hxxps://pixelbattle[.]fun/

Analysis

geolocation tags

cacanadananorth-americatoronto
max time kernel
299s
max time network
301s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/07/2026, 22:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixelbattle.fun/
Sample260701-16txnsgz21

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4892	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274177917665012"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1679180529-4058988202-686829476-1000\{DE35E3F2-D9A6-4A9E-A752-37FFF3DF8861}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 1904 wrote to memory of 2808	1904	msedge.exe	81
PID 1904 wrote to memory of 4892	1904	msedge.exe	82
PID 1904 wrote to memory of 1136	1904	msedge.exe	83
PID 1904 wrote to memory of 1136	1904	msedge.exe	83
PID 1904 wrote to memory of 1136	1904	msedge.exe	83
PID 1904 wrote to memory of 4572	1904	msedge.exe	84
PID 1904 wrote to memory of 4572	1904	msedge.exe	84
PID 1904 wrote to memory of 3104	1904	msedge.exe	86
PID 1904 wrote to memory of 2544	1904	msedge.exe	87
PID 1904 wrote to memory of 3104	1904	msedge.exe	86
PID 1904 wrote to memory of 3104	1904	msedge.exe	86
PID 1904 wrote to memory of 2544	1904	msedge.exe	87
PID 1904 wrote to memory of 2544	1904	msedge.exe	87
PID 1904 wrote to memory of 1068	1904	msedge.exe	89
PID 1904 wrote to memory of 1580	1904	msedge.exe	88
PID 1904 wrote to memory of 2168	1904	msedge.exe	90
PID 1904 wrote to memory of 3784	1904	msedge.exe	91
PID 1904 wrote to memory of 1068	1904	msedge.exe	89
PID 1904 wrote to memory of 1068	1904	msedge.exe	89
PID 1904 wrote to memory of 1580	1904	msedge.exe	88
PID 1904 wrote to memory of 1580	1904	msedge.exe	88
PID 1904 wrote to memory of 2168	1904	msedge.exe	90
PID 1904 wrote to memory of 2168	1904	msedge.exe	90
PID 1904 wrote to memory of 3784	1904	msedge.exe	91
PID 1904 wrote to memory of 3784	1904	msedge.exe	91
PID 1904 wrote to memory of 4756	1904	msedge.exe	94
PID 1904 wrote to memory of 3852	1904	msedge.exe	95
PID 1904 wrote to memory of 4756	1904	msedge.exe	94
PID 1904 wrote to memory of 3852	1904	msedge.exe	95
PID 1904 wrote to memory of 2676	1904	msedge.exe	97
PID 1904 wrote to memory of 1064	1904	msedge.exe	98
PID 1064 wrote to memory of 4928	1064	msedge.exe	99
PID 1904 wrote to memory of 3700	1904	msedge.exe	100
PID 1904 wrote to memory of 1216	1904	msedge.exe	101
PID 1904 wrote to memory of 4820	1904	msedge.exe	102
PID 1904 wrote to memory of 4416	1904	msedge.exe	103
PID 1904 wrote to memory of 4416	1904	msedge.exe	103
PID 1904 wrote to memory of 5064	1904	msedge.exe	105
PID 1904 wrote to memory of 4900	1904	msedge.exe	106
PID 1904 wrote to memory of 1580	1904	msedge.exe	107
PID 1904 wrote to memory of 4900	1904	msedge.exe	106
PID 1904 wrote to memory of 1580	1904	msedge.exe	107
PID 1904 wrote to memory of 2056	1904	msedge.exe	108
PID 1904 wrote to memory of 2056	1904	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixelbattle.fun/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffd4d8fc188,0x7ffd4d8fc194,0x7ffd4d8fc1a0
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,15726153954734500398,11614713562565851317,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,33014880075782049,7729001883436772410,262144 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,5877986824409434144,10468663745696928787,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:13
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,3133570558544610482,13898100417045178405,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,11333011889395646351,155231971787854462,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,1289997774349580435,240620450550749148,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,18240509973938414697,16433160536403080042,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:9
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4236,i,17250054163200139161,11779643211959640423,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4248,i,14149765380774890906,11241901383096504901,2097152 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,8690894153669360716,6450527740532009283,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,17822130891186591208,9627314978934113747,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3144,i,5691595772828120674,8549177883842105243,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3144,i,5691595772828120674,8549177883842105243,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,8749151775657866611,18427084239709319798,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1064
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,778660091351737038,7752880233347650524,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:14
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,6290279135102826689,13586421834305743572,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,3026356368589180678,2655847378970278204,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:14
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,11657997166065635344,13949372962131563000,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5528,i,12931119368395268727,8261589952208787844,262144 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,5301298958209116917,14000961968905154420,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,2752796452608759262,7985950263720057727,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:14
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,14683544376142856766,9830002636306006318,524288 --field-trial-handle=2156,i,16241365943608400846,1430795659819496162,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:14
  2⤵
  PID:2056

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 3f4613ba21168f3c2c7e09e49f265ea32502ed091b1bcc651bc75283e1ce082c
MD5 3ad2e129c05fe39b8b4a0bcb77e467a4
SHA1 40c38a184e7e535f2ab28ae53463e4864005b42a
SHA512 48c5c260e88a6d07d2d775070ad181b548de306210901199259c081242e0d17bfe7689a60ecf5a0743fe39a6eb0607d862f22f134a80efb559b2277e2e147fe6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7M:fwUQC5VwBIiElEd2K57P7M
TLSH
T1FCB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 83b97b6923ce1c25ca4f0975afffa4a8a035d906f9fb1b2a17963eea6d46deac
MD5 ab62d540f48a6e64dbe62b6d5e0f66b9
SHA1 282ce872991d2b2872c0eebeba33666b3d3147e3
SHA512 3480d10d4a55f985a4ef7c9cbf908d16cbafa49de7ff2e7f067aeee1a477d42f56e5174a74cdfedbc6726f6bb0df5a0165a160fc6244237cc20d827ab2b58600
TLSH
T1B2D08C333F1E7410EB5A9335A843C71A2EA610662A975703E351C89CEDF40E893C31E2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 750aae5f6fcd1c84f47c22740f9a6faaeacfecd059d469b43a524a58c641f1af
MD5 49d9e916d358c355ce9f2e6c57e683cf
SHA1 7485fcd5b56447b9a576f2d6606e067a135b5373
SHA512 739db6810477a47b0daa04a82b7d4acda665822df2df0d6dd8a6c535f7bd50a13a8f403ce87570016057ab37d314070a0b527099fe628152f6332150c060059a
TLSH
T1CFD08C333F5E7810EF5A9335A843C71A2EA610662A979703E351C89CEDF50E893C31E2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e1c35e1f8f37aa2ab0ad3c309f936630650a32ba421b2363260caf32ffacc042
MD5 977869c01fed1e32740776bff9bce00c
SHA1 159400271f0e23bd4a766ff66f8e76032eeec8c2
SHA512 3c85f6494d82aa9054770e1ec83cd92c4ccc15f8f6a1438ee4a42185fef4b0818852199359138d989222f11f7a354de877092a15c27db555364b9aa7e883a691
TLSH
T11B7195067F924053F750FAB0A7DD070B3A720495CAC76E00119494F959B6B31F4DE03B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1effe123a0a41f23b25e430426fd05d0057059dfc2c51023af1c9026c339de07
MD5 72a1cc81a3fdf3566ad72347ab792d98
SHA1 7537c055f64a7fe1e843b90e9023e304864d58ab
SHA512 29d92d568d5b130acaf47b287b4db09b3658d825fc73beb76c2e72c9de85e1536b55210e72cfef9050c119209f41001745d8083fa3cbd41196eb0467be37c2d6
TLSH
T17B619DB3C2E4CE2D8C0166F1AB64AE1ECE5D0568432C7D1A88DAEF5B67E2471D20158F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 22d032d3cc3509c6e3ce2e67e449f566cd45407cc247e9fcaf305b0d48115d9f
MD5 42148ee83f1444613f40dbfc3f5fec5c
SHA1 6f15cf8f474d64ffc5ff90616c2428bba91f5993
SHA512 d90520d3538f96a0c0ea0fe5dc6767012c2d6ca60ebea6ba27ae4f7273161744c04e2fd77ef62ae42ce514fe4f1f39a1bd9c5f6c722096e3061fcba0b991d8c3
TLSH
T111619BB7C2E4CE2ECC0166F1AB24BE1FCD590528432C7D1A89D5EF5B67E2471D201A8B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ec9ae0e228a1980785c53e7936d4b05487545bdd5eec82d51ec5d2cfcdc06acd
MD5 6406005efe792a8823c8cf92e3339d30
SHA1 6a36cc79e1ea1c7fb8c6a2fc1e8697ddc6308ce4
SHA512 08f5fcadd1b36196d59a307ad1f0998a59302d93eea7c6c7cd8a5733ccc46ee540cdfc748c1d242dca33bca2408b8f8d1c1414ab4ffdad2d0f747cb1906f59c6
SSDEEP 192:sxZPRLyM/jK1Ml8MFt/fVs1a74wIdpl8uW/W6+WN79Zm/Y0aN/bvXIgrJ:sxZPldt/fVs1aMRl2/bS/5g9
TLSH
T1E952FA126A346A77CCDBD209FA55BB53D6F90573D2900E44AAFCDA1C05E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 cb0c1ee167ae247fcb81994a7c5dec5fea06001272b3b6f59f1b137123e9d595
MD5 53cd4e710a6746d66b1827ce7aa9e698
SHA1 62445a36c8eb40c57da3e8da115b430f75c57075
SHA512 83674308b570a39e860d7ad6473680bc9442c1b4a300c95093bffd66937cc5f8f3058622969f66fa8541e84c80acf69e6cf2be7bab035b14cc49069355e3e7da
SSDEEP 192:sxZPRLyM/jK1Ml8UQqFt/fVsva75wIdpD8uW/W6+WN79Zm/Y0aLnyvXIg5XJ:sxZPlqQt/fVsva9RD2/bS/5xT
TLSH
T12852D716AA345A77CCDBD219F555BB53D6F90473D2900E44AAFCDA1C01E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 340784e24deca22dccd4666a4f1d3f036ad81c7c6ca84408ecf17e5c939a2361
MD5 01904ddb1364878413d430cad224d290
SHA1 c63b9dfdb3359f40bc8979671fa4345c8f326588
SHA512 4ea3c1cf4722ec266e8aefd8936e245cb9129bcb8f799e890d8540c64a7ec5ee1be959e66edfd92bf407ef388e181e5124a3a3780bc6546125c1923025aa9e79
SSDEEP 768:3JE/zh8dF2PkWRmEcQXw8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3WjLl/2c0VzJCr1:3JE/zh8dF2PkWRmEcQXwu1jaKWjLp2ta
TLSH
T163E20A2F280CC7BE4F845E9CEC266F976ED801CB66684D544BEA894C03C77DB521A49F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 253fc7adf5232a253b97891b149d28c9d853861077c37cb0603d3d8560fb0973
MD5 1fb232d8cfbc6d7594dffeb6894a23b0
SHA1 fcfa3066dbf5ea0fcfb29e80c7dc654f8f8fec99
SHA512 23e9778ebb5083206923d37d6f56dcc421df795c9aceba14c9b029bac8a7833e960cb4e6f812883c1e6a9d4cfd2723d1def816af67fc999b6eb70bd8b07a2102
SSDEEP 96:KEWgKvfN6KmAoiwgKd2GSkKHKefU9YkqW6g2Obz88gKk18SgIM8LyIPFw0OX:2aDbeLdnPFw0OX
TLSH
T17FD1EF0232BB02523C7F2908E6A597A75B4171637014A53B7BA90071CEAAE354FFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593520.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593520.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 938c4ccb2249aa318f5f21244285cdf25b13bef806cab04de17f024104523c8b
MD5 99c20724a1983d2fb389e5a329161e95
SHA1 c8428455d4245967d80aed8c46115dd46f463175
SHA512 a3ddbf695b6d1146bbb5da94418d3ee1b029fb56f1415f8e14ba2b8627795d9546b1ad6d30b61c61648398461821035962d1e484fdd2a300f74b1a5374fa9860
SSDEEP 384:YurQXjZxh6VV8NeU7uGuKqnsbOj3t8qHIqmqnLM5Ao:Yur0h6/+VesbOj3tboJSMJ
TLSH
T1F0926C366D785D775FA2A141F84B32179FBC00A7DA982E50D8DC9F0D11DFAAC230BA25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 92a3cdaf5be4598ba7627120d0d210577b3d46b33444208ab11d33b070b21aef
MD5 48264dbc0faf0717fcadfab3457467dd
SHA1 ab19e456820aae8226cc80c03bc0b59976273d0a
SHA512 6952b5d112ae318547919ad5e20f455c20172a049755bc17c88e43d15a4cd7728dafec07c4fdc7534a97c8cf1acc0a97cdd22290c8d19a8a37de4866375d342c
SSDEEP 384:EurQXjZxh6VP8NeY7uGuKqnsbOj3t8qHIqmqnLM5Ao:Eur0h6xeVesbOj3tboJSMJ
TLSH
T139926C366C785D775FA2E141F45A32178FB80097DB982E90D4DC9F0D11DFAAC230BA25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e8d94f585189cf92ddd2899da7e7fd478fac36de43960972d776ba5945f7bc04
MD5 9446e87d9e8b388e97d521bb77c5f4c3
SHA1 a13b3e293966bb688a2d91efc2550874bb2a3900
SHA512 ee603b871af017ada0f9cd7b4d9e68304474be25d36eb8a2f419c9cc28990b120577fa894daa02b9f906e16d0f75f62d749e522cf9afc1f91c7ee8a7875c7e9d
SSDEEP 384:giFDurQXjZxh6V98Nu8TUNTUlIlv7uGfKqnsbOj+t8qHIqmqnLM5Ao:7FDur0h6z3wgRKesbOj+tboJSMJ
TLSH
T1E4C22AF718E74976DE9D9743A73E2D068EBCC093B5846A50B3884A0CDD8B5BFD30A910
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c1b6b9e1e54aa0f44913af7b90cd02c336905ceeb5ac632240ccf843cbc8a138
MD5 7f4f23bb92cf71334b600a17c1e3f4b3
SHA1 479edd04b9f6e4a7f8434b37d9e2c0ff365a168e
SHA512 f6d680a744e6436b9aa9334e7d0be7f36f4e5f0554bf9d980914f42f669827f203d2c6cca122163bc48c6682c15b9b868537395f56d181345760a2ded34d9a5a
SSDEEP 192:BGNE6P2UOcQmiUyaIU6EqGv0bOvwSIPU6:BGNE6eXspI8qGsbOHKU6
TLSH
T10502D8356D786CBB8FA2AD45B88737178FD8107BEA952B80D9D41F1C01DBA5C3347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1590bc51533df08104c8083619febca661abe9a98216774b126c5866cea44325
MD5 43737e47b8e652ebc36b610d72782937
SHA1 487804536f6ab4c584138a4ebe5ee20868285994
SHA512 8089956611c8e77006228bf6a3460b5ebcf4046cc8e34eb8fc937cef662b36c45d32a2cdb6482e1ccec54536b0ddebe20e373ba6d1c5fb39e944b3230b5b4d1f
SSDEEP 384:iurQXjZxh6VP8Nev7uGuKqnsbOj3t8qHIqmqnLM5Ao:iur0h6xpVesbOj3tboJSMJ
TLSH
T1A3926C766C785D775FA2E141F45A32178FB80097DB982E90D4DC9F0D11DFAAC230BA25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f08febc5034f81286bc3db555123d1c77644838ae89407ef1c8bf2d8afb8cbd
MD5 76ffa08ec2226986893a4a683bef0d1b
SHA1 36bc1d410df0ded64aed8c92c02cf7cb229beb2f
SHA512 35c66d6a97f3a8c4dfa3f4697142fb9b8afd5d092cb505f0dfa92e821749273d8f1f73dfee3bd28003fc7c7e97722e7e90971031e91c709936c25ebe810926a7
SSDEEP 192:6GNH6P2UiQmiUyFE6E2Gv0bOjUc0BeqvZU6:6GNH6eF2s2GsbOjmtU6
TLSH
T17F121A366C68AC774FA2A584F88732178FE84167DB896B80D4DC2E1C01DF99C234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c103678-435f-4557-a51c-2acfae70fe12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5c103678-435f-4557-a51c-2acfae70fe12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download