f8ee4e3f0102c732f4ad28ea0e2c0ff86544cc6699b29228abd29f42d033b59c

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
slmesp-vsl9-yt/index.html
Size 6KB
Sample260729-anp8nada28
SHA256 f8ee4e3f0102c732f4ad28ea0e2c0ff86544cc6699b29228abd29f42d033b59c
MD5 036532147e4505a65114117878b14376
SHA1 6e208ab39209a75ff9b3e32c3f7bb91a5c92b90b
SHA512 14374a2bd3d72f815839566cfb4792ae1c3c390cc340d90ecaaf02c055ffcaf181c7d08d12f27f73b1e03fce9ba24a5941599b852b107ecf2c26594bec97092a
SSDEEP 96:XHKxWZzGanF2CZIAowZhrWOpTLVOt8L6RUhqCuL6RUhqCuL6RUhqCuL6RUhqC5:3KxofI56ZhLmq0zCS0zCS0zCS0zC5
TLSH
T120D164718880585C9173C255ABB2FB1AEF2BA167574A6050379E6B734FB132FC42325F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
65	api.ipify.org
55	api.ipify.org
56	api.ipify.org

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5504	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297584815576118"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{9E79BF13-71EA-43B7-AE4D-BDE55258D248}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 6112 wrote to memory of 4152	6112	msedge.exe	88
PID 6112 wrote to memory of 5504	6112	msedge.exe	90
PID 6112 wrote to memory of 2464	6112	msedge.exe	91
PID 6112 wrote to memory of 2464	6112	msedge.exe	91
PID 6112 wrote to memory of 2464	6112	msedge.exe	91
PID 6112 wrote to memory of 456	6112	msedge.exe	92
PID 6112 wrote to memory of 456	6112	msedge.exe	92
PID 6112 wrote to memory of 5484	6112	msedge.exe	94
PID 6112 wrote to memory of 5484	6112	msedge.exe	94
PID 6112 wrote to memory of 4404	6112	msedge.exe	95
PID 6112 wrote to memory of 5484	6112	msedge.exe	94
PID 6112 wrote to memory of 4404	6112	msedge.exe	95
PID 6112 wrote to memory of 4404	6112	msedge.exe	95
PID 6112 wrote to memory of 4328	6112	msedge.exe	96
PID 6112 wrote to memory of 4972	6112	msedge.exe	97
PID 6112 wrote to memory of 4328	6112	msedge.exe	96
PID 6112 wrote to memory of 4328	6112	msedge.exe	96
PID 6112 wrote to memory of 4972	6112	msedge.exe	97
PID 6112 wrote to memory of 4972	6112	msedge.exe	97
PID 6112 wrote to memory of 5804	6112	msedge.exe	99
PID 6112 wrote to memory of 5804	6112	msedge.exe	99
PID 6112 wrote to memory of 5804	6112	msedge.exe	99
PID 6112 wrote to memory of 4628	6112	msedge.exe	100
PID 6112 wrote to memory of 4628	6112	msedge.exe	100
PID 6112 wrote to memory of 4228	6112	msedge.exe	101
PID 6112 wrote to memory of 4228	6112	msedge.exe	101
PID 6112 wrote to memory of 1040	6112	msedge.exe	103
PID 6112 wrote to memory of 4920	6112	msedge.exe	107
PID 6112 wrote to memory of 1072	6112	msedge.exe	108
PID 6112 wrote to memory of 3928	6112	msedge.exe	109
PID 6112 wrote to memory of 2128	6112	msedge.exe	110
PID 6112 wrote to memory of 2128	6112	msedge.exe	110
PID 6112 wrote to memory of 1948	6112	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\slmesp-vsl9-yt\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffbb0e1c188,0x7ffbb0e1c194,0x7ffbb0e1c1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,10042488914621392116,6114669639202768816,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,11943119424190967462,8260789585280224922,262144 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,14335509990580596587,13630745468569900760,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:13
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,16367629821283435303,4500963247326896783,2097152 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,1527616168766344348,4153072048310564135,2097152 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,12804494039939309677,8520581024278868514,2097152 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,1735636684315079886,1143173421755527780,2097152 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:9
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5376,i,10831354762028904879,9925572324071220025,2097152 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,5177016281100378441,16367261301289197084,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,5525001768546610421,15233749791522592582,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,16772299494616093981,12403033981034947163,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,16772299494616093981,12403033981034947163,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,9505105915986978103,17772125202632595582,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,5895257418671884889,9269592079675261677,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:14
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,15642947270474158043,13694888295914459210,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,714649148723266791,4390755865375369043,524288 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7140,i,2519936577666676994,8345044807243143633,262144 --field-trial-handle=2528,i,713898378291156072,11021737348795658371,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 290867558c796b6fe34022a870d7cbc7046bbb12f45445d0145da3883a1e4e0c
MD5 b6ba9e25bff8905e6463380f188cfcb8
SHA1 901c5ee78757f8ec44536ed84fb1791a98cbe706
SHA512 46be1f99c26395c29d345481f865e400fd604c84a92dbdc5dc0c6ea4c52c46e03590a8991e25049311ff64838defd6f7dc03771a1662d39d5797dd7896d8a9e6
TLSH
T133616FBE432D05E2FB2849F249E1945A3AF4C45706271ED07C805FF298FAF2AB5E1123
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a0bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a0bb.TMP
Size 3KB
SHA256 1996da838df99501cccae3ea63d8c8f9815838b3990aaef3c3f3c3494a0328ad
MD5 32bda80b7ec1c8b6b591ae0408b3e764
SHA1 f540df4365f0313e1e2de74849d268e1bbc6c7c5
SHA512 9a31e2098c9a02a09b4e1dbac3f6f7280d79bfa54b55ac5b688f9d19fb7c90e7a8d9c6a1e88befafc70c308210720f6054567053b634ebb937bcbb71536dcfa9
TLSH
T1BE61607E432D05E2FB2845F249E1945A39F4C05706271ED17C801FF294F6F2A75E1113
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f81da9bd55d96b008c56387102de3b9a63da64c943d1d6b5150d9c7393542ac8
MD5 cf88f2f411afa76063cfaff8df3f2080
SHA1 67bb03366cc449c7b7fbf56a4e5438ac3a4458e9
SHA512 0b08d7f2ce9a0e507a85000ee40fd05ebcc41fa38621ed27e39f39e0c9b5f62cbb7b50e5e9a67ebbbae76e06dff0c6e0f065a08064160f83820e6082a4cb2b22
SSDEEP 48:YALlN2OgihNgeAsJbRsJgfoKsJ2gmgCCZxJzs6dzsQ0zEsMZbs052ZHCKCsFCKsx:DgOlDfp5ziZZfGzgZB52ZHCK3kJLwBwV
TLSH
T192919AFBC3E4877E891192F0AA296E2BCD1D055B432C3C5689F4AE1B63F24B1D10165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e589b0236a787891a207bfc42426cce1c57aba266acdc6651034d454b3d57e2d
MD5 7baa5c20cc53ae031988384adb0e9f50
SHA1 2f1fc75f9c0b5657d15fc87201afac0cf41767c4
SHA512 c15a4b1ccb10e493d02c19f83225133ddcfea3aded75b8009b8e0b3af7aee30ceba607f21175a8b719a87187f2f743354acbd25b5ef30e5bccddac8f7b8f25b9
SSDEEP 192:sxRIRfyM/jK1Ml8wbX/fLsnDiprQ5TzoA8p4j/g6+WNIYn83hhGQIgDZJ:sxRI9lX/fLsnDiLu/5ITRbX
TLSH
T19852D915AA38597B8CDBD20DFA557F53D6F81573E2941E44AAFC8B0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 cf9da7a80cb4654868dff476f19e81d3e9d0b5743af9f951c4c0cf2d813f7a20
MD5 c12507fede80601779557d3d3e1f75d0
SHA1 eab6f77e894079378ad4cfb814d7094828496b37
SHA512 0a0011ef2d3e55b8a4223c7a1ac79c46960948af41a73e2a1107ae4368993f0801295bf07f4252ce38c1d50f7bcbf79caaed11275e799294ebc53fc819683727
SSDEEP 192:sxR3RfyM/jK1Ml8wbX/fLs+DiprQ5TzoA8p4j/g6+WNIYn83hhGQIgIJ:sxR39lX/fLs+DiLu/5ITRbs
TLSH
T12A52C8166A38997B8CDBD20DFA557F53D6F81573A2941E44AAFC8B0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 190d186266a88c9ebab3b8dd1dca8f0a5c7c9fc7ac2b8b7c89698db5417fa771
MD5 b537142f0ce82ace6780f5f736dfd99d
SHA1 52472fc213b0cc97ede099775c374469087067a3
SHA512 c2a74fcbc15279454282281f05f6c3a585dd8c6f953b90625b58e53320c00e6fb7644e8f105668b421ecb17587bce4abfa60ae7e64a7f68c4fa205c66d154a0f
SSDEEP 192:sxRIRfyM/jK1Ml8UQFbX/fLsnDRprQ5TzoA8pej/g6+WNIYn8whhGQIgD/J:sxRI9q9X/fLsnDRLU/5ITmbV
TLSH
T1C962C816AA3859778CDBD20DFA51BF53D6F85573A2941E44AAFC8B0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d7757a729136896c1ba1bad62e41feb6b156c18d849a84f844da93cf1a45075d
MD5 52a23388cdd437fa528e56b72c6752bc
SHA1 d2842185869ca7cc92646d47bc10ceac05d1b9c9
SHA512 623891ccab34e6f76cc017cca0e5a15ee95eb749fa64ea5a7a66cee6de378307d6d134779c0c455602282ecaa3685fc2e6406dda6c7984015d53f1f9bbdada95
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YEroSh8G5N:wGedp6WgoufDMu1jatVYPgH
TLSH
T1ECC20C2B644CC77E4F840EADEC29EEDB6DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9e0869944c5ca4665dd664d240b1b33c4a4ad509223400f51c822162c5fe12e1
MD5 d877380762d95809e936c239a22bece9
SHA1 15084dd8046acbd98254badce68e9ea9759b13e4
SHA512 90c40fc2a86e97364615510d396c5037fca24c76814d2ba6668c5db9934b52b3b3a379d932443120b0a272e63e72f1f53b33d126d67c496d7032a5c2bb9347bd
SSDEEP 96:KR4H4Q414x4H4F414ZW4B4u40g454ZK44wg434Zc4/43424p414qH4L4U4R4l4To:COjyuIQAhQVuu+zgsFGONcOHH2r6WwYr
TLSH
T1FA910743347612403C7DA61891798C2EB2C178673159B96B3BAD51AB0F2BF078DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ed5bf753f7ccd810255fcb01d08fcfad0fc21f06ed5ea81ac6f9cd7500ac1c52
MD5 b37857be5f1323d5e312270fcbf4bf97
SHA1 0f6621f4308e372260775033a89aba7f2343bfa9
SHA512 e221d9cae8710fa110c7dd5c2b5b7c53947560192fccc2883c4da36a28339edbe4a127876f7e36af63640f1a7a785ba1fd07c668f095d04adfafc77ec75b92ae
SSDEEP 768:rrv+4UNbdX3EBDZIO08NNzc4ReyIsPGyQ:rbsbF3Qtc44bsuyQ
TLSH
T18503BE36F8688977ACF69685F40B35533EF8511BC2C91A94D9DD2F4C0A8B1EE131B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 16d9da94e370e5937e3e6e052395b853b2a92d813417fc770512e4c32624abd3
MD5 68328768e80c9af757384dd18b5fbd4b
SHA1 4641ba9deeb60cd7278b47d3558061aaeb0c35b8
SHA512 b944ad0669a5dd96bc9ea1fc28259f82eeaeee95da38a7c5bcd215469f2630ea685741e72cba00b06fcd89c23026cc3d61f3c8c281d8787e829d9b469bf5d71d
SSDEEP 384:UZcI838Nx9jryvDzJDZNfNoXOVSUUey05ETRzcoXfK86sfxEZxxsIj4lBG3cjmwe:S83bBDZIO08aNzc4ReyIsPGMjDO
TLSH
T17DF2BF36EC248967ECF99646B9073653AEF45127C2D81E849AED6F0C05876ED431B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f99c6faee682a096f8899b3f7f6125e30b927afe5b47ed74effeb528d7c5032e
MD5 0d372a5ffef86dc0faa07817dea9042e
SHA1 9e3f4c2d4e3f86a28f7871bac371e2464875cf38
SHA512 69cf40d96a12cc100ba7eb18779191a3d45ad965e6cb97bdd2a02eacaf8cad216c6023e1d749b97077806fdfb678d80c848d69b239139586a57797ebd5ff210a
SSDEEP 384:fiFiZcI/38ND8TUNTUlIl9jryvDzJDZNfNoXOVSUUey0JETRzcoXfK86sfxEZxxv:qFQ/34wgaBDZIO08KNzc4ReyIsPGMjDO
TLSH
T18C03AF33EC54C96BFDFA9B85F94A3252AEF45167C1D86A94D6DD5E0C01871EC031BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b3296f2f4b10ca80246055e50f871b9a49dca9fa0fe0a786fe3ec79d76f516c8
MD5 d7ee9743f4f1e56e105b6630c9923940
SHA1 befbb27232d4f084c7ee69721bf229756694b1c8
SHA512 57771dfe5bbd07c96577a3ee2fcd48648c83cdf9caa02de6d4519492518525d6c6e7c465733dc83672d13d57eb3eaa80ae7377eda041a2a353ea879a55b3ce8e
SSDEEP 384:JZcI838Nx0jryvDzJDZNfNoXOVSUUey05ETRzcoXfK86sfxEZxxsIj4lBG3cjmwe:B83YBDZIO08aNzc4ReyIsPGMjDO
TLSH
T103F2BF36EC648D67FCF99646B9073653AEF45127C2D82E849AED6F0C05872ED431B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 18db7eda190122633c75b7f3f42a94e0f385f12d2370d4249dbf8f70df79e1ea
MD5 a91fbe9e12c50f48c9597fa733226ec8
SHA1 729c58f48f278ebe3d3f0343f219a88e8c5ae54d
SHA512 bb6d4475e643e571d6fb99a6dc524e8102bcc3913740c5bb4582162e83d6db5ada47e477593ae0da60edcc91e813009883386c360dd3732fda89456c625e8ced
SSDEEP 768:6rv+4UNbds39KDZIO0QNzc4ReyIsXWeVH1S5D:6bsbS3Itc44bsGEH1Y
TLSH
T11D03CF32A8788977ACF6A785B54B76533EF8512BC2D81E94C5DE2F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8340f98d-20e0-470d-9d61-701831021ac5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8340f98d-20e0-470d-9d61-701831021ac5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download