691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/09/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v18R-m4-eM.svg
Size 57KB
Sample260908-twdpdatybv
SHA256 691bebdb70a39edb56c9a4573b009c8feecbcaca5b438cd4e5454b351b4c5f91
MD5 8b9081c1b97a4eac196685a1f8617477
SHA1 89a34da98763f220cbdfc9dfaff9157a8239af61
SHA512 de72e780093390de1e184eb1cd1f29908fa6e5e100cf49a698ae67d4561ee17ba3e1af4f1a74237a4ed5ef14589791d4ed0e522e662faf2e00a580e1f299cbd3
SSDEEP 384:cgSrmXAixJODd7YkfwjGHDBPBsuQnPY7Yast17SXRargsZGmDLYjUpdMp9oDrUvP:cKXl4sZTDK9oDO
TLSH
T11243737637F4BC9B8BCC034B5D02EC6C45AF94B784A8668C9BD790E89548368F7EC560
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6404_559914504\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6404_559914504\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1092	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333582576472258"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{5D449A91-7341-4733-8196-37FDD06389FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6404	msedge.exe
6404	msedge.exe
6404	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6404	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 6404	2428	iexplore.exe	90
PID 6404 wrote to memory of 2700	6404	msedge.exe	91
PID 6404 wrote to memory of 4720	6404	msedge.exe	92
PID 6404 wrote to memory of 1092	6404	msedge.exe	94
PID 6404 wrote to memory of 4720	6404	msedge.exe	92
PID 6404 wrote to memory of 4720	6404	msedge.exe	92
PID 6404 wrote to memory of 4732	6404	msedge.exe	95
PID 6404 wrote to memory of 4732	6404	msedge.exe	95
PID 6404 wrote to memory of 4768	6404	msedge.exe	96
PID 6404 wrote to memory of 4728	6404	msedge.exe	97
PID 6404 wrote to memory of 4768	6404	msedge.exe	96
PID 6404 wrote to memory of 4768	6404	msedge.exe	96
PID 6404 wrote to memory of 4728	6404	msedge.exe	97
PID 6404 wrote to memory of 4728	6404	msedge.exe	97
PID 6404 wrote to memory of 5728	6404	msedge.exe	98
PID 6404 wrote to memory of 5728	6404	msedge.exe	98
PID 6404 wrote to memory of 3728	6404	msedge.exe	99
PID 6404 wrote to memory of 3728	6404	msedge.exe	99
PID 6404 wrote to memory of 3676	6404	msedge.exe	101
PID 6404 wrote to memory of 6484	6404	msedge.exe	105
PID 6404 wrote to memory of 6440	6404	msedge.exe	106
PID 6404 wrote to memory of 5668	6404	msedge.exe	107
PID 6404 wrote to memory of 6284	6404	msedge.exe	108
PID 6404 wrote to memory of 6284	6404	msedge.exe	108
PID 6404 wrote to memory of 5356	6404	msedge.exe	111
PID 6404 wrote to memory of 5356	6404	msedge.exe	111
PID 6404 wrote to memory of 3184	6404	msedge.exe	112

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v18R-m4-eM.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v18R-m4-eM.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2f0,0x304,0x7ff8eafec188,0x7ff8eafec194,0x7ff8eafec1a0
    3⤵
    PID:2700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,8220353676935600360,12996029310022298229,262144 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
    3⤵
    PID:4720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,4056278667493631816,14654424430259145092,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,15489749941809349725,16824401526334520827,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:13
    3⤵
    PID:4732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,12537133854223907750,6743191364636192397,2097152 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
    3⤵
    PID:4768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,12766907718784174853,15758902597259746181,2097152 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:4728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,5774875851235184688,4130148703560765076,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
    3⤵
    PID:5728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18221277416054547682,10829183720844500331,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,12916354035690958482,11895723664058698027,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:2528
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,12916354035690958482,11895723664058698027,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:3676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,15254357951058943721,4713315838970054041,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
    3⤵
    PID:6484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,334057671449960969,16134061837869179261,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
    3⤵
    PID:6440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,15104370366769338962,5041727242667642504,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:5668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,2866071031878352066,16921284573258540117,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
    3⤵
    PID:6284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,1580795811603938621,6650099242474419219,524288 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
    3⤵
    PID:5356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,903952977600528503,12502544776503791269,262144 --field-trial-handle=2428,i,15433004774254866340,4353071562495110086,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ae937054ff0781e2a8abc549e1e2907369cff77dfdee17eb527f3621000b070c
MD5 6f8d7df50de6a436be437d2c5094a696
SHA1 6eae77df973e0109832f98fb0f8b097b8c4d9aa8
SHA512 16513dd1f4fa9e9195e6ead6d8c9e0d1d3707458aeef0cb81a3e72b136c9a4eb152fbaeb3b4efe00e41f9aa141a180b313f26ff1a82cf22baf77351537f2a37d
TLSH
T174E02B55D820BC2B19FC5B18A1944747EB50135B3B41890B3B3C816D8FB563B4687C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 585d5e15891864e2625583264fa4b0646a0a9db58504256da02bef4adcc41ab9
MD5 bd71bf9fe99ea297e908d73b30feeab7
SHA1 2e9374a6c507aec378fa38b336d80b74c3a6400f
SHA512 8b6ab08ab613760d9599436e549dda2fb394303ef1d4d296cb35e0c7e69b4dfe5060b966cde58f6af7902c5b45bdf29a6016b87f06bb70673e2a0b4a556e23ed
TLSH
T1CF419FF783F4856EDA1196F0EA186E2FCE2D0511432C7D9A85E0AE1793E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 07bf5cfc075e2ae34e01cfb4a88de597983e2297a5a56d852d1e08b8232bf539
MD5 fa9aad73de9d22d834e7206da2ac5a3f
SHA1 74330504aff5504862a73c9187a66672843816e1
SHA512 8cd533e4c1e7a778e061d435d4b12e60dbbe20d3a8af31dbf6030ad9468f55393f0b71dda84307b4a4129c5c4c4790cf0e295ae2fc91dcf290c2aee5377aa0a3
SSDEEP 384:sxRR9qEj/fxsoZSN/RIVw4/5IW4lsGQKrM:s9MEj/frZQWl/5IW4lsGQv
TLSH
T1C872D715AA389D379CDBD219FA957F93D6F9117391905E44AAFCCA0C00E66ED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7c0b5e26257464795bb685e717ed3b25642fdbd92b8859d1890d89f56dc09089
MD5 fbfe0510d5cd4c2a829964426797e750
SHA1 b84272ff999ce48a349619dbdd27ed8c1efd1346
SHA512 531a4d62e766c99b7be7087ca4affa3913d4ce236500b34c97d0c560486aed9ab60a3f5c9e2be03ee4763018425d6df7e41ec74e40e67c0d96d32268473bbae8
SSDEEP 384:sxRR98j/fxsLZcN/RIVw4/5IW4VsGQKjb:s9Sj/f4ZWWl/5IW4VsGQU
TLSH
T14C72E9156A389D3B9CDBD209FA957F93D6FD113391905E44AAFCCA0C04E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 3f72ef00d891cf57eea8758cedf5b5949a8cd2c16dea13ea9f22375f012f061b
MD5 38c373e4caa4b9c2537111d80b8bd578
SHA1 fde826190649831536d0f9bfb3e58dde65ab1f3d
SHA512 6eb9bb11301f2bb3a46079158270f7b72e6a21af10531a30d496c965038cabeeecb4ded317c87236b23f9df25f7f914bce216f1b0da97c2f66670360975ca3c4
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVoobbDwzro/4i:Ob4YZnE7yTWg1NfwBu1jaPobHwAwi
TLSH
T164E2FC3B280CCB7E4F804ADDEC29BD9A6DA801CF56D88D5447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 61adc81c54af083e3b49a4f7ce22ad187badba35bdfac0fafd3bb7f2fcf8c4d6
MD5 e403745046386507e23d311ec98348fa
SHA1 73b22afefd2cf8daac52e4bb08a0108844cc98da
SHA512 3dd5cf1a5aa026ee10fbcfc63bfc882c16a3fb8933e00911db96a4bc3cd406d179b8ea4002c915f04e909a968fd912c1969bcdf4ea119afef6815ea666e25a5c
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9fF0:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRT
TLSH
T14AB24C11713F4680387EA90C9178D82F96C2B4A37519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d448a7f83cdebbc9ca5ea4a4c6962cd175906e37169fe641efc9a82156149f19
MD5 21e7bf60121b93f3f9a4f4d197652636
SHA1 ef0cf1caac8a43c2d08fae90297da18b067317fc
SHA512 c59afc9494c4a24edff15db2397a96777f5b824dbd2fb159b1a063423749430d6c5075b4f9faadfd9454b9d5309f2d2cfc670fcd031a399c2a5ecdd0b0127d8c
SSDEEP 384:n3iF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTQGjEqfbzG3+3YEi3rdksOObjI9G6w7W:yF1j+9SXswgUurpG3yYEMSs29MW
TLSH
T1C9D25B36E895CEB7ECD64ED8B74A3A86EEE05163888C5AD8E6D85E4D00C71DD0707C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 726641dbe9bef5c7ea7dcf373da9f9b8c2bb7ee319db11201860f640735bb1e3
MD5 8780bb7068edc7cd0d3847a92a551871
SHA1 08bfdc8c6077cf8ec7d143385561f01889d26d02
SHA512 fdee63c1ea02b21fbd2c009f0cd4ddf2fc2769096c46608a24eb9ed2ec786a9928f0a1e54e8c2bc0a0e7aeae84b101d22e81214038edf2aa7e6ea1817b6745cc
SSDEEP 384:nmiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTuMREqfbzG3+3YEeLVOObjI9G6w7ZV8p:NF1j+9SXswgUurXG3yYE8V29MW
TLSH
T1EBC25A36E859CEB7EDE64FD9B70E7A46EEE0516384985AD8DAC85E4C00C71DD4303C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 fbe9b70f95bdc3c0db49912d6a8cc8ab611be2b86a2df563597b6e6f0faceec9
MD5 770a913009c344606f691572d21ee4f1
SHA1 e6177426da53cd8cf2b81f908498b4badee9728a
SHA512 62aa1f6490d5de758f23077a2bbfe15a12a26c22cbb3a5b612f0fddb74eccdbc8e11b8327db6d5b0713abe587672bade2ccaebafc403969950a567b016a0d2bb
SSDEEP 384:nRiFiZcIT8NLs8TUNTUlIRuPvuTsMjEqfbzG3+3YEi3rdessa+VYmlz8LEEIztoI:4FQTQswgQu1pG3yYEM4shgbv
TLSH
T140C22A32ACA5CDB7E8EA8FC5A64A7642DEF45163848C9AD8D6D85E4D00C71DE0707C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 213d9a6b273915b099bda21d23a3d4dfd2a526745dd85278144bec0659366a23
MD5 9f11fd04d4b41653c0e324f19f48fdca
SHA1 96b16202bfb97e00b12c9cb85fd4b6d850bc2efe
SHA512 22b6f7d5de9c71a60f9ba58bf50fc673491e385adb43501a89207997cbdba655d482826dd6200b50685beb78e31d0e58c1b675b4f8dd4f979d0162bc316faab0
SSDEEP 384:nqiFiZcIT8NLs8TUNTUlIRuPvuThMjEqfbzG3+3YEi3rdessa+VYmlz8LEEIztoI:hFQTQswgQuGpG3yYEM4shgbv
TLSH
T191C22A32ACA5CEB7E8EB8FC5A64A7642DEF45163848C9AD8D6D85E4D00C71DE0707C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ae60d7096a569f8ee5ab2256c841920b036fdbd3ade69673964bc0274daa896b
MD5 a0441601eb210b30ad4640154cec96eb
SHA1 f9169589e809c79a79b0a55a36f3bc04a17c56cd
SHA512 8a5c6fc45a5ad3760a9eb3d5a0ada9ca00b4f6f31587b6339b34a794292f50a19b1eff3727c9527745a484371051dabcecc15a0459b41211810284ae36e0b801
SSDEEP 384:noiFiZcIp8NLs8TUNTUlIRuPvuTsMj2+KMfNPo8Xg3+3YEi3rkGssa+VYmlz8LEb:zFQpQswgQu1fK4o8Xg3yYEMJshgbv
TLSH
T195C24B32AC94CDB7ECEB8EC5A64A7642DEF4616398C99AD8D6D85E4D00C71DE0307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5b13b6fcdf04fb96e793406611cf7bea4f0b25a21e6210ff6fcfb1601d456cec
MD5 12233c6bdb79fb5af7e57b25da973536
SHA1 34747b1c27534b8b74cbfee6a2a11d96508d27a4
SHA512 dbd9a12f0c15dfb739a20974af92acf153e278d3895c5b3771f558fd6665e280e51d7fd4931709d73557d9ed82792f579b34710e934cb9cfe292599545ab1b56
TLSH
T153512DE04C381AC1D4BD0E7FB45B78FC85E8C726F490343D6858EA985A7A65D309483F
MD5 SHA1 SHA512 TLSH

Submit Download