Analysis
- user interaction
yes - max time kernel
0s - max time network
81s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 09:48
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://eu1.hsctaimages.net/ctas/v2/public/cs/ci/?pg=187c7162-4e88-46fc-a637-94e0e848f375&pid=25192585&ecid=AOKeC1YY4rkn4QAbX28SKoqlrC4OdNy3kfqLM94VFm-xGaPd3Hh9m5Lx6nmsTr3kHPoAMAFItuOL&hseid=123589877&hsic=false&utm_rewrite=REWRITE_BARE&utm_source=hs_automation&utm_medium=email&utm_content=123589877&_hsenc=p2ANqtz-_e-wCQ2mCwvYo62e3K5w59Qkd7NUGlC3ZTlsnTtBrL3nX_ChM4eojYktqqHcu4OuAuncLI0ryddDv9bqKqAqp-DNr1SWSWlecMH1maVBgYe2IbcUI&_hsmi=123589877
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target https://eu1.hsctaimages.net/ctas/v2/public/cs/ci/?pg=187c7162-4e88-46fc-a637-94e0e848f375&pid=25192585&ecid=AOKeC1YY4rkn4QAbX28SKoqlrC4OdNy3kfqLM94VFm-xGaPd3Hh9m5Lx6nmsTr3kHPoAMAFItuOL&hseid=123589877&hsic=false&utm_rewrite=REWRITE_BARE&utm_source=hs_automation&utm_medium=email&utm_content=123589877&_hsenc=p2ANqtz-_e-wCQ2mCwvYo62e3K5w59Qkd7NUGlC3ZTlsnTtBrL3nX_ChM4eojYktqqHcu4OuAuncLI0ryddDv9bqKqAqp-DNr1SWSWlecMH1maVBgYe2IbcUI&_hsmi=123589877
- Sample260925-lsxn3stdnd
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 632 msedge.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2316 wrote to memory of 1352 2316 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://eu1.hsctaimages.net/ctas/v2/public/cs/ci/?pg=187c7162-4e88-46fc-a637-94e0e848f375&pid=25192585&ecid=AOKeC1YY4rkn4QAbX28SKoqlrC4OdNy3kfqLM94VFm-xGaPd3Hh9m5Lx6nmsTr3kHPoAMAFItuOL&hseid=123589877&hsic=false&utm_rewrite=REWRITE_BARE&utm_source=hs_automation&utm_medium=email&utm_content=123589877&_hsenc=p2ANqtz-_e-wCQ2mCwvYo62e3K5w59Qkd7NUGlC3ZTlsnTtBrL3nX_ChM4eojYktqqHcu4OuAuncLI0ryddDv9bqKqAqp-DNr1SWSWlecMH1maVBgYe2IbcUI&_hsmi=1235898771⤵
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2316 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff50a6c188,0x7fff50a6c194,0x7fff50a6c1a02⤵PID:1352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,3775265696406577842,3867458801236997982,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:32⤵
- System Time Discovery
PID:632
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,6595887472954304902,10579655617227791641,262144 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:22⤵PID:4772
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17603247076229024164,11247537770111584777,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:82⤵PID:448
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,9977701188872133643,3334660641806271293,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:12⤵PID:64
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,17931775638990895474,18121895652308643251,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:12⤵PID:1100
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,18277474163895451034,13381866469964352526,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:22⤵PID:4588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,6357925552249538792,11759905014797242819,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:12⤵PID:3936
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4180,i,9071236839011223035,3884145707778015938,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:12⤵PID:3236
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,687303399857073751,2697681799955390436,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:82⤵PID:3700
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,1039669530141253613,14432250536356910254,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:82⤵PID:4200
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,5901627706086081305,14484719714567721600,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:82⤵PID:4444
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,5901627706086081305,14484719714567721600,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:82⤵PID:1828
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6440,i,16718782296746220483,12099991775753382738,2097152 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:12⤵PID:464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,17064148883898219386,394934322732168072,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:82⤵PID:1644
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,12399656742956374267,12440108952786196109,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:82⤵PID:2524
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,368119604800691954,10552402833924073940,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:82⤵PID:3176
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,11654864611071036756,16819071874534473391,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:82⤵PID:1596
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,13712207180370192556,11537548514578500998,524288 --field-trial-handle=2480,i,17520805867777370221,10491021718284114758,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:82⤵PID:1128
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:4460
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
- MD5 7aa846396cdcfea376b8811e8e19c8ac
- SHA1 ec25e76211c784e758c9892460a28903222a2b23
- SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
- TLSH T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
- MD5 a70a868c80f3eeab924f0b5bd11ac679
- SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
- SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
- TLSH T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
- Size 62KB
- SHA256 6089d7559347c3e81906f403526f4eb168b1635eed675a5d09aec62cb730f094
- MD5 2c48341c97d153306278eeab7572bbf0
- SHA1 9d613583e858d083aaf17e5854b218449c65e3c4
- SHA512 b80176f22330e9a5b4d3367b2e23e2a0f1a3ce6886d681b1c9ab788640260704d61c8c59cef5158d4d7cf4510c86a7f6d0d319fcbd8dc94f82d3446f72db2760
- SSDEEP 1536:UyL8VVeSdlDOzoTa13gOkcHgXlNHckRuvVIQ:BIbH0ou1wVcAkqQ
- TLSH T1B75302ED0CB98166720528B73F45156D13B99888EB53EEBE4313818EC3A59BAD9C019E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 4c5143f3e4d25c5954c8a1203df651cd3ef0dd5063a816bc1ceea42797334ead
- MD5 a7abccaf2949aec7469dc343ac23b958
- SHA1 ded15def7b0f18775f9a3fed1a4e19815a168a72
- SHA512 8d8d88b6baf811c8067dab335d4ac4428cf46524ddf98f5cdf98bacd2b50de27c36eb8f523b875441d6854372c79176553a3374956b27879e0a0091bf8bdcac2
- TLSH T12E81D6C4894C8BB0F7E7287346C91B4EBB32204C06A77E6636B9DB785116357A2B08C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594164.TMP
- Size 2KB
- SHA256 87fbc286b4f0065ff5077f3ff37e9f13356c8d7a51b60b5991d92a6434e156ad
- MD5 e14b9bb31a3657fe760dc5d9c7cad76d
- SHA1 4a2fdb06082c33bd42a40467c2dc6d3940226ba0
- SHA512 19f397694cc7d3d10c32347680c21bba88d7a9dc2f189c44d5f2b6ef2b8c91cd38c6ad39a1d3c9ba3d6adb340c6e33e2e990bbadb77212ba2052e2c97eddacc3
- TLSH T116518384964DCBC0F3EA4CB189D9078BFF32318447A7BEA632A8CBB95456764C2300D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 8KB
- SHA256 aaa7120f604d585cfc8026399d5a8bb960221ba0c732f28b7a7235a73a9511d4
- MD5 52f37ca36544c0d1a5627c37ea2b9bf4
- SHA1 441e1b0fbd6edddbcc147bb2f9aeb0f43f3330da
- SHA512 3cdeabfaab7477c723020400d505345d3001562bd1a734c0047eb452c060946e1deea7126de08986d6bdcdb7411209609ef98e82378624e02a7d4ae68a8fad93
- SSDEEP 192:DBMT8upTPe/QeAI16eom9bS1A0PM6NuRkun/PaPf/lNM0Yh6Ih9BWeTtMYBl6hT:DBMQgLe/QeTceom9bS1A0PM6NuRkE/PE
- TLSH T198027AF783F9862E882651F09A18BE1FCE591815831C7D2BC9D59E17A3E3471E202B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 9KB
- SHA256 31306ed26f0a3f3ce32c78a3d1289117b07ebfb8d6aacff99dfe19686f463e0b
- MD5 2b3786b932369a258b9ec9d4e77016f4
- SHA1 59618940a932483a6bd616ffac1c535f3defe9da
- SHA512 9f24f71483afdd810cfcd73ce3b34479fd4b9913d43d81284570efa25b2824888c6be0383d177fcd027c5b16fcefe33160b98394e310d4fb0f216b67eea0f875
- SSDEEP 192:sxZdR+WH/fcsxMsIdp7DHW6+WNhzY/YYBVSHIgURJ:sxZdLH/fcsxM1PHb2/fgUb
- TLSH T1FF22C8566E28A57B4CCBD21DBB65BF53D6FA5032A1D01E48EAFC861C04E76CD220780F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 1dcaad1ae3d73d307c56a6438afbdef7bd33028c051d016d42874249f4a57a60
- MD5 166ffed913ee3cde578c612a9b3bd54d
- SHA1 bb4ccc18886d10b446a34d7f824ba7bf03e7b613
- SHA512 529b6320b454bfd38ef2f6cab7eebec4982137934e8237954c34ec2361dffc90580a27e391d7c63c88fd4c763e15a701294921f4f5961d8450c9660fb751208d
- SSDEEP 192:sxZdR+WH/fcsHMsIdp7DHW6+WNhcLXYYBkSHIg5qRJ:sxZdLH/fcsHM1PHbeXfpUb
- TLSH T19822B7566E28A57B8CCBD21DBB55BF43D6FA5032A1D11E48AAFC861C04E76CD220780F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 b58266de560e63bb961719f7b2050ebf3a184be86a5745d059b35ab93b15f6d4
- MD5 f777d42a40d6e2abc52611106d2fb2ad
- SHA1 133a86bbcdc36f9e15b9a35382534ecadadf04d9
- SHA512 02dd0ef7aceda23cb7bc25d2395aec63fcf5eadbf1be943314122acd9f1587ee6eb14b588f892d083d2604316f5c0e1ff4763fb8ad4331b5e03d3d9e2c7b7108
- SSDEEP 192:sxZdR+WH/fcs6MsIdp7DHW6+WNhcLXYYBcSHIg5ERJ:sxZdLH/fcs6M1PHbeXfBSb
- TLSH T1E022C8566E28697B8CCBD20DBB55BF43E6FA5032A1D11E48A6FC871C04E77CD220740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 14f0d47fa7afb60c85675dc7e4e0f79d1d03f0c423281df9b2ea79dbe4c19d06
- MD5 45342424336a43b2e1ab6dc24f033304
- SHA1 ec605d6bb8985b50519f25bfd429b39c6bb45ddc
- SHA512 0c9a2974143d04d626018a30efd3880907f69dd21196c616b89e85ffe3ec7cd3b24297fef82b4f202feb536e5039662ae8c02af9f025075baa3f07e87f8a5095
- SSDEEP 192:sxZdR+WH/fcs6MsIdpBDHW6+WNhcLXYYB0SHIg5ERJ:sxZdLH/fcs6M1BHbeXfZSb
- TLSH T1E322C8566E28697B8CCBD21DBB55BF53E6FA503291D01E48AAFC871C05E77CE220740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 27KB
- SHA256 bd36607ddedb0004cd08c4abbcb677a659106428551409f4b45e5f7471a2941b
- MD5 950cabe685d04a9e8d54ea94cd906d49
- SHA1 5e0b9a0d36e9b02866cf9029b9178f9f67196452
- SHA512 2d0fbdbcd46079b264699348d18874f760edb99f7aaa0261d534dbf51e29ccd65d8df152c09375458c155b590caa50765d2b0ccfa8904cd7811ead2ba9999545
- SSDEEP 768:fkyYR7jWv3NRB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXYrophTm:fkyYR7jWv3NRBu1ja/CL8OXjO
- TLSH T190C2EA3F640DCB7E4FC01A9DDC5A6F9B3E9802C796548D4047FA994C02C77EA912A4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 bb202867706248821cbeea830e141e7eb6f10181256567bfd3cb55c0ce8ed4d6
- MD5 1497fc13bceae7624053a10a89d13030
- SHA1 8b3748ea4d627a2768dec0088a3a7615df7b684b
- SHA512 ef2351c0b60a6c1ad10e8b356e9334cf0840a48d94ea8e9b2215d3c8f52d03aa1ce6e1da54391c6041ea52a2ad08cc5d5da142512ec1ae32511271cc483b8ac5
- SSDEEP 96:KhrANJD1l1GBqIEh1KMEET1IeyMKHqeO/KKYUvC7:GrANJD1lkBqFhHEETSDDxX
- TLSH T19C91145031BB060838BE298D81A3871E52417273705CEABBFFBD80655D6EE481DFE9D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9492be2a-e183-4194-ac90-a510dbbb0c50.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 26KB
- SHA256 23af5c8a125633337393d2f281883f8f3598f8259fe70f8a2d07f1c60980c510
- MD5 5ffc0d0426558e0ec307122c3b497eef
- SHA1 7fe8db3b1bc86649d23665c143e12ad21baefae2
- SHA512 bf2402f0c1ba9b60be1eb08f39be68ce9351016b031edb4e012de96c40729fbd79dc4587abced44d6b436ae8f429c27735c956397688cdfa207304ceda9bfdc2
- SSDEEP 384:4iFiZcIJzsNe8TUNTUlIlNg0ZtSiphWQX5+DtCM8l/+Xv8rQ0ztgOIwZOy3Eoz1:DFQp3wg/tSWdkDY/u0rQ0zXsB21
- TLSH T18DC22AF648D7887AD9EE5747B77D2D028EBCC067B5846680B7A85A1CCC961BFC30AC11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 a702a05816cd373e5183fabaa5659cd2bda25d91dae280f7d14d23523d227c20
- MD5 eacb1f1163a79e705840956eba169899
- SHA1 7ec5861633b990d8f9ba97835f24f2d18e9be3b7
- SHA512 f5071b06115eba44b319ae3dcd68e29e446eb27787a2332e66cb034d3600369197fea2e4ff6a5cfe418772c9095721823b7c1c79e0b18eb37621dd7a8eb51ace
- SSDEEP 192:EONq6nnHGQmiUySCQYcX5hQDP1C8jzorqo/qMc+p4U6:EONq6nC0QNX5+DtCM8l/SZU6
- TLSH T16D02EB35ACB87CBB8EF76D86B48632139F95212BE5942B80DAF85E1C10D765C2306937
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 4ab57b293989e519faf37636369d6a6dfa134162c7251a439e50e18f23a845b1
- MD5 58f68f0338643780dcd4f343c0979149
- SHA1 e0e9f9690afa0b9e11e624dbc6b3957bdf54e4e7
- SHA512 f3c5f0faa3f8a2664ebf018c11f1e0121cf29421309af4387316a07e13380a631a82bcc70cf470baa889bc2ae7b8696eaa6542deeffdd55db46506d75dce7513
- SSDEEP 192:EONP6nnHiQmiUyxCCYcX5hQDP1C8jzorqo/+XEcFfErKg36/55F7U6:EONP6n+xCNX5+DtCM8l/+Xv8rV0zU6
- TLSH T1AD12FB35A9A8AC775ED365D570C731139EA52127EA887BC0D6FC1B1C01EF69C230AD23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 ece76ddb269d1e3d547b4d34fd3bdeb352a2faf789c24274f99460d5fe7e1fe6
- MD5 3878021220035fe8f3c9f69ba561d5d6
- SHA1 80b37423ede06bbe9fdd2817d345ef4c0f6e1be3
- SHA512 35831e4d107f27aafb7587b9f2b0781f0d038853528980672d49e8d7f1fd25995e5fbc3ba2ec1ad3e0e798fc7b18359426ae2c8d2608cc74db9b8cc8d3752f48
- SSDEEP 384:PZcIhsNONg0ZtSipIWQX5+DtCM8l/+Xv8re0ztgOIwZOy3Eoz1:HhXtS/dkDY/u0re0zXsB21
- TLSH T17C828D3699B89C771DEBA189B1C632139FB85027E6C86B80D5FC5B1D01EA6D9030BD27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 907a7bf75b32acf1586e192a1d17ee68c86c948a927b90f359dff2c02528049b
- MD5 eaf2d86893dd251ab0d009e9dbc6b963
- SHA1 ea0d1f74288267d05b98cf9bf2401282b7ecf2f2
- SHA512 2290683c062052a7443ef671b006e701a6b99347139fc17a6f88a7526b9f2d595c8f90c6ee61ed02c1ec360c8993a71e9afc9c21e2a44f0da60f1b6e03a496fc
- SSDEEP 384:gZcIhsNOug0ZtSipIWQX5+DtCM8l/+Xv8re0ztgOIwZOy3Eoz1:ehKtS/dkDY/u0re0zXsB21
- TLSH T138828D369DB89C771DEBA189B0C632139FB85027E6C86B80D5FC5B1D01EA6D9030BD27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b7380874-6437-4fbd-9725-04b3c5a984a1.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 84e2ac426dc51329de0955ceec656f02c9b2e8e6df6f6aafeafd6795e6620d38
- MD5 7c0e8f627db0c8d9f882020268f785f6
- SHA1 170b4d8d023fe162cb44b9479d3af1e9f170105f
- SHA512 3ed9ccfc15eda64c3ab866f0bdca3948750e44975bf7702f3de713cdd4ebd8866f1b6ac765092051a23cef86df1a67a0c92420c83da0bcb2a4d1ac1636853ab5
- TLSH T151411B48BAFA1108B3B77E56AFF2A96D847F78671E46D09D00110D4F0A67B40C961737
- MD5 SHA1 SHA512 TLSH