hxxps://community[.]progress[.]com/s/supportlink-landing?utm_medium=email&utm_source=eloqua&elqTrackId=afb5432c7e6a476fb7ff3d5ecb88f81d&elq=53042d6f1e2e4faba05c0b75e35fcce9&elqaid=41854&elqat=1&elqCampaignId=44158&elqak=8AF588035F60FF4C645ECD82927642C92D5CFF1AD6B8C26696573AF9B18A3CC39059

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 14:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://community.progress.com/s/supportlink-landing?utm_medium=email&utm_source=eloqua&elqTrackId=afb5432c7e6a476fb7ff3d5ecb88f81d&elq=53042d6f1e2e4faba05c0b75e35fcce9&elqaid=41854&elqat=1&elqCampaignId=44158&elqak=8AF588035F60FF4C645ECD82927642C92D5CFF1AD6B8C26696573AF9B18A3CC39059
Sample260811-sakecsssgw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309337287159995"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{686C0489-E71A-4A1A-9A6C-551C8048C3AB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3764	msedge.exe
3764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4632 wrote to memory of 1852	4632	msedge.exe	87
PID 4632 wrote to memory of 3812	4632	msedge.exe	88
PID 4632 wrote to memory of 756	4632	msedge.exe	89
PID 4632 wrote to memory of 2224	4632	msedge.exe	90
PID 4632 wrote to memory of 756	4632	msedge.exe	89
PID 4632 wrote to memory of 756	4632	msedge.exe	89
PID 4632 wrote to memory of 2224	4632	msedge.exe	90
PID 4632 wrote to memory of 1796	4632	msedge.exe	92
PID 4632 wrote to memory of 1864	4632	msedge.exe	93
PID 4632 wrote to memory of 1796	4632	msedge.exe	92
PID 4632 wrote to memory of 1796	4632	msedge.exe	92
PID 4632 wrote to memory of 1864	4632	msedge.exe	93
PID 4632 wrote to memory of 1864	4632	msedge.exe	93
PID 4632 wrote to memory of 1100	4632	msedge.exe	94
PID 4632 wrote to memory of 4888	4632	msedge.exe	95
PID 4632 wrote to memory of 1100	4632	msedge.exe	94
PID 4632 wrote to memory of 1100	4632	msedge.exe	94
PID 4632 wrote to memory of 4888	4632	msedge.exe	95
PID 4632 wrote to memory of 4888	4632	msedge.exe	95
PID 4632 wrote to memory of 4848	4632	msedge.exe	98
PID 4632 wrote to memory of 3764	4632	msedge.exe	99
PID 4632 wrote to memory of 4848	4632	msedge.exe	98
PID 4632 wrote to memory of 3764	4632	msedge.exe	99
PID 4632 wrote to memory of 2640	4632	msedge.exe	101
PID 4632 wrote to memory of 3896	4632	msedge.exe	105
PID 4632 wrote to memory of 4104	4632	msedge.exe	106
PID 4632 wrote to memory of 456	4632	msedge.exe	107
PID 4632 wrote to memory of 2664	4632	msedge.exe	115
PID 4632 wrote to memory of 2664	4632	msedge.exe	115
PID 4632 wrote to memory of 3764	4632	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://community.progress.com/s/supportlink-landing?utm_medium=email&utm_source=eloqua&elqTrackId=afb5432c7e6a476fb7ff3d5ecb88f81d&elq=53042d6f1e2e4faba05c0b75e35fcce9&elqaid=41854&elqat=1&elqCampaignId=44158&elqak=8AF588035F60FF4C645ECD82927642C92D5CFF1AD6B8C26696573AF9B18A3CC39059
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbe146c188,0x7ffbe146c194,0x7ffbe146c1a0
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,11872512937662891160,4715388590559510118,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,8621514837595788179,14230999457013017990,262144 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,10006520214140091430,1769537911175213823,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15531272448859738780,11005129150340712826,2097152 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10375666190348390614,13108806038340312900,2097152 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,9340610071198360193,3473274233064336860,2097152 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,10183109027318574333,7186754143717220903,2097152 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,13186334345916346091,9214517871013353694,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3392,i,14501082896722089362,4187092247027200701,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,18168654056992307364,3710779003011626179,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,18168654056992307364,3710779003011626179,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,2712830016309159480,7846054004441473561,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,16932632099410075103,557517573748048586,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,12914232991372373892,9568201125078312046,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3140,i,16079973842515449627,5195976077409977512,524288 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4552,i,6142428667891878108,10094726370565207436,262144 --field-trial-handle=2276,i,2784377485786322750,7146982568700729009,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3764

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

9a9968c5-0b8c-423f-b963-923c9243e896.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a9968c5-0b8c-423f-b963-923c9243e896.tmp
Size 12KB
SHA256 4e03c449855942c26702b487609a8c86654ede7900dfde27feaca657d5e79c0a
MD5 b529e102877db19846b8a7229ba706cb
SHA1 7400c07297382657086c7026cc69def6418f7386
SHA512 b3142a139e9ba5c0d1a62677ba72a6c5cb33d956bd3e1930d8aea0f72fc3124390a5c7a4919c1b60433324c5875846a141814e6adae20a207af03efe18e1321e
SSDEEP 192:sxZm/yM/jK1Ml8MkD/fqsy73Idpn+HW6+WNVbo/Y4/1VKIgrJ:sxZm5MD/fqsy7Y+Hby/w9
TLSH
T14342D7116A386977CCDBD209F9417B53D6F9447292904E48ADFCDE1C04E6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ae237d461c75bb22ff89ca82257e0cd0c8058d1dcf5b76e4a98d5b42a8705ac6
MD5 64da403c45752da4de3b9a21872d6dfb
SHA1 55e719a63aa1bcf2d8043926599c21766771d7ee
SHA512 4c853aae1112930dcfecc4d350a65d1bfbe23014ae49a422a52e783974d61dbd214a53e89d49d8d8c0f9c70f3db5564d609b0a30e72e6f5b97d30bbb53215029
TLSH
T1C6713E1A11FA489ED721A330F1CA1D0E7CF3F19B0E139E89315CD8BDA53A735E4A5554
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 207509e9690fc32910612e999845bcee78095fbe7d20c183c232985f71bf4560
MD5 e62756ca1e3321e97d4b8f9fa359eceb
SHA1 45f007f1decb80c53c7eae0f216b0ce8c35490a5
SHA512 e39c0ba237e3f1a83f29cb4b2d2d9d79e3b2887183aee613de581847ee276c0ab1cccbb8f0c40ed21969a5850b89a9759e097fe8b35725835fec0907cb901070
TLSH
T1BB81501A01F90499D725A330F1CA1D1E7CF3F59B0E139E49319CD8BDA63AB34E0A5654
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c56e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c56e.TMP
Size 3KB
SHA256 e0de770a319e4d0288d93b127c9169c596ed1ddc8ce134803107d47d65331595
MD5 50ba7003dce61f7b87f4c069a1107966
SHA1 7f1a4f37107d8b8f974cd37844c54715c12d7eec
SHA512 1288732f16515f69664ce1550403875b2ab7c5ba08a8b2604fac9f9237c5db7ba0db5e32ca8f26f55ce0438fd7050a0d519b66666bfcfd6d7f4e0bbd99aa1e66
TLSH
T161712B1A02FA489DD721A330F1DA1D1E7CF3E19B0E139E89319CC8BDA53A734E4A6458
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_community.progress.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2e362f41a3323899e86e732e7f3bfa7351a7ebed36c182bd793be84f9d6ba0e1
MD5 8a3259cdb584b1a2f950965682ca340f
SHA1 77542f5c72a3c9d2a31d84bcc81bf2fb67bc6066
SHA512 6a17d3bed96bcdabd3af031a3e459c79ed9b6b3f6a35994a961bacfc8866bff42fa63d67b4ac608534df3209cf4152616c84c829c37d1dac642a562f70f3e590
SSDEEP 96:DxOGnHObnLVjlGOzzwBi1jalxe7lljVWiWg:DkGHObnLVjlGOzzkgja7e7lljVWiWg
TLSH
T14491C1EAC7E4962DDC3159F0A7166D1BCE1D1928922C385ACDE4FF5BB3D1470E201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 689a43b43e37c83d665a9d9975b18802ee92b49e69cf7ccf28ea7393223ac47c
MD5 ba62b4969d7037e5e1243c6edb54880d
SHA1 5afab8edd08b52fde9322cc4f2b9bb0974733903
SHA512 5f35a0081c7a656a0d6ca9ad5938eab28ba35ff4988bed3112a059c1e530802da8aa7a3e435764f674c6ed457c4b6918eed9642543b7d30fa93d334e7a9dcc95
SSDEEP 192:sxZm/yM/jK1Ml8UQUkD/fqsfjlIdpt+HW6+WNVbo/Y4Gd/Lh6VKIg5/J:sxZm7qvD/fqsfjWcHby/4pv
TLSH
T14552B6516A385977CCDBD209B941BF93E6F5447292904E48AAFCDA1C04E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e9b6a7724e7a365c5b953e837b12ad553623bb9e86e49dc16c43ad4984c69849
MD5 8c5e154c364f460acca6157bd9a0f115
SHA1 c403fb8f1d1cc7e793fa74e30b31fc732c0cbcc0
SHA512 43561c393acb5ef27ff3321d15040cb040fdb02ae79099cd934613c12d0892a2c24db8080c8be9d7bb59c55b8dc69b804a4f76372e5ea59513941c0841cc9c2f
SSDEEP 192:sxZm/yM/jK1Ml8MkD/fqsfjlIdpn+HW6+WNVbo/Y47hlVKIg5/J:sxZm7MD/fqsfjW+Hby/+v
TLSH
T1FC52B7516A385977CCDBD209B941BF53E6F5447292904E48AAFCDA1C04E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ee3332a157e152c64f913a67c52b2e56af68e95a1517159237c98e0d036299a6
MD5 78ad0957759bca480afd4f8954da8e80
SHA1 3223866b8216f54adb9020c686bda6b71f924276
SHA512 1349146a6df7eafddfe7ece83911cc61e5216bb71b858e07b2461283849b614cb60807febabf8fee8cb1be6642db94cdda2c48b248f849bc1cce4fcfc61a6108
SSDEEP 768:se8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdHroOkJUnz:se8iJPNWvx76ru1jahALocdUbUz
TLSH
T1BCD2FA3B680CCB7E4F844E9CEC266F966DD801CB5A988D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 db1ae085f879597253e42b66f04d7e683e3447ac9fd740ca7f21b7d3b810142a
MD5 a9a459f38a2e215e5acc16b641f5b4a6
SHA1 bdd43187d75fa1ac6534c7dfabc3e32495641127
SHA512 7bba0a09cc260967cfd6219ea12a2c1b056c83727ec697551ffed5f8498f2f17566614441000749898779290af13847f90d12e34bb3a7e02368baa44cf6a65d6
SSDEEP 48:KsgIvKBWMPyNPK7/1pNkdpgPIgXkKDBbtkHf0aA1LfIRKcocjyi:Ksg4KBW2qEgKNC2fyKcoy1
TLSH
T171912F1675BB12112D7E2D0DE2668726464276A33118E56B3BF844F20E7BF650CFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fd12de8-2dd0-4de5-bb82-fedb37f6a35d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9fd12de8-2dd0-4de5-bb82-fedb37f6a35d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9981701ada3b0b97a105c25b08ff2fd817eb69cc9428d64d3d96bdfc08c9a4b2
MD5 ca5e6d47613d63a128fde5b257f2b1cd
SHA1 8e75124e2dc0f975293a0a305f44e2795c5ed74c
SHA512 42d7f95e7738d7baf0f6b407e52cbbdccfc4afc926ae1e93d41032b2dfa50effbf9136caa24bdc5c121f529a499c01d858dbe2daf9869eb1c4b1612568dfd0b1
SSDEEP 384:/ZcIhsNF6RkrKbN6kkTiMdOOPrXLpe8C/htn:XhJkroUdOi9PQtn
TLSH
T168929D71AC782C76ACF3E956F44736075EF48477E7C82F9896ECAB1C05DA1680306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ff674e08de7bb4ccfd61f6ed7158b1c137916acdfc8ae85879c689798ab17dd8
MD5 e01c22fc72d00800a006575a290becfc
SHA1 97271425d6b6723c4a7458dcf6d45bf61f69d5f7
SHA512 f31f988e1c7745d2fae9f996ba1461496a8071d6e2519fe25488771e3b3c42986d23f3212bdc51df3e6187bb1e4333cc0a5da13f3cb4544df1f636ff25c7f703
SSDEEP 384:oiFiZcI/zsNf8TUNTUlIlPRkrKb+6kkTiTdOOPrXLpe8C/htn:zFQ7ewgTkrrbdOi9PQtn
TLSH
T102D229F258E7587AE9AE9B47A77E2D025EBCC067F5846A54B3C8990CCC8607FC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9d137f10a000bdd9676d49093755c5b68b1f8fac8f2409a5e6e1901c037c0a7b
MD5 1f05bb65cde9f6de34ad19dcf8f324a8
SHA1 cc114bca1ff1a49048efa4a98e3fd997192551c6
SHA512 68907e747f747d94d55f4b762af7653fc6d88adc0b6f63c7f609967a51f904769e888e64ae149a8dba29c37ff2e3fc5a9f4b11098b0bacce9797cc2eee3abafd
SSDEEP 96:ZqONk1QsjpfmUTmDK5ih/cIPURHl8h4otop5z5DOBhPwivh50xy0SFYKCAxTeYN5:gONl6kDfQmiUyluZ903plQi/ctU6
TLSH
T1E202FA3568786CBB8EA3AE46F44737275FE5112BEA942F84DAE81B1C04D724C170683B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 452d6c44e7c4b5d60adf97ba0d898d76d8e62c89907dc78461071a30a082c8c8
MD5 46bd02b99f3a4be500511e27c410e2a9
SHA1 7511f5897274568822b958b308894e07faf719f0
SHA512 2931790cdaa0439b7de1ff1dab96dd3fb61df689400921fa4a5ecaea00dbfb5d9b9b1b1beddddbadcadfcf0d7f1b110bee96726cbfa7fc3f93cbe42eb8e23ad7
SSDEEP 384:BZcIhsNFPRkrKbN6kkTiMdOOPrXLpe8C/htn:JhMkroUdOi9PQtn
TLSH
T16F929D71AC782C66ACF3E956F44736075EF48477E7C82F9896ECAB1C05DA1680307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2fe56992ee27f3004a828aa9d1e57e78e5791e774635c4eb509d961e1cfd80b5
MD5 38f00dce0ceea4e41ce6cb1cfe4a73fe
SHA1 d7da332d3f6972871e6aad77b05863027d5472c8
SHA512 b785fbb9521c3add39b4d86fae458e8fb3be8f37574667fc2392102778c2d3eca6916306ebc469e72852f08bc723f9261a942960dea8733315547ca1f70633cd
SSDEEP 192:QONY6kKQmiUy6vum903pTeF3EecR0q7U6:QONY6PMm9kTiudU6
TLSH
T1FE123B3168786C7B5DE3A452F48336135EA0816BDFC86F91D9DC2A1C01DF15C170BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd986294-dcf0-406d-81e3-e6dddfb1a86e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd986294-dcf0-406d-81e3-e6dddfb1a86e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a8548ccc489263fa8e5981fc411cf9c70bfe74702ec1a0ae8be1ea9c03a0390
MD5 1854935da9bd898601d78b05688eca69
SHA1 6a0d8f5726b3fc0619327050c3414465aadd7a19
SHA512 57fe26ad77c4dc16026e282f77b6da10d38a9712ca451666c59649fa97b0ca5988f6361a456927d6b7da937ba15d4a8a826eb6676b1031aa06974cc08a536565
TLSH
T1C4410958BAFA1158B3B76F56AFF6B86D487EB9772F0AD45D00010D4E0A62B00C872737
MD5 SHA1 SHA512 TLSH

Submit Download