0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/controllers/index.html
Size 131B
Sample261005-aramdat1e1
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4520	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{885BA4C9-A656-4F69-985B-1F8A6A5F4559}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
760	msedge.exe
760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 848	4952	msedge.exe	87
PID 4952 wrote to memory of 4596	4952	msedge.exe	88
PID 4952 wrote to memory of 4520	4952	msedge.exe	89
PID 4952 wrote to memory of 4596	4952	msedge.exe	88
PID 4952 wrote to memory of 4596	4952	msedge.exe	88
PID 4952 wrote to memory of 852	4952	msedge.exe	90
PID 4952 wrote to memory of 852	4952	msedge.exe	90
PID 4952 wrote to memory of 3092	4952	msedge.exe	91
PID 4952 wrote to memory of 3092	4952	msedge.exe	91
PID 4952 wrote to memory of 796	4952	msedge.exe	92
PID 4952 wrote to memory of 3092	4952	msedge.exe	91
PID 4952 wrote to memory of 796	4952	msedge.exe	92
PID 4952 wrote to memory of 796	4952	msedge.exe	92
PID 4952 wrote to memory of 536	4952	msedge.exe	94
PID 4952 wrote to memory of 1228	4952	msedge.exe	95
PID 4952 wrote to memory of 536	4952	msedge.exe	94
PID 4952 wrote to memory of 536	4952	msedge.exe	94
PID 4952 wrote to memory of 1228	4952	msedge.exe	95
PID 4952 wrote to memory of 1228	4952	msedge.exe	95
PID 4952 wrote to memory of 1676	4952	msedge.exe	104
PID 4952 wrote to memory of 1688	4952	msedge.exe	105
PID 4952 wrote to memory of 1676	4952	msedge.exe	104
PID 4952 wrote to memory of 1688	4952	msedge.exe	105
PID 4952 wrote to memory of 4804	4952	msedge.exe	108
PID 4952 wrote to memory of 3392	4952	msedge.exe	116
PID 4952 wrote to memory of 4296	4952	msedge.exe	117
PID 4952 wrote to memory of 3416	4952	msedge.exe	118
PID 4952 wrote to memory of 4408	4952	msedge.exe	121
PID 4952 wrote to memory of 4408	4952	msedge.exe	121
PID 4952 wrote to memory of 760	4952	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\controllers\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ffc3f04c188,0x7ffc3f04c194,0x7ffc3f04c1a0
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,10153009681316533802,3661742766254064900,262144 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,8709146377428672635,6037372012718992423,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,7100442549676529433,8548277373035785627,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,16945140396100645276,9726083933495074593,2097152 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,17651729189049476345,6892775017745841912,2097152 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,3979777576901810193,17122959766614776313,2097152 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,1470351893519034048,13664113477308833764,2097152 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,18165810660567269969,6782488189116433857,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,10978011851917370497,5060856639790758558,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,7354008634593875991,8866555453239049581,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,7354008634593875991,8866555453239049581,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,4611625098745635356,12099248376428193661,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,11916197046572685851,3245334882408410751,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,5954647889542274724,836675519693937877,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,15732450289808320507,8864416404955772147,524288 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6336,i,3918098191309984708,6203933575979179145,262144 --field-trial-handle=2332,i,526928254366492384,9425322004724601587,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

59a47366-f308-48c0-911a-9903d4bfa489.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\59a47366-f308-48c0-911a-9903d4bfa489.tmp
Size 21KB
SHA256 32e1724ca8700f63f1dfb922cd0d3a75240023a5e32b0b521b8dce158296548a
MD5 45b61ca335f443db38c5a0f1f5eba5cb
SHA1 44e503b26115a61e7435bc5c44ce334d8a251c61
SHA512 c7bb9e5ec35000bf83f03014dd32ba93b58828c90576b823f3c749133089057d7bd2da98036eb69dbc0d377e9b55bbf5de1a6d873c4d1ee7e6da58f29ecd4a87
SSDEEP 384:AfiFiZcIkzsNj8TUNTUlIlCW/5iTLHpBGYX5E2P7ZgDCiVZh6DKhHQo1:AqFQYCwgbcLGYu2TZCCifYGHQS
TLSH
T1C6A27D339CA89C7F5DF69A81F94636038EF44067D6C4EB94A2DD9A1D10DB1D8130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a0785e7-05ac-4479-8bc6-c4230af48053.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a0785e7-05ac-4479-8bc6-c4230af48053.tmp
Size 18KB
SHA256 9cb7ab26340f3d35a61d2cf634e11a746b5d65f8dfb250c42462536720cd1f27
MD5 200ccc4a48ca30454bdadb2a97fad466
SHA1 e850d25543f0750d14041b68edecd88304e2254f
SHA512 d1bc4232374bfd40947108462631838d26e1b31ee0a72d2817e84f4c7791b52f52d931d09920e1b821694f8939b72b92bf302c4aa73a55132cbff6631b464f52
SSDEEP 384:AZcIhsNRCW/5iTLHpBGYX5E2P7ZgDaiVZh6DKhHQo1:+h+cLGYu2TZCaifYGHQS
TLSH
T157828E32EC786C7A4CE7E181F8473A038EB89127E7C4AF4490DDAB1D11DB698131B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

27757fb5-08bc-4649-acdf-318931268d9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27757fb5-08bc-4649-acdf-318931268d9f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fc4182f-8fed-43d2-92dd-1cc13ae7123c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5fc4182f-8fed-43d2-92dd-1cc13ae7123c.tmp
Size 9KB
SHA256 baeb50ac090ea0f58fa8bfa8a621684b21efcf5c268c0cb52393b3c27753ab72
MD5 a2f0177f7c742112093f373b8e54e7d0
SHA1 e7363fe60e4468a714ebf6a1614519e88b41aa2b
SHA512 a25a6018074fd2a604410704ec430d967db1b4848fbd48360677c4fda0af300843b6e56207b8b3026e89ac43f573fdd4e997703569e737c2995721dbe75441d8
SSDEEP 192:sxZ9RrWs/f5sojJIdpdGHW6+WNGYgUSIIg5jJ:sxZ9ks/f5sACgHbGoD
TLSH
T10A22B6126E28A97F8CC7D20DBB15BF53D6F9543251911E48AAFCC61C15E66DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623a395c-34bf-47cf-a0da-326c6ccba015.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\623a395c-34bf-47cf-a0da-326c6ccba015.tmp
Size 10KB
SHA256 33cc266bf2ada512568c1f8b86cf70d9540b09328ca116c6c73e1684787a6756
MD5 1a900256fd936a438e62a8b0de36d353
SHA1 d9dcd7c22b7839309e264638d74b50c92d14329d
SHA512 9b8a9c50bf0ec17e43b47b7b99b3c27bc8f9739041dc1cf7b539fb7d6dbfeed2d819851bdc4d8db14ba09317bd5dd6e0072c121f584da59d6c8eac38ad94e492
SSDEEP 192:sxZ9RrWs/f5sEjJIdpdGHW6+WNGYglSIIg5xJ:sxZ9ks/f5s8CgHbGf1
TLSH
T1E722B8526E28697F8CC7E20DBB15BF53E6F9543251911E48AAFCC61C15E76CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84c8e2c4-a117-432d-9519-36ca30aacb08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84c8e2c4-a117-432d-9519-36ca30aacb08.tmp
Size 10KB
SHA256 609487ca0261c613d50ea4d4d1a93f871c603e67d51536910d85afbd24a9564a
MD5 0f0d8078d981b866e6a8cfffada2e560
SHA1 c3e315df0067776c2bf4ce72d22879d9802c315a
SHA512 d3b883c6b22440477092da65a920cd8dc37ffe08ba3602cb5894fc9d727991e42bc155119b0845e0177cc36999346a88d58fde735c6b8cded50a31058a71536f
SSDEEP 192:sxZ9RrWs/f5sEjJIdpHGHW6+WNGYgfSIIg5xJ:sxZ9ks/f5s8CmHbGF1
TLSH
T10822D8527E28697B8CC7E20DBB15BF53E6F9543251911E48AAFCC61C15E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 bc90675bf658d5e863b7807abda7472b6f2685422faa0ddbf3676ea8ec652e91
MD5 f4bcfb8a2062ce0f6f5b6c7777ccbff5
SHA1 7dc6257932a76ea1efc7c2954c51406a416e466a
SHA512 076eb92382ae5a0c7ad41565444bfa171f5def6b89bc749e56b76f38b7ca9da8564be231785cda0006c925e6c0ab2829b6a1475b2cdd7532ace0b959b7ae86bd
TLSH
T1A7614CD511DB84AFFBAAED3485E830CB3A7716A043E36F7311B9D83B5E067A98141053
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7d81cbe4d20d713c6cfffe6cfb2bc35cca94170da4dcd8c0cab8e2ab6eaee60c
MD5 085669db23cb677782d064bd80af1e43
SHA1 9c17dc363e287793d2a8f6272e1d800fd871bbd2
SHA512 9cdf14a83e6102a7e582850a56d85e33bd8f6e13a9a977d3ef789dc5b0d1994fa6b3ee3a570e9c33bd52bd525df3956a978eeb08facff647349307bbf83a76b3
TLSH
T16E614CC511DB84AFFBAAED3489E830CB3A7756A043E32F7301B9D83B5E067A98541053
MD5 SHA1 SHA512 TLSH

Submit Download

5422738d-adf5-4af6-ad9f-52eaecc9cf7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5422738d-adf5-4af6-ad9f-52eaecc9cf7e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

74f8a1ac-7338-4707-ac34-e2962d03e2a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\74f8a1ac-7338-4707-ac34-e2962d03e2a1.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c16e304f-4d79-48df-9c7c-d1937f4d96c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c16e304f-4d79-48df-9c7c-d1937f4d96c4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c76980f1-e108-4579-8c24-e89a16e1bc32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c76980f1-e108-4579-8c24-e89a16e1bc32.tmp
Size 949B
SHA256 e0845cd67dc4912821b7f0c1b2b185fecb50bd23a7a63d86a1b703cc60ec922b
MD5 b03fd0f26c826629ab6c5841de699d22
SHA1 5852c949b20ff3995fae13c27487b5d80bd9378b
SHA512 62ba71c82a454456d57b78e0c1a51cad831568dbbbd7e8cafe5533c671fc0b5a802519cdbd164bf9549f99420a15e299da5691b0a68791678f49066d709d1aed
TLSH
T1EB117DF3C3D585AEC90116F06A24EE2BCE2D0545832C7D1989D4EF6793F3475E10159B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 2e7c27e5d75d79aae37585afce3b8c1e02129102d466f6272c950806046e171a
MD5 7866ca679608e93d64a6b81a574023f7
SHA1 54519c65473465581fdc02e3d74a3e0b4c43d617
SHA512 c1ed462cf88c66eb44818920c7bbef4e03558be22398910408bb3bd0877fb9cdb4dcd1b40bdcb918aa5ea80099d40e3ecaf01e9b036fe4ea5ce9963c87e608e1
TLSH
T167215A30612BA202387D3A0C7A5CD427425130F330A865FEB67C8155DDEEE19AAFC4D9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 609B
SHA256 8467d62eeafd30f6e26ebaafcf71580a9b798efa3f99af979f939bf0634308e2
MD5 58139ac38a48e2b52eef5ce4bd8490a0
SHA1 c16c2f0e50dd925d4487f3c80e1c72fb5fca0464
SHA512 2c2c2865a53fccee26f4586fad690290f8632fbf939469a9f141568613ad1d22e5c40adf38c3580176f3c769b924325df3b3741f1761a08770d665863fead927
TLSH
T1F3F05830202EA202387D7A4C6A5CD527425130E3346865FEB6B882559DDEE199AFC4E9
MD5 SHA1 SHA512 TLSH

Submit Download

cce84db1-4718-4e77-9a61-cf8b663800e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cce84db1-4718-4e77-9a61-cf8b663800e7.tmp
Size 9KB
SHA256 795a9478d2064259d5ea38511aed5b3a8c4911ab33ecb1919c3940f2e773508d
MD5 badd8b1e23d9401f62aaa584502cd806
SHA1 0e68558f1eed9d1e890f923da2d77d44ca45a855
SHA512 cc5cc00ba604483cde2c95ab8d0a73292d49cb6c578327c8b5d82ed7a92cb784f679d863a8154875cb9fbf30c1f82706d9d0bd5f33018e1f6f03897087167932
SSDEEP 192:sxZ9RrWs/f5sQjJIdpdGHW6+WNGYgUSIIgrJ:sxZ9ks/f5soCgHbGo9
TLSH
T10C12B7126E28A97B8CC7D20DBB15BF53E6F9543261911E48EAFCC61C15E66DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dea8f639-ef35-41db-84be-ac5fde5bab09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dea8f639-ef35-41db-84be-ac5fde5bab09.tmp
Size 27KB
SHA256 f9fc1f6b0c1f2265f69642ddee68342715a1880edf3a13f9405d7643b6263b97
MD5 c5cc36e0d0cc1adc644e3d6e618b8b5e
SHA1 2c827a54799de5ac723b57f816e9be5f6d3b9ff3
SHA512 f96d8bb50f57abdac92acaf03b158e15fa4e41d73768721458242031cee2c8a4e286b7249acbb48824d0278f8e725e8c989eaa1c23f23177908e0d8f4166cd48
SSDEEP 768:ZGichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzOroaoA:ZGichfPWvPZplu1jan+LKgzFvA
TLSH
T1E6C2FA3B644CCB7E4FC01E9DDD1A6F9A7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7ca6eef-723c-4d77-8c18-3960ff9165ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e7ca6eef-723c-4d77-8c18-3960ff9165ae.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4dcb94b-80f4-4156-8b59-8989bc7eaa2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4dcb94b-80f4-4156-8b59-8989bc7eaa2b.tmp
Size 18KB
SHA256 0cbac2d55663cd633a768c13fdbfb633cf9e1f9d660f3ecedd0ee2bf00b5ee1f
MD5 b9420486daf709ee725ea8a51cc5054b
SHA1 fda9920ecef85337303e633b08e2aeeee44e1f3c
SHA512 9d7774c09f0734785a72852ae8a6ef32d9a56c293cbb18ea5755c6538a4269428c3abd33b6c13988a4f0d0427d5ed8cf0ae70235a006db74d7d8ff1bb36a59b8
SSDEEP 384:yZcIhsNRjW/5iTLHpBGYX5E2P7ZgDaiVZh6DKhHQo1:Ah5cLGYu2TZCaifYGHQS
TLSH
T1DC828E32EC786C7A5CE7E181F8473A038FB89527E7C4AB4490DDAB1D11DB694131B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4de47de-2c7a-4329-a21d-7dc8a541adc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4de47de-2c7a-4329-a21d-7dc8a541adc0.tmp
Size 8KB
SHA256 22e8c7b054a374ab68f99db0eb3dbeb9e5d1522982432f67547881f4fec5db3f
MD5 818ee7ed292026f92ca213fea6422124
SHA1 ed327a02cf357a69856ae6e98533f4bb50c67166
SHA512 525534b9f23432e4f3b4524f2cc6602237e1f63708ccf79753eac7e449ac52bc853cb947862fae80c8af316fbb72e9078761f6924815ff1da70aa3fe37b6561d
SSDEEP 192:LJONl6DphmqQmiUyL0q8wGYX59ezvCP7zkk7mKU6:lONl619DRwGYX5E2P7rRU6
TLSH
T11102EA35EC787CBB8DE3AE55F44B27135FD4112BAA906B84C6E80B1D11C764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7260cd87-627d-43b7-86a3-6efd2e17c642.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7260cd87-627d-43b7-86a3-6efd2e17c642.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fe2ef673-3e34-49b8-9192-3f24b4a63582.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fe2ef673-3e34-49b8-9192-3f24b4a63582.tmp
Size 8KB
SHA256 9e31743af14ce097c5728d8587a48ee82a14f476823b71d35ae934e74b3a8b0c
MD5 122da3c6279399decee5a4acbe1b8056
SHA1 e41554ac85353bb94c619915420ef495cf460e52
SHA512 33a37007264d5b61c5a41c1329d7ada9c182a5fafc7c70ff7bcba5c32f835e3dcfc1f70c0154a04d6d86e17ad97d6badd18586b356272f281e6b06574b361f46
SSDEEP 192:LJONU6DphxqQmiUyXY0LwGYX59ezvCP7ZgD3kIIHq5nU6:lONU61mcjLwGYX5E2P7ZgDgiU6
TLSH
T177121A36F8B8AC7B4DD3A494F44B36138FA4522BEB84BF54D5DC1A1C01DF69C230A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 375fe19cb5731b90c94ceccb73848a0c1ed475e8de0df832818cecc733465f7b
MD5 b3656bc561fc857333b1809e47d37ff5
SHA1 f73f36fbd3dffde0ad9a938f4b4bd60277382f03
SHA512 f55a2c706a66c55f0988b2abe5d60d039b0cb87f7da1806e7e88e6486f7883a5e7822fd06ea721cd918212d12684b97c62d8c235e48fac12a736a9c0f5ba3ac4
TLSH
T1EA41385CA7F91108B3B76E5AAFFAA86E487BB8372F06C49D10110E4F0622A40CD71737
MD5 SHA1 SHA512 TLSH

Submit Download