24d119ca0bc21
TLSH
T174E0E555C925AC2B5DFC5B686064464AE754132B3A40880B3B3C822C8FB463B828685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3fdbcf8f0d750e94b2c7aaddec09d6af5c5b9e67eb8864b729440194c4699214
MD5 4fb5ae6f6ed6fef87a658bfb3f77acf5
SHA1 b513b8a609bc3f3fe5d1169ac4dcd34bc112ad13
SHA512 8bf33d0d61107fc4efd8e55a6ee2da8a39dbc1c96a527991a7a7e0b0e3c0e7c753cbd33bb28dfc4e53b274682dd600f5d6b6dc5f9b644bea01e611867e9f9d0a
TLSH
T1F341CFF783F4857EDA1195F0AA186E2FCE1C0514432C7DAA89E0AE2793E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d7c86eae0d5715d61df4a69aa2411dea361e0f10406ea1d0f76a0dd2ead0080f
MD5 039d5eee00f7764a039d910c812cfb87
SHA1 2d9d8732d60fa940f35867a67fcdb3406914270d
SHA512 1bfe05b9f214e58a158dea9201f43eaecde46ded627d8d61489460b1d154b1a39e6a107cccdf07c01d189d2b2da1b51194be722e5defb6d4da403b3dd5bb2ae0
SSDEEP 384:sxRyh83/fdsz5tN/RIjM/j/5IW4tsGQuWjQ:se+3/f85vWuj/5IW4tsGQu7
TLSH
T15672E9156A249D3BCCDBD219FA557F93D7F81173A1905E44AAFCCA0C04EAAEC210782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 344b2886f46cb06b5fc3be3de7d711bea22bad24fdfd5da71ae22c2713692025
MD5 edc31d718c0355b285e1d9cff60410f6
SHA1 7c78b5bac9029a716ca44fab39cfd02757d0dd2f
SHA512 83c0de7a3b844d5e4c2734e707b5c15df2ae8fe02777008c0ee29463ef6b8ff40a3f8252c52bdccea3482507009cce4cb35466f4c801b4b6ab0a1ed0ac100ebf
SSDEEP 384:sxRyhqY3/fds/54N/RIjM/j/5IW4nusGQuWA5:seoY3/fc5iWuj/5IW4nusGQuz
TLSH
T1B672E81599649D7BDCDBE219FA957F93D3F8112391905E44AAFCCE0C00EAAEC210782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 72d99b90d9eae481e1e2da2749eb154370d7ea74e67d45f468d2b26f93206c3c
MD5 124e92aa1658506c1cb8f41edd19bffc
SHA1 64b5902d669411c45271027f6f262e6728ccb7d3
SHA512 c6787caf1ee18bdf0a089398f8adb1f920e8503d79ec657882d58c30d744cbbbfc7311f9350be0e792f773205bcc6d09bc3cfa366d679ede54cab7ce4cb99403
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDobbDwzroi4w:Ob4YZnE7yTWg1NfwBu1jasobHwANw
TLSH
T11CE2FC3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d8907507ff24e27ed2f99e71711d8a532e5a2051781430db1fff9568c47020aa
MD5 a1665a03a622f457a4802e97801b0267
SHA1 638ebac8d3149462764fc142820dda8397a0af90
SHA512 1e27bf795410032a4f24eca5c8be4f1d0271d69e3f3ae6b8cae93984a10c6f2bdee8e3badd92e5b5d9a0cef3ac51f87520336af498c22c6d63d11a0cc4eaa0a0
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9h7y:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRV
TLSH
T1F8B24A11713F4680387EB91C81B8981ED6C2B4A37419E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 e51c7739d0af68fa49ee51909a5b806847e2516391cd5438cabbc9afc5ad4829
MD5 b9dd89dc9bd068ffc12c1f57a0749f1c
SHA1 99ee41275c4d825921bd433ea1e9743f740f069e
SHA512 d78d20d19efbb39b382db4fa9d2f08e51338dc4123a4ec0947f50a7a1284483ab1326ddfa6f4fe6dc7cdfc5b0449c2b5652fb6ef0d9df0e7fb249bb9420a8a25
SSDEEP 384:nhiF1tNn/s3n9Sn8Ngc8TUNTUlIRiPvuTuuREqfbYG8oqHLEOObjI9G6w7aijh83:IF1j+9SXcwgUuTUG8DrE29MaWa
TLSH
T1C1C25A36DC55CEB7ECE64F98B74A7A56EEE0126385D85AC4DAD81E4C00C72ED4307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 49ad1896d28c58fc0acb374b09e030f2677cff4fef7e9c42b1caf2d5357180b6
MD5 300589f05423748e25fea07793ed5096
SHA1 da319e131480aa98acf13e01f328da243cd9dcc3
SHA512 11a18d775688464b80fdb8b56938cea2047cd69b07ce720800d246e128a2379f2b4b97127ecdd2458e9b8c2cf0ffd6feb43bd4b2238eae56f3b88b72a23cf3d6
SSDEEP 384:nDiFiZcIP8NL88TUNTUlIRgPvuT5RtEqfbYG8oqGqrIKQOOPrXLpe8C/S8LEEIzB:uFQPQ8wgCu7YG8DGUdQOi9PN
TLSH
T132D24B31D8A8CDB7BCEA9F95A74A7646DEF41163D4CC8AD8DAD84E0D00C759E070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 8788467bfd443360b0db6db5c0f28e4347b6587ae762e6159db8b7b12383bd24
MD5 0d5f79568dd11cd9a3674f5da1e3477b
SHA1 9dc5770ab57a812719fa99f5e6a42fcb2ad3248d
SHA512 93a641dfbd4a98bb359a9d1211bc6305fa0fdcb44beefb3d7aaee114f3bae809b89ac93721bbf9f59bcca33a5366ebc5bf6e029caab3c486fe444cffe8acce00
SSDEEP 384:nfiFiZcIP8NL88TUNTUlIRgPvuTtRtEqfbYG8oqGqrIKQOOPrXLpe8C/S8LEEIzB:qFQPQ8wgCunYG8DGUdQOi9PN
TLSH
T160D24B31D8A8CDB7BCEA9F95A74A7646DEF41163D4CC8AD8DAD84E0D00C75AE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7d68e105366969ce2db36372af6d01312f4777b443285e7604bf2989aa77ffb2
MD5 188c082e359321f6c78591c0be53b53f
SHA1 f5b237d1524c3fc7645dbbf7d217b80cfd944575
SHA512 178aa4ce88af8bca05685f195f5a820997c82f83c077d27d5dd1e8ae09c16c1c340eceac8686afc17d24f3bab5f46e1ad4174842d7c6de7843bbd9c5e4df6d2f
SSDEEP 384:nQiF1tNn/s3n9Sn8Ng88TUNTUlIRiPvuT7ntEqfbYG8oqGqrIkQOObjI9G6w7ai+:rF1j+9SX8wgUuPYG8DGUBQ29MaWa
TLSH
T152D25B32D855CEB7ECE64F98B34A7A96DEE0126384CC5AC4D6D95E4C00C76ED470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e5da9be5cb4a2bc9b9d511e4f9f8e73125540f758800cb8d3609128e68e4e76c
MD5 3ad0ba2e1de07f78443877f1fdf86f40
SHA1 ea6fffc6b2351a43c52a66719a34b503133962fa
SHA512 ce3608a4afe7300e388e07429d6d7e24fd5ed91ea9fb13ae93a901fdf098d9d84399c0970ef4bffbf938b2a51af66b79188e82460b922ad436d7fc965ddbd475
SSDEEP 384:nFiFiZcI88NL88TUNTUlIRgPvuT5RtC+if///k8oqGqrFaQOOPrXLpe8C/S8LEEG:MFQ8Q8wgCu7VOk8DGUQQOi9PN
TLSH
T18ED26C31D898CDB7FCEE9E85A64A7646DEF41263D4D88AD8DAD84E0C04C75DE070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download