hxxps://github[.]com/pizzaboxer/bloxstrap?tab=readme-ov-file

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 03:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/pizzaboxer/bloxstrap?tab=readme-ov-file
Sample260730-d3csnack71

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 15 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
44	camo.githubusercontent.com
48	camo.githubusercontent.com
54	raw.githubusercontent.com
55	raw.githubusercontent.com
136	api.gofile.io
50	camo.githubusercontent.com
56	raw.githubusercontent.com
47	camo.githubusercontent.com
53	raw.githubusercontent.com
133	api.gofile.io
173	api.gofile.io
45	camo.githubusercontent.com
51	camo.githubusercontent.com
52	camo.githubusercontent.com
134	api.gofile.io

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3920	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298559104013325"	msedge.exe

Modifies registry class 58 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000578657e71ce3dc016178552a24e3dc0105f745fad31fdd0114000000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616193"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{52B5EE69-D596-442D-A7C5-D391215B0B2F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2548	msedge.exe
2548	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4100	msedge.exe
4100	msedge.exe
4100	msedge.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 4588	2252	msedge.exe	87
PID 2252 wrote to memory of 3920	2252	msedge.exe	89
PID 2252 wrote to memory of 2964	2252	msedge.exe	90
PID 2252 wrote to memory of 2964	2252	msedge.exe	90
PID 2252 wrote to memory of 3748	2252	msedge.exe	92
PID 2252 wrote to memory of 3748	2252	msedge.exe	92
PID 2252 wrote to memory of 3748	2252	msedge.exe	92
PID 2252 wrote to memory of 3448	2252	msedge.exe	94
PID 2252 wrote to memory of 3448	2252	msedge.exe	94
PID 2252 wrote to memory of 3320	2252	msedge.exe	93
PID 2252 wrote to memory of 3448	2252	msedge.exe	94
PID 2252 wrote to memory of 3320	2252	msedge.exe	93
PID 2252 wrote to memory of 3320	2252	msedge.exe	93
PID 2252 wrote to memory of 228	2252	msedge.exe	95
PID 2252 wrote to memory of 3696	2252	msedge.exe	96
PID 2252 wrote to memory of 228	2252	msedge.exe	95
PID 2252 wrote to memory of 228	2252	msedge.exe	95
PID 2252 wrote to memory of 3696	2252	msedge.exe	96
PID 2252 wrote to memory of 3696	2252	msedge.exe	96
PID 2252 wrote to memory of 1688	2252	msedge.exe	99
PID 2252 wrote to memory of 1688	2252	msedge.exe	99
PID 2252 wrote to memory of 2696	2252	msedge.exe	100
PID 2252 wrote to memory of 2696	2252	msedge.exe	100
PID 2252 wrote to memory of 3924	2252	msedge.exe	101
PID 2252 wrote to memory of 3924	2252	msedge.exe	101
PID 2252 wrote to memory of 3924	2252	msedge.exe	101
PID 2252 wrote to memory of 560	2252	msedge.exe	102
PID 2252 wrote to memory of 560	2252	msedge.exe	102
PID 2252 wrote to memory of 4036	2252	msedge.exe	104
PID 2252 wrote to memory of 3288	2252	msedge.exe	105
PID 2252 wrote to memory of 3288	2252	msedge.exe	105
PID 2252 wrote to memory of 3288	2252	msedge.exe	105
PID 2252 wrote to memory of 4692	2252	msedge.exe	106
PID 2252 wrote to memory of 4692	2252	msedge.exe	106
PID 2252 wrote to memory of 4692	2252	msedge.exe	106
PID 2252 wrote to memory of 4628	2252	msedge.exe	107
PID 2252 wrote to memory of 3640	2252	msedge.exe	108
PID 2252 wrote to memory of 4628	2252	msedge.exe	107
PID 2252 wrote to memory of 3640	2252	msedge.exe	108
PID 2252 wrote to memory of 3640	2252	msedge.exe	108
PID 2252 wrote to memory of 2192	2252	msedge.exe	109
PID 2252 wrote to memory of 4100	2252	msedge.exe	110
PID 2252 wrote to memory of 1612	2252	msedge.exe	115
PID 2252 wrote to memory of 4532	2252	msedge.exe	116
PID 2252 wrote to memory of 780	2252	msedge.exe	117
PID 2252 wrote to memory of 4296	2252	msedge.exe	118
PID 2252 wrote to memory of 4296	2252	msedge.exe	118
PID 2252 wrote to memory of 4296	2252	msedge.exe	118
PID 2252 wrote to memory of 4976	2252	msedge.exe	126
PID 2252 wrote to memory of 4976	2252	msedge.exe	126
PID 2252 wrote to memory of 2548	2252	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/pizzaboxer/bloxstrap?tab=readme-ov-file
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffedc9bc188,0x7ffedc9bc194,0x7ffedc9bc1a0
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,10996629243636049650,13571768311276188398,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,10376179291861252389,6641902668206759970,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,6644885369300952523,13744025943452295433,262144 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,9788015583551730437,2697251885784702918,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,2169479701430489371,14525241484690071259,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,13068705001410635645,17118608559081866467,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,10969167684315927094,9568774790288043736,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,1439744754545694954,4573394875273636404,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10617151890980084800,8393994383011407719,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5588,i,17572861177888097837,16529277078582027886,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3367877723504658898,14569095215992300128,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,2302743563125475802,17871382794878603671,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,2302743563125475802,17871382794878603671,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6412,i,4649065674113606797,11227954400732110292,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6524,i,14224923541979591175,12826489686584563581,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,5899396566092188511,9201100592694311886,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5676,i,5187284095715839662,17353004727237467801,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,816543533948776956,5675935017488450578,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,2750029712202179691,18273645024160373670,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,1136171980397864522,13357213469375901633,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,16950238736845312842,1195068016761212173,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,205947698948078688,9645068209428319857,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4240,i,5113253043314551068,7309029762031698826,2097152 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7224,i,2816240584690486647,10753486452464049651,524288 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,16443578704260490808,1769172063966047132,262144 --field-trial-handle=1988,i,16583648841815224942,9065267740117729073,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

4a2aab6e-f0df-484c-8956-c93f3084a825.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a2aab6e-f0df-484c-8956-c93f3084a825.tmp
Size 17KB
SHA256 feddeeb0a8e6a12e59bf07338d43f402a94ffd4011e061078907430c0eff188c
MD5 6a96a0e2e1b8e5e65c5e0ab681ea0808
SHA1 e5a7f31b64653e13503f81164e27d1abb24500dc
SHA512 64559669d0761ff45a24de799484e5e663b8506df10a2ba5055944d285d4179df9b45b4bf20abb6e6de5d4367e7592757bd2cf067abc278c0b4064d32c760cc5
SSDEEP 192:sxZ/RryM/jK1Ml8M9f/faszOvwT9OLUHdp9ot8lwHW6+WN77FyRtCq8r/Y9I10Z0:sxZ/h1f/faszOp4oHbQmt/ZF1ws
TLSH
T14582E94666248977CCDBD619FE21BF53DAF80462DA915E4C9AFCC90C04E66FD231382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 405KB
SHA256 1b60a6c04cc80fa726e3c5026255272c3b75303cc1666700305b3f9acf8b2226
MD5 e6b338d0fcf0d823a1874c7606dc62dc
SHA1 501f5d87f43ac13f1545286e3fde99eb15c5c5a7
SHA512 5cb49ce345babefaa0b4070245244a8cf2611000c2fd124532f43c764022177192f62a14090d3b5945544449788612326e215446cbe5f1830c4309720cedeec9
SSDEEP 12288:Ph3qrs26+46/k68I6l0X7+uHw8AVTQPUg2tQVy:PhqrL6+vkzI6yIVkY
TLSH
T16894237C930EA8852F3F559A617D2C8A1884F8F5CFD95E81BDE3E7E150A0D090B5B328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 67KB
SHA256 5e9ddd849c267cf191b2db00f575728d4b086f3b4fe31417a455bf0f4816514b
MD5 088ec17d4fa0e1202159915b03be22a7
SHA1 382daed964422de3fd5b9868d05253fd3ed4ffad
SHA512 c09cec454c2ed9330ae55066e690a1a017b3e401875a01df398872a7077ef7dd76b81cb9a5bd8d65e49b6170013f977a348e8b15467a9c96e1dda3dd949a030d
SSDEEP 1536:pAtMV9QuLlHIH7W6u5giUEJ/hnyydpMPoIShQg2WnFIZ3:pAmV9zZr6u5dJ/oydpMPonB2WSZ3
TLSH
T1666302B5D4F9178620352C8EA4F6907428EBA7F47950E9F050C4DF488DD8A7BAC08BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 78KB
SHA256 372140d055fe4434b65daf2fa2e6a903918f7ebd5c79b058e8272878b397b35f
MD5 6c95f9c283fb402cb287379d5efd90cb
SHA1 e3f129bb595d45e732f14bd031607984cbac31f2
SHA512 15613cea5a463ca70483a0bb1c9a1c7c6c09f2a35c3a96d34ed14f35457eda904b3643f84bf9547b5877a0a852f292c7e91a5079737cbb223f6a91019de13dfc
SSDEEP 1536:Cyop/ADwXZR9NSqrdcgTyt9QaLKEo9mOBghhbj+p84vpbQOJdF:4p/DZRTSgdcgTy3QaLKEo9dK/W86p/F
TLSH
T16E7302F77B364E112AFDFB653448C269D3C0BA859B39194E62C4D1F240AFD36ACA1874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 27KB
SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
MD5 aa6a30350189be311d6f87b7d145d85b
SHA1 79d0105a90db8fe73876d31dc4f54bb9a194002a
SHA512 3563cdd2399d4ffe7f76a2b252800e2b767f7fc776fe1faf1bd385cc41ff9305c7a5367a2d28d6bcb46b9202461c23b86ad6f1f3cec2cf51ffbd181000651037
SSDEEP 768:Y+8X/NT0ZezFy6uLGsyvi7ssXAS39YGiE1TJnhC:Y/ZexL0o5X2k1Tds
TLSH
T1ACD2F104AD3D7AA06468E3D332713166FDA696A10B7702D2C615E625B3983F42BCBCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 16KB
SHA256 5dd1c64a38698ff8aeff573794977443121235af418dd9d2c79a5314189da2aa
MD5 0831783dce7c9f7ae3d19fd7ccad5d46
SHA1 c7f7075a6292462d90154ac8caf8478be15c0f97
SHA512 59f84adfb930ab067495343b59be6767569ffc0279f05465c0a622f6e59212175ca1195e64b7c29a88d1a40bd0c56fd735c7ceec28ed9c897fdeaa11250a8820
SSDEEP 384:velXJoyRu2nLAIAboKufdRAq1+91p2ky36j3NYmG:mKyRf8xbbu1RzMzFy36hYj
TLSH
T14172D0D6272DAA9772F5F44D20AF2A9B12805733DB98843350771A366BC64FCC9607E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 60KB
SHA256 09942f492f93e5748a18748a9d5703c1d9fb2371e88bc2a01fa7779650dc40dc
MD5 bdb48354eacf1843569fdf0898e71667
SHA1 c0090b0822e5bf07180d4366700316f8de682397
SHA512 49eef2ef2dbce4b0af131555846b2f3e5180e25f1b4fd2f8cfea9d103811e6b954d1209b70ce85fcbf88eabb48399e6240a1db02544d056ae55a22b10a5f0bd4
SSDEEP 1536:l6QKCA9YwCpxAMmNB56jI+BCDMv7FoRRQOYLG/:l6QcYjaFN+8uCIDFw2K/
TLSH
T104530213EE0C472D26E597594723CF026AFD0456AF0AF40D6F8BDEF0A2686C5A35E834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 d606489da62a68e603188b3f6bb48be3f19de2da5c10bc652583126aaab6c252
MD5 4cca37f5860d817672381a06fdb997a1
SHA1 85802c12631d443d53eb8e89b1d87a68bf0621c5
SHA512 a6417e9565b1b20a5c07fada4136d77fd4b9537a47fcd5fd81b8bfef244f9f78c3ee0407e6496dcf68f900ce8e2080c7f94562b90533cba068b9518157c469f4
SSDEEP 192:rwut2UU8WzaX/vwiKq8s7aWG48zrew7OR0ys:rw0iSnwiJXdG5nGJs
TLSH
T18D0255776F9D63A4CF144ABA73DAF8693275A1DCF2EF9FF202026C78940E7880512645
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596894.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596894.TMP
Size 2KB
SHA256 7dd2fed470557f8562a1e53455f0e65d558970a5e2ffed2612c3560b8eb3aa43
MD5 58c65c198f02e1b879625c7c8b736042
SHA1 5e5496e0a0eb511e6ec57dee70bf7ddf5ff7068f
SHA512 0144d37c8ccb41db1716b816f5c8344aeca270219f9fd1927ccb8add73e5f353c51e2c6451facdef56e4e47973519901bd7b076a70ca041bca56199cc1237c78
TLSH
T1E151B3384712345CD75900F1B1D30CA6B1BAB6C1F9E7DFFA0B63A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 b01f4f9d0eaa856ce05a6fee9bd784d25c1dfaebee8d74286eb50459d943e701
MD5 30c3235836d0998080e48324cc5b9e77
SHA1 2b623471a3e616adc2fc17970ae382306005dd3b
SHA512 3da2c4be01a0d1029d6ab2ce3eed8ba78bc434b44eaa53db0ba544a68b50879969c3a95d6d71544e60c35d92e2d12f2909e19b5c8e39e59e8c77ee311ae016c3
SSDEEP 96:DEOhPmPk8XMzBm9mrOGjmrmnimDmt0SmO+mg5GO4twg/L/ttdpP+yXQ:DP9mPk8XM1m9mrOGjmrmimDmt0Smzmgx
TLSH
T1FDC18BF783F5862DDA1256F0AA18AE1BCE1C0515836C396985E46F0BA3F3871E141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 8734326307a6ced5f591d93e563a07bc1aa4adc67e4351b2eabe6d8ea47a2177
MD5 e7c7caacd59a2f39cb72c5d95bfea547
SHA1 7e90abe458eab9d83d7be5ef7c753eb6d9ccedc0
SHA512 c078556225fcbada9b1fcc0bff86dcb994e4258b82914d7a7efa28956c5429296a0af766e2863ab05f150657561f4cd57ec670a5ee4beb0b407a33afea8b1fcc
SSDEEP 192:sxZ/RryMojK1Ml8UQk9f/faszzvuRN9OL4dpvot8lwHW6+WN77FyRTPAH8r/Y9Ik:sxZ/sqCf/faszz8U4eHbQpAU/w71ws
TLSH
T19C82F84666248977CCDBD619FD21BF53D6F80462DA905E4CAAFCCA0C04E6AFD231781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 b21150a8f63594e79fed63eaae3ecc8126c47eac3a61c9b4df9ec3a6513a2e34
MD5 a929a5f593eb80b7fb07b9a042526122
SHA1 96a9cb559f955c297a9cdf0490b376a9ad494c98
SHA512 f009c5103831f890a4a85bfd85b2fdefc28bccb7f87b4de0b4d207e76307b57fc35701b7fcef1c6a25d853af7143cde9e7e78a7028cdf598e73ce8768304045e
SSDEEP 192:sxZ/RryM/jK1Ml8Mkf/fasCO4wT9OLUHdp9ot8lwHW6+WN77FyRtCq8r/Y9I10Zo:sxZ/hMf/fasCO44oHbQmt/Z/1ws
TLSH
T14482E84666248977CCCBD609FD21BF53DAF80462DA905E4C9AFCC90C04E66FD231382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 f63f2d7bad8963368bd9843f1ab3fd96df02467f119544529c7665102b7035d9
MD5 e4133df558e271f58d57f433f62e9cd6
SHA1 0aa1d0716ef0b3fc6bf98a647444927812c8a701
SHA512 da81798898d782017bb381e70e251fe7fed12751477d2d62ae4ee9253fd60fe557a82ca692eef2f722dc3ea952f198a477c70279e3440045985523084be40ba6
SSDEEP 192:sxZ/RryMojK1Ml8M9f/faszzvuRN9OL4dpvot8lwHW6+WN77FyRTPAH8r/Y9Ikfx:sxZ/s1f/faszz8U4eHbQpAU/w71ws
TLSH
T11882E74666248977CCDBD619FD21BF53DAF80462DA505E4C9AFCCA0C04E6AFD231781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e82f27c9-ede0-4460-8499-869f1aac6d13\index-dir\the-real-index
Size 2KB
SHA256 f359aacb5e23c923d25c598ecf8e587ae843cdfdbc780573317ef801da1d6e3d
MD5 951c7e896996c0b30ef65c14df30c3d1
SHA1 9b5cadf7a7a6be302736a50a8bcde5c2c462a0d6
SHA512 ac3964a10a07a36b96c31a44a21c7ccf05f97ba2dd3d23cb9453dbd7723913cd671ce4f8e1e6b8edb89e3dee41b0426cf9b5d55a2024501816edbc499136dccf
TLSH
T1F951D84E4D4A7BA6CD9D14B328FB0882373134FF4A888B07958CA9707CC32252D6AA18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e82f27c9-ede0-4460-8499-869f1aac6d13\index-dir\the-real-index
Size 552B
SHA256 66214356b00297a8b9f9d541d0d0f253111c31003bc89e7cffae0e3f8b27b823
MD5 944e6cf05d9a9ede1c323a91f95c3e45
SHA1 43282e446cce3f995e24d4859485e03ad01211b3
SHA512 37edf31e3989dafc0ffd54e04874f125e39ef83f31aaf1c821454b768e35649194907d31f9423c2d5a35cf0b02144a9a91f8ae6d67be848092185fcdf05a1e4f
TLSH
T1B4F0AB908F91582AED940A7220F510F073B0CEFC7322C59A252C663A2C6230850271C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bcd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e82f27c9-ede0-4460-8499-869f1aac6d13\index-dir\the-real-index~RFe58bcd3.TMP
Size 552B
SHA256 f9138f72a0f10a79cbbcd91e0e37b92c2bff22de6a08057862eb4285b28e9be5
MD5 5dffa4190f36482309ec9a4ac997d351
SHA1 c0db6cf670fd2a07ea0a9a3fa5a2151f9c0e255c
SHA512 aacc9fcf1dbe4060895686ff2c4c4ecfaa746098df359dd1bcdc14819bcdd8aa1b1414d30db42e78aff63dc524786e8aff48167f713b08a714fc5fc31b5e7274
TLSH
T185F0F886C7928413EC600AB224F504B5B2B0CD107232A883202AA82F2C723C8A9230CC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ebfa4555ff131338930999d92d081a2990bb56f515c5752f6e2dc4ffdf8b05f0
MD5 726cb89b17f60f3a59494fb73b15d1eb
SHA1 28bb4d0303287067d4fa42986a3ae7e20cbf6dcc
SHA512 e80c09c458d0da6ecb28ad4570161d3e4adbea7f8d6729ea25400ae4dd1d99813c31f62353b7ad41bbd9329e9e86245886a9232a49099d10ee7d866f7d42a3a0
TLSH
T14AE0C0BA2DF72430FD6FD7D3147144B4009478B9C9C5BC8F683AA9C750B23552846C35
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 25a1954025d44a54077a6d4ffd02967e270d4305f84c60bcd6cb253ba39e2fdf
MD5 e56548ae24a87556e5878ad4f7c5d8bf
SHA1 ee866da871359a498c183f05cfae9a95cbd11abc
SHA512 ffcbb9cd6c1b7b0216839ab652c17a1feced3dfd6ccda888b29c9dced96cef09ae56162c6060cdce12708933e1a9d3f85a65ec921f797eadff775c19b9d881e7
TLSH
T1D7A002A1DA5E9185CE8A467A1BA651487BD08CB9410A17018ADCE0AC8DA528052C5501
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591572.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591572.TMP
Size 48B
SHA256 9ea25f6714dc81096a17b33fecfd9e118daebb15b7bd7f9668b0e5370bf9cfda
MD5 f85b75bfb1779c2a815cb84f4f50eea5
SHA1 4a080261474fae40c3f179fee960d9d72e434bb9
SHA512 46e4a02829d3f46026462e83f050c48a3739af270e9116c67c63696126d0be72f80f69cf4083cced7dd298913530c18793982d80da93890a9dec0122d2b2f282
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5964e3e2ca5100bd2bd10ad03a27d719b0683ca4d098595f92acc606291230d0
MD5 3d7d443d963c14ffb12e8f104e0a8ee0
SHA1 6107c63b46dd5044e5a53514d63db7f6c812ceff
SHA512 fc177f9ac879ef4a45fe58b5fcdaaf72749683b52aacbe78b30380553a4f49ae65dd2529422cbb5083d53bdfa19e9c59063ecf21e483b84c20c83fcb6d9d2f12
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+HyKokuK2EKnq2Bqv7JHH9szYG:mThJ3n
TLSH
T143914411313A0292387E7858A39687375E8236A73918A97F7BBC05610E37E117DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5494e8f-018b-4392-839c-e146e3ecfb05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5494e8f-018b-4392-839c-e146e3ecfb05.tmp
Size 30KB
SHA256 4351a39bb0423d50cd106db18fc719bff2d0e9075d738d05b9e6aebdf7e6ddc8
MD5 4e562a1272f10b6bb6399844de71332f
SHA1 69d123b01af18b1fb9c3d265cb57fe025efe4b8b
SHA512 86c43ffef55eee6ff06d2d3199ee639f4beb7947d5e50b56cf99ecaf2d7417f0f7678660b8e02a65b48bf36871dd16fc832ba5a1a0b3625c796bf0f65460fe1f
SSDEEP 768:p+cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNyro0g6o:p+cv21wWvu+Z+u1jaeFLeRNp0Y
TLSH
T1A7D20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59302e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59302e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 14636b9bc031f43cf6d6f89c0991fcfccdcb05e92c4a539faca18f044c1e0d14
MD5 150d748d9b8cdbb378f71d86e5118035
SHA1 27410d9557971367c8147c46878bc456f40fdcd8
SHA512 6002acc4fd5aa9a070c3b738f22f3146c7ca76224bf7890dc908bbbc30d56e46a6fe0b39f0be1a59d30941bb68e3a0c5a43f39e42d8019441eac7cb629ca90f2
SSDEEP 192:uWLsNpsTudg+YLekkjmiU13PLSP8Be+CGVgOqEl480JizqukU8:xsNpsTVzi2hSP2e+CnOqEl480U8
TLSH
T1DF322936A9389C7A5EE2A680F44736139EF85167DA857FC0D5DC2F0C01DF39C234A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e9db54455e842d3f5c686c523b09ccbf63b6b92505686e568f79f5812e0d366f
MD5 53c2d28fc5a517ec06c269603a7f3b3e
SHA1 23453eb56df53aa56feba8a49962d9d6c2742a3f
SHA512 9fb3984107a781512878ed9affcfba163a0d30b5697f2eafdac82dd0f1d8f2e8caf2f042b18e0937cf48f55594ce8030dc3af710c29544adcbd31907d835fc47
SSDEEP 384:TZcI8sNp/TVzi1hSP2e+CnOqEl4o0OObjI9G6w77W:L8+u4B/OHln029MC
TLSH
T1FA929D32AC385C76AEE7A541F48736175EF89077D7C86F84A0DCAF0D06DB6AC1306829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 539240a43f199975e32c0ebfada6260d686d75bf950869aeceeb0d2f41cd8d09
MD5 ac0217627f5168b62e2a4538722d7f0a
SHA1 5cafcc585be9cd60a2f88a328db685920067ec78
SHA512 44ae9e742f7d3f67048353d5b6f9f395a5221d069ead9ad52ea919865e2aa4f9d3886d31253d086ca4d0d0932b35bcedcc83f727ae09309e2551e9728e0a236a
SSDEEP 384:giFPZcIvOsNL8TUNTUlIlCTVzi1xSP2e+CnOqEl4r0OObjI9G6w77W:7FHW+wgwa4B/OHlC029MC
TLSH
T101D2E5F258E74876D9AE5B43B77E2D124EBCD067F6846A80B3C85A0CCD961BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 231a2993f63be15b255d1eb8658b9ec238e8b19d0f0e668cb8c15ff6790ae2c7
MD5 37801cdd9b484bad78a40302d834c03a
SHA1 32fc8dca9b814b7b1435563c0677cb469487a6d6
SHA512 f4e25a39b33d98814875613e3199d062a632427a6b7d735bb56b64bcc08c53da29f9553c53bfdd99de9dc32aeaaeadd65e412f5a6bd53dd60df3caa1486f9cf3
SSDEEP 192:JONt6v+YLNQmiUyVWZh+CGVgOq8usZT7U6:JONt6vz/dZh+CnOqyZPU6
TLSH
T1B102D835AD782C7B9FE2AE45F48737176FA8217BE9912F90D9D82E1C01D774C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 10a1b7b41a59f8ce06070948355b75d47ac9a30d24f0fe32262d73d300ab5b76
MD5 5fa4e490c88defb79cda5d4cabeb78e2
SHA1 8319639a72d8f14d24ff154a375c55a6b255d080
SHA512 641754b433cb083d46870b347fb688c44e52ae7b479c3180d0e8e048a33a02697dd2dde7ec41e07fb7dcfd053d0e1c696743b7f25b6f3f7d06aefa4d80edd379
SSDEEP 384:LZcI8sNpCTVzi1wSP2e+CnOqEl4o0OObjI9G6w77W:T8r74B/OHln029MC
TLSH
T1D292AE32AC385C769EE7A541F48736175EF8907BD7C86F84A0DCAF0D06DB69C1306829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4bf00a28088981bd91d45661eda3831141899a16121c2a6e70463309f9a4f0bb
MD5 e222b92ac58aa00728554d017f4f2a85
SHA1 e53e18b20c19b1cb3305e621d143fc7d8833afe2
SHA512 cc317acba123e57b1ca6df45bf190f54ad9aacd24db9a1885acaee38c2a92e748569a42f19a3a55824654ec2891a0d629568861110d156b74b50d1c648a93bc1
SSDEEP 192:SONc6v+YLAQmiUyYWFh+CGVgOqEl4rCHzqukU6:SONc6vzcwFh+CnOqEl440U6
TLSH
T11A123C36B9785C6B5EE25980F48736135EE85227EA857FC0D5DC3F0C02DF69C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 69bf9a4ccf0ef5db1f1ee8704d1f40fdc1d1003d3edc9207a1e90db7b187fb71
MD5 7a29ae22cfda73112eb8c4a6e718f304
SHA1 ebe21d6fab86975d25e9b21f301f7370b0fe76db
SHA512 19e55ff7dfbadc30fa5e0cabfa12b0fd8c823db87e6d260b6bc12781992d2b9404de12428e362bdbd89a6921b3733e360ea876771807cc536d51d4d9f60f49a7
TLSH
T1D2E00112921400FEC0380330008357382AE2816202B702488A1106642A633021730FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8d651ad7392a536400a989257ec086ab533e7b022136d8ae553df3eb3aca96fe
MD5 39f4f61b3c5667ab0c535c76d7db3962
SHA1 cfc04905d83363bee6ef68164194db61bebcac6c
SHA512 3cb04e2cb7dfb39f005a29bd5f8646020f23a21e0f7c363c72a54649242c49037e8e073328027fe8a169b08c8ba8f2fa9c258553d8715ab3fbb13166f140d60b
TLSH
T19CE00111D31400FFC438033100C357382AF2C16202F7038A9A1106642E773022B30FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe588ad6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe588ad6.TMP
Size 392B
SHA256 20db5d11791b657293554e619018246067f02d7e2a3ebea62ef8a076f45cd949
MD5 903ef6412829838f4251ed4641c76f3a
SHA1 d14216ae3ac2e329009964b9bb858c6f94d641f2
SHA512 73da86783ff17b6cb9a45b49fae4ef7a2059b884faa355b1c48edab88b54f252b4cece84ee195421e8e45972817303dbcb881f5c649a33c3dd471fff8739d6d2
TLSH
T1FBE00213D21400FEC03803300083533816D2815102B70248890106603A633020730FC1
MD5 SHA1 SHA512 TLSH

Submit Download

0f1eced9-d4fd-44b6-a005-007de2d55b1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f1eced9-d4fd-44b6-a005-007de2d55b1a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f4981589cc74cf2d4c7b75a78be9ecb7444d29d030f7786722cc1e4b7b45cd3e
MD5 69c782380c517381c5be6bc2fac087ed
SHA1 e06da23f533624334201e1f266d5ffa98581dbfd
SHA512 2c86e694591f62e1dde049aaacd1e2d36a94a8f1050682a3ec9fb4022ac3ed024c790b085f2872264c58c267caa41bf39ad5eca673d0ec28b7d57b36d8133bd5
TLSH
T16741095CA6ED1148B3B77E5AABF6A46D447EB8372F07D46D10110D4F0A22B45C9B1733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Bloxstrap-v2.11.3.exe.crdownload

Path C:\Users\Admin\Downloads\Bloxstrap-v2.11.3.exe.crdownload
Size 12.0MB
SHA256 4d423ad46d0bf43cd22c9c1b5d25167edc15e784a57e94f889f1eefb5ce238a0
MD5 3240bc150c493952fc0c727f47b96f5b
SHA1 bf3d5f6baca61e27b61d7365bc58df4e8f2f967c
SHA512 61c378817dc3bcdcc5f4c95414f91ec4621e4ec7841de7f6cbaae13b1d653b3fb69b503773c3cd703e886bfd20f4f1369cf9ecef0d405e3894ec513784d147a2
SSDEEP 98304:UYJOvTscod5DkasbMZszos0D3FuOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTl:UYJQscgsbMZfs/ObAbN0
TLSH
T11AC67C9533FC2A35E3B74B35A970721A05767C2EA901D78F5B85BA1D2972280CDE0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download