0a09b051cc8178f951b51edc89a39a1d1ad5c3ee3aa83af94b9b23cc06bcad60

Analysis

user interaction
yes
max time kernel
20s
max time network
20s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260126-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260126-enlocale:en-usos:windows10-ltsc_2021-x64system
submitted
25/04/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
catalyst.exe
Size 1.7MB
Sample260425-bb42qagv4k
SHA256 0a09b051cc8178f951b51edc89a39a1d1ad5c3ee3aa83af94b9b23cc06bcad60
MD5 c17c150f6da5f42cb5d839ecb3d266ae
SHA1 982623738e80242169cede3b4317d8c5e0954ce5
SHA512 68e7e04c390e64ec6bc17b681a10ce5fcf1770775f84b85e8ca1d7182ca6da44b40187b86082a890d1c29352f6723133efcb43e0bf2f9bf6167ad39f0aa8d365
SSDEEP 24576:WbxiRP7QebnN/9CoZbetjJxsCreYwCZnh0lhSMXlnJ4T1uZmL1kY:fUwRFsJmCq9vI1QmLN
TLSH
T1EF858D52E78EC2D9C92DA4BC5622D707E33070022F1587CF67A91D569E27EE05EBEB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3076	msedge.exe
1384	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134215523848181461"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-903610002-708294114-949261322-1000\{191C2E3E-27D0-423C-A925-F520997683E9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4396	catalyst.exe
4396	catalyst.exe
2436	catalyst.exe
2436	catalyst.exe
5420	catalyst.exe
5420	catalyst.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5324	msedge.exe
5324	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2436	catalyst.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6092 wrote to memory of 5324	6092	msedge.exe	93
PID 5324 wrote to memory of 1904	5324	msedge.exe	94
PID 5324 wrote to memory of 3076	5324	msedge.exe	95
PID 5324 wrote to memory of 4584	5324	msedge.exe	96
PID 5324 wrote to memory of 4584	5324	msedge.exe	96
PID 5324 wrote to memory of 4584	5324	msedge.exe	96
PID 5324 wrote to memory of 4344	5324	msedge.exe	97
PID 5324 wrote to memory of 4344	5324	msedge.exe	97
PID 5324 wrote to memory of 1732	5324	msedge.exe	98
PID 5324 wrote to memory of 1732	5324	msedge.exe	98
PID 5324 wrote to memory of 1732	5324	msedge.exe	98
PID 5324 wrote to memory of 3436	5324	msedge.exe	99
PID 5324 wrote to memory of 3436	5324	msedge.exe	99
PID 5324 wrote to memory of 3436	5324	msedge.exe	99
PID 5324 wrote to memory of 5008	5324	msedge.exe	103
PID 5008 wrote to memory of 1840	5008	msedge.exe	104
PID 5008 wrote to memory of 1384	5008	msedge.exe	106
PID 5008 wrote to memory of 4784	5008	msedge.exe	107
PID 5008 wrote to memory of 4784	5008	msedge.exe	107
PID 5008 wrote to memory of 4784	5008	msedge.exe	107
PID 5008 wrote to memory of 5544	5008	msedge.exe	108
PID 5008 wrote to memory of 5544	5008	msedge.exe	108
PID 5008 wrote to memory of 1212	5008	msedge.exe	111
PID 1152 wrote to memory of 5420	1152	cmd.exe	115

C:\Users\Admin\AppData\Local\Temp\catalyst.exe
"C:\Users\Admin\AppData\Local\Temp\catalyst.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4396

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4820

C:\Users\Admin\AppData\Local\Temp\catalyst.exe
"C:\Users\Admin\AppData\Local\Temp\catalyst.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://cmnd/
1⤵
- Suspicious use of WriteProcessMemory
PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://cmnd/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x26c,0x7ffee058c188,0x7ffee058c194,0x7ffee058c1a0
    3⤵
    PID:1904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,17914685458738278947,15375838967306558526,524288 --field-trial-handle=2288,i,14530448990925215310,15724553813280402278,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,17754232968777812045,9588855568524514335,262144 --field-trial-handle=2288,i,14530448990925215310,15724553813280402278,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,5934225196534552899,5349808368655995900,524288 --field-trial-handle=2288,i,14530448990925215310,15724553813280402278,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
    3⤵
    PID:4344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,1495922485041618892,13682293967278879366,2097152 --field-trial-handle=2288,i,14530448990925215310,15724553813280402278,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
    3⤵
    PID:1732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,531385815543762197,6235839977128796369,2097152 --field-trial-handle=2288,i,14530448990925215310,15724553813280402278,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:5008
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ffee058c188,0x7ffee058c194,0x7ffee058c1a0
      4⤵
      PID:1840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,11563269292270498594,10716937714015698573,524288 --field-trial-handle=2336,i,16161856658096793859,13584376590003827517,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
      4⤵
      System Time Discovery
      PID:1384
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,13651491744417128541,13969778159336714364,262144 --field-trial-handle=2336,i,16161856658096793859,13584376590003827517,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
      4⤵
      PID:4784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,12249008384679038656,13391183132187758333,524288 --field-trial-handle=2336,i,16161856658096793859,13584376590003827517,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
      4⤵
      PID:5544
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,18063615234343473109,16208433498762610711,524288 --field-trial-handle=2336,i,16161856658096793859,13584376590003827517,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
      4⤵
      PID:4724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,18063615234343473109,16208433498762610711,524288 --field-trial-handle=2336,i,16161856658096793859,13584376590003827517,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
      4⤵
      PID:1212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1504

C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Users\Admin\AppData\Local\Temp\catalyst.exe
  catalyst.exe
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 69a1d6c2546f99910c6f349ddb665d530af289283332c1b54d92ff0340de7fbc
MD5 9dd12f0f7f7c020c27ee69da3c41ea58
SHA1 83e40ce506be9fab44d721ec8ab9f5af9722b38e
SHA512 b7f32c8b78e6734eebbbe7cf2944484340e3f32441ca6943b39c0a677d4424de3f45feaa48338f99996e31b46c55212827a384d66c07ed3571ba6ffd51c436ad
TLSH
T195D0C02C13B12C20C0D89938028C3B4F2E1CCC12054B47153C7338BC0C030103CC91D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 681328c8413fda75a51189b78f6379b1ee0309d75144ca8ff33a2656ec84cedb
MD5 0ff4eec6742c3eafb3e4d2b1be8a17d3
SHA1 87b776cff4e20b419791c0a7a5a49da8d91229fb
SHA512 525896cf68edf91db0d0dc681112ed436a3ebcab42ad2f03d796fa9e2472cd279feafba9b809dc18476c574b82a1f657dead8511e80a203527b2971ba86c4824
TLSH
T100D0222813B11C20C0C4993802883A4E2A28C812054B47152CA228BC0C430103CC9197
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f7f9885af88893c6b02ed85d00506e4a90441a4df0d872ad1312f7a303adfc5
MD5 6efb49dd0eccd3c40cf19ccbadc5ed9f
SHA1 1bb3ca915c5ac8ddcc6787ade0fe269c51321e9e
SHA512 8632c21adf0faf4b6e2298f3c517ba97e76c886d4644082ac7bbf13084621bbcda95402975a9c7057e355b0ba76b84ad538c58170d027a39e1e22c299f99beb3
TLSH
T11FD0C03033BD7800C0800538C904734B6F1D8C8138AF47067C20247C9D1B4207BC8287
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 66d439955d4298ababc804107c0fb1804bb36982ab6b46467a6a86a678620ace
MD5 bf6860ddee705417ac2f120b8001ddc9
SHA1 55c3b8c2aa95b679c3ecf48f277a18433fcb5c86
SHA512 2bcb4ae349ca774aea218d6b54d4b1c2083e1d90b3ba61f91e28e2dc151b1bc07e2549ca104a1e0af10e6ecac2669d93f67a2abdbf231076176e10f705990bdc
TLSH
T113E02BBECC21AC3B18F84B5DA0944785E710135E2B50595F3A3C820C4FB563E86D6C1C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3c69cfb7cd1a2d0e5491a770e1d94c1e52249b773db769330f8a329683ee3873
MD5 5b00c443a9fa4d97b686fa2bf0c3cd99
SHA1 3a562b4251b8db21b615c12130eef6e7fa0bd95e
SHA512 4580bcd626ebc7a8dfa96e25fb6297e66e59030dae0aedb1590d6378bec27d3a51bf415b6d099e88e2afd371d593621b050b8959f4e3ff6b15441e765a6a2c41
SSDEEP 384:Pu2e1BbT+EFdu7Vgzz9yhValncZnElDwM8a6aV:PvI82du7VgMnalncZEwML
TLSH
T16E13D3BC3E14BC96EBDB163D596B2B342B76C827D0E0A01727B1B411576E712987F442
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 513115d7a36a368965ff0a2e76568579e610930bea52e06d4f65de657f947a91
MD5 3eb2a322c42bbe1a77e7dd582d4b51f0
SHA1 dfd4bbc18c571939dbb8f05c096843f892f01fc8
SHA512 b53f4f489fde5c24f60cf9747e513d473e3a3b7286a84f27ccbc27968fbb4aef8a2d29f174ee761903885ab4120f6cba2774d00558e4386968a164228b523870
SSDEEP 1536:2kz5ogdZ+2PsKLcfpcAgRdK+qqKgql2gTR6RAXueuByZFo4A8KJI:rtL2g/tekRAe3ByZFo4A8K
TLSH
T1F9446FF70951A01BCFA802F5E2033A3DD177055E2CE1E8EAE67C0C952929F31B6BDA55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 99434348d11a5717a6f4e67332c6d8f62d47f4a5d815df235583bddfe65f7db2
MD5 36fb65a2ff3ece45ae9a8fe760c515c9
SHA1 818ded747952e49360a2407964d7199a5850f246
SHA512 ed1783f43cb35642531052165ae6680331d53f955e9d0faefa17a0e749452e2ca9d71bab6861e9bd4c262f9d08841b926f8c4615d9cbeeddf94d71310be41782
SSDEEP 24576:zW3r9caJnUkEHFPPzfLtdONc895KeSGR84oR6XrQ/jcv260JsqFL4v9O39:zecaRoFP7fLrONI4VXrQrcv2buqx4v9
TLSH
T10A866DEECA785C83CE778A70B4E0EC477C7412C3B555C1D28958C58406AB7C5BBEA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 38515c0e5d31b7bc5036a9a22825a1c95ab6f3ba4cf777c418202c47387a1223
MD5 8da661b8722a10fd02ad87bd1b32276d
SHA1 3228d5e14752b7bee8685246f8a72f02dbb1a0b1
SHA512 2d2e450bf14ea8e32991c3bf24b07981c15113b52db6e2dafbdca1db94f38aaf0d0f3a5104c9e1fe3fd3a1228bf966873f481982c88a88b48e8adde1aaf7684b
TLSH
T1626171C43242782CF7754B719BE9909732FBC2195A57CE8E295CD8F48A39B12C0DAB48
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 c8300780ee0c8b1c9c6cc78641b396e8947223dfa235430c90f9fcf1653c34e3
MD5 4283408fb438e8e02ea8db31b2c33820
SHA1 f07ee6e8a54a15a1d65ff689252ac2cce89995b4
SHA512 7fc773646743acf96615534f247da685889a8d3c019709feac608dfa47a7ed2be3a8356a4c2317d55aab6c193bafb1224dae32ac1f648b716f5634b48307a7d5
TLSH
T16BE0D8A655C7C9AD66203A8A473C7F4881843446EA96ED431B00C8D47A0A009F38D55B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 6efbd17ad6cdda487e3a83a4a12632cae6151f4f93b6f82ca8365f33eadddb29
MD5 2adc2861431b58db8bf4fe78ed9f1521
SHA1 18b308fb290a32a181a5b763d68383f153667d78
SHA512 4b60622d054c809fe5677821012086dc428a564beb8d7ba017f1172f18931be9f62abd05e10b251b5025329b15edda5154967103c92d76b80366268fd587a1bd
TLSH
T1DBE0266545CAC9B9A11568D38BBD730D87D03502BA883F829708CC84610164DA7CE690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 c46f829c7fe8d70d30eb5eb3cde6fb7bdc0edcf1c628938c4060ccd1279bb023
MD5 381d4ee02caec4cd9a57aea2992aa235
SHA1 1044a568f1a7e1038d165d74544c8863ba28d998
SHA512 85f2dfc3ffa2576bca538a64e641a2737d47335b5f1ea5e2fe97d3ccb7a098b87f5a9da3182dcab563bc16cee8edd0657fd8bf85e7fff56726ba17d7770a9093
TLSH
T1FCE0D87644CEC5F96284308B571D7709C7A07506EA893A429F05DC8DB40900CA3CA1E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 abc1d907c48055ae0003d3decc76421d227131531d108d3fd76d476224bd5ab9
MD5 212844ae4e887a5d73165134874824cf
SHA1 10e38c395288c68718866ceedadaca7e6334eea7
SHA512 bc2273db82eb0a9ad6370a777eec735584b63f15fbd4f5791b53ff145f8d5da06cda75d017f70f112cd78f20ab23d349f85370858c08a4556f351dd73511e76b
SSDEEP 24:TL68LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T2SLopFMatSaw/auUOt8B
TLSH
T171928C4E5F346220C0F04B36EDD185672F7C211CD3A72A99DE5410F3DE9259BF1155AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1012B
SHA256 882f817c59e26c84e04cf662814c914a42bcff557a7ec92a8d22a7920d9079ca
MD5 58a571dea737814e9dc9377044ded9d1
SHA1 4d069486d2700e0f6d74e2b97a24d763ffb777f2
SHA512 66d211d0452c2dcf672b3494654583b3756dd868e156dbe2735a526684c1a0252655b07d8a9f555aed17cdbb356d527f12281a6c3309b47d78925dd5665090e4
TLSH
T12A117BF7037065BE9B11D6F0EA08BE2F8EA90051435CB9EA85F46D1793F3461E045A5B
MD5 SHA1 SHA512 TLSH

Submit Download

b1639e15-4b26-4e69-b516-d866d0a910e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b1639e15-4b26-4e69-b516-d866d0a910e2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d22dad134365352f37b301f9b15f347f73d644f7060f22ac77b62b3ac74e0877
MD5 a45acc5846fac3c03a763fb6f5e5540b
SHA1 a222937139959c278fd4e62e74614c11af13e593
SHA512 9ab9ae33f2c5acfe2d4f99e8eba5c8e7d2ffddec8f8dd6a9ddcf6349293e2a41422b4c9243cb37ca6d56442e3d57e7acde41552b15111873950e427920ebf2b7
SSDEEP 192:sxZTRHyMqZ/K1Ml8Ogp/f2sMWpV3Rc6+W27l/DV0zodpLHW6+WNGY+UR85o0IgZN:sxZTggp/f2sMWvhcnWMpZLHbGEuZN
TLSH
T16272F955AA38997BCCCBD618FA457F53D6F8152391905E48AAFCCA0C00E7ADD2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 710fe390d7b86164304877b0437dafaa23194f26ae6d4e8667794df87d63f5bf
MD5 907d1f884d13c5531d2efd4841ae124e
SHA1 226e278fc0abbac00d4fd6bd6ac343e6c66b6d60
SHA512 f842dfe796aff82f3e5eb783b83d71037be13f144d1f98044bb467c03a56b24806fdb9bd7c3d45ecc5cc2510711b85a31adaf8e43853518983d72b24eb09b8cd
SSDEEP 768:vLIL+AI7pLuL/GeWvGSVq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVlD2JLlVzetYroO:vLIL+A0E/GeWvGSVqu1ja0D2JLrCtj6f
TLSH
T1B1F21B7B6C0CCB7E4F804E9CED2ABE8A6DE801CB56D8895447FA480C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 52dafc1831d0d37c99cf002d63fcf6743db609cebb55394e13af343a60a54dc8
MD5 b65c4281852eb0998ee704b0a035b258
SHA1 885223e665a78e5a58d1ba5d25e8ece6025c9c70
SHA512 3f526d8826e2c6ac05f1dcb3fd3d823d803269c99a1776fe4311caa6da8911752663d21e5f8abf1e24a4458bacc7b97e5186801952983620a11832613b2cb46a
TLSH
T1E8E0262106CADAFDB21522438B3DA70DC2E8752BEAC83E436F08CC84724650CB2DE190
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 dc4307aeb5caadca2007a9273ae067770cd7f6904d3e877771b800e545d3fe42
MD5 eda2975bc76d07adfa0c47ea32710b54
SHA1 8a858ef48473b8aba83b3a53c6ec74da550633a5
SHA512 9a4d735988f4227d2ce0e684a2004dda25d638e24d0771426c565b8e8200205c2d57cdf52953ce1ef4438cfb44e130995ecab95e609ea0481097dc6d81c69767
TLSH
T1E0E0D8351ACACABE72552487477EFB0D85E27503EBDC29522F08D884720A54873CF150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 4b9f5f4c81e151e776d37f2faad5bea0c5afc3561f1f310de6702ce0ff22ebfb
MD5 e946c1f4386e93a2e138b841163ceebc
SHA1 b7ec750e0a73385822f0672f655f7069586ea4ef
SHA512 d90bc04cf84df8ccfc188ac6d1a94e8a49f0578d0062ca41e9c6448fa0df52f412e7a2a5717eb1a856ec04f1adb0611ab23c406891253531e3d1cf37bf433c23
TLSH
T1E7E086B145CACABA620465934B6DFB4EC7F07A06ABDC3AC6970C8C84A105D4CB3EE594
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 c6042f495a070e9013a0f15503d72ca604e9a729ead010079d2e24aaa70446b0
MD5 6de8270f75dfe1a501f9b69f04f435ce
SHA1 aeb0062a9ebf3d1c31578634ec7911ea831c2506
SHA512 0740bca6ef323a8b8a5740ca17217a95eed0223fe9e078e18847990c77ee77a3a6e40c87204c81507d6b9dec30ab5ba20278f5e4585c976e370a361d4b3a4c83
SSDEEP 192:W75v/AjXMvdf93ElPpR8VhT/jyneVJ91JLKZJOrxt5f39DvLo1g:WdHAzMlfNE9k9ftDToW
TLSH
T104B24D3171BAC2103A7D36DC9599BC27474230A27058E47B3FE900A64F67E185EFDAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 1ea6d283381177410e9c8da1cfb68842518733781d0077dc8060a752f0e66132
MD5 e745e290a3dc5985673a07f232bccf78
SHA1 784fc8f62982c91411e5eb971119b3293a2f7850
SHA512 8366acbcac07e5b985baf031863f08df8f42039211c7878de1ac3dfdea06a3db085d3b4746d55ef857cc1bd70dc9335fb0c47aa31c163cd0ad1963a0ac8a8e93
SSDEEP 192:P+xWHT8gfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxOTrfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T18B24640A7B747001EDE6D9725CB080771E3C71AECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 9f8f0811255291451b7748ad25b9b0740aad192a2c20f324b44a50fdc08a64fd
MD5 65a4a90ac264417c93c0c626f77c2c98
SHA1 71d2ce1c24ac09a25304ff48637616c5575fcdb6
SHA512 9ff3bd9b878630549c895da088325bec5686b7e5585558bfedc81296725a759a81115048da94a6eb6abb131c18e6b9ccad5da42ab88b49b6a49f432d842185e4
SSDEEP 192:GPORTAsvlrhBusEdZ3uelgQiIIIBbFMIMLuYcYOK9:3RssNKsWsQiIIIBbFMIMqB
TLSH
T14952931B270A1F37C15EAF7A225A86965BC4C881467122AF31605C1FADF3F978BC52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 a054725f7604f2d27fe4a649b342ef6372a6557457da1f2a7acc4ac8fda53b30
MD5 da6e2bf87eb200624d154ac1baff43de
SHA1 942f29a0b88667a418c4458bb33cdbd680ac8075
SHA512 9f4bdd3176d9b419cceb147c992444b09c452a82592efa914b0274d870d11f7d6b6896372fc5aab16d213a2a665bd0e9067b070d7469a23c772fef162e9f9b49
TLSH
T105E0D82175C9C5EE71156087472D738DD2803543FE9429855B00C88C720510877CE552
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 ce2f9a774600abfe077e21ddff75cc4e0d3fd2b4a168d435f072c51ba91d270b
MD5 107f6f899dde0cd62b87dba65d8bb492
SHA1 ed38aaabf5cf672999895f064c998698d99099f8
SHA512 8d7502ac5879fa3ff3af727c60e9f3c24331c86bea93f030047de6d56ef84517046ae7d3369e5c586ec402dab328a199620b92a7c2489308913a5e464b4bc08e
TLSH
T1C7219D55F320D158E14A923E952B972A5338D8069FFCEC1F917924352E61E040E8BAE1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 8fe137bf3b49eb8a60457a1b1b25a992a908afe858e7931b74f5be0f96e17907
MD5 08735ebc45477854796374933a4e883f
SHA1 9f790a491ae77f17616310bbb462ada4a30c1444
SHA512 a200ade469965d2310840f574a2c3df7c97137f8b850cbbda5f29dd9561196320e6f8d1bfe724d495344ab4698887d09d8308e492a2c0a2998a78b404c8c28e0
TLSH
T1B6E0DF65B9CAC9EFA11120C70B7DB38DC2913942FEA82FC25F00CC8CA20614DB7CE592
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 0cf1aa08e8445e074ea40305675f465ddd79bf9cd66c5fc864c6ea7165f89e97
MD5 f63adea9684c486920aea8e0dfa6fa78
SHA1 26a067f379b95c5b2246ee9feeae5ada4ad2fbfe
SHA512 f0a8993784171d0fa2507c7dd77fd7b5e112ea4aa2e2cbca3a998c4d983b332edb1097e69ed49c63dba0a26188289666b2c1cd705320700ca2e3794de3e3c50d
SSDEEP 3:MsEllllkEthXllkl2zEflq8:/M/xT02z5
TLSH
T184440404FFC01515D7111131405DC7535770D410051157C73DD504335CCF5401C40100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 29da965f17c25f332545c56a2d9212ff8037cb4f6c444e3fc528cf0577231ebc
MD5 6be6949dab8f49043f46e8a2624546e9
SHA1 95432fac518f36c1e64b8656dea4bb315430d3fa
SHA512 2779e4f055dcc43d4c200c9f7da5d94fa4f3f7249384599391dfab1837a03d902ba694b1474eedb6e2fc29b47c434e1c3d3ea86e4f4c73772540473ca00b1d5f
SSDEEP 3:MsEllllkEthXllkl2zEflBe:/M/xT02z0e
TLSH
T1D44404447FC05505DD0010354053C3531770D4110511574735FD04735CC75400C00110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 d9185aa7624e7690e8aefbfad738b40e516deeddc96fd949e956809eadb212b8
MD5 cc29ffb396e728837259e360ae47566d
SHA1 45e5cfa67f65b39ef40dec09f8b81bfd05382248
SHA512 85452ff63e9e6adf7613256692efe88430dd54bfa22a82f5b199650ed57611e9da68cd3877041d2e852c874e516b41c8deb13f1a59b8c046a0fda827193e9c00
SSDEEP 384:nqiFavqMXsNA8TUNTUlI4kwLFzqBxwD4fjKYDL7q/VHX/uDXjZE39rkCQCIVYLNr:hFay2nwgwExTKYDL7qvuX639bQCIEP
TLSH
T1EEF2497CEC54C97F98EEAB89A34D2A529DE40233D4A889D8E7D40F4D807619DF70BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f74f79e7681a88abbd28c63be97fe48b791a4dc0ec83ec9597a61bc953f11fe3
MD5 f1744813a0a0a4983b8358271719d68f
SHA1 3b02d508f022dc7bdfd7098e72792a28f1a09a06
SHA512 e50ef5050e89020785749e1b13e6c58e943a1382ba6ac01ffbcdbbbc867924b7358a039859e7d9814d57be2737762549c9428c15ac1e77ee49ecaa5395ae2df9
SSDEEP 384:nUiFavqMg3sNS8TUNTUlImkrLFzXSBD4fjKYDL7q/VHKKCIVYLNjk+5vI+C:vFayv3FwgxksKYDL7qqKCIEG
TLSH
T1CFC25B76EC98C9ABEDE68FD9E70A7603DEF00157D58C1AD8CAD81D0D009B1AE530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 684fa8622bd6d3e25a0825687a118868acb1b0d3080a7bf5bf4ec94c537a1150
MD5 cc681d95115eb0974d8b510852fe8c6c
SHA1 942c67ca6bd4321cc39ed178e9c6cc6b3d3d154d
SHA512 273d9b510477917d85a5006826a50c9691d640c55802ac7d8317f0e84ccfc9a5bce6bd249dece2f028691e57be8574db2209995f9b25a3e9a973689e73cac455
SSDEEP 384:nViFavqMg3sNc8TUNTUlImkrLFzcKbdD4fjKYDL7q/VHX/DiCIVYLNjk+5vI+C:cFayv33wgxXbQKYDL7qvDiCIEG
TLSH
T1B4C25B75EC98C9ABEDE68ED5F74A7643DEE001A7D58C4AD8DAD81D0D00871AE230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ff37038e31e88b69863f87a7bba544808bc421aef67bc5d5ddf473855d943895
MD5 51c21fdfcb86cdf40f88d4f7c2098d4c
SHA1 a40c3d100367bcc94f759028c29b683713161f0d
SHA512 23d4d6f2ed60ea671492480d3c9239988cdd6b80646fd23823dc4c320c54f2a5057e459153cc5ea8c87a98e75e2522944dee1bafb1e978ebeaf120b659c3d257
SSDEEP 384:nqiFavqMXsNA8TUNTUlI4kwLFzqQxwD4fjKYDL7q/VHX/uDXjZE39rkCQCIVYLNr:hFay2nwgw9xTKYDL7qvuX639bQCIEP
TLSH
T185F2497CEC54C97F98EEAB89A34D2A529DE40233D4A889D8E7D40F4D807619DF70BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 a4e8d1996a9997df2b7a0fd83e173c9a3f2507af9bffc6eeba78a717a7a18ed4
MD5 b0ba944bf7f57b8be720c64aee941c31
SHA1 d4bd327e0b0777675cde68e18b08227c45ffb7e5
SHA512 f13fedfde62fa65c327cf3b3bf75eb0858cc31cf4caf6026bfdac7dc9902a1ea8fccc46ea327acdd8f68e6bdeeb75087b951243abe3b5b6eeffe4744046bc77b
SSDEEP 3:MsEllllkEthXllkl2zEflE:/M/xT02z
TLSH
T1204404147FC03505C50010314051C3531370F510451157473DDD04335DC75400C44140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 87B
SHA256 c7209c3eb51763e3139fa0a5e5a1d18b610932294b507ba5d043658e45953727
MD5 8e0265073c65dc7491c8b6eda0b62e0d
SHA1 b75642618bae1886d9c426b5183a13da6c21acd3
SHA512 45b190ca41357baa1dbdeff2b123d27428be4c2dd69cb88cb6070f5d6abe9a7728f47fa2844592b192c17961580225348aeb1ec270e161a7422c1a8b71a239d8
TLSH
T168B02447C473C00FF41440D1C45C03C114F4C047411DD0015070D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4e064a5a2de38e9d073735ca2ada074bc10fca6ce7d55cc6e649d85b3345092e
MD5 24922e6cde5b22fd65894060e1a8b23f
SHA1 2abc6ac7a952fe59c532590a2ee51a62c1df6b3b
SHA512 88cb86f0aeae583505f43fcf2e46cef7976aecb8dc7fb7403fca5eab0e50fd8dae15def2e20b2b5e9eceed1c34997c6510be39893d8abf9862f493295a2cf801
TLSH
T152411898A7F91148B3B7BE5A9BF6586D487EB8272F06D45E00010E8F4A73B41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 ff9a793fcccbca8e8867317e4e62ce00d634bc72cfffaaab7b180c8d630c4106
MD5 0464c121d92c38dd0a98d208643f9f2f
SHA1 9a0fe35bb87da29faf94b68ee9716854dd247277
SHA512 aa59056e01a5c22bfd36fa8568a83331cd89bcf27aa75ebc3c1081d53df2f734bca516bb11081f44c6fe1feded0d461a591f5a406739863dd2c5e5e8ac347886
TLSH
T1D2514C58AAF91108B377AF1A9FF6A46D487F7D332E06D05D10100E4F4923E01D8A1737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4820-0-0x0000016394B60000-0x0000016394BB5000-memory.dmp

Download