999aa6cb70d8d8dfe459aaa16150554759b7c908e756ce30793cb618fdd3d0bd

Analysis

max time kernel
149s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 13:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CLO-Standalone-OnlineAuth-2025-0-148-x64-Multilingual-Crack-Repackmaster.html
Size 28KB
Sample260702-qw57vaft4x
SHA256 999aa6cb70d8d8dfe459aaa16150554759b7c908e756ce30793cb618fdd3d0bd
MD5 fe2096f242e6b9f005d9326ea08ad32d
SHA1 0f0944c9d5cb260f812c0139f8e11bd09a5c566f
SHA512 bb549c57ae3b05a8b7d11aae528c7ce88f45b77c2b206b79fbb150976d819b35a327db4e9983ab13ea2b6f3a0e04dd08405860b496f8aaca5277bda8e3889b85
SSDEEP 384:c4IIw0mn7HDF2tM4TzgZFi86W0U+pQ4Mnx/o:tIICnXvFmW0U+pQ4Cx/o
TLSH
T11ED2E85113C249270273929D5AB0933AFDA6600BFB498D95B7AC4B57AFF3F80DC1364A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4264	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274730859920894"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2132828192-1552876075-2324613956-1000\{1E2F5F48-FAB6-4D27-8635-F1A16727B531}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2860	msedge.exe
2860	msedge.exe

Suspicious behavior: LoadsDriver 24 IoCs

pid
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe
6024	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6024 wrote to memory of 4676	6024	msedge.exe	88
PID 6024 wrote to memory of 5928	6024	msedge.exe	89
PID 6024 wrote to memory of 4264	6024	msedge.exe	90
PID 6024 wrote to memory of 5928	6024	msedge.exe	89
PID 6024 wrote to memory of 5928	6024	msedge.exe	89
PID 6024 wrote to memory of 4860	6024	msedge.exe	91
PID 6024 wrote to memory of 4860	6024	msedge.exe	91
PID 6024 wrote to memory of 1148	6024	msedge.exe	93
PID 6024 wrote to memory of 1460	6024	msedge.exe	94
PID 6024 wrote to memory of 1148	6024	msedge.exe	93
PID 6024 wrote to memory of 1148	6024	msedge.exe	93
PID 6024 wrote to memory of 1460	6024	msedge.exe	94
PID 6024 wrote to memory of 1460	6024	msedge.exe	94
PID 6024 wrote to memory of 5212	6024	msedge.exe	95
PID 6024 wrote to memory of 5212	6024	msedge.exe	95
PID 6024 wrote to memory of 5212	6024	msedge.exe	95
PID 6024 wrote to memory of 436	6024	msedge.exe	96
PID 6024 wrote to memory of 436	6024	msedge.exe	96
PID 6024 wrote to memory of 436	6024	msedge.exe	96
PID 6024 wrote to memory of 5780	6024	msedge.exe	98
PID 6024 wrote to memory of 1860	6024	msedge.exe	99
PID 6024 wrote to memory of 5780	6024	msedge.exe	98
PID 6024 wrote to memory of 1860	6024	msedge.exe	99
PID 6024 wrote to memory of 5532	6024	msedge.exe	101
PID 6024 wrote to memory of 5668	6024	msedge.exe	105
PID 6024 wrote to memory of 5816	6024	msedge.exe	106
PID 6024 wrote to memory of 808	6024	msedge.exe	107
PID 6024 wrote to memory of 1324	6024	msedge.exe	108
PID 6024 wrote to memory of 1324	6024	msedge.exe	108
PID 6024 wrote to memory of 2860	6024	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CLO-Standalone-OnlineAuth-2025-0-148-x64-Multilingual-Crack-Repackmaster.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffa4c92c188,0x7ffa4c92c194,0x7ffa4c92c1a0
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,11017297173047983552,84724989949450066,262144 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:2
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,11554844722561528137,3051823195305122616,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,118992293817999377,15275574474989270822,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:13
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,5972077516846075354,7436280234673369171,2097152 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,12271597906250065105,5971283301534070640,2097152 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,10822956882599606089,5410848776243548884,2097152 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,3029770527307107703,4050702027494208613,2097152 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:9
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,2751647008788415962,14026820746039737051,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,17789258509994780091,6481771798287794838,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,9015223296684498509,2862611352577364175,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,9015223296684498509,2862611352577364175,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,13013266703278604702,9873712146036418748,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,490436442712909455,3208245505970677178,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,11934898972633863738,8316141437620733437,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,8334534485930687121,6330260028377107117,524288 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6616,i,17970066184397118730,13350855623082868052,262144 --field-trial-handle=2924,i,849034795991417741,9720442176140636162,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bea28d9638dac59990bdc6b9fece9f477f8d28c508c1a253fd1565bbc9fc4ae3
MD5 f10d65bdc736c03466ef52fb3e973cc6
SHA1 1553d68481be544f8fcd8f4f31978854061662fb
SHA512 1789433df7c4cb6b8c6af88635e9335389bfe36da7d8457f3b16e6d774ad9e050c045de056bbf16dcb7c5f7f882bdde6345ed9e7f12c4d6295e169346b1bbbf7
TLSH
T186D08015378CFC09C945303258515751F5255861645F8F445064D41DDC755D313570DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27eeefdbc28c4562b0f7961dbf8ecc36dc6cdfdb8dba90b92fab4f8d38495733
MD5 02240668b330773d82eb39ca82064ff3
SHA1 da6a7c95e21b04cb7aa5296fa464996f592a9476
SHA512 850ad2cbde9cda49998ffee162ecf4a7e854604619f29434682d460d4b33049219c253cb3208a75d43cda1a23a05ad280b0f98228e3cc9146d1a22b246e53b30
TLSH
T1E2D08011379CFC09C945303658515751F5155861145F8F445064D41DDC755D313570DF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ba342d93b66be2fc4e095bd9054f529b72dae9f655685eeb3521e546aeaef5ff
MD5 655d9e661ae66a4f12f50364dc8bc990
SHA1 2590a9d5b7424d1b49d7cad881e0aac18c42794e
SHA512 0cabb865bd61cb3e228b68bb9467124f2be7b0d9a36c90b7f7dd82f4727d66d318e1b8d2dea7a62a8580a2bd46bcd2b6e80d110fb8b9b7bedb7eb84e55595bcd
TLSH
T1B561E877F7718AE1FB91517E01E6AC983A76C0BAC6C7AE4C2074F13C9846745A9CF052
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591db0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591db0.TMP
Size 3KB
SHA256 2bc27045f7ef3940e43f7c0fdd6a5aaaf16ebfa0d86773ef10d511cd6b6baa6c
MD5 a448e920ea7b56399c2f89cc186cc3b7
SHA1 8355f641bb99074dfe6579b708a7fa1f04ef29ca
SHA512 8c9d7eae3aafa6851650599786c21007d901c4473fed7e41367a065e23579e71397190dc77dcf8f12bc00e25fbbac4492ca7f915cbc66ca57eb9e6963b8ff700
TLSH
T16C611973F7718AD0FB91517E41E6AC983A76C0BAC5C3AE4C2074F13C8846705A9CF052
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 25c46b0d051cd7baf4510174639bb581c7f07d08b6e555db51e1c385d04e72d6
MD5 6018c9a18d6616f625438cad99230196
SHA1 0a81d30276203777863a15e496dee073c6674e68
SHA512 4b53e7e25e43402ca83cda5f8dca19a2fdcf3f8c0f510efa66e689a94c227a1be01a3b5eabae484c61a0338ee831554d436c4889d8f11bd20a022a6a0a1f1ba2
TLSH
T1B0518CF7C7E8867E890156F4BB146E2BCE1D0915832C7C5A88E4AF2B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3719374b290735336fe5b5d1f8fb3c3b25df72cc8edf6c1f29da92fdfa53d60c
MD5 de1476fc0d167fb46c5f9385ce2188c6
SHA1 ba33e0ce14a05d642eeddb8ddbab077b9d7bf214
SHA512 7494c9dfeeb5e98535e70d56e206b283ed63352909fc9889a8d1bcde3c9244ed3e8ac94da1db723c79fd360240b5d8cb82a7e1ab068316d938d0051ac8d99591
SSDEEP 192:sxR6RXyM/jK1Ml8UQMF3/fXsQ5LVW4VzoA8pecS/g6+WNIYTHVCGD2IgDXJ:sxR6xqa3/fXsQtgrW/5IEcF
TLSH
T10E62C7169A249977CCDBD20DFA557F53D2F85573A2900E48AAFC8A0C05E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 423bd3f91618c658898fb7a141b61baab6ff01ca6ea67bf8ad25c1876d9a6d66
MD5 2880934b3153d436571064619e56e97f
SHA1 76152a70ae667e4b3afe3f4700d195eea3c1260f
SHA512 ec7320ca6e1d45c5d8ecab55c348a34ac1c1ac784e8104c3b12b44cee6eb82eee7e094e88bce404c9c82d3e3c1ebede56a0ad286f545d6b75990a19e770f0190
SSDEEP 192:sxRdRXyM/jK1Ml8wF3/fXsV5NVW4VzoA8p4cS/g6+WNIYTKVCGD2IgIJ:sxRdnb3/fXsVXgrY/5IJcs
TLSH
T18852D8055A38997BCCDBD20DFA557F53D6F81573A2901E48AAFC8A0C05E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2700fa1fed1d7112271659e62c01365af6d5c1e487062e0ce005986d37ee99e7
MD5 1e4c2771c1a20cde51aae397810bb98a
SHA1 18352f9f64c5dcf4c318746027cdfe25e93a41e0
SHA512 297eb6b72dd89cca4be26a09aa5b3d12b270796dddf956be64c1c89ac2e5668a18fd89e3f4fced6437862b9d61251d9788ae3bc4b3dc5e1d2e76ed667bc9408d
SSDEEP 192:sxR6RXyM/jK1Ml8wF3/fXsQ5NVW4VzoA8p4cS/g6+WNIYTKVCGD2IgDBJ:sxR6nb3/fXsQXgrY/5IJcH
TLSH
T14162D8059A34997BCCDBD20DFA557F53D6F81573A2901E48AAFC8A0C05E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 547674587fbf06b6224d86cf575810a829dc14614d7ab296de9ad1be1f3d41de
MD5 d10d7054de6ef8d2b57e3a3c8ad8fc2d
SHA1 d4dc8ef881c781380679f24533ba966727af04eb
SHA512 6dc9015c4f7349dedb9857aaf11d584ebf77cbfbadd1ccf7f23e14371ec3a1f0459216f39208758e5b532d3ba643ec25df0ae72311aeba5324537a8c185a0aa5
SSDEEP 768:RGqOYrWgTvfiX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJzFYAroG8W:RGqOYrWgTvfiXu1jaERYLGh
TLSH
T12AC20A3F640CC77E4F804AADEC25BE9A6DD801CB97984D5447EA894C03CA7FB511A4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0b89ad3097942453939e9caca78facb83db863451776c1bda63462a16e63b842
MD5 d5ed8f76ab4b42fe3d4ae8ff10fe112d
SHA1 9b68dca560638beb056e0ca4b21c790aeb7c0ff6
SHA512 9e982b12f4d12190bf34da2c1b84073c4e5600357adf451569f422a9da07d0096e774e90a97df318c098b8e24f1de2875d0543b6213bcc6267bb32ef347f77cc
SSDEEP 96:KsO8KvKKWP+KQA0qP2qc8cKWkB5gaKK4/ggKcKiJ46jHstY826ucWf:qf9nqP2qc8c1kBKay/ggRKiJ46jHstYH
TLSH
T1A491EE02353B36A0293E394D9065941E8282B1733159F83F7BF995E20B67E15DDFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d6abfee83e62120b803949d05d35e7e021ea6653ceffa613d66b17443517c53a
MD5 02e38fe392942ea59092e5ace220c60c
SHA1 f7658595a80bdb65b92a09933f157de6990be570
SHA512 29459c0bd4fbb9129601fa271966e658a161eb0414792c40cc972229472e476a0f4ac3f06bbdb9df83376e391a4afdfb0e0dd1dedd4a01642622626d75ce4115
SSDEEP 768:nj+9i3nO6SS1y8XodOiIyN8Y1M1fmBnZuDl8BvTPa2w6:K9i3nOeLXodI119Dl0W2w6
TLSH
T11EF2C0719C509D734DF38688F51725466EF081A3ABC82E989AECAB0E04873ED534BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a861f59b2567f1e1879dd275575f7c3f57bd1c0e0d1700e724c8d975ef57b0c0
MD5 6177497571e92cc5523eaa8fe808d7df
SHA1 99f1208fd819d84c9fe6d3acae24e5ff2c0743aa
SHA512 8dde2c4999d10cb4676374c5c68462df510a9ba19d659842a4c2c0404f964c5c0f05b53deb2367be8004b4baab98dfd81e14a57465a5882600622d9cb4a1be7b
SSDEEP 768:Uj+9i3MO6US1y8XodOiIyN8Y1M1fmBnZuDl8BvTPa2w6:D9i3MOgLXodI119Dl0W2w6
TLSH
T145F2C0719C509D734DF38688F51335466EF081A3EBC92E989AECAB0E04873ED5347C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e345654c0fad649eb2ac6b6ea32829d808653da71f32dd14cedd2b326ba9312c
MD5 2c688d750f8a73e8119e46a366f6f87a
SHA1 488646cbdf6fee3af6282d3c4a702e9b98db1459
SHA512 bfe9584b4b6a3e198001f39567bcef7dd9b984222f72632f4be033eeb4eae90b1d053da031231ffcba4a98b5a0f4d3261edcf2036d03ef0e590e36634783ba4d
SSDEEP 768:Yrv+4UNbdj3e6ZRwXodOiIyN8Y1M1fmBnlYv0B:Ybsbl3epXodI11H8
TLSH
T11D03CF32E864D9778CF28288F54772433FF491938BC50B84D9DC6B0E4147AEE230B856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1b9eedd-1c2a-4475-8f0c-ebe0c881ba77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1b9eedd-1c2a-4475-8f0c-ebe0c881ba77.tmp
Size 35KB
SHA256 9a42bab9c8ee00df65bfa8d8ab78a5d73784cb23778ceb8ada796242e202515e
MD5 cc2621dfb703b769b9059cb2bef91006
SHA1 9efbeb5a5d1a9d2c2747ad8f65d53501a5a85bde
SHA512 d4f9c679c3b62d7d3a4b064d6b0e00b23548e12c34aa7624a66d50c2d5b90da50aab20ba61f845b82cac6b3a58e64bd60701151fea21304ffddffeb6716cc202
SSDEEP 768:+j+9l3MO6US1yBXodOiIyN8Y1M1fmBnZuDl8BvTPa2w6:99l3MOgsXodI119Dl0W2w6
TLSH
T19EF2C0729C509D734DF38789F51725466EF081A3DBC82E589AECAB0E04873AD634BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07410b70-aa1d-4c6c-9dc7-0a7fce7ec73e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\07410b70-aa1d-4c6c-9dc7-0a7fce7ec73e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download