hxxps://babycenter[.]lu/wp-content/plugins/burst-statistics/endpoint[.]php

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 08:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://babycenter.lu/wp-content/plugins/burst-statistics/endpoint.php
Sample260930-j85crayxev

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1224	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{FB1D3D40-564D-42D1-948D-AC948C0FF771}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4208	msedge.exe
4208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 728 wrote to memory of 3788	728	msedge.exe	85
PID 728 wrote to memory of 4860	728	msedge.exe	86
PID 728 wrote to memory of 1224	728	msedge.exe	87
PID 728 wrote to memory of 4860	728	msedge.exe	86
PID 728 wrote to memory of 4860	728	msedge.exe	86
PID 728 wrote to memory of 1576	728	msedge.exe	89
PID 728 wrote to memory of 1576	728	msedge.exe	89
PID 728 wrote to memory of 4348	728	msedge.exe	91
PID 728 wrote to memory of 1128	728	msedge.exe	90
PID 728 wrote to memory of 1128	728	msedge.exe	90
PID 728 wrote to memory of 1128	728	msedge.exe	90
PID 728 wrote to memory of 4348	728	msedge.exe	91
PID 728 wrote to memory of 4348	728	msedge.exe	91
PID 728 wrote to memory of 1696	728	msedge.exe	92
PID 728 wrote to memory of 1696	728	msedge.exe	92
PID 728 wrote to memory of 1696	728	msedge.exe	92
PID 728 wrote to memory of 808	728	msedge.exe	93
PID 728 wrote to memory of 808	728	msedge.exe	93
PID 728 wrote to memory of 808	728	msedge.exe	93
PID 728 wrote to memory of 1920	728	msedge.exe	97
PID 728 wrote to memory of 3320	728	msedge.exe	98
PID 728 wrote to memory of 1920	728	msedge.exe	97
PID 728 wrote to memory of 3320	728	msedge.exe	98
PID 728 wrote to memory of 3316	728	msedge.exe	102
PID 728 wrote to memory of 4584	728	msedge.exe	116
PID 728 wrote to memory of 3684	728	msedge.exe	117
PID 728 wrote to memory of 2124	728	msedge.exe	118
PID 728 wrote to memory of 2404	728	msedge.exe	128
PID 728 wrote to memory of 2404	728	msedge.exe	128
PID 728 wrote to memory of 1184	728	msedge.exe	130
PID 728 wrote to memory of 1184	728	msedge.exe	130
PID 728 wrote to memory of 4208	728	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://babycenter.lu/wp-content/plugins/burst-statistics/endpoint.php
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffa229fc188,0x7ffa229fc194,0x7ffa229fc1a0
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1916,i,1405936929769866667,11531062398437139505,262144 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2028,i,5072759791097261568,2799184021985238379,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,5016681135967537050,8538249034529219221,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,13494201142799168221,2827519172339329454,2097152 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,14019273419089086541,2971194009466592560,2097152 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,3359013748253032097,5382113976429779706,2097152 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,12925249688412624223,16218976422032173690,2097152 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,2833598290093889415,3376515139705846063,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,267191941111000589,7953284406388622090,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,4481935443844345565,16048554807764775405,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,4481935443844345565,16048554807764775405,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,5138786577163711905,846358138668211771,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,14456112326177430565,12871997365401157291,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,141790375767989277,14509944600649168297,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,6357156748802646321,1335840097087524828,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,17147788708719425327,14493008873688638304,524288 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,4139690597744672633,781140206381534842,262144 --field-trial-handle=2280,i,1581240513066814580,13867373746382396954,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 da31c2a8904b5b51770128a6596931687e9934fd83b13a7587614faadd78b98c
MD5 b497b24c1606350cc1098bde5b13b9cd
SHA1 3617eaf1a214420299d06f98c6644eabd10c34c1
SHA512 565644bbfba2abb5a3ebe11dc2af05529f811a59aedd2963b805eac85357b3bccdd395159767466e9480ebf36785028c98752738d0a317e0eb695f490db54852
TLSH
T197612E07A592E1D3FBD6DA354CC3A267B230E68DD6861E138D60D878F446FB050442CE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dcbf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dcbf.TMP
Size 3KB
SHA256 8a700d0780efd8ae9ecb777360f8eec27ec4d95b29a2faa7b03d32be3e499d86
MD5 e80a92084ab1e5c4fd912dcdf9912709
SHA1 1ed20cfcc0e3c0d4b795f41eec77116bd8b2252f
SHA512 5065465a0132154a1535a559a770f8b69a44992f8b8f60680854a3132fdfbd56d29d130421249da92ba2ae0470fc958498debe81f5f3e2a29d37fbb07fb9ef58
TLSH
T141614E07A492E1D3FBDADA354CC7A267B230E68DD6831E138DA0D838F486FB050442CE
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b67fa6d5b94aaea44e261f9447b3240ae7e9667330a0a1b05b3361ef560fe421
MD5 e5c87dfaf2cbc3d12e92607219c86bd4
SHA1 929b47df65ad596f6cfb74736452405a6514a258
SHA512 d2901a95edeb732f9a240cfa2ac05c78d9819a16c45b20ccfe9d9e91235bfd349f846b0105002386f5c409934e65fd59072ade5f2464f27ef9b14b52f4e0fdcb
TLSH
T15B31C2B3C6D586ADC81166F09B14FE2FCE5D051942183C19C9D9EF5BA3E3472E20165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 45cbff8b7af62b5527ba3d2384fb72d13d2b895b293acd0ce2ee46258d6ba948
MD5 88da197f1a36e7704e4b2544d17117ef
SHA1 478230c2b5571ca97e54a41523924db5d5d39b23
SHA512 114a346b0a67cdbee45031c3ca0117babb21e3a34358ceacc2da73f83878cb17542d3b59931034784bbf5caa0cee6389b414569cdffb0641195bf8e697576c17
SSDEEP 192:sxZTRFWs/fiasFuIdpFCHW6+WNq2j/YRPdikIgrJ:sxZT+s/fiasF/UHbX/mZ9
TLSH
T1FF22B8526E28A97B8CC7D21DBA29BF53D6FA503291D51E4CAAFCC61C04F66CD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 55640bfe28979ce8a43a401b326123dad375be7d821994bca8e14c9b072e08d8
MD5 3e565058e5ec798fe932ffd3d6c40f35
SHA1 367e63d366b1aec5e20d96c08d396c13baeb6ec0
SHA512 f2f8c0ea3bdadbb6b3ed15aeb031f83bf57df49133a1679f7c8c639e58f222368e4a1571cc79f2740e4088b1b044aa0a328d2a5dd8bb005ccba86b7b102ca8e7
SSDEEP 192:sxZTRFWs/fias5uIdp7CHW6+WNq2j/YRP4ikIg5GJ:sxZT+s/fias5/uHbX/miE
TLSH
T17122B8526E28697B8CC7E20DBA15BF53E6F9503251D11E4CAAFCC61C05F66DE120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 27f5e836bdf093283ba2858815c980f13b450051a8b8ff69e7205457abe3954b
MD5 b233b5a8ac8ea61e974f629a7b047de5
SHA1 775c8c40f0fbb75487ffaecdd623c47502bec545
SHA512 5128cc12e9202487245892aa609fb2320cec7f31a16c8a926044d8ce7290f53c33c60222e4c1f8d5131a3084e88266bf8fbf98b4c3a6403a03c8dc7eb5584881
SSDEEP 192:sxZTRFWs/fias5uIdpFCHW6+WNq2j/YRPEikIg5GJ:sxZT+s/fias5/UHbX/meE
TLSH
T19D22B8526E28697B8CCBE209BA15BF53E6FA503251D51E4CAAFCC61C05F66CE120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5fca7f67c35734d011ae60b00555f3bc556f1ac61b2f1b49478b7774e9dff71a
MD5 98c32a67abf7a0d57f80c94a22bc5934
SHA1 7e726cd15677ac9b592b0f969ade5471f5aa23a7
SHA512 2eb6aeb41fd4c141210524bbf2e0d189840961213616f556f11444d190a1a4c2d710a8fb8129632ac77c50b2957326bf84ee5052140e9024278c60d5c200aaf0
SSDEEP 192:sxZTRFWs/fias8uIdpFCHW6+WNq2j/YRPdikIg5kJ:sxZT+s/fias8/UHbX/mZG
TLSH
T1FA22B8526E28A97B8CC7D21DBA15BF53D6FA503291D51E4CAAFCC61C04F66CD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bff9c7f1a3a0f6dc1b23c143323fa008af802126fc415e32bbcc02cd0e869382
MD5 1970554f088d8e674d454b73dcec702a
SHA1 2c091c48206bb4afa309359bbf28af80f0a921b8
SHA512 60fcc2d505833bd5d04155306593226ed8ea4400f8016721ae48422cce0ea1b13491a440db55fe9c0f28e421057a72ecc9b1fae0f469d0e8fe76c39356bb0034
SSDEEP 768:SkK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3proy+ja:SkK9uzYWvcQWsu1ja0HL7Q3Cy+ja
TLSH
T155C2093F640DCB7E4FC01A9DDC5A6F972E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dd608fc84f0ed4b28697828acf736a3a42c3c5ee53dccd924306cd9d1c839f12
MD5 7a5b9816cc078cd90eec3757a80a163e
SHA1 8574f3d6516a6740f04cd69751012ac05e105d67
SHA512 ca699d5d2e0b7e7663385b47ad61e45fbc5732449628d1e8d525e9dc3531aea28d25381d0b97aefcbf772e72b3d4c0e680c23fe6f7101cedda21b5f84a6961d1
SSDEEP 48:K0mImDmHjNl12blo9ISj2K9T1B2xLmYwRDnyLDmHjNl12blo9ISj2K9T1B2xLmYp:K0mBIIKpyWK4IK5SCzuKs4A
TLSH
T163910486717B124078BD795881A4971F028131733318ED2BBFBC00668EAFE199CFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bac662c-c2ee-45be-a9bd-b32d2632712f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6bac662c-c2ee-45be-a9bd-b32d2632712f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2c17a6c1a185d1ac370b534524791a1a52848bfc633a844216ef818f89b3e5eb
MD5 a1d1a34916c07aa86854a5ebce81a08c
SHA1 97cc41f3b2d5883bfcbbbc3e918f302f4b6c9c8f
SHA512 74d1ee63acf2aa3098dc339ea21a4367f36c6cece0581a0202539504f92bc8eab33615d51712f5df4236a1b5b95a66c852cd0aeccecbf82e894f5a9eb42b847d
SSDEEP 384:5ZcIhsNWKw5ia0OjTVFDOmxjiwJr7zVZh6DKhHZo/:RhPPnjOyjJh7zfYGHZM
TLSH
T12A828E325C782CB65CF6A245F54736438FB890A7D6897EC490EDAF1D01EB6682307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5c62f53f802982f401c1baf0132b7bf34e40efa78a292808a21af9df43f097ee
MD5 f278968fb0bf0be3189f58b2b52e2964
SHA1 d91b7274525c62dc41477a81fceab4b82d477201
SHA512 2066c8fa6fc6c796328a57d9acfb72514bb58a8e9291248c2e801b4a6996b4c5cb84b525715aa1295aa2d8cabf072945554a430cba85afe285ff702d94c6308a
SSDEEP 384:JiFiZcIszsNW8TUNTUlIlxw5i60OjTVFDOmxjiwJrRzVZh6DKhHZo/:gFQQ3wgmPnjOyjJhRzfYGHZM
TLSH
T1B1C229F248D75876D8AE9747E77E2D038EBCC0A3B5456984B3985A0CCC961BFD306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9ae248e8f662949b4eda9e4ce539db45ff9fa0867f6f3c9a454234d1bf53c8f5
MD5 294e19918c6a55ba7b284a80dd04eab8
SHA1 001e8a728965c2026c4b38c23388ebb46cbf6aea
SHA512 d7bb10161258773a09a8378a77244ca6e23de13f28bc3a147c079ef3698f380841bffffabf46d1796537685c1671f405733245047f0fb3c6c7759153229f8283
SSDEEP 192:SONJ6ygpQmiUycntOCTVg+DO9m9zPqtU6:SONJ6lHFtOCTVFDOceU6
TLSH
T1D402D634BC683CBB8EA36E45F58B27139FA8116BD9552F84DAE81E1C01D765C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0c235e5a9506393fd952f5572dc8c954d0f6bd2c6c4f701d25e9e92355c70110
MD5 7bc665460cb9465298a7323bb652b097
SHA1 e5f84a182725323ecdd2599d90403c88fff50e7e
SHA512 c63a428c44b4e30100daced7cc54ed0c604265ae224c430cd9d789f65d132a27fd96acd0601b92c638ab835186b5657c831b5c6dc2f4123e8ba03d1ed4d37f28
SSDEEP 384:EZcIhsNWxw5ia0OjTVFDOmxjiwJr7zVZh6DKhHZo/:ihWPnjOyjJh7zfYGHZM
TLSH
T184827E325C782CB65CF6A145F54736438FB490A7D6896EC490EDAF1D01EB6682307D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3eb9b00746eb5e0d74677d0a6f74547e28281c20fa305f64cfab25b44ad9290c
MD5 8bf3483d1bc402065c7cb3c5e35c20ac
SHA1 b10c2b1853d74b91a017292525185b8fad41a412
SHA512 26804a8118f308fd96b775de95bc0670c6e67c71a0f84b2432b22d1edb6726f5058a10d616df3f9597ff97de95306a2c12cac8f1178effa8b9a4b3531c4a12f8
SSDEEP 192:SONP6yLQmiUyOnUOCTVg+DO9mXxjv2FJSJra3U8+qeU6:SONP6KFUOCTVFDOmxjiwJrzzU6
TLSH
T119122A31B8686C775DE36645F48732539EA44167DA463F84D1DC1E1C01EF66C230BC6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 be32328f977c1fbff783a3e87724de5054bfd3ba20cefc5bd62c0f4c8948e88e
MD5 6f7fe786984581fb0aa1f5ec910a046c
SHA1 c51be77d146afb55661d4947e961a776c61e8888
SHA512 9549512fb5576ae06b460446866b53be2ce32777fba6d46d9e444446055a6474796914f27c0fb482bed84a1de4991dfcdc9ebbffb08bf1f1a572d38959a353ef
TLSH
T187412B58B6E91108B3B76E56AFF6A96D987BBC373F06D55E00010D4F0623A81C971B37
MD5 SHA1 SHA512 TLSH

Submit Download