Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    81s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 09:48

General

  • Target
    https://eu1.hsctaimages.net/ctas/v2/public/cs/ci/?pg=187c7162-4e88-46fc-a637-94e0e848f375&pid=25192585&ecid=AOKeC1YY4rkn4QAbX28SKoqlrC4OdNy3kfqLM94VFm-xGaPd3Hh9m5Lx6nmsTr3kHPoAMAFItuOL&hseid=123589877&hsic=false&utm_rewrite=REWRITE_BARE&utm_source=hs_automation&utm_medium=email&utm_content=123589877&_hsenc=p2ANqtz-_e-wCQ2mCwvYo62e3K5w59Qkd7NUGlC3ZTlsnTtBrL3nX_ChM4eojYktqqHcu4OuAuncLI0ryddDv9bqKqAqp-DNr1SWSWlecMH1maVBgYe2IbcUI&_hsmi=123589877
  • Sample260925-lsxn3stdnd
Score
3/10

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://eu1.hsctaimages.net/ctas/v2/public/cs/ci/?pg=187c7162-4e88-46fc-a637-94e0e848f375&pid=25192585&ecid=AOKeC1YY4rkn4QAbX28SKoqlrC4OdNy3kfqLM94VFm-xGaPd3Hh9m5Lx6nmsTr3kHPoAMAFItuOL&hseid=123589877&hsic=false&utm_rewrite=REWRITE_BARE&utm_source=hs_automation&utm_medium=email&utm_content=123589877&_hsenc=p2ANqtz-_e-wCQ2mCwvYo62e3K5w59Qkd7NUGlC3ZTlsnTtBrL3nX_ChM4eojYktqqHcu4OuAuncLI0ryddDv9bqKqAqp-DNr1SWSWlecMH1maVBgYe2IbcUI&_hsmi=123589877
    1⤵
    • Enumerates system info in registry
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff50a6c188,0x7fff50a6c194,0x7fff50a6c1a0
      2⤵
        PID:1352
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,3775265696406577842,3867458801236997982,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
        2⤵
        • System Time Discovery
        PID:632
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,6595887472954304902,10579655617227791641,262144 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
        2⤵
          PID:4772
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17603247076229024164,11247537770111584777,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:8
          2⤵
            PID:448
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,9977701188872133643,3334660641806271293,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
            2⤵
              PID:64
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,17931775638990895474,18121895652308643251,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
              2⤵
                PID:1100
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,18277474163895451034,13381866469964352526,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
                2⤵
                  PID:4588
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,6357925552249538792,11759905014797242819,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                  2⤵
                    PID:3936
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4180,i,9071236839011223035,3884145707778015938,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
                    2⤵
                      PID:3236
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,687303399857073751,2697681799955390436,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
                      2⤵
                        PID:3700
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,1039669530141253613,14432250536356910254,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
                        2⤵
                          PID:4200
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,5901627706086081305,14484719714567721600,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                          2⤵
                            PID:4444
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,5901627706086081305,14484719714567721600,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                            2⤵
                              PID:1828
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6440,i,16718782296746220483,12099991775753382738,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
                              2⤵
                                PID:464
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,17064148883898219386,394934322732168072,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
                                2⤵
                                  PID:1644
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,12399656742956374267,12440108952786196109,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
                                  2⤵
                                    PID:2524
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,368119604800691954,10552402833924073940,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:8
                                    2⤵
                                      PID:3176
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,11654864611071036756,16819071874534473391,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
                                      2⤵
                                        PID:1596
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,13712207180370192556,11537548514578500998,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
                                        2⤵
                                          PID:1128
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:4460

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
                                              • MD5 SHA1 SHA512 TLSH

                                              BookmarkMergedSurfaceOrdering

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              f_000059

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
                                              • Size 62KB
                                              • SHA256 6089d7559347c3e81906f403526f4eb168b1635eed675a5d09aec62cb730f094
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 4c5143f3e4d25c5954c8a1203df651cd3ef0dd5063a816bc1ceea42797334ead
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index~RFe594164.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594164.TMP
                                              • Size 2KB
                                              • SHA256 87fbc286b4f0065ff5077f3ff37e9f13356c8d7a51b60b5991d92a6434e156ad
                                              • MD5 SHA1 SHA512 TLSH

                                              SiteList-Enterprise.json

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              Edge Profile.ico

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 8KB
                                              • SHA256 aaa7120f604d585cfc8026399d5a8bb960221ba0c732f28b7a7235a73a9511d4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 9KB
                                              • SHA256 31306ed26f0a3f3ce32c78a3d1289117b07ebfb8d6aacff99dfe19686f463e0b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 10KB
                                              • SHA256 1dcaad1ae3d73d307c56a6438afbdef7bd33028c051d016d42874249f4a57a60
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 10KB
                                              • SHA256 b58266de560e63bb961719f7b2050ebf3a184be86a5745d059b35ab93b15f6d4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 10KB
                                              • SHA256 14f0d47fa7afb60c85675dc7e4e0f79d1d03f0c423281df9b2ea79dbe4c19d06
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                              • Size 27KB
                                              • SHA256 bd36607ddedb0004cd08c4abbcb677a659106428551409f4b45e5f7471a2941b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 bb202867706248821cbeea830e141e7eb6f10181256567bfd3cb55c0ce8ed4d6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9492be2a-e183-4194-ac90-a510dbbb0c50.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9492be2a-e183-4194-ac90-a510dbbb0c50.tmp
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 26KB
                                              • SHA256 23af5c8a125633337393d2f281883f8f3598f8259fe70f8a2d07f1c60980c510
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 a702a05816cd373e5183fabaa5659cd2bda25d91dae280f7d14d23523d227c20
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 4ab57b293989e519faf37636369d6a6dfa134162c7251a439e50e18f23a845b1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 18KB
                                              • SHA256 ece76ddb269d1e3d547b4d34fd3bdeb352a2faf789c24274f99460d5fe7e1fe6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 18KB
                                              • SHA256 907a7bf75b32acf1586e192a1d17ee68c86c948a927b90f359dff2c02528049b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b7380874-6437-4fbd-9725-04b3c5a984a1.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b7380874-6437-4fbd-9725-04b3c5a984a1.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 84e2ac426dc51329de0955ceec656f02c9b2e8e6df6f6aafeafd6795e6620d38
                                              • MD5 SHA1 SHA512 TLSH