hxxp://xn--qitjtoceq-95a2o93b[.]fuenso[.]com/4fmzxn19762JCQY1989fkvjfkowhv266QYKALXOGPJARSQO96280TOOP120288O10

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 15:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://xn--qitjtoceq-95a2o93b.fuenso.com/4fmzxn19762JCQY1989fkvjfkowhv266QYKALXOGPJARSQO96280TOOP120288O10
Sample261001-symvdsfb87

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4936	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{F8C999F1-2C57-403A-986A-C7D273C37A19}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4968 wrote to memory of 2856	4968	msedge.exe	86
PID 4968 wrote to memory of 4936	4968	msedge.exe	87
PID 4968 wrote to memory of 1080	4968	msedge.exe	88
PID 4968 wrote to memory of 1080	4968	msedge.exe	88
PID 4968 wrote to memory of 1080	4968	msedge.exe	88
PID 4968 wrote to memory of 4716	4968	msedge.exe	89
PID 4968 wrote to memory of 4716	4968	msedge.exe	89
PID 4968 wrote to memory of 4956	4968	msedge.exe	90
PID 4968 wrote to memory of 4956	4968	msedge.exe	90
PID 4968 wrote to memory of 4956	4968	msedge.exe	90
PID 4968 wrote to memory of 1660	4968	msedge.exe	91
PID 4968 wrote to memory of 1660	4968	msedge.exe	91
PID 4968 wrote to memory of 1660	4968	msedge.exe	91
PID 4968 wrote to memory of 3972	4968	msedge.exe	93
PID 4968 wrote to memory of 3972	4968	msedge.exe	93
PID 4968 wrote to memory of 3972	4968	msedge.exe	93
PID 4968 wrote to memory of 5068	4968	msedge.exe	94
PID 4968 wrote to memory of 5068	4968	msedge.exe	94
PID 4968 wrote to memory of 5068	4968	msedge.exe	94
PID 4968 wrote to memory of 1492	4968	msedge.exe	101
PID 4968 wrote to memory of 1492	4968	msedge.exe	101
PID 4968 wrote to memory of 2584	4968	msedge.exe	102
PID 4968 wrote to memory of 2584	4968	msedge.exe	102
PID 4968 wrote to memory of 2420	4968	msedge.exe	105
PID 4968 wrote to memory of 4128	4968	msedge.exe	115
PID 4968 wrote to memory of 3988	4968	msedge.exe	116
PID 4968 wrote to memory of 4616	4968	msedge.exe	117
PID 4968 wrote to memory of 1084	4968	msedge.exe	125
PID 4968 wrote to memory of 1084	4968	msedge.exe	125
PID 4968 wrote to memory of 5100	4968	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://xn--qitjtoceq-95a2o93b.fuenso.com/4fmzxn19762JCQY1989fkvjfkowhv266QYKALXOGPJARSQO96280TOOP120288O10
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff84de3c188,0x7ff84de3c194,0x7ff84de3c1a0
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,12908520004110686079,5877999984719935824,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,11646835669970565293,11655634835987171403,262144 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,17367405550539290206,7311681013771776587,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,8837248920620994771,13246448601274250877,2097152 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,1204789201060971966,5843625929391668158,2097152 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,635443449408692688,14848044065197199725,2097152 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,3479073613045050388,9143703747436371003,2097152 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,14937255671706040603,2189401511910474991,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,12388148502160215364,15596453314429847852,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7549147654567060356,4273884043414076582,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7549147654567060356,4273884043414076582,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,1920780769327936572,4136213755996172634,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,10549180770183963545,8698314495961870137,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,14155496985270087788,6168409032183813553,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,10101834674201613561,13201225042658118297,524288 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,4563860355853002349,10333435662343791582,262144 --field-trial-handle=2332,i,15925633921496340247,4638058729306074589,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1dc5f56d423a533c8b76ac3723a6cb5a3c2a56eb684071fb12516ed618c6794c
MD5 86591c468a02448f4703cb4d66f9aec0
SHA1 ba18d5b1b951b9b1e50e12170b720bda819709f7
SHA512 884eebdfdb9cfc30c766fdd35a46d53c44f00cab28e9140aa9a246f2d52c561d698df5cf6757a907509b862028733b3f169ccd8895e4e7b48bc3b3a257d9479a
TLSH
T119618141D0C1846AEFD44230A5F6A1A7F23176B4C5A7BDB9814CDCBE9B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f874.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f874.TMP
Size 3KB
SHA256 21c098a5235836aa53b4f8d9bbc268cb92c59445d6d5c787b58a3c95657b92ec
MD5 16e140599afa90071326c34ad87b33be
SHA1 66c823a48ec28f58dc9210f3835b2e3f51b72ca4
SHA512 9b7b5d6d8b9f16c433d05a2015f6b08d5cbde3d43e1cdd8e4da6648e512a8968bc1bce482ddb15abba3fb81cf585e1e3f5cb82a313ede281d2c4538183adc511
TLSH
T1F7618241D0C0846ADFD44230A5F59197F23576B4C5A7BCBA814CDCBE5B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9ffec26c8f1cd6caed7b500bdc2db8c94f3ffb304397482da122d29501bacf8b
MD5 48e8a9f02dfdcaae8055f30901a73c5a
SHA1 5b0f251245dd9607fac178b0ca1f5de324009cdb
SHA512 041a3e1ea68ecc66558ef3bb89c497421f7a9e10cadb7566c3e817a3717a1c54b9d9535df80cf017839360b33c49887e5d5c92139f4bef8b2bd9b423e96e2eda
TLSH
T147116DF383E585AE891156F0AA14AE1BDE1D0605431C7D2989D4EF2793E3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b74c03b3c46d300583510cb9948f07ff8ebcbd013ba36a943d964fa0de3c7620
MD5 9f54b792f4f11afc19597dd211587b28
SHA1 d1d548e277070e4d73f6388431c7f9be2500e9b6
SHA512 3856c31985490370aeec708ad1f4d118116a028547222c2357031fe98474a42e494856c0353cce944311e8a9643f08875c37c70aac06c2f82a3a326d8221ef5f
SSDEEP 192:sxZCRIW8/fJsh4hIdpV/HcY6+WNcTY/YghtuIgrJ:sxZCB8/fJsGKJH+3/M9
TLSH
T1ED2296526E28A97B8CC7D21DBA15BB13D6F91072A1D51E4CEAFC861C05E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cc380b76362a9aaa86558136e4dc9f862a24419fd0c16bacd052e2f33e2fafa7
MD5 abea454c1d11809dc5a6779ab9dce47a
SHA1 afa262b7124eb35a5b9e70d59d4efce9cd5049a0
SHA512 b6b71fc2b35aad04f37f3b15e335096ad74648bcc85f1158207814687017d093d68c2cc83a0263cca897cbcbac73f3cdbb39772fef163e483c425c2e66afc213
SSDEEP 192:sxZCRIW8/fJsN4hIdpb/HcY6+WNcTY/YgVtuIg54nJ:sxZCB8/fJs6KzH+3/wW
TLSH
T1EF22A6526E2869BB8CC7D25DBA15BF13E6F9507291D11E4CABFC861C05E7BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6df09940244086099705b423dcb9e0a5a9d44d5ffb9f5e12eb9eb4b90c3a18ae
MD5 98b05e762d1272c8f39f3abd70ebb410
SHA1 937f70b66768fd711cb8952213c9491fb413ca65
SHA512 ff678d3d5385d94dffc093422b0bef76ea6ae770951f0a65347725410aabaedc03c11d79342e65ea56f9fd69581224fa75efef941dd467b4dc08c2620754bc7e
SSDEEP 192:sxZCRIW8/fJsN4hIdpV/HcY6+WNcTY/YgvtuIg54nJ:sxZCB8/fJs6KJH+3/eW
TLSH
T17222A6526E2869BB8CC7D25DBA15BF13E6F9507291D11E4CABFC861C05E7BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8a12ee089935db6acae9bee6fc8202f1335ca8240e38e5a5f4cf12fa2c9e4e7a
MD5 abfafe7595ebe1262c1bdfa216d23a25
SHA1 3a25e8c2ba34dfdc4c2d071fb4e993d38d933c45
SHA512 9003374ed35cea50c35dd690e674229fc82c1c41e07fcb42ee8dc81b569ce53ee3e7895260e37efa000179a164c69fe6f6c09d106ed34f9b443e4062e8580b97
SSDEEP 192:sxZCRIW8/fJst4hIdpV/HcY6+WNcTY/YghtuIg54NJ:sxZCB8/fJsaKJH+3/Mc
TLSH
T18122A7526E28A97B8CC7D21DBB15BB13D6F91072A1D51E4CAAFC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 98e3f274cf763c56d24afe4cee5bd3d46c01372ad4a15934bdd9cfdeef33a480
MD5 5768f80576048eb61c0c501509ae6ab0
SHA1 3200a1ce1abe0f44ce3d59a0d2ccf0e1640a2483
SHA512 88ae02247bef189400e04c5c0464793d0b72ef874b87495c6f5323a9a29492498ddb83767c9e73ce0a464cb06c3f239f05fa11ca0f62f067c75a6e3036cff43f
SSDEEP 768:sFichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzHror29Dl:sFichfPWvPZplu1jan+LKgzUah
TLSH
T1C0C2F97B644CCA7E4FC01A9DDD1A6F967EA802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9c29029af0329d1fd501924e25417138e81487e2028d3d7151ad1e6a6c2d7eb3
MD5 c03edb30f6479d77ea9316be6eabf4d3
SHA1 f272c03ad86dd35f3e04047c1325c773e0430173
SHA512 8e90d609fc20c2b7fbc06d88903a12d145ce1e14846b37ca1693b48c7cdd2b5595fa59fc311eb80350bc11750d8970411e99b1ce4547a2fcb9599a635d4a01c1
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLWRsQO00tbYvAISotK9M1OtxG9Yn4UP:KAzmKo0ye5WKyoCOduKu8n
TLSH
T169912E0135AB125078FE7DA885B4871B02813577351AF62BBFBC50668EAEE584CFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599570.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599570.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2ec7dc7f16af8e5e9530c7de859347cae5e21ab56d7a801764fd7890955542fe
MD5 79a5316f6025f3ebf7bef3923fc62b9b
SHA1 c013317ae2823b4f1c5ea9977b11cc2060724002
SHA512 0df05e3f0e5e6589d253a6a78802e9eae246174114676c4e42bee6c87986bd5dd1067299214d5520fd82f6961b5dc1f495f47dee1c63ff78f305b20e6a93714c
SSDEEP 384:QiFiZcIszsNi8TUNTUlIlvc5og+BGYX5EaV84YXT3rtgOIwZOy/Axo5:rFQQbwgaLIGYua7YzrXsEAK
TLSH
T155C23CF248E7987BD8EE5783A77D2D024EBCD027B585AA10B398461CCD951BFD306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 809be2bd9053bab44a70b5293524181316dff4c7c1dd5c4128838ec1afccdd43
MD5 18cabc862703e384defbb23a247107b0
SHA1 c37f0e36042368d36d1437027349ea0530191e12
SHA512 75785f88a19164d7f8ec5f495f3b2dd9bc2ad4ef9b45f58cd62b3d8fe883b35d1533687dfe84f8c14423a5083a55ade1b5292e011a02df1bd378fb7b005a49d9
SSDEEP 192:LJON76DphmqQmiUyQNNq8wGYX59ezTC5jzor3mL9kk7AFU6:lON7619vRwGYX5EaV8CAU6
TLSH
T11402D935AC787CBB4DE3AE85B44B26139FE8212BAB946F44D6E81B1D01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 73f04fca155189ec5fd3316cf37362d1d7b735eab1e726e3cfc9275ead4cdc1f
MD5 d7f7d983a9959a6ef71db09cea6469b3
SHA1 6f45bd2969b6371611e265cece71d2550c2369c6
SHA512 f3844cd6de723fd8e470dc098667844d8499610097309140fe5ecc7154415a3a251e936f20932fc5fba7dcf40021ef6cf47bc75db366353c3a5bd9c423b9125a
SSDEEP 384:xZcIhsNaEc5oM+BGYX5EaV84YXTdrtgOIwZOy/Axo5:ZhRXIGYua7YhrXsEAK
TLSH
T1BF827E779C78ACBB18E7A185F54636039FB8A02BD7C5AF50D6EC572C01DA698130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 89858ca61ddfafe3b6506fecae6bc2d6aed5ee732e021ebe29db26c41a82641b
MD5 f87bb8c455a362cf2cfb09ad297ecf99
SHA1 186ffb64173af8d753a40ab9c880d397c85f1564
SHA512 58d8f8d50625c9e1bcccc3d54fb47de290734e273d4e7b9406c0fc66f87dbed481db4ee994c6959d5f01f6b6d0135ef09eda5dde14dbba2417e31289bcee8ad6
SSDEEP 384:KZcIhsNavc5oM+BGYX5EaV84YXTdrtgOIwZOy/Axo5:ohOXIGYua7YhrXsEAK
TLSH
T154827E779C78ACBB18E7A185F54636039FB8A02BD7C5AF50D6EC572C01DA6981307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c1c6f7ee505e15cac42551fbd457dcd3795be92c86b37fbfbc8a242a857d3126
MD5 0564d802d04700b2aba6b41c3417d9fa
SHA1 d5ee8b324c40a21b25779bed6fe7e6c3e6b6f9c7
SHA512 8b6daf2fec4403f3727869252b70c53643fed424aca85cf679c55f1c506ced7f855ce768b4bf0133ff528c89a429540925bb1c0ae0bb6d98395fa97e6bc824a2
SSDEEP 192:LJON76DphWqQmiUywNN6wGYX59ezTC5jzor3mLrYXT+3kIIXq5OU6:lON761hB6wGYX5EaV84YXTBrU6
TLSH
T11A120A36ACB8BC6B1DD2A595F44B36139FA8512BEB847F50D6DC1B2C01DE658230AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 27416bf16413eeff38731166e2510c4c51a51349b239cf147b6d966d87425b70
MD5 d2028d11248fb43f13bdc480c12b4441
SHA1 fd5a31be2931ff21965ce4aaff760320316c2b1e
SHA512 a1c8a079087a609021640915854432286a9847962999ae1359818e1de234b6aa391271a52d8b7ec1aa583831a772c9e3149c37bdee734587f636f399455f9849
TLSH
T116415758A6E4114CB3B77F569BF7A8AD887BBC772E06D49E10110E4F0A23B00C961737
MD5 SHA1 SHA512 TLSH

Submit Download