6aabfcb3c29d911da75371d903205510733c9c6b5b4dae7a863543be31e62f76

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
wanda-tv-1.0.3.html
Size 1KB
Sample260710-pdcl5scw31
SHA256 6aabfcb3c29d911da75371d903205510733c9c6b5b4dae7a863543be31e62f76
MD5 00afbbc72eaaf7674f65d12f10724b55
SHA1 93309cafbf7e43334dfedad6716f4a3a7fc390b8
SHA512 27e6f515669af227b1f489cd0dffef093536723ad6f2d03b13bfd4de6c1c8f80ae67322ffe16d530336e93002eca9c391c2f51a5fd7d829860d7c1036969b53a
TLSH
T17C21D810060B550CF676C4DD3DDA22C53C4A3817A9B38754C743EA3F888F263661A74C
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4928	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{26D1E7BD-4BD3-4A25-A9B0-D690F9284508}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
560	msedge.exe
560	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1144 wrote to memory of 1752	1144	msedge.exe	88
PID 1144 wrote to memory of 4536	1144	msedge.exe	89
PID 1144 wrote to memory of 4536	1144	msedge.exe	89
PID 1144 wrote to memory of 4536	1144	msedge.exe	89
PID 1144 wrote to memory of 4928	1144	msedge.exe	90
PID 1144 wrote to memory of 5056	1144	msedge.exe	91
PID 1144 wrote to memory of 5056	1144	msedge.exe	91
PID 1144 wrote to memory of 1908	1144	msedge.exe	93
PID 1144 wrote to memory of 2724	1144	msedge.exe	94
PID 1144 wrote to memory of 1908	1144	msedge.exe	93
PID 1144 wrote to memory of 1908	1144	msedge.exe	93
PID 1144 wrote to memory of 2724	1144	msedge.exe	94
PID 1144 wrote to memory of 2724	1144	msedge.exe	94
PID 1144 wrote to memory of 1748	1144	msedge.exe	95
PID 1144 wrote to memory of 1748	1144	msedge.exe	95
PID 1144 wrote to memory of 1748	1144	msedge.exe	95
PID 1144 wrote to memory of 5088	1144	msedge.exe	96
PID 1144 wrote to memory of 5088	1144	msedge.exe	96
PID 1144 wrote to memory of 5088	1144	msedge.exe	96
PID 1144 wrote to memory of 612	1144	msedge.exe	98
PID 1144 wrote to memory of 612	1144	msedge.exe	98
PID 1144 wrote to memory of 2108	1144	msedge.exe	99
PID 1144 wrote to memory of 2108	1144	msedge.exe	99
PID 1144 wrote to memory of 2136	1144	msedge.exe	101
PID 1144 wrote to memory of 3044	1144	msedge.exe	105
PID 1144 wrote to memory of 692	1144	msedge.exe	106
PID 1144 wrote to memory of 4988	1144	msedge.exe	107
PID 1144 wrote to memory of 1736	1144	msedge.exe	108
PID 1144 wrote to memory of 1736	1144	msedge.exe	108
PID 1144 wrote to memory of 560	1144	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\wanda-tv-1.0.3.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a8,0x7ffdce05c188,0x7ffdce05c194,0x7ffdce05c1a0
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,18212965253017227639,7130650721208537499,262144 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,10393828330269700328,2734085823607592184,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,10270866409299480975,8158383369133923066,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:13
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,11616547024292479904,4235091092450322529,2097152 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,2728210771326415477,9440695841133847127,2097152 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,5409336528645727600,8870732675779469497,2097152 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:9
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4396,i,7030742593754161648,12197301283541585253,2097152 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,5276222678708080602,6503210284517237672,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,13041961759097626559,9895186340765647890,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,17017562626834678386,9419407462828438141,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,17017562626834678386,9419407462828438141,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,12224545871813703510,9502313390605182933,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,15660877720491799566,13135972027960897403,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,3342834337487139905,3017815472232740536,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,15971937447280845009,10017577327847806570,524288 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5560,i,18389346602202883036,12117754943033615854,262144 --field-trial-handle=1996,i,13809480566434964777,15135084247847658657,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ede09c56cfe95b2ee5cba9d1d6424823e8826c2959c740b726bbb6e08c4e61c2
MD5 229b147ed1e61dd91ca4be81fa5c7225
SHA1 8ba9cfbc1ee7a9c43f42b4e92d43d924f1fed302
SHA512 07241a2786b50377cffc7132b9d4bfbf6e60ba6fec54a8678379d99f0c0af3345b7bc51d67f578ca92ea2cf865faa266b5f58cc064e7a5dc8d772e7c03281d8f
TLSH
T12B41D8D41BE90AC2DBFC8EF560E1AADD37F0D4AE41176E8164422E701B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59be16.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59be16.TMP
Size 2KB
SHA256 62eab6544ef2abf7542e626325aac5015142b4ec0f2d159ce163d41d3875306b
MD5 32abe77fef1cc28c44cf33d2bb060c9d
SHA1 9af87a76d07fae947964d9aa85220f29f0833bec
SHA512 3abbb5bf88d30c9c14b8562926058f538f0d1fb43b06d0a4ca077b8ffd291c40237eb5d19bbbd2dc8b0befca44bb48f0502489e7267bff89098c87502418547d
TLSH
T10441F8D40BE90AC2DBFC8EF560E16ADD37F0C4AE01176E8164422E701B0AF9792D2973
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8f8785f6c9a64a00fa991a6335f876ea9410b4fe6f7b0b78bf9bacf18247f49d
MD5 3bbb1b80d839e66176a5fbfc3c4f26f9
SHA1 25664c2d9a19796e630f0b23485a8907aa197022
SHA512 cf5a82909852d2a601ba8b8615399a78e84e0e82d9c0e598fbec2955e1f81c5be058a165ed6ceb7bb5b118eed78a97965b63319845f6566f4dce04c5b4225411
TLSH
T19951DEF3C7E8866DC90156F0AB147E2BCE1C0915432C3C5A89E4AF1BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 71067b81225558e63117e1535da3d4b571f939d19e5d20fda9242067923b29cb
MD5 c8eaa380c97b16a770358bb05a047f6c
SHA1 e64f2c7deca1984cffcbd66d07b3126cf7a52758
SHA512 3b97d2b274b84716f6b8384a2bdb193d78a603110f7ccf33df5673a85de8bac5742ba2e77ed915daa8f1ccd287a765f3fae6ed7c1a5b47b1123f4e40e95caadb
SSDEEP 192:sxRRRQyM/jK1Ml8wbD/fqsz0QDde5lSYzoD8p4T/g6+WNIYCyuOGGHIgIJ:sxRRilD/fqsoQc5lzy/5IQJs
TLSH
T10C52D9165A285D7BCCCBD209FA517F93D6F81573A2901E44AAFCCA0C44E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 452548bfe5afc77194bd13c7aace7b4dbf985c111fa8b7ecfd493594fa2a0fbd
MD5 dc8cfa66938ce04b1c808f2da83b18ca
SHA1 36ea28a62a75b604546910623ef9ee3eab36ac56
SHA512 364320cb074263124b89899579a16b764a01f109c1dffaebabf4e08bfe8b4f7c99ba0abd7859ece34d12811c86e201da8e0f1524c615ca6978e938e1929bd4d3
SSDEEP 192:sxRCRQyM/jK1Ml8UQ6bD/fqsd0QDde5lSYzoD8peT/g6+WNIYCGuOGGHIgDZJ:sxRCiqsD/fqsiQc5lzY/5I4J3
TLSH
T16F62D9169A245D7BCCDBD209FA417F93D6F85573A2901E44AAFCCA0C44E6BDD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 aeab16169f27069d3bf80ed1ed395dace950ce933ebd8215fe9d2f894a13952c
MD5 22137e11307c89de0c57a649c94dc08e
SHA1 59f63d27bed16f58e46246d3016c56323deef022
SHA512 7bd621f1a125b30ad0dd40a8a8b7d7e422c6a17f506a010cb2f32c015b338e0169bf3850d3f5586ecef4516f63dfb974f9c74a27e84f1f56ce06142a18737028
SSDEEP 192:sxRCRQyM/jK1Ml8wbD/fqsd0QDde5lSYzoD8p4T/g6+WNIYCyuOGGHIgDZJ:sxRCilD/fqsiQc5lzy/5IQJ3
TLSH
T15C62C9169A245D7B8CDBD209FA417F93D6F85573A2901E44AAFCCA0C44E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bf5de4757f00bdd735d108e14aee839ee2a110b2e3b15cc395c8f5c8f1c2eaea
MD5 7c9da13d082ccb56ff7bad99f5d90464
SHA1 509c616a26bbe6487fc30fb44ac457105c2828e1
SHA512 3caa176fe4a0ab5c1b6b17e1739e12e0f389265759d5f2ac610cd132bd94445d5cce0d58b6a9c5b8bd1f9b2f83944071ad8b78be8c51293258a3041129b7a80a
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqq9rov4j:j/8vrQWgQ+fB+u1ja3Vq2wj
TLSH
T1B0C2EC2B640CCB7E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 79ab24cff5c7782c41eb30bac6bbed1850f2c46b0fa94ed593ff403c14943430
MD5 7d39b95c8a71e3c971b2fb44e0817cd9
SHA1 713f95c9707df5f807b4c55cd5c88769a878984e
SHA512 f9751a04bdfd110cb0b36a83e0256029a02019d4bc0df530e4ba268496961995339353a087829937e1973923e9a71f82a3c08013272544550ef17a681c0a275b
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHFSr/VPTXWbAOgHXK42gZXc9l4ZGKKgKqz:CbEBVj5JAdSp9/EgTK7j6dJOHFSr/VP3
TLSH
T1DA9186A1B03A1740387D651C817CDD6AD6C1B4B33429A56B3FA801A61FA7E429FFD8CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3a39539474e11f1294d9c36010476d29f3848df5421a5e57a08aa9aea78517df
MD5 5ebb6990847d80e5884c46447c25c425
SHA1 01c928368051585de8a14486d1ba3ff3737def1d
SHA512 5d2189c1016df7fe85e0e55dc90463a18e15388285c26980764cf59830da0c83c499fcc7eaed842c0dd3472d18ea1732dfb9e81c202f42fdc3de4baf809018ff
SSDEEP 768:Krv+4UNbdu3T2OQVFLp8+p3bd66j+4BRv86aLIWzUX:Kbsb83At8+p3Z6n4yhUX
TLSH
T1D503BE72E8A89D339CF6C648B2873B437FF4519396C01A94D9DD6B4D419B0AE230F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d571727e9a0e33ef10943f2216f80d5c50c046683123f694929b506305908ddc
MD5 50f892db9e3851c41dcfda5b7710e966
SHA1 34d5d322c8a85e195cc1d1cc5f83fd92c7508aad
SHA512 596a1bcbc2d659f8919a10d7eaa86df3b565415fcc75f38e2124893428fec07496abb6fbec41f79363bf4c00e41b9b03c58e8e78743188907d6d1a98303a65bb
SSDEEP 768:Xj+9Q3T7OQVF4p8+p3bd66j+4BRv86aLIWzb9Mc:a9Q3TG8+p3Z6n4yhb+c
TLSH
T14EF2BF72E8659E738CE2C658B2873B43AFF4526397C02E8499DC6B0D45D71AD530B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cfbbbdd56bb0d806548142da11602ca93aafa05d66853cae91778317b4f6a788
MD5 50fc0a729d32536204b35a6a03983d68
SHA1 6e1a63431074084dee0af93548a2b5487d80266e
SHA512 b4f775b5b64d21e3a8ff8fb7bc4af421bb29383b94d31987a33ed0547973b6365a1cfc0843b58c6e89d5b2ee242cdc44e75323cc225feff080dfa352340a4af2
SSDEEP 768:YF1j+9Q3ywgr7OQV9p8+p3bd66j+4BRv86aLIWzb9Mc:V9Q3M8+p3Z6n4yhb+c
TLSH
T18A03AE73D894CA779DE6CB58B68A37439FF041A3C6C06E94EACC6F0D41971AD530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7fa764c34f6592564cb441696a754b12f5829d3fbaa8f2906d83dddd178e4924
MD5 eb6d7560828d7dc26e9de412679abb39
SHA1 3e203eed651ab9dcbd30786b58cea32f04878422
SHA512 4a7bc73124b2e85f4ad7fafab6c3067ec99624ce3655f12fe6291ea4ad1001c4bfe512e37ddc4526eb6578365d862aa12ce532205c6875989df32c65d76e29ba
SSDEEP 768:Irv+4UNbdD3hcQVTNp8+p3bd66j+4BRv86aLIi62bwCl1:Ibsbp3NL8+p3Z6n4yA0ww
TLSH
T16403BE33E9A899739CF6C648B2467B433FF851A396C10AC4D4DD2B4E419A19E230BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2555ae5-e62b-45dc-972e-17dba51fc291.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d2555ae5-e62b-45dc-972e-17dba51fc291.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download