Analysis
- user interaction
yes - max time kernel
0s - max time network
28s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 15:37
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://59.email.stripe.com/CL0/https:/billing.stripe.com/p/subscription/recovery/live_YWNjdF8wb2hLNEhIR2xZalJRNUQ1djV6MyxfVjBOTkNzbzVqa1FxVlhmaTRoSlp5ZlNMenlkcmtmSA0100zlVV1w91%3Freferer=failed_payment/1/0101019fc7f9484e-61eaafea-0308-458b-8db0-ba9bf6c8d6c9-000000/asuHjFV1VmrTVoQM4D-Ux-TzABa_EvNjNcmjHeum_Mg=452
Resource
win10v2004-20260513-en
6 signatures
150 seconds
General
- Target https://59.email.stripe.com/CL0/https:/billing.stripe.com/p/subscription/recovery/live_YWNjdF8wb2hLNEhIR2xZalJRNUQ1djV6MyxfVjBOTkNzbzVqa1FxVlhmaTRoSlp5ZlNMenlkcmtmSA0100zlVV1w91%3Freferer=failed_payment/1/0101019fc7f9484e-61eaafea-0308-458b-8db0-ba9bf6c8d6c9-000000/asuHjFV1VmrTVoQM4D-Ux-TzABa_EvNjNcmjHeum_Mg=452
- Sample260804-s2h1lstdla
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3764 msedge.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe - Suspicious use of FindShellTrayWindow 11 IoCs
pid Process 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe - Suspicious use of SendNotifyMessage 10 IoCs
pid Process 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe 2284 msedge.exe - Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2284 wrote to memory of 2596 2284 msedge.exe 85 PID 2284 wrote to memory of 3764 2284 msedge.exe 86 PID 2284 wrote to memory of 4888 2284 msedge.exe 87 PID 2284 wrote to memory of 4888 2284 msedge.exe 87 PID 2284 wrote to memory of 4888 2284 msedge.exe 87 PID 2284 wrote to memory of 4688 2284 msedge.exe 88 PID 2284 wrote to memory of 4688 2284 msedge.exe 88
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://59.email.stripe.com/CL0/https:/billing.stripe.com/p/subscription/recovery/live_YWNjdF8wb2hLNEhIR2xZalJRNUQ1djV6MyxfVjBOTkNzbzVqa1FxVlhmaTRoSlp5ZlNMenlkcmtmSA0100zlVV1w91%3Freferer=failed_payment/1/0101019fc7f9484e-61eaafea-0308-458b-8db0-ba9bf6c8d6c9-000000/asuHjFV1VmrTVoQM4D-Ux-TzABa_EvNjNcmjHeum_Mg=4521⤵
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffab253c188,0x7ffab253c194,0x7ffab253c1a02⤵PID:2596
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,8921309098201293172,10397267970686165139,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:32⤵
- System Time Discovery
PID:3764
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,14400701971896683918,8041323448058162947,262144 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:22⤵PID:4888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,9826725048144487203,15571902221883498178,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:82⤵PID:4688
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16361255851487557561,11186270593472815363,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:12⤵PID:2588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,8697607932505954161,13378893414614917078,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:12⤵PID:4228
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,10126111212220929197,10953005937065185566,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:12⤵PID:924
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,1509533493374631123,8792911257411360327,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:22⤵PID:2788
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5004,i,1828782032990330133,14493665260154442301,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:12⤵PID:1744
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,15874776349794727706,8583195196081196467,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:82⤵PID:1384
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,7301864384828560612,10077074635981104355,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:82⤵PID:5020
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5856,i,7560045739295562077,17207124400428199610,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:12⤵PID:2996
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,5200409253792558278,3960504348739088822,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:82⤵PID:3372
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,5200409253792558278,3960504348739088822,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:82⤵PID:2604
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6124,i,10799154047067184334,9205317910428584623,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:12⤵PID:2752
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6280,i,17957729580407473616,17384351496882124718,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:12⤵PID:4652
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6580,i,3578847251191060997,17474259017659802712,2097152 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:12⤵PID:3308
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7132,i,237347691685221426,10595149631666536605,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:82⤵PID:3468
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6964,i,8849367766410342300,9698319690988312068,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:82⤵PID:4364
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,15288977632588600575,12728573346278430661,524288 --field-trial-handle=2300,i,4690828203922232370,30585651470062131,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:82⤵PID:760
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:3524
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 aa0d78ec9cd90e7c6714bdce5235de1fc6b7c3088a6cd8f6e6d2c1cebea7d661
- MD5 63134f635628c0af90baed8399868c70
- SHA1 0a02b0ee6e4253e3534f292530612cd9f5f16106
- SHA512 3c98f5f62643131db7887f04a33b0ca1c1c00b00c63332d61c392e6bf04039e1f5ce53adff3458c5b96f00e8454a916a07ab2c53d268c7a0bedbef781bef81f0
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7o:fwUQC5VwBIiElEd2K57P7o
- TLSH T123B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
- MD5 77a76342e47369b91c295856d0d136ad
- SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
- SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
- TLSH T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
- MD5 6503f091cfa7258a2190ed65490b1bdd
- SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
- SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
- TLSH T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 12KB
- SHA256 c3008a52779efb0a8721e07ea340afee4da4946dafeb73d1028397de14fc7c46
- MD5 23b03503df8a13660538872acb617f42
- SHA1 568763aa10bf76be9f6a3cdc2ba61c8f0f5680d1
- SHA512 1645067d3b90208b29a1d3ff51fce2f337474eb6a81fb72a6727e565fc72cb821ce368a967adadc2bf68e031807e0bc728f904c95fe539bfc607500322d5ebcd
- SSDEEP 192:sxZKRMyM/jK1Ml8MkC/f1sXkTDEdp9JHW6+WNx5X/YLQO74IgrJ:sxZKmMC/f1sXkTQnHbf/h9
- TLSH T18442FA116A34A977CCDBD20DF941BF93D6F51463A2900E589AFCDA1C04E7AED221782F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 30KB
- SHA256 5b2487001982def63a76eb8b0d09b6ef6a6b318a4dac059996957ea13aa2108d
- MD5 41fcac9fdc9c3c44317a649eeaf076a8
- SHA1 a7c96a4d39ef80e9e6f2af28811b67accb43cc09
- SHA512 4268e42a9bfde406001843b0d65a8573887ebe3c1f97d734c7e230451a442e11698fdffed8601b5da478cd51d5dc4f4cd49b8b2e777f31e97795b60f4f5b1411
- SSDEEP 768:qks6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNtromh8:qks6pD1WvxzWju1jahILIsNGmh8
- TLSH T1A7D2FB3B680CCB7E4F841E5CEC2A6F967DD801CBAB98895447FA444C03C77EA512759B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 6KB
- SHA256 1965bbd70977af6a4ed581f4c81acd503d27cdc700018c9c692ce287bf90a1e4
- MD5 2b663b96bcddc5be773d3cb5e190663f
- SHA1 7c53fac0bb59cd5c8623e8585bb3b178a945930a
- SHA512 f74571465fe2e9068a0b6874f0827b6332d688faa7d41060ca1460cb62b1dd050d5723eba4c80f1bfc9a2d7932be109904fbc05bfa5ac647c3c51f9b871ebf74
- SSDEEP 96:KUAAKtePW7iKEM+qCZ67g86wQx5cpszExKL4zaxviqREQSKkwKZih:iihRJ67g86wQvcpgE24zaBiqREQSn2
- TLSH T1B1D1041632BA12023D7E2D4C93D497678AC272537414A42B3BAD04B6CDA7E21CEFD9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
- Size 90B
- SHA256 2ce05721f1c3c6f57931516cd4a35e12830ff9fa0238fb35929418b9e3e3e220
- MD5 bf828df5719229fdd2020b202f6fd60a
- SHA1 22cc493ac2b5d9268d7829339761cab61a0c8e95
- SHA512 220f0b08192a8d0ad8971398d8f0bd8dc51b22e4f772d27bd384a849a6705de7966969d4431205f5dc852f6dc0a4e39e866c05088a4b7c214c5a2007c357b4cd
- TLSH T182B002BB044155D55E7139E7000731DDC56332C86C84DE9C84B5155532145FF1012D75
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
- Size 177B
- SHA256 bfb96c857eea9fef75adbfbe61b088fa5146a3c00762b7841e3b404ba4064c08
- MD5 507f50f576f83110a3b6fcfdabcb6445
- SHA1 8060c458642e258d34f0c0cf6caa90b7db7bf0bb
- SHA512 68290029d41865fd08922c3e447d94c655fa09f029d51f779158047e39caf0d690984a5ec0f736a6c722624905a7ae1e56dcffe34de171db7cdd6d0edb55d4ee
- TLSH T162C012774480C7552F2014D6801632CDC9723ED82CC4DB4C486139C931358AA1449966
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5884db.TMP
- Size 177B
- SHA256 b2a0902f60e4e1b5845c654e3630d498c8660a7e361f3c9fad99cc8f7f07e00a
- MD5 f4e4a410f5434f09d6ac4e13ed515cab
- SHA1 e73b80b81c285a5bf16dbc64042b99ca58cbdc3e
- SHA512 5434b1d48d770ac5bac9d768807545b2c1b687923729fe9225eb808da7449614c65c883c76a755b0434f092df9afaa0de8a4075cafeed7f67bbfb2a4a1962e15
- TLSH T187C08CBB948092913F3A29EA121332CCCB773FD81DC8EA8C44613066B2348EA2651E60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 5ca6715d7488ade94bc84c1c62ef9163771d40c5dd300c6be9febef01c71cb16
- MD5 b305a6ecbcb98fd0154ab58c61c48bd7
- SHA1 c4a02a4f9db368a07c650cc13d09fca05f8e2ee7
- SHA512 ca1161f10395d6cf315dfa953b659155d0c9983500c235fab31b6368941a69f114a458c01eea8df083075dbb86110e9fb581e429f36b1791d119329bb686bc69
- SSDEEP 192:qONx6O7+3hQmiUyeCGttb0gO2VoIgG/mU6:qONx618Gt9xO7++U6
- TLSH T1B202E8356D686CB75EF29D4AF98737239FA8103BE9952F40D6E81E0C00D765C2343827
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 19KB
- SHA256 2229037542a8be1f0400b56077809f80136dc843dd4ca85d29262e10ea7b779e
- MD5 30f55b0d0b42cb7c5fa02795ccc74645
- SHA1 15fa84352bb294cc1b912b8494eaca18f74eee82
- SHA512 ac2a40c14b35bc2a1d52918f232f4af13741be68698af75d5be2a080580869ed156325275c8441639f01159615c1a480a7a6030bfca894875da68b184243fbaa
- SSDEEP 384:0ZcIhsNDU61IT0FMa9xO7glzJrlrBeRs9JKgqijUCj:yhu7VDO7g9hlrTjKgqmUCj
- TLSH T17C929E3058385D77A9F7A186F9C736178FB84027D6C12F94E1ECAF0D019B99C231A916
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 e5a3e21e8052452d305c5859112e25e90fd0a97ca5b47e8884623b70df7053ab
- MD5 2d01758bba843a63ae88a8fafbbee21e
- SHA1 6508ccb0d1414f0f3fbe78e44f6a5048b98f0eda
- SHA512 a5f15c644d7c86209b079fbcc3c4014168a10bc34052c669a5c2636da1c33e9178c170bc704d01a8b6b737de9e2d578bb274053cbfdaa1bb4f986bd48ab50249
- SSDEEP 192:kONm6O7+3YQmiUyJCcttb0gO2VogHF0SJrNncNTqPwU6:kONm6Wpct9xO7glzJrSrU6
- TLSH T167120B356868AC775DE2A149F9873657CF69013BDA866F90D1DC2E0C01EFA6C2346C17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 ade0ff12af78355bc0f3a8cfec559368bec9becc00ef6599f9c3073ace46854d
- MD5 0d506292aefb14192aca9a44c7cef7e2
- SHA1 b7a29053ed2de7f806acdf40de254488daf50e4d
- SHA512 9ff99849206a9a0d0af76b99b8dfbc8a09f9aed387067dc163a127a63fb45b202c138c2c88786a39ad54d214c346ebd3348ffbdb447b00fcb81e57612cfcc64f
- TLSH T1CC41185DB6F91149B3B3AF16AFF2A46E487BBD772E06C55D10110D4E0A27B40D8A1B33
- MD5 SHA1 SHA512 TLSH