0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/helpers/index.html
Size 131B
Sample261005-aramdat1e1
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{166E58A4-8617-48EA-854B-42ACAF7099B7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5792	msedge.exe
5792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1440 wrote to memory of 3500	1440	msedge.exe	87
PID 1440 wrote to memory of 5532	1440	msedge.exe	88
PID 1440 wrote to memory of 3876	1440	msedge.exe	89
PID 1440 wrote to memory of 3876	1440	msedge.exe	89
PID 1440 wrote to memory of 3876	1440	msedge.exe	89
PID 1440 wrote to memory of 5656	1440	msedge.exe	90
PID 1440 wrote to memory of 5656	1440	msedge.exe	90
PID 1440 wrote to memory of 4416	1440	msedge.exe	91
PID 1440 wrote to memory of 4416	1440	msedge.exe	91
PID 1440 wrote to memory of 4416	1440	msedge.exe	91
PID 1440 wrote to memory of 5240	1440	msedge.exe	92
PID 1440 wrote to memory of 5240	1440	msedge.exe	92
PID 1440 wrote to memory of 5240	1440	msedge.exe	92
PID 1440 wrote to memory of 1800	1440	msedge.exe	99
PID 1440 wrote to memory of 2376	1440	msedge.exe	100
PID 1440 wrote to memory of 1800	1440	msedge.exe	99
PID 1440 wrote to memory of 2376	1440	msedge.exe	100
PID 1440 wrote to memory of 2444	1440	msedge.exe	102
PID 1440 wrote to memory of 2940	1440	msedge.exe	114
PID 1440 wrote to memory of 2928	1440	msedge.exe	115
PID 1440 wrote to memory of 4396	1440	msedge.exe	116
PID 1440 wrote to memory of 2332	1440	msedge.exe	119
PID 1440 wrote to memory of 2332	1440	msedge.exe	119
PID 1440 wrote to memory of 5792	1440	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\helpers\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffed9ecc188,0x7ffed9ecc194,0x7ffed9ecc1a0
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,6298949635508333186,17880605113505993322,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,11569764543400996642,826567733556465264,262144 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:2
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,11230375771045584752,16488408128687455391,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,4659796157610913729,3630277167112842137,2097152 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,3693373635324941601,8674080223775465649,2097152 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,4148789895478618635,8345368325277701662,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,6723359530161823485,6928138948952077890,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,6084893691745687220,16265996717862582358,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,6084893691745687220,16265996717862582358,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,1519347540720204244,9852280035367392335,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,15423810001205953248,15305045932160270217,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13510482380142699763,9384920850269637704,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,16321752521232391868,7498449645986119065,524288 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6044,i,5565757083729179394,7193111180638276179,262144 --field-trial-handle=2512,i,10922793508392964196,4893714752282899264,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09bea606-1974-49cb-9aec-753311a50284.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\09bea606-1974-49cb-9aec-753311a50284.tmp
Size 26KB
SHA256 693d90818fa2768d4f7c1341df9b64ea950772566bb2e8d755eeda77ddbec415
MD5 42853b5f6bf012655e16fa181af665ad
SHA1 45be007b24ea95fd9d4891ab11f762fbb4a0971f
SHA512 58c3d239dc3c6de5f0a8c1bd03acc78ef95a4cde9ad374947c5534d43da7363c202c1633f34878fd1a7512c6039e886142c399794a773ecd46d4397e738612dc
SSDEEP 384:n/iFiZcIa3sNj8TUNTUlI4waKMRaqenw2f0BCUvPAVG9gtuLgiVVZh6DKhHUgL/O:KFQa3SwgUQyBCUwVAgtogiVfYGHAn
TLSH
T1B4C26C32EC98D9BBEDEA4FC5A74A3A03DEF04163998C9AC8D5D91D1D10D75AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a238638-859a-4b02-be71-36ef92a2ac63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a238638-859a-4b02-be71-36ef92a2ac63.tmp
Size 26KB
SHA256 ba7154b39719e8ecaa41969158c5142698b850aa0eb417a765e40d61e24c6c6c
MD5 7c04dc21b7226c8e5e40dac4bab6533a
SHA1 07a4beef278b93079b8b905308ca9f47e4f7e4d9
SHA512 0961253472955586795de6b5e27aaa0e4ad1b94e4d1472c7812bc77f25e1bb1498a4003ef514f4baea08d074a6aad191badbfc788306b7857a06d57c5bb38331
SSDEEP 384:nciFiZcIa3sNj8TUNTUlI4waKMR9qenw2f0BCUvPAVG9gtuLgiVVZh6DKhHUgL/O:HFQa3SwgUNyBCUwVAgtogiVfYGHAn
TLSH
T15BC26C32EC98D9BBEDEA4FC5A74A3A03DEF04163998C9AC8D5D91D1D10D75AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

395c462c-5548-4665-99ad-efa39e4d0abf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\395c462c-5548-4665-99ad-efa39e4d0abf.tmp
Size 26KB
SHA256 a00fad20b384420aec380eef6b09e4e6ad1fcf64877e0aa0adfcf4b9c33c040d
MD5 2fda3f74e5ffa6e0368863bf8687bcfd
SHA1 4ccd250b10ef5597d6b98733cc18bd5cbf6846b5
SHA512 1d277b178d7692b767d3963c0c7a8ddb085ee7c0a6f3bb79bd1220ed91b86dfbeb0cd7d41b49362e51f9ead3b06c0b5733177fd563dd0746bac4eaf9de2ef8da
SSDEEP 384:nXiFiZcIQQ3sNj8TUNTUlI4waKMRaqenw2f0BCUvPAVG9gtuLJmVVZh6DKhHUgLW:SFQV3SwgUQyBCUwVAgtoJmVfYGHAn
TLSH
T12FC26C32EC98D9BBEDEA4FC5A74A3A03DEF00163998C9AC8D5D81D1D10D75AD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

485a1f73-145f-424d-897b-451b7a530c8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\485a1f73-145f-424d-897b-451b7a530c8a.tmp
Size 25KB
SHA256 e0c5b861e25aee7af5201e05f783e7c397fac26900c2c1d8245f92000cff6da1
MD5 b1cf48194a341b97736bb0a110f3aa4a
SHA1 e5b816679428573c4e44e32f82a085740cef8899
SHA512 a6a6ac5705e05a29f3fef68ce504c1202b987a42599f9b24ef4f315e75b566de340a3ded7022572bd5c854556f60d580dc5b9ae4b9a9a79f940ffb8b6d75be0d
SSDEEP 384:nCiFiZcI63sNK8TUNTUlIm2aKMiV4w2f0BCUvPAVG9g7F37O6R2FeoSqgL/7Iz7Q:JFQ63DwgcOZBCUwVAg7F37TRXyQ
TLSH
T181C24B32EC99DABBEDFA4FDAA74A7A07DEF00163958C89C4D9D81D1D00835AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0c343d7f-d6ec-42b5-9268-2a40c977e8d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c343d7f-d6ec-42b5-9268-2a40c977e8d2.tmp
Size 11KB
SHA256 9a10860d99dd7df9bba0a931f0ca2bc19ce5ac12987e3feea1caa45d1d2c1848
MD5 86dd592065b0f56fea208a36ffeeb524
SHA1 00cd8a42bb1c67e904c5689ae642c8a5d348459c
SHA512 994f87fe9689b9ed9115241e6d936e5be473d1474ef40c80032dd27c9adf6609d40ac1424569dd741fa4475fa73f30cd998877b2a3693e94b564c24fac3eb397
SSDEEP 192:sxZSRQkU/fhs0IQZLD8qzodpHuHW6+WNGYoUBSnJIg50tEJ:sxZSdU/fhs0IOMROHbGWS1ytI
TLSH
T1FD42D7156E28697B8CC7D219AB55BF53E2F9143390911E48AAFCCA1C25EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e0b263c-de98-4fb9-8821-53f16d44aa7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e0b263c-de98-4fb9-8821-53f16d44aa7c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

962c20dc-eea9-42f2-a0f2-0700f206d546.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\962c20dc-eea9-42f2-a0f2-0700f206d546.tmp
Size 11KB
SHA256 8cbc120a5f55335db515eac24a0aef2e61bb310bf5f3a0dc176b312968a54951
MD5 821cec7ddb5e0c193983586e633136c2
SHA1 c0003774c7aa498ce3289ffd3fbbead641d15b3d
SHA512 c995b96d07bbcd3dd826f434fa8be0bb2219f1745f12c5102f6eb5cda83cc5808c458c61f845cca777ec8e846d5e5cb71ad0be483ef550fee8fc4abf84ea8066
SSDEEP 192:sxZSRQkU/fhsPaQZLD8qzodpHuHW6+WNGYoWBSnJIgjtEJ:sxZSdU/fhsiOMROHbG4S1jtI
TLSH
T15A42C7156E28697B8CC7D219BB557F53E3F9143390911E48AAFCCA1C25EBACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30c7a0be-1fcc-41d8-b0af-5d4ae341b374.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\30c7a0be-1fcc-41d8-b0af-5d4ae341b374.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2c579f1b-db59-4ec6-9ff8-0ca1cb0b4559.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2c579f1b-db59-4ec6-9ff8-0ca1cb0b4559.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7c347195-a6b9-4939-8e66-baf9454e06f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7c347195-a6b9-4939-8e66-baf9454e06f0.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b7bfa9aa-1b94-4062-8b6f-6b6b2b07279d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b7bfa9aa-1b94-4062-8b6f-6b6b2b07279d.tmp
Size 1KB
SHA256 60b42ee2ddc1dcbaf33e402f6387b66e7f1f2ee3c4ece5880c996d90a677fbc7
MD5 a54f09e17f6b35fe9f30df5a29052a58
SHA1 f3cfb1de7d5aa0a14f01c60b688e924228bfeb32
SHA512 9f124fbd89041923ed24d768250dadbec66ff422510b6c87d3d1e79c6466b0b4026d6129b35733b3dc82902062815382acbbcea300c253e49758177c0ee63b41
TLSH
T14731B1F3C3E4856EC90156F0AA14BE2BCE1D0954832C3D5AC8E4AF5B93E3471D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 3d38ecd7442c3809ff0dbf595cfd4076880dc33f4afdc817a75d8adbbbb2a2e3
MD5 6aeedb7cce5787c2e5ef3f2182ccfab8
SHA1 b09ea1ae9007d341fc2b200c6fe8d9438e9a8513
SHA512 a0f4941f2cb73a1f6fd5f3a9dc6e81e5d953cb9377ad70e2d1553793f467b3b32b2d3347a84a8a1842c35ec79e649615ed2f76a712c7dc87c930cef7db208ea4
SSDEEP 384:SL29ObJffppdNlrtEYFdFyFJFtF3FrFPFYFrFsFRFFFxFBpFvFIFNFtFMF3FF:SL29ObJffppdNlrtEoHWL31R9oRkj/DF
TLSH
T1AFB2111571BB421039FE295892B6972E064231B33119E66F7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

eb410743-cca2-4aac-8e60-475dc1956844.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb410743-cca2-4aac-8e60-475dc1956844.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eff716a5-fc7e-4e9f-b971-680bc03fc17d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eff716a5-fc7e-4e9f-b971-680bc03fc17d.tmp
Size 649B
SHA256 6209269d5758abbe3e169a547dc06abc1ba646badb20eb1df3e4aea32a2164dc
MD5 18fc9d8cc3b6775824893033b2992942
SHA1 fa6dbffbed82ed1b7f2c3cb22bfb47bdef988196
SHA512 b34d670ba09f4f079f9726ce22e8a76b92b5650b0e10093dd274147084d32aa9b3985fbc10d22df4a099e5900208a67b717f575ffb7263e69ed4125a4947c626
TLSH
T1ADF0F4B5C921EC3B08FD1B7920950B46F790236B2A41984B3B3D851C9FB457B569A82C
MD5 SHA1 SHA512 TLSH

Submit Download

f6eda9fa-060b-4db9-8a8e-8c3e8c4731cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6eda9fa-060b-4db9-8a8e-8c3e8c4731cc.tmp
Size 11KB
SHA256 0a719faac3441a97efe6999a1a70532e407ab83c7a0922c244daeb2ad1b8619a
MD5 12a34c3abf573e4fa09743acfe0844df
SHA1 6cfad4a4d7f86e37581d1fe0835798054f0a32f4
SHA512 d05a927b4c95fd0fabf21faa1b71dd11e0494ee4e4271f6872a3ca4dbd3f22cf3b500114e7bf497ab61b2b070671c9ef584e0e03c4866e0e4503b8ec208d5db6
SSDEEP 192:sxZSRQkU/fhs0RaQZLD8qzodpHuHW6+WNGYoWBSnJIg50tEJ:sxZSdU/fhs0EOMROHbG4S1ytI
TLSH
T15542C6156E28697B8CC7D219BB557F53E3F9143390911E48AAFCCA2C25EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d530eecbe07a25b2959ed622982696a9d52af919fde0499b88e4a3f75e816426
MD5 905022d610dcb926c0b9603d1e50db1c
SHA1 9c4a90d8edbab83ed1724e1b98e1cc9a66f5daba
SHA512 05226ba05313dd91566e2990ec8376a774abcb1f4266ca0da7842789e332699878efa53820da78349dddb381691a3d94dc162b5813d7a4bc9ed26819cc069297
TLSH
T143413B58A6F91108B3B76F4A9FF6A4AE887ABD272E06C85D10110E4F0623F40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download