f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eM.svg
Size 3KB
Sample260816-eajaeaygkd
SHA256 f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab
MD5 40ed26c24cc55b701d2198147f4dd511
SHA1 be79a6dd7f18c178a4419eb98dd433ab090071d7
SHA512 6640d83ea0c3300598f061d3914e839c94e0dec416692dbed5dc1e857898e7467011e2e986cc39131cb59505b3705d679faa8e61cff117e12fc356edaceed39e
TLSH
T10271378876F87EEBC78802970E51D4B84B2F906BD822978DD3CB94D8792C2AC735D570
MD5 SHA1 SHA512 TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1746264443\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1929614054\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1929614054\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1929614054\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1929614054\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5224_1746264443\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4896	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313254606813613"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{0403E905-6A8C-4733-BBF8-FB7AB1AF82FC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5224	msedge.exe
5224	msedge.exe
5224	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5224	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 5224	2428	iexplore.exe	90
PID 5224 wrote to memory of 6548	5224	msedge.exe	91
PID 5224 wrote to memory of 4896	5224	msedge.exe	92
PID 5224 wrote to memory of 2540	5224	msedge.exe	93
PID 5224 wrote to memory of 2540	5224	msedge.exe	93
PID 5224 wrote to memory of 2540	5224	msedge.exe	93
PID 5224 wrote to memory of 5064	5224	msedge.exe	94
PID 5224 wrote to memory of 5064	5224	msedge.exe	94
PID 5224 wrote to memory of 5948	5224	msedge.exe	96
PID 5224 wrote to memory of 5948	5224	msedge.exe	96
PID 5224 wrote to memory of 3548	5224	msedge.exe	97
PID 5224 wrote to memory of 5948	5224	msedge.exe	96
PID 5224 wrote to memory of 3548	5224	msedge.exe	97
PID 5224 wrote to memory of 3548	5224	msedge.exe	97
PID 5224 wrote to memory of 5580	5224	msedge.exe	98
PID 5224 wrote to memory of 1812	5224	msedge.exe	99
PID 5224 wrote to memory of 5580	5224	msedge.exe	98
PID 5224 wrote to memory of 1812	5224	msedge.exe	99
PID 5224 wrote to memory of 1612	5224	msedge.exe	101
PID 5224 wrote to memory of 5668	5224	msedge.exe	105
PID 5224 wrote to memory of 2536	5224	msedge.exe	106
PID 5224 wrote to memory of 3416	5224	msedge.exe	107
PID 5224 wrote to memory of 828	5224	msedge.exe	108
PID 5224 wrote to memory of 828	5224	msedge.exe	108
PID 5224 wrote to memory of 932	5224	msedge.exe	111
PID 5224 wrote to memory of 932	5224	msedge.exe	111
PID 5224 wrote to memory of 2332	5224	msedge.exe	112
PID 5224 wrote to memory of 7032	5224	msedge.exe	113
PID 5224 wrote to memory of 7032	5224	msedge.exe	113

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eM.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x30c,0x7ff8eafec188,0x7ff8eafec194,0x7ff8eafec1a0
    3⤵
    PID:6548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,1557266293751441531,9809104444014187025,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,13248058395634481093,17427908047394197748,262144 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
    3⤵
    PID:2540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,4833967846846553915,15494974354402609811,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:13
    3⤵
    PID:5064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,14982560532616169012,9766553811222031075,2097152 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,1297350045326093138,12776248985264923350,2097152 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:3548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,1731592695658098527,1223308432069958873,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:5580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,11599929346173400562,7459984735790215960,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
    3⤵
    PID:1812
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4744777128086315417,10898489761012314682,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
    3⤵
    PID:6332
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4744777128086315417,10898489761012314682,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
    3⤵
    PID:1612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,5358554411463694208,16895880450588786908,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:14
    3⤵
    PID:5668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,4651618801007827375,5434274205173561394,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:2536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,795185433721475424,12432861600277779700,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,12028213616591084451,10072919619736282989,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
    3⤵
    PID:828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,9236616093550337267,14044106185153723072,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6024,i,6636605046451927694,15110333720265212524,262144 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,16832498048602484088,12346429725878442940,524288 --field-trial-handle=2612,i,12829075727591839629,12449524072915682132,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
    3⤵
    PID:7032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0f89c84a027d8c22f76b72a43623e1ac2e11c296bade39c35835af6907a82175
MD5 b11d6079157e480360fe8611080cf737
SHA1 00643f23acc3f7314e5d8cc40529334f0eb7d73f
SHA512 a45a688eb7e295da308d96accb7ab7cacada27bfbd6f8507b147bdf4f81771f392261b530c7c8ea24af521b180f6b100823a06633e7aa94080dac75ff83e2aa3
TLSH
T1B3E0E555D820AC271AF82B186054064AE740131B3A40984B3A3C916D8FB0A374686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 badaa57dce0e21483f3e7ae48fd6af3083d4ad70bbeb404cc801f897cb0aaed8
MD5 f3930d17441496f34d21572182d79cc6
SHA1 386aecd2b45e00c24c9e681c0524b96c2aa441e6
SHA512 92cf30b5aa602e5df80b1242a4fbb141d598a55568f8953d260498c0bf13da4f7b59b49ab43e3c908dd018f86f963851f658dda57935e0989466dc1873cd261b
TLSH
T1E041ADF383F4856E8A1196F0AA186E2FCF2D0515432C7D9A89E0AE2793E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ffab7d4b6fb3e32daa4e9db78757baa990d977ac3972cc681f8e7ebd5af812be
MD5 319b34a6d1059ce043d096cf11f387f2
SHA1 935642ea60a89621a05005d711da86f8f27f8728
SHA512 44123771b48372341679076d7d0eaab42f4cb7547fe59c05f277684f1066186a6e57493ef338798d54ca35ae01c44dbab614d5959a1c8068623e745bcd65f781
SSDEEP 384:sxRlh8m/fSspHiN/RIL0E/5IW4MsGQyjb:sZ+m/fHgWv/5IW4MsGQs
TLSH
T14172E815AA349D378DDBE209FA557F93D3F92133A1505E44AAFCCA0C04EA6ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 3de26ea8c9e2be65dab369a6d786af9b30bf914a902a106ade44e4a5b7820ed1
MD5 e77b3318227218c5aafe94a99945519f
SHA1 eeda89b7ce80480783997aecda260002c505ea3e
SHA512 dd0166158b3d63277d8d6a58938b32339d149e2ffcc68aba1c2fcc8f638330862b5dfbb9d0ac6de57af7f3ee2d35acc4ddfa53009f1b5b0dab0d1a1d972444d9
SSDEEP 384:sxRlhqrm/fSs7HUN/RIL0E/5IW4CsGQyZG:sZorm/f5+Wv/5IW4CsGQv
TLSH
T1BC72D715AA349D779CDBE219FA557F53D2F96123A1501E44AAFCCA0C00EB6ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 3f72ef00d891cf57eea8758cedf5b5949a8cd2c16dea13ea9f22375f012f061b
MD5 38c373e4caa4b9c2537111d80b8bd578
SHA1 fde826190649831536d0f9bfb3e58dde65ab1f3d
SHA512 6eb9bb11301f2bb3a46079158270f7b72e6a21af10531a30d496c965038cabeeecb4ded317c87236b23f9df25f7f914bce216f1b0da97c2f66670360975ca3c4
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVoobbDwzro/4i:Ob4YZnE7yTWg1NfwBu1jaPobHwAwi
TLSH
T164E2FC3B280CCB7E4F804ADDEC29BD9A6DA801CF56D88D5447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 82652410f60f514d8f02bfc32e9751a60184756e2d31bece29ec0595b5fb389b
MD5 4a5aa62676c77599ec7778034a464f6a
SHA1 2f36ae7cd19646badff5693c7d5795ebdf6b20df
SHA512 38df03b3f5773ff23789d71b75457da5a17c09228ed10b08bb3ea31d45ef1c8813e84eaa0d05d40fe1c8a0ab77f70c7d176190f79ecafd21b68f4e45a30a211b
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9fFp:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRO
TLSH
T1BEB24D11713F4680387EA90C91B8D81F96C2B4A37519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7b6f95672daecdc8a387d92db61703e0995d7329d98e939fd6381f78390d8c70
MD5 427f49acbb77e62d931e96c61abdcc73
SHA1 cfd95642cf6cd923b7be1f07024b8423a97d6c8d
SHA512 40a895a2165f8d0ffc6c925255f4b7330218c4df018a9d7903aa1ac42770dce474a08a029565ceec64e0516650866f64dd2f53e57a04b13f1e13bb09668f07a6
SSDEEP 384:nTiF1tNn/s3n9Sn8Ng28TUNTUlIRiPvuTHXXEqfbzG3+3YEi3r7kpQOObjI9G6wa:+F1j+9SX2wgUuLtG3yYEMopQ29MW
TLSH
T185D25C36E855CEB7ECD64ED8B74A3A86EEE05163888C5AD8E6D85E4C00CB1DD4707C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d50df5fdf43f5c40954cc74fece28de779413f1886f715d4d4dfd5ce87056f33
MD5 e94eb3b7334b6d1ddd44579731e35f01
SHA1 ebd2ffe9ac60cabc2cdb86f695ba6df53443d5b3
SHA512 d7a738734283e068b6a36d90150ed1b9bc24cf3d8099519c9c7d2bd1386048a2833c46fb18b1cb0856607367e5021abaf859bd875efe18ac5f0593e1b1dfddb4
SSDEEP 384:n6iFiZcIZ8NL28TUNTUlIRsPvuT4lXEqfbzG3+3YEi3r7ipQOOPrXLpe8C/Q8LE4:xFQZQ2wgauitG3yYEMOpQOi9Ps
TLSH
T181D24C31E8A4CAB7ECEA9FC5A74A7646DEE45163D4C84AD8D6D89E0D00C71DE070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 0b019045252f87364263783d8ee141eb27908e266e5edbf0affe295894efdd35
MD5 15be32b17176f999fdf6261fdd0112b2
SHA1 4fd40b854c68878a469d39c3acc0066b2fcf8dbf
SHA512 e748613dc84c2616f893f5fd6799f544271f70b171b84514e6017f966efd6144f0eaff0ce6e2df8d812f63a79eccdac8a7a1269528712db5cc9dc66f94e2fd45
SSDEEP 384:nmiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTuSREqfbzG3+3YEeLnOObjI9G6w7ZV8p:NF1j+9SXswgUuNXG3yYE8n29MW
TLSH
T139C25B36E859CEB7EDE64FD9B70E7A4AEEE0516384985AD8DAC85E0C00C71DD4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 9ee0c2ad2af121d34c9944aade448bcdc2ecf715455487d76ea6ba417f43d925
MD5 64051825a822cd7f92cf1f2f586b7966
SHA1 106461dd02e83214883176eb3088453b1587e51c
SHA512 2ad6ac99479526cf18ea167aa72b895e708d393c315544179fff6393d66ac2f104647013f49a9a0c7a65a53754f4bf92c770f8e06a66100e9e9e2fbb02224cdd
SSDEEP 384:nCiFiZcIZ8NL28TUNTUlIRsPvuT4lXEqfbzG3+3YEi3r7ipQOOPrXLpe8C/Q8LE4:JFQZQ2wgauitG3yYEMOpQOi9Ps
TLSH
T138D24C31E8A4CAB7ECEA9FC5A74A7646DEE45163D4C84AD8D6D89E0D00C71DE070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 b9b246c3a1c00a645d3e256fa33697f75514ed7d383cd296f5d6543e6c29ac00
MD5 ebc96d55cd9176383d77d9de509dcd13
SHA1 6a07d24ef3363b0f610123257a8cd72cc1683b30
SHA512 3c9862a3f3e90522f6db41061b9a138c7b612e5a669d2ba6f4c42ebf1a094ed975f51e3c76be7878e7b76793d266d5fe447b5d78f74b13586859e63ca59f142f
SSDEEP 384:nkiFiZcIk8NL28TUNTUlIRsPvuT4lXEqfbzG3+3YEi3raCpQOOPrXLpe8C/Q8LE4:/FQkQ2wgauitG3yYEMLpQOi9Ps
TLSH
T18CD24C31E8A4C9B7ECEA9FC5A74A7646DEE46163D4C84AD8D6D89E0D00C71DE070BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 bc368092927f9f8ba781bb512f99ae859cbf78a49f9c9a33c443799e059da0c3
MD5 64a3834ee44d9de588c3cebaa9f3a7f2
SHA1 6a0cf1ffb8ca66033885c133648142344e2e77ad
SHA512 ae9c4ab5540b0f61a28177e4033e3f474789b703654cbeb5ea597a426d9ed9039c96149ec9adca0da63f99aab238644ae1518e61d1b569ae5d38047c9bd6af9f
SSDEEP 384:nCiF1tNn/s3n9SH8NL28TUNTUlIRwPvuT3lXEqfbzG3+3YEi3r7ipQXD8LEEIzCy:JF1j+96Q2wgWuxtG3yYEMOpQXD
TLSH
T1A1B23B32E855CDB7ECE64EC9B70A7A46DEE0516388C95AD8DAD85E0D00CB1DE070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5b13b6fcdf04fb96e793406611cf7bea4f0b25a21e6210ff6fcfb1601d456cec
MD5 12233c6bdb79fb5af7e57b25da973536
SHA1 34747b1c27534b8b74cbfee6a2a11d96508d27a4
SHA512 dbd9a12f0c15dfb739a20974af92acf153e278d3895c5b3771f558fd6665e280e51d7fd4931709d73557d9ed82792f579b34710e934cb9cfe292599545ab1b56
TLSH
T153512DE04C381AC1D4BD0E7FB45B78FC85E8C726F490343D6858EA985A7A65D309483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fc8158bcac0e1a43c912e8899e7f1c5e1d622db63f0096f7ece6833f081442b6
MD5 35a224c2ab78a8e4de46ffe2bbfff98c
SHA1 5bf2c935d683009baad6b104386ca6a2df08bfcd
SHA512 a0cef6559aa65787fb88ba8f2a20f8d8f87fa2a86afadf9c255bd6df6083efb477762c29e4417fd191353f39724da6b875183e140872a4617e941adfbaeb280e
TLSH
T1A8512DE04C3C1AD1D4FD0E7EB44B78FC85EC9726F89434386858EA985A7A61D309483F
MD5 SHA1 SHA512 TLSH

Submit Download