22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 11:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m4-eL.svg
Size 3KB
Sample260729-nav4mseq8x
SHA256 22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a
MD5 ffd188160146fda63495f76c915854b8
SHA1 09601cd3c4bef976ca683b68265fc2a4e14c5611
SHA512 91a977f2fa58fe62436789064706aec5af63e3bde95527e33e5f26fad7233b1251035739ed0256f88470437cfb9aaac867f0b0f10b180955866570671e3eacc7
TLSH
T1F771388876F87EEBC7D802570D51D8B80B2F946BD422978DD3CB94D875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297971450064074"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{54FE0B74-0244-488C-AC2F-44CC4B4EE8FA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5164	msedge.exe
5164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2472	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4088 wrote to memory of 2472	4088	iexplore.exe	90
PID 2472 wrote to memory of 4960	2472	msedge.exe	91
PID 2472 wrote to memory of 1040	2472	msedge.exe	92
PID 2472 wrote to memory of 5416	2472	msedge.exe	93
PID 2472 wrote to memory of 5416	2472	msedge.exe	93
PID 2472 wrote to memory of 5416	2472	msedge.exe	93
PID 2472 wrote to memory of 6168	2472	msedge.exe	94
PID 2472 wrote to memory of 6168	2472	msedge.exe	94
PID 2472 wrote to memory of 2064	2472	msedge.exe	96
PID 2472 wrote to memory of 2064	2472	msedge.exe	96
PID 2472 wrote to memory of 2064	2472	msedge.exe	96
PID 2472 wrote to memory of 6588	2472	msedge.exe	97
PID 2472 wrote to memory of 6588	2472	msedge.exe	97
PID 2472 wrote to memory of 6588	2472	msedge.exe	97
PID 2472 wrote to memory of 1268	2472	msedge.exe	98
PID 2472 wrote to memory of 1136	2472	msedge.exe	99
PID 2472 wrote to memory of 1268	2472	msedge.exe	98
PID 2472 wrote to memory of 1136	2472	msedge.exe	99
PID 2472 wrote to memory of 1348	2472	msedge.exe	101
PID 2472 wrote to memory of 2680	2472	msedge.exe	105
PID 2472 wrote to memory of 3208	2472	msedge.exe	106
PID 2472 wrote to memory of 4568	2472	msedge.exe	107
PID 2472 wrote to memory of 5488	2472	msedge.exe	108
PID 2472 wrote to memory of 5488	2472	msedge.exe	108
PID 2472 wrote to memory of 5164	2472	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m4-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m4-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x320,0x7ffe2057c188,0x7ffe2057c194,0x7ffe2057c1a0
    3⤵
    PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,25449064700332858,9286634038889491230,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,15145468864076501504,1348627263060847314,262144 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:2
    3⤵
    PID:5416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,12463244675132935111,3940412509662444742,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
    3⤵
    PID:6168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,14361377153969197002,16713183303013961991,2097152 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
    3⤵
    PID:2064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,1408625570464387085,977439750833607506,2097152 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
    3⤵
    PID:6588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,15225132163062932361,15717791278966348316,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
    3⤵
    PID:1268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12927126938221410545,18093615908239376626,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
    3⤵
    PID:1136
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,3089146681360244271,9321438904671978998,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
    3⤵
    PID:2636
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,3089146681360244271,9321438904671978998,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
    3⤵
    PID:1348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,13818876113985142074,17931550508476876087,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
    3⤵
    PID:2680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,5134519474900735429,11312563371023877423,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,16529383577062011921,3145263514628308907,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
    3⤵
    PID:4568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2108,i,10552223314803113299,2263973318647383001,524288 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:14
    3⤵
    PID:5488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6000,i,15122134303540675783,12864595064430521377,262144 --field-trial-handle=2644,i,18137484619428478552,18083406625059881059,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

05d5191f-9fc7-4952-b979-d62486ea2317.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05d5191f-9fc7-4952-b979-d62486ea2317.tmp
Size 15KB
SHA256 cf383d9eaa100b401954cc489130adfdc69ee7d363998abf8f7a9cf717743e20
MD5 5ce4ec0484919d9b6c7bed3aeae292d2
SHA1 169d909c8dbfbbc75a7b712d4e0485d7023136e4
SHA512 e1de0000f440db2e190322e8861a37e58d282149a8ea8205129aa9e426b12a14a64d6ccb7aa819ac74482d7b5ae754d39ad1eb40ea2dcb22794954b80b8121bf
SSDEEP 384:sxR5+8U/fzs5DyN/RIRoW/5IW42sGQ7Lj1:sFDU/fIDwWT/5IW42sGQ71
TLSH
T1D572E9196A288D778CDBD219FA557F53D6FC1573A1905E44AAFCCA0C04E67EC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 ba427aea69a734d3cfdeb778c0f3b869086909e13e1eb4cb6d535b99af68eeed
MD5 75f26cec6ff2644e1ffba4687d5d4423
SHA1 e1a7e5e23c6f5adfb2d743cfbe6dbee8e71cefae
SHA512 11c594136f16a58ad0897f5618ee173943d0cfc8005840b9ff307735fedb18ea8afecd879f3c81e10e66648dd56d5e486e63d6d8e9ef06e93fc77cc6473dfe20
TLSH
T10CF0CDAAD921BC372DFC1B1870655B4BEB54135B3B41985B7B3C921C4FB463B864681C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2e7339fe24b2a5fa7870f6740c5ab95370db649cbfd7d7b97a4d688860a830ca
MD5 bd970576a2e63d1faced02b86c9d8525
SHA1 055356fb870d159b7edaddfa171db1337d85552b
SHA512 4b280dca426db2b733cb60c3d5ebcfb75e770b94529fd03781d2cacfa812709acd03b8b76228bb5b5fc216da496f129bd32c83c52afc321fd88a6da15b6e9351
TLSH
T13F519FF783E4856EC91195F0AA187E2BCE2D0914832C7D5AC9E4AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a2fc765103c683d023294918b3f3c9348ebcba864fb102d40122955adbcaa998
MD5 c2c8b107e4e8162b3d49a00af7c9fabf
SHA1 0292237e8125db46977dd2f351b76002c421ec93
SHA512 859d453f6594d6690977d80c9ec6ff3f5b0fdb414faef7ac2e00fd8b17de64f7d1714547aef0c49e59f7062124a5e42ab2897d04794ca1170db1d088710dc8c5
SSDEEP 384:sxR5+q6U/fzsADnN/RIRoW/5IW4Z1sGQ7LD2:sFB6U/ftDNWT/5IW4nsGQ7e
TLSH
T11972D91A9A288D779CDBD219FA957F53D6F8157391905E44AAFCCB0C04E67DC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 5f1392bdd089d357c049f2575994e3a01d4c40c33e69c65064565d6cf28a9680
MD5 50fd56fc775f2f2ce2cbb84563880b5e
SHA1 ed2d1981d74af4e7a415e42b8c15eb70be16ada7
SHA512 ca69572500c3692dcc570f702711efd78902d63e98fe43651b3a84d4fbd78e08c43cfae69df81f45f26ae33ec5ecf1c82e2c92c5e55e4a091b099a308f9b9d52
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhobbDwzrok4O:Ob4YZnE7yTWg1NfwBu1jaKobHwArO
TLSH
T19FE2EC3B280CCB7E4F804ADDEC29BD9B6DA801CF56D8895447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 dcc0d57fd07fe928974bcf1cf6d1d567a2558726761c338bd501a3416e675d9b
MD5 6c5822c4296fb4cabf7391f2535831a1
SHA1 249358fb2243785170c7aecbd845dbf4c6335a00
SHA512 51d9631e2078b5b614fb214d63eb325d601bf3b80ce119368d6183723702d7146838a52db5f5fa6e749c0d8e98160e86eb89c16b0ce4333d8d755c659ff8c961
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EwtWSI+uxKbOq80B4jQozKONrU4:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRb
TLSH
T120B25F51713F4680387DB50C91B8986F82C2B4637519E53F7BA802A65F6BE038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 ffaf93c91115170a8750b9de200262731e303e349596540a04c0596ce6829846
MD5 1196a1ab899c38fa6599889454179a9a
SHA1 58995f53ef05d54d0f7866fb5a2bfe46d6c1db16
SHA512 cb31da33b66fabee6c261cbc0a51491f06531134b9187130516daf4374d7e69d0c023cdccad919d38f0063eca6b742c89157e7a5edfbc65027b59fc4b60a9129
SSDEEP 384:njiFiZcIN8NLw8TUNTUlIRYPvuT0AeEqfbYGO5GMeCZrT9XScjmwu8LEEIzc:OFQNQwwg6uv5GO5deCxhX1jt
TLSH
T193D26C32ECA5CEB7FCEA8F89B64A7656DEE05163C9988AC4D6D85D0C00D71DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 cd522f8aef88117aa8697099b8babe94858bd0094edc2930c876be59c60fb186
MD5 78dc7fd8e6e7e6dbf2158e0d12c988b3
SHA1 dcd8495bc4faef51117503b730c6dc15de7c12d1
SHA512 47e0801c0d918b0daef130f38dd78c9b61574ea48b356cff6607d43baa76849130c0820d37c257a6a8c3c8de007b29b64451a4643fbc981ae582293f7d336b80
SSDEEP 384:nkiF1tNn/s3n9Sn8NgN8TUNTUlIRiPvuTuJREqfbYGO5GMeILxOObjI9G6w7cd83:/F1j+9SXNwgUugUGO5deWx29MH
TLSH
T188C25B36E855CEB7EDE64FD9B30A7A1AEEE05263859859C8EAC85E0C00C71ED0707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 ca39f1a1e323ea60432835bd636c4a5b7b9a478e926ab69009f259e3ff561109
MD5 0e86fc8148700a428877ffb2e042d12f
SHA1 85114d137a25fdabb2b64d21ef27087a1008c5c6
SHA512 161fb7abcc899136716b62e45d2199ce53f625cfd47f97239d986e599a77ffde99c4613db0eb64c2c9b964ec376cd3b001b38e316149a8f96718373a49c92e1e
SSDEEP 384:nfiFiZcI38NLw8TUNTUlIRYPvuT0AeEqfbYGO5GMeCZr/pXScjmwu8LEEIzc:qFQ3Qwwg6uv5GO5deCxRX1jt
TLSH
T1EAD26C32ECA5CDB7FCEA8F89B60A7656DEE05163C9988AC8D6D84D0C00C71DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6e051bb41e94297d6ffd79b46384d48bff03b30da47ba57b2a09accf3b04c817
MD5 4f714b68a523c1f7a25531e8ec151b38
SHA1 63be50dd01421b387b2e627aa4de7787a608761c
SHA512 12ccf915e141349e57c5e15af705835afa1c8e181b19f1897d397da5b6943f2e0ed7aa9dc313515186fd8e8f3d26cb427e954ba2f5e745a7b4b5072fe858cabb
SSDEEP 384:nyiFiZcIN8NLw8TUNTUlIRYPvuTOAeEqfbYGO5GMeCZrT9XScjmwu8LEEIzc:5FQNQwwg6up5GO5deCxhX1jt
TLSH
T152D26C32DCA5CEB7FCEA8F89B64A7656DEE05163C9988AC4D6D85D0C00D71DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download