13338148d230dd5c78d1beef09ff36d9eac33de299566e5649c2713f17983b81

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2.rome.api.flipkart.com/2/data/bottomBar.html
Size 63KB
Sample260728-an2xfsvanf
SHA256 13338148d230dd5c78d1beef09ff36d9eac33de299566e5649c2713f17983b81
MD5 d967b80ecdad2bd4e4787a6ccc8cb32d
SHA1 2cb0519e6aff056f39545e04e3467b8d616bde7b
SHA512 7aaf46bb8bf75210c1b40eb49bb990b6a8e29f7aac1f2693a4c2feeb75da0e6be01270b51547afc8dd9b38bd7441e5d8f1184c5797f6d4bb082af2376bd3e10a
SSDEEP 1536:CWC/tBdtefUvKinKQ918czp6cjoQhvqh5NFImUWmWdPsJBsJG3G9d0/djvWrAUrm:Kn
TLSH
T14453632034E229B62F838197718BB841807D447BA8CDE9ADB5495F4816F97C52337FBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4216	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296717736618044"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{F757DC50-C181-46DE-BADA-CECE620A5200}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe
4588	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 4020	4588	msedge.exe	87
PID 4588 wrote to memory of 4216	4588	msedge.exe	89
PID 4588 wrote to memory of 4168	4588	msedge.exe	90
PID 4588 wrote to memory of 4168	4588	msedge.exe	90
PID 4588 wrote to memory of 4168	4588	msedge.exe	90
PID 4588 wrote to memory of 4300	4588	msedge.exe	91
PID 4588 wrote to memory of 4300	4588	msedge.exe	91
PID 4588 wrote to memory of 2548	4588	msedge.exe	92
PID 4588 wrote to memory of 4516	4588	msedge.exe	93
PID 4588 wrote to memory of 2548	4588	msedge.exe	92
PID 4588 wrote to memory of 2548	4588	msedge.exe	92
PID 4588 wrote to memory of 4516	4588	msedge.exe	93
PID 4588 wrote to memory of 4516	4588	msedge.exe	93
PID 4588 wrote to memory of 920	4588	msedge.exe	94
PID 4588 wrote to memory of 920	4588	msedge.exe	94
PID 4588 wrote to memory of 920	4588	msedge.exe	94
PID 4588 wrote to memory of 3028	4588	msedge.exe	95
PID 4588 wrote to memory of 3028	4588	msedge.exe	95
PID 4588 wrote to memory of 3028	4588	msedge.exe	95
PID 4588 wrote to memory of 3956	4588	msedge.exe	98
PID 4588 wrote to memory of 2124	4588	msedge.exe	99
PID 4588 wrote to memory of 3956	4588	msedge.exe	98
PID 4588 wrote to memory of 2124	4588	msedge.exe	99
PID 4588 wrote to memory of 3960	4588	msedge.exe	101
PID 4588 wrote to memory of 1612	4588	msedge.exe	107
PID 4588 wrote to memory of 3248	4588	msedge.exe	108
PID 4588 wrote to memory of 2580	4588	msedge.exe	109
PID 4588 wrote to memory of 4956	4588	msedge.exe	116
PID 4588 wrote to memory of 4956	4588	msedge.exe	116
PID 4588 wrote to memory of 4500	4588	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2.rome.api.flipkart.com\2\data\bottomBar.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa27afc188,0x7ffa27afc194,0x7ffa27afc1a0
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15431585103921881741,3338372589861457519,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,10361839925603112951,7822363541661956708,262144 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,14464735818004808572,8872644604235318301,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,11256270842231632756,6093810921018003006,2097152 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,9292773481788573786,2883412043246244325,2097152 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,2283076419670156549,14714519182843441518,2097152 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,12425818020888992172,17227613495796875524,2097152 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,10473033284122266891,6789009479886641099,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,11111316003135851340,1525887454310597658,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,17507441880214482339,253378921871286668,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,17507441880214482339,253378921871286668,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,364531850054130188,5975240278888218196,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,8558586082817849231,16147883632522198616,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,4584114220722721304,12600790140627276057,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,583587116257134927,16323761819411911606,524288 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5788,i,15401466261109176520,12825588880451120597,262144 --field-trial-handle=2348,i,10048085733890994357,16131153929451755605,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d3f622a128b42a1c08d225ccf8ceb4f5b0ac3c96386d645f5af9e3d1ac63dac
MD5 2d65722f12d31a0a90aaf04fbddfe800
SHA1 0061255af808b929c2aac5ae7fdd5c815a97fe9e
SHA512 5b38c902e34451b7aa1ed6335c18dd9f2252992f9aaedb7c5b1d8c203c302ec1aa03398012e5ba21e91bad80d31530f89bbbc57d5dab3b65612009892113cdd0
TLSH
T193715E94CEB2C591F3633C32D2D37129753976B94E13AF260344ED3C6A2AB2E7EA1144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587e82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587e82.TMP
Size 3KB
SHA256 1db380327215e90b486056f262d9a8a16531d56fd66c5ad417a1d02a22bf40cb
MD5 1fefe130f53a8d2d671b357265b46b63
SHA1 f522606cf5c18f0bd59ed95ad8548a11014006fa
SHA512 7e12bd7f6cdfb81119f8ff2928a1e137494955870e425beeb2bfd2e66b61dca37ffa09ee948b005ec0236a00a287602e2af36115c38f58b5d7a17a3d6ac100b9
TLSH
T16F714D94CEB2C591F3633C32D2D37129753976B94D13AF260354ED3C6A2AB2E7EA1144
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e99f35e2011271a23d92f5e6431e7d9d319e057fe53a26a66cee5a4ed69865ef
MD5 f7b4649db03e9663dd053f1e886c31c2
SHA1 57875871ba205743c2f07a9cdb6fb4b737abfe0d
SHA512 5e04405e0f5e8789fd440611cd7d9dccdfe1a990a0370c7a460c5facb36ec9b91ee952885d98c20483663be3283c173a629d1be4bc6ba510a3f4f736b84e82b7
TLSH
T139117DF7C3D585AE894156F06A24AE1BCE2D0A06831C7C25C5D4EF2793E3475D10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 98326c0bd751d1e1edaaec9d78f08f02e8397fe963261158a4f89430e1998494
MD5 b96484bc788acd473ed35e7ecd206c40
SHA1 11a72cad1ca72c1609b4fa86a20e759fdd627ce5
SHA512 1e082bd3efe547c791b220ed29801185ee99b03a4c2c9196c23f4b6fc742332586ba0e0c12c8e7353bb8cc1bdddae34c3937f714d3ce7c1807b3d429f6328385
SSDEEP 192:sxZgR8yM/jK1Ml8MkF/fXs+CAiIdpdgHW6+WNGYLzqjRGIgrJ:sxZgKMF/fXs+3LSHbGY9
TLSH
T1FA4208156B345977CCCBD209BA45BF53D6F91473E2901E48AAFCDA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ceb20b0da35af84b1697b88c61b085953784a7fb5695f460fb6347db119c8b70
MD5 11de6e3f731195bf413853fd6e2d90e4
SHA1 6634cd90590cc592d5d3a527c680d7f5c19261e3
SHA512 df136310426cf64d27613f136a4c8d9bf6fdb66ebf143d68355299629a12f0dbf75ab41b7b8ae39e4c57441f918b9690b5ac7fe422b619aab508a6d3844b0f28
SSDEEP 192:sxZgR8yM/jK1Ml8UQjkF/fXsVLAiIdpHgHW6+WNGYLFZjAtGIg5sJ:sxZgKqIF/fXsV0LAHbGhUa
TLSH
T17B52F9156A345977CCDBD209BA45BF53D6F91473D2901E48AAFCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ebb59ae48023b2eb1c57356788dd675192d10f8ac039724e6f5e13af7fa4e48f
MD5 b5b61290c16512216a7be5c1ef42421f
SHA1 68fbf7ad6e47b0b0b8906e92472f638a68b1a8d5
SHA512 7f2b4ae53b3f0926753d0abd792f180ed43f04e0be971f4513b7806179700bcd2a18430f8c61cb1b3be7ab776652d64e52f066ca717bb2aa41390d90b4f8dd9e
SSDEEP 768:CQs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNBrotF:CQs6pD1WvxzWju1jahILIsN6tF
TLSH
T17FD2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 24b48caaa825f2d8772adab7f977ccde3c1236767ad1a9959e76cfd03d2da21c
MD5 b455a204fcacfaea78cb818c5b88f048
SHA1 88f5a67cb636667518e9bd7b048adac59d0b7257
SHA512 da2392df12aae95f5f21de81d1bfaa846925063c79936c3595b203c0e36281d8ae8b88feba7dab6f847bb1f85f86d04b83342356fee80d168d3fb8d2082ed7db
SSDEEP 96:KUAAKtePuV2Ku8SKy0K3KE3SKAUeqooK52B:iixdf+ZjG
TLSH
T15CE1181232BB03033C3E6948A2558B274B86B1633118F42B7BA905B24D67E355EFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 d977e8b15b77133b403014b1bc3d924819e20c076c3bfe248ba4e0522de2c7cf
MD5 5874195c73bff86e1ea39f399110f378
SHA1 3c192a1025097fb7c60d1b1bebdc4cbf590a53fd
SHA512 36d83b0f7807ca3f8ebedd1923e3e619cc5455b365b92a58f7b0df5986e64b3f696dddf2d483e573356ef20fc175c0d8f6f41665fe4eea20c36868d0f17cf97c
SSDEEP 192:uhLsNmw2QoG07+3v10QmiU1Zmv4atb0X+FA42YyuN1LM8q99Q3Xraa2:isNmhkuuAa91AlWaBQ3x2
TLSH
T1AC422936A8786C775AB2A141F54735039EB84067DEC92F84D6ED9F0C01EF2AC234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e8c87f8d4bbcff3ad9c56fc2cc8ddc256bd8bba10e691e651bcd81bf450997f2
MD5 3c8f40ccb688ae349cfeb7616a7d7c85
SHA1 523520133dc092bb47b76a2815da1cfe16c1564b
SHA512 35f0c84d1fb1f0f5b3feba946f3c7eacd30f56788d72daf87bfa03c268eabdf4ae50d0afc13f83587162ce2bd55b0d2a4d3a077499c5220cdde17e875d805518
SSDEEP 384:3FiZcIuzsNm8TUNTUlIlKkuuAa91AlWxBQ3xG:3FQuTwgDp7bBQ3xG
TLSH
T180925C335C68997BAEF79A41F94A35138EF44077DED56A94E2DC9F0C00AB1AC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bdefe7b5c85d562faf441dbc397fd643a6d6dde21b4bca6cdbf3b515e1fee560
MD5 8d9701763d92a38a88276890b44b8026
SHA1 b20d03ce34f42baabd49dccc7788be6b42612389
SHA512 3e7a4cb8741a478f4f9b1f0b86a390cde3757b88d1c8c78aadc35fb4a2e4b2b6845a72802e62081b2cd367d39c5ff4c384a59250b2b268ffdc75b77bd75afae9
SSDEEP 192:qONc6O7+3hQmiUy+XGttb0X+FA42YlgG8AU6:qONc611Gt91AlQpU6
TLSH
T18202D8356C786CB78AF2AD46B5873B135FA5103BEDA52F84DAE81F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 532b288675dfd1809ffe763446ac182c388e06d29271f7a2014977c71185a823
MD5 6b58af3f56d91f2ba144292a8bfb46c5
SHA1 4a7c77b4a646bfacc6e587ec08f8862e69c2d0a2
SHA512 c6af505a03e6e0e88cfa766edb1bf52f6a6d89c9a9006a0ab34e498f039bbe11c00e08ed19a9eaced4824780850b8d840667437dfc04a289b8b1fc6d878f61e3
SSDEEP 192:uXm+xasuheOwQxMGsNmKQoG07+3v10QmiU1Zmv4atb0X+FA42YyuN1LM8q99Q3XI:VZcIhsNmKkuuAa91AlWaBQ3xG
TLSH
T131726D366C786D7759F6A441F58735134EF88037DBD92F84E5ED9F0C01EE5A8230A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e39e9fbe-4f6b-41be-b6a5-6fc971e1a24c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e39e9fbe-4f6b-41be-b6a5-6fc971e1a24c.tmp
Size 8KB
SHA256 351851c579a4a2f36d11e2558e2b65bcf9f681a07e3abdb6bc86fcb8c8c44a7a
MD5 d921cf5e23fe806044700cbd188958c1
SHA1 defb086d7497d8df5ad2ee2209c18f0750fc132e
SHA512 ff2e18333185f4d329b9b1dd2c06d3b295e5c7556b2932b5ee302bd56a5a7bba0c21ded7a9e03b652e073a3e06bc8ba63ae216a689306aabffee07236d1c668f
SSDEEP 192:QONH6O7+3YQmiUy6Xgttb0X+FA42YyuNIcN8q99U6:QONH66Dgt91AlW5BU6
TLSH
T172120B366C686CB75EE2A545F48735134EA5413BDE8A3F81E6EC1F0C00EF6AC234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da45f231-635d-490b-b378-120303a5cb9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\da45f231-635d-490b-b378-120303a5cb9d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 79b35b4fb6e3a6051fe3bb1ce62a134a24b5b27ff70e6220089235263a02f4cb
MD5 a5e94fbd9481022d580008db8cc4fdb0
SHA1 9630e46a83b1f9709fee90a85c5e97a0d6b19b53
SHA512 c2b0f22eeadbfa9a7e32b0b19c5b0ec1da8946c3d53a5edb819ec4a278450e1e5ab530bc4448b888325397a4caf598d4f4143132f0b1d0f1be0da395f6c8f495
TLSH
T105410798B6FA1148B3B37F5AABF6B86D447BBD772E0AD45D00010D4E0A26B40C872737
MD5 SHA1 SHA512 TLSH

Submit Download