hxxps://address[.]centers[.]vu/managements[.]dhtml?manuals=

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://address.centers.vu/managements.dhtml?manuals=
Sample261014-datkpsew9s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4328	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{38B66A2B-6A3B-4FEE-930F-05602DC8DF02}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2964	msedge.exe
2964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4188 wrote to memory of 4280	4188	msedge.exe	86
PID 4188 wrote to memory of 4328	4188	msedge.exe	88
PID 4188 wrote to memory of 4360	4188	msedge.exe	89
PID 4188 wrote to memory of 4668	4188	msedge.exe	90
PID 4188 wrote to memory of 4360	4188	msedge.exe	89
PID 4188 wrote to memory of 4360	4188	msedge.exe	89
PID 4188 wrote to memory of 4668	4188	msedge.exe	90
PID 4188 wrote to memory of 3652	4188	msedge.exe	91
PID 4188 wrote to memory of 3652	4188	msedge.exe	91
PID 4188 wrote to memory of 3484	4188	msedge.exe	92
PID 4188 wrote to memory of 3652	4188	msedge.exe	91
PID 4188 wrote to memory of 3484	4188	msedge.exe	92
PID 4188 wrote to memory of 3484	4188	msedge.exe	92
PID 4188 wrote to memory of 2732	4188	msedge.exe	93
PID 4188 wrote to memory of 4400	4188	msedge.exe	94
PID 4188 wrote to memory of 2732	4188	msedge.exe	93
PID 4188 wrote to memory of 2732	4188	msedge.exe	93
PID 4188 wrote to memory of 4400	4188	msedge.exe	94
PID 4188 wrote to memory of 4400	4188	msedge.exe	94
PID 4188 wrote to memory of 4248	4188	msedge.exe	98
PID 4188 wrote to memory of 4248	4188	msedge.exe	98
PID 4188 wrote to memory of 4248	4188	msedge.exe	98
PID 4188 wrote to memory of 4860	4188	msedge.exe	99
PID 4188 wrote to memory of 4744	4188	msedge.exe	100
PID 4188 wrote to memory of 4860	4188	msedge.exe	99
PID 4188 wrote to memory of 4744	4188	msedge.exe	100
PID 4188 wrote to memory of 2664	4188	msedge.exe	103
PID 4188 wrote to memory of 4508	4188	msedge.exe	113
PID 4188 wrote to memory of 1316	4188	msedge.exe	114
PID 4188 wrote to memory of 2164	4188	msedge.exe	115
PID 4188 wrote to memory of 3132	4188	msedge.exe	123
PID 4188 wrote to memory of 3132	4188	msedge.exe	123
PID 4188 wrote to memory of 2576	4188	msedge.exe	124
PID 4188 wrote to memory of 2576	4188	msedge.exe	124
PID 4188 wrote to memory of 2964	4188	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://address.centers.vu/managements.dhtml?manuals=
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x274,0x7ffe3793c188,0x7ffe3793c194,0x7ffe3793c1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,11778363874257709560,10407898230156699570,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,14221857894383401765,16257395549053708929,262144 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:2
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,9154460427263500351,5259613546098694998,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,10772516713699068479,11894166741417650268,2097152 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,15097618414441626152,3664455025167394188,2097152 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,8692218774955681286,1414399707866708607,2097152 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,12827070297833237033,18329683226313450820,2097152 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4560,i,18041681413032650881,12492022567545098665,2097152 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,15233906416714273416,12833010827147890750,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,1993090279983333622,3640750193553039304,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1636356234675407975,2780573952611867162,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1636356234675407975,2780573952611867162,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,16305398626662523533,4046422133822511565,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,1147852126017341581,1138695877119999959,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,14633575539904858119,1188470536017453764,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,8389253688409642935,50812921226744103,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,5923765921289852809,15697424315088913333,524288 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,17359014987664010195,10747837816137466807,262144 --field-trial-handle=2572,i,9684422871184136701,5244450039642904024,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

08912bea-e9c9-4fff-832a-40db39815313.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08912bea-e9c9-4fff-832a-40db39815313.tmp
Size 18KB
SHA256 d01a47dec04c0d5d0e5d0563dc495cdd7d3ef35cca03f660b32988e932b9cfbe
MD5 13cc7ed948f66197e6695c4b09df0bce
SHA1 fdee780ab52592e810ab7431ecf671a8c833ceb9
SHA512 df1574cf3524aa5b136f6fe3fb1e6bb57a2a6fd657fdc3f99069b6f13197b8f818aa6d2e8a4d51443aec864017ee9daddc4ffb79d2a90964c1b2cb98c8471273
SSDEEP 384:FZcIhsNz8FSbiSP0oUQX5+DtD8PXq+2kBEPJAxJE7:9hXU7/kDSqlkBEPkJs
TLSH
T13A829E71AC74BD7259E6A145F48736035FF8A137B7C41B84E6ED6F1C00DAA9C131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2333be47-8782-4c35-b03a-560aa641e1d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2333be47-8782-4c35-b03a-560aa641e1d7.tmp
Size 8KB
SHA256 e48e92d8682ab579a26e276ff34f973e64ab4ad04330cc8f4641c80d8140e17f
MD5 4a1c73943b428074927b32d0e9a0aed2
SHA1 7ffa24493e68a442fdbfe00ba726d7ebf7f56bd9
SHA512 a57b826af0e4e12dfbaba83555f195f29d15482eac19217fa56d26db66aa4c5a80397ad9309b38d425663987883530d2ac961a1022ecd1e9cd99909a65055b0b
SSDEEP 192:cONW6nnHWQmiUyGsd0YcX5hQDP1Tjzor6s1mkXIx+2dg36q5EU6:cONW6nSly0NX5+DtD8PXq+2iBEU6
TLSH
T16B120B31E8B8BC675DE3A595B08732136EA55227EA886FC0D6ED2F1C01DF65C6309D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e61b142-89ae-472e-9d01-6a0622cd7936.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3e61b142-89ae-472e-9d01-6a0622cd7936.tmp
Size 21KB
SHA256 b928c1e5cc48fa36b8bfc7d5f97a444b300e8f022d38fb2062834d692e95dd36
MD5 5bce11fc95d7861ff9b2501e9abc6524
SHA1 9c9e3c56d603cd0bde7d5fcae08b22db3bbef976
SHA512 a3a00ee952c592e3d5f9c45b4b1aac4a2d724882d061b6544ee51e506a352e683abd23efc2a7673fcc33c82cb024d38323204f28fb932c8e597f55444168c51c
SSDEEP 384:piFiZcI/qzsNN8TUNTUlIl8FSbiSP0oUQX5+DtD8PXq+2IBEPJAxJE7:AFQK8wgAU7/kDSqlIBEPkJs
TLSH
T194A28D339CA4E977ADB69B45F58A32039FF59177E6C46B80E7DD6E1C00961DC130AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87005c5b-236d-4304-9ee9-1017c2348cc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87005c5b-236d-4304-9ee9-1017c2348cc0.tmp
Size 8KB
SHA256 9adb5f847d4f2ae88de028beb7c23ef744741037975567717c8b7e26680ba81b
MD5 270f3dea52bd96c34ed1a1059ee379d9
SHA1 c6d9e91da6841946828d031dd6b18b669540702e
SHA512 d73e7c56b1edff1208da2761493313c2b0569a89e0a782a5318d3e194584da6d505f86b99c4d0276a69859040ea5c00b490fbdbf51b4aca55841f1d5562066c5
SSDEEP 192:EON56nnHGQmiUyTdQYcX5hQDP1Tjzor6s1mmMcUlMU6:EON56nC2QNX5+DtD8ZCMU6
TLSH
T1A802CC34ECA87CB78AF7AD49B48737136FA5216BA5942BC4DAE81A1C01D775C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

1abbd21e-5c7b-4ce6-b4e6-ae568faa3160.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1abbd21e-5c7b-4ce6-b4e6-ae568faa3160.tmp
Size 9KB
SHA256 981ec86faa6e977f4125f209160f993b8c8da17d2680608070480a45fe41b631
MD5 62a94accf25e9b77bd736d835fd0bc4a
SHA1 7c5f7812f98e5fbcbadc4f7d741dc6368ce52ab1
SHA512 e36b183164bbf9e0c38f6e9bd9f0d3a5bb91a8a2f09dc866839355fa5da25484c85765a8aa281bddcfdaf3a44da7377d7650084543bbcbe028dce33a52d02d4f
SSDEEP 192:sxZiDRqWD/fOsyZIdpirHW6+WNGYYB1U3tIgrJ:sxZiD/D/fOsyyAHbGf29
TLSH
T18622B721AE28757B8CC7E209BB55BF53E5F95032A1901E58FAFD961C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bfb3db2-2085-4c06-b132-b84ec93a0e80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3bfb3db2-2085-4c06-b132-b84ec93a0e80.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62a0838b-4fd5-44e6-a36e-d9720db53579.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62a0838b-4fd5-44e6-a36e-d9720db53579.tmp
Size 9KB
SHA256 05a179d5c5d02d3d9656bdf026ab208a66c17d091f6851e99e901631d2a97c33
MD5 db6a8d4ec2be88bb4832dab54d16d6a6
SHA1 1ddf26fc19c6ca947f1f2fcb559785e29d14ce2a
SHA512 0f759b72f82af759e54c60152a7532e32683783189c74c0edf1c68134dd52cfd0c66a3679329902ea2915550f5af7b071bca79c407cf2ca741fe7c26cd6ae017
SSDEEP 192:sxZiDRqWD/fOshZIdpirHW6+WNGYYB1U3tIg5sJ:sxZiD/D/fOshyAHbGf2S
TLSH
T1BD22B821AE38757B8CC7E20DBB55BF53E5F95032A1901E58BAFD961C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 325df14ca1b3e6e23e2926111240fdfb37ab8c7d4195776f32d24f2d674e5b96
MD5 5926018cd85104e493460acc8a65fa47
SHA1 ca917875fed6f3d60304e7c7c764e15cd83e914d
SHA512 dc181f2f5eaa6315b3899a471ad4a847cb25950d00cd06b8c13280c3f90edd82e7ef499ab02bb747e77d518a28bdb5ba163cb6201b5353e6621ee597c4fdebf6
TLSH
T133E07DC50ACAC32EB7086A4B0178472C8380365AE3ECA91E1783C5C8700BB58F2C2A90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9fa490545c208268c4646ed7794a0c7390fd0cc8406faa6c0ec36c7299f9b9ae
MD5 79a030fcdb010b0669cae7a606ddbc8c
SHA1 4dd132c3b8624eb3be73a0a65ae3f88e936c4517
SHA512 13ff9770af9d93da6240790003be11440c49d45f4b5f7f75b16a7d8f9fba34c1f2f93072204729e882890e69677fffb062bd710bc6a8de2f6edfaeb3528e3463
TLSH
T17561A4C055A3B448FBA8427481E9389F3E38258F55AF1DC29DB7E8759CCAB5C60B3244
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e5eb8613bc3775e9e7c2d7649dddab651f0d02b1dd0ff28ce0ed0b006bd2f60b
MD5 0f86fdfe49a57ec9bb25bf22ffa2b4c9
SHA1 51e0a8c670537da6f14ddab60e2ce60a1e536ea7
SHA512 2c124afbd66ac1f2af8a4556e5af37958d770924859e9eb5a1ab77f3341c34ffe12d4e8d570c6f8333397c4a2d82ee4de7eba8024160fcab63d3458428003299
TLSH
T13561A4C059A3B448FBA8427481E9399F3E38258F55AF1DC29DB7E8759CCAB5C60F3244
MD5 SHA1 SHA512 TLSH

Submit Download

9670f935-d042-49d8-a47d-abd6df5598bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9670f935-d042-49d8-a47d-abd6df5598bb.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

02245224-9c95-496a-82fc-af817e3c2b53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02245224-9c95-496a-82fc-af817e3c2b53.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

46e56267-e751-416f-8e50-69eaad39e5c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\46e56267-e751-416f-8e50-69eaad39e5c4.tmp
Size 1KB
SHA256 2495206a0a4ae76919164090e56785d2637dbbcd9121b1a42c94a04f79a94a7b
MD5 a718f99ae56b2f08a403116ee4f52ccb
SHA1 68f15d2b996b5b875ffb7c721c0f0c0b1b4b8ab6
SHA512 e2a77995882f0fbcc7fac27e0f5dffb28f4f8553c6ceb6b8e6889173b1ea110b5b96008f263819ad24a649ee14db955ba0fea7c7a17abc4a47907b01e051c40a
TLSH
T1543189F2C3E8866DCA1156F0AB24AE1BCE2D0945532C3D2AC9D4EF1BA3E2475E10165E
MD5 SHA1 SHA512 TLSH

Submit Download

9d1e59f0-4bb5-44d8-b9b4-a92b1349a408.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d1e59f0-4bb5-44d8-b9b4-a92b1349a408.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3ce8ff3f744b76ba5e15b6983f5ddd3b4c760d8e7c9d67f9077c8f9639668f02
MD5 d0f2f01f4dcdcac53e7ae6dd3eef3d52
SHA1 2ea8e5c385ac513f50cf4822b7bd25f76fbe7cfc
SHA512 df78617e67360c28fdec464e242fd17876a19e2355c7711d61b2e4d700be04b763cdaf7ec9c88c4a0fe86e98b418490673c5225dbf28a8db82f3e3d55851ce78
SSDEEP 48:KgRAthrvzMb/KXIS5MK9Z1zMxxcYKbRVyLeZ04WcMFbwX4ISQFK901GFx+VYvwsk:KAWEKXKKWdSK2gK6cgK1uOx
TLSH
T12E91604071AB060539BE264D9166DB1B568231B3B42CF57BBBBD41A18E2EF444CFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b66870f3-8bc5-459d-8edc-a753e5ee3bda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b66870f3-8bc5-459d-8edc-a753e5ee3bda.tmp
Size 10KB
SHA256 2b85db349ceddf1ce933729166c8d941ba3a1431face326e362d50cc1238ac32
MD5 0f8cddbe334839928fcc19486bea13e8
SHA1 76fb50411bba152165624f0bdb1714b8ad98eaf9
SHA512 2c7c0b93110b2a688b91fda16cf13bc1092c27ca510851118f1c7b97fa8c985fb2226cdebdfb93a054e877e44cd337f6e93d9b957395dd676aab0c6bf890bcb9
SSDEEP 192:sxZiDRqWD/fOsLZIdpUrHW6+WNGYYBHl3tIg5eJ:sxZiD/D/fOsLyiHbGfHQ
TLSH
T1B822B862AE2879778CC7E20DBB55BF53E5F95032A1901E48BAFD961C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd3f7342-7209-4248-bdd4-8adcaac8212e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd3f7342-7209-4248-bdd4-8adcaac8212e.tmp
Size 27KB
SHA256 1f3112dda43b7fdca2097afff452c329126f7a62fb0ac7523b5cd8e87af4280f
MD5 bf01a651d889060da1f80b3aca3e33d8
SHA1 1ba85bd5f623a2fde91754608f8e6dd203b08698
SHA512 bbecf84d605b9f45fd561f4e7eb46998db4ec127163de20671dd1719dbb2b25e6de877ae7a0bacd4d49724489f7e35d1d450f56b7dea23a8083daba0732c1639
SSDEEP 768:xGyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXoropZ0y:xGyYR7jWv3NpBu1ja/CL8OXTz
TLSH
T132C2E93B640DCB7E4FC01A9DDC5AAF9B3E9802C7A6548D4047FA944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7b26a81-66c7-48f9-b386-cc0134c7d1a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7b26a81-66c7-48f9-b386-cc0134c7d1a9.tmp
Size 10KB
SHA256 7ece67baaae9b0a64c7aa59045041d078451059ed2982fac179e73003f361324
MD5 0c5afcff8eff75572e51433ba98e78ec
SHA1 65203a3335d107dd74588ccefa90542e05de95fe
SHA512 dd74a407b0c613fbb0115ce036a72a42b199203b0c631f38d83c52c9b3ddd72516346c225bd0af669312a1e770808b23440e941c32d32744c82df149816f7602
SSDEEP 192:sxZiDRqWD/fOsLZIdpirHW6+WNGYYBLm3tIg5eJ:sxZiD/D/fOsLyAHbGfuQ
TLSH
T10E22B921AE2879778CC7E209BB55BF43E5F95032A1901E44BAFD961C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aef454d9-5868-4655-b2ca-50bed6d814d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aef454d9-5868-4655-b2ca-50bed6d814d0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e770152d-649f-4429-ac17-3dcc50c057d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e770152d-649f-4429-ac17-3dcc50c057d9.tmp
Size 18KB
SHA256 0054d1df52f7002eb0861f51b12ac4dd1b014bf085b5ce3412313ff088d2679c
MD5 be02827bdb8ea5ea8d781280c568ed38
SHA1 bdf5a0275e0aa30361bc21a24c7a53d7ea2687b6
SHA512 b57af3dafb06878635d33d715ed8d84b1b39cef3dffb0f69ca43821a64a93dd65b09e218457c10ed5b037adc40eb9a25f56974240f66e64589dc9cc2d5553c66
SSDEEP 384:QZcIhsNz9FSbiSP0oUQX5+DtD8PXq+2kBEPJAxJE7:uhEU7/kDSqlkBEPkJs
TLSH
T103828E32AC74BD7259A6A145F48B36035FF8A137B7C41B84D6ED6F1C00DA69C131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45f519bc-05b2-47ce-843a-582b32461b5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\45f519bc-05b2-47ce-843a-582b32461b5e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 70e04533e4ffff92bfa42eb8b0a35f861eb263bafa8b2dd7407b62f7227072e3
MD5 10186151387e2f1756a81e38eff496c3
SHA1 bc8eedd26d01c40e34b0f10e1829efa5b013ab5b
SHA512 7f85b73811f14487318cc259e0e32d3e6a8cfaa97d8aa1af3eaa3b25aeadd557a618a0f0697779374181999e7619965ca7da5a6696eac75cfbf39bbaa5d1e4f7
TLSH
T14A41188CA6FE1148B3B37E56ABF6A87E487BB9772E46D46D10110D4E0623F40D8A1737
MD5 SHA1 SHA512 TLSH

Submit Download