Resubmissions
04/08/2026, 17:47
260804-wdaacaee78104/08/2026, 17:46
260804-wcgyssbj31304/08/2026, 17:24
260804-vysrraec73604/08/2026, 17:07
260804-vnahess1fv6Analysis
- user interaction
yes - max time kernel
0s - max time network
61s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/08/2026, 17:46
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://store-039.wnam.tb-cdn.io/zip/78faffe9-d599-47b0-90d3-8bf27f248217?token=8d9035eb-f145-493a-addd-d14781c694d2
Resource
win11-20260513-en
6 signatures
900 seconds
General
- Target https://store-039.wnam.tb-cdn.io/zip/78faffe9-d599-47b0-90d3-8bf27f248217?token=8d9035eb-f145-493a-addd-d14781c694d2
- Sample260804-wcgyssbj31
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3400 msedge.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe - Suspicious use of SendNotifyMessage 12 IoCs
pid Process 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe 4932 msedge.exe - Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 4932 wrote to memory of 2444 4932 msedge.exe 81 PID 4932 wrote to memory of 2292 4932 msedge.exe 83 PID 4932 wrote to memory of 3400 4932 msedge.exe 82 PID 4932 wrote to memory of 2292 4932 msedge.exe 83 PID 4932 wrote to memory of 2292 4932 msedge.exe 83
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://store-039.wnam.tb-cdn.io/zip/78faffe9-d599-47b0-90d3-8bf27f248217?token=8d9035eb-f145-493a-addd-d14781c694d21⤵
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4932 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b4,0x7fff6847c188,0x7fff6847c194,0x7fff6847c1a02⤵PID:2444
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,16695374940367056172,294938437371508247,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:112⤵
- System Time Discovery
PID:3400
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,3440551701044647134,15164515687000369621,262144 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:22⤵PID:2292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,17189254318582809439,3665129718279720832,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:132⤵PID:4516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3368,i,4532043719889549467,12920630117163846582,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:12⤵PID:4996
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3264,i,3574661566036639179,3599152418649876937,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:12⤵PID:3036
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,3602045256232067121,6962116259374562967,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:12⤵PID:3512
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17054476314092362046,17015653925697593755,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:92⤵PID:3120
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4268,i,17579770514403919344,9381500970524503872,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:12⤵PID:3908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4284,i,7706929855279258537,10887696213977685014,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:92⤵PID:3532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,15958043032831990141,726619676234772469,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:142⤵PID:1040
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,5152485583271619231,3538024218689745077,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:142⤵PID:1688
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,12917356863273761373,12411264076234204615,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:142⤵PID:3268
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5832,i,1913977025455941352,11964497941457269212,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:12⤵PID:4180
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,9114432088585420871,3793682303817154054,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:142⤵PID:4092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,9114432088585420871,3793682303817154054,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:142⤵PID:2232
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,1501330887225482919,12392361116048915217,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:142⤵PID:3336
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.execookie_exporter.exe --cookie-json=11283⤵PID:3816
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7316,i,4216781714894353258,169055258541209907,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:12⤵PID:5060
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2812,i,8844920776885347667,4476274008337768432,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:142⤵PID:240
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,8852095592257280439,12324385731726669553,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:142⤵PID:236
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,15596315404200458171,10632547751671238565,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:142⤵PID:4800
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=1228,i,2209398747901681444,8381984458070229335,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:12⤵PID:1672
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7520,i,17329528451551015485,4508019634447115967,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:142⤵PID:536
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7360,i,1693604305193602525,2022842266398165599,2097152 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:12⤵PID:3492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7448,i,17205137278160558670,18203520520828189369,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:142⤵PID:2296
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7448,i,17205137278160558670,18203520520828189369,524288 --field-trial-handle=2196,i,592209808844501329,6697568169982286617,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:142⤵PID:5112
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:1148
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4688
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 9a38114d99b6c05875ae9468596abb7e823cf9fd18f4fe2b6bc2180f73cdd21f
- MD5 734ed32369a33092e5af169a5f1c6400
- SHA1 0ab00a2f996579fe58c514dc8b219803cba9de47
- SHA512 04030ded30cf60d41eb3764dfd5642f0188adcd4a84f6e384aea7e06d243aaac8ef80b76c3db8872468f568e5519ff4453a83b9566726f9db3ac7fbd22e36617
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Y:fwUQC5VwBIiElEd2K57P7Y
- TLSH T1E4B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 83b97b6923ce1c25ca4f0975afffa4a8a035d906f9fb1b2a17963eea6d46deac
- MD5 ab62d540f48a6e64dbe62b6d5e0f66b9
- SHA1 282ce872991d2b2872c0eebeba33666b3d3147e3
- SHA512 3480d10d4a55f985a4ef7c9cbf908d16cbafa49de7ff2e7f067aeee1a477d42f56e5174a74cdfedbc6726f6bb0df5a0165a160fc6244237cc20d827ab2b58600
- TLSH T1B2D08C333F1E7410EB5A9335A843C71A2EA610662A975703E351C89CEDF40E893C31E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 750aae5f6fcd1c84f47c22740f9a6faaeacfecd059d469b43a524a58c641f1af
- MD5 49d9e916d358c355ce9f2e6c57e683cf
- SHA1 7485fcd5b56447b9a576f2d6606e067a135b5373
- SHA512 739db6810477a47b0daa04a82b7d4acda665822df2df0d6dd8a6c535f7bd50a13a8f403ce87570016057ab37d314070a0b527099fe628152f6332150c060059a
- TLSH T1CFD08C333F5E7810EF5A9335A843C71A2EA610662A979703E351C89CEDF50E893C31E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 d4faf0b2484d8caeec48d4394edacf768fb3ea4289e3515431d7045eda59e280
- MD5 e839724571372d42305de3d499288c68
- SHA1 fea046e06a633a4f9363c6c67ce45dfb21350d94
- SHA512 9c336988045ca73f248c6fdf596dbcfb32b99197c4487e6f6420465ebafd3c6306b9e4ad6d75a7f9677aaa6ae3d0bdfc96b0010dfc35bba1f3df3f173b3b71d1
- TLSH T15B613B3059E2C997D7274E3EC2C1750C377306AA0E334E061088ABB1AF32772D675AC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5864b0.TMP
- Size 3KB
- SHA256 61716dcefc61b3f3378cef574328f93985b5a9c8e7be4b95a2748298270a67f0
- MD5 e4f1bd72915ffa32fbc24a21ab8eb747
- SHA1 f7b0db87eb68c1981853d6ab53040776391d226c
- SHA512 72efdbb1abc7797fb5a7880b6dc22955db29d0bacbc1ef9cbd895b7111d90bedf2eab55afba24417d0a53f5ceb7adec4cf48ee6adf42a0aac9ae4a028abfbd3a
- TLSH T1D3614C3059E2C997D7274E3EC2C1720C377306AA0E334E021088ABB1AF32772D675AC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 12KB
- SHA256 5c4788e49b7371591281ef39a89f1733d557c188b2622fb79ac48c8a59ae0500
- MD5 454d2e03b43ac33d54c67fdaa86a6d7e
- SHA1 4f8eca0b16f309cef14b58164ae8d94e83192588
- SHA512 cd556b4c8c5fe20af4476aca3b4ab66500aaf63a4f75bf54f75dca07b53fe3304bccfe6f4363826d246f4236edb1e6eb5aa3c7438ccb40d817ff53a00eefb896
- SSDEEP 192:sxZAR2yM/jK1Ml8Mo0/fOsR08wyIdpM/W6+WNGY0aCUQ+wIgrJ:sxZAQQ0/fOsR0T7M/bG5bf9
- TLSH T1C242F811AA346977CCCBD209FA45BF93D5F5146392900E58A9FCDA1C04E6AED220781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 31KB
- SHA256 26c3ffda1ceb20690528ae1625c1ceba08e138ca2adc49c920422e1afe3127ba
- MD5 fa0b159169be08e816cd8f796e2e6166
- SHA1 93ffc5dc90dba238806740e9062b7caa6a77aa93
- SHA512 925db8856ee9cfb52d5d774bee65864136be9fa6a15ad65cd651736ac427ff0e3f6f51d01f357352f0484e32d7a1e72dfc27e30b57aa9ced814fd7de265ef69f
- SSDEEP 768:bG/zh8dF2PkWRmEcQXw8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3WjLl/2c0V6IrohI:bG/zh8dF2PkWRmEcQXwu1jaKWjLp2tVV
- TLSH T1C3E20A2F284CCBBE4F844E9CEC266F976EE801CB66684D5447FA494C03C77DB521A49B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 7KB
- SHA256 d1b107a17f6c0f6a56e240883d3a53c475347f77cf859a55925ce2f461c035bd
- MD5 482572cc4147cdab803ce1dc954e4160
- SHA1 5aa8e4c80a0da3fa03666c98e5c2ed3a258904dd
- SHA512 f1f914be5d69b15ee112c348e4fde997784252cf916e0498ef8730d38aa54a75da520f706e83998c071de53e2fe9dce694a98901835f26a773849825bf56e038
- SSDEEP 96:KEWgKvjucK/6SONmKmgiCGkKvK072Kw86qEAKZK4:2kPVxne1fr
- TLSH T15CF1865632BE42913D3E2C4D92A4CB270742B2A73455E93B7BA850724EABE115DFCDCC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 16KB
- SHA256 51e27d2474f5a08f12544937c0b1bb3d3678032163f0d447f477f4ab8dc2c0c1
- MD5 6712ac2313da081ed538e156564a04bb
- SHA1 98dd911b384f0c815287e200deeebb2fe6bc19c2
- SHA512 58eaec17bac341ba28747ba324f2842ceceab72467e704ef32e27baa0b017e4fd27926cb2ba9ee86bd10928a87abc610f04a6c5b585cdf54ede4b8482f6aae7b
- SSDEEP 384:Y8NDUtRu1XUmnscOjKyW6BeRs9JKgqijUKe:YX56scOOD6TjKgqmUKe
- TLSH T193725C395839AEB39DE2A185F48636178FF450A7DAC42FD4E1DC6F0D018F5CC231A926
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 16KB
- SHA256 2ac67760a314b71737de60c7e4e7b254334ba4d50a33038db37aea3e0e4881b7
- MD5 e2d099e0c22e92db85bc2668d56f1a48
- SHA1 b391361b980d846892d7e64e6b20cee742b4da19
- SHA512 f2f568160feb3cd9ad1a042b5db779d6d9949517f86f3e3b8fb21c8d124e3b97d2f2775728e9ec8a5b3b9180f8a475cb0fbff90ffcc032d7e04393cb4a74d485
- SSDEEP 384:78NDUtRuqXUmnscOjKyW6BeRs9JKgqijUKe:7Xc6scOOD6TjKgqmUKe
- TLSH T191725C395839AEB39DE2A185F48636178FF45067DAC42FD4E5DC6F0D018F5CC231A926
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 ed25178b780206efccd9100ea470dd326a86354acb6ff24ab367ddc88dbd0b79
- MD5 9478479a9fc2a2921e0b67bae25b4e9b
- SHA1 d5377bfc7a0867dbe093b31fb628f199f34aab9b
- SHA512 4e7a8176fa252a1656d32e00fdf11c587c9bdacad6a17d71ef2ab1c100ab900d94f123102d966feef31af89c27b4c5240ea387880ede32cf114795cae61e03b5
- SSDEEP 192:BGN96P2UOcQmiUysIU0qGv0cOjTwSHCU6:BGN96eXsHITqGscOjjiU6
- TLSH T1E802FA796D782CB78FA3AE45B98637134FD8206BE9952F84D9D41F0C01DB65C2347826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 12KB
- SHA256 c5b054ca8870b05b9710210b29a9798465632a6fd88e922d179ad58f5f3d6062
- MD5 5270c0925c39260527156157ab7470d2
- SHA1 1342bd960ad43938d041bbcac4f9fdc93685cdf5
- SHA512 c4cec537eb0fd381e77727a393ae9a6c062215184bef7bb001ba79ae47707314fecc711cee32218a56533d8ed81260bdc7f8a49945e3d1f6ef9dcf16e3df9bb8
- SSDEEP 192:ufL8NDU+Qj2s2U7BsQmiU1Njw54nv0cOjK8N4zYEqI6lQbq:o8NDU+Ru6XUmnscOjKy16g
- TLSH T1E2424A766C385D739DA3A185F58A36138FB890A7DAC92F94E5CC2F0D01DF6DC2306916
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 b10e57af0c0f8f8d2eae567daed0882e78ec84414bf06980152873e7ed80e74e
- MD5 9fc9745b224f6226b4952418abb309c3
- SHA1 eb97933b9b13e2b007b60128afc90e56e0c2105e
- SHA512 1fba892059b2213b1b380d89ef0c99da0bac35361e9d453e611d1e60be12c5db06d78dd71832cc03251f4d004e2c895c012b7765c7e77278955c60a69d6731e3
- SSDEEP 192:oGNR6P2UoQmiUy4E0yGv0cOjK8N10BEqIU6:oGNR6eXvDyGscOjKyK6U6
- TLSH T154122B766C686C775E92A541F4C736138EE95067DE8A3FC0E5DC2E0D01DF99C234A827
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 16KB
- SHA256 507cf1476d09368825b5ce79b6b7592ade1055873cd99165da9f752c756cf4d3
- MD5 839c2d51ebf5513cadb65c6c63fee07e
- SHA1 a5fb8300c79b73d36c15092cc8ac7f7467d7a24e
- SHA512 8017ef7da4d792c42558c69ca0a819819530ad986cc4afee4ecc1d0f893b2676f33404d46df288b3cff03c5a3c925109b488a349a4fbb58155ab295e27d6c9e1
- SSDEEP 384:j8NDUuRuoXUmnscOjKy16BeRs9JKgqijUKe:jI26scOOg6TjKgqmUKe
- TLSH T1C7725C3958399EB79DE2A185F48A36178FF85067DAC42FD4E1DC6F0D018F5CC231A926
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c3b407d2-0bd3-4ad6-acce-819d96d353e6.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512