c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m1-eL.svg
Size 3KB
Sample260820-bcn2wsxcnd
SHA256 c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31
MD5 2226f49d0e59c46b4a18649eb679ae54
SHA1 c969dfea4218c1fab67060e9393a7fc24cc5547a
SHA512 a155996290a9d678506c7112a083decaa035069718b565052611fd751a1fb9378bb55dbdb09a8fabc2a0f5caa91dfbc2eb1e106fb2f9cba9c2f00608c0720af7
TLSH
T1C771368876F87EDBD7D802570D41D4B84B2F906BD822978DD3CBA0E8792826C735E5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
764	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316612202805385"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{12EEB008-1642-4ED3-A3E6-1A3CD66DAD21}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2488	msedge.exe
2488	msedge.exe
2488	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2488	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 6856 wrote to memory of 2488	6856	iexplore.exe	90
PID 2488 wrote to memory of 3728	2488	msedge.exe	91
PID 2488 wrote to memory of 6188	2488	msedge.exe	93
PID 2488 wrote to memory of 764	2488	msedge.exe	94
PID 2488 wrote to memory of 6188	2488	msedge.exe	93
PID 2488 wrote to memory of 6188	2488	msedge.exe	93
PID 2488 wrote to memory of 3204	2488	msedge.exe	95
PID 2488 wrote to memory of 3204	2488	msedge.exe	95
PID 2488 wrote to memory of 4304	2488	msedge.exe	96
PID 2488 wrote to memory of 4304	2488	msedge.exe	96
PID 2488 wrote to memory of 4304	2488	msedge.exe	96
PID 2488 wrote to memory of 1320	2488	msedge.exe	97
PID 2488 wrote to memory of 1320	2488	msedge.exe	97
PID 2488 wrote to memory of 1320	2488	msedge.exe	97
PID 2488 wrote to memory of 1148	2488	msedge.exe	99
PID 2488 wrote to memory of 2688	2488	msedge.exe	98
PID 2488 wrote to memory of 1148	2488	msedge.exe	99
PID 2488 wrote to memory of 2688	2488	msedge.exe	98
PID 2488 wrote to memory of 2064	2488	msedge.exe	101
PID 2488 wrote to memory of 5984	2488	msedge.exe	105
PID 2488 wrote to memory of 4296	2488	msedge.exe	106
PID 2488 wrote to memory of 2448	2488	msedge.exe	107
PID 2488 wrote to memory of 3444	2488	msedge.exe	108
PID 2488 wrote to memory of 3444	2488	msedge.exe	108
PID 2488 wrote to memory of 4800	2488	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m1-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m1-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x304,0x7ff98efec188,0x7ff98efec194,0x7ff98efec1a0
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,9559825444165215925,9756977928794146845,262144 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
    3⤵
    PID:6188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,13815613728249904160,15690748980309125610,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:11
    3⤵
    - System Time Discovery
    PID:764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,16349333047651032563,16081830988475336600,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:13
    3⤵
    PID:3204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,75374614562468716,6838074115177017940,2097152 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,12026198734194745758,5209992428512017228,2097152 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:1320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11253176689050109960,3107636078633157625,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
    3⤵
    PID:2688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,2521681718940694830,7391165506764845129,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
    3⤵
    PID:1148
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,16468215739873622796,14247625365947212465,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,16468215739873622796,14247625365947212465,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:2064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,8333359360083349683,14856450376699787547,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:5984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1296,i,2179162004437450644,1799713385432992788,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
    3⤵
    PID:4296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1300,i,5504410803938411739,14762967775210506174,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:14
    3⤵
    PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,1707607764722023909,16665824266119514406,524288 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=1468 /prefetch:14
    3⤵
    PID:3444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6352,i,10927209555413625573,16115180847880454338,262144 --field-trial-handle=2500,i,1010357682918510459,18169553967544568255,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

37b22a9a-1d73-4edb-b6ec-1447e07a402e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\37b22a9a-1d73-4edb-b6ec-1447e07a402e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9f01525b2da899b4274de0123886f8d123d96d0ef6c2d86bb1de26623ae7fcc5
MD5 51b4fd5a1023d25a518adaeb66063166
SHA1 fc0011db138ffa9898b7c35f6f55595dec2a6e9c
SHA512 adedca910d89a1e9a33b511a8502dd894b0a8bbf3be8201be101614b3d8bd083becc0277dc01499b133b200380e3ffa842c61b470299add6f063c19b005cdbb2
TLSH
T110E0E596D820AC271DF81B68A1645747E750131B3A40990B3B3C813C4FB0637568685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 61d901e10ef477dd09a25530ee5c843b4dc269fd84bc75b63290cd9327116160
MD5 0336d3be0823155f5dfcda384f9ef4ad
SHA1 be8af9882cb458c26c791cc4d6ecddf08483d3f8
SHA512 5e0feb3420727b133f4131758e2e59e6770db89ddef72ce0180400387db9a41641e239a967f7594c98f527740c590cf6efade000f75858372f34b5dcaa8fa031
TLSH
T1DB41A0F783F4856ECA1195F0AA18AE2FCF2D0511432C7D9AC9E0AE1793E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 e9c19d53517605f5097cbe8f0de918bb53fcfd515234eadfb83149f4574e80b8
MD5 a1f2dcc089b98651302c517afae5971b
SHA1 1c4bddf58e575423536f2d192a44958f21b01208
SHA512 46fd22e20ebd0d5cc336b855c6e596a99643ea4562671527bc5304b9f9bfbb1dcb182f1788587c208cb48b91de683bbb09e95d7fb9785880e6692018629e3602
SSDEEP 384:sxRhFqZaV/fAsRhFN/RIxrWp/5IW4lsGQzHL:stUZQ/fdh3WG/5IW4lsGQ3
TLSH
T10772E915AA249D379CDBD219FA967F93D3F9153391905E44AAFC8A0C04E67ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 40b9b1ab3d9f1830443753772930568ccf0e8b41d00e8084bc7e6dda9a2d1bc2
MD5 a2027448c3c754710578ab3892d492d1
SHA1 503df15d68060387d363b960372688305408fc9f
SHA512 9d98a26bd275a229cde55c5f8f133a89a0f0870b8dbc6ffc1b23ad8281dc265c772cd499e1af30f222841bd55ef1de4760b55399996e562d71b2f5201bc2f32c
SSDEEP 384:sxRhF8aV/fAs2h9N/RIxrWp/5IW4ZsGQzj0:st6Q/fShfWG/5IW4ZsGQs
TLSH
T14872D915AA249D379CDBD209FA967F93D3F91573A1905E44AAFC8A0C04D66EC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 d43413c2d8180387bc8e57e3383d7086928afbabccf1e799028e37cb308293a0
MD5 6b0c3e315435519299879c8ed5f8001e
SHA1 dd85366d89efc04c7b4b4ea34534e30732ba363f
SHA512 ffb2746e255d78b30c7641ec39cc0ea94a33978f14e0566d41fa12ecd306bda20938981152f1b1c01b61b52436f82af8cd6601ba8b66503d337525e41d323354
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJobbDwzrot4No:Ob4YZnE7yTWg1NfwBu1ja+obHwACNo
TLSH
T1A7E2EB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 1e4be74e28f599a195690b92efe9ebe04a54970d609d2726d9b49cfa4732d717
MD5 827dc45c4210a7db4dfab10786a90ae7
SHA1 0cdb96d87441fcbbffb11b42430a7877b18b07af
SHA512 49ed3ecfbac20ab494f636b69e8b675b6c98708990584f50fd397a7d168a6be1be546c774f3dd768c2c3e988beb51234d571c44b21d5207c390f3db176b5281a
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9Jb9:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRY
TLSH
T132B25D11713F4280387EB50C91B8981F92C2B4A37519E52F7BA846A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 01c0be6794f4e8f6bace1ef2bb13c50bdb01eb9987d1c58b00cee2f4ad2d1ca1
MD5 0330c336e1cc6dd006dabcabfd24ce53
SHA1 68fd6ba2f7dbe3c28aac1bcab8d161a641ecd188
SHA512 d94d5ebf89598ee7c0084ffc43a460b3b0f84b8bebaa39becce3f1c01f2affc588d50c428c17240f4a5b727e981a5d086ef4e6ad1b3e20ba5ffc54ea07eff1cc
SSDEEP 384:nliFiZcIT8NLQ8TUNTUlIRZPvuTtfiufBHfY9oSWPcuDgWcjYxIWbrb1ImgIV8Lh:sFQTQQwg3u15g/WPzDcsdHpIEEz
TLSH
T13EC25B72DC94CEB7ECEA9EC5A64A3647DEF41263848D9EC4DAD84D0C04876DE170BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 c8af2c31d4aa0ffbc0260afaec2ea4167b459626b1b3736f535512a05920f3bd
MD5 587d7ee153308c9f23100d705ca139cc
SHA1 fa241b90d0718448f5466ddb9225333af07706ce
SHA512 2641785f0223c1aea773a6e8ca62382f6e92610915d3801be65503a994da5aa1aa0391d708b71d286e21f7d6fbee1d54ed4b1244410e3a60ec0123a71601cfa1
SSDEEP 384:n2iF1tNn/s3n9Sn8NgV8TUNTUlIRiPvuTu1ReffoGGcuDgWcjYxIuL4FO6AV5XMJ:dF1j+9SXVwgUuo6GzDcsX4FTAV5Xjq
TLSH
T1A1C24B32EC65DABBDDE64FD9B70A7A46DEE0125381D859D8DAD85D0D00C72ED0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f7845ab6720a54d218a920aaad0c1620656111740ceb14f539eaabfde21346e7
MD5 d43ddb0534bc803b245fd653c715a93b
SHA1 210531a947cf735708e9d0e93ee2ba88bb7f313b
SHA512 4fd70e3a9b67e3d67523021e2eeee75553296faa70efd89c34bdf67839fbdcda181be13dea812ea2cfc1689236766a96c9701d5bd68d7d980baf11f39ae93640
SSDEEP 384:nciFiZcI28NLQ8TUNTUlIRZPvuTtfiueffoGGcuDgWcjYxIWbr2hImgIV8LEEIz2:HFQ2QQwg3u1AGzDcsdHoIEEz
TLSH
T1C4C24C72ECA4CEB7ECEA9AC5A64A3647DEF4116384CC9DD4D6D85D0C00876EE070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2da9f3089f13630265227a3718340574e330327b64336ccdc7f05ff932f9fb9f
MD5 7c2bdd7fe18fe14b5d180962472b3783
SHA1 e1fbf7284c1c23443f229aee7a4ca1b18b883356
SHA512 5b993a95ab6d36545ecd31f2ee47237f2ec4d1805b7817302a5cc5366c2bc8e526099cf30f61f3e3f0c83f0b563905c006efe9639b95e2d9d768c05f9612812e
SSDEEP 384:n6iFiZcI28NLQ8TUNTUlIRZPvuTtfiueffoGGcuDgWcjYxIWbr2hImgIV8LEEIz2:xFQ2QQwg3u1AGzDcsdHoIEEz
TLSH
T1B8C24B72ECA4CEB7ACEA9AC5A64A3647DEF41163858C9DD4D6D85D0C00876EE070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 c61da7ed4318e35cae1665f645d8cc271fc71a0c11c17cab09f56914ba72d733
MD5 298c108f19f17b22f740a40b8cef3187
SHA1 63b55f88517d4580874ea8e7e67f48bfd9e6b605
SHA512 624635acda6c8c3715ca61848c2731a5d5a2de82ed25ec6bd0716194a8d8a8b36901156eecf779b9f3821cea0f428a4183090cc1f343384e91e12d97d68e49a6
SSDEEP 384:n6iF1tNn/s3n9Sw8NLQ8TUNTUlIRZPvuTdfiueffoGGcuDgWcjYxIWbr2hIj38xw:xF1j+9NQQwg3u9AGzDcsdHoIj382
TLSH
T1C3B22932DC65DE77ECE68EC9B64A7A46DEE0116384CC9AD4DAD85D4C00C72ED070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9c59f90fd08ae14d3975f65abb0ca19a8b2966cb8f5d4f72bac5e0fbde88438e
MD5 48d8deead0b67ec525a7ce76d2c13346
SHA1 98878ee2bc4e3375f1c628ba9c83c9dbeb500352
SHA512 fece8d64925c86528c6576af967943994a2e403c927390c2b1baf25876a533f5d95da134a9d370e4a03db0c6a001e252f99ca5e6bf8f3f32f1a78e3f6b4008df
SSDEEP 384:n3iF1tNn/s3n9Sn8NgQ8TUNTUlIRiPvuTU8iueffoGGcuDgWcjYxIWbr2kIFO6AS:yF1j+9SXQwgUurAGzDcsdH/IFTAV5Xjq
TLSH
T1BFC25C31E865CE77ECE64ED9B34A7A86DEE016A3848D9DD8D6D95D0C00C72ED070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download