0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/language/index.html
Size 131B
Sample261005-aramdat1e1
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4516	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{101B8EB7-3BE7-44E2-A235-68D379E00130}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3500	msedge.exe
3500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2708 wrote to memory of 3128	2708	msedge.exe	88
PID 2708 wrote to memory of 4516	2708	msedge.exe	89
PID 2708 wrote to memory of 3520	2708	msedge.exe	90
PID 2708 wrote to memory of 3520	2708	msedge.exe	90
PID 2708 wrote to memory of 3520	2708	msedge.exe	90
PID 2708 wrote to memory of 3120	2708	msedge.exe	91
PID 2708 wrote to memory of 3120	2708	msedge.exe	91
PID 2708 wrote to memory of 3792	2708	msedge.exe	92
PID 2708 wrote to memory of 3792	2708	msedge.exe	92
PID 2708 wrote to memory of 3792	2708	msedge.exe	92
PID 2708 wrote to memory of 3756	2708	msedge.exe	93
PID 2708 wrote to memory of 3756	2708	msedge.exe	93
PID 2708 wrote to memory of 3756	2708	msedge.exe	93
PID 2708 wrote to memory of 3420	2708	msedge.exe	95
PID 2708 wrote to memory of 2072	2708	msedge.exe	96
PID 2708 wrote to memory of 3420	2708	msedge.exe	95
PID 2708 wrote to memory of 3420	2708	msedge.exe	95
PID 2708 wrote to memory of 2072	2708	msedge.exe	96
PID 2708 wrote to memory of 2072	2708	msedge.exe	96
PID 2708 wrote to memory of 4580	2708	msedge.exe	102
PID 2708 wrote to memory of 3396	2708	msedge.exe	103
PID 2708 wrote to memory of 4580	2708	msedge.exe	102
PID 2708 wrote to memory of 3396	2708	msedge.exe	103
PID 2708 wrote to memory of 2064	2708	msedge.exe	107
PID 2708 wrote to memory of 852	2708	msedge.exe	112
PID 2708 wrote to memory of 3052	2708	msedge.exe	113
PID 2708 wrote to memory of 2796	2708	msedge.exe	114
PID 2708 wrote to memory of 1824	2708	msedge.exe	122
PID 2708 wrote to memory of 1824	2708	msedge.exe	122
PID 2708 wrote to memory of 1524	2708	msedge.exe	125
PID 2708 wrote to memory of 1524	2708	msedge.exe	125
PID 2708 wrote to memory of 3500	2708	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\language\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff911c8c188,0x7ff911c8c194,0x7ff911c8c1a0
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,6150839460244188886,8980567230728288179,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17974219403922289049,9990153870509024930,262144 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,10357575390012423087,11254783835660377717,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,12479946675642258140,3826839882833322465,2097152 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,13140387190378086721,6325198070928332625,2097152 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,1037531023719946013,3736890212518306227,2097152 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,15600548775131688473,13553819243455170463,2097152 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6314638366797320312,17390856627196327233,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,16766827841530683962,463702484758891212,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,502422484650964045,17450156741455410253,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,502422484650964045,17450156741455410253,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,10988350668734607678,12279830613853011286,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,16904084944500611502,9006860203229139960,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14871014924495274649,3485714143566193351,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,7217858940099360600,14293798915741838010,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,9791826314062919500,15465900764056470502,524288 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,11287077413963483113,17143526410781684656,262144 --field-trial-handle=2496,i,8633438228161149228,1041304366696351591,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3f0cf2a0-0a2b-4375-82c3-5456d694d5f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3f0cf2a0-0a2b-4375-82c3-5456d694d5f8.tmp
Size 21KB
SHA256 1ed166ab1c9df9dee6381113ed14b8ca0d6f3a5db6936c63d3d43df57d8447e5
MD5 b1b1d42d5ee23eccb1fd2783b1b50427
SHA1 79eac70222933cf432f70c110e2a0b597b56fd11
SHA512 ee9be27fbc4122d73902c783bb2849342e0523135ba11cfe359ea0322c8137d8329260c480d2395089b80149ed2417dfe1c0585cde463dd89472c62edd163f81
SSDEEP 384:aiFiZcITzsNy8TUNTUlIl7fN1ylc3IzIGmDP8ouX61idbVZh6DKhHripo3:RFQ3bwgZNxash+61idbfYGHEs
TLSH
T18AA26C339CA8D87FADF7AA44F9463A039EB44077C6C5DB94E2D89B1D11EB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70fdc93a-f52f-4a60-aa75-e0db58335fd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70fdc93a-f52f-4a60-aa75-e0db58335fd7.tmp
Size 8KB
SHA256 1e9da047d6f41ca02cbd414e8756aad9a807d45f19c37dba439d49167c69b8f3
MD5 8457f55c58a4842a4d64e5992da514e8
SHA1 dea71e04ec6623a28040b0765247b44526d5425d
SHA512 9c8815b4cda75c2a1000d17f5897a193cf03e1bd7910cee5903fdeac4afd0b3e8a92e1aa87b90017a86c995b92c72751d17ca01a24b2f9d7219f94ace4b69b86
SSDEEP 192:aONb6IEgQmiUyiF2T4uIGmDnjzorbhRUpuX8X27HdOqXU6:aONb6DgJ64uIGmDP8ouXXHdbU6
TLSH
T1F112F932E8B8BC6BAE93A844B4873523AEA54137DBC56F54D6D81F1C01EF25C530A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

0da42ebd-f981-4096-b241-364869eb0514.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0da42ebd-f981-4096-b241-364869eb0514.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5db5af64-c2f4-4aa6-8863-de626e15f3f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5db5af64-c2f4-4aa6-8863-de626e15f3f1.tmp
Size 10KB
SHA256 bfff12223a669a3031019bc42f2aa4f06b5b2108d25466bb01dfbab9ab5e6a82
MD5 0650a7a6a32adcbb84c37098e9c0284d
SHA1 32bbfa0995ba3987f3d27f108f6ea5b0dfd8342f
SHA512 6e6276e68f118cdf7b1fba336dae7b3ede9fdfb62c9129a8aba9867102ddb47e494427e1a6a0bf80641185970c352e4a8c03f5cbe13e9dc593cad860ba03a725
SSDEEP 192:sxZsRnWn/fSXsGQFrIdpH5HW6+WNGYapb7DIg5/J:sxZson/f0s7KZHbG5P
TLSH
T1B022C852BE28A97B8CC7E21DBA25BF53E6F9543251901E48A6FCC61C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b3c15ed-e4e4-47e1-b32e-b34003c389c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b3c15ed-e4e4-47e1-b32e-b34003c389c4.tmp
Size 27KB
SHA256 b486a48f4aa4b6bca85b12d50c7f9a5ba36bece3da9efdd6d158e17a592b81cd
MD5 c8bb386c48a469af1159fbf2f24d9323
SHA1 db57c3ba8a610c3606f8c23b992bf8a8bafdc00f
SHA512 eb1fea59faaf6f248b2f74d9ca207a68d4e21781dc8c82b599d921e3aaa6374d04b6b1b33c84d6725e454322d1266c9a8ba98d3d730d6a12189582bec403dc9b
SSDEEP 768:7pWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Mro4gfeQzmR+:7pWPcLKWvKeEeu1jaClLiF7X4gWQzmR+
TLSH
T1A1C2FB3B640CCB7E5FC01E9DDC5A6FA76E9802C796648D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 29add195c2b281bcbdd90e498ab5627cfe22f0b79058ad498fa348d4b4c3f4df
MD5 3d392ba452ca7c4c5b6f6ddcb6b22e79
SHA1 9d625043166551f3258c9952a2aac0a8daccd57c
SHA512 62e40816fe5f9d61940a451ffdbad85db6a15c0aed78d839d452a7bd4275cb23b2de3d8c68f129398168e9d0fa43a97607706f375743b4ab5af5e84dd060d98b
TLSH
T19DE078F415C5C21D510478CB057453CE8380365FD6C4AA5D1F40C5C87947BD476CD570
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 bf4bd4413bef74fe2fb9300af53190419d0ba1917d9c198067edfb38786a8c59
MD5 bd0d76cb1a9036983fd2bc70af164c45
SHA1 10bc47e18d93629980ef468b423b8bbde6ab3d68
SHA512 9527a457c83385f0379a98fc1d3949fbfacfa12e82baf33f9c8d017c3681fa4edf80f387a129c427e5842fe718b4d763d8d74224d0fe9f15ed21da220dacc4e1
TLSH
T1F3512CA13592D0D7F7F8417482DD614B3FF8D5A1458BCEE32FA4C8BA9846771C198258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ca3de45df988b25431509b2678e94ef649583c46858e25e344977ce269a4626b
MD5 87afbe53eb087ae5eec8ab3cf827b445
SHA1 4ae1995e6d1ebd04595f77514de350f76949894c
SHA512 6ee4a604af6cd8853bd7661f023d1d817676a0dbb3acb02c6ff57919996e7136ecd1aa9ba9f3b1cd2acb10e93469ac6721031925193659cf74bddb40408fde8f
TLSH
T176513CA13692C0D7F7F8407082DD214B3FF8D5A1418BCEE32FA8C8BA9846771C198258
MD5 SHA1 SHA512 TLSH

Submit Download

784502b8-9af0-4dfe-a560-85e44c7495b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\784502b8-9af0-4dfe-a560-85e44c7495b7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6f9be50a-08d1-4085-a9dd-e06d02bc92bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f9be50a-08d1-4085-a9dd-e06d02bc92bc.tmp
Size 949B
SHA256 e5bfd1c1ee9880ae4b7f545b3713a36168c4d52d7ff7b3a82c949543c4cef31e
MD5 e6e12ac0063237fa9e53e89a7260633f
SHA1 241144f69e7989a6e73f33a4a2d5e134e01b399a
SHA512 b057b57c280e0081d90bd81872c08f792048c2908ff5ce0506e3c79ab4f435109f2751a387883760246b54b6829f72ea32bf791548253442049b054829b168d3
TLSH
T10B115BB3C3D595AE8A1116F06A24EE2BCE1D050642187D1999D4EF2B93F3075D10199B
MD5 SHA1 SHA512 TLSH

Submit Download

77d4d21b-2f0d-4457-823f-32cc4ae51a22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\77d4d21b-2f0d-4457-823f-32cc4ae51a22.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a90a2c95-b90d-40d5-a94b-b4e5b3fe1fde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a90a2c95-b90d-40d5-a94b-b4e5b3fe1fde.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c0c382fa-0554-4e1e-a97d-74ff64adec5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0c382fa-0554-4e1e-a97d-74ff64adec5b.tmp
Size 10KB
SHA256 75aa7393d53499b7cb2f7a3361321f2602c6cd91dc4af6c38f41d55243da76af
MD5 1d28d92cce9a811563d899112d78f3d6
SHA1 85a2851a22c2f526ab645daae4c2f865413c2dca
SHA512 4e408fa4f0419acc411bb8c4258a69c9d316aff22981e402b21da0a05960ebb6e924bfdfe9acc61bcb87b1d85992a4e4bbcc2776655d8606d713ad65fbacdae7
SSDEEP 192:sxZsRnWn/fSXsGQFrIdpd5HW6+WNGYapM7DIg5/J:sxZson/f0s7KDHbGcP
TLSH
T11822C852BE28A97B8CC7E20DBB25BF53E6F9543251941E48A6FCC61C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb23ef15-99e2-44e8-92f1-156682e99b4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb23ef15-99e2-44e8-92f1-156682e99b4c.tmp
Size 9KB
SHA256 fd81767165cbf5f29c0eb88e75bc8ed28d15a8d790631b01590b849286692892
MD5 071b1b4fd683485364ed49af37e0f4a1
SHA1 0eac08ed444fae326d53e6a91e1664c717e92ba2
SHA512 437da6e29aff5b4e8277f17fac22b01ce1ddc74334c01c1270271a39d4dc791b6dc55d349b355df2c38e56208aed33d8ca599ef22c6ac19e882643a0de81c854
SSDEEP 192:sxZsRnWn/fSXsKQFrIdpd5HW6+WNGYapY7DIgrJ:sxZson/f0sPKDHbG89
TLSH
T1DB12C822AE28A57B8CC7E21DBA25BF53E6F9543251D41E48E6FCD61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb7e4859-cdea-4f1d-b866-fb1997210d26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb7e4859-cdea-4f1d-b866-fb1997210d26.tmp
Size 9KB
SHA256 fb2777a83e35f16e81bb09e667e61b66c7798f33304e5c1b3366c7b68da41d6b
MD5 09d2e1a413f78d4fdc39e879c0128714
SHA1 52fb7cfa1b3f56c91d3ad0dee19e6512cd55ed19
SHA512 088eb2355110c11f3a05661a227897da3584f52860befd0a8dd3c88293fab1f3b7de48018daf6a3401fcb6fdf08a3e41671c253d06d3ecc9d6942d7c2e86f331
SSDEEP 192:sxZsRnWn/fSXsVQFrIdpd5HW6+WNGYapY7DIg5VJ:sxZson/f0s+KDHbG85
TLSH
T1D722C712AE28A57B8CC7E21DBB25BF53E6F9543251D01E48A6FCD61C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99c8a783-b888-444a-8386-be51e6751678.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\99c8a783-b888-444a-8386-be51e6751678.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de990fcd-5a59-4de8-a777-8ce93e1aa37e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de990fcd-5a59-4de8-a777-8ce93e1aa37e.tmp
Size 8KB
SHA256 ecd809812e727b2b5a2bcd7fa38ca6f68328779aff1a3a9d2b257bcaafee222b
MD5 d76d4b199d7bb9993f9b0c841b2719ca
SHA1 820d2ff98b77a8938f161edf8495c187d30ab26a
SHA512 f94cdf131b41062113ae5c5b6317916ecbb270111e98fba5d16a9e148b3bb0b598886dfd19dab554d780f70b2a374f63d489de4908ad9db536a46e0573c6c373
SSDEEP 192:aONA6IE7QmiUyf2TPuIGmDnjzorbhRUmC7sd9PU6:aONA6DtlPuIGmDP8ysdRU6
TLSH
T19402E935EC78BCAB9EF3AD09F4473A23AEA4113BD6D55F54DAD41A1C00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9b3c74b-f047-4771-8080-a502edb7dcf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9b3c74b-f047-4771-8080-a502edb7dcf7.tmp
Size 18KB
SHA256 8ef410b08c14c92e93bb1d12b70181307ea63935f61139326476d7e872e06698
MD5 5a58987459fa8c1a0fb966ebfb51bf86
SHA1 1a56138a5a1f83de040d8fa87a421d726f947df8
SHA512 6e3c8f17ecb6009aa82f94c9d3a3008c39deed21368a0ab6b41b47bbda7e5218a4d1034d0f2559a458bd52126feb8969e3d045269448620f276a5b95d4a59924
SSDEEP 384:WZcIhsNq7fN1ylc3IzIGmDP8ouXVidbVZh6DKhHripo3:EhdNxash+VidbfYGHEs
TLSH
T12D828D32EC78AC7B5DE7E545F4423A035EB88037D7C99F84D5D8AB1D01EB268131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eadfb16d-ca12-475d-b3f3-47c08c6eb147.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eadfb16d-ca12-475d-b3f3-47c08c6eb147.tmp
Size 18KB
SHA256 e8c07afaff51766f39f459c9e7e602f7c3048c40f7f77bf457dcf0e519ab54c6
MD5 15fbfa411b0b492dd897f2801b9d3197
SHA1 c2b5e6d10c239207249402e41aee1db528b9e867
SHA512 d7a46e368a9d0e1e734805b2f17ccc2d2c259ed33d91523b059670ff3fb18598e26ab3e576e00c34a045479a3c0cb1c65f8f742d6091dd346769ce79b21cefc8
SSDEEP 384:WZcIhsNqmfN1ylc3IzIGmDP8ouXVidbVZh6DKhHripo3:Eh+Nxash+VidbfYGHEs
TLSH
T159828D32EC78AC7B5DE7A545F4463A035EB88037D7C89F84D5D8AB1D01EB268031B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e436d3ae-4b32-4b5a-a779-de4bdb2d7d89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e436d3ae-4b32-4b5a-a779-de4bdb2d7d89.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e86b489b73a2b1760e94bb10927a275aea2af699ea7ce1f542c03954d1ace41e
MD5 7269171cb2af446312e754008898b781
SHA1 6310e753fdb1ba5b16e6accc72c8b2784bc9f58d
SHA512 58cbaffddf976417005db3e91e860b670a15d9fe8ae82b08a9cc93e620e3fb6836b68c80578a14eca02553b5b766d5d856ce360428c479144b524ddbff46e240
TLSH
T1E3410958B6ED1149B3B76F569BF6A8AE487FBC672F06919E10110D4F0626E00CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download