09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 02:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m3-eL.svg
Size 3KB
Sample260814-cjfjrssgjf
SHA256 09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5
MD5 8a97a3e2ea7103a874e7c9a32e7ed545
SHA1 b450e9e2801ae7e10cb96224461aeddb11dc1ef7
SHA512 7303da25aa0029a146545b8d2046e553d7c07cc7ad7a6942065592fa27b645f0a9a88448251d474773f712b5eafff6d8b4ec09bfbd1a490865583802a57df4b7
TLSH
T12A61168876F87EEBC7D802530D51D8B84B2F946BD822978DD3CB94E875282AC735E570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6348	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311467783312794"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{953ABDE4-02C8-422E-A93E-8077B4385A30}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5444	msedge.exe
5444	msedge.exe
5444	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5444	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 1184 wrote to memory of 5444	1184	iexplore.exe	89
PID 5444 wrote to memory of 4540	5444	msedge.exe	90
PID 5444 wrote to memory of 3000	5444	msedge.exe	92
PID 5444 wrote to memory of 6348	5444	msedge.exe	93
PID 5444 wrote to memory of 3000	5444	msedge.exe	92
PID 5444 wrote to memory of 3000	5444	msedge.exe	92
PID 5444 wrote to memory of 6720	5444	msedge.exe	94
PID 5444 wrote to memory of 6720	5444	msedge.exe	94
PID 5444 wrote to memory of 2444	5444	msedge.exe	95
PID 5444 wrote to memory of 2444	5444	msedge.exe	95
PID 5444 wrote to memory of 2444	5444	msedge.exe	95
PID 5444 wrote to memory of 6648	5444	msedge.exe	96
PID 5444 wrote to memory of 6648	5444	msedge.exe	96
PID 5444 wrote to memory of 6648	5444	msedge.exe	96
PID 5444 wrote to memory of 5560	5444	msedge.exe	97
PID 5444 wrote to memory of 6376	5444	msedge.exe	98
PID 5444 wrote to memory of 5560	5444	msedge.exe	97
PID 5444 wrote to memory of 6376	5444	msedge.exe	98
PID 5444 wrote to memory of 6172	5444	msedge.exe	100
PID 5444 wrote to memory of 2580	5444	msedge.exe	104
PID 5444 wrote to memory of 1912	5444	msedge.exe	105
PID 5444 wrote to memory of 1336	5444	msedge.exe	106
PID 5444 wrote to memory of 1276	5444	msedge.exe	107
PID 5444 wrote to memory of 1276	5444	msedge.exe	107
PID 5444 wrote to memory of 2916	5444	msedge.exe	110

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m3-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m3-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2c8,0x304,0x7ffc2000c188,0x7ffc2000c194,0x7ffc2000c1a0
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,1950825196633911953,13477978146671732206,262144 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
    3⤵
    PID:3000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,10951555406737538770,645074966765028472,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:11
    3⤵
    - System Time Discovery
    PID:6348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,718865519282626182,15597708791576262240,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
    3⤵
    PID:6720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,11835215546522572375,15978802919793429737,2097152 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:2444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,5812499369821771238,16952946857886029407,2097152 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    PID:6648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,14731612513002840592,1193801248831316703,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:5560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,2552705146485407892,6439675522727713215,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
    3⤵
    PID:6376
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,1553082423983509207,4531220980342821585,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:14
    3⤵
    PID:6184
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,1553082423983509207,4531220980342821585,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:14
    3⤵
    PID:6172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1284,i,1171063513402332809,8333279591434459730,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=1280 /prefetch:14
    3⤵
    PID:2580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1288,i,12245261458416085083,17654989504458237773,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=1436 /prefetch:14
    3⤵
    PID:1912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1292,i,581188627519889491,1388029394443921192,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
    3⤵
    PID:1336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1472,i,8190649664167250722,14593070967986511646,524288 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
    3⤵
    PID:1276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5972,i,3053617947502395815,16243464018041892162,262144 --field-trial-handle=2528,i,9019094819103324819,13912330879522199045,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 520cf16c2c1ef4c497616c652889231213a75ae67711054df56d34f3ea095180
MD5 819a223dbe2db3029c4fb68266d09b15
SHA1 e75a497dfd0448b3ad121a897f4fb37a1b6c2eb5
SHA512 f2afa125c09933d5178dbeee2740284156a966d6a4d1235283feaec0a94f0974ccbf634d82d6f93276ac036f636113e6874d68e968eb0a32c2c623728fc3c370
TLSH
T137E0E555C960A83B19F96B18A1591A47E740135B3B42884F3A3C822C4FF06374286D5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9cf2b6a6c77df9eaad8e30ab279ef74f7a8ecdb280c36f43912e6571be3733a6
MD5 4b23ea0d1fcb63efb8db50931223e4ec
SHA1 4779f1cb6c99b0ff6fda8f71b4a4b5b2b5f7206c
SHA512 39302eca27161c0a508ce78c74bd884b3c5536b2fbc4b2c4ac29b713dfb13fcf8cca85ef3ea3d0183a122f67e5eac08dc9330a64a974c5816b19a8280455651e
TLSH
T1E141ADF383F4856E8A1196F0AA186E2FCE1D0515432C7DAA89E0AE2793E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b121603563262e4c9997f747e170bf30f349b17ea28f48f7f9f9722c0247a27a
MD5 d03a4cb4f808441dd83a955d5a63bf2a
SHA1 f0e77fccd687d0017b61599d3f2e94ca4de38dd2
SHA512 c048fd5739d25ac74de8dcd1bb90d0bec6e09d3f81e72654989497c04339117b42277f05f975e1444f5b394911e6b869c6f598600dfbcf7283ee4918df8a17bb
SSDEEP 384:sxRPHqsn/f9s5UN/RIwZ8/5IW4HsGQrsb:sLKsn/f2eW5/5IW4HsGQu
TLSH
T1A672D8159A289D77CCDBE609FA557F93D3F81163A1505E44AAFCCA0C04EA6ED210782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0296a3b5b80a9517f4d44a9bb3fba57b642806287b75c7d2ff8a223325809849
MD5 b12b9842c7bc1f79ddb819b3a61364fc
SHA1 2dc342fdcc4e103ff8654873129c92f49ec5528a
SHA512 00fa78f262c6efb548a4d432bf0eac8c3f7f467e69a53108cd1343167372e8f5718e74697bb94112561535c049cff7a527973b4c879163229eb133758dc8201c
SSDEEP 192:sxRPRWyMqZjK1Ml8wCn/f9sOWNRZRIw9zoD8peP/g6+WNIYcC4xsJsGQ+GQqIgjs:sxRPH8n/f9sOWN/RIwZ8/5IW4+sGQrjs
TLSH
T1F972E8156A289D3BCCCBD609FA557F93D3F91173A2505E44AAFCCA0C04EA6ED210782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 79b61325c40edce613bda42feed2d5ffb60939a7d78b8001ffd6de1db3ec5578
MD5 1aef7b0ccc9b456a3d486041679d0b25
SHA1 6c6001259e3f31394e626fe859f605ebc02b444a
SHA512 12cedee28571f7cb5ec9bfaad10599fe938dc8c74e3b7cce9cd6147716864e6874bec609aa6f25c4e9b890b5acc6d16227be4517f7b4cf510d1f1a9a1de242a7
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVnobbDwzroO140:Ob4YZnE7yTWg1NfwBu1jakobHwAOq0
TLSH
T13CE2FB3B280CCB7E4F804ADDEC29BD9A6DA801CF56D8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 7eabc8c699f1941db59f05984e134c403252abd7e29928f077e803555eea6d61
MD5 c1640d226e21ac145d77460161c8c383
SHA1 05469c87a4c0ff0232b761237024f40137fcf7f6
SHA512 847887a21559758ee5661fee2cac19bbbf50ea0aaec95f6ab8ae4cc7c0a1269d2b1765221c99f0913e771d3e1d1335b0b87636c289ad236da58018431c1baa0d
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EExiWESiNG/SOoQBUHMU3eipvIk:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR7
TLSH
T121B25E51713F4680387EB90C91B8982F96C2B4637419E53F7B6802A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 0ac4dc7989f3f58f3b4ceb0d55d19a4199b974a082b6e36e2bb348496776c137
MD5 da792da9803cf71a2e8a0a93dda01a3c
SHA1 8bf05e92ef1f0a9fc1045d5f81770d6d7d52ae65
SHA512 a70715c72a4f588c6fbfee617286a80fcc15ab7cf9c7dfe2aa97bacc257611ffb1ff3b2f4a7623f13b3f4f12d57ccd7dc2b481c3a2e740df263605b6f48ebcfc
SSDEEP 384:n9iFiZcIL8NL98TUNTUlIRlPvuTgZzEqf+GGECXcMlZA4WbOOPrXLpe8C/JtC8L4:0FQLQ9wgHu2rGEPbbOi9PQtO
TLSH
T186D25C31E8A9CD67ECFA9FD5A6497642DFE45163D9CC9AD4DAC88D0C00C719E070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7b40551608efcb8faecd765d6e799cb340f1d4a4877f7d4fe692b991c47ec490
MD5 754e688d1e68fe8561392fee86da884d
SHA1 64d500b4ab586a301f2edc16812266589ad5480d
SHA512 0fb11c3b041b599209a46627305f9ac8ab94ee359e3e5e1b61ec7a9eeed6f4246e8dfd524cf100cc83aea0b7fca31bfb821c0ebc0c9dc89b1e3a5fe8933994b8
SSDEEP 384:nRiFiZcIK8NL98TUNTUlIRlPvuTgZzEqf+GGECXcMlZAhubOOPrXLpe8C/JtC8L4:4FQKQ9wgHu2rGEPubOi9PQtO
TLSH
T15ED25C31ECA9CDA7ECFA9FD5A6497642DEE45163D9CC9AD4DAC88D0C00C719E070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 cd1057bbc49c39bfc9b17dac9547d0bc03e717f4ab8d43cc2049f01f2e140b6f
MD5 dce881cb98a16bc5749a36e26ca1f25c
SHA1 5ddf7ab337168d1a5f9b576b5f6ee25cac514a10
SHA512 227ba3233fb1e726b676e630542a2aab2b7765433e9b754110023568efe3e9373056f0859471835b84bc25b25f702fe3f092cb4d961c3d633444fa323f640558
SSDEEP 384:nNiF1tNn/s3n9Sn8NgO8TUNTUlIRiPvuTujREqf+GGECXcMsLnOObjI9G6w7m98M:EF1j+9SXOwgUuGZGEPhn29Mm
TLSH
T194C24A36E865CEB7EDE64FD8B74A7A46EEE0516785DC59C8DAC85E0C00C71AD0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 253996747057d5b46ad26929b2134e71d3871c8b47fc9ddf9e57a37962408eab
MD5 5530a33dda1547cc272cff9c0a95ec3d
SHA1 1c41cfa07fd4c896c34ec79307e84c6d31b6ae31
SHA512 88cbb3bce6d648698ef9a40e5115c3cfa947c218a2d73303486e7ea27ee3802c15d43d6bec57a15885c36cd7cc2300b941418d9a2bde249397bba6856f0b59db
SSDEEP 384:nxiFiZcIK8NL98TUNTUlIRlPvuTgZzEqf+GGECXcMlZAhubOOPrXLpe8C/JtC8L4:YFQKQ9wgHu2rGEPubOi9PQtO
TLSH
T147D25C31ECA9CDA7ECFA9FD5A6497642DEE45163D9CC9AD4DAC88D0C00C719E070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c2e0de6dd8df767b59bdd2009d5c10bcd1788e58ec6db7e45fbf7c63107eb6dc
MD5 33e5f14176bf021502fa88844fc1c352
SHA1 b0c6d74955c1e6b0ceff6a653fb6a413adf22d1d
SHA512 231f6aa7029fc5d5c1e1828c6265921b80a775dea613fb19155d12b0b922ff2d56ae3ed61b2d266fec82d8b711677730652a6ed53539ab924eb264ea6ca5660a
SSDEEP 384:nUiF1tNn/s3n9Sn8Ng98TUNTUlIRiPvuTq8zEqf+GGECXcMlZAhkbOObjI9G6w7m:vF1j+9SX9wgUuJrGEPkb29Mm
TLSH
T115C25C32E855CE77EDE78EE8B64A3686EEE051A789CC5AC4DAC85D4C00C71DD070781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 ae00d5014667e8ab4e963c23b6c9654646bf12a39179698f5aa44c9b5072deb5
MD5 3ea2920e4d3a9842da097d7a634df056
SHA1 27e55f2d27c812f2c2269221fe40249f0020fe17
SHA512 7f0e0c657fe46f0009f04a4236c2e7577531a99addb16bfd586785dfd32ff9f7962b21652334b731d9c79de97027e4173038f8e31220e29fe73e948dd5d355ef
SSDEEP 384:nxiF1tNn/s3n9SM8NL98TUNTUlIRzPvuTZZzEqf+GGECXcMlZAhub5nnm8LEEIzB:YF1j+9FQ9wgJubrGEPubxA
TLSH
T1B2B22B32EC95CD77ECE68ED8B74A7642DFE451A389C99AD4DAC85D4C00C729D070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download