hxxp://skpandeyyy[.]github[.]io

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://skpandeyyy.github.io
Sample260910-te6ntssbme

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335295871415963"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{4CE91173-DE68-4108-B560-E3DAE287E54F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 3980	1104	msedge.exe	87
PID 1104 wrote to memory of 1344	1104	msedge.exe	88
PID 1104 wrote to memory of 4684	1104	msedge.exe	89
PID 1104 wrote to memory of 4684	1104	msedge.exe	89
PID 1104 wrote to memory of 4684	1104	msedge.exe	89
PID 1104 wrote to memory of 3976	1104	msedge.exe	90
PID 1104 wrote to memory of 3976	1104	msedge.exe	90
PID 1104 wrote to memory of 2516	1104	msedge.exe	92
PID 1104 wrote to memory of 2516	1104	msedge.exe	92
PID 1104 wrote to memory of 2576	1104	msedge.exe	93
PID 1104 wrote to memory of 2516	1104	msedge.exe	92
PID 1104 wrote to memory of 2576	1104	msedge.exe	93
PID 1104 wrote to memory of 2576	1104	msedge.exe	93
PID 1104 wrote to memory of 2552	1104	msedge.exe	94
PID 1104 wrote to memory of 4064	1104	msedge.exe	95
PID 1104 wrote to memory of 2552	1104	msedge.exe	94
PID 1104 wrote to memory of 2552	1104	msedge.exe	94
PID 1104 wrote to memory of 4064	1104	msedge.exe	95
PID 1104 wrote to memory of 4064	1104	msedge.exe	95
PID 1104 wrote to memory of 1240	1104	msedge.exe	98
PID 1104 wrote to memory of 1240	1104	msedge.exe	98
PID 1104 wrote to memory of 1240	1104	msedge.exe	98
PID 1104 wrote to memory of 1564	1104	msedge.exe	101
PID 1104 wrote to memory of 4472	1104	msedge.exe	102
PID 1104 wrote to memory of 1564	1104	msedge.exe	101
PID 1104 wrote to memory of 4472	1104	msedge.exe	102
PID 1104 wrote to memory of 2452	1104	msedge.exe	104
PID 1104 wrote to memory of 1264	1104	msedge.exe	113
PID 1104 wrote to memory of 868	1104	msedge.exe	114
PID 1104 wrote to memory of 4328	1104	msedge.exe	115
PID 1104 wrote to memory of 3520	1104	msedge.exe	118
PID 1104 wrote to memory of 3520	1104	msedge.exe	118
PID 1104 wrote to memory of 116	1104	msedge.exe	120
PID 1104 wrote to memory of 116	1104	msedge.exe	120
PID 1104 wrote to memory of 4468	1104	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://skpandeyyy.github.io
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbf523c188,0x7ffbf523c194,0x7ffbf523c1a0
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,6231184085653567606,8042774593987840856,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,5773565026855569521,7621049892504804529,262144 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,13577497022594380106,10252780824121561364,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,12996893176463524144,2193341793850944084,2097152 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,1631977598925131669,10134317335107866370,2097152 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16837926315151113125,3194231723670782725,2097152 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,10936871295247075120,10023265039747865948,2097152 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:2
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5036,i,6056545431771678707,12794574591412032111,2097152 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,5532291362535475274,1465992186991820859,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,15578142356237490942,7531118996078339107,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7300564190467744432,15635550491672681953,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7300564190467744432,15635550491672681953,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,7562411968134922075,8985857036866796916,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,9486755361290456573,7010775154569814373,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,366020534745266631,2146212244001726096,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,3858891967773637918,8528573048331593618,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,2336799403915849410,4931050525294865781,524288 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3700,i,14217930674870417317,1707743267191092127,262144 --field-trial-handle=2272,i,12885585208019631309,14083766284711623782,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ebd146b0c526337d5f3a57e743047d66c7ea1eaafe5390424a2d6efd2ae20142
MD5 1f253287622563e83075e0ce907fc2cd
SHA1 8711e5e0392261b69cead2e748a10f4e93301273
SHA512 ec89a88aad26cf2331fb1586087ade0ab121e5398fe72236aa8b8e5084f98c6bf04d6452de1add44d5efbaf4713bf2d7d2ded06a9b5ba039055aaf1d289594bc
TLSH
T17B61F7008E4A0501FF211237D5D21314F87142B93A936EEA426E8BBF400EB61FD3FA0B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9a2ad48bccb4ae32b9c50f4acb6d72ba3131d8bf30b74dfb4e555b23ebf090ef
MD5 2a5f6381681ec5702a72bcc0f68e2e9d
SHA1 b546e5119d51627d061f9cb8701734c00d8476c3
SHA512 c0576c15d2c592f5ac733cd361e88e8f6a481b8d6259fe632440096e59292e6d309d7c2b5b3f871c6256463f2bbb3501913e7e35a2f8d940f0b89821448cb5fb
TLSH
T1EE115BF7C7E5956EC91156F09A28AE1BCE1D0502422C7C5AC5E4EF27D3E3076E10265B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d27510c8248063538490363cc6db8ed52b45322557fae4830064638e1db4759b
MD5 98cc759174a9d0b802fb30957207ce83
SHA1 dcedf62776db4068cb5ccdd5aa0dc09cf9783bcb
SHA512 d205e2aee5b95f68e2d497f9132c0af3f55e1c965f366bb643b970211ca69f8a398799bd6e714061ff814c8e566154e62bb18241da64ca422ca6cad0c9f28a53
SSDEEP 192:sxZcRHWA/f6srSIdpvlOHW6+WNiED8/YLdyIvIgrJ:sxZcUA/f6srbcHbq/k9
TLSH
T1A422C8517E38A97B8CC7D209BA15BF53E6FA503295D51E48AAFC8A1C04E76DE130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0613b72706f01d2728b500a34b6fe9eb0f1e7052d523e8a2986b520e30fbcffe
MD5 e28a6853c7ffbb6d94784e6ec60d1430
SHA1 f1cc511d93e196215da4dd52744670b0a59c72f0
SHA512 e0bce3252bd3c8911629d386b230cb8af75b24a4109a7e630718caf61fd9f1cb83ded04bf8755a0f835ddc3490cd2545aa22182129d095f87b2e4cebc062a86d
SSDEEP 192:sxZcRHWA/f6sHaSIdpvlOHW6+WNiED8/YL82IvIg5JJ:sxZcUA/f6s6bcHbq/FJ
TLSH
T19722C7557E38697B8CC7D209BA15BF53E6FA903295911E48A6FC8A1C04E77CE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2e0a4330652628928d9853260606269e6e85dea9559bdf36c0e0db01dfd3dee9
MD5 6a818154490ecfe6723d31db4be7d1c8
SHA1 5d25575b25cd2cd876077462ab52e99547748b96
SHA512 64e734a40497e72de80884f3f67149f0616c5c2e3be6b48b8e74ac791b12027454542ac1553dd1eb0e4650b99768f9dc76ab0f33121704424a363065603ec35f
SSDEEP 192:sxZcRHWA/f6slSIdpvlOHW6+WNiED8/YLdyIvIg5rJ:sxZcUA/f6slbcHbq/kX
TLSH
T16D22B7157E38A97B8CC7D209BA15BF53E6FA503295D11E48A6FC8A1C04E77DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 01cdf590346c6c3f05709b83198ca7ee7b2656bdff15a9275e59facad5e28918
MD5 86cf24e33d00263be8c93f49808b703d
SHA1 c8e16b8267f01bab0ee124b648da39c36b22fa9f
SHA512 313084a8b4fac231bdb5dc41fab055824f8fe7e49065d4f08e5a954a2324fe38cf21053800dabeb85db07c5ad0a248f4db9b9fd5ddcc067eb93080888f3e7093
SSDEEP 192:sxZcRHWA/f6sHaSIdpNlOHW6+WNiED8/YLqBrvIg5JJ:sxZcUA/f6s6b+Hbq/JJ
TLSH
T1BF32C7557E38697B8CC7D209BA15BF53E6FA903295911E48A6FC8A1C04E77DE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4ab10ef3444bdef13fe2dae34f54373fbdb639c9f3ef29eefe2485a31d259242
MD5 e208a855c76011d80bf2f707ca880d77
SHA1 bc9f9eb0a2a6be499f99c5e78fc9e7c5d8c027ad
SHA512 84de09b321043f2ba6501d67f34952287089d2bcc1e2755709d4bce452fc0e4c8e839704f1334030d7c8bbe53edaefea0a5e67a580d7f325020e6ebbe03a0837
SSDEEP 768:FMO6fP1Wvxz3j8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkILlWwJvuroe3:FMO6fP1Wvxz3ju1jaZILIsvle3
TLSH
T177C2E83B240DCB7E4F801A9DAC5A6F977E9802C7AB588D8447FE854C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 79c0adb36ee8951320d690e3a95373d338f8473fe87b842c26dc239e50b736c4
MD5 c9edecc6bf6c4ce48e27e4c850ef262e
SHA1 76310bcb9688688f9636dce3cccc4c0511ddaf54
SHA512 097fa18e1d09542513a2a54963d89ffb6fa374a1d2077bed311c96604ad215acffe89406e313cf3a2d4f9e793bdc46f3a2dff2a3cff91ef98aed0965fcc3438c
SSDEEP 96:KUAAKtePKSsKL6C6GQKTyWSs4KZ2SYwKBia:iiXPf7rS3
TLSH
T1CFD1FC13327A03113C7E2908929597279A4675633028E52F7FEE40B25EA7F248EFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19db6e17-9ebd-4826-8c0d-43141e76d423.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\19db6e17-9ebd-4826-8c0d-43141e76d423.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 154265cd63dee757c15a63dac68442b4e389f322b0386d1b14a9668a63f83feb
MD5 4e2e3e625268768035af0a6d9deb5b2f
SHA1 8b4ccbbc2947f4aca6a3c1a2247e9cd1df7e8e82
SHA512 ce159b12385a3c2fbcea89f55df096a3e6e17114a122a062b87c3d34241e190008b069247fac3f58634d476dcd169b3586ff8262c56a21fd1fb2027d18e4d8cc
SSDEEP 192:uaLsNVnQHQn8AI7+3vblQmiU1rc5UN4atb0UO2rh2Wv8EsXLMhqhiU8:VsNVnnn8C3K5UCa95O0MWv/TpU8
TLSH
T17F3218317878AC775DF3A185B9473A13AFB54027DA892F90D6DC5E0C01EF6AC134A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5a7eccb632a5b65f666218a56d855c14d0a2c8f928c4109452337cb7d88762e1
MD5 93363874a48c42de446a92df1e36d5ed
SHA1 0af96e2cc69dfebc13ac1bb4e0bfe09561c2faa8
SHA512 1846794a9c596dbc9801e6e9dc1a253d25a5becca4bf5bf862dad27db95d6d581e3273ecfbc5a54b2bfd0aee19baa0668e3d3f4b21359bb8c4a3fe00bae34294
SSDEEP 192:qONY6O7+3hQmiUyEchGttb0UO2rh26gGYuSU6:qONY61chGt95O0M8eU6
TLSH
T1D602D8356C386CB75EF3AE45BA872B239FA5112BE9951F44D6E81E0C00DB65C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8ad2e69df0a47352d7ba3f7df14bd39cc94f91879911f868aa33ecc0c99c1f95
MD5 d7fee7b6defabdd2543d61906297a124
SHA1 ea8a1c71cc8a9bcb533aee599a9bf20dd6388e6e
SHA512 8fef3904468b59810514a900ef77efd98a38ebf7abf5d826a88ce2fe4c0c38eba956bd97e899baa102d7c5913cd7f4e8deb25258f109121ab0f6d66d949d884c
SSDEEP 384:hZcIhsNVhnn8C3K5UCa95O0MWv/Tpsa+VYIuo2:phh5UD/OOv/Tphgvut
TLSH
T1D9826C7168789DB758F3E282FA4726039EB49067D6C92A90C5DC6F0D01EE6A81307D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8b6bd72befbde6fc4e9a7a5b84df14eeb91255f67e48a53dd1a9fc7ba649f2b1
MD5 322d86d056cfdabd980a4f1ab96ccc5c
SHA1 e2adc6e76def040f1f2e97e0580614ae513ee7da
SHA512 220a765b05ad8f89d1071222f320d50ca1c2cc415507b9b9bbfd4738d5fc182eae7aa98582af169e18bac907bc899964c5f0020c1a410b8091ed390a6f670197
SSDEEP 384:YiFiZcICsNv8TUNTUlIlhnn8C3K5UCa95O0MWv/Kpsa+VYIuo2:jFQCqwgO5UD/OOv/Kphgvut
TLSH
T106A25C725CA88D7B6DF79B85FE4B26039EB58067C9896A90D2CC5E0D00EB6DC1347C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fb627ab2ef1de7ee7590f4e334ebeaf4418308560ef75b64fd9d20d874cc7af3
MD5 3393ddbbd5d7db3b773fd18c7eeaec40
SHA1 21c66fa38290b2fe30a34c54639cbc9a03262803
SHA512 64d3881c7b3a45b231cd4d0fcc2286f40745451bb80ceedb28fa7ec4efcbb10a99a3315a8322df1b009aaaa393c4a46564b9c65c04785f1e0a369973a142ce06
SSDEEP 192:yONY6O7+31QmiUywchettb0UO2rh2Wv8EsqcNhqhiU6:yONY6dqhet95O0MWv/6pU6
TLSH
T1FD120A317868AC7B1DE3A545F98736139EA5412BDE8A2F80D5DC2E1C01EF6AC234AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15f68848-6275-4a80-9c34-e78bc1f869f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\15f68848-6275-4a80-9c34-e78bc1f869f7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f921879d1d3320f5dbe0aac088ad6249e49a5057493805fbfa878003b4747c4a
MD5 7ac0b9104744366be068e041cc8d2461
SHA1 8461772959683b578f34340ae4b0f13e52a780db
SHA512 4412fec69d54f5ad064a289d34a439f0e17af34ef918bbebb123af606e063e80a39ee8177c20758d8ac52d76e33bbb4a94cab981ba6622d78bd4d17b5a522a02
TLSH
T1EA41FC58B6F9114CB3B76E1A9BF6A86D487FB9372E46D45E00110E4F0A23A40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download