42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bustocreditfinserv/bustocreditfinserv/enter/backyard/asset/bootstrap/fonts/glyphicons-halflings-regular.svg
Size 106KB
Sample260629-pgcrbaey2n
SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
MD5 89889688147bd7575d6327160d64e760
SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
TLSH
T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2060	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-958335860-2021930596-4099878453-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-958335860-2021930596-4099878453-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-958335860-2021930596-4099878453-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134272092390106121"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-958335860-2021930596-4099878453-1000\{22A07DAF-A829-4408-B3DD-F80D58B171D4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5876	msedge.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 5544 wrote to memory of 5876	5544	iexplore.exe	90
PID 5876 wrote to memory of 5880	5876	msedge.exe	91
PID 5876 wrote to memory of 5408	5876	msedge.exe	92
PID 5876 wrote to memory of 2060	5876	msedge.exe	94
PID 5876 wrote to memory of 5408	5876	msedge.exe	92
PID 5876 wrote to memory of 5408	5876	msedge.exe	92
PID 5876 wrote to memory of 6088	5876	msedge.exe	95
PID 5876 wrote to memory of 6088	5876	msedge.exe	95
PID 5876 wrote to memory of 2996	5876	msedge.exe	96
PID 5876 wrote to memory of 2996	5876	msedge.exe	96
PID 5876 wrote to memory of 2996	5876	msedge.exe	96
PID 5876 wrote to memory of 1404	5876	msedge.exe	97
PID 5876 wrote to memory of 1404	5876	msedge.exe	97
PID 5876 wrote to memory of 1404	5876	msedge.exe	97
PID 5876 wrote to memory of 6856	5876	msedge.exe	98
PID 5876 wrote to memory of 5496	5876	msedge.exe	99
PID 5876 wrote to memory of 6856	5876	msedge.exe	98
PID 5876 wrote to memory of 5496	5876	msedge.exe	99
PID 5876 wrote to memory of 6316	5876	msedge.exe	101
PID 5876 wrote to memory of 5532	5876	msedge.exe	105
PID 5876 wrote to memory of 7048	5876	msedge.exe	106
PID 5876 wrote to memory of 6188	5876	msedge.exe	107
PID 5876 wrote to memory of 4368	5876	msedge.exe	108
PID 5876 wrote to memory of 4368	5876	msedge.exe	108
PID 5876 wrote to memory of 5960	5876	msedge.exe	110

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bustocreditfinserv\bustocreditfinserv\enter\backyard\asset\bootstrap\fonts\glyphicons-halflings-regular.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/bustocreditfinserv/bustocreditfinserv/enter/backyard/asset/bootstrap/fonts/glyphicons-halflings-regular.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ff927cdc188,0x7ff927cdc194,0x7ff927cdc1a0
    3⤵
    PID:5880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,209543544112859342,2507403560165589592,262144 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
    3⤵
    PID:5408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,1301935679927499861,12878096812670119015,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,1164790326481079189,10585005841131387299,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:13
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,2291582592780038683,8069748395447412790,2097152 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
    3⤵
    PID:2996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,14699903444324878857,11335248593352816772,2097152 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:1404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,14433843871824208730,16531787848543232625,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
    3⤵
    PID:6856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,11602779941153222357,17330157284642352152,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,668464258370368903,10468305680166064228,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:1196
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,668464258370368903,10468305680166064228,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:6316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,9185393434369232662,11059428079062742579,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
    3⤵
    PID:5532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,18311722228422123778,4401521024447166162,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:7048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,15822140267999849913,139284391014073882,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
    3⤵
    PID:6188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,6326312878241844227,14143602128832157627,524288 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:4368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5972,i,9720799543486701490,11198125708724102974,262144 --field-trial-handle=2356,i,17784483433609598461,14734490808177280155,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 19509664097c265b613b84702dd83a5bf5de055759de5b566057524c40ef7e6a
MD5 21b7bb74a7a973f055e2b6a521d9b7cb
SHA1 3d70b3b2cde84afbf3f8734366a34038d4e9a9d8
SHA512 c0e322927c0dd573b4065c0af844b7689ba9ed346bc20367531c7f58dfc0db9d330f64bb479ece7c9e93e6ef8165c09293c33482618cb351288c8e942ef968f0
TLSH
T109D0C03136146102C21A22B06C00631C605D82123192C10774E1E00ECC9FA60B7C6503
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54c2f594ac5ab8cb2c84ac95854712b1d39191769839007889ad58d0a8acb09b
MD5 35a353c55b125bcf6e8367640eeea748
SHA1 1655243ec502fb3b5a85abd22fbd1f62cd1c2d0c
SHA512 2da841d1abcd6407ef04255ba7b81e4a131a12cc27032c43d6d17f9e17a75ddd466b533c45594f0e81eda5c450b35a336c6eed9c4f2302f610f34731bf1aea49
TLSH
T170D0C03136146102C21A22706C10632C605D82563591C10770E1900ECCDFA6077C6503
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 282670afcfcd026f06dd2f00f8bdf0b884a687f8480b9da40f6d03690ea589de
MD5 7a049418d9ee5de797d3116edf9c78de
SHA1 2d0b12196d85d6831a2f57a527eb8e81523f5691
SHA512 2b1b72d36c56205d46a4b15e2c4f3a3534a13a032cb19b3ceea7a29bc34bc074af89cbb3a81d9d8eaae4026692b5a87c4ce81418067da6490b4db2aa74369cdc
TLSH
T1F6F028B6CD25EC3718FD5B2920A84B4BEB60135B2740989B3B3DD20C4FB153B4645C2C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e43f4be2-9146-43f5-89d3-e70b14b41985.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e43f4be2-9146-43f5-89d3-e70b14b41985.tmp
Size 2KB
SHA256 d533137407e564595e52b600232debdd678d4f000dbe2da3f6cdab054ee7d527
MD5 90a87b2c651d666dbd2fcd904101ba14
SHA1 5051d70ba3f8ae838b590e8e7f1752d349e733d2
SHA512 399b871928192a2ae2991d46f0384d2619bd57eb337727684d81b6da1ba8b188b3c0afbcbd6611e97318dfc10fcf403fc8aff5e3c27a58f70e17d1bf7a5c4b0d
TLSH
T14941BCF783E4856D891196F0BA18AE2BDE2D0514832C3D5AC9E0AF1BD3E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f44a38966c73c31e0a05456dae9144f48eccd312f4a52aa4c7f0ad69b133912b
MD5 7c7856fe469e4fb180b1e53744a37ea8
SHA1 9525dd4b54b4a5ee40579f379bd8e59c53fbca75
SHA512 980141b347e11fb9a76f6d1d12b160cfea466afddcd979de38e26b31d589a8f797a1f885f97cac3b28d0ec558c86ff266558042887cb9150dd70a4868be96ee6
SSDEEP 192:sxRzR6yMqZjK1Ml8wcl/fHms6wcZaJ0/RZzoA8pe3/g6+WNIY/WKuGbIgjiJ:sxRzvCl/fHms6wiU0/RkY/5IAj+
TLSH
T1AF62D81A6A34997B8CDBD219FA457F53D6F81533A2845E44AAFC8B0C04E7ADC211383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 bc7977418e783e074ceeb84d0f7a0e72e9724230a32c301603fa2da873fa7240
MD5 baa67063002012bc99c1c62f2774529e
SHA1 925cca315373ec8a88ec0751e9a13dada559714f
SHA512 cd3696050f0f70fa6d516c4b5ec35bd48b39448e00b7de4b61fd565a429f7bf28ec65e1e6aabb2e51ad06df2508b76f8e2fa092db997b21d501310637aa9f13b
SSDEEP 192:sxRzR6yMqZjK1Ml8UQWcl/fHmsi6cZaJ0/RZzoA8pe3/g6+WNIY/WluGbIgDuXJ:sxRzvqVl/fHmsi6iU0/RkY/5IJi5
TLSH
T15C72C81A6934997B8CDBD219F6857F53D6F81573A2845E44AAFC8B0C04E7ADC211383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 5ee362a3f1d9eb243ca5266e7e3f214832bcd2ebe51f0ac3d14cd1e731737609
MD5 6ae976622582bdb942f7fc1f4ec32743
SHA1 19ec1b62faea66064c10d99a224a12ab993587d6
SHA512 1a73d35b60465eff139afce63efff9e46a52a5cca097173a6adb69a12cfc1a3c9a261354faa8537476f7372b8d38cd138b3a4bdaae4a99d2667ad35caf3bdafc
SSDEEP 768:zEX1hN7pLuL7w9WgLLfzE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVQFmZwD/rooUEt:zEX1h7E7w9WgLLfzEu1jaHFm2DsoUW
TLSH
T188E2FC3B680CCB7E4F444ADCEC29BD9B6DE802CF96D8895447EA844C03C6AEB51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ff93370812cee0a3fd53a5d761433cdca678fa4cbe0fba472f2dd11780f6a819
MD5 2ad343ad4950e7cac072e8b2039567af
SHA1 116f45f6070f9c6a50a4d4787933400bbb1b20d3
SHA512 3dd0a11c0dfe036aede42f7b641eaf7be2825f0de6ac721dce6026f0966693d74143203853d162d323d517ba5c464eeb27a7b348b649b33695d6f91b48e7ad60
SSDEEP 384:83lTzBt/l8joMOimxiVwEQhoGhsM1OsBcxGNwq6/n:83lTzBt/l8joMOimxiVwEQhoGhsM1OsC
TLSH
T12FB26C517A7E224138BE290CE1A5952F674130B3301EB63B7B7D60E50EA7E005EFD9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 dc07786cdd18224a15cafe9e7e440e3e6e20dcaf48e93c97aa80ee69080aa2d5
MD5 7e49968f348902e588f83fd30a8ced81
SHA1 6f3b34ba14415ab4fbb9d16ebef7a1e73533fd7c
SHA512 28de44d8942c6bb5b7861cbdcfd8c8aa18d95330fd199b0f92961944031daca02c27fb51cb4a5964ec76fbbc455d1e00495293fbd3be44feed734595f7b4e060
SSDEEP 768:GF1j+9ItwwgQqBxqwGrL6wprP7Pni+0Ava:z9ItmoLhPbiEva
TLSH
T161C24B32D854DA6BEDEA4FD9B709760A9EF002A3D5C86AD8DADD5E0C00872DD1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a29221430b369915d122d7604507f3daa08b0511eb10be1df5a5f4b296ba85ed
MD5 3af39b1a0b077ef265bc495b4080769f
SHA1 b3eff400fff4f7cf31290b106ca43f86bf9927ca
SHA512 86dd13e36c1d4ce03697629fae3b623dd863736c44f421c75e86ff443c6ad711bc843928049263c424fc84c5117065381b56316d079b980a7d72a1654e58ea83
SSDEEP 768:WF1j+9NZwgwqCV/qwGrL6wprP7KfGOmn12bfJF:j9NCNoLhPGfJ0yJF
TLSH
T16FD26B32DC64CE67ADE78BD9B7497646EEE002A3C5C86AD8D9D95E4C00C72DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6d8730d8ad2b33e1f93808f8e2b5b983849b6a1ef2de3d24903e2b996b46ac9a
MD5 1c918fedb27abb82e762bdfadabf5dd7
SHA1 f7bf1fb48ded1d209f6fb14173ec4a997c7fbfc0
SHA512 33e41c6f726b601141aa218f416e66e7eabb20630b1a86dc712371fac71abe56bb93a1191f57ac937082b45b9082d650a09b023f0544979c7b100817f412deb8
SSDEEP 768:MF1j+9NZwgEqwV/qwGrL6wprP7KfGOmn12bfJwvZ:h9N0NoLhPGfJ0yJwvZ
TLSH
T17BC26C32D864CE67ADE78AD9B3497647AEE002B3C5CC6AD8D9D95E4C04C72DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 37399e48381794c0a4bee20e12e85c597cffd054faf71533d9fb2943894cac6a
MD5 e98789fcd5d66a24527c5f2c71b63bd3
SHA1 9727abeb61d883bc43ad2675f9e0a5692ac45a22
SHA512 e36b51f20a4d4dfd35a743592b7f2068ac22c3961f1de6d24d2be5c19721870e6db423b29d7073376188e5feba882afd40fe48f292657ce9facfdd4ea6b79cc8
SSDEEP 768:7F1j+9hZwgwqCVLbNOlrL6wprP7KfROmn12bfJF:a9hCRaLhPGfw0yJF
TLSH
T194D26C32DC54CE67ADEB8AD9B74A7606EEF00263D5C86AD8D9D95E0C04C32DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download