22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m4-eL.svg
Size 3KB
Sample260815-e2j11sdh32
SHA256 22449267919b4057418022121aea0b6cdb030d7583290d26085534f47aa43a8a
MD5 ffd188160146fda63495f76c915854b8
SHA1 09601cd3c4bef976ca683b68265fc2a4e14c5611
SHA512 91a977f2fa58fe62436789064706aec5af63e3bde95527e33e5f26fad7233b1251035739ed0256f88470437cfb9aaac867f0b0f10b180955866570671e3eacc7
TLSH
T1F771388876F87EEBC7D802570D51D8B80B2F946BD422978DD3CB94D875282AC735D570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3336	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312415883892660"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{2537EC9E-D3BB-40C2-83F6-56483686F81F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1584	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 6812 wrote to memory of 1584	6812	iexplore.exe	90
PID 1584 wrote to memory of 4900	1584	msedge.exe	91
PID 1584 wrote to memory of 7140	1584	msedge.exe	93
PID 1584 wrote to memory of 3336	1584	msedge.exe	92
PID 1584 wrote to memory of 7140	1584	msedge.exe	93
PID 1584 wrote to memory of 7140	1584	msedge.exe	93
PID 1584 wrote to memory of 6404	1584	msedge.exe	94
PID 1584 wrote to memory of 6404	1584	msedge.exe	94
PID 1584 wrote to memory of 4336	1584	msedge.exe	96
PID 1584 wrote to memory of 4336	1584	msedge.exe	96
PID 1584 wrote to memory of 6640	1584	msedge.exe	97
PID 1584 wrote to memory of 4336	1584	msedge.exe	96
PID 1584 wrote to memory of 6640	1584	msedge.exe	97
PID 1584 wrote to memory of 6640	1584	msedge.exe	97
PID 1584 wrote to memory of 4716	1584	msedge.exe	98
PID 1584 wrote to memory of 4716	1584	msedge.exe	98
PID 1584 wrote to memory of 5360	1584	msedge.exe	99
PID 1584 wrote to memory of 5360	1584	msedge.exe	99
PID 1584 wrote to memory of 7084	1584	msedge.exe	101
PID 1584 wrote to memory of 6820	1584	msedge.exe	105
PID 1584 wrote to memory of 6460	1584	msedge.exe	106
PID 1584 wrote to memory of 6140	1584	msedge.exe	107
PID 1584 wrote to memory of 5532	1584	msedge.exe	108
PID 1584 wrote to memory of 5532	1584	msedge.exe	108
PID 1584 wrote to memory of 4508	1584	msedge.exe	110

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m4-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m4-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x320,0x7ff98444c188,0x7ff98444c194,0x7ff98444c1a0
    3⤵
    PID:4900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,3407857494065445004,7673564232766041714,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,14768446270854205823,17557440689443030076,262144 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
    3⤵
    PID:7140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,7112897751547910749,13522402537236347306,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:13
    3⤵
    PID:6404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,827035956615103632,461830805803916756,2097152 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
    3⤵
    PID:4336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,14854671861397171930,11605185740536894720,2097152 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:6640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11011580011424009761,12832270105051021376,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
    3⤵
    PID:4716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16270989930424138929,8485217963252925546,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
    3⤵
    PID:5360
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,13863351172603804257,13614636801969650315,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:6284
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,13863351172603804257,13614636801969650315,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:7084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,12646297171378451867,1790975069889975771,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
    3⤵
    PID:6820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,1668537541166866965,9491723098703485562,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
    3⤵
    PID:6460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1420164863343222687,17999844875629325367,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
    3⤵
    PID:6140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,13031016228575827575,9322383557994947665,524288 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:5532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6000,i,13082548082855422618,8020222114311906768,262144 --field-trial-handle=2584,i,5070714153521622338,13306636792824930854,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 af44e1ec87708680e81851803e34bcb4749844300e8600931eb139c26dfe93be
MD5 1091e44d9b3a165f486d77ec0da80c93
SHA1 13b6e6de393d59d8725732a146ed51d5eb5e1877
SHA512 cdd2487d8d8f77607c100e137481ba7212f4156a3c14afb45617cbea6da65826164e3a24f19ffecbc092b67ed5c2b8a4949b25cee3eb7fb230754dfbd2ec77d8
TLSH
T19241ADF783F4856EDA1195F0AA186E2FCE1D0515432C7DAAC9E0AE2793E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7a68799246402e077d9c326d66f7f451620ee0207e66e4edea1511ab5f41a610
MD5 29dcf3b8b4adb9804c40d6a652a1ffc7
SHA1 3bfd77a43b708458e3f7251f858ea377436620e3
SHA512 c1222602c59a11c75b4bc2014d4fb444d4246574e33cc3d58e317d35871fa744f477cd9fe5d429ed56b1623d48ab110706bdcb3e192b563da3967d6ca4a5ca58
SSDEEP 384:sxRTl8E/fAs5pN/RIU/i/5IW4gsGQ9QjF:sXaE/fdrWB/5IW4gsGQW
TLSH
T1DC72D9156A749D7B8CDBD309FA557F93D7F81133A1905E44AAFC8A0C04EA6ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 5a36b8083213d42447b1e4b86aa92d658455a821619bab3551cbb12fce8d85a3
MD5 02c997f798db3742d5b381b0eaaf3b66
SHA1 1d4d925485b7a5aab035b5343f79ec248e02d895
SHA512 83ece05b372acf23f929062df50410244fbe101b4136d7ed22d1e5a7390f09b22bdcd040d9d009caab54017b2832c07db9a88ad5381abf23e24e7ed515aee7cd
SSDEEP 384:sxRTlqTE/fAsyAN/RIU/i/5IW4PsGQ9Q30:sX0TE/fm6WB/5IW4PsGQ7
TLSH
T10472E9159A749D7B8CCBE219FA557F93D3F81173A1515E44AAFCCA0C04EA6ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 eefb883dc9358ff6811faaa155b8950f3fab5cf1f23fd4c30243492c77d6de86
MD5 b811a8cd6c4145ae02d1ad29df3a8d48
SHA1 2a9a57af691c1b713a9966049b7a5cd3baf71525
SHA512 df28228870fa072a7297a0e4ffb7d7575a2e8adb5cbce8a8ce20fe889b4fb66175bb0709b71e5aaa1ab7cf0d32dfd15f5a5e9cc1c652f2ba4192c6c42ce409af
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVKobbDwzrob4a:Ob4YZnE7yTWg1NfwBu1jaxobHwA8a
TLSH
T121E2FB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 f82606ced65e7c5153b89ca955edd64064d750d7d6314b1f3b65d17e1c0fa325
MD5 c4eeba24f44618408cd641c6c170931f
SHA1 eb86f332eac431e7cd4a3a29a759aceedeaf86cc
SHA512 591dc396dbabfb11291f1569fe9c57256e2800a2bcb5de886b9306e915b8dfbc179436e6f9399d962ab970a0310175841118ab0081d2686f500fbb227697e399
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9X5AItuygio:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR9
TLSH
T115B23B11753F4680387EB90C91B8982F86C2B4637519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf1df096-b022-4d00-be86-6aad5cb95bb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf1df096-b022-4d00-be86-6aad5cb95bb9.tmp
Size 414B
SHA256 620946ae96e8ae15e4c488c6241a0dac9b84fde985d4b9f54ba729403f077177
MD5 131d6f3af83cf28d55eb3a4dd8a87ca0
SHA1 786170a2b661303af00ef5e1e452c3205a972e18
SHA512 382562d9fb04f2ef5c7c78b14661d9485dc641b6e81e4457aa73a3db07f87bc703af0be5f5cb7a955b0a29118132e3772a7e9e3f3713ba9d8b1ade6e15d3d206
TLSH
T12DE0E569C820A82759FC2B1960940A47FB90131B3B41984B3A3D822C4FF4637438685C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d0293a4b3633eaea1c58c1168dc1729abd345d5599047d0394e95c030d67989d
MD5 17052bd3b0ddce109d90a2150ad3090b
SHA1 38b395aea3775593337f8f5a3d606f0a149f01f5
SHA512 f0740237d97173179bd19601a1848db22ab06505f2d775363382baaa40a4002e89e2372ec087ace0d4a2ced8160f5ecc074ad0e4c8a4fd7dbf32ad3989019df0
SSDEEP 384:nOiF1tNn/s3n9Sn8Ngp8TUNTUlIRiPvuTPhcEqfbzGwwjNJ+k2OObjI9G6w7vw8I:lF1j+9SXpwgUuViGxDH229MI
TLSH
T181D25C32D855CEB7ECEA4EE9B34A7A46EEE0117389CC5AC8E5C95D0C00CB1DD0B0781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 1cee89418666fc5dcb3ecfe2c01edacb8a401b3245c5adfebf63ab331436440c
MD5 db018a7d9972da1a2d2ad2670ff68b32
SHA1 41b0d3903de163984a8fc416ac3b606cf7b50fb2
SHA512 6e0c9cd6a93fd4ccf46664a7307532a52fade91aa44caf2b08c6a2ec0b3efa114568226511f7515abd8257e5e8451f75efa9a1ab6c45ecf6fc65eee9c00219c8
SSDEEP 384:nRiFiZcI88NLp8TUNTUlIRyPvuTo2cEqfbzGwwjNJ+C2OOPrXLpe8C/utw8LEEIA:4FQ8QpwgcuziGxD72Oi9P/t7
TLSH
T18ED25C71D8A4CDA7ECEA9FD5A7497646DEF01163D5CC9AC8E6D89D0C00C719E070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 99fac74913e4795c8d8fd053aab3587b8219829211e81cadd046cc2d7f0d273a
MD5 c3cbfb7802a88ed9711509fcf4595bd4
SHA1 84d3dcb4ef532c97112ff2fe13a0eb70de462678
SHA512 61f1c018f096975dddf5f263d91fa45994168b2a9f72ecd0e6e3be96608d39bf8c9563f12ec488809bf456ba8adedaf38a5121cde0df16464224a386437171f7
SSDEEP 384:nViF1tNn/s3n9Sn8Ngb8TUNTUlIRiPvuTuYREqfbzGwwjNULmOObjI9G6w7vw8LE:cF1j+9SXbwgUuHXGxMm29MI
TLSH
T1C3C25B36DC65CEB7EDE68FD9A34A7A46EEE0116785DC5AC4EAD81D0D00C71DD070382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 188e4a55a7b95f5ecc6390fe27aab8aea84ef2cd0fb4e1a9e5d7d2fa0e9a698d
MD5 d5d0a9336476903261a4dfe2ec3d5d80
SHA1 80d84988bbff5b2736fba94791ca8500d9eda8d8
SHA512 55165a54dc6750cb249886b13521af04a855a718d1ab2df9c40a171ee927246b19d9f6f79f963b07e8d322b999caaf04928c7034c4b3c9d0c03f1fa436ffcf11
SSDEEP 384:nfiF1tNn/s3n9S+8NLp8TUNTUlIRhPvuTM2cEqfbzGwwjNJ+C2T468LEEIzyV:qF1j+9nQpwgnuPiGxD72T4P
TLSH
T1F9B24C31D865CEB7ECEA8FD9A34A7646DEE0116388CC5AD8E5D95D0C00CB2DE070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 8cc0ac5459bea7b02103a66083a6dfdc23c7455f94628f86ad15a4d6db03c2b5
MD5 416898cfef3ba53839f6f053efcfe0f8
SHA1 a4171f6a1fdaa57477cc35722287344354c6505e
SHA512 7745a72defb0aaead6d4a2fcec37c13ffc4af763b20c579328796d21995b92edc8a7219abe5877a7624849214dfb49a5a5a4fecabb198cc3ddf064147b4e737b
SSDEEP 384:nfiFiZcI88NLp8TUNTUlIRyPvuTo2cEqfbzGwwjNJ+C2OOPrXLpe8C/utw8LEEIA:qFQ8QpwgcuziGxD72Oi9P/t7
TLSH
T128D25C71D8A4CDA7ECEA9FD9A7497646DEF01163D5CC9AC8E6D89D0C00C719E070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e10e1aeded16cf41a8fea21fcb3696e662a9dd8c8e28838282ba03cf08423518
MD5 cda2616e8bdb86ecab05672efcff4e4c
SHA1 a833a54752646d68775e8fff8829a061400bb9ab
SHA512 94ddacbf370e65c8c608c08772301cd1d935cb5a9c311b37b8fbdaca222dab13b3d11ee55ec334e2530d51939bcfc676d0b639e0078fe202727781cfeb1f4a23
SSDEEP 384:n9iFiZcIL8NLp8TUNTUlIRyPvuTo2c+6f0OLIwwjNJp6i2OOPrXLpe8C/utw8LEO:0FQLQpwgcuziLIxDZ2Oi9P/t7
TLSH
T1B0D25B71D894CDA7ECEE9E99A64A7646DEF01163D5C88BC8E6D89D0C04C719E070BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download