cc8ab28116e4248c3641e1d6ec219becc0f950e65046b831a04bf34f4a834d4d

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2.rome.api.flipkart.com/2/notification/unreadCount.html
Size 2KB
Sample260728-an2xfsvanf
SHA256 cc8ab28116e4248c3641e1d6ec219becc0f950e65046b831a04bf34f4a834d4d
MD5 d767cd3d40b2c3ae756cc3abeda8954a
SHA1 38dd937b970a9b5f67a95116bcbc9107e0705e6a
SHA512 ed7205189011c3f09d95b38364506bac7a88f6c0dc5381988d7168628ad1596419adc93c5c9cb328805f099e001d0e9ef3a2af944a1ce1bfbbe723f9d30ad296
TLSH
T1C34182DB01000EDDFFD6A647A80ABC48873D015BE94C6635D4CE7F841C29B25EB39506
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3348	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296717758422808"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{029DF2FD-8A82-47EF-9FB9-4E74E0C38F15}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4236 wrote to memory of 3956	4236	msedge.exe	85
PID 4236 wrote to memory of 3348	4236	msedge.exe	86
PID 4236 wrote to memory of 1488	4236	msedge.exe	88
PID 4236 wrote to memory of 1488	4236	msedge.exe	88
PID 4236 wrote to memory of 1488	4236	msedge.exe	88
PID 4236 wrote to memory of 4384	4236	msedge.exe	89
PID 4236 wrote to memory of 4384	4236	msedge.exe	89
PID 4236 wrote to memory of 4404	4236	msedge.exe	90
PID 4236 wrote to memory of 4404	4236	msedge.exe	90
PID 4236 wrote to memory of 4404	4236	msedge.exe	90
PID 4236 wrote to memory of 4688	4236	msedge.exe	91
PID 4236 wrote to memory of 4688	4236	msedge.exe	91
PID 4236 wrote to memory of 4688	4236	msedge.exe	91
PID 4236 wrote to memory of 4392	4236	msedge.exe	92
PID 4236 wrote to memory of 4392	4236	msedge.exe	92
PID 4236 wrote to memory of 4392	4236	msedge.exe	92
PID 4236 wrote to memory of 4620	4236	msedge.exe	93
PID 4236 wrote to memory of 4620	4236	msedge.exe	93
PID 4236 wrote to memory of 4620	4236	msedge.exe	93
PID 4236 wrote to memory of 2296	4236	msedge.exe	96
PID 4236 wrote to memory of 2296	4236	msedge.exe	96
PID 4236 wrote to memory of 5112	4236	msedge.exe	97
PID 4236 wrote to memory of 5112	4236	msedge.exe	97
PID 4236 wrote to memory of 4680	4236	msedge.exe	99
PID 4236 wrote to memory of 448	4236	msedge.exe	105
PID 4236 wrote to memory of 1824	4236	msedge.exe	106
PID 4236 wrote to memory of 3332	4236	msedge.exe	107
PID 4236 wrote to memory of 1508	4236	msedge.exe	111
PID 4236 wrote to memory of 1508	4236	msedge.exe	111
PID 4236 wrote to memory of 2248	4236	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2.rome.api.flipkart.com\2\notification\unreadCount.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffa415bc188,0x7ffa415bc194,0x7ffa415bc1a0
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,16710798333640372684,17964924284106389702,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8752506761963773720,14320334538328651469,262144 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,16007955113375298507,13688487581465836216,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,10740314338912325460,15654458736528184625,2097152 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,12545457209528593385,308764235984445682,2097152 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,4166819566685800137,11253135550582881617,2097152 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,10832557976897760341,13209609967950105702,2097152 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,6642177349598884107,11394183551086444395,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,15290941624560366053,10271453816814277991,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,5398162309904870346,13599877142122101800,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,5398162309904870346,13599877142122101800,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,335440648064775618,7885310832368416951,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,11648225718355709922,13316519432865238573,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,12058628125512740472,1755980716682805725,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,13466928772476924798,6281326299096041339,524288 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,9582542996215660041,13690462498749647263,262144 --field-trial-handle=2140,i,16781208449810529842,6048645341250559807,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2248

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8fc210f63deed0d06b85da7cc46e75f0c080bc5b34108b0569cf8d2af8dec5e1
MD5 a6fbf38db48812fe45f72abe6617e6f3
SHA1 b8015c2facc89ceb48767e6f4f8662238598660f
SHA512 9dfc292e329ab5e9ad7b0197284c8b6091c8fe6269bf44a4c9f4253cfc2c7d10159452a65e39cb5194daa93669fd453de662165f7f14e133edb2429e339eea93
TLSH
T187614F08015F6D6EE32CADF2F3D1525F747D418A896B0ECB204088BC1506BDDC179DD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585918.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585918.TMP
Size 3KB
SHA256 98b3ee7a1d95b1ec231ba00cbbbd46616d9f2a59e34dcbf99186300f79ab68c3
MD5 3360a7c28f007abd91463433e9e96355
SHA1 9881d3ca17dae7a4bed4e6049c03cfb90b2e5a60
SHA512 af590f825afb56c42348c1442eb4a6346d0b8b81b7aa791a0cf6382cfe0942d889cce1c684ee0502350c3b430bafe7da5029367138de9354900c19d13c965a62
TLSH
T110614D08019F6D6EE32CADF2F7D1525F747D818A89AB0ECB200088BC1906BDDC679DD8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 8eabb3e1d50d244e1325d33f949499624f6a32dc3fb71448e1b041db3a5731ea
MD5 9aaf63bfe492baf9abff360208d8b904
SHA1 df9dd8a532ba08c99170dd1359a99f305bfe288d
SHA512 1bdd47e66623f260cef9d90b28b9af400e1dc7479bca4aeee2cecf8c32ae5ed80380dc323cf7bea0938f534aa6d1e40c138516b0a951b33ece827d16af3f4f4c
TLSH
T14A115BF7C3D585AE890156F06A24AE1BCE2D0906822C7C19C9D4EF2B93E3065D10255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 da91be4ebb4859b37f1ef1a9399151b32d7ef419a49f6ced1412b6311b54b150
MD5 88469008053cf70c6f22a9db3eca366a
SHA1 e86e4ed0bc516e576962df04c3c84a1ffbc0fffc
SHA512 0eacfcd1b5e5f2b49e76c3e1beee2acb19886c557f757a690a146aa3e5cd245d71fcead1698d665afa0a772b77c71523dc011964eeb43fc1b78d63cc888bf6c1
SSDEEP 192:sxZ4R+yM/jK1Ml8MksH/fOslf9QtKIdpdgHW6+WNGY4wVohIgrJ:sxZ4cMsH/fOslVQtDiHbGz9
TLSH
T16642D8166A345977CCDBD209FA55BF53D6F91462E2900E48A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 10a282c3302c008cd48fa40888156e2714ec8f615778808ddedc25676a625dec
MD5 233d45d6bc6112bd4aa71d6d2c0e3bf8
SHA1 73e321756ed8f2e7e09179c942b4c8ec17228937
SHA512 f37bac0e1278d06a1bf1d8fb3ee6feeb70fbd43b5f971a5aa054a8ebb1ba0b0ae44500d711314f970a13c4620fbbb2ee7e59f41c0eac3254351bec865a5ff361
SSDEEP 192:sxZ4R+yM/jK1Ml8UQsksH/fOsA09QtKIdpHgHW6+WNGY4oaohIg5qTJ:sxZ4cq3sH/fOsAsQtDAHbGkwF
TLSH
T1F252D8166A385977CCDBD209FA51BF53D6F9147292901E48B9FCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 799e434beb7d3382fb906eb5d69e0f76c8ee4a0a79d34aeb976e1552e6a93026
MD5 63e32e59df1bcfbd91ab14690035631c
SHA1 0a8f59282dbef913b47149ece1663f38da7f6859
SHA512 0b13d9f16be7085bcd2ae323d681c97e6c72a2f4ce60f3440a0e03326ce62c4d4c75faf84d013cca81b93aec1a8483e7fa3b0f12524e0795bf9ed73f2298b06e
SSDEEP 768:hp8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdKroLkbUn/:hp8iJPNWvx76ru1jahALocdhcU/
TLSH
T1FFD2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EA512699B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b1adacd2e46f2a0ee8196ef67d08bc8bc580a012736ad88f32426472898b8107
MD5 dd3876a463f122ccd4b1c18b6c28730d
SHA1 6e015005dc191bcfcaed0cb76cf16e077ad47a28
SHA512 583ddbe0cd0a41fecad71324a6801423f40ae0414ac4f1d335cd68a247bc1911882421a59d1dd0f32e5d86d956b182aef7cf7b60a437463fc7a5b4ec5152f3e8
SSDEEP 24:KdDf6ZQaVdJ5J49Z+EIjFJKiWhaLJ1EDZSmLMO8Z6yXYRfcHuaLdzfn43b++Ij7K:Kc0I7KVScvyBOIXKnqAzhINK6IgfyZt
TLSH
T18B91830171BB52532CFE2918A2D1A657C782B0E77508E46B7BA810B64F67F200DFD9EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a64d1ff5b522492de7559e4e576570067612fa16fcc2e7648d32ed36f93e8a4b
MD5 8dd3267956c57e450dbc1bee776f311d
SHA1 e9a86b8cdb50ce8218df3c90f10331de5fe78cff
SHA512 7314271dd9686230632306d1349ca9bdd1f3c642af5f424e9e0dfc6071f32087696802efa35580f7cc49675adc27a2a8fed3450aeafe7a13ba5895ff76395d09
SSDEEP 192:u2LsN8jQhCNmbxQmiU1wZ+t4k03cmxmFZLIUq4U8:rsN8jc9jzikmK++U8
TLSH
T14D3229326878AC3B5DE3A651F0473A135FB85067DBC93F98E6ED170C08DB298530B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 9e324c4bdb29c09a92fd63259572c0581354f2a49c12ed5c123870a2875c4e4b
MD5 0bb090b0844cfaab3a5460537887e536
SHA1 c270935bb62d6b28fa57aa44ff7440a4cc4954aa
SHA512 ab02f54203f3cf30a284b6802671997e51dae4cf5c0eb091029de710a0846fb68da074a2eb15acc759b4cadb69286e360895495bd527e2e152a93f21bc4e4081
SSDEEP 384:2FiZcIvzsN08TUNTUlIlpc9jzikmK7+OObjI9G6w7YJ:2FQLdwgkJ9+29M2
TLSH
T1B9A28C335C64893AAEB79A52F58A3A179EF89077DBD8AF84F6DD9B0C049709C0307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 21b7e223bba3b0bba488f91703d69b096d272d6c42f672694f77c6b78395e7f1
MD5 ec9ee6e4deb5cc5d1837ad96ed682267
SHA1 5e8a1fa893596183bf58d658e7db73a4c6e3f558
SHA512 d950ea2a35f91c136ab471e646675c99f4fced7af45e83c99aeeea667a9effd2b8299e0af33e5e341415a63e3e1049fcd04fecfc8daec2cf1bba9e813d4268bf
SSDEEP 96:ZqONkhQsjpfmUTmDK5ih/cIPURHl8h4otop5P5DMBhPwivh50xy0SFYKHAxEYe3I:gONp6kDfQmiUyhAZ903cmxQi1o8U6
TLSH
T1790209356C786CBB9EA3AE4AF4477B175FA9212BEA912F84D9E41B1C44C764C1303836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 fae2f10c3c60be8f12a3d2787cec37a91a16388564ac0b308f2b418500fdb3f9
MD5 96f27f8f188cea1346ef439a31dc219c
SHA1 56590e764a6a50e89ca048fd849c025eb84925a6
SHA512 2e6696d9d7e725863834800a35ff69a03250d4e9d17f1784b3e3bc5085967088376116bcdc4fbb8b1b8a000d06c87b1af52e182fb609800e8bb5f54eeeea9346
SSDEEP 192:uYm+xasuheOwQxMGsN8pQhCNmbxQmiU1wZ+t4k03cmxmFZLIUq4OOZljYRHKKGny:iZcIhsN8pc9jzikmK++OObjI9G6w7YJ
TLSH
T1B4929D31AC745D36ADA3A552F4863A175EF8907BD7CC2F88E5EDA70C09DA49C4307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e32e70275e0d1c67a9d30aea2d9e0087658c6b404391a55c1b37b051ddd34dcc
MD5 0d44edd4ff060ccf997e871c34e10bd5
SHA1 c926557434d44cac8c009a1a3890a10067709859
SHA512 0aaba52879fbfa265a8dadde50727a91b9bb623dd7f62a83d527e523aae43ef6b570d1c3b124689364ff35a1a18f3a00f3de02f1117eb36b95eda0c5795a83ad
SSDEEP 96:NqONklQsjpfmUTtK5ih/cIPURHl8h4otop5PTDMBUPwivh50xy0SFYKHAxEYe3Db:kONF6kQQmiUyfA+903cmxmFFcRUq4U6
TLSH
T163123932A878A87B9DE3A981F44336134FA9512BDF897FD4E5DC2A1C05DB68C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a8d0177-cc77-41d7-ac08-f3bbc7a629a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1a8d0177-cc77-41d7-ac08-f3bbc7a629a5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e876d54444b9ff7133a459121ea138b2a84bd1d3eb9c2c179359b3c8c19091c7
MD5 ca430ba13a527869d4b9ada145bb0d00
SHA1 65b710bc7ae4e2b14290a99f5e00685e951c1f16
SHA512 3d946e5daf35c6f8f49086396f9644d9d0b39fbc2041a3acff7acdead27f4aa3c23aea01d29e68156c92b0f27810ce786a5d88aa539618a0dd8535d1d4e44a1c
TLSH
T16341EB59AAFA0148B3B76F1AAFF6A56D087A7D772E0BD45D00110D4E0A23B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download