0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/config/index.html
Size 131B
Sample261005-aramdat1e1
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{AAC3B653-F369-4D70-9BC2-4FDCECB53B01}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2932	msedge.exe
2932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe
3248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3248 wrote to memory of 2012	3248	msedge.exe	88
PID 3248 wrote to memory of 4000	3248	msedge.exe	90
PID 3248 wrote to memory of 3704	3248	msedge.exe	91
PID 3248 wrote to memory of 2460	3248	msedge.exe	92
PID 3248 wrote to memory of 4092	3248	msedge.exe	93
PID 3248 wrote to memory of 4040	3248	msedge.exe	94
PID 3248 wrote to memory of 3412	3248	msedge.exe	95
PID 3248 wrote to memory of 2672	3248	msedge.exe	96
PID 3248 wrote to memory of 3704	3248	msedge.exe	91
PID 3248 wrote to memory of 3704	3248	msedge.exe	91
PID 3248 wrote to memory of 2460	3248	msedge.exe	92
PID 3248 wrote to memory of 4092	3248	msedge.exe	93
PID 3248 wrote to memory of 4092	3248	msedge.exe	93
PID 3248 wrote to memory of 4040	3248	msedge.exe	94
PID 3248 wrote to memory of 4040	3248	msedge.exe	94
PID 3248 wrote to memory of 3412	3248	msedge.exe	95
PID 3248 wrote to memory of 3412	3248	msedge.exe	95
PID 3248 wrote to memory of 2672	3248	msedge.exe	96
PID 3248 wrote to memory of 2672	3248	msedge.exe	96
PID 3248 wrote to memory of 3204	3248	msedge.exe	99
PID 3248 wrote to memory of 2904	3248	msedge.exe	100
PID 3248 wrote to memory of 3204	3248	msedge.exe	99
PID 3248 wrote to memory of 2904	3248	msedge.exe	100
PID 3248 wrote to memory of 5016	3248	msedge.exe	102
PID 3248 wrote to memory of 2640	3248	msedge.exe	111
PID 3248 wrote to memory of 4564	3248	msedge.exe	112
PID 3248 wrote to memory of 4216	3248	msedge.exe	113
PID 3248 wrote to memory of 2640	3248	msedge.exe	122
PID 3248 wrote to memory of 2640	3248	msedge.exe	122
PID 3248 wrote to memory of 2932	3248	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\config\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9b0a1c188,0x7ff9b0a1c194,0x7ff9b0a1c1a0
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,11029641233433993016,4771084915368581049,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,2250097783743953426,6863237044559650223,262144 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:2
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,3451144329143055819,2214360762390195684,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3368,i,1710220845268380288,11855321701023994820,2097152 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:2
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3056,i,15684276049507191548,15751616590402850938,2097152 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3356,i,1050911285436232703,12530763250565942668,2097152 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3956 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3052,i,5930689031907944758,5555078119466029229,2097152 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,16530196614958337996,5249211807811621690,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,14946505034691405945,2902780475264585721,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16773931374809690145,7612099305040917610,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16773931374809690145,7612099305040917610,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,8439669262919330803,16133889739547916987,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3968,i,15379966027418881027,14323569351302561143,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4024,i,2586538424695522655,16139664129279827376,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,13047208941233857172,15793658421784786700,524288 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5080,i,16783113338353660808,1698302414175854775,262144 --field-trial-handle=3792,i,5512295791133605763,754678792764251832,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4c501299-32bf-43ed-af8d-1dab977ac828.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c501299-32bf-43ed-af8d-1dab977ac828.tmp
Size 18KB
SHA256 0eadc6eecf58352ec0256cd722c9c9d5bc66295ae00ec07b971d933ed8a2fbf6
MD5 84bb808b4a32e0d130ee4382006474e2
SHA1 ec0774b8978d99bd3b53cefee41bc062fa86f478
SHA512 9caea2f87a56c8380d079dac967c1d34a34e86c3f648e5de87630a467c2bb0596b4ce5c7b98a93e6bd893d8dbfd6b775e4dcb6fe123494ee32162000b3b561b4
SSDEEP 384:eZcIhsNoaoOzpuFVhzWP9iX5FA+eMw+VZh6DKhHcJoR:chBAiWFaE+w+fYGHcJ2
TLSH
T11F828E32EC786C3A5CE6E656F5473A038EB89167D7C8AF84C4ECAB1C05DB5D41317826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72177213-6689-4536-811f-280b9cf57d30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72177213-6689-4536-811f-280b9cf57d30.tmp
Size 8KB
SHA256 71798157bb2dd1263d3f8ead665a2cb2535111142a6c460a4dee28521ef0080c
MD5 df103c9680c8809b1c70770b53b01c6e
SHA1 c82084454c70e0fa91d928faef67b5dce9f2fa71
SHA512 02a910edf914b1259944f5436987ef062cfae5adb451ab48cc3bba9a0c570b3470f4c4504f2af359aaff392da595f721504be7d39227849c084d076e796612db
SSDEEP 192:LONR6AmwpiQmiUytZnNsiX5FvY+eMBlRBq3U6:LONR6ipe2dNsiX5FA+eMJ+U6
TLSH
T1F9123B32F878AC3F4DD2A951B04735139EA9526BDB886F95D4EC2B2C06DB598430B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ae617a3-5514-448f-a37e-4629800b6fa2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ae617a3-5514-448f-a37e-4629800b6fa2.tmp
Size 8KB
SHA256 e7f5eaa2f12b15f76aa7fa3f9e095a20bb286269648a490777d803aad154270c
MD5 6ccd84653f3eed36d92394fb24d0a2fb
SHA1 007965e29ded0a91f6199a097dd7b635a8392899
SHA512 923ce05fb1c8e0fcda95c44999f5b30a2eb7083262069043242e259f6f11924f59c35dc8bc123a0ac4aa0dd27403d68058726d8c23cad5c9224b74dd8831def1
SSDEEP 192:LONe6AmwprQmiUyln6siX5FvY+9JiFXU6:LONe6ipdG6siX5FA+qVU6
TLSH
T1E0020A35EC686C7F89F3AE05B48B36239FA9117BD6942F84D9E81B2C01D768C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b3280ae-ee1d-44a8-8537-e94e53f087c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b3280ae-ee1d-44a8-8537-e94e53f087c4.tmp
Size 18KB
SHA256 18a7bde8c200f57abe3b57b5bcaa8c354ca0a4f475ba8cec248dbf9f6037e6f9
MD5 7dd6e169a6a457e83d5c4c0dea74883f
SHA1 7e9c8cf5aafcf346851f268b1fea6788a8af5570
SHA512 5fad1718c78c56fd1d3962a5a7bfd094a78c2a94293156c955ceefb706db85967775864e4de6d0a1821ba8c37c1ef52e4eb60919b623d7b217b3b7148ea7e4da
SSDEEP 384:TZcIhsNoboOzpuFVhzWP9iX5FA+eMw+VZh6DKhHcJoR:LhgAiWFaE+w+fYGHcJ2
TLSH
T162829E32EC786C3A5CE6E646F5473A038EB88167D7C8AF84C4ECAB1D05DB594131B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcac0f01-d3f0-47a3-9fbe-c85d68eb5c2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\fcac0f01-d3f0-47a3-9fbe-c85d68eb5c2f.tmp
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb29521835d0887aef733d211fa43d2903333bb5e86e2580dbfe7db3b16bb1ca
MD5 ae441104cfb514988d8468c296b33f4c
SHA1 1de1bdd3ad0b87ba57d165cd0d5b72d99a1a48f2
SHA512 4178d6169908ca49fae4773c8986a0c9d71a515b2fb4d7ce8fb9bcc8b10c415ac00698c7add7cc45f427547535401a518211221bcfe6dfc2bdc0f71f62b0105f
TLSH
T150D0C028AD78EFF4F021113C0330400031CF88138642210A58610D174C302C30380DF0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

16e7fb3e-d653-4acd-b78a-9a0526328159.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16e7fb3e-d653-4acd-b78a-9a0526328159.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

24473b3f-2365-477f-84a9-303053914012.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24473b3f-2365-477f-84a9-303053914012.tmp
Size 9KB
SHA256 22f8d5a32c121b6a683ebb6562d5250dd9770537f056c617402a153d5bb8ae83
MD5 512d4a830bdb0f0b0ec64a56a2760226
SHA1 0889fe0de2e06903d6221aba22fbdee26186942d
SHA512 47b6b1ad9ed039b3aacc9ed054a9ea485c1459e080060a3a74cef0ebddcae9329b3682d7126d3214f39dcaff3c13dd6d9c7348669e21407a59041660b7f195c7
SSDEEP 192:sxZrRLWR/f2sWaIdpdWHW6+WNGY3R7GIg5rJ:sxZrsR/f2sWz4HbGpb
TLSH
T1C322B712BE28A57B8CCBD21DBB157F43E6F9543291911E48AAFCDA1C04E66DD121B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c92611e-a660-4610-9b7c-8a105c1abf51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c92611e-a660-4610-9b7c-8a105c1abf51.tmp
Size 27KB
SHA256 9530ef46b896158e1a8f09c9001894b406cefef8270514bb6aa0742c88b88a7d
MD5 b4ddbc66220ba3dce150efbd1544b750
SHA1 9617d44cead8339a340eab012f5ccc942362c6d2
SHA512 15ae879674855032c03d0a9034b8507dbe2ec5e4e3901ef88eb27ff678acfa7d4eadd065c2d9fa88bc52a69d4ade45c2113a564667566b231e1b6baff8847a76
SSDEEP 768:A830AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ723rolZMyV:A830AbSWvS2l9u1jaLmLZ12kj
TLSH
T108C2DB3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ac74f43-33c1-48cb-bd2a-f598a022fe9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4ac74f43-33c1-48cb-bd2a-f598a022fe9d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57d8d210-46c5-42f1-8eed-3ab605f24207.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57d8d210-46c5-42f1-8eed-3ab605f24207.tmp
Size 10KB
SHA256 2f08d470b69dcff530341b96e015ec5baac5eb3eec512050174f333d7cdcb97e
MD5 6785301f3e8cba298e85cc9a3ee320db
SHA1 0a3977e57b30d867457ccafcfd1284d4f3b89515
SHA512 d07aff7ac04f1febd03e33461b46200335fcd61dbe64dc72258b579b7985d97336124ccb0463812ca1a2c19f26bc2d6cb9ba4b1036347dae199b14423a45b7d6
SSDEEP 192:sxZrRLWR/f2sOzaIdpdWHW6+WNGY3+7GIg5JJ:sxZrsR/f2sAz4HbGgd
TLSH
T19522B612BE28697B8CCBD20DBB157F43E6F9543290911E48AAFCDA1C15E76CD121B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77b8d080-6bc6-4128-8b0b-efa7d1ceccf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77b8d080-6bc6-4128-8b0b-efa7d1ceccf1.tmp
Size 9KB
SHA256 d54d77adfc415eceee683f540a36fd5e2ac7d2d95316d02f7f555706bf400464
MD5 451aa930a2ef14e375f8d1c5d3f1fbcb
SHA1 65e30b21562259ee404a20255c5277dff79146be
SHA512 5e2c72e8821b18a424a9338ea428d110ae392442a14c5b2daf7fe4ad76ae0895260ccf7bbbc86d8560b81f38b7ea39930f2784ab95afd28ce74d8d038efc2602
SSDEEP 192:sxZrRLWR/f2sXaIdpdWHW6+WNGY3R7GIgrJ:sxZrsR/f2sXz4HbGp9
TLSH
T1C422B7126E28A57B8CC7D21DBB257F43E6F9543291911E48AAFCDA1C04E66DD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0929823d8da84e70218c229211ecac977eed09548f555b42ba1da479ff62c234
MD5 6ae531239fbaab5a4e609c813d65f503
SHA1 bfcb92662e807901c4eb7e948f3b2442587cf244
SHA512 789c01d3914e8a48ba6ea361597fd23da5440afa8755d8c2725854a984ef909c38da8bcff6dd8766610971f5daea5baef6f89a304f12b7b61543202cd21d3b63
TLSH
T1526182C1649640BDD79803B07DDD2CE7B53C5AB966A3BD10C59BE43DBB4A7B412072C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0d7a4ab692ea8f48825bfb918f5f38c8f8f5a694ba7f1f27a07db4e0482cb4a4
MD5 8b42909bc64a9dcc1ed0bc81df905261
SHA1 502de88499335aa6aea9f6fc800b59552f926631
SHA512 358b6b1a304f4a20ac7f204ed5e4c36404b4a56a711ac1f47112846489f2c17acfe83063b17f8f72ca61098c8bbe85772776e01f4ad520cbdbb3ad4cdade55f2
TLSH
T1926183C1689240BDD79803B0BDED2CEBB53C5AB966A37D11C49BD43DBB4A7B512072C4
MD5 SHA1 SHA512 TLSH

Submit Download

d8ac65db-cc25-4ccd-8490-d3d8309f0ece.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d8ac65db-cc25-4ccd-8490-d3d8309f0ece.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4d833f3a-326a-40c2-8ae1-f17c30d35e5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d833f3a-326a-40c2-8ae1-f17c30d35e5d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

939a2750-cf2c-45dc-9104-efa4df13ef30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\939a2750-cf2c-45dc-9104-efa4df13ef30.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fa196317-4bbd-4571-b24d-0e1ee88353b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa196317-4bbd-4571-b24d-0e1ee88353b9.tmp
Size 949B
SHA256 f40092e459fe53c994f6d1d3876f6a36ead62e7ee7cd972a93d3c3e80bd741cc
MD5 20233029be4f37f6d2e5ee39d084e2c5
SHA1 619922ee6577221676f066cc9ffdf106227c9d5d
SHA512 6acc5472ce6cca29f79c7425f958a9b4f77827492e1f0e437c705651fd77cb08a98c90d2dd2dd7193fb353c88e997710926df07ad30acfd903ed911a4261e6f3
TLSH
T16E117DF3C3D585AEC91116F06A28EE2BCE2D0505421C7C19C9D4EF67D7E3475D10699B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6f4a74dc01912092da636383b4eb6c1da64e30680d2a2fc6ae7cb366662ecfd8
MD5 f62e67bdd7f2afd73f0e6ea824ca67a6
SHA1 098545d5e4460ff247479da4ed72ce4ad015da86
SHA512 7de7d92ab519d8f0d64cdc6b6573abfefd5468f419d57f3eb7abe4ee42e07d75746d9c00cff81df7472209d5c0b86d32176ffa318c18f29392e3c57200f94d28
SSDEEP 48:K06lI064I5bkjUISs5K9Q1K5xipYb8IKyLWRsQO00tbYvAISotK9M1OtxG9Yn4qv:KwhyKSQSmdiK2ot32KU0aA
TLSH
T121914621307B9200797D3A4C5AA9D62B124235B33019E66FBFBD40B9CE2EE155CFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf213b8c-ae91-4c0b-a5c6-5282b323c55d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf213b8c-ae91-4c0b-a5c6-5282b323c55d.tmp
Size 10KB
SHA256 d60e29916c3d85729d5a0102dc2358029f22356a42d05b72aa8df33bdc9b1ae9
MD5 acac8439de6aaf5d0a9fe7f7881a6f73
SHA1 e0b2f48bcc97380c4df6daad6bd434b11dd0bbe3
SHA512 bb068806cdb33d1317a5211f8e125c375d12466cea8e75aa0bdb2ffad46767c7333b1f4877477c3462c26c521aee29093915f476930d896a32773761ed399c66
SSDEEP 192:sxZrRLWR/f2sOzaIdpHWHW6+WNGY3G7GIg5JJ:sxZrsR/f2sAz2HbGsd
TLSH
T15B22C612BE28697B8CC7D21DBB157F43E6F9543290901E48AAFCDA1C15E76CD121B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b747a357-3854-4b01-95a0-8cf3df1bb879.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b747a357-3854-4b01-95a0-8cf3df1bb879.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee7f8615-1ae2-44dc-8127-899eb2674c33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee7f8615-1ae2-44dc-8127-899eb2674c33.tmp
Size 21KB
SHA256 f620f8f50f6185c39772f3a82e873430455a2cb1fba1aed4a824dfd2f19551cc
MD5 abd74e5e993171b2d613c36a79599266
SHA1 bedb39400dacce18ad0583d7c2fe8ef44a7d75a6
SHA512 7a81e45913a9a2b1d5d056ff6b08d879e3623990eae697efe9a178e14f0376f0252bef49357a68f2eaf2d03e3977611654da50a66c05f5d688a446dcb9ce99f3
SSDEEP 384:biFiZcIJzsNY8TUNTUlIlboOzpuFVhzWP9iX5FA+eMb+VZh6DKhHcJoR:2FQpNwgiAiWFaE+b+fYGHcJ2
TLSH
T1C0A27D339C68987FADF69B85F54A36038EB441A7C685EF94D6DCAB1C11DB1D8130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3999dce2-8bf7-41b3-aa8d-2ba970899c95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3999dce2-8bf7-41b3-aa8d-2ba970899c95.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5cad056f6b9e170e5ac18316cf8c46376078799cf363148a3d7ed795755ebf8d
MD5 6127b2f15e26ae1f4937458b18b5695c
SHA1 80ff9421594445fcfb4e53fadea7964f7a34c316
SHA512 d0d7de7550532202a9866f609d8c260106886982f90b0d3d9805bf5d5060a76ee9bb26ccb183e65aafdcb8032c70eb5f8ace427b18eb32f2f6ee40bd74603703
TLSH
T1BB412468B2E9110CB3B77E4A9BF7A96D487BB9772F06C46D00110D4F0A23A41C971737
MD5 SHA1 SHA512 TLSH

Submit Download