hxxp://balance[.]mastercardgiftcard[.]com

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
899s
max time network
896s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 16:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://balance.mastercardgiftcard.com
Sample261107-t4v9dset2n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4132	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{89B9E22C-B834-49AD-BE04-9B61CE552BE7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{9466DD30-BB39-40B4-8B09-50D26F0883E0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of WriteProcessMemory 57 IoCs

description	pid	Process	procid_target
PID 3868 wrote to memory of 1460	3868	msedge.exe	86
PID 3868 wrote to memory of 4132	3868	msedge.exe	87
PID 3868 wrote to memory of 5028	3868	msedge.exe	88
PID 3868 wrote to memory of 5028	3868	msedge.exe	88
PID 3868 wrote to memory of 5028	3868	msedge.exe	88
PID 3868 wrote to memory of 4760	3868	msedge.exe	89
PID 3868 wrote to memory of 4760	3868	msedge.exe	89
PID 3868 wrote to memory of 3772	3868	msedge.exe	91
PID 3868 wrote to memory of 848	3868	msedge.exe	92
PID 3868 wrote to memory of 3772	3868	msedge.exe	91
PID 3868 wrote to memory of 3772	3868	msedge.exe	91
PID 3868 wrote to memory of 848	3868	msedge.exe	92
PID 3868 wrote to memory of 848	3868	msedge.exe	92
PID 3868 wrote to memory of 3676	3868	msedge.exe	93
PID 3868 wrote to memory of 3676	3868	msedge.exe	93
PID 3868 wrote to memory of 3676	3868	msedge.exe	93
PID 3868 wrote to memory of 1952	3868	msedge.exe	94
PID 3868 wrote to memory of 1952	3868	msedge.exe	94
PID 3868 wrote to memory of 1952	3868	msedge.exe	94
PID 3868 wrote to memory of 1772	3868	msedge.exe	98
PID 3868 wrote to memory of 1772	3868	msedge.exe	98
PID 3868 wrote to memory of 1772	3868	msedge.exe	98
PID 3868 wrote to memory of 4964	3868	msedge.exe	99
PID 3868 wrote to memory of 4964	3868	msedge.exe	99
PID 3868 wrote to memory of 4592	3868	msedge.exe	100
PID 3868 wrote to memory of 4592	3868	msedge.exe	100
PID 3868 wrote to memory of 3912	3868	msedge.exe	103
PID 3868 wrote to memory of 4236	3868	msedge.exe	104
PID 3868 wrote to memory of 4236	3868	msedge.exe	104
PID 3868 wrote to memory of 4016	3868	msedge.exe	105
PID 3868 wrote to memory of 4016	3868	msedge.exe	105
PID 3868 wrote to memory of 4016	3868	msedge.exe	105
PID 3868 wrote to memory of 1272	3868	msedge.exe	106
PID 3868 wrote to memory of 1272	3868	msedge.exe	106
PID 3868 wrote to memory of 1272	3868	msedge.exe	106
PID 3868 wrote to memory of 2224	3868	msedge.exe	107
PID 3868 wrote to memory of 1028	3868	msedge.exe	108
PID 3868 wrote to memory of 2224	3868	msedge.exe	107
PID 3868 wrote to memory of 4060	3868	msedge.exe	111
PID 3868 wrote to memory of 4060	3868	msedge.exe	111
PID 3868 wrote to memory of 4060	3868	msedge.exe	111
PID 3868 wrote to memory of 5484	3868	msedge.exe	118
PID 3868 wrote to memory of 5492	3868	msedge.exe	119
PID 3868 wrote to memory of 5500	3868	msedge.exe	120
PID 3868 wrote to memory of 5884	3868	msedge.exe	122
PID 3868 wrote to memory of 5884	3868	msedge.exe	122
PID 3868 wrote to memory of 4980	3868	msedge.exe	123
PID 3868 wrote to memory of 1852	3868	msedge.exe	124
PID 3868 wrote to memory of 3792	3868	msedge.exe	125
PID 3868 wrote to memory of 1852	3868	msedge.exe	124
PID 3868 wrote to memory of 3792	3868	msedge.exe	125
PID 3868 wrote to memory of 5968	3868	msedge.exe	126
PID 3868 wrote to memory of 5968	3868	msedge.exe	126
PID 3868 wrote to memory of 4564	3868	msedge.exe	127
PID 3868 wrote to memory of 4564	3868	msedge.exe	127
PID 3868 wrote to memory of 3772	3868	msedge.exe	130
PID 3868 wrote to memory of 3772	3868	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://balance.mastercardgiftcard.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x23c,0x240,0x238,0x248,0x7ffe7284c188,0x7ffe7284c194,0x7ffe7284c1a0
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,56154854812523717,7187586297072584226,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,13979503889562930814,11873544462218336463,262144 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,8399875391020435316,5065535812702330422,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,18275072432796536343,1088203340152698740,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,16671886428410643678,16082631414500942373,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,8474592573751923491,11859508158523685543,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,14505337151108767912,13866608058684281914,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4804,i,2843511026327239833,3357189413628573595,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,1272840715902779604,3766922383333066056,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9812203469316170992,746026006122564095,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,2911316028851040372,12688069318740168315,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,2911316028851040372,12688069318740168315,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,17597974768395051597,10824963652513668095,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6472,i,8862457261876886073,2279211760353907397,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6520,i,6204214175651801108,15769203428235908037,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,5981617204863462612,8575081157090685595,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,17020349290405126060,1454735964860783596,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7520,i,8446905221238816630,5453210261537624175,2097152 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,3208002980781546812,16907983136183491144,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,15358912451215233597,9588490607861783024,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,1256469283104613477,16102585023668749413,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:8
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,371261392915245378,5782290588613633424,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=1048 /prefetch:8
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6260,i,4031023046468649069,16572784290796488715,262144 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=7628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,3275034433855323512,8156643748310751724,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7588,i,1087564482102107109,15585010194870948604,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9455393693633261787,11545266929618830740,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,3323210950994615440,969728068220438198,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,11572076399856530744,17423432658690305158,524288 --field-trial-handle=2340,i,4717321673664805013,17841108774304642202,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:8
  2⤵
  PID:3772

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26e44305-b09c-4948-89d4-e4b0d698fd6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26e44305-b09c-4948-89d4-e4b0d698fd6c.tmp
Size 8KB
SHA256 9b011b0d7813486cc1783cd6cb54654866a7881ea9be8bf053293ff91afd6437
MD5 1cd4290dec4443d00cad40dbf4125f36
SHA1 cbf02f78f57bb107ee6df53992565304e89bdcc5
SHA512 00003874d698f0e42253c3b08fde9eb50d72f0ce0ffe314c5ea13d5363f5c51da5b43b3313283e41334014c0feafeb225e20c0b633134a79c0a71288b0cdfc86
SSDEEP 192:gONo6IEMQmiUylITQuIGm5Njzor3EmORcXg027H+jq1U6:gONo6Dc3QuIGm5B838RcX0H+yU6
TLSH
T18B121A36AC78BC6B6FE36984F0863923DDA58227D6896F94D5EC2B1C01DF25C130A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d374e0c-ca3f-4110-80ef-148ab919691d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2d374e0c-ca3f-4110-80ef-148ab919691d.tmp
Size 392B
SHA256 1e6808757c666a655cf1963ec049ac5a05a98ca54b91add5df68e464d318419f
MD5 3fafcf7826c9063a38478822dcc0b485
SHA1 625408e8a4b576effefbee226f5529d026533def
SHA512 f169d69012d4e22b3c9d567a9016a013d04e2a6d49670877fc329585e022b8eb2ae156aa7891d780ae923c0cd0dd39f5a30967f4057959b2c0afb358357e833a
MD5 SHA1 SHA512

Submit Download

3c817927-b03e-45fb-b41f-ff48a2211133.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c817927-b03e-45fb-b41f-ff48a2211133.tmp
Size 25KB
SHA256 46a7d87a908030932dc980075cefd3f44530a649d33963319fe7039e3cfda284
MD5 0b1ac31fd7af3889ea3fd833c343f8a5
SHA1 0c0d3cbf15f402211bf1cc6c3a39865648ba94d0
SHA512 69efb0aa98ad2d40cc9166c8399485b65efd8308fc0532bed30f54e3c20cb14219e3c23d1317cc79b2ad82ec018a8f042777724d5dd0d0e4a4f9d14a730797f9
SSDEEP 384:hMiFwvFwPasuuzsN38TUNTUlIlpHFqk1QZQzIGm5B838RcX3ei+yDnS95NYccoZ:h3Fw6Kwgvlqk8CGLR03ei+yDm5NY2Z
TLSH
T1F7C22AF248E7A83AEA9E5B47E73D2D02CD7CC267B5855A50B7C8561CCC861BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a31c9df-41ba-4c61-b049-fd1d95c9e65e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a31c9df-41ba-4c61-b049-fd1d95c9e65e.tmp
Size 18KB
SHA256 08a8b1d0641e58e86dc0a9e4b2e901453e6d5e05208a3556374d383f9af6a632
MD5 864efe1e0beb77bd76d5db6215f920d6
SHA1 d495b80226a5d951f402011076f25a652ed399b4
SHA512 43529425a5754a4f924db7a3679b92694cbc3ba9a22ca376fc0b47c023bad6a9d0b8fdef54795cd3dd89bc74c981962287245bf75da2db5dc006696c2b5ed9c3
SSDEEP 384:cvFwPasu9sNtWHFqk1QaQzIGm5B838RcXZi+yDnS95NYccoZ:c5llqk3CGLR0Zi+yDm5NY2Z
TLSH
T191828E36AC78BC3B6ED36644F54E3913DE74866BD6C91F54D9ECAB1C00CA3C8130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

0d421008-30e1-4092-b477-cd313a30cc4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d421008-30e1-4092-b477-cd313a30cc4b.tmp
Size 27KB
SHA256 872b9bc5eabaa270511d782728fffe0cadff15f7479415b62e78658056d4e7bf
MD5 68507180d64dbbb9cc2e00f426ee60df
SHA1 47f9264517ce831037f0e9ff7c17360b689d2e95
SHA512 8efd3834288974893a7d360735549eaec9e713e45781edaa83b9d4017a3de0b78c5a1db949766e2800c206d7dac32d32681d57ddea58aeaad33c9d0519ca3508
SSDEEP 768:iqWPcLKWvKece8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7hro4nS7mR1:iqWPcLKWvKeceu1jaClLiF7a4nS7mR1
TLSH
T110C2FB3F644CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28787f30-aa71-4d6a-9013-7def7ee18ffc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28787f30-aa71-4d6a-9013-7def7ee18ffc.tmp
Size 11KB
SHA256 1b839c3aa2dd21ad23110d0fd058f7eb8900878c19791ad38d9cd75b9bd247ee
MD5 68fa7b4b13eb16205c3101365ad7aa12
SHA1 53be78e6e0b384540c2f8773fc9511a258982ad9
SHA512 cb9e646ceafd04949a8dd2edb2c9847134740e3f685b4bc125d59e2c622ee53c5c1d8f5ba7f93783d2528f1575184cdf362a8ed05b0e2147471014ac2f8e3eb2
SSDEEP 192:sxZHQbR0W5r/fSsJmBVHUMIdp6KSHW6+WNpGL5xYapUJQoIg5fJ:sxZwbZ5r/fSsJmP0VBSHbcxMn
TLSH
T18632D8536D28693B9CC6E20DBA59BF53E2F9503291950E98ABFCC62C05E77CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64afc06c-57fa-43ec-9ba5-ede919cc1d76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\64afc06c-57fa-43ec-9ba5-ede919cc1d76.tmp
Size 10KB
SHA256 2c279874fcc66d47fa54629f1de6b66cba0772005be714a0700b34d9e8b459fe
MD5 eb73239266c2bfe4c0bf992c3925d3a5
SHA1 1c818d4f15062d1f98ee5df56f9566f35d5164f3
SHA512 b76e9fdd9eada0760614beb22f5a7eab4b9edac5be9a6ffa39523983db0ea82677e793039d92eed8fb85e9325ce67de0e07bf69bed1ea516a4619ec7581b1631
SSDEEP 192:sxZubR0W5r/fSsQiVHUMIdpcKSHW6+WNpU7/YapJSQoIgrJ:sxZubZ5r/fSsQw0VDSHba/C9
TLSH
T1DA22C712AE28A93B9CC6D20DBA19BF13D6F9503291D51E58EAFCC52C05E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d5e1ce4-b284-4998-ba7a-25a21985434e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7d5e1ce4-b284-4998-ba7a-25a21985434e.tmp
Size 11KB
SHA256 f35401a7d90935718543bc6270a09d561605428d30a0c10e6c4d97b162ce0a45
MD5 fa2336484b03e956356988b5334066ec
SHA1 690807de2e35f2d50cbee116a9bde09c9e906025
SHA512 d231c82e446e948748d139efe7076231d57872a3caf4b5eeb02ede21d76778cf1bff8f740be3cf663fb20ccee5804968c3b838d396f8bb17db2817260c21a872
SSDEEP 192:sxZHQbRLW5r/fSsJmBVHUMIdp6KSHW6+WNpQxnYapSJQoIg5fJ:sxZwbM5r/fSsJmP0VBSHb2nGn
TLSH
T18432D753AD28693B9CC6E20DBA19BF53E2F9503291951E58EBFCC62C05E77CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98f5b924-a949-4fad-b02a-904f95aed454.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98f5b924-a949-4fad-b02a-904f95aed454.tmp
Size 10KB
SHA256 a0d254cf2e07bd9d1dab5ff0bd81e822f45e73b8344dcafe82ce23dccf0e28d3
MD5 8b327158556b4c5d55f89f5b0356f652
SHA1 a2a8c87b7602a49552ca96a6c873236cd419fa4b
SHA512 e31dfc1e5af303d67823d3b8288594e927864cf4dc4814e9fb77775ab9794ca807a7a436013bd6ef7ab5d9769fed76b356e7dc3025f9515a516ab8848d8c32d8
SSDEEP 192:sxZubR0W5r/fSsJiVHUMIdpcKSHW6+WNpU7/YapJGQoIg51J:sxZubZ5r/fSsJw0VDSHba/OB
TLSH
T16022C812AE28A93B9CC6E20DBA19BF53D6F9503291D51E58EAFCC52C05E77CD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 b1dbc4b55f318fc650b1dba8d28ead09ff0609a324a686ef5e216d7cc1c8c9b6
MD5 8930ce3d75aaac635a23f5f78e03442e
SHA1 fbd6e30fedbbf7b153d04f43ec9264b8696732aa
SHA512 c8c65600a45c85a6cfeac0330ef78de7ddc9097edbe0f2d9e1f8434a052674c93713be0d9c9ebe2660f1d01dd525b5df721d5da66b719590cf21e1e23b5c995d
TLSH
T145E020C904CCCA1D520EA44702F85F0C81C1361A93C4AE3D1B14D84C7146140628D5F1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1f358de1ccf53dd2d82a57b541529eaa760b589d961b58ccb0341ca739d211d4
MD5 9c58ba3121b18a8e20ebf546431cce2d
SHA1 aa652500b7c9db922e10a2c8e41169193a004676
SHA512 5247d9ad798dc6baf274cc1543f901e46887a255e09f6b1fb44579a0b78086a0f05dc5d54fd7d9ff02739405cfa1765961235591c64e0fa9a960101500f15ce8
TLSH
T1B5E020CC25CCCA1E9544644F01B9674CC1C0761EE3C4AA1D1B06C4C87283840F69B971
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d2d032a8c54c79365b4b9cd3bf83189fed9ecd9e2baf8793851eda23ab2884a3
MD5 11d98af68bef2ba377e3a153548eaf8f
SHA1 c46a6f160975f0a86d9ab3c56008877f487267d3
SHA512 298beb33edc11e9afb26fa3061a57160a60f6b5ec7b2234a587dfe1a2ca7422136ad11d5b681b703e2b6c2a6b8274feb5693347cb3649826c8ff109ad35338dd
TLSH
T1DBE020DA49CCC61FD20DA84711B85B4CC1C0361F93C46A1D6B14C89C73861446F896B4
MD5 SHA1 SHA512 TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 21KB
SHA256 dccf80d51032dda5c1811a8d3897399c6fce4eb1c638bee51d899882e8eb5939
MD5 1b7d130f8acb41c26c7a0f178550f09d
SHA1 2329aef43c021cc7f7efff44376b5d53f3b0b6c3
SHA512 8c291c8c15df34e9e341e8c40085dcb1c5a227f1ce22ce88ecdc5e311bff3c27ab084807ae11a58b8bc9e48d3098ecf3bf776711614f015feb5c069544abd4cf
SSDEEP 384:gMh5ttatttt0ttttttHttttttEttttttttfttttttttqttttttttttqttttttttx:hh5ttatttt0ttttttHttttttEttttttZ
TLSH
T117A28CAB2D0CCEC1B80C5B67E56588F42D71EEC2D422458FBAB43E36F5B36279C94009
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 207KB
SHA256 3db8b5985ffe575bc4951699850a5a587cd979f7e7f8a71a12e039fafa6c943f
MD5 3caade3f25e3126dd8bc3e7ce321fcee
SHA1 bd6cb278da006c0f702d74532f01b195f9392ee6
SHA512 5f935cdae6144489688b17255554f67654561f6481fae2ad64b28d102d3bdf9bdd42d3b6e7ad4594c82b16574ae29b972dea45a69ed4542e208fa3e1318f7f39
SSDEEP 6144:AmHv20GmNdHl2U7LYJ90U8LRKVcWAbbhGI7aTwnz2TC:AO26m9QLweWAzaTw/
TLSH
T1C424236C9C47999F4C9584BFA48C0EB1F985780BE8CC69FCB1488CA252B5CCE6B07106
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5eeb109bc1009346385aa88ff3cf2d8ed91b5066cd3966699673970c60321c93
MD5 f534d50f58a0510fad55320ec7cff716
SHA1 12098577a82994e891a1f1984c266542b3703af0
SHA512 671ffd4cea668ddaa124020b0c1d8f1186dd137f5e42dc9b62939095285fe38ceea4dee4fabb0c38f1ac012a7a6a4f6e879ba4cc87f4bea0fa1f94b48d0e4eca
TLSH
T14371D69189AFAB93FB8826F0C9D984FB313FA45B05933F232158EC335806793F600044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c88a9e8544591365be82e5c4ace97153368afec1d2e5115c19ef57cb90329d77
MD5 5e13fef38e808443bb3d649155ac7903
SHA1 3d714e6f2fdab1913e3a1798f79c0da54428030e
SHA512 4c8a2e26a96067dd9eba17f482b40e2adaf73c63c923a2c5e556b00fa739601b7bea2d30bd80132e2f51ceca08a920c90506b8fa0267a678b3fe14dcf1a109cb
TLSH
T1DE71C59199AFAB43FB8822F1C9D984FB353FA49B05933F232558EC375806797F601084
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 721c0b03c0a4c617bc015bbbe9ea5774ebcf939886bd3635e8c771999457b68b
MD5 66363d58f78b3b7a108315a0fb4c24a4
SHA1 5772f7bace1871729a99731cb99ad0a7668868d5
SHA512 3c53368ab7f439ecbcb354c3820f8156f99815a880ac100778831c92d2433ae33ce3a86c200bba96c699da83df60cc39a59d30255909545e1ea9c5919025dd17
TLSH
T1B0614E905A2B6B63FB9836F1CAE984FB353F649F09933E1315A8EC3B5806353F200064
MD5 SHA1 SHA512 TLSH

Submit Download

7099230c-c1a8-4e34-8927-09ea5e332b0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7099230c-c1a8-4e34-8927-09ea5e332b0d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_balance.mastercardgiftcard.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

15c1f742-416e-47de-85ea-244391c14c3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\15c1f742-416e-47de-85ea-244391c14c3d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8eb46e09-38f9-44ed-9dd0-d344d97bc722.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8eb46e09-38f9-44ed-9dd0-d344d97bc722.tmp
Size 4KB
SHA256 484786ec837233ff57c0c558b9b6b13cba91732c82ef13658679d10403ce74b0
MD5 8116c4e7e034c738e254f02c6cd22e20
SHA1 7c2ec024080e739660a9635b8b2c6e5fbef62cdf
SHA512 2d9211483a1b4b778b3000d9563403704e1719483e937d8d880e123365f22cf2e378e69b068772cd062b96848b5bc535fd3644d93780c07dd630c0bf8ff7f416
SSDEEP 96:D/OvnXBbg+UzBFwqkLF14UawBTUfFBwwBgqGMxj4/3:DWvnXBb5U1FwqkLf4UakTUfFBwktGOjs
TLSH
T12A913AB743E2866ED9116DF0E524AE26CF2C1211531CB81A4AE07E53EBDB1B3D143E5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e67b705a-54bb-465f-b8f0-fd2a24da5a5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e67b705a-54bb-465f-b8f0-fd2a24da5a5c.tmp
Size 5KB
SHA256 8ea722aabb504816d305a562c2f79dfc0730422c3889634fc52e69ba7a8c2708
MD5 a0af03a245c9e3da657c33d44b3c28fb
SHA1 9b4d53898b0c718b37461e92704cc2a0d84f5787
SHA512 ed7afd6cdc710879dcf0109890bf95160ed95f3448ba00dd8aadee9520470f711270f73acb77f6fa4b2fb324af4794323bda2dfc5b2b3b54baca2394ce2d9e31
SSDEEP 96:DHO//OPOmmxVzWFwRkj4/QLFr4Uaw0GBTUrVFwwLgDMA:Du//OPO1VyFwRkj44L14UaxGBTU5FwaU
TLSH
T1C8B17CB383E6862DD90159F0E624AE16CE2C0615532D781B89E47E57EBEB0B2D142E1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f895d521-0a92-4356-988d-d4dcaecf5dd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f895d521-0a92-4356-988d-d4dcaecf5dd4.tmp
Size 5KB
SHA256 3ab5cdcef7471dd15f6aa5226edd012923488372a9019658843451d4d65b10bd
MD5 d799e4e369e8b53cf7ff3783a66e497a
SHA1 f308353572dad09a10c8290369ee89d5154c4a84
SHA512 791a617782fda0d780375996a7cd4adb97908f02740b56f5b19a6b69400aed8d93ba31be16a790dfef719c91781b38bd93da9d1ccc66798c2e982d007ecf29aa
SSDEEP 96:DHO//OPOmmxVz0tFTUfwRkj4/QLwFr9ggUCVFwBBwoMA:Du//OPO1VotFTUfwRkj44Lw19xUsFkBf
TLSH
T189B18CB383E6862DC90159F0E624AE16CF2C0615532D781B8DE47E57EBEB0B2D142E1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a0ad452-2bb0-48a8-878b-7cdcc62d17f8\index-dir\the-real-index
Size 768B
SHA256 1de980ef5e660aa6a7fa7e7eb9398cca69ccfd5cb600825a8dedae5f74ea1176
MD5 a77fe449cd6e27c96ec04fa6affe25b0
SHA1 0915f8300385b1b4a0dc949da2a77cbaeb611b15
SHA512 b615827b9dab151114a23ac60ebf7bf253b9e4e96154b829bb6d77b4abcc930591b7d6be8e8ec5c0e27c72fade65bf4624357fe97827547d74a175d91b887d40
TLSH
T1F40141C90D230A66EC450230203DB809557403DC0350BA4FB2FEC43A8CA67407D816A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a0ad452-2bb0-48a8-878b-7cdcc62d17f8\index-dir\the-real-index
Size 768B
SHA256 c85b8e0cb8f94132f64a2cbb17da58c2e32347e392b59b534d834b7e02dc3fe1
MD5 ad63b01cdd387cc0fe75ab306e414523
SHA1 49672aa460caa98edb1b7667f1195f8b55f1fc0a
SHA512 7add71ecc5f8ba10652457c323edb05c9358daf224ce380209e3982cf92c180903929bc91536cc9b385e43f0e36d55675b8b9efbcfbbdb7f47dd80d63028bb0e
TLSH
T1230120DB00134B46FC0003719B3CA40621665148A3907B4FA3EAA066CC52B80BE83EB0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 907ba07e1863e278bc0469a537f26d28c971009df7380d25c193c6eb21083b59
MD5 ab96d9625d16909b4920993ffe507360
SHA1 923cc5ed071c271b512b0e1e591d840d1abe745b
SHA512 a8e9c918dff142d36c8cd87849a2d009e1e6447fdaf4fbb6848d038bd6fe213c0926b88c4bdc4895fb9ec00c01f4eff3359299f23c0c8c5075e4228c9e41ab68
TLSH
T145E0D8B72DE71850FC6FC3D7143160E6405A79548A14FC4E642F91D324A13652116DB6
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\10099d25-b182-4c7f-bfe6-1a36da2364c2\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\10099d25-b182-4c7f-bfe6-1a36da2364c2\index-dir\temp-index
Size 72B
SHA256 0eaac1c01feb950136f614d4d296263bcf375231d5e4412d52d05ed51ce813da
MD5 27cac46599608cf816a71043dc6d221c
SHA1 86fca711833b08861d3daaf297576efe6ec822de
SHA512 b00690e519ca48b8b569b929b7a507c52620dcbe8795078953148ba252e429c3a9dc0e8f63bc30cd7d77b5cc8db021a33587fa10fe8d2a2c3989ead960c6fc87
TLSH
T1A6A002205BC92040D050017461560BE13710C8600801074354A1199C9D541D49B15425
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\80bdc998-3524-444f-a4b4-cd888a8ba645\index-dir\temp-index
Size 72B
SHA256 01467e6d0a832e3e35683df5e15f898cd5f13d638ce8eb6cc8d4bbdf19ea1d50
MD5 87a512f006983ff43477f9dfe3f57af1
SHA1 604f3ec84dbe811286d5ceb5c96d8ad7efb437d8
SHA512 3f3ac7e9949ce7656bbf541a7cbefc4a57770d84b3cd07f5b0b29ee00772b9340493c12e497167cbece5f8a5960cbc9861ed757f22d05bd4452819f2a22d8c40
TLSH
T150A0025443C51145D850237A518D5BE17B11D860060187434494059CCCA02C46A15057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\80bdc998-3524-444f-a4b4-cd888a8ba645\index-dir\the-real-index
Size 48B
SHA256 9e630fab64dd292ce9fd96aa4f6d0bca39800404339f2734173b8b26230438da
MD5 10cc4fd58e40e4a63be7ff3912e7abfe
SHA1 ee1785b6a3c69b8c585f7447566f88c236f73f01
SHA512 d8a8b92d981f047fe1ccac94a69281ca2feb54bcf147d01e7ebd65e02a0cad42508665c41d8f0aadb405e57f1875368f2ef588bc6df744085b64202c3ac81767
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\c66fc209-d7d0-4908-8abe-2f8f1b99b0a3\index-dir\temp-index
Size 72B
SHA256 34ec0a8cd51e1ee4a265266c5dbfe21ec7e84844c825c26a194b2e7e16799113
MD5 6b224f4b01fb9c7049525d9c914e1574
SHA1 8512820e268555960de5235c95ad9b190f790162
SHA512 4478ea771590c6659f669a8fc66816786f0958224d86fa9ab9d01f6f64df8b8373eb316a0f6761477df5079d38162049db2dc203f204f3cdf2deaf53a3bd8a0f
TLSH
T120A0021043C51095D120267491450FB17321DAA006110B435495029CDC942DA9A15015
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\c66fc209-d7d0-4908-8abe-2f8f1b99b0a3\index-dir\the-real-index
Size 48B
SHA256 b8b949cda6d86eb59228d87e97c37ce275fe22bbcd76b62f2e6752bafd723da8
MD5 b7379c4dafbecd2f6475f88976c7f8bd
SHA1 25577c32e499764446dad60c46e98f428b8f4035
SHA512 5c3a7ce56bdf0d23291d7ccdb36cfb0b8d15cd10862f1a54711267f01aea641172805a923f6e6be7fc9e395f6d3245649b3d66e9ffa07585d2a4f44e6a67197a
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\d137c9e0-3f8f-4c55-b17d-bbd4ba33a568\index-dir\temp-index
Size 72B
SHA256 39097fd3303e9e7fe28eb10fcfe4b6bebca5f2d4498f35676b914f2061fc95f6
MD5 3b12abaee8cfd635cb16da5d51421630
SHA1 4fea9c293989111a765004d4739c96d838d62085
SHA512 7d61f81866d89440d988cfc2c87c8f22a52c6cf74aced577d48a076be3897cc338ff7c6d759b5b0349be0dcc8f66ffff18da1ac4c9ccb0e84c406329d0795585
TLSH
T16CA0023143C56581D014127450455BA53311C9E62601470344E6419C8C95EE65B25735
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\d137c9e0-3f8f-4c55-b17d-bbd4ba33a568\index-dir\the-real-index
Size 48B
SHA256 4455a36a60b002b2c44dbf58dddc37563599ec31eb6f6bae504c13a4ecca98c5
MD5 509ae5feb228cb604ee94a74d1d59a84
SHA1 9802121118f1e4d692076b130472bd2c725f33fd
SHA512 f258c51e92273d9b05d9ea6631f5347fc5d5c9ad3bd7f42afc7dd40158fc8b8fb60b1eebd4c34e1672f5467fb73adf09a6f4748a073605d38a1959e708d1f2e8
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 189B
SHA256 ea6acfbae5d7090a7eb374263833fea37fcea32248001f398db759fd041bc957
MD5 254a713ce61a01326556aaf8b562049c
SHA1 d9ad2ad06d448b1af154c3f18568eb37bdea0ea6
SHA512 774262e57a272d5e3e10858e44252699ea991eca961ad8b23290ba2613e1f97472939988d3d0018ebdace7215e9160d510d9cf7aa633a0206219e8be7d41be01
TLSH
T1DCC012BF0190429A3E3674EE911632C8C5777FCA1CC09A5C44A230192335E1F1501934
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 189B
SHA256 9b9134591a62bd07469bd5765c701c02d27147e2bf3da125ea59aaa437cdb8ce
MD5 7daeac3795ee07521d425159a1137f42
SHA1 541058410276003b0f6ce6c08227570acb14fb51
SHA512 6b46c35ebfb2d6dd54666b5da65984df19798152a1627edd67a5136062523cbe33772bfb5d9d18caf076106bf0c7111de7100d28332968003eceb1612252d169
TLSH
T151C0C97B509192C62E2924EA421632C9C4772A895CC5E65D48A234582372D671510524
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt.tmp
Size 189B
SHA256 4852db9cba288190484000562b18f9a0c9dcf48f4a5be2cfadafba4297787761
MD5 edcbaec239670828d8496036e7843f72
SHA1 6944407faeb8c2e86bcbe813f06a90b29ae24ad3
SHA512 1ffa63ec3c51235dae7805140cd69e3339378fd83a388e8988c298f00b2182a80ab671cd5fdb2835792d063a8650463c6ccab193ed044e9a74811c2f5116a807
TLSH
T1E8C0127F50628A863FB538EB412633C8C8333FDA1CD0E65D447274197334D2B0504635
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt.tmp
Size 189B
SHA256 d58ca4bd92105e378af2057007b61966892edd505b59ff24ce217de27831f1ae
MD5 7db315c5e0ed8bf9f8b5416c0f818d72
SHA1 07d5a4b9b810033e980de67ee9714b570e3cdcba
SHA512 e9de7ef915fb28cf16a99c18527722893f6955c76fcb7fb27829c2db2ab899e79af1e89e3e05d0ba677a1a62acf3b926a42e72c6013c565cad63ae42470c3981
TLSH
T115C012BB829196893F7638EE410672E9C8737FDD2CD0A55D486238186335E5A550092D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt.tmp
Size 102B
SHA256 ba267874ca891c9e5373b73d8f395991a18b98b8d3f2d47e3f8b5d7b95eb39f4
MD5 2d66c000ebeefaf0112fd99a833932bf
SHA1 258a2feb9e3f21e87a7ee8fedeebe3bce7061a81
SHA512 6769698be1ccb6e555eaa2f6ba3377f58fb0fe1fd05b50bfbc5a37d9fb4f4e30b9a3e780dc7f4a7c9a29a9c7e8019870c6afd894108caa02e02e13c8251aa690
TLSH
T1F7B002BF455156DA2E7534EA410A32DDC463228968D1EA9D84B214582315A6A1501929
MD5 SHA1 SHA512 TLSH

Submit Download

b5350348-8301-46e8-8836-8bd5f5acb686.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5350348-8301-46e8-8836-8bd5f5acb686.tmp
Size 10KB
SHA256 ba234b6912dd4a7254f6d6da8f96c19cd141f1d154aba1192ba78e2e8f86225f
MD5 61238e964f5cd9526079e5203b9886fe
SHA1 1b075384a70145e6c7a3509d20946f365780f471
SHA512 205ad814d5825896af566b4357db913651fe42fac462619a844234b4830e2244b2a167db401f3c530bddc8dd9bb0863f9886b34423d2e4ce0f8c02aa1ca73768
SSDEEP 192:sxZubR0W5r/fSsJmBVHUMIdpcKSHW6+WNpPZLaXYaprDGQoIg5fJ:sxZubZ5r/fSsJmP0VDSHbFBaXhmn
TLSH
T19432D8126D28693B9CC6E20DBA19BF53E6F9503291950E58EBFCC62C05E77CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c01eec49-f413-4661-aa03-3eaba5e574bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c01eec49-f413-4661-aa03-3eaba5e574bc.tmp
Size 25KB
SHA256 3b905371899de03508a28ac063d18200438bb5738e0a3f7bf11c62841f638a4a
MD5 5ffcf4d3558170bd9766b67141a28a2a
SHA1 00f0cc3a5d76ef28c9fe5dc85724dc92a904a18d
SHA512 024b3333d95257842b06bb41c411d48dfe69fd34c6564d822109803c804652e2c6136192b44b493f2513398e20e8b856acf253d502922ccc341a70d9e968be22
SSDEEP 384:sxZwbM5r/fSsJO66s8qMpRiYnazAW8pZS15posJWeT+MP0VBSHb+Tzn:sIbM5r/fS4Mnc7WeT+MP06HbUj
TLSH
T1CAC2E706A924D83B9FC35D18653CBE33D9AC506222C5CEEE5AECCA1C019E1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c74988d0-19d2-4971-9f5e-5afd1a91ea05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c74988d0-19d2-4971-9f5e-5afd1a91ea05.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ceecce9a-f76e-4eb5-9317-adfbdda36e22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ceecce9a-f76e-4eb5-9317-adfbdda36e22.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1f0f6aad8b40f9c0ac234efa45dc194af10edc9e581ebce8702f9cda8f55cc69
MD5 b0deb7d0bd437f0419a936b8356941ac
SHA1 81691af955ce466a33d219b05e452782f25eb25d
SHA512 9a9cd2824d2be3028f7ad341a6817ef8a8a9189cff83ec6a2a321f0849e2697f4675c7b29df7e9c906bd744b4ff9df718b91d31c40aba936abc2985d38e55f82
MD5 SHA1 SHA512

Submit Download

a5aa1ac2-2670-4acd-bf61-c5964263367e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a5aa1ac2-2670-4acd-bf61-c5964263367e.tmp
Size 8KB
SHA256 fdf7d0800b772e19e86ce22ee0966fa0440e1ea676450bd3f260e9fd0fa02612
MD5 da65ec6027f3646115c107fe56ef20b5
SHA1 97b09ca328028e827d9ef7fe1c139141697bbf37
SHA512 5b17aba5699811a2121530534e3128d3e25ee7c65dd9a259060c2b8e4f7d32f62756bd286ca50191abcbc47a4b7b1565ffbab18764b329c40ff58f24eae3ee95
SSDEEP 192:aON86IE7QmiUy3ITPuIGm5Njzor3EmNC7s+PdU6:aON86DtjPuIGm5B83gs+FU6
TLSH
T13502FB35AC78BC6B9FF3AD49F4872A23AEA5112BD5952F84DAE41B1D00D725C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbf8f9ea-8285-4fb4-96f3-09040d708283.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbf8f9ea-8285-4fb4-96f3-09040d708283.tmp
Size 392B
SHA256 0c9529691f5df9ca30ecc56bebc071854f7146cfcf7c665d92e34f5e969bc2a3
MD5 0ecea471bbcf7ad202e00d4f735895d5
SHA1 e48c60e6691ab3a5df563a88e45697c7f6d34726
SHA512 7772e9193417d1196ff5b0bc91ec37beff6ed258933c1b1fa980d3b2e5a9379e8ad7fdd6b17c14e19edf77ab779b23cba5eb0faed9992fec07a753b9910dde33
MD5 SHA1 SHA512

Submit Download

bc037c14-d7a2-4cc1-8cc4-503014c0af74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bc037c14-d7a2-4cc1-8cc4-503014c0af74.tmp
Size 18KB
SHA256 afa84e8e8acb799fcc9cfb8f9464f08b3fe008318136077e9f955964536a3561
MD5 2af17a74b24989a1adfa5f05a5c381d2
SHA1 bbfc99892208d745f56044ed89b13f07c46609f0
SHA512 cd5e7f31360ec6cf75b2c173ba0cfc324899fa2739ebd21dcb3b47d56f70cffcfea0d9db56c267289b449fc4c484d398eac69cb2373121833c95a86a631ab38a
SSDEEP 384:JZvFwPasu9sNtpHFqk1QaQzIGm5B838RcXZi+yDnS95NYccoZ:JZ5Mlqk3CGLR0Zi+yDm5NY2Z
TLSH
T107828E36AC78BC3B6ED36644F54A3913DE74866BD6C91F54D9ECAB1C00CA388530AA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2ea5da5-b9ca-49e8-b857-fd4dab5d8ab6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2ea5da5-b9ca-49e8-b857-fd4dab5d8ab6.tmp
Size 392B
SHA256 63f7cea5a4f5fab6e5c6247154fb8d38ff4e0891bfd758578f350a8200de724b
MD5 414ed80e86b355107f0851eadfb1e036
SHA1 b4f6844f9c785eb47d6dfeaa1915bdf77f21d4d7
SHA512 c0c76d992d9acbc62c127ac3fed7f8c4710fa08fcf8440301616d2d06c8d6c24e40cf32c4580651bb12224dee4e33a00958d67fed98b06584d3091b8386e5141
MD5 SHA1 SHA512

Submit Download

d35b3396-b3af-4102-ba38-96a177288cd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d35b3396-b3af-4102-ba38-96a177288cd0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d130338d54ef3b2311daeb6f98ff0b14947ed03b6a0908aade448149584eabac
MD5 789ebd928b98c9203b451e362907950d
SHA1 42a381d9bf13aa2f41102ef8e4a55224b7e5f5e8
SHA512 05cdfec78fab3b3923df18af4414b1a70c51bbdc48469689d87b912e07864df03b10627c20ab299097915a6e2bd3b774483e3e7376d7eb2b4c5084a9fb1f96f5
TLSH
T10D413A59A6FE1148B3B76F5AABF6A96E483FBC332E06D45D10110E4E4626E40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download