0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/cache/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{B00B2745-8ECA-46BD-8560-EC11F1D2DD6F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 948 wrote to memory of 4992	948	msedge.exe	89
PID 948 wrote to memory of 3540	948	msedge.exe	90
PID 948 wrote to memory of 5004	948	msedge.exe	91
PID 948 wrote to memory of 5004	948	msedge.exe	91
PID 948 wrote to memory of 5004	948	msedge.exe	91
PID 948 wrote to memory of 2560	948	msedge.exe	92
PID 948 wrote to memory of 2560	948	msedge.exe	92
PID 948 wrote to memory of 3792	948	msedge.exe	94
PID 948 wrote to memory of 3792	948	msedge.exe	94
PID 948 wrote to memory of 3792	948	msedge.exe	94
PID 948 wrote to memory of 4628	948	msedge.exe	93
PID 948 wrote to memory of 4628	948	msedge.exe	93
PID 948 wrote to memory of 4628	948	msedge.exe	93
PID 948 wrote to memory of 4800	948	msedge.exe	96
PID 948 wrote to memory of 4800	948	msedge.exe	96
PID 948 wrote to memory of 4800	948	msedge.exe	96
PID 948 wrote to memory of 1184	948	msedge.exe	97
PID 948 wrote to memory of 1184	948	msedge.exe	97
PID 948 wrote to memory of 1184	948	msedge.exe	97
PID 948 wrote to memory of 3172	948	msedge.exe	102
PID 948 wrote to memory of 2284	948	msedge.exe	103
PID 948 wrote to memory of 3172	948	msedge.exe	102
PID 948 wrote to memory of 2284	948	msedge.exe	103
PID 948 wrote to memory of 2044	948	msedge.exe	105
PID 948 wrote to memory of 896	948	msedge.exe	112
PID 948 wrote to memory of 2872	948	msedge.exe	113
PID 948 wrote to memory of 3160	948	msedge.exe	114
PID 948 wrote to memory of 5020	948	msedge.exe	123
PID 948 wrote to memory of 5020	948	msedge.exe	123
PID 948 wrote to memory of 3536	948	msedge.exe	124
PID 948 wrote to memory of 3536	948	msedge.exe	124
PID 948 wrote to memory of 2556	948	msedge.exe	126
PID 948 wrote to memory of 2556	948	msedge.exe	126
PID 948 wrote to memory of 4936	948	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\cache\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff25aac188,0x7fff25aac194,0x7fff25aac1a0
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,1433068070314911654,5461138792614355048,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,16986902939973087910,8569965374149948243,262144 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,6649331941580786057,8260697106164093105,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,17543896532301366919,13755628489103317446,2097152 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,10658282582222922590,15083610536368176262,2097152 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,10015871971748827094,5835535247881017680,2097152 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,609100535252378437,4283530802234112988,2097152 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,13871638847110282086,7010044877609061118,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,1739516263983288428,8381921541973723659,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,3155908998084074832,16079474484988205575,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,3155908998084074832,16079474484988205575,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,11597707158340344680,340523463126420799,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,12443473995568297372,10082283552392058456,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,1069996112431393454,10651844221774553702,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,13266258555168963658,16022072561845995651,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,14688526078372318469,6490012839405006495,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,6989580660793652763,11362729814647471195,524288 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,17983532932955733944,16621964802939588470,262144 --field-trial-handle=2296,i,12797040258120208307,18429590694609296699,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

00362708-d879-4b24-af48-40e0cea12c3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00362708-d879-4b24-af48-40e0cea12c3a.tmp
Size 8KB
SHA256 939e8b223a407c7cb19fd900e4c3a60df153a10c2d67a55898fe4f54e44656ee
MD5 db367895db60a8e9c7cc71bae55ae94e
SHA1 14440fd18b51c25ffd0c491767e6dfe3f1467c37
SHA512 b8cfcd60e3d3d76d5b12fd346bf59e89c8455c4156fff4e7558277a7669b4b289924eaa5bd71cf36ec225c5d3702cbba7abecb31e946f410e70b5cbb1f2d3bb3
SSDEEP 192:BON36JUuQmiUyS8nZo//p+GqLFNxCqNU6:BON36+q5oZo//p+GqBNU6
TLSH
T166120835B868AC7B5DA3A581F04336239E644077DB899F94DACC2F2C06DF1AC570BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05f963d3-d80b-4373-9271-98e76e003999.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05f963d3-d80b-4373-9271-98e76e003999.tmp
Size 21KB
SHA256 981910ac012eff8fb4539ad8dc6f4d1c800eaac46be09d5be17ee50391084fc0
MD5 22b50e03f11c60a1bbea900804cdd339
SHA1 cad7cc6d8690efc0e1d590f1f09cc24c8269045b
SHA512 71654349d9de241b453d18898e0ec999e29e9b4bb24e1fbfba34927818068143e0bb19f21548450202a4708296f633dca205dd37ab024ad9008ada2958dad47b
SSDEEP 384:1iFiZcIJzsN28TUNTUlIlsDgmJbJaQD7h//p+GqCNVZh6DKhHeoo:8FQpjwgWgmvt/hfNfYGHeX
TLSH
T110A27C33AC68DC7BADF79A81F54636138EB440A7CAC9DE94E6CCAB1D01DB1A81307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

191e37f4-f32e-402e-b760-c46b4352d9d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\191e37f4-f32e-402e-b760-c46b4352d9d6.tmp
Size 8KB
SHA256 1371af109a4a2ed3d85ee73ea703736200c0bfa220a65a3a9746e43c3dbd9402
MD5 21cba350bd430062d849ea0243b5be3f
SHA1 1fb3288fc7536f2a6ab3f9821bd07e74a6de2180
SHA512 a4291b4da47f05b97de8b8eeb2d9170d31ce6d4739c77fe682940a2c09abbfb618fd6b139e78ef61a98aa50c906013012b85a8c8da1b6051b3ef4cb33e887b76
SSDEEP 96:KqONkTQsjpfbUmjH5ih/cIPURHl8h4otop5qaDRBKP4v+Y1xf//ojd6x/eYzRtIJ:BONb6JUm0QmiUyXnso//p+8BCeOU6
TLSH
T1F802D739AC68BCBB8DE3AE45B44777239FA4107B9A955F84DAD81E1C01D715C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

431e508a-78ec-4fb1-b11b-7234257604b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\431e508a-78ec-4fb1-b11b-7234257604b2.tmp
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f7e901ff3df2d769334a9a6d3d1825c832dead150655a1e08b1ef005d0292c1c
MD5 54b5c89d12a534155a20824f377fc719
SHA1 633c3f7842f6f8f5fca6889975166d8beceab229
SHA512 232113d19f85e9404efda63cedba3028a48c801cab50f01744982526b2603d87acb2c9b209ffaa2266ed46e4496bd525b77408f425a951d529554a9790832746
TLSH
T118D0C06096B83ED9E131203F03700311348C01D351136100D85000490BE808381C1CE0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

25248043-7321-4b7f-95bc-6479b916d5d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\25248043-7321-4b7f-95bc-6479b916d5d8.tmp
Size 27KB
SHA256 73abf1783812cda6c3acc9908ec0c0b350c6cbbb53d63e7056c32d224787a61f
MD5 66b28aee05a6df2a3aa8b0e303109888
SHA1 1188aa853e084a4b55ec2f2fbbe61db5ba436df8
SHA512 9dd3e61a92d6d3ab4fdfe46e78596496a29c5d67c08b6f91f649be906e14e7d423eb01cc0a7eef78145ea0217b86e20da6a66f4772ed75ea6a717f025589c755
SSDEEP 768:h1Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/iroqb:h1Klm7QWvUYe0u1ja8/L/E/5qb
TLSH
T18FC20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26c1702d-6db6-4306-91a7-997af02da6f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26c1702d-6db6-4306-91a7-997af02da6f3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68d7edd8-9031-4825-9c36-ad4525cb33df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68d7edd8-9031-4825-9c36-ad4525cb33df.tmp
Size 10KB
SHA256 98a618b2750774454e695385ab310eaf9e9e3db949fbd46cb3c536598e36a2c0
MD5 0ef01308a602e0bc0ee8c58d3c93c48f
SHA1 10e325e1a16271b71d169db83f43cc01674bf51d
SHA512 6a77c9e52fc3b2aa3f342db780db5a5fb71749ef04561be2d20162c367be968ceb4bd173fb688a360627bf841362e2aa577a2ece55dc0918031028354e72484d
SSDEEP 192:sxZu2R7W2/fZsduIdpdzHW6+WNGY36anMIg5UJ:sxZu2o2/fZsd/tHbGXNq
TLSH
T11322C751AE28697B8CC7E209BB25BF53E6F9543250951E48A6FCC61C15E6BCD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bc49205-fa3b-4a9c-b5f8-7bf2f29d27a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bc49205-fa3b-4a9c-b5f8-7bf2f29d27a6.tmp
Size 9KB
SHA256 1025ceefa09c587b6b29f8780c59780fb27333785039eaab0337be4927d77cb3
MD5 619b79336a55b99f2c35f2ebd2f867b4
SHA1 a023a1a779ba822061859d7db489c581b6511530
SHA512 59657aaa194cc722a074d341b9b5a8afe045c2d8225f516ae6699bd225b2850f18bced396427148034ee8b00c2b19f689858c0c6e1c1753c37ce815a832644f0
SSDEEP 192:sxZu2R7W2/fZsOuIdpdzHW6+WNGY36anMIgrJ:sxZu2o2/fZsO/tHbGXN9
TLSH
T11122B751AE28697B4CC7D209BB25BF53E6F95432A0D51E58E6FCC51C04E6ADD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7dd6738f-b86b-4be3-844e-7212e120ded8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7dd6738f-b86b-4be3-844e-7212e120ded8.tmp
Size 10KB
SHA256 41f9478781bb484e939819a8d7eb538587e8c71d5ea89609fab3b1c11e7cae79
MD5 06e0328ddf8b7482773ee74be99fcb14
SHA1 60727929440f8286578fef164f4a35bdc790057f
SHA512 14481ccf318c531c0f8cbdbfd3dc5bd4121236538e33d33bb0ac1c35b002e5b011cc6636e61b2c2f95308d65e9682a88381a372d5eb7a256b5114cb4184c3d0d
SSDEEP 192:sxZu2R7W2/fZsduIdpHzHW6+WNGY36mnMIg5UJ:sxZu2o2/fZsd/THbGX5q
TLSH
T14422C852AE28697B8CC7D20DBB25BF53E6F9543250951E48A6FCC61C15E6BCD120B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e61494e-3a14-4977-928c-bd2f0dcb80b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e61494e-3a14-4977-928c-bd2f0dcb80b1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 0bc23f1bdac7e0a1eda22dd83b34d88c053e6a9c95f41338d68c095b7ba9fa43
MD5 a6aa717c7766184c54833dff7802ed7f
SHA1 547ed2c8567bc8c04a9e3a5297af734cce3532df
SHA512 b26b9e2a7953f9d067546419ccfcc139313de4e37834d5811f5e64556727588b1a5080e10cfe6057977fd00db688ccebed785faca2f86442319c54bb7313e68a
TLSH
T172E020F415CEC61E720C64C70258630FC38C375BD2C16A4D1F04C9DD7449849AE89F70
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e9953c9f2c0f83a6315f66892f13e3c631e88ba19e536d16891844a1be6cd978
MD5 9bc59c9308593ba75fd1aa1b2eacbd1e
SHA1 f077270bec63743a94943d2a66ffab1fc71444ba
SHA512 079f81ae599a5275c1c379f6b9d31f7a6ad74381265df6c4b4fff862c7daf392c68678602e18e65be848dfc7395a0d18bf1f1f663a229322af9edf39d5667917
TLSH
T149E020F805C7C21F710464DB12B4531E87807E1B92C0BA4D1F04C54CB90584C6A8BDF0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f049ef596177e68daa7245e9edcc2aca8f6a2033006bbf77402bfb9f1ea2ae99
MD5 dc5d3373538ca4a0552f6bc6667e4c7f
SHA1 4356435dc0d8c85a74869d7668381d2c0b9fed8e
SHA512 8c300094db244e9fe0976df52aea0d33565fa0f521a7773f8e13d1466a1c54272d7ccb4a19ebb7c073698eb66d26ffabb48881331ac4e52054a3bedc69fa43ba
TLSH
T1FF51D6F0315341D4FBA44273A3E29597353099A050A70F6230FAF9BA5DC7700D8EB86B
MD5 SHA1 SHA512 TLSH

Submit Download

53c9ed22-c966-43be-ac9d-4a85de63583e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\53c9ed22-c966-43be-ac9d-4a85de63583e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1d420343-3c2e-4451-adb0-c3f59b61a86e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d420343-3c2e-4451-adb0-c3f59b61a86e.tmp
Size 949B
SHA256 6a36fbf6d707bfd7f53664f64cd6733f580b2a3b1ddb7a581a6e0627ab699f1e
MD5 bfd4686cd508f5f8f98e93139188e838
SHA1 67d88760c8172d7644063529d3b7f590f2dbba72
SHA512 45e66186e039de660b4db644cbd52bbfd577c9f77fc5633e46ce4243379f11cae69a56a5a58500122a90f93ba7d53a525f7da6ac8a72ea7da5d9d7726ef20520
TLSH
T172117DF3C3D596AE890156F06A24AE2BCE2D0506431C7C1A89D4EF27D3E3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

7b07e53e-97f3-4c8f-a827-40cd63094048.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b07e53e-97f3-4c8f-a827-40cd63094048.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

da9a1250-37ea-4669-b5b1-d9ad66142d62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da9a1250-37ea-4669-b5b1-d9ad66142d62.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 671faf6310f5851b28b759e7b06dd54ba0de808764cdb0e4645d513012309ace
MD5 23fe1dd418f667a4926e9ff6f8a0075b
SHA1 de6be9e907999780e99588c3ed86ceed564a2168
SHA512 613345b56d95ce1dff8b97686cacba33fbb82838423e82c1c6017760897dbade8c263872864100b58a0f27a9d251e3156feb7727b698627c03c1dcaddb47c249
SSDEEP 48:K08i8t8w8c8i8A8g8xb888L8sIS808xK98418C8xx868hY8j808g8SyLgvmqwaOM:KMkQKxKqG3OKMM7FCK2cyN
TLSH
T1B391635030B7160538BE754863699A3B425131F37018FA6B7BBD40E2DE6EE049EFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfa35975-6402-4f56-9326-3636cdb71394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dfa35975-6402-4f56-9326-3636cdb71394.tmp
Size 9KB
SHA256 90e971da5b2d67d1a83a8a309e0f8c14a5f21ea119fcfac9aafc9c6d1e09cd8a
MD5 b833c3d9dab842031624746f44dbc335
SHA1 3a0795e6b97bd7db443d8c57cecb8a378ea26ed8
SHA512 5d3d5c46ead4260296f2f1d6f0ffd76822f1181f796bf4ec6d88bc7a1ffa4e83e4d597b8b9fc60a8b1ade39eee16a669310933edb5d2758c7ef55a9988f71581
SSDEEP 192:sxZu2R7W2/fZsouIdpdzHW6+WNGY36anMIg5+J:sxZu2o2/fZso/tHbGXNQ
TLSH
T1C822C751AE28697B4CCBD20DBB25BF53E6F95432A0D51E88A6FCC51C05E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15988c68-cb2b-488c-9215-5d44eeb81ecf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\15988c68-cb2b-488c-9215-5d44eeb81ecf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d0032af9-ea38-4163-8684-da3acc3e1a85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d0032af9-ea38-4163-8684-da3acc3e1a85.tmp
Size 18KB
SHA256 dd316f74310bf0f7268bb37e6f1d5d57fa81b1392262fbd370d23bd6f654244b
MD5 99cd67c2ac91c0affc3654261d6875a2
SHA1 d2e31e71ec830884a6a30a4ca7fb4a72421015f2
SHA512 693b8c6c08e24d399cc26969fafaa8408d1c59c5dfdc433109ff2c4cca375e043223eb6f54c9c1652527486e0f1870cc9f22304f996d98fcde750e68eecdc03d
SSDEEP 384:SZcIhsN2sDgmJbJaQD7h//p+GqANVZh6DKhHeoo:ghSgmvt/h/NfYGHeX
TLSH
T120828D32AC78AC765CF7A081F4433A135E7880B7D7C98F94D5DDAB2D01DA5A81317D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7ce446e-4a60-43ec-b9ce-6e2e38041938.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7ce446e-4a60-43ec-b9ce-6e2e38041938.tmp
Size 18KB
SHA256 f5aa3c72c8a3b6de600e99b3db927d87c69123f09625f866e07ca2c6f1d7475c
MD5 c47c0fafa62dc317e66e168a9127fe20
SHA1 c6abaa7fe96878dd50400f84e0f2c86f2630443b
SHA512 a3d78e24ff978debba447eaac82530d4786004b8d9e4f6c488345fd1b90419b4715eb345839cdc74b392b969167589474f719c70a9830c7d42e5a176756903d7
SSDEEP 384:sZcIhsN21DgmJbJaQD7h//p+GqANVZh6DKhHeoo:6hngmvt/h/NfYGHeX
TLSH
T19B829D32AC78AC765CF7A081F4433A135E7880B7D7C98F94D5DDAB2D01DA5A81317D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e88a17ba-18ed-46d1-a4fe-3bebc5d45c54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e88a17ba-18ed-46d1-a4fe-3bebc5d45c54.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1b160651b50ad3d8f41de9a0ee19610c9cfa180bde19c344af6f872858256fc3
MD5 29772bebb9e72fcfa6352a51ca80d7d4
SHA1 2aa2b55fe7c331d633084449ae5324fe400d2af2
SHA512 b3e3dc58ec3422a9b06678ed5e07f822518e5dadc490d0130cbae2c362727d745e459ffac4cf7b37233a0a63ac4251579ee0e05cc3939174e1a03f441ab9e224
TLSH
T1A3410B58B6FA1108B3B77E1AABF7A82E453BB9232F16D06D00110D4F0663B00D872B37
MD5 SHA1 SHA512 TLSH

Submit Download