hxxps://3wrgb3s5[.]r[.]us-west-2[.]awstrack[.]me/L0/https[:]%2F%2Fwilliamraveis[.]maxadesigns[.]com%2Forders%2F47508%2Fprint_cart/1/0101019fc962b8a5-c3e56fd3-4ba0-4235-8cd0-9cc36cbd790f-000000/h3_mrScoktaS-wWgK8FvWw6CG8E=474

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 13:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://3wrgb3s5.r.us-west-2.awstrack.me/L0/https:%2F%2Fwilliamraveis.maxadesigns.com%2Forders%2F47508%2Fprint_cart/1/0101019fc962b8a5-c3e56fd3-4ba0-4235-8cd0-9cc36cbd790f-000000/h3_mrScoktaS-wWgK8FvWw6CG8E=474
Sample260804-qb91asfl2v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2432	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303223964695091"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{CE20102D-B885-4933-B98E-1E95F28C2C53}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2756	msedge.exe
2756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4012 wrote to memory of 4444	4012	msedge.exe	87
PID 4012 wrote to memory of 2432	4012	msedge.exe	88
PID 4012 wrote to memory of 2976	4012	msedge.exe	89
PID 4012 wrote to memory of 2976	4012	msedge.exe	89
PID 4012 wrote to memory of 2976	4012	msedge.exe	89
PID 4012 wrote to memory of 1968	4012	msedge.exe	91
PID 4012 wrote to memory of 1968	4012	msedge.exe	91
PID 4012 wrote to memory of 3252	4012	msedge.exe	92
PID 4012 wrote to memory of 3252	4012	msedge.exe	92
PID 4012 wrote to memory of 3252	4012	msedge.exe	92
PID 4012 wrote to memory of 3180	4012	msedge.exe	93
PID 4012 wrote to memory of 3180	4012	msedge.exe	93
PID 4012 wrote to memory of 3180	4012	msedge.exe	93
PID 4012 wrote to memory of 4888	4012	msedge.exe	94
PID 4012 wrote to memory of 4888	4012	msedge.exe	94
PID 4012 wrote to memory of 4888	4012	msedge.exe	94
PID 4012 wrote to memory of 4952	4012	msedge.exe	95
PID 4012 wrote to memory of 4952	4012	msedge.exe	95
PID 4012 wrote to memory of 4952	4012	msedge.exe	95
PID 4012 wrote to memory of 844	4012	msedge.exe	99
PID 4012 wrote to memory of 3256	4012	msedge.exe	100
PID 4012 wrote to memory of 844	4012	msedge.exe	99
PID 4012 wrote to memory of 3256	4012	msedge.exe	100
PID 4012 wrote to memory of 660	4012	msedge.exe	102
PID 4012 wrote to memory of 4244	4012	msedge.exe	108
PID 4012 wrote to memory of 4244	4012	msedge.exe	108
PID 4012 wrote to memory of 4244	4012	msedge.exe	108
PID 4012 wrote to memory of 1044	4012	msedge.exe	114
PID 4012 wrote to memory of 2256	4012	msedge.exe	115
PID 4012 wrote to memory of 4688	4012	msedge.exe	116
PID 4012 wrote to memory of 1840	4012	msedge.exe	118
PID 4012 wrote to memory of 1840	4012	msedge.exe	118
PID 4012 wrote to memory of 2756	4012	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://3wrgb3s5.r.us-west-2.awstrack.me/L0/https:%2F%2Fwilliamraveis.maxadesigns.com%2Forders%2F47508%2Fprint_cart/1/0101019fc962b8a5-c3e56fd3-4ba0-4235-8cd0-9cc36cbd790f-000000/h3_mrScoktaS-wWgK8FvWw6CG8E=474
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff9095ac188,0x7ff9095ac194,0x7ff9095ac1a0
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,7894457601196927976,18286253964011870395,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,17219981768163660517,7338237886919687895,262144 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,15541364158180464230,14785249958622999235,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,17766161116962962460,1879345829351538447,2097152 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,10699466674761336191,17289176389338181593,2097152 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,11630197601729630353,16087403700073984040,2097152 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,6064137003156505127,5570345952667315495,2097152 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,4565868044395955651,10372338836809726199,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,16652429634440720261,11823461491907535075,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,8414289165452404079,3694626503228714799,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,8414289165452404079,3694626503228714799,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6388,i,7913427896654870169,4433810902524898730,2097152 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,18057488143679757260,5216110259338741332,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,3477009777958089661,8668088228634540683,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,12648932202353574531,7350444600045824685,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,17230562995844025666,9553773234452042346,524288 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,14112952272769676105,14122112580126373685,262144 --field-trial-handle=2024,i,5104604339922090213,11394482836145327810,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 24b0fad3b86f8ecf723086ac1787715324876f8d4ce01ce869bd3cc1202027e9
MD5 87c633e292c3fccdfabcc04bd332841a
SHA1 cb2e781210589ea95d53068d8f4a8fcee408f964
SHA512 cf967e0c95f16dd5903850c8e4a2504f1a7c517639a7d1c5cc58b74b6e6aa3ac34653423b0920ddb0b93dbe7966a4f38131130fa2b23e8ccfc941866d87926d3
TLSH
T18C712C364047DCAEE72D00706CD042F335718DE9FD476EA791BC2E781A16BA3B61B588
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58da0f.TMP
Size 3KB
SHA256 de20f0495adc4dc20d8fcfef9c8fa2fb106c1eca4450c4b2638cd03a7fb2136a
MD5 05b07f64d94f69bb56e08ba86bf54385
SHA1 16304127ba7a5093384a60ccb26f4df6819dbfbd
SHA512 02f7b044d2aca6141731fad028d337845f077f2afea8970681f7eae8409c2e8434765b081839ded19e4a62e2277d596d7a1b06b4aa6189f5e4fbc7c134dd5c33
TLSH
T186714C364087DCAEEB1D00706CD081F334718DEAFD475E9B91BC2EB41A16B63B22B588
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 30db65e01d67f0b90fc622c2fbf903287214fcf9606ab6b7674f1b65a97b0c65
MD5 fef58197810fac7af32496ee6a3d690e
SHA1 206f91fe79a33b04127a172a8b7e6b98dc3d638c
SHA512 80bc70a1a2a1b12224c1168f220a3193316a74fcedd232885022eba3ba1500bc60aa289493f5d079784cc8deca2e3b9250ed3f1d56ebcac5d1de58b9ff43196a
TLSH
T10F319BF787B1956EDE1092F45A14DE2BCF1C0511036C7859C6D8AE2BD7F34B1E01265B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 67db25fdb806d19563ff6889f55cf6baa841dc35bee14469ba54a84727b011f5
MD5 f693147178d971f5e92943865c154cb9
SHA1 04fe7df69a3535b1c7af3e480a5951b0d062afcc
SHA512 996ea48da9a21aee5d3f0164d548d68a8f8ba0c7356196c59ebc2c603d07a95da5a795dd88b0921145c5de8252b6bf5014f9335b4b3fafef552a0112f16f3d5a
SSDEEP 192:sxZNRQkd/fFsUNefgIdpJHW6+WNGYzcS97IgrJ:sxZNBd/fFsUYJJHbGC9
TLSH
T19D22B6526E38A87B8CC7D209FB15BF43D6F95032A1941E58EAFC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 285dfb5f259d9926d941a175773f987a4fdd95f35631a65d08c8153216cf26f9
MD5 48ad62638069a3be3f442afcaaf3f076
SHA1 acdcc84ab16132a4b56d76205fc9778610c58d90
SHA512 57858e95ea3ec24bf773a63990b56935214c58b2fa5853881604fd1b87b55f38ef3e139e2f6228043355b23f34de6fc3a0d924816b0b63a490374a3a69fd28ce
SSDEEP 192:sxZNRQkd/fFs+Ne9gIdpLEHW6+WNf/l/YzkKS97Ig5/J:sxZNBd/fFs+YnwHbF/DPT
TLSH
T12122D8526E78A97B4CCBD209FB15BB03E6FA103291951E58E6FC961C04E7BDD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5ac08207587ca666a1fa5d0183c6df115c80ed7311bbed46ad6c7dbe03306e42
MD5 6f5e99907fa76d272d69e834894435fd
SHA1 4c406a65d9eb874e3b7fff96dd31acd57c66bcf9
SHA512 08108e8b49672d45b1065fc792da97d2f93bb236589b833389f961d1dc3436976f2c2eefd15b0708ad4baf86d127426218fa4a6852cd601a3378735b1670b171
SSDEEP 192:sxZNRQkd/fFs+8e9gIdpLEHW6+WNf/l/YzD297Ig5dJ:sxZNBd/fFs+JnwHbF/pF
TLSH
T1F322D8526E78A97B8CCBE209FB15BF03E6F6503291951E58E6FC961C05E7BCD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 57417d1699a5d2195eb3d3edc660ea4d9a6785833fb23558c719a199bc653a84
MD5 ed3094a827e939b4598df26c193ecb25
SHA1 7029a9598e96b2d4630e71f79dc1da02423cde4c
SHA512 b59e1e6bcf934870522bf3024639a6db0e9bc1786c69420bd7c073af6a26e8435fa5fafd3458a54a487044218f16ca7c50073e316a8cfb40b87484f5f26c9352
SSDEEP 768:1Fk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBmroyQXY8:1Fk7u70WvqiEau1jai5LA3BdjI8
TLSH
T1D3C2E93B740CCB7E4F801E9DED566F963E9802C7A6948D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8e558572dee2e4d0de0b33fbfaf4601bda6d7a3b77f8704e4069a1efb704bf15
MD5 c7ffbd42591d4a2c2b170db5621bcaf7
SHA1 9057dacddffb71a0b93e0ed74dc0eed13357a9cb
SHA512 c91739cd02bb53eae2ce8b88b97e5cbf2595f5df2b765f30d5ad5c9787043a4b6877cedd186f9bb4cfe523dea172e9ed2012d9cb896497818c783ddc5c81581b
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTvNIZKWcMKLYX7Vptk9paPIaTkKfB3NkDb0o6Vb5yJQj:KIbCKcvNSKWctA4KJqeqQQK3
TLSH
T1E691BF01317E12403D7E295CD295C6761E8236633809A56FBFF844A25EE7E264DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 87bc303a45f4220b28f4a5a74a87f80a9157ea1dcdd04d6c5e53e94d4379e8fa
MD5 d7ae05226d6151cf637002a1a9c2e7ca
SHA1 47f500453b7c0ceabf2af79225b5049000eeb918
SHA512 3e8e5cc52f4a10bd67cd8c48f59a334272d0f25856d95f9fbf49e42c35684a310decb5b3aefe27a2656d323b21adde3ae649237065fec22c8b6c25ba3fc196d4
SSDEEP 384:0ZcIhsNjQxRbhZy7LCKP0BeRs9JKgqijUrx:yhrHYpcTjKgqmUrx
TLSH
T195929E359C796E3AAAA6F541F8C536174FF88027E3D05F40F5ECBB0D019B698131A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 8c0a7b5d5acd652a1409f829e4bb9511e3a3d0f65bd6f120dc87a7820ad49fb2
MD5 5c3a3c85ed20d3853c2178ab804ad145
SHA1 f54f7f8cda89579f1cf1a2ce563208fa3f100ab1
SHA512 ad56042119133ee36c93163b23dbad81dea327521ccb4abcb5bb29fa9e50a1a5e112fa5baa24a656592b0c60f8973b874023d5dbdc544cf3f0f9930af8c76bb2
SSDEEP 384:sZcIrzsNjcxRbhIy7LCZP0BeRs9JKgqijUrx:6/9KY4cTjKgqmUrx
TLSH
T123C24BF458E7593AD99EA343A7BD2E134EBCD027B2805A40B3EC6A0CCD9657FD306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2315fde9a3e9a91c5c762bd0a4d3e4380da5542d2e0c7f2ffba0699fb56a3598
MD5 07549c6870f1b8198c9a02a320f67481
SHA1 678e0eb6e961db9c23f1188d04410cb180a88d64
SHA512 485d6e09958b1112ac9c3678c59d5a7a27a86c14bac1c621dd1b1fd359c7eea80cca4eeea952b857846b1971ee27a680fd41db051a394d81d5e55ee2e5d029d3
SSDEEP 192:MONx64BAQmiUyI1XW5GBPKIOCHruaDmjU6:MONx6eAfdW8LLMU6
TLSH
T1E3020C396C796C7B9EB2AE05F88637175FE5113BB5945F44EAE81B1C00D764C234382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5c0c3e628b6bdea9abf76713a952038a914ffe0d3f91c2033a0e8de91d95b352
MD5 f50598561f364e2544b7b8bdf98b017b
SHA1 632fe131d4bc885323beb23aaec97f4bef25e6df
SHA512 c49a7b0065da4e660261e66dc60b4b6f1aa4a9f1d9e2f9551a7dfc758747effdb8aa9148fa093eca13d03f07c6a34c30816ff326026ce7b818dffa1983809a86
SSDEEP 384:1ZcIhsNjcxRbhZy7LCKP0BeRs9JKgqijUrx:Nh9HYpcTjKgqmUrx
TLSH
T1D8928D349C796E3A99A6F541F8C536174FF89027E3D05F50F5ECBB0D019A688231A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a9e504de9b4b34e107f26c860dc0242926206583974263de4e196a04077a4283
MD5 f5776899a870f68adfbffb7249885309
SHA1 61dfe630f005c6d5481665163fd79a09164200b9
SHA512 89e10ea9dc3650019e8df62fd9f1574dfd6f232e43c6feb6309ad939926623ed40956762484ba22f4ab26dc1d0d4b3d03c6ecb0c725bd6c4b7bf16a067fd6c9e
SSDEEP 192:rON+64BTQmiUyKXu5GBPKIOCHrWTPNYWwPbqnU6:rON+6eFpu8LC+P0U6
TLSH
T1DF120A39ACB9AC3F5E92A551F4C632175FA9513BF6846B40E6EC3A1C01EF69C2306817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22c0af06-5995-458f-8196-158145497306.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\22c0af06-5995-458f-8196-158145497306.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 23524de049f7b541bb90a1e512c7a84f05423abffa06c72e6f2052e6076d9b31
MD5 6bdcf533b40d173e5e5b987c87f7812c
SHA1 81f31af8b205d655fd12c6e5a8691f7ced09cb6e
SHA512 5f7f0425ed71020abc06cebb6eb1b97b53db1f2d80b96fdb790661e27540e61624b524e847566ce3f7bb75f05ec00e877b09ef5ce3493e3b3c5fa9e3b5b11f0d
TLSH
T16441F958B6FD1144B3B36E56AFF6A86E487EB9372F46806E00010E4F0B32B40C862737
MD5 SHA1 SHA512 TLSH

Submit Download