c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31

Analysis

max time kernel
149s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 08:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m1-eL.svg
Size 3KB
Sample260820-jw6eaavydw
SHA256 c2f5b199320bbc3fcff20bef28f02acbe7697e2a9d1afe31bf7d66b180423a31
MD5 2226f49d0e59c46b4a18649eb679ae54
SHA1 c969dfea4218c1fab67060e9393a7fc24cc5547a
SHA512 a155996290a9d678506c7112a083decaa035069718b565052611fd751a1fb9378bb55dbdb09a8fabc2a0f5caa91dfbc2eb1e106fb2f9cba9c2f00608c0720af7
TLSH
T1C771368876F87EDBD7D802570D41D4B84B2F906BD822978DD3CBA0E8792826C735E5B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2700	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316865415070767"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{4124EAB7-1433-4720-A142-1822C4C65203}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5632	msedge.exe
5632	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6264	msedge.exe
6264	msedge.exe
6264	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6264	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 8 wrote to memory of 6264	8	iexplore.exe	90
PID 6264 wrote to memory of 2236	6264	msedge.exe	91
PID 6264 wrote to memory of 2700	6264	msedge.exe	92
PID 6264 wrote to memory of 4940	6264	msedge.exe	93
PID 6264 wrote to memory of 4940	6264	msedge.exe	93
PID 6264 wrote to memory of 4940	6264	msedge.exe	93
PID 6264 wrote to memory of 6992	6264	msedge.exe	94
PID 6264 wrote to memory of 6992	6264	msedge.exe	94
PID 6264 wrote to memory of 1940	6264	msedge.exe	96
PID 6264 wrote to memory of 6568	6264	msedge.exe	97
PID 6264 wrote to memory of 6568	6264	msedge.exe	97
PID 6264 wrote to memory of 6568	6264	msedge.exe	97
PID 6264 wrote to memory of 1940	6264	msedge.exe	96
PID 6264 wrote to memory of 1940	6264	msedge.exe	96
PID 6264 wrote to memory of 7120	6264	msedge.exe	98
PID 6264 wrote to memory of 7120	6264	msedge.exe	98
PID 6264 wrote to memory of 4452	6264	msedge.exe	99
PID 6264 wrote to memory of 4452	6264	msedge.exe	99
PID 6264 wrote to memory of 4628	6264	msedge.exe	101
PID 6264 wrote to memory of 6980	6264	msedge.exe	106
PID 6264 wrote to memory of 1192	6264	msedge.exe	107
PID 6264 wrote to memory of 6528	6264	msedge.exe	108
PID 6264 wrote to memory of 5808	6264	msedge.exe	109
PID 6264 wrote to memory of 5808	6264	msedge.exe	109
PID 6264 wrote to memory of 5632	6264	msedge.exe	112

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m1-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m1-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2c8,0x300,0x7ffd3eadc188,0x7ffd3eadc194,0x7ffd3eadc1a0
    3⤵
    PID:2236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,16640207438005537766,13535947852542239353,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,15782425141541727656,11968617976521055900,262144 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
    3⤵
    PID:4940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,12366198892113895711,6080939891450054316,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:13
    3⤵
    PID:6992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,8180938401810208644,9922064204767691676,2097152 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    PID:1940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,2330070660680870784,1436517593211098357,2097152 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:6568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,7022391064286654997,1148273786022350631,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:7120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,13748513617822450067,18237234995927515740,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
    3⤵
    PID:4452
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,4927328042693016977,15799102151362741729,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
    3⤵
    PID:6728
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,4927328042693016977,15799102151362741729,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
    3⤵
    PID:4628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,8781870526109883385,6962763008334392150,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
    3⤵
    PID:6980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,12986742082381673142,13683319706950881176,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
    3⤵
    PID:1192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,4436756231151464078,7148500796446981185,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:6528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,6286510418022884486,10315186745531112805,524288 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:5808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6368,i,8991940433607232483,5148707772668077502,262144 --field-trial-handle=2372,i,17836201118683579633,10675993947031085430,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5632

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1136

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2dbbf40e92e10b3ed011faec509117a2cd241744718209731fca8c836c35080f
MD5 d2f0e51376600e2a97b44662ce788416
SHA1 b3dc9dfa8db2ef1e804148640a19bd897f0d11d2
SHA512 52924c1147301b60b3cc90f4e293438bab642ce0f83fecd010bb0baf9f1502c97988df3a01beb06cc43527d25cc8f23289cb2eb114b1ffde53528efb9955757b
TLSH
T1B3E0EDA9D860BC2719FC1B18A0541A8BEB40131B3A51890B7E3C826C8FF063B478A95C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c6c4ac362c05df7791ca4c23663aaef4ea955ce336b25d906e59048b2efc9d26
MD5 aa2c013696f3155ead7ee550aad8eb00
SHA1 0b57146baa2e31c0322b6632b5ed728eca1b3cfa
SHA512 d9dae2064438c7c5c69bb9ce0520737b13c2da6dacedf7445f3cff07a3ff9f016dd61f0c2717815424b816b46adc03fa830f7eb3ece3ef2e9651aab0266ac3ef
TLSH
T18C41B2F783F4856ECA1195F0AA186E1FDF1D0515832C7D9A89E0AE1793F3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 dbf2d01dbcae6c5aab72433a0c84605ebcfe03fa9175b8d9eb591ab9ad11f94a
MD5 a8e6b23343b712cb1d7e97d70788e91f
SHA1 e82e01bdc1a8cb84fc6bb15e7a6b09842e5805f2
SHA512 9a513b4a188998ee655590c345e4a0b8c25b06d20b18863ec22ded1259a84ded6c6c0a6fb3acf61a63890e64fd7ec8019785c2334c188c138babaaf30317d765
SSDEEP 192:sxRRRxyMqZjK1Ml8wCt/fJ+sbjNRZRITGzoD8pe9/g6+WNIYcC4xY97sGQpG5Ign:sxRR+8t/fssbjN/RIT6O/5IW4isGQSjb
TLSH
T1A172EA15AA289D7BCCDBD209FA557F93D7F81173A1905E44AAFCCA0C04E66ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 665f07162a2ec4f42e787c31d27922aba11f152e6afd2f2e2c27f1e7ea53319d
MD5 d13865a38da9afb07c380753c90bb0de
SHA1 6487de6cd8288fd8391c5fcdcef6b8a9d89981dd
SHA512 1e67e365fdac8eddc9634ec0664ca584387b0232fc26ebfbaceb537f8b74226cf060d35208fa6baeed20cec7120b131d7ed6ea9b709b5815fd4fbb2a0d25dbf9
SSDEEP 384:sxRR+qht/fssXLN/RIT6O/5IW4NsGQSKY:s1Bht/f3hWf/5IW4NsGQQ
TLSH
T1B672E8159A289D77CCDBE219FA957F93D3F91173A1905E44AAFCCA0C04E66ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 872395ee87650a64cf8ab6c563cee15668e692c78e0fc350ba94f96a0bf18a92
MD5 a04bdfd34b2fca1a3abf7d17fbf0cfc6
SHA1 904cc7f9b7c4cbfcdb27ffab2dd4f17ab39c784a
SHA512 77bad33bcdbda128925ef4ba7b3ade132238ccf29371a2ae7ec42310cb30feff37a6ba4045b128d1618deeb09971f058445e2f176f3e1135f76975b13e2ced38
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYobbDwzroB4xS:Ob4YZnE7yTWg1NfwBu1jaHobHwA2xS
TLSH
T148E2EB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 20414e1c1c4f1a4337a629d0d66bdd32fec5d2131b0567f0c3a2c0e0467d56ab
MD5 5a4c6f072264629d08b1e46c8a36ce69
SHA1 1aa89b022141abd74a5cdbd46d0f2535b9165996
SHA512 1534e886fece1d3a2d934e2b6b3c22841a302e4b6bd1bf5152791d9df32c0d5f95b29d65e1610eb93f2ed76fe4ed05718719a04235c5b4c17a3f5fbac6391d0e
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9ftH:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRY
TLSH
T1DDB25E11713F4680383EB90C91B8981F96C2B4637519E52F7BA802A65F67E139DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0836aec5242df4fcb474e0997c8d27d9dfe2a176b1d3039e92d67ccdca5cf41a
MD5 e48f70bad7ae5f4e0b7f570b231bc595
SHA1 17d50a97d96d1688726d0be7a36cdfd772b27e76
SHA512 d40dfef3282a05c2e24b3596646ea269a3edf08cb047a9baee8ae4053d99c0062ba25e843707dbd2c352d0ab5d1461395bb817ceffa8ef8e92bda6b22f2cedb8
SSDEEP 384:n9iFiZcIi8NLO8TUNTUlIR6PvuTCcH+EqfbGGj6P57ClAcaTey2vlGFivrUv8LED:0FQiQOwgIu+cbGmLTeyTFi6j
TLSH
T19FC25C71ECA4CDB7ACEA8FD9A7497646EEF41163848C8AC8D6D84E1C00876DE170BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2cf5b9feeb52e5476bb4e2d7f199228afa1b23d1427300469b0f4de8cee8283d
MD5 b248ba62699fde2bc3845a771d9cdfa7
SHA1 f15486a45f0dc2c18b22ac315ec8d6b9364b6fce
SHA512 33f2ba4d60a53a8397e5350c2277aa2de15e824b6936fb5080351a26ad7931bd8a0053606152381f47895ce93ee126411c5578d9066546b2741d0263764c7e9d
SSDEEP 384:nWiF1tNn/s3n9Sn8NgO8TUNTUlIRiPvuTNzy+EqfbGGj6P57ClAcaTey2vlkFOOG:9F1j+9SXOwgUuZubGmLTeyrF29MW
TLSH
T109D25C32EC59CEB7ECE64ED9B74A768AEEE01277848C5AD8D6D85D0C00872DD074BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 69486df22127a63ac38dbec576b02d15143a668da3fff307d921894ed66f69f1
MD5 c7035b4bc51cfc4f0f3948618b39b934
SHA1 8da739a12501b6fa3af5dd4fa494229309b50e22
SHA512 77d5b4b4bfb77876cd5b1a6027a7997b1aee3995ba1499caa401c37f89acbf240fd92e0802400fa73bcd96245cbd30017027e43eb4a7827947f772161ff02700
SSDEEP 384:n7iF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTupREqfbGGj6P57ClAcaTZL8OObjI9GK:WF1j+9SXmwgUu0qGmLT1829MW
TLSH
T1E5C25B36EC59CEB7EDE64F99B74A3A4AEEE01267849C59D8DAD85E0C00C72DD0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a0645a22711374fcf2850cbf92bf2910d6351667f2e6f48182087f2bea11df4f
MD5 1f9556982eec29aa6ffa494a8dcc468e
SHA1 e1714627aab9f662040182835f99b7d1dfa58471
SHA512 444baee4918d087baaa171b93029724a480761c452bdb2765165464cdb790b24b1ca4373517c87cf7ceb38ea8e62a0ce3d8efc3e200d7d16601ecf9dd0354156
SSDEEP 384:nPiFiZcI38NLO8TUNTUlIR6PvuTCcH+EqfbGGj6P57ClAcaTey2vb+FivrUv8LED:aFQ3QOwgIu+cbGmLTeyrFi6j
TLSH
T163C24B71ECA4CDB7ACEA8FD9A7497646EEF41163848C8AD8D5D84E1C00876DE170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 1b829201ee4abbb6874d57b55c5732b0511e688bffad2acfb19a90fb64a92549
MD5 abd4c1c23fca8ff393c2b18211717bd8
SHA1 5c514c07f604922763b63eab855599c7c3997189
SHA512 30c1eccc92221cc0925304e35de41d27392739f8803b13d96794db5b49de004c37dca64a74c2f242e156b5d46aea43d362067aa53e2b6a61b8408ad8a52705a2
SSDEEP 384:nuiFiZcIi8NLO8TUNTUlIReBPvuTCrH+EqfbGGj6P57ClAcaTey2vlGFivrUv8LW:FFQiQOwgKu+rbGmLTeyTFi6j
TLSH
T139C25C31ECA4CDB7ACEA8FD9A7497646EEF41163858C9AC8D6D84E1C00876DE170BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download