3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v16P-m2-eQ.svg
Size 48KB
Sample260815-e4ty1aztdv
SHA256 3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a
MD5 36e987192c44bf8a98cc83525c6860ab
SHA1 c2bbafef0aa4819ca038878ed030e235bf20353e
SHA512 51b10e0979e1185dd44631fa0e92cb6839b417135169b8d23b95268775147c7b87cb47a12307570476a595a81167526992f137c9009e50d73a3e1d80080f7f73
SSDEEP 384:cl1tz67bJ/MErSDkAPI9Fs0NsHJCixiIX1dkWs4Cl9sRCOWnCAX+3utANO:cDtimp7s4k9sySO
TLSH
T1202350B537F47C9B8BCC034B5D42EC6C45AF94B784986A8C9BC790E8A548368F7EC590
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4924	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312418181408739"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{BB8CA438-5626-4976-85CC-12D9E23200D7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5844	msedge.exe
5844	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1116	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 6116 wrote to memory of 1116	6116	iexplore.exe	90
PID 1116 wrote to memory of 4536	1116	msedge.exe	91
PID 1116 wrote to memory of 4924	1116	msedge.exe	92
PID 1116 wrote to memory of 5488	1116	msedge.exe	93
PID 1116 wrote to memory of 5488	1116	msedge.exe	93
PID 1116 wrote to memory of 5488	1116	msedge.exe	93
PID 1116 wrote to memory of 5940	1116	msedge.exe	94
PID 1116 wrote to memory of 5940	1116	msedge.exe	94
PID 1116 wrote to memory of 4076	1116	msedge.exe	96
PID 1116 wrote to memory of 3576	1116	msedge.exe	97
PID 1116 wrote to memory of 4076	1116	msedge.exe	96
PID 1116 wrote to memory of 4076	1116	msedge.exe	96
PID 1116 wrote to memory of 3576	1116	msedge.exe	97
PID 1116 wrote to memory of 3576	1116	msedge.exe	97
PID 1116 wrote to memory of 2572	1116	msedge.exe	98
PID 1116 wrote to memory of 2572	1116	msedge.exe	98
PID 1116 wrote to memory of 5312	1116	msedge.exe	99
PID 1116 wrote to memory of 5312	1116	msedge.exe	99
PID 1116 wrote to memory of 1672	1116	msedge.exe	101
PID 1116 wrote to memory of 1924	1116	msedge.exe	105
PID 1116 wrote to memory of 2456	1116	msedge.exe	106
PID 1116 wrote to memory of 3848	1116	msedge.exe	107
PID 1116 wrote to memory of 2180	1116	msedge.exe	108
PID 1116 wrote to memory of 2180	1116	msedge.exe	108
PID 1116 wrote to memory of 5844	1116	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v16P-m2-eQ.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v16P-m2-eQ.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x304,0x7ffbb43cc188,0x7ffbb43cc194,0x7ffbb43cc1a0
    3⤵
    PID:4536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,7796249371134212956,4318465897618098074,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,5010313389350188996,9186833870222583118,262144 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
    3⤵
    PID:5488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,4343041246316450400,3138640311813360164,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:13
    3⤵
    PID:5940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,256240332308720495,8500962998003080494,2097152 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:4076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,7433241821033793910,2740317512717860683,2097152 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:3576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,15940410769397223495,1759395430655945058,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
    3⤵
    PID:2572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,15941810630642093499,15127465506518810826,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
    3⤵
    PID:5312
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4059526680663845791,9450840876641229249,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
    3⤵
    PID:4140
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4059526680663845791,9450840876641229249,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
    3⤵
    PID:1672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,16940410267752856465,6621442281939882797,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
    3⤵
    PID:1924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,2730422770394794156,8044603674199986600,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
    3⤵
    PID:2456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,6418982029524524923,13753406123184805134,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
    3⤵
    PID:3848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,408183307689607022,16808685905841483164,524288 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:2180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,16054039437546358541,10936186864244489420,262144 --field-trial-handle=2308,i,14796883456162422788,9280279094352613132,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5844

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 eaa7b38474966a517a270ddd45bd57491b9e2550639e6c6d8bede5592670f37c
MD5 8168689873f8fafddf8dea8e9942209f
SHA1 6629e73da43c27f4f05eb32654dc9b282614c1a7
SHA512 8f04ab633547f3ad593aa3d1f84b27866f1fd801783d3fe7221580163e5af9d9071fe25fdf6f6d7a0fe7514f83e1b3c57c949752a7e85c9d148a4c07ea4053a2
TLSH
T127E02B55D920BC276AFD1B18A0540647E744131B3B41884B3B3C812C8FF96374387C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81566c301c5f04c8f9a4d311250ac1bef3d0560877e6d4c47d1aeb5c144d433f
MD5 b2b4c9ef3cdb52bf094078a3a942da86
SHA1 a5003592f41b89a544b2a081eeb6d064bcce7f89
SHA512 dc4c1f56246139d9f2895185441a3371b2cd570250fa886ce3fd0a0b9a4d932b02a93598a80b7ebce736d8ee172668812fd07f44e4fb6d10a4aae2d82ac125f3
TLSH
T1C241BFF783F4856EDA1195F0AA187E2FCE1C0525432C7D9AC9E0AE2793E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 98a3d07824fb81b685bd548ba399c436a1fe316e48925d5c94186f45e54d568b
MD5 8d82fef8d15b3e5aa986b1a9a63e54b6
SHA1 d5fd8cc622135540065834f94ad3341aded40c5c
SHA512 80bbc9251bc8ae133f876744f0a4d454f2b31f64b045e55d77e72cc3e468448bf2b6e2117a9aa713eabb1499e2dd04f994c0b7de65a36361f411d65433572caf
SSDEEP 384:sxRUAqxZ/fWsQJjN/RIg9h/5IW45sGQVSnz:s4nxZ/fqJpWE/5IW45sGQVc
TLSH
T1FC72E815AA689D379CDBE609FA957F53D3F81173A1905E44AAFCCA0C00EA6DD210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3f0be4707d0ac8e1bb49ac252263d6266aa8cb70801f402dd1d85073878f4824
MD5 47cb6f5ba44200093011b646b40b7fb4
SHA1 949031415327a8124865e94df6233c4f0e509488
SHA512 1119e4dc0918722ca8b220ca147754f211b19e713fc65cc022afc79aea2e38ed8a8096b2c362fcb265f128d9a219c67803a2dafdbe615f630a1e2d285623b4c4
SSDEEP 384:sxRUA8Z/fWs4J9N/RIg9h/5IW4RsGQVSjv:s4lZ/fGJfWE/5IW4RsGQVE
TLSH
T10D72F915AA789D3B9DDBD609FA557F53D3F81133A1905E44AAFCCA0C04EA6ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 2d88ad81a5d8e793f00c102fad75ff4aa68a5b047ef3aee72df8099279cdd203
MD5 4061d0fb983db26ff08db8d3c4101ec8
SHA1 58fbe1e27096d5d155c9f443670858a3e3aff385
SHA512 3ca83018397bf029c5d15a95ddbb1d24a16771784ff2a08311754fb25d78b85054fb99714d968c5ea2821cb01b21d6e0fe19da1a98bca59c97243c298aba0a96
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDobbDwzroD4H:Ob4YZnE7yTWg1NfwBu1ja0obHwAEH
TLSH
T126E2EB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 96a571e4a68a8e12a782748995f855c758dfdceb75fc4cb5e2a102d374e62084
MD5 e33d0e88530d0817f96083c18451a445
SHA1 63d4f7e2c456f6a62b63bcf21ee1f864f3b0df72
SHA512 f71deb760f40f75746995b1959600b905c0fcb09d7ca6160842a86cd2554db0ec15842238a818241dbc7da1832c05e8d0ab9c94771459b37abeb8063f0d65fda
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9sfiwV2aoU:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRD
TLSH
T11FB25D11713F4280383EB90C8178986F96C2B4637519E53F7BA846A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d22b2bca2e173febac7d7e85f5b47ae60eaf4a4b4b2b6d7b16aebf60ded71748
MD5 2970f0e66fc79163e8bf8637b6780405
SHA1 80db661353fc0f2f8487dfc772957625ac0a5a83
SHA512 0fd5cbed5c6dd4c2a6041cb0b5e3186583148fa5c37b7748d5b509bacaa67531d1b52b6edfc55369bb5edbd818fe3f8ee1184d762669018a07ca454dd9d8bf81
SSDEEP 384:nNiFiZcIe8NLN8TUNTUlIR/PvuTPxnWwsEqfbYGGpe+DL4EeTOOPrXLpe8C//8LM:EFQeQNwgNugwjGGNriOi9P0
TLSH
T1C5D24B32E8A8CAB7FDEB9F95A7497647DEE41163D49C4AD8DAD84E0C00C71AD070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 8b98b23c5542113eb5a1d06c0d8419c8e8635e1cb6f10206b6b161f0b8a67576
MD5 759d04ec33fd1596fdc12eb819b902e6
SHA1 fef0a9cf41a1398b2493deb2ff9fb00492db058d
SHA512 87d932c26ee49be53af1c761fd3893631af4fae59fcc284ef3325109eb9d0b8f99608e236e49c5d0a5ffa35d02c045560ec4c0c632285efdb23f4ecb014d33cd
SSDEEP 384:nIiF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTudREqfbYGGpeKLewOObjI9G6w738LEJ:TF1j+9SXmwgUusUGGrJ29MJ
TLSH
T1F2C24C32EC59CAB7EDEB4F99B74A7A46EEE01167849C59C8DAD85E0C00C71ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e9855f8c8322735c014f418eaa7ecc87a06da46fb86d63ef625cd88fc6cfb931
MD5 1aeea00e6029a98f035bc95f7d891395
SHA1 1d9aee057f2b1535841e90141a6da5e8cbbefa1e
SHA512 cf3f32b4c7b7b0bb88dfbbb0dd73bdc2bfd2cc6d4f970e8f353346268df0b1026212bcb5a95b51baf220cebecf6cbfc7c802a16d674ee9e9a9b9911054af7651
SSDEEP 384:nsiFiZcIX8NLN8TUNTUlIR/PvuTPxnWwsEqfbYGGpe+DLrkeTOOPrXLpe8C//8LM:XFQXQNwgNugwjGGNwiOi9P0
TLSH
T1CDD24B32E8A8CAB7FDEB9F95A7497646DEE41163D49C4AD8DAD84E0C00C71AD070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 11ed73b1975caf75ce58ae222fb9e78f1acc0b72b12a995f9d73c581d53df4ac
MD5 a2d32e845650116ac3503808d0c00320
SHA1 7a17969fcab2398b1c20f483ea6e089de6805f59
SHA512 0be5acc3eabfda880f91aadec143e61037792708e2502e6a93193a550075562c9314ac52b8c339f18258ef14ab85be46151f78fc941097b767733972cd98f1dd
SSDEEP 384:nBiF1tNn/s3n9Sn8NgN8TUNTUlIRiPvuTwpwsEqfbYGGpe+DLrkeTOObjI9G6w7J:oF1j+9SXNwgUu+wjGGN4i29MJ
TLSH
T11BD24C32E859CEB7EDEB8F99B34A7646DEE011A7C49C5AC8DAD85D0C00C71AD070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2f59207440cf4fc57e7ecb8c19c57545dbd8d499bf9d51faef050cf3ce4b2bee
MD5 5de6f8c4930a77e5ea77bea864f4e75d
SHA1 66360a8ea05a72a36e18448588a70c94ff6d8285
SHA512 882ca1c74219212d98af4496575d89338a91daf9211cf80d514be197f4cdab636c666dbfeb0b76470f317a050a29654f5664f26dceadea638bb4b10a03066bfe
SSDEEP 384:nXiFiZcIX8NLN8TUNTUlIR/PvuTDnWwsEqfbYGGpe+DLrkeTOOPrXLpe8C//8LEd:SFQXQNwgNuOwjGGNwiOi9P0
TLSH
T1CCD24B32E8A8CAA7FDEB9F95A7497646DEF41163D49C4AD8DAD84E0C00C71AD070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download