f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 08:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m2-eM.svg
Size 3KB
Sample260816-kd6srstdrd
SHA256 f8b98cd5d49b002dac12197f3cc48586c13811d7c326a008e2abc1ea27d94bab
MD5 40ed26c24cc55b701d2198147f4dd511
SHA1 be79a6dd7f18c178a4419eb98dd433ab090071d7
SHA512 6640d83ea0c3300598f061d3914e839c94e0dec416692dbed5dc1e857898e7467011e2e986cc39131cb59505b3705d679faa8e61cff117e12fc356edaceed39e
TLSH
T10271378876F87EEBC78802970E51D4B84B2F906BD822978DD3CB94D8792C2AC735D570
MD5 SHA1 SHA512 TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_623453468\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_816963337\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_816963337\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_623453468\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_623453468\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4644_623453468\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5516	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313426183071189"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{AD276485-276A-4E35-856F-4C86B149AF27}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4644	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 4644	2348	iexplore.exe	90
PID 4644 wrote to memory of 2580	4644	msedge.exe	91
PID 4644 wrote to memory of 4440	4644	msedge.exe	92
PID 4644 wrote to memory of 5516	4644	msedge.exe	94
PID 4644 wrote to memory of 4440	4644	msedge.exe	92
PID 4644 wrote to memory of 4440	4644	msedge.exe	92
PID 4644 wrote to memory of 6748	4644	msedge.exe	95
PID 4644 wrote to memory of 6748	4644	msedge.exe	95
PID 4644 wrote to memory of 1084	4644	msedge.exe	97
PID 4644 wrote to memory of 2772	4644	msedge.exe	96
PID 4644 wrote to memory of 1084	4644	msedge.exe	97
PID 4644 wrote to memory of 1084	4644	msedge.exe	97
PID 4644 wrote to memory of 2772	4644	msedge.exe	96
PID 4644 wrote to memory of 2772	4644	msedge.exe	96
PID 4644 wrote to memory of 4632	4644	msedge.exe	98
PID 4644 wrote to memory of 4632	4644	msedge.exe	98
PID 4644 wrote to memory of 3348	4644	msedge.exe	99
PID 4644 wrote to memory of 3348	4644	msedge.exe	99
PID 4644 wrote to memory of 4184	4644	msedge.exe	101
PID 4644 wrote to memory of 4600	4644	msedge.exe	105
PID 4644 wrote to memory of 5096	4644	msedge.exe	106
PID 4644 wrote to memory of 4188	4644	msedge.exe	107
PID 4644 wrote to memory of 1324	4644	msedge.exe	108
PID 4644 wrote to memory of 1324	4644	msedge.exe	108
PID 4644 wrote to memory of 6280	4644	msedge.exe	111
PID 4644 wrote to memory of 6280	4644	msedge.exe	111
PID 4644 wrote to memory of 4532	4644	msedge.exe	112
PID 4644 wrote to memory of 6972	4644	msedge.exe	113
PID 4644 wrote to memory of 6972	4644	msedge.exe	113

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m2-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m2-eM.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff8b120c188,0x7ff8b120c194,0x7ff8b120c1a0
    3⤵
    PID:2580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,4963753678627543393,13798750979267850560,262144 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
    3⤵
    PID:4440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,6487244783346045595,7704555899197434648,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,1077694947052727020,13713468022776596576,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:13
    3⤵
    PID:6748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,690662374056314511,15627572240244831547,2097152 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:2772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,6274959067948868466,8937985724260465721,2097152 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:1084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5587814933722508518,6141055867917218641,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,3788027298949137458,2773167272457885169,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,14990778168031841471,7688531072718653668,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:2944
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,14990778168031841471,7688531072718653668,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:4184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,17031290832189170516,254881047423910313,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:4600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,6018766455663752169,17029957492753516221,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
    3⤵
    PID:5096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,5123861223348965683,7992283680496310833,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
    3⤵
    PID:4188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,13554448383448411565,11054084273405075109,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=1164 /prefetch:14
    3⤵
    PID:1324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,10441686659893041930,12307864676157381899,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:14
    3⤵
    PID:6280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6428,i,3623431047223770253,14844765622187941708,262144 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,11868535222161531102,4601793221781624165,524288 --field-trial-handle=2252,i,240129504184014751,1862086964979332118,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:6972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 034a4f450f79297046aa1f89a64de708c7794bb52fbde847681b74cf4e461b6b
MD5 3777a8c41c668c03b892e302db636548
SHA1 97fbc1a637b10917ded00640289cd6cf6f9271b5
SHA512 5ce1c6928a341d701f9d442d65f88090209b56376ffcf80d887c72adc23a90a352f66beefddb22d84b7e9fc8cc53abdd7b4795c4ceb15b7814da164e4e73560f
TLSH
T1BEE0E555C961BC272DFD2B1865540746E750135B3A42880F3B3C822C4FB46374287C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d7a625538566b63ab73dbfd7f5f80c7bb008abf846066cdc53bd2c64a4fe9b5d
MD5 2e7431f8c3c38ccaee31e9baec0bd7c7
SHA1 598c1e76c32724284d8c0a5c60cb5fce7f1f7350
SHA512 60bbd0ccca8f2de0369ea3f7d958619894e7747bf0643738adc8897fd19eececa752b96045a03a937778dabc4d6603d23998bc325cefd134b66acd0e64182b68
TLSH
T15341BFF383F4856ECA1196F0AA18AE2FCF1D0511432C7D9AC9E0AE6793E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 155cd0e0f78fd958a50715b1379b733ca093d502df79fad6d659ee7792555d1a
MD5 1eccabf54ca17575c058ee9fd4c4373f
SHA1 b9183e7d758950366f5f903868b8480a920c6a5b
SHA512 f5d4c8ff873aa3757385f1bbf45a45b31449f9a24e10a6987deb32ba5d045fe54686ad69ca35c3b5d4706ec83fc0e18b97089548d635c25e18b682ee1a2b47ca
SSDEEP 384:sxR018H/fwsi+SYN/RIMBJ1/5IW4JsGQMTj5:sQqH/fLRWe/5IW4JsGQMh
TLSH
T1C672EA155A649D3B9CDBD209FA957F93D3F81173A1505E44AAFCCB0C04DAAED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 8365d6c2308e2494cc0b055394b03b49448b0f560ed5d57af8b971eac6ff68f7
MD5 beec2a68ccc645f3f2fe194ad60e5208
SHA1 1b9308c797dfd9c8d260a0343d488255be423d7e
SHA512 7184946e95d3777db6cb27d5a5e10c7f1917b77cc2f5a055fe45660e5e33437fcfe73d911610e360c975a7284f033c6d6a6d99950017bda2c5292940ab219a6a
SSDEEP 384:sxR01qWH/fwsq+SbN/RIMBJ1/5IW4wsGQMTk6:sQkWH/f76We/5IW4wsGQML
TLSH
T10B72E8159A649D779CDBE209FA857F93D3F81173A1515E44AAFCCB0C04EAAED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 f39b250b909935ba0758acc703eb8f35e385a7a627b0a6ca69495ac7efdc0165
MD5 dd7541ba6ea0463d90582968f9b7ffef
SHA1 813984f74284c435d791288e47e7b367495c3868
SHA512 d38a544a41a14435b3ee6f09cfe4fc63124e456de6b24a122d21c6427e2fd7ce2a612e3ea53c53833cc22d56737e4672ec8d9ca95e541dba8d9879cd1521a4e4
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpobbDwzrom49:Ob4YZnE7yTWg1NfwBu1jayobHwAB9
TLSH
T1ECE2EC3B280CCB7E4F804ADDEC29BDDA6DA801CF56D8895447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 62080860d1a05b8095fc958c3532cc41263302f9b9749ea792ff1041629a9b1d
MD5 0dc38867bb65b9a9520925840764e99f
SHA1 31bfe6ac76c9f8d93121f6d133e62a1394cd7e3c
SHA512 0435ada2b70e5bcfb1fd698bef21438ba585deab60fb455817dbf318f32208c550e143df99785094924df6525acf442c9448e51dfdceef15bac749c6626aabef
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9JVP:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRa
TLSH
T163B25B11713F4690387EA90C91BCD82E92C2B4637519E52F7BAC01A65F67E038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 469e4c1831e7653c3306ef7cddd1a228f446e34d4c1d65b863555efe39a70b60
MD5 7535e7705a0ed057d9c1785d5c5db1a0
SHA1 97f215ac5338dbeeb8a26f73988bf5421b23574e
SHA512 de5deb7133bc6a560924d40f2194ac99c5282c4fe448a2ee61eb860ce7765a48110ded76595f0a01853277be98b2df039b1adb7eff8e72d2d35a3a18e40bb708
SSDEEP 384:n4iF1tNn/s3n9Sn8NgO8TUNTUlIRiPvuTuHReff+GGnR9nn/LsOObjI9G6w7uW8O:DF1j+9SXOwgUuWmGRRs29Mj
TLSH
T190C24B32DC95CEB7EDE74F98B24A7A4AEEE012A7859C69C4DAD95D0D00C71ED0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 be9720e101d056f31f71308b93e2055a042a46e47a3a142fa03e75746a63e127
MD5 ec236bd373570d9ce9a57c1e40749c4f
SHA1 c91f745976577b3ec7b11d1238b8006ab8a4edc4
SHA512 4eb3c7867cc6e4dfbfb8fd464279955d108997792ec0d7e507d3271ab7dd79d64772c0fc459107e8bb2667b7b15359a520de568bcc8f591107f6f55bbb9954e9
SSDEEP 384:njiFiZcIL8NLsg8TUNTUlIRbTPvuTHSHeff+GGnR9nnFLlFdOOPrXLpe8C/xtb8u:OFQLQLwgRuGwGR3dOi9PEtH
TLSH
T160D23B31DCA4CEA7FCEA8FD5A6497646DEF011A3D5899AC4EAD89E0D00C71DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4fa352ae685998987ebb80b5308d516fefdea41a272619432fc25265e5a71a3d
MD5 649fd101e4d1a6cb5a12df11510e794b
SHA1 1642609a852ffa11bb2d08a3b741c5ac087b57db
SHA512 7c314386fab8b5ff5be8c4183f7726fb31fab46d775fad509dde55b826a2a956a135fbaad1198fa1132eb4450acf060dadcbccb274fdcd60d6de2395966e8332
SSDEEP 384:n/iF1tNn/s3n9Sn8Ngsg8TUNTUlIRiPvuTVNHeff+GGnR9nnFLlkdOObjI9G6w7j:KF1j+9SXLwgUunwGRid29Mj
TLSH
T10FC25B32DC95CE77EDE74BD8B24A3686DEE012A3888C5EC4E9D95E0D00C72DD070B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d7b659917e7ab3ca2a72e3f701861fb7866428f93fb83b9a7938db8a6d54df5e
MD5 3548163fb4c4aa557fb1eae11e929ef2
SHA1 c2c539d728537da74743133ca273669003e814c1
SHA512 376391ebd70fb57966eba3791cfe2ec4942c4d8c3fcb1dea2126ac0da0fcc540aebd1297d1a544b2fdaeefe145b332687370ead362e0e54ea29e31b14258d763
SSDEEP 384:nBiFiZcIK8NLsg8TUNTUlIRbTPvuTHSHeff+GGnR9nnFL1hdOOPrXLpe8C/xtb8u:oFQKQLwgRuGwGRDdOi9PEtH
TLSH
T1A9D24A31DCA4DAA7FCEA8FD5B6497646DEF011A3D4899AC4E9D89E0D00C71DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f38c3b4e6e74ab73bc27506d8792c780375141f5e0dd498abfced06eac559733
MD5 6e2967b4751484f94d9dc3b4332c608b
SHA1 be0a711885b39e5291e2bdb27a00b70afa2ba6ba
SHA512 fba33962d0243ad86d446d2144d941ffa5574aa42ec3824e3a064685a2af8eb0042fb1c4e8a38f852f8c03616124d3b3b91ce78393f50e2621aa41072cece061
SSDEEP 384:nOiFiZcIL8NLsg8TUNTUlIRbTPvuTFSHeff+GGnR9nnFLlkdOOPrXLpe8C/xtb8u:lFQLQLwgRu8wGRidOi9PEtH
TLSH
T19CD24B31D8A4CEA7FCEA8FD5A6497646DEF011A3D5899AC4EAD89E0D00C71DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a0a691c-a366-4da7-a5be-13d84674d7d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\6a0a691c-a366-4da7-a5be-13d84674d7d6.tmp
Size 1KB
SHA256 ada523f25a74c54a398124cfb0332a7d39c38c10e544601e0e1d37bd916c79f3
MD5 0f989aa48939a2ad9db3c42d157a591f
SHA1 96643fa4f3ac86a58dbd9d7d7f60e16300090c70
SHA512 c7656ca6835612a54fda263f03396a077a3a057ee3f7362f29313a4d6e31a7eb8f15e1dc848310316bdbe1e4ce517a3a33b5649ef7e288e2d6dab02f1adfba0a
TLSH
T1F44122E09C391AC1D4FE0D6FB44B29FC94E89722F89834382858E968967D61E354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 3df19836dbbdc5b1421ad8dc4f7e7e0e7a434d2617ad0282a47668f0071d5437
MD5 a3dcf738dc6e5ac7d9cf4e7251687726
SHA1 0fa66734ea4a1723e40fe030e1148e966da66236
SHA512 fb4e007caa73a0809c1153241a6cdc386c73ede299c669d8ebfb6b9e20367ab6c0a58a7a3d213c3c9260d7accb85def6356c041eac1f7d599b79602d986b1e9a
TLSH
T1984164E09C391AC1D4FE0DAFB44B29FC94D8D326F4D434382858E968963D65E354083F
MD5 SHA1 SHA512 TLSH

Submit Download