a1e1c53bf2a0cced8dbefc45eb6f26e24ff92868d5f57aeb37c170aaf4992006

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1.sonic.fdp.api.flipkart.com/4/data/collector/business.html
Size 68B
Sample260728-an2xfsvanf
SHA256 a1e1c53bf2a0cced8dbefc45eb6f26e24ff92868d5f57aeb37c170aaf4992006
MD5 282457b0df658f6127b0bd7e179d827e
SHA1 ed2637d0828085755b4ea3b7640a1d0a715350eb
SHA512 870f6b508e72ded0ff7fbaeabf897b34a5d114785e162236f8a9745366ecf4ecfc3c8e08aa2a1ebaec789f49ad4a32558a51c7ea63adf4e35626055813fc5364
TLSH
T10FA002568E1CFF692641C217072F3DA1188D735F63044F7842907F1630FC12C5A69563
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296717747434958"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{B6B9BD27-87B4-4C1A-8EC2-CE4BF93DCCF1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe
6064	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6064 wrote to memory of 1164	6064	msedge.exe	89
PID 6064 wrote to memory of 2548	6064	msedge.exe	90
PID 6064 wrote to memory of 5748	6064	msedge.exe	91
PID 6064 wrote to memory of 1912	6064	msedge.exe	92
PID 6064 wrote to memory of 5748	6064	msedge.exe	91
PID 6064 wrote to memory of 5748	6064	msedge.exe	91
PID 6064 wrote to memory of 1912	6064	msedge.exe	92
PID 6064 wrote to memory of 4080	6064	msedge.exe	94
PID 6064 wrote to memory of 4080	6064	msedge.exe	94
PID 6064 wrote to memory of 4080	6064	msedge.exe	94
PID 6064 wrote to memory of 692	6064	msedge.exe	95
PID 6064 wrote to memory of 692	6064	msedge.exe	95
PID 6064 wrote to memory of 692	6064	msedge.exe	95
PID 6064 wrote to memory of 4820	6064	msedge.exe	96
PID 6064 wrote to memory of 4820	6064	msedge.exe	96
PID 6064 wrote to memory of 4820	6064	msedge.exe	96
PID 6064 wrote to memory of 5208	6064	msedge.exe	97
PID 6064 wrote to memory of 5208	6064	msedge.exe	97
PID 6064 wrote to memory of 5208	6064	msedge.exe	97
PID 6064 wrote to memory of 844	6064	msedge.exe	99
PID 6064 wrote to memory of 2984	6064	msedge.exe	100
PID 6064 wrote to memory of 844	6064	msedge.exe	99
PID 6064 wrote to memory of 2984	6064	msedge.exe	100
PID 6064 wrote to memory of 4484	6064	msedge.exe	102
PID 6064 wrote to memory of 5672	6064	msedge.exe	106
PID 6064 wrote to memory of 2424	6064	msedge.exe	107
PID 6064 wrote to memory of 1668	6064	msedge.exe	108
PID 6064 wrote to memory of 5664	6064	msedge.exe	109
PID 6064 wrote to memory of 5664	6064	msedge.exe	109
PID 6064 wrote to memory of 4424	6064	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1.sonic.fdp.api.flipkart.com\4\data\collector\business.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc1ce6c188,0x7ffc1ce6c194,0x7ffc1ce6c1a0
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,15615980676334472452,16849943405634464365,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,16900906507237845884,16299502896579224613,262144 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:2
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,13163640439798677943,4916342069293448571,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:13
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,12848986929260471855,11460773747098800679,2097152 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3684,i,17373517898026568754,14143081912788748603,2097152 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,532571364667001683,7297089678918898722,2097152 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:9
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,1219335835047645092,3189667007636229070,2097152 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,14351474556389485908,18199738474445788335,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,15145748910572699590,9160241716705477459,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,13851291702745994545,17867399791866842699,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,13851291702745994545,17867399791866842699,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,5995682123669720899,17221459528945263815,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,10607435495046066671,11097968806894660397,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,2622987832929654267,7125483520040503298,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,781286756322230570,9267215964762770899,524288 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:14
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4836,i,3375186264475327046,3503997476220571271,262144 --field-trial-handle=2692,i,6212432314994386177,9937521302712089732,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

913ac89d-1bd4-41dd-b3fe-174b728d8587.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\913ac89d-1bd4-41dd-b3fe-174b728d8587.tmp
Size 35KB
SHA256 8866eddd0f0f9591fe36b19be7514d54787c3a3c5dbe2b58bcd2fccb2e6b4f82
MD5 8fb378cfc1e9f3b0252c5c2a1065b16d
SHA1 bf173b157cfb0d3d1bcd2c87a20883d5ef76c841
SHA512 dfbc3675c076617690d22fc97d9f7ac4348b739b35a6e8908341cf59dd31ef7610e9d6287fb8e33b63004c4c638b96ef77613302c25a273375879637dbc0bf57
SSDEEP 768:26J35HeblYyr17Hucys6BRvi82oP4/z6himo6Gb9Mw:26J3dB3imOz6Imodb+w
TLSH
T1F3F2C030E8158E77DCA7C295F1463F526EE46233C6CC6AC8E5EEAF0D06D796D4316822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 96af32eb276c86feb110e25f7db378c6a311ee68753c06a1a67f41637575bb23
MD5 2bbccbf158daa7da0e1a7fdf8fd796fd
SHA1 2d376e2e1d225b63b141800691a83748f33ba629
SHA512 a3df80345eac781a367bea0c3a8dd0830fa009231d9e1abbad0bceadfa38a54f655715d0bbb1a9348f3f8f60a39f6459625173efb599565572efda8348833031
TLSH
T17F613FF263102DC2FBA6997401F5B4683BF484DA6E071F2583807E765A09F5462F272F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b879.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b879.TMP
Size 3KB
SHA256 115e030006d803c91fab0ed11553b06496cda9b46439ea9ab4d68d7581d19658
MD5 e8776bb95ea8c1fdd06a971120be4f68
SHA1 9c5c1ca24eb3a84a8d72d43642f3fd34564e6828
SHA512 a99149caf118f5ea2f487b76c6d45fcda70a7699497664ddb914a8d5456b0e94dd346018f289018af6ccd6d01f6e927973a3944996f1153d909eaeaecb7acbfc
TLSH
T12F613FF263102DC2FB96997001F5B4683BF484DA6E071F2583806E765A09F5562F272F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1869780052046fb69afbd3d2bf2bd0a3db1c95094e07ce422e45369665afbbb7
MD5 5f6f041d824c4f5f07424ede81c80ede
SHA1 36677e982dead15d4b741d3dbc5098b1ecdbdeb4
SHA512 60969d3ed95998b251e8f854ce8856266440868405baf0852f94196862e40af0b5d8ff6c8ff86bb98cbcd928a22e8205027a986607e7aef47a359d5191d1e4b1
TLSH
T1B2419DF3C7E4866E8D0556F0AA14AE2BCE1C0915832C3C5AC9E4AE1B97E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b421cd303d651f1a7a60747f1209f1fa8112c6e7b877242744b1becdd1532759
MD5 3b0ec1410cadac1853ceeb6f97f15c65
SHA1 96ff498d43b72dd6f3140c4f284ea559328a201e
SHA512 60ae4d1907b655d26decfefeaa7c71eddd02e3c3e298b5bb667852aac92eceb75dca4372de801e8704d966d7470206f8893dcfd1b4e95c818045ff47638ae02f
SSDEEP 192:sxRxRQbXf/fEs0N5PGpq1z3mzoD8p4r/g6+WNIYG3k4GQIgDgJJ:sxRxsXf/fEs0N5PG4ray/5IW4C
TLSH
T19432D8166928993B8CCBE20DBB557F53D6FD5032A1952E48B7FC8A0C14E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 45ffb08dc85aa0f78fb34eab5c52531bdd94bcc7b5d5d8f8ecb2c894b4d7e158
MD5 f8d7ab021c84eaef9abb282b3a69ed2a
SHA1 dc8e64fad429d5b79bbf582cb835e0293e639807
SHA512 17ef78867222c0262a965dd2d5c5215f48ba3bb188582defee087ebe6a60133a8735124b30ad8374c93d6e2ba6b78905eacb1a61e3697c7710d954bf0009c69d
SSDEEP 192:sxRxRQbXf/fEs0N5P4pq1z3mzoD8p4r/g6+WNIYGlkk4GQIgDg3J:sxRxsXf/fEs0N5P44ray/5It4I
TLSH
T1BF32B7166968993B8CCBE20DBB557F53D6FD5032A1D52E58B7FC8A0C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3188d84d6bd6bb1ec25581473aa52bd868832199eb18fb6f32a23600ef5fdfd6
MD5 c4a0267b844921c3cae902ac05129667
SHA1 a10b21b69fea899accd4097635eb6f747b4dce17
SHA512 c621ff9320e9e9e019d8e651b44b478d0eeac6a3abcb04a764fcdbd6de87e18dffe9f179dac32c57cc56d342125d59aee3ad7dea1abc09c3980725db33db19b7
SSDEEP 192:sxR+RQbXf/fEs25P4pq1z3mzoD8p4r/g6+WNIYGlkk4GQIgIJ:sxR+sXf/fEs25P44ray/5It4s
TLSH
T1CA32B7166968993B8CCBE20DBB657F53D6FD5032A1D52E58B7FC8A0C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 992ca710c9db89cdd7d8bdc02382e91c67591b7dfe26f74ed83f2a588c3100c1
MD5 568b99c81e42d126bd5239e379da6660
SHA1 3d40a8049e20f2b271a0fc11954853fe2fb0ad3f
SHA512 63c60d9219c027afceea50e978afe15cba9ee22c55552a3146db62fd9faf25bda2f907e58b630d0514a887bb1d08f3ab42714dd82e40dea1b66947c44328087b
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIProwxn:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0V3
TLSH
T120B2FB3B604DCB7E9F800AAD9C197FDB6D9802C796589D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d761b510fc773128b14e55291897e66a76ba72704938cc43165aed4bf68aa234
MD5 8c80841e00b8e2051f15bb2369fc515a
SHA1 64c326995cd20cad2c8c0f543e73aeb7a3518f32
SHA512 e9aa660348b163dafd1895e2be70b9d891d485d781fb710f9cebb7b35fa27775a26d4adf011f51addcc87b78961a5c133694c2c0cd8ae38ae2bfd69e788520be
SSDEEP 768:+Aw35HeblYyrj7Hucys6BRvi82oP4/z6himo6Gb9Mw:+Aw3dH3imOz6Imodb+w
TLSH
T15DF2C030EC158E76DCA7C395F1463F526EE4623386CC2AC8E5EEAF0D06D796D4316822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d94204c591ccfe3036b50b6981a870c75cccb932ae7f8c86b191eda1d8eeaff3
MD5 5fdcf55c68957770501781b7f064e3c2
SHA1 003bc3fac0a565c64c70d0e52b5caa114776b03f
SHA512 801ade9fbf9465239f66295302c320593f45ea716d73579b0b261917adbce35cee4f7f7f453b778f6f23baaff8edf4f2fc91bb9a2695773d62c37fa4b6784547
SSDEEP 768:tkrv+4UNbdz34H5blYyrl7Hucys6BRvi82oP4/z6himo6G53kK:tkbsbJ3YW3imOz6ImodOK
TLSH
T17303BF31E8299D33DDA78284B0477A537EE4522385C86A94E6DE5B0D16CB9AD131B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d677964ab4559b5f13441ccb2f44db08b10e7cca20b5fad62b6061f85f790c64
MD5 9f85fe8e7268d5955ddf7972ba751fad
SHA1 bf2d0e283b71022e62edec7d9ce13b19a0f73122
SHA512 c7dbe2165570431a1c83c70f4ec19085401dd8b01323a22252dc017ef75e3396c9a69d35bd8288da8820a5ffbe69d0333fe4e349a9639ab8aea784a041dc82ce
SSDEEP 768:tAw34HeblYyrj7Hucys6BRvi82oP4/z6himo6Gb9Mw:tAw3YH3imOz6Imodb+w
TLSH
T150F2C030EC158E76DCA7C395F1463F526EE4623386CC6AC8E5EEAF0D06D796D4316822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 54fd3843b6e308ee4378d6d232287f74a9f9890ad1bbc1f920c49ea7553a7d65
MD5 fd3f5ee601d71efd4eb7815f19e391b1
SHA1 a1b0329b74b8bbbeb302faec5999fff2ae808bdb
SHA512 a0590d0acff97219495b4cae02db265d70d5e1fd4c24cb1a57c146108b5cc972a394b1acf02dc80f9a5cd510eea1f130193ebe2d33678d1e0b4db9080e42a4c3
SSDEEP 768:xGrv+4UNbdS354JlYyr77Hucys6BRvi82oP4/z6himo+l2bwn+h:xGbsbw35n3imOz6ImoW0w+
TLSH
T1EB03C031E4548D33DCEBC288B1467A973FF4522345C91AC0E6DE6B0E129BA5E531BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a7ad781-5962-4132-8a1a-1cde89f88cd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3a7ad781-5962-4132-8a1a-1cde89f88cd7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download