hxxp://babyfurcon[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 05:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://babyfurcon.com
Sample260721-frffhsfv2p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
784	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290839859845319"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{BFA81800-59BC-404C-920D-FA7B36DEAFBE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
964	msedge.exe
964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 5040 wrote to memory of 4464	5040	msedge.exe	85
PID 5040 wrote to memory of 784	5040	msedge.exe	86
PID 5040 wrote to memory of 4748	5040	msedge.exe	87
PID 5040 wrote to memory of 4748	5040	msedge.exe	87
PID 5040 wrote to memory of 4748	5040	msedge.exe	87
PID 5040 wrote to memory of 4888	5040	msedge.exe	88
PID 5040 wrote to memory of 4888	5040	msedge.exe	88
PID 5040 wrote to memory of 636	5040	msedge.exe	89
PID 5040 wrote to memory of 636	5040	msedge.exe	89
PID 5040 wrote to memory of 2712	5040	msedge.exe	90
PID 5040 wrote to memory of 636	5040	msedge.exe	89
PID 5040 wrote to memory of 2712	5040	msedge.exe	90
PID 5040 wrote to memory of 2712	5040	msedge.exe	90
PID 5040 wrote to memory of 2924	5040	msedge.exe	91
PID 5040 wrote to memory of 2924	5040	msedge.exe	91
PID 5040 wrote to memory of 2924	5040	msedge.exe	91
PID 5040 wrote to memory of 2396	5040	msedge.exe	92
PID 5040 wrote to memory of 2396	5040	msedge.exe	92
PID 5040 wrote to memory of 2396	5040	msedge.exe	92
PID 5040 wrote to memory of 1712	5040	msedge.exe	97
PID 5040 wrote to memory of 1712	5040	msedge.exe	97
PID 5040 wrote to memory of 1712	5040	msedge.exe	97
PID 5040 wrote to memory of 1292	5040	msedge.exe	98
PID 5040 wrote to memory of 1292	5040	msedge.exe	98
PID 5040 wrote to memory of 4788	5040	msedge.exe	99
PID 5040 wrote to memory of 4788	5040	msedge.exe	99
PID 5040 wrote to memory of 540	5040	msedge.exe	101
PID 5040 wrote to memory of 5288	5040	msedge.exe	118
PID 5040 wrote to memory of 5296	5040	msedge.exe	119
PID 5040 wrote to memory of 5304	5040	msedge.exe	120
PID 5040 wrote to memory of 5968	5040	msedge.exe	123
PID 5040 wrote to memory of 5968	5040	msedge.exe	123
PID 5040 wrote to memory of 212	5040	msedge.exe	125
PID 5040 wrote to memory of 212	5040	msedge.exe	125
PID 5040 wrote to memory of 964	5040	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://babyfurcon.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x268,0x7ff929a2c188,0x7ff929a2c194,0x7ff929a2c1a0
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,10862444189898562540,11623727730871575098,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - System Time Discovery
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,4851129658226414027,8526201693974734312,262144 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,2907886911145263101,16504735684618942191,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,2378673625246432908,15406261263935127792,2097152 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,12281492972185730756,8235473919444582899,2097152 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,4046335091221477036,3326879348529653531,2097152 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,428774800659994706,4197666013858407633,2097152 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4972,i,789393388221740694,11588210483169451825,2097152 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,2687361528102551805,14178185970009765352,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,14316711883836401883,3612113226239174702,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13113869091896178408,15568928412683292976,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13113869091896178408,15568928412683292976,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,61252519221064451,675574988715706683,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=568 /prefetch:8
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,14813765916483927961,2566362118366180753,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,2732302024507522154,16943472044105431569,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,188597844109087145,13936548334329128282,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=1424 /prefetch:8
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,9170864076450829698,2935752621955912732,524288 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,16056867310932099412,11102902641282890593,262144 --field-trial-handle=2324,i,9034085481995252167,1711813047125584599,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 47d0d461258f6ac1efe823c63bf31db36c387032bad86d41493776c9b9d2182d
MD5 b7d51f31b07fd2c30922dabea96b878b
SHA1 0411cd981c834f271b2bcaf7defa6b8548f93e4e
SHA512 795d558e306382a4a82a317993b9f76707ad6bf4826b4ea97f035744491385d23813642cf2d11f0ade28b953e862dde4d4650e668168fa7e141c1324350f6cd6
TLSH
T156E02038328ED794E142DACFC66453DF5214B10DA6CCD479360DA8DCF400136576B4C8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 16a72f0b9fa93c4b8147c4c42b20d09488d5ef18938276ddb0dd11af4924c770
MD5 fabf8ae47d1169bdc3e25a42019fe96c
SHA1 0c41563b5fdfddbc675ebc50d1af5f2da1263ee0
SHA512 c604e8a9336e46ab180e795239cac6caf0b1b73e490b01cf5dd45df6311e4c97c80d448461e4f90b7ed7891e59d46353897572199a89f61faea3633572f334ba
TLSH
T16F715C4211567C77EBDA0AF1F4CD4208B8F1CEA50E431FD5155CB8BD9827B23409AA0B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5901ea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5901ea.TMP
Size 3KB
SHA256 09a618314682041ea2045124d8920804f3d2485f1a655661613f9c33a1697346
MD5 a26b4f8a4a3c6bcbbf9a3daf323a1a29
SHA1 ead352af45d2e77484082409478306416faaf552
SHA512 aa5235f3cc2ab6491c977197958cb144df8fa84e529536927dd4c56b6b716a96edee97ca7a4b2ae471dd0c21aea4d2a91c724071852675410fed6164434e08cd
TLSH
T18E714C4611567C77EBDA0AF1F4CD4209B8F1CEA50E531FD6155CB8BD9827B23409A60B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0c7ab4aa6a92aaf0839a3fb275cd828f5a128edc9e46f4960b3fc04c5ec6a189
MD5 1df980e17cd83717560a25c5dfe599fa
SHA1 7927b3f100002d35844191f9d92929e7e20f259d
SHA512 4b4beac0ef705ca81cce173cff19e09900e5b7aca8beb4a4dc23d6eb853d6bfe5e19aafb6c7a3b23e3fc2217a9affd7f5fe4e07239835640022e6944e7e10f63
TLSH
T1E911C0F383E5C66ED90116F06A24AE1BCE2D0601832C3C5A89D4EF67D3F3476E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e3fe523c6282895ce283bca51f702925fa46afa3b10ee070e0e542876bb07ac6
MD5 12279536810047d45d243dc7e3994a5e
SHA1 1bbaf8d46c1d4c711ac60ec649a9be841216cc99
SHA512 dc6e1c436deb694ba2d4059c26b4edfa1b60f1e43b3ee0e2257e89adb8bcdfb449d001c97b36a97212e7256a93547d80d6f13cd0c6bc4a5ea8ec176110f53156
SSDEEP 192:sxZTR+yM/jK1Ml8MkT/f6sXLzy4IdprNHW6+WNw07/Y4ks63IgrJ:sxZTYMT/f6sbzyJ5HbL/s9
TLSH
T14642C716AA345977CCDBD209FA557B53D6F91972D2900D84A9FCCE0C04E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6c10280c54421bd8d1d99e82cfc54a51cd189f94bfeba17a9c43afdefb29c819
MD5 8e8e5c4f69cfa83b79f52ec28c74badc
SHA1 421521a3f8fcdf76b88a96d15474d588b1bb6e1c
SHA512 a2fab3f9ad88eaf0af858154f2d2f23f9715d7839d6a316b738c3f7d64a75b093cc703977a00dc7c0bf50a57c29e3c79582ebdeea9c8ff8304a11ca5ee33023a
SSDEEP 192:sxZTR+yM/jK1Ml8UQnkT/f6seLzs4IdptNHW6+WNwkDXY4jp63Ig5nJ:sxZTYqkT/f6sszsJPHbzXUL
TLSH
T17052B616AA3859778CDBD209FA557F53D6F51872D6900E84A9FCCE0C04E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a9f7d813e9d4e9468e182ca5f11188d45a2110eb1e6f12add45e1eb4cacb010b
MD5 d70af0afe927f707dd5e0b801f8057a6
SHA1 156dab844004fd1620e1e773917894855b1a96a4
SHA512 2a441484ad7960798789dddda80d13708a481d25f5d5d8a044032262f835a77ba8f742a58ed8863f9ca89d83e006d03fea25ec6ecddc249b6ca051f69e94a311
SSDEEP 768:ki8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdvromkVUnu:ki8iJPNWvx76ru1jahALocd8TUu
TLSH
T1CBD2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1dbca6f5d00f6657bfbc6fb7868adc7e6e97a17397c7b641a23386568334f8de
MD5 6741a928d6e7861c129ef68be29787f5
SHA1 8e59763314d57143c96ca9cf23ad75495150fdba
SHA512 2d46dac505355b23b365d5a7c3b9bfe5c1636ee0bcacdbf0b2bcfc7b7f53a2c82af261edb07f793bfd8a24cf3cc762c94907b38ac226bdb7316c4341bf54f924
SSDEEP 96:KgvmbPVdd+PtklFv+K9LFR+p3v8B/fs4AKdGbVK/zNjfjqvkS47jKw645jcF9c3F:DvmbPVddItkfvvLFRU3v8B/fpuz2
TLSH
T12D91830276BF03822D3F2A08D251875B979170633418E52F3BAE01718E66E665EFDEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599be8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599be8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3c0a3304f2e429b169a5e3a8c5e125d5d00b6d901d7e258c97ff73ab59dc8f2b
MD5 9e3be15090f0f62a7a1f5ca0962f5ca9
SHA1 bfa809d0e29e0e2ecf0335e7ea758ff6fe5d6bb2
SHA512 f514e9045adcc0f7d54effb53eb7f9160c8cd4870c95ad5e51fa57bd56fb4e20db6506eca9e19b6881bfa3f5f2ebb6c972d0a757250d90d022c918b7419c8830
SSDEEP 384:6tNn/s3n9SfsNibc0L5ufLUkBgkXrqOObjI9G6w7lAt:6j+9Ue0LITm29MU
TLSH
T174928D3668781E668DA38965F1873A1B5FF5867BE7C92FC8E4EC6F0C05DB6AC0302511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 075ddf000ec31b7f17ca1f9b87ee5383ea49359b45ee1dce32eaf100256c3b76
MD5 06576f317e6e0d00d10777a759baadab
SHA1 a82f94e4165e613ac6e53bb3c4656a932d96777e
SHA512 433be98ed82293326e73ca4aec418bd3ef995e1191bc3ed9da4dd24f35067d057c8cc8315e819c2f567d236b03320f615be5ffa34b6041315eab1bf263f95261
SSDEEP 384:biF1tNn/s3n9SpzsN68TUNTUlIl+c0L5ufxUkBgkCrqOObjI9G6w7lAt:2F1j+9OHwgj0Ly2m29MU
TLSH
T1D4C238F258D74936D9AE4B57B37E2E174EBDC167B6856A84B3D85A0CCC862BFC302400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f08327b05f3a71e4e7075ac583d57dc10d6c168c4440dbc673e9c9a6589d723f
MD5 d831effe0cb240f0efb7e19be42189b6
SHA1 1932ca46babb2c12bd41cbc0ceef5b927e031779
SHA512 68da3f6a073ce00053203cbee75a3e4bedd1ac9fbc2d1bbca06c6430292018cbd7e01881d9c5b679a7381c80bb4faf853b8b5f03e14d62c3dd8cc341954017b6
SSDEEP 96:ZqONkWQsjpfmUTmDK5ih/cIPURHl8h4otop5J5DtBhPwivh50xy0SFYK+AxADqQS:gONS6kDfQmiUybzZ903SQirPFjU6
TLSH
T12502E8396C782CAB9EE3AE49F48737275FE5212FEAC52FD4D5E81A1C40D724C1706826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f75cec9ed9d29e9b7e090afcfb66bf5a3747f687e5b9b93a42c00af2026e0ad4
MD5 5c8ff7a0d0cc332515dc0a3ba8976653
SHA1 b04c17141eced3a8a01e7201ecb59abf04c6b3c4
SHA512 31f717642f1c8ad8ba98ce10cca5a60d038c405129dcd943f98a65e3582060f8930a5bb0c6bb1fd6fada9697c744547d173177ba22927b2fb9691ced1d1a1b99
SSDEEP 96:lqONk/QsjpfmUTtK5ih/cIPURHl8h4otop5J3DtBSPwivh50xy0SFYK+AxADERxK:cONb6kQQmiUy1z0903M6NkwcRr8qwU6
TLSH
T1FF122B3668B86C6B5DE39955F48336175EA6822BEBC97F91D4DC2A1C04EF39C1307422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a9bbaa6af1a8b9abdc5b4b08170b7c1b606c02c8e121a2b8fbcbb8ba93a63d23
MD5 13e844de28f4ad3d402ff91d92018424
SHA1 1f776ea3872db6b78108c0c1842dee0bbd520553
SHA512 f0edd3f7c2a6c78b5f1a9755937b3ad26510d0361652502b026acad19fc4f32a64a9e76ed944f1422cf11a2e9896d9dfefc055fb399f2ff14ec280da792637ed
SSDEEP 384:TtNn/s3n9SfsNi+c0L5ufLUkBgkXrqOObjI9G6w7lAt:Tj+9U70LITm29MU
TLSH
T155929E3668381D668DA38965F1873A1B5FF5867BD7C92FC8E4EC6F0C05DB6AC0302511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9b0d26f17f6fd7bf16e44b0045d24c21861e25906308029c8e554a50e9d7cf98
MD5 cf0aa561fae795109e360a7ec940e13c
SHA1 41f481e952645bedf43389899d477e40e8f7a65f
SHA512 d28670ad51c38da1d4ef1facaabe6bc7ff800847616c751a9b0283e95b73688035877ccab47de1bb1cd76420be5d49e96425b8d4a1c89c11de5ac67678ebcf04
TLSH
T1D341284CAAF91158B3B76F1AAFF2A86D487B7C772F06D45D10110D4E0A22B40D872737
MD5 SHA1 SHA512 TLSH

Submit Download