02908fd26939e897e003d7e68d04b69cc787f05a65093c287006dba1cf30faad

Analysis

max time kernel
898s
max time network
753s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 14:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fission_receive.html
Size 5KB
Sample260703-rt99fsgs2l
SHA256 02908fd26939e897e003d7e68d04b69cc787f05a65093c287006dba1cf30faad
MD5 4aca64fa3fda590967f231353b9349d2
SHA1 cd93da7dabcbac3ed988cd44982ee7fb67b0aa5f
SHA512 8e546aec2ef39c5ff1b1ebbeec405daf8f513c6e439a6b6f4aa883965261d6e777539154ca68e7db604680a190d60cd4c935c81e522b66df58e3d9e55e7c575e
SSDEEP 48:0EOVoQshI+EuDRAVK5V2pdN+oelDddTEiH8A1b2b5PkPS4CtOA7b5ldCIolG7aAI:zQXPyUKX2XN85ddQi18dMsz7b5Ksy
TLSH
T13DB184968D2DCD4A0D968E2AC3FAD10E3E58C537ED60DCE4F4A788CC4AD07D81B16A4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5076	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275626594355414"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1935666426-3801330415-1166019131-1000\{063C6381-84BF-4251-8E3B-4025D38F6A6F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe
1560	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1560 wrote to memory of 6152	1560	msedge.exe	89
PID 1560 wrote to memory of 5772	1560	msedge.exe	90
PID 1560 wrote to memory of 5076	1560	msedge.exe	91
PID 1560 wrote to memory of 5772	1560	msedge.exe	90
PID 1560 wrote to memory of 5772	1560	msedge.exe	90
PID 1560 wrote to memory of 4444	1560	msedge.exe	92
PID 1560 wrote to memory of 4444	1560	msedge.exe	92
PID 1560 wrote to memory of 1564	1560	msedge.exe	94
PID 1560 wrote to memory of 1564	1560	msedge.exe	94
PID 1560 wrote to memory of 1564	1560	msedge.exe	94
PID 1560 wrote to memory of 6600	1560	msedge.exe	95
PID 1560 wrote to memory of 6600	1560	msedge.exe	95
PID 1560 wrote to memory of 6600	1560	msedge.exe	95
PID 1560 wrote to memory of 2128	1560	msedge.exe	96
PID 1560 wrote to memory of 2128	1560	msedge.exe	96
PID 1560 wrote to memory of 6288	1560	msedge.exe	97
PID 1560 wrote to memory of 6288	1560	msedge.exe	97
PID 1560 wrote to memory of 3284	1560	msedge.exe	99
PID 1560 wrote to memory of 4600	1560	msedge.exe	103
PID 1560 wrote to memory of 3220	1560	msedge.exe	104
PID 1560 wrote to memory of 2924	1560	msedge.exe	105
PID 1560 wrote to memory of 5440	1560	msedge.exe	106
PID 1560 wrote to memory of 5440	1560	msedge.exe	106
PID 1560 wrote to memory of 1116	1560	msedge.exe	108
PID 1560 wrote to memory of 1752	1560	msedge.exe	109
PID 1560 wrote to memory of 1752	1560	msedge.exe	109
PID 1560 wrote to memory of 1884	1560	msedge.exe	110
PID 1560 wrote to memory of 1884	1560	msedge.exe	110
PID 1560 wrote to memory of 4308	1560	msedge.exe	117
PID 1560 wrote to memory of 4308	1560	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fission_receive.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff905e3c188,0x7ff905e3c194,0x7ff905e3c1a0
  2⤵
  PID:6152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7113307620020303838,2970512670895253411,262144 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,6150869142415442927,13344045668408155313,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,15302257619807190426,13338053709111107908,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:13
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,9229299527245787502,9713008087173444252,2097152 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3704,i,8228950814575952463,12759111025967451395,2097152 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,15074480049170839441,15974516440863196106,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,5826569404531223625,10989705978235488451,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,493974627125415740,5132487704118279484,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,493974627125415740,5132487704118279484,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,7667195595113281587,2739961597899526039,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,12632912279686276988,1623354939550212545,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16973844390271052691,15116205596986861755,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,8720075612711894403,12758078897132135259,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5692,i,1518251818027481898,12365765672676442480,262144 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,17428584922577899642,11657522183293503754,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,7460100273932183981,10154566743988769187,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10036025575711976575,13118789513585409209,524288 --field-trial-handle=2296,i,817776465607318969,5705957545220196985,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5492

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:248

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7207f4c246d3ac882ff42358926e52b8316dd22bb03c5644ebc6f2dbc1168a28
MD5 b7329a74f1fa351c02d17b8e2692e575
SHA1 ef3d4b0eaaee583b5233cc6fc44fd331077feaf2
SHA512 650d63f3a2e065e3c2e4933483e10d79ab609f116a4e0bf7e107adff2025a85d1c77c68f86e7604724ab7da540f31911cd91f5e49bbae26354b6446fe249827e
TLSH
T146D012143718648BC91A2571D4318381A6668421215A8F4564A1D24D9D69493A39A392
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 598ca508ed6aba0bb69c3f6d427ab5aff5be780b8ffccc836354a6ddc85487aa
MD5 03aa7ca0a15507fad0643b75ddfd73f8
SHA1 50dad20cb288e2edf8bdde5c12d244e0f5efc050
SHA512 b899dcef637536e609b057d501656e38f9b5ab87731d722f819f354f388355f2ec8c72fa915ef58caa06d3fd994d7c9da455d787f07ca6f3860d6b0823680e82
TLSH
T12DE07D8516CAC39EF658654B436AD74C82F03E3ED7C8BD4A5706CCC43002081B7C25E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 10b31747fb6907ef8ff555ac9ce9b40333fabe082b18104cc64d4e6436fdfc95
MD5 67a50b979211b35e51db4b9f39d90e1a
SHA1 734eeccea8d6804b28b7019eb6870aca618dbd88
SHA512 2375e6f1e663b16a9b358f766088398455644a5562572873637b0a61a31b4bda69560226792210479976404b696d651d02141574f3d2c4293e064e75192c0aff
TLSH
T199E0268816C8C61E9290A487C1B6F30CD2E03E2BA7E8A94A5F04C4993442488BFC69E0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c4b769c1e7c5f26039ea4be106634cc912eb02aad1b0f2d75b356b0294a628c
MD5 a4f289a957aab40ba7039a912912fcf2
SHA1 02b7edea627ec0efa57ad2abab0f9ed649a6bddf
SHA512 39e208ce589363d4f9856d117971515078d4be279b9351733bcec0cf950bbf8957b0b1edd9ec10a79ba7b87f727a797cfa30d996106a7f581850433668c94f1c
TLSH
T1A5E022A6C861EC2F08F91B192170569FEB54131A2B40594BBB3C820C8FB163F098692C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 213bcd47f9180600660243c2c436aafff8433096beda3c130308af575beec5e2
MD5 d4d27d5d3403cb64f5cf9d4eefed85ce
SHA1 c407b343e2ad2dcd9de70fedefec17d43ebe901f
SHA512 f1bf7cedfd791a0f16409af638c735e1dd708d33d387e4135c7c7ba01cfd1b5a9a1b8eed2d7c0680b0bfdfd91c300dfe323c58a1321f73fc7bd549f178e19970
TLSH
T1EE51D1F7C3E4866D9D1195F0AB187E1BCE1C0515432C7C5AC9E4AE1BA3E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 99e624e2cd4e7acd1a602c668a30a449f06145d89709458ba8b39e321c47340e
MD5 28b09f9e7f523a65bd76abf673707585
SHA1 8c1f793a5612c43ebf804545ad16cbea2cb83a76
SHA512 fa17d82c4abef6e7d01a306b7ede6c2ffe10c4afc8330416cb29395f6532a3c13f0b647e7f3155702a069497367d7cb8fc2aa94b98161d9919aad53f4b67e89c
TLSH
T18551C0F7C3E4866DDE1195F0AB186E2BCE1C0515432C7C6AC9E0AE5BA3E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 db5b12483125b9282d26c6a0417de11957474f73493f236fad0afe91b25e19d3
MD5 6f378ad976b6750ef0dcfd2a926e2015
SHA1 896de7ae8d27543bcdfd84a0f1f6301b6f1f4535
SHA512 45827690bbf140100c6d40a10ef34900d4e0f6c58e5e893aaa069276a4e5dffaef950952c0d0292ffd6cb1b58017293021cca7e039b7c8943ac2894400ef23dc
TLSH
T1D6E0D827C1B9E8BA207899BE1D44B885797DA4310091ACF8CD56D37CB0910BB9712067
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 722b641df1ad51d67fb92c1a6f81d4c033c3f6b75e8c13a3136a9623807076b5
MD5 c1b57b505a9f9ec48a3cfe132f0e0906
SHA1 c50bf4ba9d7ff0c2f49ccccec428b55d15648dd9
SHA512 79b298a43cff2212f9b0d7fa89cc329744de2f1b52663f1289e2deb9c4db9de73752f93f6aabb20b79a78edfe793d49bffe1a2b44ce556bb6566aa3b6ac277dd
SSDEEP 192:sxRjR3yMqZjK1Ml8wFi/fR1squiAZU+zoA8peh/g6+WNIYUVSGlIgDC7J:sxRjUbi/fR1sqBeUj+/5IReN
TLSH
T1E262EA155934993BCCD7D219FA95BFA3D6F91163A2505F04AAFC8B0C05E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9d14f351050a949dde162fafcc182a5624a688343957a09e0bd42e9e29cb41d8
MD5 6f366958a27a4dd0d72a47bf1ef46652
SHA1 66859ae74cdd0612c8de7bfdc02e8572678de589
SHA512 e1d0ea8046fe4419c74f007ee921cef36b25ea70093e871c26b947829a2429284dba8b747eb5bae4138be2fc227690e73103142621797f559129a5919536d432
SSDEEP 192:sxRLR3yMqZjK1Ml8wFi/fR1s6uhAZUkzoA8peh/g6+WNIYUDSGRIgj7J:sxRLkbi/fR1s6qeUF+/5IfjN
TLSH
T14362DA155A38993BCCDBD219FA95BF53D6F91163A2905F04AAFC8A0C05E76DC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 90e6f8756ebcc6a1fc8771ce424998e52ac56ad34b3571b6b8125e569bf847c9
MD5 c16ddf53498a67fe832014a9cd320a5c
SHA1 46b9d5676adf97322c58738c25471d22796535ef
SHA512 af7c2d89a8529f93f80e089841d56b6e9a6910e4c0559e09e93f90fca3bf059bf5edd62b0eeed605031a3ef89c20cca375d81fc7965907be20b386624c234819
SSDEEP 192:sxRjR3yMqZjK1Ml8UQ5Fi/fR1squiAZU+zoA8peh/g6+WNIYUVSGlIgDC7J:sxRjUq/i/fR1sqBeUj+/5IReN
TLSH
T10772DA155934993BCCD7D219FA95BFA3D6F91163A2505F04AAFC8B0C05E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 de6f900e48e245ef9ce2de4847514961b19d23fc9141369d444ea4488f859e9e
MD5 b7512e72c0959ccaa9d99baae49d08f7
SHA1 09d7315ddc4cd65255f85dcf1fc609589d701c8d
SHA512 f51f8b0cef01fe36a44f014a54fa6aeefdebfc0cc1bd5231eff6191339e87a44fe03304066d2e1b414e3b877c1413cb2b6652e471528cc6a0d19ecde6b625cfb
SSDEEP 768:4eOlx6WgSYf9S8F1+UoAYDCx9Tuqh0VfUC9xbog/OVwuOGiro0:4eOlx6WgSYf9Su1jatTG50
TLSH
T173C20D2B640CC77E8F844A9DEC29AE966DD802CB5B988D5447EB490C03C77EF521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index
Size 1KB
SHA256 0679248957c2b7a36dbfd4f1198abb3466b99abd8d4aa987448f9102a81ea30e
MD5 0a975a39981972af40686c50124770dc
SHA1 2620ebb3ad113a78c5b61baae0aaf0d570466dd7
SHA512 3810ed481cee45128aa19cc1c67b2244535e4fdd5a97b8fd7df20825cd34112dd2a2804238337c60d627a85b1950a79f8d84d72d4bb9405f4470d2baf4489fc0
TLSH
T1C24191A89C815E0BCD3049B325B6606C2336B1DD1A88DB03287C743C7CD772918A6A2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d82a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index~RFe5d82a0.TMP
Size 1KB
SHA256 f943fb4dd1dbfe242233924d52f63edc429218dc6e6a9bf4432cbb569e559f7d
MD5 0fd9bd39a597155762133fb2d6d7bec7
SHA1 b18af146d0e0a4a5ef15fd228220f2656f6833c7
SHA512 5b325086b9e91f2bfbad307af3d92dac3507c926c2bc130fd2924d9560bd018a7d795cad3a8a5ded3113e4ea496dcec87de8225f7a2325ce457eb687fc0d1917
TLSH
T1E14172258C819E07EC1004B21A8B444D373BF1605344EA0B20BCE1386CE3A396DA81AC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 4ac132c71b09e32ee8d633ef3e2025f24c647d1c381cf5230a247a9ddb91c926
MD5 4fcd270028c0566f0fb3ef0d50cba2ca
SHA1 9db7754842a98ee3d6331bdfcec0e17be2d71253
SHA512 10d13cd21e2b4774cdced26e9291fc6fba25172dbd510dd5ed647170a1a5be752e790f559eb0f6ed2f1f1be726ba9e5b2a465a6909e0c43acb67cd3982dde9bb
TLSH
T1F4E0C0B72DF31840ACAF97E658F190B200063464C694EC1E21AEB28324B33353543C52
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 fb849fc945d98cecea3b5b705c2ac3439df2efcabe5d881a378e0c8856366df1
MD5 8e7e989cf0c67ad61c5feb3433506f2e
SHA1 3add8bd01ab20df8f5dec9ad5f305b1ceccc9f07
SHA512 7e291be433ab9a733b273a5e040deb69fedc19d254dd62cec63942c7e57dc98944ac95e1af005ff522d394345528c68efd76f312abbc9751769fe60a24068190
SSDEEP 384:9WhIEeUI94LU82K3iXGuTQIVlgBFTzTyLuFVdv3n+FNmP13ObHd59wh8r/j931I0:UVI1zrZi+JK9ALXESlN
TLSH
T1BFB27F5171BA2701383D280E93B9941F164630E230DEA97B7BA931E56F67E004FFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 54cfc2ecf2560ee977bd1f1e629c9d31ed75d5793596d674ae34d6b1c78bfb7d
MD5 d7c6c3773d68a8c99ae510f404f5757f
SHA1 99f0b324a21ed2de6cf23cc26ba4cb932d489b09
SHA512 3ecab6b1cab6dd0c6ab528764e4c7cee4a696544ceae9d0c8d8bdb970212ea9ca434f446b90ba362cffefe857141d4e6bd606d69f995311af030dacaf6ac76a7
SSDEEP 384:n20iF1tNn/s3n9Se8NN8TUNTUlIRgPlcyTmfkWBn94fcGa4mfGkZdrGAx38L+1IY:sF1j+9nUwgwIcan9xGBmfGkTGAxF
TLSH
T1D3B23A36E864CAB7ACE64FD5A70A3647EEE00267C5C89AC4E9CD5E4D01C71ED170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 8d7fed130a3f541c8c080ad24239aeeeb0abeed4f87ffc7e7e0574b5cbbf3f4d
MD5 5ad480dd4cd13f830004aeee8425b7e2
SHA1 22c19b0c37869d1273e39a19a95c7e3434e16956
SHA512 7ef8e5993e81a9f017a4a2554af1673ad3d438051e6923356c25c30e62afb6c58653d7b429f18f48e896558d60c533393f2250601121967542c3f5910987f15c
SSDEEP 384:n20iFGtNn/s3n9Se8NN8TUNTUlIRgPlcyTmfkWBn94fcGa4mfGkZdrGAx38L+1IY:sFGj+9nUwgwIcan9xGBmfGkTGAxF
TLSH
T10AB23A36EC64CAB7ACE24FD5A70A3646EEE00257C5C85AC4E9CC5E4D01C71ED170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0eff50268ad798c36f1100b1ea90eb9aab139c387ad0e0f47064c6e7afb2ec3b
MD5 d093d13d5da1f3d2b0250bf0ed3c8d63
SHA1 f781c92316b79ec2b82847c06ed2cc07e590948a
SHA512 90643631a5ad201d5f73bdb721b1124edf4dfd84734c9f18fceea8ee8f0d4ed5cb9d47c75890cc79cdba06b4376b9f56c617e6442e13022295487ca6e7cf4e29
SSDEEP 384:neiFGtNn/s3n9Sw8NN8TUNTUlIRlPlcyTmfkWBn94fcGa4mfGkZdWSOAOObjI9GV:1FGj+9RUwgdIcan9xGBmfGkhOA29MB
TLSH
T10ED24A36EC64CAB7ACE28BD5B74A360AEEE00267C5CC5AC4E9D85E0D01C71ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 868767bf603c18e37f497a7f354b063dee26f891544c91a2894cfa2a12ff865d
MD5 6ef4d206e712dd947bf3506fcc0ccbca
SHA1 05dfa0ed4061efca72782ff4001c23906834250b
SHA512 94fe8d87f589b222db28fd8e849c9c4d7d39101bd1b9a05df0ace4b35ed97d535659396178f5dc2981858e53c28f0aab72d16b8827bbc06825d1e79bacb79898
SSDEEP 384:nBiFGtNn/s3n9Se8NN8TUNTUlIRlPlcyTmfkWBn94fcGa4mfGkZdrGAOObjI9G6I:oFGj+9nUwgdIcan9xGBmfGkTGA29MB
TLSH
T1F1D24B36EC64CAB7ACE38BD5B74A3646EEE04267C5CC5AC4E9D85E0D01C71AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 476b78e298f3c39a9732be5823abaeb7c3e49851d33e34a124d610a69da0c38f
MD5 03535ca21367c6d49d885e0736bce2a3
SHA1 93aedea1ad35c8ac7b66b29876d535a82ea8446b
SHA512 d88e85356a0e3f9bb55bd8a620ba9c632de8af1db4312b4dec1ed7a79b30951ae231c9485edb8a10a00465c417f9beef2cf9d6ada5e3b37790aafaf1c4415313
SSDEEP 768:KF1j+9KMwgf5Mean9xGBGxEBmn12bfJse:P9KW3G60yJse
TLSH
T1EBC24A36E868DE77ACE78FC9B70A7646EEE0126784D859D8DAD84D4C01D32DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download