hxxp://player[.]pelisserieshoy[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://player.pelisserieshoy.com
Sample261014-sr8hhsty5l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3672	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{6D19EACD-8C25-40A1-8870-835D85DC48D0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 5540	4816	msedge.exe	90
PID 4816 wrote to memory of 700	4816	msedge.exe	92
PID 4816 wrote to memory of 3672	4816	msedge.exe	93
PID 4816 wrote to memory of 700	4816	msedge.exe	92
PID 4816 wrote to memory of 700	4816	msedge.exe	92
PID 4816 wrote to memory of 1996	4816	msedge.exe	94
PID 4816 wrote to memory of 1996	4816	msedge.exe	94
PID 4816 wrote to memory of 5804	4816	msedge.exe	96
PID 4816 wrote to memory of 5804	4816	msedge.exe	96
PID 4816 wrote to memory of 3692	4816	msedge.exe	97
PID 4816 wrote to memory of 5804	4816	msedge.exe	96
PID 4816 wrote to memory of 3692	4816	msedge.exe	97
PID 4816 wrote to memory of 3692	4816	msedge.exe	97
PID 4816 wrote to memory of 916	4816	msedge.exe	98
PID 4816 wrote to memory of 916	4816	msedge.exe	98
PID 4816 wrote to memory of 916	4816	msedge.exe	98
PID 4816 wrote to memory of 5364	4816	msedge.exe	99
PID 4816 wrote to memory of 5364	4816	msedge.exe	99
PID 4816 wrote to memory of 5364	4816	msedge.exe	99
PID 4816 wrote to memory of 5692	4816	msedge.exe	101
PID 4816 wrote to memory of 5692	4816	msedge.exe	101
PID 4816 wrote to memory of 5692	4816	msedge.exe	101
PID 4816 wrote to memory of 3716	4816	msedge.exe	102
PID 4816 wrote to memory of 3716	4816	msedge.exe	102
PID 4816 wrote to memory of 5840	4816	msedge.exe	103
PID 4816 wrote to memory of 5840	4816	msedge.exe	103
PID 4816 wrote to memory of 5152	4816	msedge.exe	105
PID 4816 wrote to memory of 2260	4816	msedge.exe	108
PID 4816 wrote to memory of 2260	4816	msedge.exe	108
PID 4816 wrote to memory of 5396	4816	msedge.exe	109
PID 4816 wrote to memory of 5396	4816	msedge.exe	109
PID 4816 wrote to memory of 5396	4816	msedge.exe	109
PID 4816 wrote to memory of 5952	4816	msedge.exe	110
PID 4816 wrote to memory of 5952	4816	msedge.exe	110
PID 4816 wrote to memory of 5952	4816	msedge.exe	110
PID 4816 wrote to memory of 2676	4816	msedge.exe	112
PID 4816 wrote to memory of 4456	4816	msedge.exe	113
PID 4816 wrote to memory of 2660	4816	msedge.exe	114
PID 4816 wrote to memory of 1228	4816	msedge.exe	115
PID 4816 wrote to memory of 1228	4816	msedge.exe	115
PID 4816 wrote to memory of 1228	4816	msedge.exe	115
PID 4816 wrote to memory of 5172	4816	msedge.exe	116
PID 4816 wrote to memory of 5172	4816	msedge.exe	116
PID 4816 wrote to memory of 5172	4816	msedge.exe	116
PID 4816 wrote to memory of 2724	4816	msedge.exe	117
PID 4816 wrote to memory of 2724	4816	msedge.exe	117
PID 4816 wrote to memory of 1944	4816	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://player.pelisserieshoy.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x22c,0x7ffba5bcc188,0x7ffba5bcc194,0x7ffba5bcc1a0
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,1728195101037215358,12173918826533441490,262144 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,6209795080806346054,5427057224918723055,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,14167879280590092110,9841620146290520213,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:13
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,13777443228590615611,18420041043295528138,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,10758868168945997206,10436264983420860458,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,8863598282816647098,4030406812853116875,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,6888005757566408244,10129637620690637968,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5424,i,16399295790013623340,6184506758412038380,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,6935856340437942895,10002831267743055321,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,13058004583872380119,4755843944119653125,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,6715409305562837517,6378234108267453356,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,6715409305562837517,6378234108267453356,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,1862665038251907486,10207873093299815985,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6288,i,15259872943410821315,8474617472021864087,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6768,i,7743565993395716362,3139082096143354961,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,4457469820691448387,16351344346762317364,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:14
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,10198170063956939652,4190617196322510642,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:14
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6728,i,2689832157381734097,10176206511182231648,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:14
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7004,i,478361205105260942,4123681974015965538,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5604,i,9777118568417462949,14680463792636679245,2097152 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,2547090852683822604,13539048696282493533,524288 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=828,i,12806696929187455076,7427667916815057983,262144 --field-trial-handle=2592,i,10525585161671596606,9651685058015892695,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10c86806-ae69-474d-b2b7-3c865b62402d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10c86806-ae69-474d-b2b7-3c865b62402d.tmp
Size 38KB
SHA256 d4b5582abb92864812fa73aa754d93d39b97f9a21821217229a1bd2947041465
MD5 0d75b22c5b7373dcaa4653e63d838cb1
SHA1 31c5e0b7de714b377d91c0486db575fa2587e192
SHA512 e42ab1b2677e355081d14ee81633a8fe62141aa4f85582ae3bb20c7468d2a3ad0c0013b8a1c7b53b8766ada1d0ae19e6550663ba47703c2b93a83cd4567d9144
SSDEEP 768:B/UxvxjgC+U3wkKnJ5t6awxDc9bsMSJz/FnGWSHXPyK/:UZj3+U36ADVQbs7JT3Sb/
TLSH
T1BD03C036EC5058A3CDE767803A8BB647FFF44593D9C569A859DE6E0C06CB3AC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6360d4f1-5dc3-4f99-a4a6-08bb0139de51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6360d4f1-5dc3-4f99-a4a6-08bb0139de51.tmp
Size 34KB
SHA256 c6ed4667aacc1eada273145260cffb0b48e7d39c8bf0fa6a3eb0aa306fb6b9ad
MD5 e35e72c0aed2ef13e45d55d57fc6a0a9
SHA1 b4ba209a9fbfb6f98ee72f910b7635924cf29fc9
SHA512 cd4f8b64275e72da37ccf9638c31ba55effaf2080e52c8d4a7bd04470381813607dfd784cb6bc649e5bc38fa7542dfa61ae69e440dc8a6173a6f6559fe5d27a5
SSDEEP 768:KI3tqKnJ5t6aJxDc9bsMSJz/Fn/WykJoCfLk:KI3xAQVQbs7JT0yQH4
TLSH
T144F2BFB1EC905DA3CED29780B68B7547BFF05653D9C91E8496CA6E1C02C73DD134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94d74d2f-df18-4b37-9b25-a1df43ed86dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94d74d2f-df18-4b37-9b25-a1df43ed86dd.tmp
Size 34KB
SHA256 0ad9b3e4c00af19ea8ac2196065315cdeb10170ff71de878193cb21ed0cf5bd0
MD5 56e7373e5581a0b919468a834d16a650
SHA1 c3e131c45d6b024f4da15032a55009502dacf6bd
SHA512 af93f5c92f8d175a390fb8f9be88974ab9b20cc3c49bd7bf651f13762e06608aa8ad64d3a96090f336b9b1811c96372f21da99bd910e317d45c4f8983ec1f8e1
SSDEEP 768:PI3mqKnJ5t6aJxDc9bsMSJz/Fn/WykJoCfLk:PI3SAQVQbs7JT0yQH4
TLSH
T177F2BFB1EC905DA3CED29780B6477547BFF05653DAC91E8495CA6A1C02C73DD134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

10b00544-c856-415e-be7b-92471c33079a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10b00544-c856-415e-be7b-92471c33079a.tmp
Size 15KB
SHA256 a735a9b411b0383f233837354b4a41b999d8b0b92177e89396ada61a02cde06c
MD5 fb94c37e05ff6c7f4fef035b1318002d
SHA1 8e52bce00d37ba0173098c9add80b3d2ee085e8b
SHA512 5b87929d1ee8e9e32a40c2432e5ee442e5f7e9835a5fd440c6ccc287562e1f2a8a425901c7fc41eef255f175c2e8b5df356b3c0e872aae910e85634be2fb29e2
SSDEEP 192:sxRpRUHcBzi/f7s80y72lNYbMA8pKPVxl/g6+WNYDC0bW+VdYt40E8GA6IgDH/Jz:sxRpgmzi/f7sI6ab+s/5KBdsajjLx
TLSH
T1B862E656A924DA77DCC6D219BB35BF12D2F91133AC952E4CAAFCC51C00DA2ED220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32e1a620-5165-4417-a34e-e7c4dfbb3740.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32e1a620-5165-4417-a34e-e7c4dfbb3740.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f0643e5-be8f-490d-af2b-2a44c3e2f3af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f0643e5-be8f-490d-af2b-2a44c3e2f3af.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

95797d9c-dae6-4374-a50f-02767cb7472f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95797d9c-dae6-4374-a50f-02767cb7472f.tmp
Size 23KB
SHA256 39109e9e548fe781da57430937a6cb13776b31b1af8c29eef261a24bb8d786a3
MD5 5c72a1742ae3827affde569ffe11bc32
SHA1 9f6a91195e6463b7633c116356f38782f42507ca
SHA512 2f6ff9a08defd7a638ba2e8d11aaaff4f5e185c0709cac6c6c6b2f542a129f4331766c4306ce7cb33c4aa63b0ef1bdf10394f8d431a31bb460a73b9a9c42a987
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhSromLV:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0Vv
TLSH
T1A6B2DA3B644CCB7E9FC00A9DAD196E976D9802C796588D4047FE984C03C77EB912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 387KB
SHA256 0eef41bf158c7baf780720ba8d82e079f678e392472c0117da01191b3484692c
MD5 a11e9fe27deffcc5057c00f8a9bd0b79
SHA1 8fba3f8062755385163439af2efe11e2cb6ffe3d
SHA512 d62ea09e430722a6b9a4e609e3136072ca7d4df51680de31709a7759128fc072fefd67017d7d6bbf9501055f19e299e5cf337d127c180ffd03c3885c0dde3fcd
SSDEEP 12288:2fNSMk8g2oQHFZmblfAoPGEque+1xCNa+Zs3:scMi2om6phPGE3ef4++3
TLSH
T1ED8423054B576EB87A7874A04AF518FB4AA9FD836F5C0D737F8F5B2D3922268C893500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 26KB
SHA256 2d15ea6ff5b1f8407a082d6e6ac4ce9a176f06db204de8441cab2d52f9fc2aac
MD5 520028a6611422b8af648cc1a6b7e326
SHA1 0e81c2caa92629844f4fc9797adde98f84228ce6
SHA512 89af0a7e8e7a9c2f8d4707e7f8f17c82b894262b4b9c832db7c3a4394854b9c2678473d8a274e5f5a70551f48a1b20dc520c489f2fd826e1461fb1097fb0d1cf
SSDEEP 768:5LxNiiEH4PYy98QG6B1gv9/rWSTqvjHZVX3EIC:F7iiEmYWBG6QvLOvTzEIC
TLSH
T125C2E17156E7A83FF33202727292573402A9C1FBF5D70A9212BB0C42361ABE21D579D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 106KB
SHA256 7e696b7c6b040f7ea53193d8cc7e516dfa8dc88fcfc93553f820e86a83e590df
MD5 eee60d22a467d20b823ad2fc5827c21a
SHA1 67a466f807ced6f62518a65870c31297738fdcb8
SHA512 14afe6ae9902ca3ad0254ccff9d6fc4b22c582810f10a84f86b203a1cfd30c7e3632613e5d02f2b4bf58c72ffab6ac9843b94d21b9180791eb064f165db28c52
SSDEEP 3072:1Emb0mbxSE3wHCjnVxUVHeix1EPtagIvAyudjOM:1XYmbP3bjnQ71EPTIbciM
TLSH
T12DB302F34D2ECFACC5122BB569E58C12D57673F52FD197A08645EBCE6F24401498843B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 92KB
SHA256 34e914e878fa41d7a6471fee3a4823ea05df98b212dbfd03ce33ddcdbf3d5182
MD5 bf263d4d0a338345fe73aa284f5c7fba
SHA1 062501953494d3b82adc0b320dad9b99ffd06072
SHA512 b028ca9db332461395483d30a60239f9c3946957c70d9ebd1b336c7acaa4d19b5180dbc4cffa563a917a3fba2189f382d6640ee32b51834c780f5281d98cd3dc
SSDEEP 1536:GWfTd7U+0Q0+a9ykEK7B8W9b/JPK8p0h0J2dXIwoJyOjMKF:haPxyshC3dXSJ5jMC
TLSH
T1299312D231673FB9C0F21E2CFC57C272ABC2514A7B8D95749A00B504EE57E5156F3A88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 61KB
SHA256 1f239fd34279683888f6bcfb520596b5636449929bc92c90281b886b7ecf8ef1
MD5 8aa1d35ae1d4cc7a3dd75b26d1928d5f
SHA1 c190aba6890457129df960a0b43e17b3fb8d04c0
SHA512 ed15712aaf1d2f9bdf60bb5c8704d2d1ac4b7bfd4b7cdd276158e6253dad5f8b53a87fcc1aef3b0fca2ba7a1ad6f4b722ed9d6c0ed5f2f16e1d05f7b8d21274b
SSDEEP 1536:O7XcOQNgElK+xLBoC8SN5sOWOLNDcZjfnzwKiXmG3H8Wum9prh:Ozk1DLMzwKDkXuu
TLSH
T1E15302F02E247E49B5B05B0F4BF692855BD85A21DCCEFE01C093043F8CA6ECD52AA157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 45KB
SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
MD5 44e017eb03ad119606b480cec663fa30
SHA1 9241911887c38c5465f7c2e52241aa36cef8fe71
SHA512 fa9327022c36d67b6a43370f035d1e7817e65e0a8260a14084dff52665372fafa909c2b1e41e7590aca67086c84f975093ceeb0c2169afad18f7dd066ea3bbe8
SSDEEP 768:n5tNF8slLi+NBxYf86HMA0PF8/3SDtPoHMzqQqZKq1r/sFD5f0tjlLILDkF1OYh0:5tNHxNBx286HaGfSDtPo0q5rwDetRwDH
TLSH
T17523F10BD1C595933AE03B3E3ECE143C80846699A757B2E2F12A350AC6E4F59C50F5E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 52KB
SHA256 dbdc599187470a5c97a30d981490e81bc5985a96a98aa8d1d80a3ae223226174
MD5 eadbf9621ac930cdac434da65a8ddd28
SHA1 09a59f56fce7413a86a6bad860e15b7ad902b1fa
SHA512 d7eae6a87f9a57cf2ba947fa592b589a855e78bb0251d5586a9609a0fb4b98a0031ba516a113f860991c032a50ca556c9a1d9c86d1da8e778d38347859a1aff3
SSDEEP 768:f3vriCFEmiv1HXWsG/ZDeZHq2h+LysGyuVx3W3YjKFtAJmacluu/YHYvM2dJwMLX:LnFqQsTMsyun3TatWn0pKrK3
TLSH
T1693302D19ED2F24DFF4173A4A1A40D63257E40A8D41DE8F13992EB5C68AC398D4A67C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 18KB
SHA256 10d701fcf93c3ce3ab95381378255c7631bdf30e3a0b1b2f77d5f74efd903175
MD5 b14eddf6544a2d13fe626ea6daa83c3a
SHA1 92a9e873a2b38e8dc6d6f553075881a8d019139a
SHA512 fdd5a6025a5faf40ce436badc3f7db03f52c61771d4e376187c2d49cbc95947e5b732121e46e8752c44d5b37e218d3e2e3c789d2b6f23def3647ae32890dea31
SSDEEP 384:9n1wDSzn5ez1eaSaX9chwiP3pDf/CgLeGFDjL12wSBoJzCBR4WB:9nto1BchwKpDfqgKGFLowRJYF
TLSH
T16582D022D4ABB092130FB895969D3B30C07EF52BC893A33C7522AD326592751E6B4687
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 8341035c42dd69757348393eeb37ce38830c9aefc61940933dccf86756441c46
MD5 e0ec7c0aba0193d1e5a51c718f6c60a4
SHA1 1d6a2600e12d94b8f266348ca77c3fb7f5a66a61
SHA512 6b97bc19e57e809d3d50172f27b60ca10221d6417613b4943418f6fb1112494f4814ead91bd8eb2bb12a679c5e5b14467b440b410e163fa42e36e91d0c33dafc
SSDEEP 96:OUXTyUAKywIeLqTgDquPEVnJ6aCfgkooe:OoBAMUt42m4we
TLSH
T1CBB1612D9BE2639CFB6C357251D4E04739B084F3508B2D63825BF5B9B8B237872E4290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 bb4e34b5724d27d05eb57a50dce768aee2b7fcb11119f48c0f1770ff9ae9e028
MD5 901695549bdfb6171684a00c271bfb72
SHA1 2cac00452a10de66c293596b2ee76f6341bc833c
SHA512 c76576913020040148605c40a1446b36ad07725de22386ee2ba8404afabbaaf68f0e05d450be116b92e21ad5cbfb1ffac8d17983974a527effea6f54a2b58a29
SSDEEP 96:CMUXKyMMKx7IeLqTqDquIYEVnJxaCfgkoT0:CMh1MiU7/Y2n4r0
TLSH
T1F6B1502D9BE2639CFB5C257251D4E0473AB084F351472D63865AF6B9B8B237472F0294
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4a49da9c40a5af3b526866ceda0af31e52da92b332a3908aff9727a58fa8035c
MD5 ab72324b9841124915d963cd1f078ff0
SHA1 1ab812f7058f106229daf577aac469def95ffe68
SHA512 121cb55e4e911cb3b999444b78e096e6e42713292bd551e0b21ece16aee7712fa9969198d3f8885fcac5d4ef4bd264e9f1dc2a5737abc8293976e33f1d9e20b2
TLSH
T12361392E977265DDF7AC117254C0708B3AB099F6A88B3DB31798E1B8BCF23794240394
MD5 SHA1 SHA512 TLSH

Submit Download

2c756231-b5ab-4108-b265-b7df322872cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2c756231-b5ab-4108-b265-b7df322872cc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

13d65e0d-c16e-4ae1-9fbb-eb4c41617f54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\13d65e0d-c16e-4ae1-9fbb-eb4c41617f54.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

586218a9-1954-442e-a7fb-a1bc487d5275.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\586218a9-1954-442e-a7fb-a1bc487d5275.tmp
Size 211B
SHA256 8270cf1213240f39d54755e3bc99eb9545660acd78d92d992408fa42a0f94514
MD5 2a94f0727668140f4bd6364ccb85b9ef
SHA1 840cf4b0a5f9ce37e8bf69748a966fabd0219dc3
SHA512 31dfe4cba172eabfc8a69569dfb6cfd855020fb45f56477e5c7683ec59eeb9407b586a112cfd772e84f55307b8bb9b04d019913249fe797e507692183bc0dfdb
TLSH
T15AD02363210470F6B55D5D86507BBD4FC37710547C01DED720D064AC253185C0647140
MD5 SHA1 SHA512 TLSH

Submit Download

78e36023-8193-4012-a1cb-b8681042f869.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78e36023-8193-4012-a1cb-b8681042f869.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

806724ab-d9c4-44f2-981d-d286ed6071b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\806724ab-d9c4-44f2-981d-d286ed6071b8.tmp
Size 6KB
SHA256 8b793f418a1a5392258bacb68d5bb084713a92bef7f3bb22fa9fe4cdc99b0e82
MD5 f835b0515912aebdbc9b2d7175720503
SHA1 69e48a8bca311336dd0109dba9adeaf3f074f94a
SHA512 e0d39e78a70f4437aa0906a6e9c921cf2814a4680d2b358dc4f6f6f0060a0ef2be822368cc005d89d83c6cee9cd9a3354bec2eab612d6874f302ff0a06c60dda
SSDEEP 192:DVGYC7n9Y4Xw6VZaadJg9nIOgvkE7EOfqbCR:DVGYC7n9Y4Xw6VZaadJg9nIOgvkE7EOl
TLSH
T17DD1ABF7C3E9822EC91156F0EB186E1FCE1E0924531C3C5AC4D4EE5BA3E2471E245A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e09350445c031e6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\5e09350445c031e6_0
Size 196KB
SHA256 8808a1d0e8efa75570696d9f6a40348696585293e77a2d9e7a33691ff5bbbeb2
MD5 75635268a9a02775184f352c8d36eb30
SHA1 f093827321fa6eaabb4eea44ae4d4828d4326ea8
SHA512 6e3702b031cdfbd8e0dc886f2936e1bd2837ba1f3f5f7ccf1f5e9e3a62515299be96db8c703ebc13d769255344650503684c5f44cd5bcdfcadf2728379d797f8
SSDEEP 3072:J2XU0LBARbIRdaYcob5ISvXFjvyomKJZu:cXxLBKIRdaYxdImNNJZ
TLSH
T189146B356300F43FB923DE6162BE7F4E3C25A167DD0686FCA5A4E9309AD6DF20522748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 733cf3a620edd29a833ef7ab7f59c39f7d73ca07f07c3bc0d6eff69bbd0d8583
MD5 e33b272211432d01fa216e9de19b45ff
SHA1 48f5b3719ec7f3ebdc301283f700afb433596ca7
SHA512 4f64c45c126f6b9f5dfac3910e0c336b9b08a14d882386c5e10b5e53f64a8d2527efec8a87c83615654bb9fe492e0fa06193c0820c9c318f7ff99bf9ed22783f
TLSH
T1DAA002F245D20949CA463371119301402F344C25074982874D921455DE771809D0E4E6
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 03281b87ad3ca76fb77a3407215ee5edcf01378b43d103f3f482f7612fbb96c1
MD5 968347f32f8cfc3bec1171a572fbe192
SHA1 edf24982194030c151c49e435a7a75243a6db82c
SHA512 3ecb9d2857152ba4b7082bc8028d43e0e763352edc376c110fd2983325e6f9d7a2a51f9d75c20ba45867f47e708589d5e31a25a262f6d2b52724ddcb3e080a8a
SSDEEP 48:KEUI/Kxu0DyFNa5tbDz21Do9IOt2KrTz32HFm4gnNLIJK0A0nyS:KEUwKxuii+gKf6ILGK0AOt
TLSH
T19B912261716B821539BE291840B5D72A465271B73038E66B3FEE81A18E7EF080FFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

af865115-62fe-49e4-a470-23f7c48d9694.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\af865115-62fe-49e4-a470-23f7c48d9694.tmp
Size 14KB
SHA256 b81528e2c094c1e0d9929585abddb71b73ecf172fc7786e391183cc8fc082d28
MD5 c6f08ce1ebf0a5eab8475c7813ec9ab6
SHA1 57e7e39fa41aaced47b476698e3e5ec31760c49b
SHA512 2ad9e198b633d3dfad8eac1fbedef35f459f478c907f094c4dce1fdee0ea0d0e8489d673db9ccbfc82ed322143160fce74274c83632761e0ea8d42937f8e1a04
SSDEEP 192:sxRpRUHcBzi/f7s80yjlNoA8pKPPxM/g6+WNQCIn+gvXYt+0E8GA6IgDH/JJMcvp:sxRpgmzi/f7sIhEP/5atXOajjLx
TLSH
T1E462D616AD24D977DCC6D219BB75BF12D2F91133AC951E4CAAFCC91C00EA2ED220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daeea8be-1022-4a04-9cc2-5b6a72915e34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\daeea8be-1022-4a04-9cc2-5b6a72915e34.tmp
Size 11KB
SHA256 8c3fd3c814df34054b03340f8b8e27ad7cf8f45009ef372f34d4c01c338b83a2
MD5 48e274b04f3465bf18384f4c4b7a0237
SHA1 fae30e0c0f3b6ee267aa1561d59f665d148bf6cf
SHA512 321a75916299570d668d24bc2c515bc367da04a1a042382668b3b2744b209806fd1257ec960f4026b84354a7cd597a7e936fd4d3e5c3198b4f706c8f123173e2
SSDEEP 192:sxRCRUbi/f7sbvy3zoA8pjKM/g6+WN9hu/YtamE8GA6IgIJ:sxRCIi/f7sGez/5+/Ias
TLSH
T1BA32B716AD24A97B9CC7D21DBB59BF13D2F91132B4941E48A6FC8A1C04E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2ba9ea0-c19c-4ff7-bd63-ae41e285d5e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2ba9ea0-c19c-4ff7-bd63-ae41e285d5e0.tmp
Size 11KB
SHA256 1caf49f6519c3a76e7f184c1280d40f7de134df604a1ed22def0336f1056cd0a
MD5 e078293b122a0ad6e42633724b46973b
SHA1 9105ffd45c8b0a6d443691bc6828abf7bed1fea0
SHA512 cdd4a13895c0728eb9f5b64a42ee0b89cc3a1486dcd1629b007b8ceffce02d4666c7feebc8a65f197391ecbcc46f1ef3aeb08a6df873001a38197d9bc3a8b287
SSDEEP 192:sxRpRUbi/f7s8vy3zoA8pjKM/g6+WN9gvXYtjmE8GA6IgDxJ:sxRpIi/f7sNez/5+XDa/
TLSH
T11732A616AD28AA7B9CC7D21DBB55BF53D2F91132B4941E48B6FC8A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc059594-219a-4bf7-b0d9-74124109c0dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dc059594-219a-4bf7-b0d9-74124109c0dc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 da73f23017dc90dab0158a737eff7bc44af8a3f574da1265ae18a3b7578773ff
MD5 6c08eaff8441d19279d6ffdd37b27757
SHA1 14ac41c2cb0aa449e1ce9973499ffb23199710ab
SHA512 ed9318802337cab7c90b6941249c48509cf719594fbbdd65e02547130ee655069dad51d7db0cf2fd9f144b8bdac22aef41a0d0bf3f5e00732acc84e3652eb9d2
SSDEEP 768:pFdd31wg0qKnJ5t6adxDc9bsMSJz/Fn/WykJoCfLk:Vd3oAqVQbs7JT0yQH4
TLSH
T1C0135BF298C349B7DD9E5B83A77E2D02AEBCC153B9845944B3C9690CCD862BFD346811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 187f01ae42def9ebba8cb60d150e11859a90c52e3a153ecc43392a7c253c5ad6
MD5 81ee2a0c2ec895cfefa2442dd6a7abb9
SHA1 5a46c1517e2fc2a03e907daccf0206f5bdb54508
SHA512 2a0e667f2a6ff75a66154fa2514ea48098a9368857c7fdd6fb966245fea9ec18222671f96caa00d7705da4268d91444f32f88784f74120177fb86cdf91a8d93e
TLSH
T121E00444D301451FD435033050471F343FF0C000035113051334055C3C313307D007D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0100c45f661a0b642eccc716782b49a724e6a38defbb70e96783689ab2a2fbde
MD5 4e3cd6b7dcc31caac8723674b532c860
SHA1 1d350a18937558e095d7567f5302f16eab1336ed
SHA512 361b68a07ff5cb54bc20315d4ec5a124606b315cf9876038096feabe25b7a1e47984ae2ea667fa85d0dfefa4bbbf6695dd9a8c4dcfa45e32ba5cf09d77cbb27f
MD5 SHA1 SHA512

Submit Download

edf7117b-ae3d-483e-8e3e-b8ac6d8ff222.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edf7117b-ae3d-483e-8e3e-b8ac6d8ff222.tmp
Size 37KB
SHA256 376a1ec606685a2073666513a82517d0b8898f7557bf62b9353cfa97d357ef47
MD5 730aba0b14271420543ae3e685423d09
SHA1 dc65b7128371c00a82a11f36571a4760bf128629
SHA512 695f0528599c155f31e5f4e9d5aeb490b492b0899cfffe8ba104874bb59cdd7fb87ba681c505ad9d26fe241a664ce4a5d7c05e392227580b6075326f97f47c49
SSDEEP 768:z/UxvxjgC+U3Y9KnJ5tkxDc9bsMSJz/FnnQSHXPyK/:GZj3+U3rOVQbs7JTWSb/
TLSH
T19B03C03AEC5058A7CDF7A7803A4AB647BFF44593C5C529A849DE6E0D07CB3AC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e7e3615-5574-422a-bfda-30a237cf9816.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8e7e3615-5574-422a-bfda-30a237cf9816.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download