hxxps://pixelbattle[.]fun/

Analysis

geolocation tags

cacanadananorth-americatoronto
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixelbattle.fun/
Sample260702-et1nssh17m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1628	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274393073559077"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{1AF7C9B8-92E7-4421-A382-8A9B715038A0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4136	msedge.exe
4136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 312	2476	msedge.exe	86
PID 2476 wrote to memory of 1628	2476	msedge.exe	87
PID 2476 wrote to memory of 3872	2476	msedge.exe	88
PID 2476 wrote to memory of 3872	2476	msedge.exe	88
PID 2476 wrote to memory of 3872	2476	msedge.exe	88
PID 2476 wrote to memory of 4460	2476	msedge.exe	89
PID 2476 wrote to memory of 4460	2476	msedge.exe	89
PID 2476 wrote to memory of 3808	2476	msedge.exe	91
PID 2476 wrote to memory of 3808	2476	msedge.exe	91
PID 2476 wrote to memory of 3808	2476	msedge.exe	91
PID 2476 wrote to memory of 648	2476	msedge.exe	92
PID 2476 wrote to memory of 648	2476	msedge.exe	92
PID 2476 wrote to memory of 648	2476	msedge.exe	92
PID 2476 wrote to memory of 1884	2476	msedge.exe	93
PID 2476 wrote to memory of 1884	2476	msedge.exe	93
PID 2476 wrote to memory of 1884	2476	msedge.exe	93
PID 2476 wrote to memory of 1600	2476	msedge.exe	94
PID 2476 wrote to memory of 1600	2476	msedge.exe	94
PID 2476 wrote to memory of 1600	2476	msedge.exe	94
PID 2476 wrote to memory of 1692	2476	msedge.exe	97
PID 2476 wrote to memory of 1692	2476	msedge.exe	97
PID 2476 wrote to memory of 4568	2476	msedge.exe	98
PID 2476 wrote to memory of 4568	2476	msedge.exe	98
PID 2476 wrote to memory of 1136	2476	msedge.exe	100
PID 2476 wrote to memory of 2928	2476	msedge.exe	112
PID 2476 wrote to memory of 4904	2476	msedge.exe	113
PID 2476 wrote to memory of 4840	2476	msedge.exe	114
PID 2476 wrote to memory of 896	2476	msedge.exe	116
PID 2476 wrote to memory of 896	2476	msedge.exe	116
PID 2476 wrote to memory of 4136	2476	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixelbattle.fun/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffcaaaac188,0x7ffcaaaac194,0x7ffcaaaac1a0
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,6803614604861884478,533354626662522202,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,11178289751563901660,13918650938327891570,262144 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,16264020512188314894,18443770590371722822,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15791217584971751854,10366428499486798007,2097152 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,13128794358660658933,1164698922214947276,2097152 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,1734556160202612034,6214812801011421216,2097152 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,12468926160895667378,5552986995089834676,2097152 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,4995434039451131022,11136308180610381735,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,2604429911913368104,11452845962564291680,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,1641689133037907833,12915948435657760213,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,1641689133037907833,12915948435657760213,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,11011643420096100051,14835446238437113352,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,16788477039287762525,16969504249684690801,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,9257393683718971238,6784202560635105058,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,1075930451168074435,8762535893031417543,524288 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6396,i,8592911499208340610,16473003125765492894,262144 --field-trial-handle=2232,i,8028328421204899672,13291240912862280692,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 eb6a5105ab3770d540a465fc7d21576eb2e9e59e40992f66c0d2f93471b5c7b6
MD5 d5377efb472911888e2a9080ba67a5dc
SHA1 b6c990276da666b7985b1367729c886f2866d781
SHA512 0023b393c5cf52b0633a59113e20c9679faa412e3fb1d64436451dc9da42ed59ca3c581d1806991a76cd364a7be565875f1ac841197b5ea251b757e0c379aca4
TLSH
T11171C7BE0292EDF2E3D13A3280C03A8738F191F8F993BD2D11D34875640AB514A6A5CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5895c3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5895c3.TMP
Size 3KB
SHA256 9dcedfb339bd60aa657a648302e30a88908aafe14497fa96a16f4cb07df92eb4
MD5 a833ae81fafbe9d279e7ced7d86d750f
SHA1 216528bdc5597a08b20c057bfff38f7c6ad5bb62
SHA512 d49a2e7b78e9d3d2e6ee1098357324001257e6cfd26aa3182b1a6a3e2b84fcd632d3d85ad5d76b8859163f8d655a2d7dc805baf2467eee3352535fdc173b05eb
TLSH
T15561C3BE0582EDF6E3E13A3190D03A8738F190E8F823BD5D01E748B5641AB114A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e7a1a2375e9d307c05e858570374c2122feea32f7bdc1ba602180f156efdb730
MD5 cadfde82a6427b5c5109f06d2bfb45f9
SHA1 1bb467f396939e4a52b659405a44f0df9de534fd
SHA512 ff50535e7755b7bbb33a9d32708b17d9a3b3ec4f42ae390cc4afee7dc7d73c19e5ad55cf54a5c0c832ce0e846325312a0cdc6d78d8a40e065dca12fc42648d37
TLSH
T18F61C0B7C2E4CA6ECC1126F1AB24BE1BCD5D0568432C7C1A89D5EF5B63D24B1E20158F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 be8fff70b5f71968f37708bcadb9bd0ffb87b07a1401b737375e2ac6f47a7395
MD5 c1159870e3056f9afc69e4175355f894
SHA1 1f6138e8e37b9aca9b2ddc5027de05957d352f2d
SHA512 5d790de5b2d9e2ace1b403abaf0a64500bebc1179e99bdf04e7e98b046ce337c9dbc9045c9dd81ad24ef67d0254aa307bece3d4113fae070ee00be581643459f
SSDEEP 192:sxZL2RvyM/jK1Ml8MkXW/fysQEwjpAEdp08u/HW6+WN79gX/Y9IM5VseTIgrJ:sxZL2pMXW/fysQTl0fHbS//er9
TLSH
T13152D7126A389977CCDBD20DFA55BB53D6F90572A2941E44A9FCCA0C01E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 35a21c1b8dde85cadaeb71c82841b96f3b49b5f9cb08c28e681368209de75f91
MD5 991822f3b94d83f9af51e54142c8b947
SHA1 c2d6e146d6c7fa9cdefaa53b021fd41a80d339cb
SHA512 999370997dc9bd4b3fc9eb52c6fabbe8ac5a6722457ba210d3ee815f871a13d4349b40c63c7e0f1d7c9fe2e536049d7796dff8411dd9283e3d8873d11c72b910
SSDEEP 192:sxZL2RvyM/jK1Ml8UQ7kXW/fysgEw3pAIdpK8u/HW6+WN79gX/Y9IlUVseTIg5dJ:sxZL2pqQXW/fysgnbKfHbS/herl
TLSH
T17B52D6166A389977CCDBD20DFA45BB53E6F4047292901E44A9FCCA0C01E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 313bafad3173c49b25ceb7e1551e7e4e920dd37a33e08e24c6bcf426d9cb4f23
MD5 bb770bd9732e73a6c6fca86add21ae4c
SHA1 5575f285b93f790abc6631b2879bbc87e898e3e7
SHA512 af91d209ff1df0669dd5d12d56b78acbceb956db2a52281399c9e989de228a8249914c213a56ab7f6955ab9eea638936bd4ae02a85eb26c8c68c5688022faff0
SSDEEP 768:AJcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNnroEg6R:AJcv21wWvu+Z+u1jaeFLeRN0EB
TLSH
T1AFD21B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cc840024c44059ef026170647a3ccd7aa52959e56f02710f0bb9971da17d5a00
MD5 4af0486786068d8a9e384acc77ceebbe
SHA1 aa31aa36d47509bd572b98b3e41fd270f8547a2a
SHA512 ae6e97456a8c512f98cd050913dc1c25f77bf0f89209c5c06b4452e4a0396824136e01459d9d41c68238fdade3161e9b3553af55eb6a44731a451227f4263ec7
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDCygKTyaHo0oVoAoEo+oiomokWoiovoPgoj:mTfHHjsJ9rhhY1ahl3cgLyzLiVhmHuDe
TLSH
T1FD916511313B428238BE684CA2A685664E8275637529F57F7FBA00E20F27E135DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592bb9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592bb9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 3dfc03fbb9cf8e2a9a3e52db1837de80bfec7a1fc8ae795acbf57910b6438802
MD5 7e8c85ad6e618278a2adbbec1f460dc6
SHA1 d239813258cc98ba1572797c0f20b7ee255bc132
SHA512 550fb1e3adadca3b50a456ee7996e96d08e354ffbaa17dc57b43fbd1c87578bbeea22c15cffa5beb5444f85e8068dd2ec032be065c8fa0f806351bd4a2754571
SSDEEP 384:5iF1urQXjZxh6V4zsNz8TUNTUlIle/7WziN/ge+CXOmep3JruHE8qHIqmqnLM5gP:QF1ur0h6Kqwg0CUDvO9p3huHEboJSMc
TLSH
T1AAA26D3759684C7B9FA29A85F50B31179FB811E7CA867AA0E6DC9F0C01DB6DC130BD14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4ac7330553c30574368802b9d6356046cebf8ccf31a0859b47e61eef21e51d61
MD5 bb5e7d5e7275df3d56246ee80ef92624
SHA1 36839308d9754670b61d020fdc0f334cd4a90500
SHA512 bc408a9fbdc227b8377bbf88790f43be533293ad5a043358b572983133504d7ea410200304e93825357f6195376c4332a27123891e827aadcedd8fa23f0f06ea
SSDEEP 192:JONO6v+YLNQmiUyOnZh+CG6Om9oEusglU6:JONO6vz/jZh+CXOme6cU6
TLSH
T16202C935BD281C6B9FF29E45F58737175F98217BE9952F80D9D81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9e27b939a2554a3b889d2f879f14b427290c5c521ddddddd7798d999664e3b5
MD5 45fcb759abb3f875cd600b4b8763a090
SHA1 2ae7731fd5efc215e4217bc91f142f302a31749c
SHA512 75f05bc0a775a68b6869bf54424bf3c90371be8efe3e53d65f7426dba83b5b9b0980f6829a9768e40b3a5305d72a28afafbc00c88e68c263c60ee877aeaa7c6a
SSDEEP 192:wONM6v+YLNQmiUysnAh+CG6Om9opwSJrHmCHHbq7U6:wONM6vzPPAh+CXOmep3JrHHEU6
TLSH
T1B2121A36B8285C7B5EE2A595F48735179EA85177DA8A3FC0D5DC3E0C02EF75C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 293c54583e2f5c486398edf0dabcb0b73ee6b832b9b1d46b26767500cffc9e76
MD5 33b734d70ef6f249f329925af15e156c
SHA1 8fda444091f2f327a89441af5f81642940aafa81
SHA512 f28061121c2e2c44b3a9ec50c79fc7ca3c5cc7665d1318f38742732d66a9221c7582095344a7c009dc422da8ed0b0a5d3b3a95d0c4ccfb7ba0e361990531a013
SSDEEP 384:DurQXjZxh6VVsNhf/7WziNrge+CXOmep3JrPHE8qHIqmqnLM5gsY:Dur0h6/aCmDvO9p3hPHEboJSMc
TLSH
T1D3927B3A69781CB75FA29581F40B35179FB851A78B863EA0D5EC9F0C02DFBAC130B915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d01747f16c693d7952c7c9ee68922fecf4e7a5e533d7163520342425b234bc18
MD5 ac6f9455d13c0d3078db02b6604a69c1
SHA1 3a90ead21d981c40afa7225478804494c2e4c9b1
SHA512 161bd89450bde00c4083822e9a603356449a8d40f08b04dddd03f81c3d0090d66bb1427d96d66e64273b92e717d3914efd474d95c2daae886c8552114c83ca63
SSDEEP 384:burQXjZxh6VVsNhe/7WziN/ge+CXOmep3JrfHE8qHIqmqnLM5gsY:bur0h6/1CUDvO9p3hfHEboJSMc
TLSH
T10C926B3A69781C775FA29581F40B31179FB851A78A863EA0D5EC9F0D02DFAAC230B915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d1d8621-df4d-440b-b03e-790bd2e51967.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6d1d8621-df4d-440b-b03e-790bd2e51967.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 629a459e3f9e854db74bd3bea48425d8dac998d4bfe557719fe443e91ecbf71b
MD5 610807a5e920099e5c0b104809b20d3b
SHA1 81cf37d7d8ee69ba87f7e79bbc160c5fadf8dd53
SHA512 4d8b27a469cefeef2a08f7d3939b5a427d44dc53173096d6e7b5f77da04e102cffee635994ed6d2fff89d23a81610ab9649b83dfb6963086b93a906c908d11fa
TLSH
T1A9410658B6FE1148B3B37E56ABF6A96E447AB9372E06D09D10110E4F4A23B44C871B37
MD5 SHA1 SHA512 TLSH

Submit Download