hxxps://na1[.]documents[.]adobe[.]com/public/reportAbuseForm?tsid=CBFCIBAACBSCTBABDUAAABACAABAArATcHZtaaD7esARSgtqQN3EAW0yxoWT5DrKKHiDfKmXNHaa0ftP2FflM4xEee3chqu-GXXqia1wewbuYzym6Qo4IUrF61byo51yaiqM7DCGiVYWNIKE939odhiqbHPr6&&reportAbuse=true

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://na1.documents.adobe.com/public/reportAbuseForm?tsid=CBFCIBAACBSCTBABDUAAABACAABAArATcHZtaaD7esARSgtqQN3EAW0yxoWT5DrKKHiDfKmXNHaa0ftP2FflM4xEee3chqu-GXXqia1wewbuYzym6Qo4IUrF61byo51yaiqM7DCGiVYWNIKE939odhiqbHPr6&&reportAbuse=true
Sample260730-xt72zsec42

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
544	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299122004492721"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4FFF0391-B689-4F36-A95F-C52268F3D618}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
720	msedge.exe
720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 4960	4536	msedge.exe	84
PID 4536 wrote to memory of 544	4536	msedge.exe	85
PID 4536 wrote to memory of 2088	4536	msedge.exe	86
PID 4536 wrote to memory of 2088	4536	msedge.exe	86
PID 4536 wrote to memory of 2088	4536	msedge.exe	86
PID 4536 wrote to memory of 2440	4536	msedge.exe	87
PID 4536 wrote to memory of 2440	4536	msedge.exe	87
PID 4536 wrote to memory of 4444	4536	msedge.exe	89
PID 4536 wrote to memory of 928	4536	msedge.exe	90
PID 4536 wrote to memory of 4444	4536	msedge.exe	89
PID 4536 wrote to memory of 4444	4536	msedge.exe	89
PID 4536 wrote to memory of 928	4536	msedge.exe	90
PID 4536 wrote to memory of 928	4536	msedge.exe	90
PID 4536 wrote to memory of 3856	4536	msedge.exe	91
PID 4536 wrote to memory of 4724	4536	msedge.exe	92
PID 4536 wrote to memory of 3856	4536	msedge.exe	91
PID 4536 wrote to memory of 3856	4536	msedge.exe	91
PID 4536 wrote to memory of 4724	4536	msedge.exe	92
PID 4536 wrote to memory of 4724	4536	msedge.exe	92
PID 4536 wrote to memory of 1392	4536	msedge.exe	96
PID 4536 wrote to memory of 1440	4536	msedge.exe	97
PID 4536 wrote to memory of 1392	4536	msedge.exe	96
PID 4536 wrote to memory of 1440	4536	msedge.exe	97
PID 4536 wrote to memory of 4408	4536	msedge.exe	99
PID 4536 wrote to memory of 3460	4536	msedge.exe	115
PID 4536 wrote to memory of 3652	4536	msedge.exe	116
PID 4536 wrote to memory of 3792	4536	msedge.exe	117
PID 4536 wrote to memory of 2092	4536	msedge.exe	120
PID 4536 wrote to memory of 2092	4536	msedge.exe	120
PID 4536 wrote to memory of 4044	4536	msedge.exe	121
PID 4536 wrote to memory of 4044	4536	msedge.exe	121
PID 4536 wrote to memory of 3084	4536	msedge.exe	122
PID 4536 wrote to memory of 3084	4536	msedge.exe	122
PID 4536 wrote to memory of 720	4536	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://na1.documents.adobe.com/public/reportAbuseForm?tsid=CBFCIBAACBSCTBABDUAAABACAABAArATcHZtaaD7esARSgtqQN3EAW0yxoWT5DrKKHiDfKmXNHaa0ftP2FflM4xEee3chqu-GXXqia1wewbuYzym6Qo4IUrF61byo51yaiqM7DCGiVYWNIKE939odhiqbHPr6&&reportAbuse=true
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc4bc9c188,0x7ffc4bc9c194,0x7ffc4bc9c1a0
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,10077892697705662761,856641177108444115,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,11588301870735411110,7759005700200546080,262144 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,3153966439312018461,10779072004881624874,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5012142890314843737,3935858541594478569,2097152 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,15425721929011485481,16349568525897921715,2097152 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,3109714319126241396,4363363447845792898,2097152 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,6314261116571927162,10148935395666928388,2097152 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,12300506089258624507,14045125968921143979,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,16755186162084234205,11845321949336719086,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5542646939325413064,11923053976931846919,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5542646939325413064,11923053976931846919,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,3836304529591669992,67276410905130245,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,7457951999937705480,7734876911904380859,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,949652135804789591,15508773839504946683,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,5662388255183454387,3117839578586375069,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,17779498360574032120,14441649038229727364,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,3955003529141880552,16771149619038393603,524288 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,5269004281942029678,1022408378018800214,262144 --field-trial-handle=2304,i,2254687935227222556,15326804135084309979,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 537B
SHA256 a6bff676d5b9f41cda1ced769ecd0b9e75b63f8d1d768152acb2abcb56ca666b
MD5 77eedc0daead6ac4a3754c1aec48e99e
SHA1 eab414f887559a81bc469ea99a31e2115d32f5d8
SHA512 91bf7fb875fbc0ee923ca8a96194fc86d5666905fd29a30a6fa5838d3bd48d8ded84092ccbdd46a77f3d47845f6d532d6c0e86ee52108e19eca871370a00d95e
TLSH
T136F02BD581C5C36ED641754B91A887CC65E8370AD7C87D4D2B04499BB605450F3916F6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 06c25620085a9841df89f00d4930127d407c75f34a9430c6d56bd738be0fd087
MD5 dee2dff452862313c82212fc7dbaa7bf
SHA1 a0677674fc144ea6c4b6300b01cdf170f09b83f0
SHA512 7f7d0828f0ceae3a8f0202a39c2651ddd7f784ddde6174682c7881f87e25fddebc4c700767a9aa115ce0776fe3a459b3b0357837d66cb5a967388e4a9fe1aacc
TLSH
T1117129390A5E0871E39A2CB04AD626073076ADDBFA171EB5D2E09E37121FF21B53E904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590d93.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590d93.TMP
Size 3KB
SHA256 564e162184c1051e45d4d4ba08170031ddd35a0fe914fea402bf68982db214d6
MD5 b418bbdada545f3b70f3da2988308563
SHA1 85269eadfe5e6eb9b77df97163b3e78c7356189c
SHA512 575e0e4300bf295fb225363f4bc7a542d9cfeb7e6ccd22a570c6386d0de6d193701e4c307ac957c49c219c26c45fd03927c9c6f6ec890041dc220989ce4bc313
TLSH
T18761F638091E0871E39A28F152D5320720B6BDEBF9561E74D1E09E37211FF25B93D508
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0d35de22cd39945365a0ae53fe0c2f7e0426eb20373f99d09a33c7c54358ea65
MD5 ed127b6e26769713eaaa09490091eb3f
SHA1 eaa03c8d4d5705a638784b7a8cce341a3b248a65
SHA512 014dc5c090f1a3968b8482911e562343e5a8584d2a11480cd6faa2ba6bada481e201c210762c46a92b7526a3b333a1d20869093ec39fa538eb04984862971401
TLSH
T1B8516CF783F9456D891292F09B18EE1FCE5D0911832CBD39C9D4AE5793E24B1E101B5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0b163375a2f7ba4c7b34401c7fb93e38d76342bb4abefde284c327dc2e5dcc54
MD5 e07a73969b4b29253ce9cca94d7b14d5
SHA1 22c4d2566bdc30de679a12285ad25be148989f89
SHA512 5f65821692799385aaa0dcec906b50fe5ac650964350766d847cd0345568c88b27633030479b080b6fdbdab0f15d5af6dfd81eb8ff96685728997ec04f10c7fd
SSDEEP 192:sxZIROyM/jK1Ml8Mkh/f4saH3PHIdpv3HW6+WN+YP/Y9IUbq+9IgrJ:sxZIIMh/f4saH3gPHbJ//s9
TLSH
T17942F8166A349977CCDFD209FA55BB53D6F94472A2940E44A9FCCA0C00E6BEC2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d7524fd5288aea79f89785e892477cdd853a9c8667e494c5bb7daa03638b4436
MD5 84d357c4337209ff824910567e7c9b5c
SHA1 88b01d051ab590fbdd078611d9a5285b6afed0aa
SHA512 bcab77883f6b1b32fb384679fcdcef671ccd39a81b24c406cf4ec071aede7b6815e53879283717e009960475bd3b69ca70e8be0b6ab5462cb58aa52ec9a568c5
SSDEEP 192:sxZIROyM/jK1Ml8UQ3kh/f4sYmj3PHIdph3HW6+WN+gSXY9IcSq+9Ig5/J:sxZIIq0h/f4sYU3gdHbYXgs/
TLSH
T19B52E816AA345977CCDBE209FA45BF93D6F54472A2940E44A9FCCA0C00E6BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f7a1de5f13c3d0e35de881a76b4da3040ff1e6e64ab0be15f98525f62285489f
MD5 42dd4a84ad52245dd447ca0207be496f
SHA1 ae2b92d30cacfd5a4231641e0aaccd5d614bfbfa
SHA512 bdcb99aa3ffc8da0209e69e0ebb8bac367e0d5f8a5d107b6ea57a2051de888c370f20cf9c895989bf09d0decd641fa56a5871837d81a2c90b859cfe43b99f932
SSDEEP 768:Jacv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN2ro5g6W:Jacv21wWvu+Z+u1jaeFLeRNN5G
TLSH
T19AD20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8f1c6ed06ee2bf969b27a733f3cc14f7107e093684982fd0a36350ccde6427e6
MD5 526f2a551a5915f8f5f7606628575b10
SHA1 ef4050c3eccafb672c2cce947fac273a03f79379
SHA512 ea1495dbb0eee9a354c7c947bbf9f70a1734535a2fd1b0951bf00a249e81f3fd53b026c24474fae85c51127976627edf341435cdb47e973161f2bee6825ddd8a
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDqAoKRef6KcKDyC+:mTLqHP+
TLSH
T13A917812313B129278BE6948A36289368E4636A3380CF57F7BB810750F27E551DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59480b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59480b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7b756d57bb6c0f2da9abd6524d6839b41ed60ae8275467ab64fc35fd6a61229a
MD5 d7d1fc459599e87139b3ebd0843e2918
SHA1 21ecde0c6b9ae2e48ba1dd2f4993df170a637405
SHA512 72492fb9cd27dd5dd7e6086268ef79e0e059ba8f137285bdb869f20a8ac815241153ddce034bfd553715c17f9a3206a9302b6dff1f950578a5b4358a8d9ecf70
SSDEEP 384:/iFiZcIwzsNx8TUNTUlIlhytn4BziJ75e+CMOfmTOObjI9G6w7zP:KFQsgwgetCuAkOfmT29Mr
TLSH
T179D23AF258D78936DAAE9B03B77E2D124EBDC067F5845A80B3C85A1CCD961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79bd8c33dd81dea200e6323f9f717957e17e21898ca731aacbc47ba8358d403a
MD5 241efb99951f1f026dd40947ef310305
SHA1 9b8c2550f4acd40933c468746d418fc19c347cc7
SHA512 77db43ab296f5943a79e0b92910a57aa50b0d697867461b531ea2b2cc67bb446a3b37ed2aabd4fba0999e6f834b5135f39e3917e4173679fb0ae1354250a8304
SSDEEP 192:JONVh6v+YLNQmiUyT+Zh+CGlOdmuus0EU6:JON/6vz/TZh+CMONNU6
TLSH
T12B02F93579682CAB9FF2AE45F48737175FA9213BE6912F80D9D82F1C01D765C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e5bd2af9d299ec39eafbacd8976fff79884132ab065450a3a7e47860be580e35
MD5 29d4571ae3ddfc77d608df0a52f75a8f
SHA1 28789f9b9f9d4fd907c0bf378dece9e4c67047a0
SHA512 2df3576da2653becfa43049810bbc36e0cd0149e42d65cdd04f78f9ab4b5dc2c23a7adf339366970192aacae21a0870698c0a509850c546eea2c59358f9320e7
SSDEEP 384:BZcIhsNQUUytn4BziJG5e+CMOfBTOObjI9G6w7zP:Jh+tCHAkOfBT29Mr
TLSH
T148929C32AC785D769EA7A515F48B36275EF89037E3C92F84D0DCAB1C06DB5AC1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0ec580feff1e47433b405618128694c47d9507ae2e84f1bcaa12c81ab748c948
MD5 46a92e8f97739c72b88ecba1cbc8b7ec
SHA1 646e4b21a50ed3ec538d3d15de49bbc006fdebbb
SHA512 0c2d39ec4f6fd9aa4b778217953d2b1e7f4b21feb1e6b1a61ecfcf73ba33b001bb437ce8d88cf8e85767d8ec5bbcd9b2615a5dc798f4206720f535ac2dcb7d3c
SSDEEP 384:eZcIhsNQUhytn4BziJG5e+CMOfBTOObjI9G6w7zP:chHtCHAkOfBT29Mr
TLSH
T1DE929C32AC785D769EA7A516F48A35275EF89037E3C92F84D0DCAB1D06DB5AC1306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af2a58821cd476d8c3d69e0d0245723f90e497faae3e118a8b06d7eef40b6e1d
MD5 744db95c2d5f9b467d516ca1cc366baf
SHA1 73717cba613ab1f285aabf7677e7f2337783ec24
SHA512 cbd0d868fd088b80f59591fccbb281e926a25f919801c2874ec049075d1492b847c67038f36240d6266a82da30bf87a5eaae4abe0be4bef9a655ae2a6f4cb12e
SSDEEP 192:YONi6v+YLyQmiUyg+7h+CGlOdmchegCHuqXU6:YONi6vzyU7h+CMOfKTU6
TLSH
T1F6120836A8785C6B5EA3A944F48735135EA95137EA867FC0D5CC3F1C01DF69C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23456e31-0908-4721-849a-414118ab7011.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\23456e31-0908-4721-849a-414118ab7011.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f16ee0a2acd11936ec4756df300bd03743fb88c0ddbd3f27c205b26480acae15
MD5 e2ce3428e04ca159dacfdaf6e27d81a9
SHA1 e377b4bbeb41b285de9db822d8e5ecae60ce6db8
SHA512 d2e9df3e3903e9597c785f75e2acc4ca2de04a01aa055cd1fde415cdd1fcb5c3e8a79ce33db3a6d0b9a1d0dfdd249772b3d378993e9daa918493df5c8da7d632
TLSH
T1B3410B58AAF91108B3B37F5AAFF6A46D447A7D732F07D05D10110D4F4662B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download