hxxp://baynemedia[.]ca

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 14:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://baynemedia.ca
Sample260925-r2dv8aeg74

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4328	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{E2662A7D-9C76-40B7-AD5C-346C1FD3B81F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 4672	4324	msedge.exe	88
PID 4324 wrote to memory of 4328	4324	msedge.exe	89
PID 4324 wrote to memory of 984	4324	msedge.exe	90
PID 4324 wrote to memory of 2404	4324	msedge.exe	91
PID 4324 wrote to memory of 984	4324	msedge.exe	90
PID 4324 wrote to memory of 984	4324	msedge.exe	90
PID 4324 wrote to memory of 2404	4324	msedge.exe	91
PID 4324 wrote to memory of 224	4324	msedge.exe	92
PID 4324 wrote to memory of 4560	4324	msedge.exe	93
PID 4324 wrote to memory of 224	4324	msedge.exe	92
PID 4324 wrote to memory of 224	4324	msedge.exe	92
PID 4324 wrote to memory of 4560	4324	msedge.exe	93
PID 4324 wrote to memory of 4560	4324	msedge.exe	93
PID 4324 wrote to memory of 2000	4324	msedge.exe	94
PID 4324 wrote to memory of 2000	4324	msedge.exe	94
PID 4324 wrote to memory of 2000	4324	msedge.exe	94
PID 4324 wrote to memory of 4608	4324	msedge.exe	95
PID 4324 wrote to memory of 4608	4324	msedge.exe	95
PID 4324 wrote to memory of 4608	4324	msedge.exe	95
PID 4324 wrote to memory of 4736	4324	msedge.exe	99
PID 4324 wrote to memory of 4736	4324	msedge.exe	99
PID 4324 wrote to memory of 4736	4324	msedge.exe	99
PID 4324 wrote to memory of 4072	4324	msedge.exe	100
PID 4324 wrote to memory of 548	4324	msedge.exe	101
PID 4324 wrote to memory of 4072	4324	msedge.exe	100
PID 4324 wrote to memory of 548	4324	msedge.exe	101
PID 4324 wrote to memory of 744	4324	msedge.exe	105
PID 4324 wrote to memory of 3148	4324	msedge.exe	121
PID 4324 wrote to memory of 2256	4324	msedge.exe	122
PID 4324 wrote to memory of 1644	4324	msedge.exe	123
PID 4324 wrote to memory of 1600	4324	msedge.exe	129
PID 4324 wrote to memory of 1600	4324	msedge.exe	129
PID 4324 wrote to memory of 2940	4324	msedge.exe	130
PID 4324 wrote to memory of 2940	4324	msedge.exe	130
PID 4324 wrote to memory of 1564	4324	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://baynemedia.ca
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbe237c188,0x7ffbe237c194,0x7ffbe237c1a0
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,16161816370420191052,5757751275718201503,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,12265301872396528514,2837530857628844535,262144 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:2
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,9163305216363292189,5258677873959056396,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,9155708140712739355,8571644783189573550,2097152 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7987358765786098417,7539293227009425065,2097152 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,12923700707739816810,360089357689721608,2097152 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,12656652008798913454,12631680875261769773,2097152 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5036,i,8714007231742799849,3235695055827744856,2097152 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,13433499258723267935,15136972492856998447,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,8627804053798721561,8139400369999946215,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,6873059637452882588,8871802760685950771,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,6873059637452882588,8871802760685950771,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,2135927669554993025,7989214397002845816,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,11587971368150046558,13923216566659375041,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,12950420972499134589,15005014772162567762,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,9328496401405890815,6773174853632518370,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,662723094266787109,10400949600298736119,524288 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3644,i,11860740037958313099,14971990607018882795,262144 --field-trial-handle=2744,i,9860358546407512705,2385481789888491573,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3316

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 07d6ab745e06da2ab890ab48d3954071cd7c55a5d679950109f2160a94e9c397
MD5 6d83067ffb5b80d54dc44005283d642e
SHA1 4f9a75b3878cf2a35417e7f9432eb1b7d3255227
SHA512 8404ff131554cab128801a2cbbf29369581b174f2030829882dd63213ce07c82e7ca2b0a5e6f42d9e9954743bbd437dad394aaa45d435ebe3bf46dac30dc9b40
SSDEEP 96:XfE5w/meCjWGVebVp4+nc6Xp8ibfqwiRt:P+w/mnVr+c253in
TLSH
T13E9140725ED24145FF9EB672909688A6F163A37D44E36B4B2B9CD2B79F073F06051C08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5951df.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5951df.TMP
Size 3KB
SHA256 4b1f8f0c46635af7f5b41d498d7b84d14146ad14cc30cea878faa0ddbe766fe4
MD5 762a89c944724dc555e668634df66936
SHA1 008d128c90db16210d82950c5de4c4a0ed78ec51
SHA512 51c3ceffa154069ab13dcf490b8a4a3d28e27ae8436b0053791f14456f3295f0cb0f1ea847211371cc5889cbd1f9407bb3db67c463ed41d8b2a01e96337e2c94
TLSH
T1F761A5B126930490FBABDA7790D405A736B3A3BD44E36F460BD8D3BB974B7F4A054008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f57149518591b9a0a64ff72e1f1c56d3c8099a3cf693851cd641bb34a989136e
MD5 850cfad94030a491fdec520737209450
SHA1 e9729fc1a03f1942ad0459d8c786a81700b58af0
SHA512 4dccee88b63442b6c62537ebc3343fc4861b529e1e31e9bfb80693dbdbf65a367922850239eb0e5ae639e63a88af34343c33cfff332327d081959cecbcfd230b
TLSH
T1705159B7C2D5865DD8125AF1AB24AE1BCF2D091893283C19CDD4FF4B93E2071E64194E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 427eefa209fd722cf97055567441888a144f44fa24acf6ba55b1c8c8d087d4b3
MD5 6e08e964c80b1db21dd503ff0c5fd6e8
SHA1 dc7ccb41ebbd0591dc20112f4de41952a3ef52d8
SHA512 678b1e9a1c7ac042f01c7f8fde35a3c2b3814d7d3e3a79e5a2a22047db1ef1817b805528e4a39cb2c2d0b0133907f6da0c6bb5988a3af66b75fb6e72a8b17610
SSDEEP 192:sxZNRCWZ/f/sL0Idpk3HW6+WNTY84/YYBsA/IgrJ:sxZNTZ/f/sLt6Hb74/fX9
TLSH
T16B22B515AE28A57B8CCBE209BF55BF13E6F9503261D41E58EAFDC61C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d797f2cd9fc20b888a250d76768daeb69b0d7c7664576f4515d7a4d4ead098df
MD5 a8e8708987d4592db622c53fa5177391
SHA1 394a308dfe0461263d8b4395d2ccbc115694155f
SHA512 3c9f309bdc780bc39861e1d1e59b4af642f48fa62148d9ae2f461870ba00552c611e3e6d2523e681909fb96ac697eedd7d4e56f9a3e7987024f15fbba0ed0814
SSDEEP 192:sxZNRCWZ/f/su0Idpk3HW6+WNTj/XYYBpA/Ig5kJ:sxZNTZ/f/sut6HbPXfcm
TLSH
T1EE22A515AE28657B8CCBE21DBE55BF53E6F9503291D41E58AAFCC61C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7e1c059f85a4b9db24b277339e46159a6109b8f15876b7a57ec5c97aad01b4a8
MD5 dcf5c1e4ead4d93611e4a8dc6cbab282
SHA1 637796e4c074d9f0544a5ce0dda31aef643131e3
SHA512 bb78f5f168721bf1087f62648ba3f98086dbc1a42d538b04a20ae3b4e46d5f2266411a0fa9ed67982ba631295ca03eb9e7d5efa5b5e70d88ccef4a21090cc6b2
SSDEEP 192:sxZNRCWZ/f/sZ0Idpk3HW6+WNTj/XYYBuA/Ig5GJ:sxZNTZ/f/sZt6HbPXf1k
TLSH
T15322B655AE28697B8CCBE20DBE55BF13E6F9503291D41E58A6FCCA1C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 63a589bcfe48a1128ca41469e4b1bee71b417a4a0c08f59dce74bda10716d5e9
MD5 aae044571caec6c25a370d1ef30039e0
SHA1 388b05848c7078bfb93893cb827f9cd18263bf43
SHA512 eece702251d8fa0591e37d103d08e17c7147a21cce2b233d2c5598a7681b4c779d699026963efdbb82d429fe69e7e5140d99dbd5dfa48501ad54c82612dc1aa6
SSDEEP 192:sxZNRCWZ/f/sZ0Idpi3HW6+WNTj/XYYBDA/Ig5GJ:sxZNTZ/f/sZtcHbPXfak
TLSH
T1A622C8566E28697B8CCBE20DBE55BF13E6F9503251D41E58E6FCCA1C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a51669dd7e0698d1c4d0170180b1494fc99408da75fd31fccb543503d9d24b38
MD5 02264cef7781d951ab0c6899e2a55019
SHA1 4e527190fb0a60ed132cd089a4f3da1ff93f6218
SHA512 c0840c15c488c5e18b27b9bef50b85461932acdc75e44c8c46802f78604c6348736ebc1f0ab570a497449e17f636d3c1118bea84f501f986b3848f5461f20850
SSDEEP 768:ePyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXJropWkU:ePyYR7jWv3NpBu1ja/CL8OXis
TLSH
T1CBC2E92F640DCB7E4FC01E9DDC5AAFD72E9802C7A6548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 88735adc13349463da2540262742353b0fcd1b2b5b0bea28ef6c76239b654c08
MD5 8318ed015d9ee3cda8f650722d118224
SHA1 bbec02f2edc14e8cf4aed4d5b75b6699d5dea370
SHA512 2a39c715444a1353910a82671a43dc3f5938b31cd5dec7791450fbdfe164185406899ee257ca72d998e2befc288d0d6588a9145427aa6f1c0e48bfee5eb0deed
SSDEEP 48:KgMb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLvSbvRxRqbpkZIS/qK9f1VqxP6YcdNU:KEbKKcMuqMAK9Kqq4K/qmxMDYcWT
TLSH
T1A991440234BF024139BE3A4894B4976E86427273355AED3BBFBD44968D2EE141CFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8405a5f-e566-4499-bf85-70006d98853f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e8405a5f-e566-4499-bf85-70006d98853f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 13da3b1d0f6973e1535fd001f8321222723caebe3b1e3367f4f1e51ad850bf93
MD5 de9e7cb427e2f600c62d77bfb5737634
SHA1 d45d7ae3b7617f5f93ed0c5733b884f704a46902
SHA512 26bb457711d3c570403eda0bd4238c6ea98720d2d7b5f4a798963ebd7933a1e9204adb270673c18fd18b5c5c7000af683ca8f7e4b08fcac245fd95c15a92b2c1
SSDEEP 384:pZcIhsN0bVBFA/iBDtuQX5+Dtm8/wX884xfQtgOIwZOyXLoV:hhvFK87kDu74xfQXsOS
TLSH
T16E828E369CB8AC7759EBA541B48A36135F786037A7C46BC0D5FDAB2D01D96E8130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b3ac13e1f7eb69b79577a16baa8e250cebfcca68c318b4f5a345f00023aeab5f
MD5 d572fe2907e910e76c621d91ea5fdfd2
SHA1 cac916f07f39566cae72fe951a911670df105b96
SHA512 74349d2c0c9a6c16394e82d53f39be6a5d1bafdecc094b5b467767ad8cfbe3b1fca5dec3f3ac83acd0435dc8a3f9f7a1fa57ee4fa361cea51d258a93515eb62f
SSDEEP 384:N+iFiZcIBzsN88TUNTUlIlKVBFA/iBDtuQX5+Dtm8/wX88KxfQtgOIwZOyXLoV:LFQxBwgkFKo7kDu7KxfQXsOS
TLSH
T197C219F288D7993BD9AE5743A77D2D138E7CD023B584A680B7A85A1CCC961BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8d47dcfe03e9c61c496b3f821b15a975cf6dfe20880902460b8471ea0b1d1707
MD5 109b2106da08ae676c6db4e7d6ae997d
SHA1 74d07cb24b611809aa9a6ee08658b2408351ae71
SHA512 3f2a36ad4f5bb7269461a725c89ef1818cb131206214f15ec69a705628db9bfa981ca3aa67c88febcdb659b4ed9aba87aa8113ae37251bd469dbb5a2d2a94cf8
SSDEEP 384:VUZcIhsN0KVBFA/iBDtuQX5+Dtm8/wX884xfQtgOIwZOyXLoV:Qh+FK87kDu74xfQXsOS
TLSH
T128829E369CB8AC7759EBA541B48A36135F786037A7C46BC0D5FDAB1D01D96E8130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4a4f2cec1c1b7a5acb3f1cc7b58887666cfc2ff5cc24d79660c6405ff1b7bb19
MD5 001886a71952194447e94d4762bb9c8e
SHA1 5f25c48a4f0db2a5f113ebc0e73fc3ee4b51088a
SHA512 0ebf2eb9463dc87672849c6845bcb74a596237767d9bf83e0acd9c8b5f09a6c00dd99ad3e26d15d9340d00654d999336e23dffdc516e2ca2172cda14f0ca2cf3
SSDEEP 192:EON56nnHGQmiUymOQYcX5hQDP16jzor/eMccYU6:EON56nC0QNX5+Dtm8/OtU6
TLSH
T1D502DB35FCB87C7B8AF36D45B48636139FA5213BE6946B80DAE85A1C00DB65C2306933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8bd3eafa3e25d5dfb3f35fa027ecb1841834705cc010d66a5dd131a3b30700e6
MD5 d9bb50de4e8f19a9d3601ec738dc0b80
SHA1 9ea5a73bfa33997e5d4cb022c2a263bdb45015e7
SHA512 2c32a2d9547438123135b30a17ab3101b4ce8103eb18277255596968272029ed5d44f9e44ef8630f76c22e53e1505edb8d52ddca2c7b589ce996f96498d4d4f9
SSDEEP 192:EON96nnHeQmiUydO4YcX5hQDP16jzor/wX4FfEIg3X/5fQU6:EON96n694NX5+Dtm8/wX88zxfQU6
TLSH
T17B12FC35F8A8BC675EE26995B48731239FA51127D7487BC0D6EC2F1C01DE6AC530AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25a846f5-94eb-40d7-a3b7-79ec0cc21dd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\25a846f5-94eb-40d7-a3b7-79ec0cc21dd5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 02f493accc09a7ae029a9f7dbf622e7290c2000c0e6503c1678bc1a979d56c6f
MD5 ddf37d2e84b2f0c1aa8d5af6c720f800
SHA1 492f7a547a4c9343a5ef2d143eea7dd7d6b62bda
SHA512 56c7c7334655307f92829c54e22169daffb3fac4d486411f4012ec421d9ad6778951e8f8424121899c5aa13f4a74489de6e0b64e3b23b0a85b5078d23bc9bbc7
TLSH
T1FA410B5DBAEA1148B3777F56ABF6A86D447FB8772E06945E10010E4F0A22B40C971733
MD5 SHA1 SHA512 TLSH

Submit Download