hxxps://accounts[.]nvgs[.]nvidia[.]com/api/1/message/VerifyEmail?q=eyJhbGciOiJIUzI1NiJ9[.]eyJtZXNzYWdlSWQiOiIxNTQ2OTQ2ODY2NzQ1Mjk0ODQ4Iiwic2UiOiItIiwicmVkaXJlY3RVcmwiOiJodHRwczovL2xvZ2luLm52Z3MubnZpZGlhLmNvbS92MS9uZmFjdG9yL2VtYWlsLWF1dGg_Y29kZT1UX1VncUhOVldoc0g2Wm9aQWZjQkFVTXJzNm5WVTlJazlrLTJsazZfcm5RWHFaRG1NRTZqdnB6RnZUcy0wTUFPLk1UVTBOamswTmpnMk5qWTJNVFF3T0RjMk9BPT0mdGhlbWU9Tm9pciZsb2NhbGU9ZW4tVVMiLCJpZCI6IiIsImp0aSI6IjVkZjdkNGFjLTZjZjAtNDc5Yy1iYmVhLWFhNmNhM2JmMWZkMyJ9[.]gaFkcAvnfVjpf-ojYhLDusbNL976S6FxU9rtuxpt3IY

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/09/2026, 18:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://accounts.nvgs.nvidia.com/api/1/message/VerifyEmail?q=eyJhbGciOiJIUzI1NiJ9.eyJtZXNzYWdlSWQiOiIxNTQ2OTQ2ODY2NzQ1Mjk0ODQ4Iiwic2UiOiItIiwicmVkaXJlY3RVcmwiOiJodHRwczovL2xvZ2luLm52Z3MubnZpZGlhLmNvbS92MS9uZmFjdG9yL2VtYWlsLWF1dGg_Y29kZT1UX1VncUhOVldoc0g2Wm9aQWZjQkFVTXJzNm5WVTlJazlrLTJsazZfcm5RWHFaRG1NRTZqdnB6RnZUcy0wTUFPLk1UVTBOamswTmpnMk5qWTJNVFF3T0RjMk9BPT0mdGhlbWU9Tm9pciZsb2NhbGU9ZW4tVVMiLCJpZCI6IiIsImp0aSI6IjVkZjdkNGFjLTZjZjAtNDc5Yy1iYmVhLWFhNmNhM2JmMWZkMyJ9.gaFkcAvnfVjpf-ojYhLDusbNL976S6FxU9rtuxpt3IY
Sample260908-wv61mswerd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4592	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333649488214489"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{59448F34-B007-46C9-B254-21BF4F45C421}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3480 wrote to memory of 5900	3480	msedge.exe	88
PID 3480 wrote to memory of 6028	3480	msedge.exe	90
PID 3480 wrote to memory of 4592	3480	msedge.exe	91
PID 3480 wrote to memory of 6028	3480	msedge.exe	90
PID 3480 wrote to memory of 6028	3480	msedge.exe	90
PID 3480 wrote to memory of 6084	3480	msedge.exe	93
PID 3480 wrote to memory of 6084	3480	msedge.exe	93
PID 3480 wrote to memory of 3904	3480	msedge.exe	95
PID 3480 wrote to memory of 1264	3480	msedge.exe	94
PID 3480 wrote to memory of 3904	3480	msedge.exe	95
PID 3480 wrote to memory of 3904	3480	msedge.exe	95
PID 3480 wrote to memory of 1264	3480	msedge.exe	94
PID 3480 wrote to memory of 1264	3480	msedge.exe	94
PID 3480 wrote to memory of 6056	3480	msedge.exe	96
PID 3480 wrote to memory of 6056	3480	msedge.exe	96
PID 3480 wrote to memory of 6056	3480	msedge.exe	96
PID 3480 wrote to memory of 244	3480	msedge.exe	97
PID 3480 wrote to memory of 244	3480	msedge.exe	97
PID 3480 wrote to memory of 244	3480	msedge.exe	97
PID 3480 wrote to memory of 1136	3480	msedge.exe	99
PID 3480 wrote to memory of 2400	3480	msedge.exe	100
PID 3480 wrote to memory of 1136	3480	msedge.exe	99
PID 3480 wrote to memory of 2400	3480	msedge.exe	100
PID 3480 wrote to memory of 4924	3480	msedge.exe	102
PID 3480 wrote to memory of 4256	3480	msedge.exe	106
PID 3480 wrote to memory of 1992	3480	msedge.exe	107
PID 3480 wrote to memory of 3364	3480	msedge.exe	108
PID 3480 wrote to memory of 5372	3480	msedge.exe	109
PID 3480 wrote to memory of 5372	3480	msedge.exe	109
PID 3480 wrote to memory of 2012	3480	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://accounts.nvgs.nvidia.com/api/1/message/VerifyEmail?q=eyJhbGciOiJIUzI1NiJ9.eyJtZXNzYWdlSWQiOiIxNTQ2OTQ2ODY2NzQ1Mjk0ODQ4Iiwic2UiOiItIiwicmVkaXJlY3RVcmwiOiJodHRwczovL2xvZ2luLm52Z3MubnZpZGlhLmNvbS92MS9uZmFjdG9yL2VtYWlsLWF1dGg_Y29kZT1UX1VncUhOVldoc0g2Wm9aQWZjQkFVTXJzNm5WVTlJazlrLTJsazZfcm5RWHFaRG1NRTZqdnB6RnZUcy0wTUFPLk1UVTBOamswTmpnMk5qWTJNVFF3T0RjMk9BPT0mdGhlbWU9Tm9pciZsb2NhbGU9ZW4tVVMiLCJpZCI6IiIsImp0aSI6IjVkZjdkNGFjLTZjZjAtNDc5Yy1iYmVhLWFhNmNhM2JmMWZkMyJ9.gaFkcAvnfVjpf-ojYhLDusbNL976S6FxU9rtuxpt3IY
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb19dbc188,0x7ffb19dbc194,0x7ffb19dbc1a0
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,8837420515265834938,7383958546454805283,262144 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,16689042416135578011,525992330650833450,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,3191667417729093808,12463019767117544921,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:13
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,9161411866966861316,9136356990246707450,2097152 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,7087938023243334417,6424576460246059934,2097152 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,15678111046287765468,8541016048877903323,2097152 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,5360414623477542614,16882411184348713583,2097152 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,15943947323281053375,15004382709205482471,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,6989562771221956184,9451743406812431520,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,18149842754452998959,6121661924395905176,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,18149842754452998959,6121661924395905176,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,6770689450110666237,11914150362697126843,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:14
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,9004848476872010085,10282403191665679506,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,8905177521912326953,17394779802010704508,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,17839550789802850276,17562961344467677624,524288 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,17133467248498279380,3814932216406670676,262144 --field-trial-handle=2332,i,6518690167718304753,1486880420272360086,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e7fd4b482c044a11eccbb9a1717c60bd4dca8712200ab9881375183cd005a419
MD5 8e697f03a7af2e14f3ea3887ec86ba03
SHA1 3e6068c6456c092f399eed7e5cd4061946e72777
SHA512 df5e783521bf4a2dfb0404af345c82ace9035c78cb2d3e3c04dd1be23603ec70dd121b2e3ceeaf221c96d747b1ce74cc8060925996ea7d0cee3857c5df9dd8da
SSDEEP 48:NLDINynlh42AIQe3+UX0FvV05cAq0DGkvD5uFx8cNlYaUWXdvFevCYij4e+rhvYF:NvIQla2e/05TgqcFUWX5Fc0hF
TLSH
T1D49195062A5D0CA5D3654A7945C5EA4635F146704D07FEC081BFDEB9C82AFDB82F821B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592b9a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592b9a.TMP
Size 3KB
SHA256 7a623a3aea18c4c3d76a27fe5ecd06f48b0785306b87e190d513becf5ebc6197
MD5 050664fa183ca1ebbcdb083c2573e31b
SHA1 6512c2d634131db5655ba2091f24aa2165640efa
SHA512 0853878d8e535c0c1ddaf8914138e6f6ac05a40e4147328182a3d5eee17619f0269dc292ea12737bc8dea096c10314c704e40287b626b905d9b8c37497090cc7
TLSH
T13661214A235E04E9D36A4A7254D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a2d4ea415611ea083466c238e3b499b3f5b9a9ee8b073657abecce808d7c33c9
MD5 15b6ec4fdb63054ffd35226eed1a3477
SHA1 294d6bae3b03a6bfb8fb5ade8d6bf43b47b93556
SHA512 be6049e906e7afd87eaa5b250a76ebe2b204b7683f991fbac9d2e76a72b12b387d6dc36070b1bf3ca705dbc60a2ca19331ed886ea1f55d263230618091705de9
TLSH
T13D418DF783B4D96E9E0196F4AA14AE1FCF5C0511431C786A85E0AE27D3F3462E041B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f06d3a5ce93945834d05548a1b6deee89c87cccabf6fa84ee1851c1fc510d8e5
MD5 0e194a54343664e9c10a4645ef82cc06
SHA1 37d661f93c7ba16ef5afba9eb61cecee2672f729
SHA512 01c203bdf8db0eb2652d4589e788573a4d2a0f0d8c00f1a399ababed9733182aa4fef244394f3a797be55bfd9ff2b6c4d29d25e39b61e30dc7882185adafd23e
SSDEEP 192:sxRCRebW/fXs4bRprQ5XzoA8pmfR/g6+WNtKJ/YnAU/hVGfSIgDiJ:sxRCaW/fXs2R3mJ/56/1ASyq
TLSH
T10142C916AD68AD3B9CCBE21DFB55BF53D6F92032A1D05E04A6FC8A1C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cc0688d5b9a4cabf76a56cbb67965580074a27456daf232a9c9b9fd41209c8d1
MD5 da74147cc16dfe71429918fd0d81bc7d
SHA1 cfe4153bd1c079715c39613a8ba4c5d733980ce3
SHA512 af40c4206330f6fd54404202370ce2882107d56a837395bb3d2b7ccbd3bcf23ea75fb4133ad59a06e65d277c72ac246915bf18181bee49a648b1a7275cd156bc
SSDEEP 192:sxRCRebW/fXs4bxprQ5XzoA8pmfR/g6+WNtKJ/YnAHrhVGfSIgDYJ:sxRCaW/fXs2x3mJ/56/19Syo
TLSH
T18442B756AD68AD3B9CCBE21DFB55BF53D6F9203261D45E04A6FC8A1C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 865f86e3867ed638d27e0125597c6dd22aed69bfa00197d5e03d38d0553c7ea8
MD5 05feee2bd93e48cda1d6149121245491
SHA1 4fcb717595ad3a96131b3cc3f8c8033eafd20c49
SHA512 b2c15a479c79c0f11053f3551103bb418a4ef7d01e1c961ebff3507465784a2e5e63daafd7209ec669f98233b21df8c1748a5286c47ea675e21a436db7106c9a
SSDEEP 192:sxRNRebW/fXsgbRprQ5XzoA8pmfR/g6+WNtKJ/YnAU/hVGfSIgIJ:sxRNaW/fXseR3mJ/56/1ASys
TLSH
T14D32B8166D68AD3B9CCBE21DFB55BF53D6F92032A1D45E08A6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4631b0f0c9d0b40f6f9d5f72da352b19757281938f10f3afa65572f4ad6eb3fe
MD5 2437fe1a523e209201562ca5e583b8ac
SHA1 7591e0829f5a47c57b5fbeb1cab2caa0c75e0a59
SHA512 46c1b7c631a4ff54e6dd05bee7051b85b11b22993b8aec66c6901429cc366a6b31135113e5d4c2727337b7736477bdebce18e94b76faea9412750b9c2bdd915d
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPProhMn:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vo
TLSH
T147B2EC3B604DCB7E5F800AEDDC19AFDB6D9802C79A948D4447FE950C03C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e3199d87badc81ac68ad084cde7ec2dc9242c729c4ec71d739cf6cac412543bc
MD5 bd610b99f9a43a20d185593b71a96417
SHA1 cf73c8d50c2a3f393f7f6270cc6f6a635e4a4f69
SHA512 24c8d55b881f7d8786a4592192f73175e2084947f1ccb99049bfb2c3dd6d93ac07bc33976c17191a242cab22de778528cf2db47c2de9e621c61725e8767a2766
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQr7P767j:CtaTHd3LeTInPlOgxU1NAj70HS3eyEki
TLSH
T1AF915945353A02C03C3D7B5890B4992F92C174B37415E67F77AA16A60F2AE264FFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

1deca438-2ade-4ea7-a667-38a853164a18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1deca438-2ade-4ea7-a667-38a853164a18.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1701f581fd1a95bb2c9a2b412d0345434eee5c4659f566e5bcf0aaa5cc90c243
MD5 1ae4b5c8cfdd46eadc0eb8bc877b4aa6
SHA1 c5083a394c2c9b8365e0fc644cfefbeea1e05e3a
SHA512 1329219d2394d2268c7a311d8fa895584847210c20c76c3a205b138992952ce61ceaa1cefe6a7b40789843219ee7b801b931d3dd394dd5a807f09ef4b709e6fc
SSDEEP 768:Krv+4UNbdu35QDZIO0XINzc4ReyIsPCD184p8R:KbsbA3itc44bsaWV
TLSH
T1E703BE32F8689D77ACEA6241F54B72437EF4601B82C81A94C9DE6F4C464B5EE131F817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 75b08e4c60a860ac5f8d343f44f74534424d32dbc181f269b1cee39e0baca9a1
MD5 3ed0ee18f2f10e0db78f2fbba7828aa4
SHA1 68cc2d6e35ae66718d2d7c4960b3713d441250d5
SHA512 b49cb92b757140ad1568eabd206e2a9c93e7eed794710ea2e17268317f23b37b791dbffa4610fd48e3eaa0bbf50b30ba39271a1f929822b536bc01f3dd9121b1
SSDEEP 384:wZcI938NszBoBNwJDZNfNoXOVSUU+GXRFTETRzcoXfK86sfxEZxxsIj4lBCMuvzH:O93iQDZIO0XYNzc4ReyIsPCD184p8ET
TLSH
T125F2AF72ECA49C67ECEAA341F6463242BEF5912782C86E80C9DD6F0D054769E171FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 9b9f7b5c7930ae5803cea74e08b6c191ebd709bfc56fe8031d985d49a2871093
MD5 424011fa3e03702359b74426135079a2
SHA1 473b885bf6ae95cbafda29df7dd0343e7868a821
SHA512 afa5989abd557edbdca8f17cccbf92728671cd7bd9b597f1a22dc0fcb4c126a4a8cf60c26a66a4c71e33b8ff877f8f9dc5bf4ae54834db122b9bb674b3d7ae8c
SSDEEP 768:kFQx3zwgBQDZIO0XfNzc4ReyIsPCD184p8ET:Hx3Ttc44bsaWoT
TLSH
T147135AF298D78877ECAD5743A77E2E02ADBDD017B184A950B7D95A0CCC461BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6581c153f046d002cf832b66973f8dcfe03a65cc7521f554697aa3a24366c73c
MD5 c6f660fcaee8cba953f1333d60478c4a
SHA1 c9ed05fcbc78c917eb5ed0610f8f6d2310b43ee3
SHA512 3b366ac5c7a22afe7253a1bc552c3047ccf6fef745522d8850beb1e43c2af63870ee90084d6a2854d41e2bd68825fe4ca46be0ecab92167a060cbbc77091350a
SSDEEP 384:mqZcIx38Ns6BofNwJDZNfNoXOVSUU+GXRF/ETRzcoXfK86sfxEZxxsIj4lBCMuvb:rx3FQDZIO0X0Nzc4ReyIsPCD184p8ET
TLSH
T1B5035AF1A8E79877ECAD5343A73E2E026DBCD017B1885940B7D95A0CCD465BFC31A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5351765fb4a6cc59edcef7dca04a933675a937099f9e4f54f90d402ead6ac1bc
MD5 535a2c470d35e1cd20836e1ec59b6cff
SHA1 2241f320b7baf3f5458c99e62b301907944a90e8
SHA512 bac35a5e52ed2014bf6b2d092402ab566679be20f7ec6b4e9973f752fb668c6b60055ff9ba64a055083d472e2130d65b05a1e773e52c137a13499ba47429f404
SSDEEP 384:UZcI938Ns6BoBNwJDZNfNoXOVSUU+GXRFTETRzcoXfK86sfxEZxxsIj4lBCMuvzH:S93PQDZIO0XYNzc4ReyIsPCD184p8ET
TLSH
T18FF2BF72ECA49C67ECEAA341F6463202BEF5902782C86E90C9DD5F0D054769E171FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 41695a4f0e6d4e5c72b3a69f047c284f7958e7c6ed318b704b958dd752fb3d09
MD5 3d5f85d56cfffa774bd1914aaf7d6c21
SHA1 5ecdc06d88546b082ddd84e8ff93d99eb736913b
SHA512 fddb8e4c12ec4e67f3758db945a03a87f413e1a003fb0221b5d86206b3148304f4c09c756be60798b9dd28229a834be1dbe8b7e135773c1af4655d73cabf4e1f
SSDEEP 768:6rv+4UNbds3mBDZIO0sNzc4ReyIsXweVH1S5D:6bsbS3+tc44bsgEH1Y
TLSH
T17503CF32E8788937ECF6A686B54B76137EF8612B82981F90C5DE5F0C464B5DC130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c68a194a58f65afd93be1fe00c18218a9ce48e04c78a2ef1c965618dff4005e0
MD5 59456d07d6191a4aded4a3b108bea272
SHA1 23fe63fcc583cd0e1e12787018ea816c4150a6ae
SHA512 f633e7b226ad0d8d26d4bf4d867d15f507e15e5a02b8b22db8b89fee3e7b7dc2752d5811ef82a347e36c14c6a4336679a6e4c2f7c12f50fe72560006ad0fddfe
SSDEEP 768:Rrv+4UNbds3j6DZIO0XPNzc4ReyIs2CeVH1S5D:RbsbS3htc44bslEH1Y
TLSH
T1F303CF32E8788937ACE66686B14B71137EF8A11B82881F90C9DE5F4C4A4B5DD131FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download