3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 00:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v16P-m2-eQ.svg
Size 48KB
Sample260820-avncmscm4v
SHA256 3b57fea1eec2d03a39c344332db1a425f7e728e0bcf2afafd5f90352bfa4e14a
MD5 36e987192c44bf8a98cc83525c6860ab
SHA1 c2bbafef0aa4819ca038878ed030e235bf20353e
SHA512 51b10e0979e1185dd44631fa0e92cb6839b417135169b8d23b95268775147c7b87cb47a12307570476a595a81167526992f137c9009e50d73a3e1d80080f7f73
SSDEEP 384:cl1tz67bJ/MErSDkAPI9Fs0NsHJCixiIX1dkWs4Cl9sRCOWnCAX+3utANO:cDtimp7s4k9sySO
TLSH
T1202350B537F47C9B8BCC034B5D42EC6C45AF94B784986A8C9BC790E8A548368F7EC590
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6092	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316595382318284"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{88F3A9F9-34BD-43AF-B116-03B9BAF5A58F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
760	msedge.exe
760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6108	msedge.exe
6108	msedge.exe
6108	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6108	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 6108	4768	iexplore.exe	90
PID 6108 wrote to memory of 7028	6108	msedge.exe	91
PID 6108 wrote to memory of 5980	6108	msedge.exe	93
PID 6108 wrote to memory of 6092	6108	msedge.exe	94
PID 6108 wrote to memory of 5980	6108	msedge.exe	93
PID 6108 wrote to memory of 5980	6108	msedge.exe	93
PID 6108 wrote to memory of 296	6108	msedge.exe	95
PID 6108 wrote to memory of 3564	6108	msedge.exe	96
PID 6108 wrote to memory of 296	6108	msedge.exe	95
PID 6108 wrote to memory of 404	6108	msedge.exe	97
PID 6108 wrote to memory of 296	6108	msedge.exe	95
PID 6108 wrote to memory of 3564	6108	msedge.exe	96
PID 6108 wrote to memory of 404	6108	msedge.exe	97
PID 6108 wrote to memory of 404	6108	msedge.exe	97
PID 6108 wrote to memory of 6136	6108	msedge.exe	98
PID 6108 wrote to memory of 3496	6108	msedge.exe	99
PID 6108 wrote to memory of 6136	6108	msedge.exe	98
PID 6108 wrote to memory of 3496	6108	msedge.exe	99
PID 6108 wrote to memory of 4436	6108	msedge.exe	101
PID 6108 wrote to memory of 6768	6108	msedge.exe	105
PID 6108 wrote to memory of 6600	6108	msedge.exe	106
PID 6108 wrote to memory of 2428	6108	msedge.exe	107
PID 6108 wrote to memory of 6228	6108	msedge.exe	108
PID 6108 wrote to memory of 6228	6108	msedge.exe	108
PID 6108 wrote to memory of 760	6108	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v16P-m2-eQ.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v16P-m2-eQ.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffe33f3c188,0x7ffe33f3c194,0x7ffe33f3c1a0
    3⤵
    PID:7028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,12694094428354375887,1122510651848659623,262144 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
    3⤵
    PID:5980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1896,i,5508122140474966470,5014034910166674072,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:11
    3⤵
    - System Time Discovery
    PID:6092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3324,i,11061809368362500930,1756042783640703055,2097152 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
    3⤵
    PID:296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2520,i,18446556783637431958,12338854790613982830,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:13
    3⤵
    PID:3564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3332,i,731911324448063724,16682613735670575862,2097152 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
    3⤵
    PID:404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5168,i,11485248278919907438,1347350670913620443,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
    3⤵
    PID:6136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5160,i,13806678207060174829,17270952146572274660,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:3496
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5728,i,11093301308729710873,17054140324215525864,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5728,i,11093301308729710873,17054140324215525864,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
    3⤵
    PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5904,i,183524306847861181,4389122514486349460,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
    3⤵
    PID:6768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5908,i,3100959413813886893,14340898691884976960,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
    3⤵
    PID:6600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5912,i,17223229792895493028,15595339248920942841,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
    3⤵
    PID:2428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5232,i,10322741483183112718,3915599725990401968,524288 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:6228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6000,i,11647531043060972997,11617984439437340448,262144 --field-trial-handle=2368,i,16717021214573022600,455704050290712877,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

12cb9d7e-b2e6-4ab7-8832-bc4661b9b852.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\12cb9d7e-b2e6-4ab7-8832-bc4661b9b852.tmp
Size 414B
SHA256 0281bbab374dcdb95b370b6e1a8e8929d452aeeb19027ed56622edbc885be7fa
MD5 252c08c71ce8c8d7545dfab09496e7a9
SHA1 81657004979442aba9af3a5954633091fe15249d
SHA512 a863d2fa716b67e8110b431ae0f5c5b137791efab2d50e1522d02374c6288bfeefba9949600386e9175ecdb6329f72feb1617b63aff2603ea1cf40f4ce1a2391
TLSH
T1A3E0E566C920AC2769F91B2860541647EB40131B3F41D84F3A3C816C4FB0637438AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e42a61ff18b771924b538416c2caf2d3b34d8d45b9e7baac6d0dda436447037f
MD5 15f059eb8189ca7e35ba9abbbede29ff
SHA1 daf9fc32d47a304eea115daf486c071c20db18e8
SHA512 37848592b06f6c630bd64cae7ae11c9fa98f559ea8884eaa5d516a3014151bb21baf1499cd960db835f73a1eebf4b7286817ee87edb433cb9265eabd15d608ad
TLSH
T11E41B0F783F4856ECA1195F0AA186E1FCF5C0525832C7D9AC9E0AE1793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4d46e5d31ea37621dff74e28caf071f62351bb58e7276c280307dafae826fc03
MD5 292e6500917187f59588b5ec08007ab9
SHA1 9613daa115388e7ef62284175572b4f61226f1cc
SHA512 84924e5533f219c020afcb8c8b82c8a1186e558fae5522e04a17685cf2c8c98cef95b2c78195704d35b7422441eb4170c836ef9a34da649eda7cc4246ac1ed93
SSDEEP 384:sxR7f8n/fdscz5N/RIUVb/5IW4GsGQlj5:sn0n/f5bWq/5IW4GsGQj
TLSH
T15A72E915AA349D7B8CDBD619FA957F93D6F8113391905E44AAFC8A0C04E66EC2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 4ca2f65bc0333943fee529f4f79530370aadc6a0da36046077aae6ec6c3d7e00
MD5 1ff98c546f4405bb63c4fe09b32365ca
SHA1 685d8b12aaabd28bc7189e1ef184436a22c58c5c
SHA512 c278335f76ddc6d0e81ffb0bfe6e0c6ddcc2c1812d29f87ce5c2f83b367807225d7e1442230d3bced2b1ac3cf40bfc1a3efdac5b55821720af56957b7cc853d6
SSDEEP 384:sxR7fqJn/fdsOzWN/RIUVb/5IW45sGQllb:sniJn/f/UWq/5IW45sGQv
TLSH
T19572E7159A349D7B8CDBD619FA957F93D6F8113391905E44AAFCDA0C00E66ED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 c18d5de947ea3280b6ae1edacc345dbbf4f7960480d3972350a40cf6234bf9f5
MD5 b651419624a950ed2880d6c0991782d8
SHA1 9e6c6e119afb67c5b40d9abdb2b081e4b8a5f845
SHA512 a0314ab4d2295e444700cb3256fa65183c44e3069cf0d8fabfa367b297bec9e94dd6911fc42da29395f6cb69b74ec86282bda9bb38e1317aba27dfddba978f95
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEobbDwzro24u:Ob4YZnE7yTWg1NfwBu1jajobHwARu
TLSH
T170E2EB3B280CCB7E4F804ADDEC29BD9A6DA8018F5AD8C95447FA450C03C6BEB551A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 96a540e479ce67ca010ff376b991ed531eaabd0ff9be78a4288b17ef71221aa3
MD5 3e582a64074233b8181482d13970a8f9
SHA1 7ce3d2e5a580fc82684f25d1f1ef5378d2992eb5
SHA512 1da16ca914d9b51c630fca0765c2214bfe89d5bfd904abb1c721b0939e4d60b2b691dd915b6d0d3299b5f720d63f26e9407344a67828eb974ffdd8b66a8f9486
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9R3b:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRQ
TLSH
T1E6B25E11713F4290387EA90C91B8981F86C2B4637519F53F7B6802A65F67E139DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 53ded6b6aca4b659e6b43b6064243dbd80f3d725309d7cd597a347b197988140
MD5 2be497d8bc398241a8c9ac9f34933302
SHA1 60271b0396eb135df60c83fefcb8f1e44f4cef64
SHA512 584ca5597eb9a2fea7ed7fe15727b6180487c80a6636b93dfe2d29203ab55cec1f110d6392cc6c118f2a75659feb9e9caeef03bf1f733f1aeaf03c708727ffa9
SSDEEP 384:nniFiZcIp8NLp8TUNTUlIRyTaPvuTM+oEqfbYGTQR9XQjWEL6nZivmm8LEEIzrol:iFQpQpwg1un3GUIWELKZieIS
TLSH
T1F8C24B32DC65CDB7BCEA8FD4A7497646EFE41163858C8AD8DAD89E0C00872DE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a2a279f6d4f3e45532a6224dc718841c6f720864f027d717e4856d2dc40edd2c
MD5 2d3390d1000b18ffc8a83f0d4005c59b
SHA1 ac70d1e95f9c9b6cc146d1ee3b54ac39e01c4ca6
SHA512 1cb8f2d3e2dbfd50efa9112111b21486ea184a02e6bd37d7a93595688b9623daa8fce125eec16c3cc04dbfbd27d73fb4b954110b45d18b7ec211ca0ae389516c
SSDEEP 384:nCiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTuyREqfbYGTQR9XQpL5OObjI9G6w7ia6:JF1j+9SXswgUufUGUa529Mi
TLSH
T101C25B36EC59CEB7ECE64FE8B34A7A5ADEE0126385985AC8DAD85D4C00C719D4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6b17a3bd2dc51bc5ef93a65685e29da90cec8ada6c4f03a728bcb7beb6bb2a40
MD5 fea63003c4a14f6c3f164a92206cf8b3
SHA1 b636e0a558ce40bd5dd266e300c98c088a52d9f6
SHA512 92281e46443390e5259a5ba932b54b87ceea1743fdf5469d801af282e3f0b64d7cf852462e7c25c5a239ee76d06a61c18819e176b3a3cf27fa1e5d41250f6703
SSDEEP 384:nSiFiZcIp8NLp8TUNTUlIRyTaPvuTC+oEqfbYGTQR9XQjWEL6nZivmm8LEEIzrol:ZFQpQpwg1up3GUIWELKZieIS
TLSH
T1B0C24C32DC65CDB7BCEA8FD4A7497646EFE41163858C8AD8DAD89E0C00872DE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 45e7d96c1266f24beb76ce300c79eb6be70583ca32145e7c2eb1c7ced044abbb
MD5 1fecd91688c962e6f0743f3dd44151ec
SHA1 e4cb30d6c1a36d4cfb157f3936fa172acac8c309
SHA512 c447873a3d185fe0f66bece72cea05805059960cfa22886b2660b07380775e634548be1bb17dacf294be1f1c80d5b6f0bf085a66fb466803db90d97120331ed2
SSDEEP 384:nEiFiZcIO8NLp8TUNTUlIRyTaPvuTM+oEqfbYGTQR9XQjWELqDZivmm8LEEIzrol:fFQOQpwg1un3GUIWELKZieIS
TLSH
T1A9C24B72DC65C9B7BCEA8FD4A7497646EFE4116389CC8AD8D9D89E0C00872DE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cc53a437cbf7740b93e767dff106a211d72a3ce203d12422b45c84e958ccf061
MD5 a6f06d9c4e45901103dd511a3b876b83
SHA1 e636da01e935143402525d094dee5beeab7eb8a1
SHA512 cb04921cf09cdef65a451e28a4be89a417b5f65e7cf264c24b50957e21141a43831eda7f66c3a1d0bfa6abb007722b7a951b8c6117e222520164c4af24eb3bdc
SSDEEP 384:nAiF1tNn/s3n9Sn8Ngp8TUNTUlIRiPvuTX7oEqfbYGTQR9XQjWEL6kZOObjI9G67:bF1j+9SXpwgUuf3GUIWELDZ29Mi
TLSH
T11ED25D36EC59CEB7ECE64FD8B34A7696DEE412A3898C4AC8E6D85D4C00C729D4707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download