hxxps://hotm[.]io/MX9239787

Analysis

user interaction
yes
max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 18:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://hotm.io/MX9239787
Sample260716-w8mtxsfv21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287005486905955"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{6859094B-48DE-4C92-A335-0FAC1BD6D628}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3740 wrote to memory of 4340	3740	msedge.exe	85
PID 3740 wrote to memory of 1052	3740	msedge.exe	86
PID 3740 wrote to memory of 3116	3740	msedge.exe	87
PID 3740 wrote to memory of 1052	3740	msedge.exe	86
PID 3740 wrote to memory of 1052	3740	msedge.exe	86
PID 3740 wrote to memory of 4636	3740	msedge.exe	88
PID 3740 wrote to memory of 4636	3740	msedge.exe	88
PID 3740 wrote to memory of 4988	3740	msedge.exe	90
PID 3740 wrote to memory of 4292	3740	msedge.exe	91
PID 3740 wrote to memory of 4988	3740	msedge.exe	90
PID 3740 wrote to memory of 4988	3740	msedge.exe	90
PID 3740 wrote to memory of 4292	3740	msedge.exe	91
PID 3740 wrote to memory of 4292	3740	msedge.exe	91
PID 3740 wrote to memory of 2200	3740	msedge.exe	92
PID 3740 wrote to memory of 2200	3740	msedge.exe	92
PID 3740 wrote to memory of 2200	3740	msedge.exe	92
PID 3740 wrote to memory of 2464	3740	msedge.exe	93
PID 3740 wrote to memory of 2464	3740	msedge.exe	93
PID 3740 wrote to memory of 2464	3740	msedge.exe	93
PID 3740 wrote to memory of 1080	3740	msedge.exe	97
PID 3740 wrote to memory of 3164	3740	msedge.exe	98
PID 3740 wrote to memory of 1080	3740	msedge.exe	97
PID 3740 wrote to memory of 3164	3740	msedge.exe	98
PID 3740 wrote to memory of 4324	3740	msedge.exe	100
PID 3740 wrote to memory of 3360	3740	msedge.exe	107
PID 3740 wrote to memory of 3564	3740	msedge.exe	108
PID 3740 wrote to memory of 3224	3740	msedge.exe	109
PID 3740 wrote to memory of 3028	3740	msedge.exe	110
PID 3740 wrote to memory of 3028	3740	msedge.exe	110
PID 3740 wrote to memory of 2596	3740	msedge.exe	114
PID 3740 wrote to memory of 2596	3740	msedge.exe	114
PID 3740 wrote to memory of 5068	3740	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://hotm.io/MX9239787
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffe6ef2c188,0x7ffe6ef2c194,0x7ffe6ef2c1a0
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,4766755542833203636,7154302806203448494,262144 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,6024849382183046641,9644996503914651415,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,5858406622947666985,8652875147248592196,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,6447739780745844360,1329652113950160395,2097152 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,3747653533055592139,13656696703599884683,2097152 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,15514302374084905348,753019948091080648,2097152 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,14251990687744856629,18326204538244537980,2097152 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,4719407408647668798,18314252403098490825,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,6105539997497569557,14615079289852593903,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,14473085332357658241,16897942450561769996,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,14473085332357658241,16897942450561769996,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,4771663318264201694,9288341101839545112,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,1652530373063632798,15006052292968762435,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,14853384294560856748,13430916994837248475,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,16654273277701420056,13784485161516890909,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,804649706705331112,17900322834350491459,524288 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,13785539261029102864,10814671138288200489,262144 --field-trial-handle=2064,i,2143453936158897457,3653413324688159452,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9b8507ce19ccb144e7ebde2fe232cce7c0848769674f7b78cf0125de47c1a5d9
MD5 c87e821090a82066ab8676581ce602b0
SHA1 859962d5979fcbeb88adc55b2be8f93ac91b6724
SHA512 7b3e485537b42a2e7dc48c914c227d96a6d54a66a3761a0d11359b7ec37372263bf43927bd05699c65a54367a28c52a70bcc7266a4d8e5c84c968f6a8015bd30
TLSH
T19D713C302206C46DD3B3C23274E22EF3B07540CAF99FAE755160AD743441B91AC1E9D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5864b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5864b0.TMP
Size 3KB
SHA256 d9ee79bf40dc6d497f5729e9c05691caa7859b748e92e654a84171578e67a644
MD5 ddc5aa7c66181bad905664362040c2f6
SHA1 fbd0dae37a77f53ef85fa4f7d7a7b8259ab973b9
SHA512 61eb96858d3084cd999dd863573448aecfd5c22a91c177091896f1fc52e5841df93f957e5e92428d2b8620b2fd9d068e004e1807589cbd02f683681bedbed830
TLSH
T172713C302206C46DD3B3C23374E22EF3B47544CAF9AFAE7551A4AD783581B91AC1E9D9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 81ab52be9aab0d15bdcf0a813fd8e26298f25d28be2dbec5772c88785c82b617
MD5 8ad564299616d777d8fc043851b0827f
SHA1 f89f28ec795f9b799cee00602b166d7dc0f5f223
SHA512 979c5996392561072de9f00dce57bc3f70e8b38d79a8a5ca2b5ae5b92743de2027fa4c9336f749c82067a081f6af6348ba61970ad0278eddfafbf88e7fc4e1ed
TLSH
T17F116AF383E5856E8A1156F0AA24AE2BDE1D0A06436C7C1989D4AF2793F3475E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2f4a3d4c9f3bc94a42ec81efea3adf239365fe55d9e10266740e35ed9f4c2680
MD5 170d4e15a582b16b10c196c347b885a7
SHA1 ff1f5e976d20c132cd4193e8935459107acea451
SHA512 f2ccf5e216a31435240a020ba74bb707ca0f8e9da3bb3ce9a40a3b102e8655767a45954a8fabc32d14f830cf70fd2c4d03d8c71812d2fa622879a6e3a56e822e
SSDEEP 192:sxZ9RwyM/jK1Ml8Mk4/fSsXIguIdphl7HW6+WNYAX/YIc6+AlIgrJ:sxZ9mM4/fSsXIg/HHbL/8s9
TLSH
T1FA52D9126A386977CCDBD209B955BF53D6F90473A6910E44AAFCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f8f1650d37bfb2bb47c02479d875bfa05e633d6b0352c50d508753bd2a0fe856
MD5 39926f207ba8165972fe9351841037a0
SHA1 d9fd989334ef8b179f4a70b5b36a14dd55b1ea89
SHA512 602a64875eff8b1d27f65912e31f350e65e3ebcd7e808518d0597a7bcff60c82cf5a43a394fa9d1bcc7e8da837c77e7a86902b856cf5f2eae8bb1fc927f366d1
SSDEEP 192:sxZ9RwyM/jK1Ml8UQLk4/fSszyguIdpfl7HW6+WNYAX/YIsR+elIg54J:sxZ9mqg4/fSszyg/9HbL/5We
TLSH
T1E252E8126A386977CCDBD20DB945BF93D6F84473A6910E44AAFCCA0C05E6BDD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8ff8ce0b9a7b377936b2152e3725137d54045e639e378d546adf514e4c158327
MD5 719d42ecd35a4bceeab1750b1f14d952
SHA1 a9946f6c7434ce3fc85cd99c63b22e19f8e3b6df
SHA512 e2555ee979cd9ac1d51543a868bb3264dfdd3914bf32e59acb3f27c3699beed633c95852730066abaea028a23eb219f638711cfcd349a790d5d6c936b3e20a3e
SSDEEP 768:ousqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9uCro9zt:ousqxXlWvJD6Tu1ja54LAs9uZ9B
TLSH
T172D21B3B694CC77E4F840E5DEC26AFD76ED801CBA6988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 019c70d46ef6f02c1855183b5aafed7537ad6e262098797c9fd4c97b1c921f0a
MD5 c14caae2498570729883aedebec82faf
SHA1 dd229ca822c26097273ec3c8c5fccea64819b2b7
SHA512 64f76a2270fba3bca62a45572758e3eda8e09da33b0ed9bfed11f467b562e142df3c119d9bb19578a22493b02cc9112074fd6f0c8c99deea4666ee907cb0eedf
SSDEEP 96:KYbaKYIKGG0Kra2qyQKXqgPSKA0uSMAKhmN:ExTjHOJz2
TLSH
T187E167167136465239BE2898B3A686775F4235633008B46F3FB840754E6FE225DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 fb15e5a3e0cb78366997506abe4a73ed98981fe55b17a5935e5a3c545fc89d9a
MD5 818ed1b00732fe7f9a2d006e81948289
SHA1 c44a2405800cd9a3e244d48a70a5f5db3471e335
SHA512 deb433c85961efa25e049712756cac6cbcac594da3394e3e79e37aedd2c81a9d36a84cb2915245444cef1ba61197a5f1df48ed57f4a9ec00974a1defb7265b85
SSDEEP 384:wtNn/s3n9SfsNUj4Jybmh1lVRNEOz/9aSpYOObjI9G6w71L:wj+9UcvLHEOj9aSK29Mt
TLSH
T19F928D366C385D379DA29995F54B3A1B5FF8907BAB852F80D1EC9F0C02DF9AC0309919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 12d702d2fd6c08bc798471209dc2835a04af8c4b4ad48278a479d6a590723113
MD5 0cb731c532d63a4aa47ec663553d41b5
SHA1 462e5a6e2900ad0ea7d5c54782117bc35c79eb67
SHA512 43986d802da447d222cb27e9111b7add9310eb77b917ddcbb493aeb444bbe0e467e6196e146560ab234b5915570112d95c10215c163313b412fea0a57bbd2a02
SSDEEP 384:jtNn/s3n9SFzsNU84Jybmp1lVRNEOz/9afpYOObjI9G6w71L:jj+9WFXLHEOj9afK29Mt
TLSH
T10CB216F668EB1C32C99E9747B77E2D1B4EBCC06BB6851A40B3985A0CCDCA57FC205815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf1d44283f1bd761dcc7ccc162e7422a2f74a509fd25ee0a99bfd4a9b7128cda
MD5 b26ca701fe13cbda32e4429aed6189fd
SHA1 f5d28e8b1c32e2d4b6211d8a5f9587d1fec48cd0
SHA512 83a7bff13a5197e3cf6f09ba44cb5a4fbe8faa69bc1f1b0bfa419219b5dfea94a979a36fc9691f8ed010e9eb5d23e204aeac8ed1b4444bf9a3a64a2f489f6a74
SSDEEP 192:tONnd6JkRtQmiUyXoJW+RNEOmAeR1h3gRAU6:tONd6Ur/JW+RNEOzo3U6
TLSH
T11002E835AD386C7B9EF2AE09B98B37175FE4106BBA856F80DAD81F0C01D765C1346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 44f00529b54105bbbce2dce86e187c147ae0403771f573d36ffc13fa6799a4c5
MD5 3fde28946eb1a14838dc972804dc91fd
SHA1 2b9a7b36b3a9480b37f6254be6d38fafc25e1e00
SHA512 44cdf26d950aae456babe923651a130741ffb476b283d68ddb76f271732ef44dd4203e70cdcb9a103a2d8ce9696cbe25ed51ff7da02000f2d9adbdc1ab74e66e
SSDEEP 384:HtNn/s3n9SfsNU84Jybmh1lVRNEOz/9aSpYOObjI9G6w71L:Hj+9UFvLHEOj9aSK29Mt
TLSH
T16C928D366C385D379DE29995F54B3A1B5FF8906BAB852F80D1EC9F0C02DF9AC0305919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0ec5ab0ffce4f6b366712f5bed84b7b88fd0143b70bc29c2a30757f70fdc4453
MD5 7a8a2b6613145835b773fa3e4631a24c
SHA1 96a9d38e8c5d402631d969193f2d0a14c54bc56f
SHA512 8e3c40f8bf955cbb2aa142b2d8dec7e1bc2bf09cc5d294fe2da7604d37f97e13dbd7d3ae2824c6cb939c273e4f91457308b1db79109d0de5a298c17276660255
SSDEEP 192:eJONV6JkRwQmiUyGoJX+RNEOmAeRi99aIVcbDqMbkU6:UONV6UwQJX+RNEOz/9afpYU6
TLSH
T14D120A367D386C7B5EE2A845F58736175EA85167EA8A7F80D1DC1F0C02EF99C130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11535bdf-0c95-4459-ab3f-e012457616d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\11535bdf-0c95-4459-ab3f-e012457616d7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ac3e61c1c6fbd6df6ddead4b92912f326f132e9d550023e8cd83c23297d33e73
MD5 16d5cf10cdf80374695419ce1db34b32
SHA1 e77bb84547b33b47120bb6a87cac2daa756630db
SHA512 e2557097b49c7293255a7c81de4baf8889fc75ac52fec994bd482c3dbcd0deceed8401c375fbccb97998e6b1e634ff738ebc2cecbc55fc39b1329752561e6073
TLSH
T10541E95CA6EA1148B7B76F4A9FF6996D48BF78332F06D45E00110E4F0A23B44D861B37
MD5 SHA1 SHA512 TLSH

Submit Download