hxxp://unicesuou[.]click

Resubmissions

08/07/2026, 05:22

260708-f2mycacs6n10

08/07/2026, 05:13

260708-fwt5gabv6x10

08/07/2026, 04:45

260708-fdkhbaa13s10

Analysis

user interaction
yes
max time kernel
388s
max time network
382s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://unicesuou.click
Sample260708-fdkhbaa13s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279595320426545"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{9BBA736A-E4AA-47F4-92DD-31FFA0A9D1C9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4656 wrote to memory of 1084	4656	msedge.exe	85
PID 4656 wrote to memory of 4404	4656	msedge.exe	86
PID 4656 wrote to memory of 4476	4656	msedge.exe	87
PID 4656 wrote to memory of 4476	4656	msedge.exe	87
PID 4656 wrote to memory of 4476	4656	msedge.exe	87
PID 4656 wrote to memory of 4268	4656	msedge.exe	89
PID 4656 wrote to memory of 4268	4656	msedge.exe	89
PID 4656 wrote to memory of 1276	4656	msedge.exe	90
PID 4656 wrote to memory of 1276	4656	msedge.exe	90
PID 4656 wrote to memory of 1276	4656	msedge.exe	90
PID 4656 wrote to memory of 4908	4656	msedge.exe	91
PID 4656 wrote to memory of 4908	4656	msedge.exe	91
PID 4656 wrote to memory of 4908	4656	msedge.exe	91
PID 4656 wrote to memory of 688	4656	msedge.exe	92
PID 4656 wrote to memory of 4324	4656	msedge.exe	93
PID 4656 wrote to memory of 688	4656	msedge.exe	92
PID 4656 wrote to memory of 688	4656	msedge.exe	92
PID 4656 wrote to memory of 4324	4656	msedge.exe	93
PID 4656 wrote to memory of 4324	4656	msedge.exe	93
PID 4656 wrote to memory of 2848	4656	msedge.exe	98
PID 4656 wrote to memory of 1952	4656	msedge.exe	99
PID 4656 wrote to memory of 2848	4656	msedge.exe	98
PID 4656 wrote to memory of 1952	4656	msedge.exe	99
PID 4656 wrote to memory of 1732	4656	msedge.exe	101
PID 4656 wrote to memory of 3948	4656	msedge.exe	102
PID 4656 wrote to memory of 3948	4656	msedge.exe	102
PID 4656 wrote to memory of 3948	4656	msedge.exe	102
PID 4656 wrote to memory of 4620	4656	msedge.exe	105
PID 4656 wrote to memory of 3852	4656	msedge.exe	106
PID 4656 wrote to memory of 4764	4656	msedge.exe	107
PID 4656 wrote to memory of 2608	4656	msedge.exe	108
PID 4656 wrote to memory of 2608	4656	msedge.exe	108
PID 4656 wrote to memory of 1936	4656	msedge.exe	115
PID 4656 wrote to memory of 1464	4656	msedge.exe	116
PID 4656 wrote to memory of 1464	4656	msedge.exe	116
PID 4656 wrote to memory of 1876	4656	msedge.exe	117
PID 4656 wrote to memory of 1876	4656	msedge.exe	117
PID 4656 wrote to memory of 1952	4656	msedge.exe	118
PID 4656 wrote to memory of 1952	4656	msedge.exe	118
PID 4656 wrote to memory of 960	4656	msedge.exe	119
PID 4656 wrote to memory of 960	4656	msedge.exe	119
PID 4656 wrote to memory of 1048	4656	msedge.exe	120
PID 4656 wrote to memory of 1048	4656	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://unicesuou.click
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbecdfc188,0x7ffbecdfc194,0x7ffbecdfc1a0
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,13801326935953579432,7643556048590535891,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,17916660519894008421,4802449378700080190,262144 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,17868946270571902330,1226157342406888266,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,12488217346328875652,11063153659985838669,2097152 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,5154778199500191848,13360992148450081765,2097152 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,1296200531075684459,13115791448780805272,2097152 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,16643893082384826719,4893526676350416165,2097152 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,11316187369171781260,16691319604113356916,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,12207559321398909986,13236640398063347865,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,9894543920231415837,7642099086332660812,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,9894543920231415837,7642099086332660812,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4268,i,4087796825492377400,17826196656709478161,2097152 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,12632578997006720605,1681969425668117318,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,6504794217017379592,2207091035196439721,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,12343917925474973952,2593397611866210450,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,11200679928129194618,13481896111285745172,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5764,i,773945046311174741,11365574849099214955,262144 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2968,i,8746949210525778621,16561702261273367571,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,7340105747861999346,14290340445387912050,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,16106815430706164304,14593891321597926857,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1528,i,4859560271244437793,10158356325128794204,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,14424006609321157729,13506882224029335026,524288 --field-trial-handle=2172,i,2027584106559106531,12512981231200523696,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:1048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

5f2d327d-5d5b-44ba-8a1d-1ebd25b6722c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f2d327d-5d5b-44ba-8a1d-1ebd25b6722c.tmp
Size 13KB
SHA256 55197100cc3cb38b7513923964caa8587ce19f4505592a7b1fff6eb806b1af72
MD5 5081cae754f57d0d04136d52b7d19641
SHA1 b4eba33a8de5cd4c3a32871a347831fffc65a87b
SHA512 eda61473038684a3d303ed64124318139d9dbdc4e8e14a825b658114985dbb3f55a1242ea54da7c0450726175285a59b6022619214dedbf51a80a476741e8e3a
SSDEEP 192:sxZSRqyM/jK1Ml8UQ2k//f/sA/A6pIdpdkHW6+WNELfZYI6BoYIg5+J:sxZSQqd//f/swtiSHbWZy4
TLSH
T16452C7126A34697BDCDBD209F945BF53D6F51463A2900E44AAFCCA0C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 14a72fe20cfc2a0ba050c7c903d8fda9ca8da5f916ccda6957a3d588a66d1613
MD5 333577ddcdb3ff0ffffebbfa15bb13ed
SHA1 5ef5f2f39295dcbac3bfb81968ace97c11150473
SHA512 3b5e45331790170bce6f5dda7db67b3b1bee99e9a01925278db488df0528f7e8bb170edf6e7a81ff48e55cfa1aae4ea92ed6ed9f216a0f636dfc1cd6e4547340
TLSH
T167E026EA1FC8C26FA307648B427C430CC2D23F1B93CC69CA270089987306150ABD6EE1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 17bfe845449e666769f06d089edba8769844d0f67674efa75e9ec0b7785e8018
MD5 9b1b6b90f75ee47485f60c3eb61ac27d
SHA1 642b09c418ce70a089b8d309263e57d1d2c94ce8
SHA512 9292729be93e51707a390eef3c47011b8ddf55f7484e8fed53e782f11fed1c70de7e807f1b584819850c6d323f360022844fae043513364eb962fb1439eb10d2
SSDEEP 48:PoBtyIgf6pmx6FsZIlelo6Kd8gqDoKR5kyWuudXSMzvmHqt0pHA9pxq8fgmqgf7L:nyIFIlNJolgNvYMxQW7J+SL
TLSH
T15791B8B601026FEFEF99A2F824DD21983C7170E5FA337E565DA446353433B8112CE569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 f2c8fc06fe9d12f1b47d3ebf44db9531c53df84a0b72072a576f5453c9f931c6
MD5 82ef0197edd29e8b9540e9f7ed7d8374
SHA1 d4c55f8abdcce21a3b0c620bc4dfdf610a241e59
SHA512 5219191291a207d7881599377c195819cd982e9d83fb878d9f5f211384530f737014a8931ee7741a55ca3ea98e586395ff76aa84a28e0ff43b83a48d4144eab9
SSDEEP 48:T0BkyUwIS6I8IlelnKdmgqeoKR5kxWufSEJ8mHqt0pHGOQqwfgmq17JlpA7:+ITIldflUb8YDQwp7JzA7
TLSH
T11B91C9B74242ABAFCBACA1FD20CD75983C71B0E9FA335E565E6043353423B4142CE668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c81d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c81d.TMP
Size 3KB
SHA256 3f57606280079f08a27045a16a0ea3b893832ffe2219766964d38656d3f78e0c
MD5 08a525c4226437053575d8a437633ef6
SHA1 3a81548c98504550c35e2c51804b8649fa58431b
SHA512 ba03762058c133c288e4b8c6dad4a2deb119362e095fb143dd5b2f8329cd711fd9cd3fa6a2fb6527027cc17da0213abb5af8f48cc3aa54637f1881c866fa04fd
TLSH
T18971A2BB410287AFDB2DA2FD64DE71603C70B4D9F9335D969E5047363917B0142CE688
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 90d47d6ddb41feb2f7ae4d799b9612335fa8ba6455a8ff056bf3b7e7d01a15d4
MD5 52c78a060a58993a8dfc59e9bea124a9
SHA1 538ddd5ff8617cd471d0a1823e5bfbfe24192975
SHA512 3bb539ab7348c5d27a2ed07438003a54ef165a1dc685593209ded25fc0b3bf683e76c69f2da90a58f784fde4fe3a5056a6cb32725b5d4aec53b22b854e1677a3
SSDEEP 192:DWrgjmHpmhthBNySCO1i5ocSNCwaqH1eqxhcKaQCGJEQBkC7t++Mj6VRGj4v:DWrgjmHpmhthBNySCO1i5ocSNCNqVeqr
TLSH
T1ACF1CFF782F0C59EE8015AF0E6167E5BCE580818471D396ADAE6AF1B97D3071D2016CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 27ccf8a9e94b899b321b9091429aa889b5a2da26c587b26b6f5128d2856c2e65
MD5 361df4cec4c54b90d2666ed8e687b3a1
SHA1 165702512fc5000e16d7b59150b62deb3be344aa
SHA512 926c4c5f56b151812f0239afef8f9415a1b034145a3de13f36212242d1f8c87df58a0223c9b68e833c56ed0a4d5f77410a1269df3b0b5da4aa836c4f7a7949ce
SSDEEP 192:DCCYj+PA/CU3LC1kj6EZCO1+iGocSNCwrfqH1poJacQU9QC91JEQCkC7tZ:DCCYj+PA/CU3LC1kGEZCO1+iGocSNCMy
TLSH
T1EF02BCF7C2E4C95EE8115AF4A7263E5ACD5C0D184719391ADAE6EF0B97D30A1D2005CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e77fb25390a75866d913799a5e9a4fec5df0aa9ad0965cd605beccf559a0db13
MD5 cf3b0de63d956777f54cb10e11533bb4
SHA1 08fd557a6d7c83f5e36d12df4907571c088d7b7a
SHA512 ec625b6bd1db6694eb7a0800ab2c5f0e724a0e03da74797c2d3d71b98d765ce454c458eee7154e0d4fb2511eb4d46c25c1545ef1ae7122182aef7ffd42ce0a15
SSDEEP 192:sxZSRqyM/jK1Ml8Mk//f/sb/AsQIdpJHIy6+WNGYIwKoYIgrJ:sxZSgM//f/sLPxJHcGh9
TLSH
T11F42C7126B34697BCCCBD209FA55BF53D6F51463A2900E44A9FCDA0C05E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fdbdf9c811b66370d58121982d90206191e49b087eeb3e4799b2ffd36eeb16ec
MD5 c7ce42cb8e3e48b95b32c25917493731
SHA1 55fcbe8f224661924eb9244f1e4ccc5836e54eb1
SHA512 14462be9ffa2392c2afe62aaae6bcf5ee1b33b87f3f9b84492df8d12f180724b9c72ace64637dc28cf5dbcd8f48e3c74cdcda001ddd41dcfbc46b4f1d69b2648
SSDEEP 192:sxZSRqyMqZjK1Ml8UQ2k//f/sA/A6pIdpdkHW6+WNEg+dYIlBo8ZIg5+J:sxZSnqd//f/swtiSHbadz4
TLSH
T17452C6126A34697B9CDBD219FA45BF53D6F40463A2904E44AAFCCA0C05E7BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f640761a8ee188c0d9e7facf1dbed190c7fc178d0dcc523542301cb492836124
MD5 fead165df1f0693d0b013a21cc9ff63c
SHA1 7f269482af8f318c18c35b699483e4dfc8af9703
SHA512 a551f9f647c777c4a8c1c180fc1195aec42d3130c25af403ee180ad701dc4f8c4505371316f6265ca90bdba0b05b703d2d00f6990f004807fa7c99df0ac50bfc
SSDEEP 192:sxZSRqyM/jK1Ml8Mk//f/sA/AsxIdpPmSHW6+WNExW/YIVKoYIg5MJ:sxZSQM//f/swP6eSHb5/yq
TLSH
T1C352C7126A34A97BDCCBD209FA45BB53D6F40463E2900E44A9FCDA0C05E7BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 800eb78b88c2f09e4e8ab890adb5452fc8980ac0e8878b25ca08d5eeef294534
MD5 ec662fea0d211afb4e205f970c69a68b
SHA1 bdb9e9d574cefbe9db2c76a5361de090cc24e56b
SHA512 dbdce1362971cd1fac9c4667f6b198eb5095b10d1afcaee30f09536c651431902a2c7abe1d2a0f9775a65a8d487422a3b4ee2e22e7cfc3d5cc762b757c6a2469
SSDEEP 768:Y+sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR97roZBSc:Y+sqxXlWvJD6Tu1ja54LAs9IZBr
TLSH
T11ED21B3B694CC77E4F840E6DEC266FD66ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 6f8da0ff053040e413b1a712de633d6e06db8eed5249116a839f5ac3f9cd8a22
MD5 5a43c6d93b3da7306a9697d537b813d9
SHA1 2a3c1ca924759b2e717a910e8136e09d407a1987
SHA512 fda6ede1a3fcd0f8359672598e0d149a1731b9fc4d0de94282a4fb9148b2ec4bb94292f677afb6d39f4ef426d677a3416ac0c8cb95d5e6a75824072a62112e89
TLSH
T1C731518E8E51859BECA489B2107561A832B0C8CC1B11D3034C7C22377C2336A1A4B4DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ccea2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5ccea2.TMP
Size 1KB
SHA256 57a110a7e61a83ca73fb9987f2a183e846867bc67961ccca30161f69c3af535c
MD5 2d321733baf3be86079cc672952de112
SHA1 2295fa2648831d48b0a869419b4af9b0d62609fb
SHA512 c9a39db64309bf1a41ed44f1e27476a1a2885ba10640febd0edfaf60d53f98ee6981e920284ab893dbef5ffeec9b7076940685f9bd6ef00d794e909fea9cadaa
TLSH
T13731638B8A418A1FE8D441720996A4B83379D94053227787D87C673EBC757BD1E5F0D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9b2782cb42511a9eb2ec32c9e962a5ff7215c5c65e420f9be6ac189c8c500554
MD5 4f94a359ec8268d51f886698368eda9b
SHA1 f678caea07e90b1cfadf6ff40286e0da3ae7187c
SHA512 88944da797dc763f1fa93ea661386195d503a2e297a9d1dc78e518882eab2ddeabfdd87f9c8218627a65d30b2b3549f97dd7f7f3fc0a1d25516c15a011ff3dfa
TLSH
T12DE0687A2AE70854A8ABC3DA087344964510F428C891EC4F1129928310622602822C27
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bbc6fb8f3cb0e35627f39ca9ebe61fcd992f065fe8eb6e69ebe812fc03587235
MD5 9d25573c6b8c6ad9e6f31634a36a8028
SHA1 2370eefa7fb3ffbdc6ec07bbc6c6a86616a8a085
SHA512 29756043c3d1cc853080fcae05c8371de984c73784607ac510f5d1eaede3ecdbea9cc763a6878b9556495ce5b78b69ca328d8a928cfcddb61953614fe41645aa
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyZ+I/Kjiojy5EIfKdmsKCHuC0Ud:KYbaKYIK6+EKji2qEAKdmrCHuC0Ud
TLSH
T18091174A363A0212383D2998B2A786374F423A637018A46F3F7941E55F6AF125CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84a70c6c-adbf-420d-ab4a-6d17d652e1a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\84a70c6c-adbf-420d-ab4a-6d17d652e1a5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 4660f12e7ce67eeecdd4385d747f885d48d3fddf0866502383bbc03085b9880d
MD5 37ebab164feb3557e3f13fe0a32c09a2
SHA1 04f58e6ec2e801dbfeb1a25d22506266b5a81b1d
SHA512 a17df74b1ce72b69d1a2c8b09b0b27e67de99d2b4b421c82d608f340f249b7dd90b3c50c0362f2dd12692195d6a78a837bdc69c8eabe396cfff488b359762550
SSDEEP 192:uJLsNgosNQTkRbMmdQmiU1WKWB4VRN0OmheRnX9ASR7qi6XbarV7:ksNgoOfbXbPWuVRN0OKq9XI07
TLSH
T1B0423936AC385C375EA39245F54B3213AEB85067E7C96F80D6D96F0C02CF69D130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 81cd5f5ab17ac346b11c6880165080ba0499cb09dc70e49fea2c8cc6138a5648
MD5 0cf700c5374c81541d41a43e67373b60
SHA1 0a8ecc9048177280811a1bb430293267dbcf55d6
SHA512 49e048baf4e5cf2c617e7554251357fedd1fc22ef8fa01a5125a2e40aa9fef4a0f6ead8c6fb29d9afc5f39d335f021ece7986299a3a0576ae862961d9edcd14f
SSDEEP 192:tONr6JkRtQmiUyWMW+RN0OmheR2h3tR5U6:tONr6UrSW+RN0OKFVU6
TLSH
T1FB02E935AD382C7B9EF2AE09B98727175FA4207BF9856F80DAD81F0C01D764C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 eae265ad90cf0fface4860ba3732ffda4f32803bf7fe5670992bcd2b88d7702a
MD5 4bb531e5c2ad6395f63759f8dbefd82f
SHA1 fa62426b6eba0efdd87e7930095f144f5aa9ea59
SHA512 e7888d2593dd3145fe546920211cd6ea2c04acabc113e66e1e0ab113cdbecc9cfbeae8d86d79ab4ca8e617d1261545eb50b6b24633ea255ff1830afc685d6903
SSDEEP 384:8tNn/s3n9SfsNgoNfbXbPWuVRN0OKq9XIZp1f6v0GLuz4OMU7:8j+9UYZJH0OB9XIZp1f6vruz4Rc
TLSH
T1D7928C3619359C374DA29698F50B361B9FF490BBA3C52E88C4ED6F0D02CB6EC031AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 23e30bac0ff3c1350ec6c58da17ad8dc54900ab2705e997ba2f0fed23494894a
MD5 1f60ab6cf3ac31fe0d32aee85d4e4b8d
SHA1 bd856d1fb2c593e7b242bc9cd3eccf2e8fec8f16
SHA512 44da74a16c3dc46e39041198c66e5df1bbc2087bda155e51ca98eefd5f79a800f8faac6f268f1f8b071cd1ac4a0c9a5a86dce7b5ec4bfa1b7e5eacfe9337a58d
SSDEEP 384:UiF1tNn/s3n9SizsNg8TUNTUlIlBNfbXbQWuVRN0OKq9GIZp1f6v0GLuz4OMU7:vF1j+9lJwg7uJH0OB9GIZp1f6vruz4Rc
TLSH
T15BC219F208D7883AD9AE4747B73E2D169EBCC0A7B2815944B7995E0CCDC61BFC30A901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 54f10f9f436c8a88f6bd5f4aab04c0fd139fa4abe801b721519c004cfc257e29
MD5 ae564d55101512d554924d9c3aad1770
SHA1 d185ba9f2448fdcb5e4bf0a71f1a8bec1300ef5a
SHA512 1979e10957686c58c46e5da4135bd5582048a6dd3a51868e7d140ebbeb3f70718095167d01f206594aa4b5f865330952f638cfa4ec925c824809ab18055dfc85
SSDEEP 384:ztNn/s3n9SfsNgBNfbXbPWuVRN0OKq9XIZp1f6v0GLuz4OMU7:zj+9URZJH0OB9XIZp1f6vruz4Rc
TLSH
T16B928C3619359C374DA39699F50B361B9FF490BBA3C52E88C5ED6F0D02CB69C031AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d98b0eb5cc1c6466f1b291dd7c56946d7371f5d52792ae3f276ba739e3c1f371
MD5 6c701fb7469d9e0fddeafe2d5ecd56e1
SHA1 da2d0acb2ac0018b8b47d25e9e64cc61dd32016a
SHA512 a092c9b5c985edcb4339eb9109b0ef2340fa7da67bae87833d232174296db6d2789921904292cef9e413eb29d051e4fbef3ba4cb587441903cf1f43ba278b8a1
SSDEEP 192:CONZ6JkR2QmiUy+MJ+RN0OmheRnX97Vc7qi6U6:CONZ6USAJ+RN0OKq9yIU6
TLSH
T1A9121B36A9386C7B5EE3A545F58732139EA55137EB896F80D1D82F0C02DF69C230ED26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11cfd383-098d-4b1c-8739-05ce80da7f7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\11cfd383-098d-4b1c-8739-05ce80da7f7b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 edf2644cb5bb289c906a2cf4147122dd485ead3a51ac1715afa660ad786db950
MD5 b15ea1bc5d998c0053539393e946e674
SHA1 604c3d8a3582ff89ed2bbb77e4753da78ea0855b
SHA512 6a9dd9539fdbd47998c568429cc1dd101c84333a5be691d76a201b426cbfe35981e68fb7384ebd8a90367678f032ba342738dd6f8ea856d85a8fce740a732ccb
TLSH
T1ED412659ABE91118B3767F1A9BF6686E447B79372F06C49D00110E4F0A63A41C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download