1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 13:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v13M-m7-eL.svg
Size 35KB
Sample260810-qxd5razcph
SHA256 1f9347f69fb7a2eef75c0468c0016bca4552541e955b3fdbd0c1dc1c8fbfe388
MD5 bfd57f9c04b8bfc4e5434bae690e2203
SHA1 e7b3435c094295274f0af2f8397f5bb45ea184c1
SHA512 6758b4a12d192d174ef164e40e6e9404b61b978a9fb28913f7bf0882d22b005217c3f048344f661fc2e264b7060e3cbe73503e4b546688f5342e8ae0eff3613b
SSDEEP 384:chMBVd+SOAKzMf2qACRnJPB/nafePgDOx48FAIddEIRisu:c2VdxlZdIV
TLSH
T19EF2306537F43C9B8BCC03479D42FC6C46AF98B78098678D97D790E8A548368F7AC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308426984667291"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{D7242651-CDD3-4AA0-9176-365A10B84EFF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
824	msedge.exe
824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6736	msedge.exe
6736	msedge.exe
6736	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6736	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 3296 wrote to memory of 6736	3296	iexplore.exe	90
PID 6736 wrote to memory of 3404	6736	msedge.exe	91
PID 6736 wrote to memory of 3920	6736	msedge.exe	93
PID 6736 wrote to memory of 2268	6736	msedge.exe	94
PID 6736 wrote to memory of 3920	6736	msedge.exe	93
PID 6736 wrote to memory of 3920	6736	msedge.exe	93
PID 6736 wrote to memory of 1964	6736	msedge.exe	95
PID 6736 wrote to memory of 1964	6736	msedge.exe	95
PID 6736 wrote to memory of 1428	6736	msedge.exe	96
PID 6736 wrote to memory of 1428	6736	msedge.exe	96
PID 6736 wrote to memory of 1428	6736	msedge.exe	96
PID 6736 wrote to memory of 5780	6736	msedge.exe	97
PID 6736 wrote to memory of 5780	6736	msedge.exe	97
PID 6736 wrote to memory of 5780	6736	msedge.exe	97
PID 6736 wrote to memory of 4620	6736	msedge.exe	98
PID 6736 wrote to memory of 4308	6736	msedge.exe	99
PID 6736 wrote to memory of 4620	6736	msedge.exe	98
PID 6736 wrote to memory of 4308	6736	msedge.exe	99
PID 6736 wrote to memory of 4240	6736	msedge.exe	101
PID 6736 wrote to memory of 4812	6736	msedge.exe	105
PID 6736 wrote to memory of 3652	6736	msedge.exe	106
PID 6736 wrote to memory of 1088	6736	msedge.exe	107
PID 6736 wrote to memory of 4712	6736	msedge.exe	108
PID 6736 wrote to memory of 4712	6736	msedge.exe	108
PID 6736 wrote to memory of 824	6736	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v13M-m7-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v13M-m7-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2fc,0x300,0x304,0x2f8,0x2d4,0x7ff8b120c188,0x7ff8b120c194,0x7ff8b120c1a0
    3⤵
    PID:3404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,8850582353722946168,2408055637088969557,262144 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
    3⤵
    PID:3920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1536,i,2166285004131216917,10442484566416162147,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,17620028637729710648,13650716826474260963,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:13
    3⤵
    PID:1964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,5062085708458929527,8957543482217528222,2097152 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
    3⤵
    PID:1428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,10712992933506013361,7253876789905274119,2097152 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,17560198114481936477,7348429283493689853,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:4620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9619679191011246056,5273333944674477346,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:4308
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,1169718266924633343,10644602554169098626,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
    3⤵
    PID:4836
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,1169718266924633343,10644602554169098626,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
    3⤵
    PID:4240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4952611640815901199,10816752737964386205,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
    3⤵
    PID:4812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,18238096020073023063,13780373502538215417,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
    3⤵
    PID:3652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,17670077525771780170,9922698179039316263,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:1088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2088,i,8920902996122923591,719831408676871039,524288 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
    3⤵
    PID:4712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5512,i,15973226629952251064,15410274371296792240,262144 --field-trial-handle=2024,i,13529197413368567074,13721009804839889013,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8183d470f57b27b94a58c9530308c32cc34fb52997fabf9e812a8ea6bde3b504
MD5 045d132ad1898716bbcac82905624cd2
SHA1 013635de4de9ad3768b9e18de73e63f3cbcfb6d2
SHA512 6097eab5e6d3c6c180a825c961ee505b41a3ea107cb4198355c3c8d2d1008105a9a71ba12304c25095065df9d10d7598088f62e4654603d216df440336900bb5
TLSH
T145D02371FE34A5D1E50C013080208900361B013321F763035560840CAD70060A1DFDE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6be9d1a2294801c1b3d24c4ec2fcb8c36155af6a99c7ce5fdb380048ef207440
MD5 9e330d38d534a7a485f26b503b24955c
SHA1 5bb5b3d4f269d1dec9c521d91d0a777fae822765
SHA512 035a589256f34c5e382cbc42d0c3762a742a57a522c7a8a213812bad750fd687305c2748dc554c3cff9fb6ed48967ded34850b456ed4903b7f56679f7afdf38b
TLSH
T150E0E5A9C960A82B1AFD1B18A1554687EB41231F3F41984B3A3C816C4FB46374286C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e036ace-d4e5-440a-bab8-d2be353262cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e036ace-d4e5-440a-bab8-d2be353262cf.tmp
Size 2KB
SHA256 c966786aefdc44b514c7a65a183c69745b82d5a59343259cd9e03aea7f7363bd
MD5 fdb59fdb57f3386683411abb321e4f75
SHA1 27b7dba3d8ae7a89ab755535afbac2a82db58413
SHA512 afe884a7190f174ec7c13d3e494cfcf76090b86bdb13a6d333cd88e7454b2e4497ebe2115b7f7ec01c9cde51339723372a508e89b83b4170ebe2519818bd3ef7
TLSH
T1FB41AFF383F4856E9A1196F0AB186E2FCE5C0515432C7DAA85E0AE2793E3471E142A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 ea190e031203471c57cce4b4fe33072b30c95a7e4d12978a8b67088d9583c446
MD5 d852e54660a121bb43de8eb9957adacb
SHA1 95a6fb647c8507cf21b0d6245b71bc68b3f127a5
SHA512 0453850e7413f36730fb77a3226764d2f96b490f569d0149ef7861cedb30c91d798ceb353b919dc3257c386dd6bfaa951a9f4bc8342cc885b8675aa5b9d2fcd6
SSDEEP 384:sxR4UqWz/f+snFN/RIX1W/5IW4SsGQgUw:skDWz/fB3Ws/5IW4SsGQg
TLSH
T1F372F815AA649D3B8DDBD219FA857F93D2FD1173A1545E44AAFCCA0C00EA6EC210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ac1c1bcc715436eda52f5faeb0e1d4c00487f6a87ca2a40a068e62f871c2d916
MD5 7388545cdfb3e122fcbd1dbbaa12b2c1
SHA1 846ce722a1f5e9e8dec6c783acc18a54cd102c0e
SHA512 3546d8a326e3a2bfe4ca57d9c05fe5128873135c16a05fbe700cb2f061472d5dde02ee797a8b09a1e27d1c5cb74dfe17c651f8ce1286d454062a69615adcb7a9
SSDEEP 192:sxR4R7yMqZjK1Ml8wCz/f+sNsNRZRIXRzoD8peZ/g6+WNIYcC4xHqsGQHGRIgjXJ:sxR4U8z/f+sNsN/RIX1W/5IW4csGQgj5
TLSH
T17772F9156A649D3BCDCBD209FA957F93D6FD1133A1945E44AAFCCA0C04EA6EC210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 f39b250b909935ba0758acc703eb8f35e385a7a627b0a6ca69495ac7efdc0165
MD5 dd7541ba6ea0463d90582968f9b7ffef
SHA1 813984f74284c435d791288e47e7b367495c3868
SHA512 d38a544a41a14435b3ee6f09cfe4fc63124e456de6b24a122d21c6427e2fd7ce2a612e3ea53c53833cc22d56737e4672ec8d9ca95e541dba8d9879cd1521a4e4
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpobbDwzrom49:Ob4YZnE7yTWg1NfwBu1jayobHwAB9
TLSH
T1ECE2EC3B280CCB7E4F804ADDEC29BDDA6DA801CF56D8895447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e23dbbd8a0e78527e4cc130b6b851d0dcbc925acf118de4c3d5865eb9761b3ad
MD5 d89dce3601bd87128b1fb9bf06697649
SHA1 65c25673f730c57f69b42c36519b317bc56b8599
SHA512 578162f23c06a88c8195df187b6757175badf6a9f187a9edfc6e976ddd5bc0dac7a0551e764112dd3af49ab3e0512614dfb9b7f467af169b9cbaf86ca7842006
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9JVM:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRZ
TLSH
T1CEB25C11713F4290387EA90C91B8D82F96C2B4637519E52F7BAC01A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7a60589ad64de27cb70f406831dc38dcdc587e0af140539afb56887fc19f8e8e
MD5 a3843b3d16ebe40d6be289a6f6678c45
SHA1 dda1fd94045f22722385702730e52fae4100cc45
SHA512 989446787c406ef39fed2ebc8efb3c4fa2a5c4d22403390b1152990764da778d6988985d709f46f9655e576c8d51bc7580829b87f501d40d65d21777a783fb79
SSDEEP 384:nLiFiZcI+8NLa8TUNTUlIRvPvuTFkLueff+GGnR9nnFLZ9o6HlytEDq168LEEIzu:mFQ+QawgZuafGRHooy6Dq1
TLSH
T11CD26C31D8A4DA77EDEB8B89F6493646DEE01263C89C9AD4E5D95D0C00C72EE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 10bbaa17bbab641b822d2a0cd6a10652b9fa68792ad8dfb9bd50e12dc50eac91
MD5 4e688d1b22940bc93571900a71e7fbd3
SHA1 a2cbb9ffa0543f97f9fd2c7de19222c96c74ea02
SHA512 6c8cf03529cd0a71e746ff6015e6898c5cbc1af8a93cf7198d6b626671f4359b522ec011202b5f84dc1d67a641078773ac2ac6907c3bb9f334693964100e93c2
SSDEEP 384:n4iF1tNn/s3n9Sn8NgO8TUNTUlIRiPvuTujReff+GGnR9nn/L6OObjI9G6w7uW8O:DF1j+9SXOwgUuSmGRR629Mj
TLSH
T1F1C24B32DC95CEB7EDE74F98B64A7A4AEEE012A7859C69C4DAD81D0D00C71ED0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 88738bfd64742f0c3294f48f2f45f072e53e826717d9c1b4c6122845f58ce03b
MD5 3f5c4f543f41d316afe9a7f96c9e7ce4
SHA1 86804f66552ead79f0c9842e5d28115a7d4bd949
SHA512 bd3294b797ead5704a1b2ed41c61b48a823e6d95b69b1bfc39d1a6e4437dabf0c9087aa040a5e806145aff56b78ac8fd0ceccdf59a917eb77a65ede12c99c9cd
SSDEEP 384:nriFiZcIz8NLa8TUNTUlIRvPvuTFkLueff+GGnR9nnFLH5o6HlytEDq168LEEIzu:GFQzQawgZuafGRRooy6Dq1
TLSH
T1ABD26C32D8A4CA77EDEB4BC8F6497646DEE01263C99C9AD4E5D95E0C00C72EE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c2fa602be6a0a1a19cd70259ace49651092059226ceec5a3eef106c559d21ade
MD5 7a016d6c8dbf2e259d7fbc19199ce2e1
SHA1 4fc9528b659fa5c91fde44205eedfffaf0300dd8
SHA512 80f7090d9dcc1f24d6f0a27151aceb6cea20ecb0c37385fe4a2e6c7d66df477a9ccdb3353be2d1f36328120bff8015b01a15db662f1ff780524d602425ec4f8f
SSDEEP 384:nAiF1tNn/s3n9Sn8Nga8TUNTUlIRiPvuTdzLueff+GGnR9nnFLHkoOObjI9G6w7j:bF1j+9SXawgUu1fGRso29Mj
TLSH
T1EEC25C32DC95CE77EDE74BD8B64A368ADEE012A3898C5EC4E9D95D0D00C72DD0707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e7f25eeade24a620cab492ea3413a50e7d491dd5b1322116c82f2ee55c3a9a40
MD5 e9fa478165af537427a8fcc30da292e6
SHA1 42ecf7919f47fd1264a64a47e02d203ef6d7f016
SHA512 d96753c04264e219c91b4d40eaf26182cb6e7fa384f33f37e6b4f8cc8a97f9239dc8bd68f2e0eb7473ecf673a1852f0bbe6f58bc85063f75826f749e1651cc72
SSDEEP 384:nuiFiZcIz8NLa8TUNTUlIRvPvuTLkLueff+GGnR9nnFLH5o6HlytEDq168LEEIzu:FFQzQawgZusfGRRooy6Dq1
TLSH
T138D26C32D8A4CE77EDEB4B88F6493646DEE01263899C9AD4E5D95E0C00C72EE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download