hxxps://www[.]dex[.]com/dex/ct?cid=19540192&c=149601&key=fa12-bf32-ef96-be35-ce54&url=https%3A%2F%2Fstore[.]dex[.]com%2Fcollections%2Ffeatured_medical_products%3Futm_source%3DDEXEmail%26utm_medium%3DEmail%26utm_campaign%3DA+Reliable+Source+for+Legacy+Medical+Parts%26utm_content%3Dlaetitia[.]pozzan%40audiens[.]org%26customer%3D19540192%26campaign%3D149601%26dos%3D20260923031104%26company%3DAudiens

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.dex.com/dex/ct?cid=19540192&c=149601&key=fa12-bf32-ef96-be35-ce54&url=https%3A%2F%2Fstore.dex.com%2Fcollections%2Ffeatured_medical_products%3Futm_source%3DDEXEmail%26utm_medium%3DEmail%26utm_campaign%3DA+Reliable+Source+for+Legacy+Medical+Parts%26utm_content%3Dlaetitia.pozzan%40audiens.org%26customer%3D19540192%26campaign%3D149601%26dos%3D20260923031104%26company%3DAudiens
Sample261001-ryvpka1dqa

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL 2 IoCs

phishing

description	flow	ioc	pid	Process	stream
Email address	26	[email protected]	1132	msedge.exe	1
Email address	26	[email protected]	1132	msedge.exe	3

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1132	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{AB1DE0F3-D867-4AD0-9677-BCCC368C21E6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4320 wrote to memory of 1780	4320	msedge.exe	86
PID 4320 wrote to memory of 1132	4320	msedge.exe	87
PID 4320 wrote to memory of 4600	4320	msedge.exe	88
PID 4320 wrote to memory of 4600	4320	msedge.exe	88
PID 4320 wrote to memory of 4600	4320	msedge.exe	88
PID 4320 wrote to memory of 2736	4320	msedge.exe	90
PID 4320 wrote to memory of 2736	4320	msedge.exe	90
PID 4320 wrote to memory of 2344	4320	msedge.exe	91
PID 4320 wrote to memory of 2344	4320	msedge.exe	91
PID 4320 wrote to memory of 2344	4320	msedge.exe	91
PID 4320 wrote to memory of 4532	4320	msedge.exe	92
PID 4320 wrote to memory of 4532	4320	msedge.exe	92
PID 4320 wrote to memory of 4532	4320	msedge.exe	92
PID 4320 wrote to memory of 3540	4320	msedge.exe	93
PID 4320 wrote to memory of 3540	4320	msedge.exe	93
PID 4320 wrote to memory of 3540	4320	msedge.exe	93
PID 4320 wrote to memory of 220	4320	msedge.exe	94
PID 4320 wrote to memory of 220	4320	msedge.exe	94
PID 4320 wrote to memory of 220	4320	msedge.exe	94
PID 4320 wrote to memory of 2860	4320	msedge.exe	98
PID 4320 wrote to memory of 4892	4320	msedge.exe	99
PID 4320 wrote to memory of 2860	4320	msedge.exe	98
PID 4320 wrote to memory of 4892	4320	msedge.exe	99
PID 4320 wrote to memory of 4224	4320	msedge.exe	100
PID 4320 wrote to memory of 4224	4320	msedge.exe	100
PID 4320 wrote to memory of 4224	4320	msedge.exe	100
PID 4320 wrote to memory of 316	4320	msedge.exe	104
PID 4320 wrote to memory of 5704	4320	msedge.exe	122
PID 4320 wrote to memory of 5712	4320	msedge.exe	123
PID 4320 wrote to memory of 5724	4320	msedge.exe	124
PID 4320 wrote to memory of 4036	4320	msedge.exe	127
PID 4320 wrote to memory of 4036	4320	msedge.exe	127
PID 4320 wrote to memory of 4720	4320	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dex.com/dex/ct?cid=19540192&c=149601&key=fa12-bf32-ef96-be35-ce54&url=https%3A%2F%2Fstore.dex.com%2Fcollections%2Ffeatured_medical_products%3Futm_source%3DDEXEmail%26utm_medium%3DEmail%26utm_campaign%3DA+Reliable+Source+for+Legacy+Medical+Parts%26utm_content%3Dlaetitia.pozzan%40audiens.org%26customer%3D19540192%26campaign%3D149601%26dos%3D20260923031104%26company%3DAudiens
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff855f5c188,0x7ff855f5c194,0x7ff855f5c1a0
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2028,i,16380078179624080744,6253263534381502370,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:3
  2⤵
  - A potential corporate email address has been identified in the URL
  - System Time Discovery
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16744613709635197380,11866035086280476193,262144 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,3900822469948540218,9284876809349357509,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,1232486025499531919,14694275382256120631,2097152 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,4805024466245986036,17759163254972348430,2097152 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,17908972738568325914,3001202868855621025,2097152 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,6578992998698160297,16779961986055636357,2097152 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,10080352809947103218,12720141319779893456,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,15967826140838414127,14430486551313590977,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5664,i,6018816829513407354,1277820577619755612,2097152 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,8304647784133880395,4237980559462987658,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,8304647784133880395,4237980559462987658,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,3089414001401837845,10194431389632459825,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,12200851574624357560,15911462228229905127,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,11856209923582366028,8081074543353627501,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,17981741003435003895,5434773553400514961,524288 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=4040 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6260,i,13395686476719653813,719682920021725255,262144 --field-trial-handle=2040,i,12295896552383825989,8457969355646403247,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 017afbc0a0092ba247cd4f1340c3f90e021ab32d80f0f46a136881dd9e97f823
MD5 8c7e699ad751cdff25e05fa472741705
SHA1 9d3078c22ac777d565e00b7af12c467a61c1fcdb
SHA512 f5c2b8100bca0e4008d9f4e46e0659eabaa6139c0b8f9133970f40f473eb9f78e565b0a8cfead8578d00ae031d0de3d4a4ed1039404d469884560aa5098f6173
TLSH
T1F58140A981B05258CB9F7032B1D119A6F93A75B017832FA2B094C4B86F9A3B4F10C17F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592bb9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592bb9.TMP
Size 2KB
SHA256 3d5e1334c83160e7a73134d1564f7b15b39efe5580c4565f3b7e6c4849668b66
MD5 5b078db8468829af6b129fe5472c68b4
SHA1 3112e15054b429cbfdd4740eb09480635c6bf2c9
SHA512 708cb8f1343d1257fcba8c7d4a463a7bbcd3aef844f74b28e173c0f9489478128868ec11c5a02efe1b6c1fab560f8c7552dc8e79d2dc44c6054b990509b008ae
TLSH
T14E51D78D96702354D7AD7073B6A11283FA7AA9B167935F523095C9B88B4A374B10903F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 2418e8bd23bad7b2a46c77b61b76b1845b6240f75b8c5c3446c64ffff5842fa5
MD5 86f5a01434dc2c6b103e72a3a818bbfc
SHA1 175ee799b5e070c76d4aa77473edb7734c391483
SHA512 d8a4fbbc6e87f9f96b8a339eb984c0b6cb74a1d8c406cb4d7c9e10c7fb1a9e34c5adcec87bc0e3599c955eb42107058bd41865ecf4c9ec2aa2c13e6356e75aa9
SSDEEP 192:DyV+JWKm8eEfb/oOkHvzp7sC/VAeAlEtOOfif2Ke8/L:DyV+JWKm8eEfb/oOkHvzp7sC/VAeAlEK
TLSH
T1F6E1ACF6C3E9466DD81216F09A14BE1BCE1D495B42683C0A89D4EF5FA3F20B1A161A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 187d81e46a7d51c42f31fdbf72a8be236786152d4109890f54429e25ea384982
MD5 c6addfb461c928601230fed66f31d465
SHA1 8e790438a65b674ee89afc07a382d72f9f0a2131
SHA512 85c7f1d3ec82900c6365ed9b1477d668eb451e54831645ee72157f4d170fc2a03915ad753b23ebdb73aa9b9a6fdd916e1c1a11061386afe07e3e00499ceb5df9
SSDEEP 192:sxZCR0W8/fZs+5IdpWb0nOHW6+WN5b4J/YrFo+T4EIgrJ:sxZC98/fZs+SWzHb5Q/pQ4o9
TLSH
T13B22B7526E38A97B8CC7D219BB15BF53E6F9503251D51E48ABFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a0d5824d0e8fb8c68a4c9beb256e50ae4626baa1cf4ef7c645f3ad5a2091ce32
MD5 b2a42aacedc8a1a38edba38eb5850a16
SHA1 c3b98848b0f1580fd1bb28e3ed3c4cb397c6012f
SHA512 7acd0d416c64d25d716cd9b5c0ef18d27c4093724211fbb9241e245c242049723e6852760f76dea2079ea8c8ec74ed2cfbdf1123bea3439b0383937bb9313dc2
SSDEEP 192:sxZCR0W8/fZsI/5Idpkb0nOHW6+WN5b4J/Yrjo+T4EIg5jJ:sxZC98/fZs4SkzHb5Q/VQ4oP
TLSH
T15322C6566E38A9BB8CC7D209BA55BF53E7F5503251941E4CABFC861C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c508d97c30ba98aa382c1573da58de9280e92cb3dd4f901e95ad3dd52bbee7c1
MD5 c7066aab56db598e5e18d62c0e0a794f
SHA1 8b7062ef6940beb1fc92217d68061a6e46f4d111
SHA512 0ea9dccc40c6617d51494872671b4176ee61fd916498f8112501261d33d3bf23ffdd7249a6236a0bc62545510187e45024e32dbb7f09ef11ceb0589028db5758
SSDEEP 192:sxZCR0W8/fZsc5IdpWb0nOHW6+WN5b4J/YrFo+T4EIg55J:sxZC98/fZscSWzHb5Q/pQ4o5
TLSH
T1D222C7126E38A9BB8CC7D219BB55BF53E6F9503251941E4CABFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4db70f0c6ba9ef35c28fd299aaef89da2c667ccb159fd437e4ee1b9061f3ce40
MD5 198792900139983d03c953601e242b93
SHA1 a88c05dcebad041da33852db84301d5ec34d41a8
SHA512 15efdfd60e736f49ebcd13da309b53db3f279cac43d8dfcc69de525785e16d7f3fe3a8e23ebd1f3b9c25c83bfe2a123e4c53a4df61f19afb3a5206182d1e963d
SSDEEP 192:sxZCR0W8/fZsI/5IdpWb0nOHW6+WN5b4J/Yrgo+T4EIg5jJ:sxZC98/fZs4SWzHb5Q/uQ4oP
TLSH
T11222C6526E38A9BB8CC7D209BB55BF53E7F5503251951E4CABFC861C04E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4997584012393f8cbd78e5dbcc3d1fd7349a2ed5f5e8b80d109f193adb2e8516
MD5 1b6bc0bff668071137c5c282e2894d10
SHA1 6794919cda5ffe50fc4a3e0f82b4d55154933f44
SHA512 bc0a2f082a8454856202d80a2351c329dbe544efbe5cde468d026aa9641c072b7f301df7c9d6f40431ffb8d0c14a37ce1fe49f567077bc898006d37301cec3f2
SSDEEP 768:vky4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbxroRmT:vky4J/DWvbtBhu1jajiLm0bKYT
TLSH
T125C2FA3B684CCA7E4FC00A9DDD5E6FD73E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 1KB
SHA256 1106ffd1dbbc4d8b44330e018193329ba0d00e97004be5fa732a3a872cdbe7fa
MD5 7b3678cb75cc280c57cf7f77fecbb62b
SHA1 f5c43119abf29118e8c2a0b4d82bba496b769fc2
SHA512 4f4694934ea7f7e64d26cccbd1c7cafe46155c475a0956e1f8b3c29ee9a2d6eb36042564419d6c987c2204bd6668661280c0f5e7e822eb36143f9f8431e42522
TLSH
T1C03142F90E49E73FC479083074CA19F076315966DE77168B008E68A13553F993F6A7D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 dd5e883aa2c42c16664ecb278bf8257eac26876c78db5fecca09d6472b527d0e
MD5 f86c930922762e9f8a19d621d71a70b1
SHA1 c274136acd98e55d9bed8819b713819875e9618d
SHA512 b2a74b48c2131ea573af507b83ca27ae5fcd16dc48e1c559f36e0ab887d8517622aee71e4cefb95a690f149ac48444a829a6710ff29e4fa2723d467cedcf4d90
SSDEEP 96:KIDCKs0+u/+KEUqed2Ku8BycK7yCe7aHbJhh+bxwl57+KBL5F+NT7Y1BicKXKeg:E5xdhxfjeTg
TLSH
T138F1295231B7060038BD294C8175975E524231B33019FAAFBFBC44A19E6FE599EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6da5f85f-619f-491c-8c83-8f1d8c40cecb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6da5f85f-619f-491c-8c83-8f1d8c40cecb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ab96f78091c19b1853564650f0bbd6faae8717fb4796b91988e78c62c43af635
MD5 def45807e54e0a2c703b3ceb8d1ca144
SHA1 7539ddbcfc2a2a4bd2b60bd4601aa38f67f5c493
SHA512 dbec9581e29208a8c5cb9bd1f3812cfe7c083f66722f887a9669d7fae516672b0db22714fd36222ae89e5c87edd1182c87d8a7a539d93311d493b05cc887ec1e
SSDEEP 384:lZcIhsNHUM3bAZN7pHX58EAOrFCtgOIwZOy2OoI:dhSAP9aDOrFCXsY7
TLSH
T1C2827D72A978AD7B5DFAA144F58632034FB89037D6C6AF84C5ECAB1D019E1EC0307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6bd837053f2e357849e657f6230a9861e029a49e3d29a21e8d744cfbaa020797
MD5 8fdbb02e0cb3fdb4144e014c6cf07b6c
SHA1 6e704f326086e2a984fce4c5772ac8d44914bfd9
SHA512 c536e4bf843f159fe437e4dbfc56495402e7afbccfecc9d5c3dc2aac5518ac8dfafa1f2db8e8267d84cb321127094bcdfacd71ec443a1fd31504f0d2ac85ed3e
SSDEEP 192:1ONw6wlDgQmiUyp7W4X58gZAOKmyDlZZUU6:1ONw6kgyW4X58EAOtyAU6
TLSH
T11902E939B9B87C6B9EF26D09F58727139FA4202BEA556F44CAE81A1D00D779C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1d539f0c33f6571e65dc972a77a2143f4b16a3b1fb9858ff5c0bdce966a54da3
MD5 922c94655bc9b126d78a5c674b2770c3
SHA1 8b74901815a03753e0d1f2c7abc2a082f082c7d9
SHA512 93d31651070bb69a172d818fd428784c5a8dd6910b2bd42375edffaac666f2da4a7b771adc0f2440b4e902f4009c07427be283d07490d8bb0526044b44e4b5dd
SSDEEP 384:1iFiZcISzsN88TUNTUlIl53bAZNRQpHX58EAOrwCtgOIwZOy2OoI:8FQ69wgTAy9aDOrwCXsY7
TLSH
T12DC23AF249E7997AD9AE5703E77D2D024FBCD067B585AA40B3D8591CCC9A1BFC306802
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b49344a3ae075a127960bc86b87036abcf6e0324cd47ff9c1ed5185256a0e680
MD5 d872a84ad166f9fc7e31e244f35dc1cf
SHA1 7222216e184f0c1e811a27785599337c8dc5b40b
SHA512 0fc356330e762f488b8d442131e327588c2ae5b91bd378432e41ce302fc6a52bef212a748ea920e5027906261832e93d24060fa1be5c22298b201fc1c7931355
SSDEEP 192:1ONt6wlDHQmiUyJ7L4X58gZAOK61vePqVjU6:1ONt6kpkL4X58EAOrECU6
TLSH
T11C120A36B9A8BC6B5DE2A544F48731039FA85127DB45BF94C6DC2E2D01DF2AC130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 304e30af7e6c245c95a69241006cd443504a0ac823ef803a11e6b4e2b2b7b245
MD5 2cb558da90922573ce6b4c9adbe82428
SHA1 8d83039a3138f92821434cf75ada33d6a57bd210
SHA512 bafb41699003d6ad0c8d28b89c9031d5be503c4fc289e49c228b444d980f905249abe3888007308ffaf3abd0481d6835c39cc099096a61cba201b6bd96290da5
SSDEEP 384:AZcIhsNHU53bAZN7pHX58EAOrFCtgOIwZOy2OoI:+h5AP9aDOrFCXsY7
TLSH
T166827D76A978AD7B5CFAA144F58632034FB89027D6C6AF54C5ECAB1D009E1EC0307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7520085-459f-45a0-9f90-d89d419c1330.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d7520085-459f-45a0-9f90-d89d419c1330.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b34fcf232c6c48bf66e5d26148ab291d18717e64522e2c75df501fcdae712a67
MD5 9c6c6dce1434e93ad35df662f13827f5
SHA1 45d848b39e47c82a3aec222c2601bc360351a1f5
SHA512 05a9d054aae82c6eb3b03c987700e1e6c1201e0ff03a4866be3f8b78b913b4cfa3d27bd31a2740d8a84137839b31879bb277e1308e7be282bcea50c983da35c5
TLSH
T1AC415B58A6E91148B3B33F5A9BF7686E48BA7C372E0AD45D10110E4F4A63B40CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download