09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_svg/small1-v1A-m3-eL.svg
Size 3KB
Sample260820-mbzmsavckd
SHA256 09a1145a6620c24ca73c44e23c31f7917816ed9ffcb17a8295cbcd67d88745b5
MD5 8a97a3e2ea7103a874e7c9a32e7ed545
SHA1 b450e9e2801ae7e10cb96224461aeddb11dc1ef7
SHA512 7303da25aa0029a146545b8d2046e553d7c07cc7ad7a6942065592fa27b645f0a9a88448251d474773f712b5eafff6d8b4ec09bfbd1a490865583802a57df4b7
TLSH
T12A61168876F87EEBC7D802530D51D8B84B2F946BD822978DD3CB94E875282AC735E570
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4712	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316947003044337"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{2BD10EFE-F87A-45A4-85FF-2D6C8AA34A16}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5620	msedge.exe
5620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5528	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 1776 wrote to memory of 5528	1776	iexplore.exe	89
PID 5528 wrote to memory of 1696	5528	msedge.exe	90
PID 5528 wrote to memory of 4712	5528	msedge.exe	92
PID 5528 wrote to memory of 4640	5528	msedge.exe	93
PID 5528 wrote to memory of 4640	5528	msedge.exe	93
PID 5528 wrote to memory of 3136	5528	msedge.exe	95
PID 5528 wrote to memory of 3136	5528	msedge.exe	95
PID 5528 wrote to memory of 3136	5528	msedge.exe	95
PID 5528 wrote to memory of 5440	5528	msedge.exe	96
PID 5528 wrote to memory of 5440	5528	msedge.exe	96
PID 5528 wrote to memory of 5440	5528	msedge.exe	96
PID 5528 wrote to memory of 7152	5528	msedge.exe	94
PID 5528 wrote to memory of 7152	5528	msedge.exe	94
PID 5528 wrote to memory of 7152	5528	msedge.exe	94
PID 5528 wrote to memory of 2364	5528	msedge.exe	97
PID 5528 wrote to memory of 2364	5528	msedge.exe	97
PID 5528 wrote to memory of 3456	5528	msedge.exe	98
PID 5528 wrote to memory of 3456	5528	msedge.exe	98
PID 5528 wrote to memory of 3888	5528	msedge.exe	100
PID 5528 wrote to memory of 4820	5528	msedge.exe	105
PID 5528 wrote to memory of 5320	5528	msedge.exe	106
PID 5528 wrote to memory of 4332	5528	msedge.exe	107
PID 5528 wrote to memory of 2464	5528	msedge.exe	108
PID 5528 wrote to memory of 2464	5528	msedge.exe	108
PID 5528 wrote to memory of 5620	5528	msedge.exe	111

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\small_svg\small1-v1A-m3-eL.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/small_svg/small1-v1A-m3-eL.svg"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ff8518cc188,0x7ff8518cc194,0x7ff8518cc1a0
    3⤵
    PID:1696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2044,i,1217920482593777162,16499434581937750574,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2668,i,15592594050528667427,16875413201177825842,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:13
    3⤵
    PID:4640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,2928269393418666912,9257526996743219298,262144 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
    3⤵
    PID:7152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,15351354951847514844,6898233020949467827,2097152 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7917958712667787532,13376817315308399497,2097152 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
    3⤵
    PID:5440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5412139864234931652,5223283821622567776,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:2364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,11973231794251071464,11561703283367053462,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:3456
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,5798525009519698852,11321664868136431134,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:6196
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,5798525009519698852,11321664868136431134,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:3888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,7999191803489605906,11049312326456114582,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
    3⤵
    PID:4820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,4363448009531977300,5753457846396182028,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
    3⤵
    PID:5320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1280,i,8062744630190216587,2806571353612179650,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,1104061785185034188,3697147790895282786,524288 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
    3⤵
    PID:2464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=944,i,11210703093744101390,17260874338718772831,262144 --field-trial-handle=2508,i,14798845047359285775,14095097036055631215,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1640

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

7ee743d7-0e01-4eae-bbc9-0cec61d218fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ee743d7-0e01-4eae-bbc9-0cec61d218fd.tmp
Size 414B
SHA256 dc07316c8fe40d65f472b488c2178f849ceee690dc671e1708d4be8f36e496bd
MD5 31c4e689fa1c273f011a24d15b35b3f8
SHA1 296141ac0fd5a1c45367bd2d9fb60ff3e383fe62
SHA512 f82be26dd58d8e0c95a58f4efb116cda5915028e7ef090a92c8a3c98621972f119a5447cf5647d237d413062932ef7e11695353ce6eac77e39859f454b54bb78
TLSH
T110E0E5A5C820BC271DFD1B18A15447C7E740132B3B50990B3A3C812E4FB06374686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3c3e51cc8ab5e153a2580e7c118e2ed5406f8691c8dc29f02f68a4ba645aa1dc
MD5 a74cf66b969ccd1f1ed208f9fbf01237
SHA1 430240b45c82c44c901445c1190674be30ed44c0
SHA512 4bc5f18f12bdbc3522652cb44ace4b62d011e3f40ac9f10a22f4dedca52699360c8db37f6007f179e883678c06550fd5e37f4a55024b800abfb0aab311bb0cef
TLSH
T1DE419DF783F4856E9A1195F0AA18BE2FCE2D0511432C7D9A89E0AE2793E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f071d47d468dc3493da5460c4fd09f8c3c10e8dd39a14e2df53ccdf5954ea53d
MD5 4976d391de5bc98f3dd57bdab6e83549
SHA1 bdb81f55a8060fffe8222668b25069cf4a2c77c4
SHA512 4df0fd86e668da5fcedfa6f8890cf0e67c6ae5ee9a2983a6a6e1afb2940224352eb1e8a388a8d3720a21e6635881361b21a140abc4a8553b56452848a5760357
SSDEEP 192:sxRURUyMqZjK1Ml8wC+/fTseUNRZRIokzoD8peb/g6+WNIYcC4xRRsGQ3GDIgjyJ:sxRU18+/fTseUN/RIoMY/5IW45sGQWjO
TLSH
T10772EA15AA349D7B8CDBD209FA557F93D7F91173A1905E44AAFCCA0C04E6AED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 7825de075b434ef44e1938101fc2c6a7eaa318070f7d4f03a606e6f4bd85c2ba
MD5 c3c0e433fc0cef1fd63091ffc2356579
SHA1 9c4d0cebc868ab751aaf1f864b69fa5dc5d68e73
SHA512 bacaaa1448444d32b27e8748f7d0aa7d229125e8753273b9481b56a0de62e38fbe98089c0a498d08cadab405001b7469138a517396ccfbb388d10adced1a2830
SSDEEP 384:sxRU1qq+/fTs4eN/RIoMY/5IW4qsGQWS4:sAkq+/fdsWU/5IW4qsGQM
TLSH
T18A72D815AA249D778CDBE219BA957F93D3F81173A1505E44AEFCCA0C04E6AED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 964d45eab571ce45318ba0b49a5fae69c47ef519344b4ace9a2b34b39e50f5da
MD5 8e0bc77f8435d33f917bfee3c25fe102
SHA1 fcefdcf67eeef69f8753d219b123947e026b8759
SHA512 8e88509fdb90f33514b12ed2034db2f72251e62ac2f084d87136de1d562483956c556778a10deb7dcfc6eaae4f2899eb31f61bc9f9833d0cb22662ee65717f68
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OV5obbDwzro+4l:Ob4YZnE7yTWg1NfwBu1jaWobHwA5l
TLSH
T162E2EB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9bece40e9b9d92f565cb1e003036ad3fb68d89977c5731a0a710aad634443663
MD5 cd26d07035a7805b291976714362375b
SHA1 186318438008de9cbf07db7e27f3db070501ec2f
SHA512 12fa374a4b26a803100bdc57cb73f99007318daeafb4e41798d07eb1e777f745e56892fd2be26ca64fa27bd6e9a8de58a92c7510ba9148407ee61e7eea9c7d6b
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9ZDp:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRy
TLSH
T179B24D11753F4690383EB90C91BC982F96C2B4A37419E52F7B6801A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 23d72592c54631fd2c624e9dc67f1dcd6fb12d743d05a7b99d1e64b639c7cd97
MD5 aa3e3701b17e9ef14800a63a89b281aa
SHA1 f9ca45b655ca4100e8bbf800669308d626119aaf
SHA512 3addcbae58b41ce6a33a8e13d10124c65065236b9defbec23b31f4031d7177c65bd2b7bcb985831d1c1970a4aff6727ed8233a66b3b59cd8b88b11911617b854
SSDEEP 384:njiFiZcIf8NL68TUNTUlIR0PvuTDQbuEqfbzGZwKixr9cZxcivR+at8LEEIzLox:OFQfQ6wg6ugAGKxr9c7ciJl3W
TLSH
T1D8C26D72DC64CDB7ACEA8FC4B7497647EEE45163888C9AD4E9C94E1C00876EE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 4ddeb45da3312470c40af17d8f9c5b714a0c4b0b5d267b02cb8c597fa5ac4f75
MD5 5afed82e7ed54a3e9c13e406e6125d58
SHA1 8072fe2bb613de0e094f4d4c0852e621daa83aa7
SHA512 d99826f179b34230b7e58b4e113888451b7db3322669c860f55b49aaacf0aed52237b815f50e2b2fb6623a52cdc71beb25e7ea056112d5e898635e608110897d
SSDEEP 384:nLiF1tNn/s3n9Sn8NgZ8TUNTUlIRiPvuTulQ2REqfbzGZwKixr9LLD3a8LEEIzNR:mF1j+9SXZwgUusXGKxr9vD4
TLSH
T101B22A36DC55DEBBEDEA8F98B70A7646DEE01167849C5AD4DAC81D0D00CB2DD0707C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e18e1958115be313842456441e3f430df3c7499f5636ee378e1c80458869e9bd
MD5 6a5f2723ff5217b4ccdc02f2baff9bca
SHA1 b50cddbf1a91d49c4f6ef8e39d56b7432e365178
SHA512 4395a7a93998057a5e73b9e76ef507c7be4c4dba76c2dabee8dbcee326371073738de2155ee241854363d0ee515b030355ba8bf750dcf3898fc54f9bb675d3ac
SSDEEP 384:nziFiZcIf8NL68TUNTUlIR0PvuTjQbuEqfbzGZwKixr9cZxcivR+at8LEEIzLox:eFQfQ6wg6uIAGKxr9c7ciJl3W
TLSH
T13AC26D72DC64CDB7ACEA8FC4B7497647EEE45163848C9AD4E9C94E0C00876ED170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 d860b6ea06fa715339095d166d8d4d5d9c45c8d6c4aac50625c7d85cd729f60a
MD5 a9a92d2915caa6857bc61d5e56792bbe
SHA1 9ccbb1182a7ffdd2ad6720ca75606ecf6c931a23
SHA512 8d365048f5fd667ca162b9755b6ad2d2c1ab0934a942be47d98538f5a9a58db1b3401bafb9f8f4a224d646ffc847e94713cb0f814a08e4a3c12684fa87668dbd
SSDEEP 384:n9iF1tNn/s3n9Sn8Ng68TUNTUlIRiPvuTQFQ2buEqfbzGZwKixr9cZkc3a8LEEI7:0F1j+9SX6wgUumAGKxr9cec4
TLSH
T198B24C32DC55DDA7ECEA4FD8B74A7646DEE41163888C9AD4E9C85D4C00C72ED170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6ec68f99ff7c6dd1f0a91aa67c4929269073d5d86ed673528e0fc107f7bb3bd1
MD5 13cb53c749a77d42e578fea54e49ea27
SHA1 8661aa2078f849a416f8e989ced1b5950d5e29f3
SHA512 866c0aa635862f07a92a204b93865dcc65a4efe3e2eb01d3d191b083211532a372dc5f06ac10d98d809c2c6e82e5b93747111e048e55d8de3f03883646c26e20
SSDEEP 384:njiFiZcIh8NL68TUNTUlIR0PvuTDQbuXctfgZ506q8ZwKixr9c4FcivR+at8LEEx:OFQhQ6wg6ugHe5d7Kxr9cqciJl3W
TLSH
T171C25C71DC94CDB7ACEE8AC4B74A7647EEF05163888D9AD4EAC54E0C00876EE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download