fc82419f9a90431f2de61b880c70f2abfde225b107445e6723c87412e45e5d75

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2.rome.api.flipkart.com/4/user/state.html
Size 24KB
Sample260728-an2xfsvanf
SHA256 fc82419f9a90431f2de61b880c70f2abfde225b107445e6723c87412e45e5d75
MD5 6f98cec1f050af8b4b8cd2251f7af4d1
SHA1 fdc62dfb31c27320155a50fea3d34995e1389ca3
SHA512 a4dda3a34becf87f1d6fc3a54dca378c834233d6b51b5718be2978bd9e6d1f842897c9873b6e51bd4e8f8a9eba298a5f86bf001bf3e739f92f7e266d5635b5ef
SSDEEP 768:FPcJ+TcFutGk6kqkeukoknkokxkmJKmk3XVjmkskQkAknk9kskgkokDk2kakUkPE:dcytHJK5XVjbafq
TLSH
T18EB283D228310D791EC2C936590AAB1185A82D97CB2E74F7ACD8DE4C18CBADC36717DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4572	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296717862500694"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{C692053C-409F-4337-A10D-F80807F4BE2F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3624	msedge.exe
3624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe
848	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 848 wrote to memory of 976	848	msedge.exe	85
PID 848 wrote to memory of 4572	848	msedge.exe	86
PID 848 wrote to memory of 1804	848	msedge.exe	87
PID 848 wrote to memory of 1804	848	msedge.exe	87
PID 848 wrote to memory of 1804	848	msedge.exe	87
PID 848 wrote to memory of 3456	848	msedge.exe	89
PID 848 wrote to memory of 3456	848	msedge.exe	89
PID 848 wrote to memory of 1272	848	msedge.exe	90
PID 848 wrote to memory of 1272	848	msedge.exe	90
PID 848 wrote to memory of 1272	848	msedge.exe	90
PID 848 wrote to memory of 3676	848	msedge.exe	91
PID 848 wrote to memory of 3676	848	msedge.exe	91
PID 848 wrote to memory of 3676	848	msedge.exe	91
PID 848 wrote to memory of 4972	848	msedge.exe	92
PID 848 wrote to memory of 4972	848	msedge.exe	92
PID 848 wrote to memory of 4972	848	msedge.exe	92
PID 848 wrote to memory of 2244	848	msedge.exe	93
PID 848 wrote to memory of 2244	848	msedge.exe	93
PID 848 wrote to memory of 2244	848	msedge.exe	93
PID 848 wrote to memory of 2868	848	msedge.exe	97
PID 848 wrote to memory of 4672	848	msedge.exe	98
PID 848 wrote to memory of 2868	848	msedge.exe	97
PID 848 wrote to memory of 4672	848	msedge.exe	98
PID 848 wrote to memory of 4568	848	msedge.exe	100
PID 848 wrote to memory of 3464	848	msedge.exe	107
PID 848 wrote to memory of 1952	848	msedge.exe	108
PID 848 wrote to memory of 2920	848	msedge.exe	109
PID 848 wrote to memory of 5020	848	msedge.exe	119
PID 848 wrote to memory of 5020	848	msedge.exe	119
PID 848 wrote to memory of 512	848	msedge.exe	120
PID 848 wrote to memory of 512	848	msedge.exe	120
PID 848 wrote to memory of 3624	848	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2.rome.api.flipkart.com\4\user\state.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9095ac188,0x7ff9095ac194,0x7ff9095ac1a0
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,4288613307787289742,7324633420353300101,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,15788898727407310099,16671481527076413215,262144 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,3068898881360237342,16113663711801235613,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,644485783308976156,4578035768528858400,2097152 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,12671188566104823211,15099188245660053079,2097152 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,5843485030880286096,5127940249689037543,2097152 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,11238768333971378038,4200643161281234012,2097152 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,14937704662909488224,2660955121974797467,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,15114632781578409981,10482343708753780694,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,656683507888549206,3575691349099845873,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,656683507888549206,3575691349099845873,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,1099339279896128121,3295780769208065220,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,3097819310194735150,1696137759311077993,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,50660676449339325,17527237523079277648,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,7802218975087886940,111876064797577018,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,11465602068980525541,16593976318556333040,524288 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6208,i,18003189170878879209,5655577492023495390,262144 --field-trial-handle=2200,i,16969164659911153028,15163741827172598934,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3624

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 25e41f9ee28d8fadffbc2a7e9752cd74e0e8c7b676482124719973c4fbb6e5f2
MD5 068ef32cef5570f4676ce5e3e9c9597a
SHA1 ce6451e6b56fbd05745abe011ffa06755b7b4285
SHA512 29efaab3c10d7d6bb48ffbb09b362db61de4f825ce0f812ff53e6b7cf17e4d2080bfbe3d1f885b4884ce197f3f07a99a89f394a20f00a0514b6ddcf0f61bc083
TLSH
T14F714C360087DCAEE71D00706CC181F334718DEAF9471E9B91BC2EB41A16B63B22B588
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a0a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a0a0.TMP
Size 3KB
SHA256 e03c49474b9fd9d87241c02b1f9207cd543f7a64a0a2790b3d209c3ac96706c8
MD5 2bda192cc1e78d49920aaa4e00c74dc9
SHA1 23c96c2d7f101fde07c530808a7c6affa32427b7
SHA512 f48a8dba2a241fd595de4957e8a65426e4b0df5868f085da67af8d72f13f9d2921be846e0b4ec5b72c6709423a2b697029125783b7cc8e4eef36ca2e14c0ff01
TLSH
T174714C361087DCAEE71D00706CD181F334B18DEAFD475E9B91BC2EB41A16B63B22B588
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1f834a7e96aedba643880a246b871a60dd0a9cdac46a3919a06fa71bc612a59c
MD5 abd5e4217cf7e0c8a3ec8dc5154dc81f
SHA1 d98fdec2b5bb4875da73933bf46642bfadf54fbe
SHA512 b78c6177402659ae5364c2162df01e077767efe334486c1eb33db182aae28e3bdf7f056b650e69ff33401494751aa91717cfd0e8ae287bc8f946408915f158b7
TLSH
T1F9117DF7C3D585AE891156F06A24AE1BCE2D0905832C7C19C9D4EF2793E3075E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c171c9d2-d223-48f1-8c4c-97a20e274656.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c171c9d2-d223-48f1-8c4c-97a20e274656.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 86fa508e6609d97cae2f8a0f3083bf67cf02e36460d8c2fc005779939f96c81d
MD5 bb546a0b6891ec0734740d616fe0176b
SHA1 ff0460765791474d453a7e71344cd38d83c3a902
SHA512 1c6e26370d6215c5f4bd79d0bab6e3e5ca216dbf18d6003a5f42e1c6a834a8f71fa73e54ce8adf541ffc5d509b712d0d44e475ffe4243f122ce2aad01dd00501
SSDEEP 192:sxZzRHkk/f+soShlOtIdpdDHW6+WNGYzQ/K2BIgrJ:sxZzOk/f+s9hVhHbGT9
TLSH
T10522A6566E28A57B8CC7D20DBB15BF53E6FD503291951E48BAFC861C08E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8c22d8dc7b0609e30b4177c98e3278b5eb0ee214c1d696eb93c1103270d569b3
MD5 725344b20eb224ad9e55198f2a19d51a
SHA1 628d3c244aa228de027aabb9427fcca29895617c
SHA512 d402eab0e4b02913b9eb9d67c21c9a9193c7190bf523ebf80d4ae177bf0fc08742560f85de07d8e40e05de55d210d0131b1b7284235aa1f6e12c522d604d45fd
SSDEEP 192:sxZzRHkk/f+shS3lOtIdpdDHW6+WNGYzgVK2BIg5aJ:sxZzOk/f+s03VhHbGpc
TLSH
T1F822A6566E28A97B8CC7E209BB15BF53E6FD503291951E48B6FC861C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3ac3996bf62b6086cc817e537a62c5a46cddaadff9cba2a06406c0cff5e8985b
MD5 3e19399a411ff5b0aa7607483f68ff80
SHA1 3bd468bfcb296c7558e7a23e8c8fa10416c9abe0
SHA512 b4be8f43212c901336c03f0871d44bc219063eec0a89886436d3025b52b35f08c445ce2a35b5dac91550ccbc268431dd0ec2d4fa646ea4dba565fd65591d2f2c
SSDEEP 192:sxZzRHkk/f+shShlOtIdpdDHW6+WNGYzQ/K2BIg54J:sxZzOk/f+s0hVhHbGTu
TLSH
T12322A5566E28A57B8CC7D209BB15BF53E6FD503291911E48B6FC861C08E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a157dff45f88956e1cb535e300fcec2e73d5e25cb8293fb2f7821bb14e8a6ee2
MD5 3a90cdadca5e3978982370ea257450ea
SHA1 81ddc01457d1001638a3b4d45cb3ffae48e9dc98
SHA512 9c108e582d258ea98b1281ed37e72387fe161cd3b5e2567c9a4e99fd811f305d27cccc2f4945850cf41c89ab3897ee524b4067dc48a6e6c3790f8281a9c0b1ae
SSDEEP 768:7fk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBQroyhYf:7fk7u70WvqiEau1jai5LA3B7pf
TLSH
T111C2E93B740CCB7E4FC01E9DAC566F972E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ea8ce10e3b4f8526f49ccad22a4d305789114af2e50551807ff11c2e7987dc4f
MD5 afb621320a6764330068316d368d510b
SHA1 46e72c30b21a539fd975dde4fe41a3c172893089
SHA512 c1cf3935badad394f59fe9902b8b28d83c7725bb79557e3829b00f39e19fb1f4820ea966a16b692e3d72f0a19682d4ddb4300e63777d90abe5d9fb18355d6797
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTvNIZKWcMerI5KoY8byZAI3Kh+l:KIbCKcvNSKWcRryKoYCqA4Kh+l
TLSH
T18991D805357B120138BE2C4CA199E5668FC2B4533158A4AFBFF804728E67E525EFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f888eed640cc27dbe860a106d3540d1cc6709fb738737ddb01570aa55f8db6de
MD5 285ab3c3890556f45a83f253f5c5f2aa
SHA1 f54681ac9133419b960cc3dcf33d512ec43f73b6
SHA512 23b9db220b9a36114d354d9609302354f32bb85c64185bfa98daf301958bed50e2219c6e8eb433e920645d289aa4e6dbd9cef070150ba209dfc6e79c85591bd2
SSDEEP 384:MZcIhsNzjfebms097LCFXsOObjI9G6w7BN:ahger0Nu829MX
TLSH
T147929D36EC755D3A9AA3A511F4CA36135EF8817BE3C81F44F5ECAB0C06EB59C0306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c382dac436af8ad0f89086e8cff6a7ea70b151da377caa84ea392c4ecddd44d1
MD5 c8a9e182b5a2efb394c3c290b2f2a4c2
SHA1 0be8639809b5037570ee30629a9e5256b059f26f
SHA512 852763f73e12eb337f7145cc7545e06d5cf01bf0715f6273a2dc7c7d8d9ccb509af3278f886e19d8f811e9bd2e86fdb3513444013d18c65d245977ae5bea17b3
SSDEEP 192:MONx64BAQmiUyP1MW5GBPKIOCHruaDejU6:MONx6eAQWW8LL0U6
TLSH
T13E02FB39AC796C7B9EA2AD45F88637175FA8113BF6945B44EAE85B1C00D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 54a4ac63de1f8aaeecfa0d5730f7be6b3925839abaef6a653e762ad802db13de
MD5 75d39c26410cf56d148e6542c4a97337
SHA1 2e97bbc4d8a30cbc0a0d800afa3026c617d45fd1
SHA512 09eed6d77d4dc58265d2db988319116db872e153bf449f3f435c49b60a7423ec8a7b329804042ae68c18fbd5fdcc6d3a379dccca863f0551b3d704359a18c0e1
SSDEEP 192:+ONby64B5QmiUyqMN85GBPKIOCHrWTPNTWwXbql5U6:+ON26eXoC8LCfXsU6
TLSH
T1AA120B3AACA5AD3F5E92A550F4CA36035FA8413BF7846B40F6EC6B1C01EF65C6306917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3d2950015c6216db62bc608d880b7e71d42506ca175a42f6ec32ccbd9ace5032
MD5 bae29153cabcc917f99fa6e3dd93db1a
SHA1 2434a138c7ac0218e6a321d88e2370cc7fb54a9f
SHA512 a7b96d9a894c2fd1a0ff7c716343a693b40b010a0d6d8deb9d8e8277536a7666b53cf3b6d1584b348003db7e71dd46447c1f85c773cc619d5a3b97c4042c4d82
SSDEEP 384:QZcIhsNzWfebms097LCFXsOObjI9G6w7BN:uh/er0Nu829MX
TLSH
T138929D36EC755D3A9AA3A511F48A36135EF8917BE3C81F44F6ECEB0C06EB59C0306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3b7b2ca9689b57170ef8833de40dd7526b6ca7bb791ac807266481c338cf152a
MD5 443f29316a10b9faff48233b60d2ac6f
SHA1 4dced6ebf57908fe41d7a8e0828ede5017b46555
SHA512 6c7271ca1f3bbd42e1c44e9b973074d0dccdc7ebd1170f49740518397ca9db4d5f826e45593ee2312f3c8e3c6989d82928e76a35af8b15b55296b2eaeac20539
SSDEEP 384:eZcIezsNzWfebms097LCUXsOObjI9G6w7BN:c+/er0NJ829MX
TLSH
T164929E36EC759D3B9AA3A511F48A36135EF8917BE3C82F44F5ECAB0C05EB55C030681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8ddd77f5c2a04ceac5a6817ccc3c32c217e90dffdf1bd20ff90598323a31f3b7
MD5 6e9e757af952050abfc8a646c5dae886
SHA1 31218ca48be9881fb43c4eb0dd779550f6608e5a
SHA512 e2c1fb8ee00d1a46b4ebe4836acf80a3c6c20b1b52aa841047d66feb9fcdfb3fb059a48ae689540f38d93e24ab40bdfaf8a15840759e171914d5d9f8d71bbb11
TLSH
T169411599BAF91149B3B36E5AABF6A97D487BBC372A06D45D00010D4E0A33F40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download