0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/controllers/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{347C0D21-09D9-4E6E-9C1C-41FA33C14AEC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3640	msedge.exe
3640	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe
2444	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 3484	2444	msedge.exe	88
PID 2444 wrote to memory of 2776	2444	msedge.exe	89
PID 2444 wrote to memory of 4696	2444	msedge.exe	90
PID 2444 wrote to memory of 4696	2444	msedge.exe	90
PID 2444 wrote to memory of 4696	2444	msedge.exe	90
PID 2444 wrote to memory of 884	2444	msedge.exe	91
PID 2444 wrote to memory of 884	2444	msedge.exe	91
PID 2444 wrote to memory of 4764	2444	msedge.exe	92
PID 2444 wrote to memory of 4764	2444	msedge.exe	92
PID 2444 wrote to memory of 212	2444	msedge.exe	93
PID 2444 wrote to memory of 4764	2444	msedge.exe	92
PID 2444 wrote to memory of 212	2444	msedge.exe	93
PID 2444 wrote to memory of 212	2444	msedge.exe	93
PID 2444 wrote to memory of 3456	2444	msedge.exe	95
PID 2444 wrote to memory of 1324	2444	msedge.exe	96
PID 2444 wrote to memory of 3456	2444	msedge.exe	95
PID 2444 wrote to memory of 3456	2444	msedge.exe	95
PID 2444 wrote to memory of 1324	2444	msedge.exe	96
PID 2444 wrote to memory of 1324	2444	msedge.exe	96
PID 2444 wrote to memory of 4392	2444	msedge.exe	101
PID 2444 wrote to memory of 4392	2444	msedge.exe	101
PID 2444 wrote to memory of 3048	2444	msedge.exe	102
PID 2444 wrote to memory of 3048	2444	msedge.exe	102
PID 2444 wrote to memory of 2848	2444	msedge.exe	104
PID 2444 wrote to memory of 4252	2444	msedge.exe	111
PID 2444 wrote to memory of 4580	2444	msedge.exe	112
PID 2444 wrote to memory of 3284	2444	msedge.exe	113
PID 2444 wrote to memory of 3788	2444	msedge.exe	122
PID 2444 wrote to memory of 3788	2444	msedge.exe	122
PID 2444 wrote to memory of 3640	2444	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\controllers\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff931a6c188,0x7ff931a6c194,0x7ff931a6c1a0
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,3273466891422786066,1181946512868441790,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,6096746603401187589,8257052874609161123,262144 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,2425257990058600953,12588218503309355856,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15276992298186469800,8194741481232121560,2097152 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,9657680550988835984,5788431212145822827,2097152 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,6897423364201087374,8763517544211753548,2097152 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,15378484363337959672,17488584756470420430,2097152 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,14233414998970253043,18155977212533105904,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2279643319703362343,11154689610765778591,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,3497152146401566472,12660057176623697175,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,3497152146401566472,12660057176623697175,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,12321700288406390529,18397775422621075405,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,4397634916217374660,18088547106423702768,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,11666930613344913626,18019871862186391703,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,14458610121150561957,15734441651438162991,524288 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,7393097643122217258,4471041791292133058,262144 --field-trial-handle=2276,i,4164425275583984353,7001177905196900157,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2589b09b-4d27-4b9e-adea-f8fe3fe79806.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2589b09b-4d27-4b9e-adea-f8fe3fe79806.tmp
Size 8KB
SHA256 c56a63eaf50b370f9d4989e943ec5e8663276305ac51bc5516fa0663249705b1
MD5 02a32e97ab73e08cd3bdb715bc6e387b
SHA1 d00e3dd7e47e635bd05bebc8507f8012e2d2fedf
SHA512 458183a45ed03d0f82825396bdf5dc2ee31352f249aeb6af9a8f3c928324af6b8d899a23308f68272d317d23df42f325d315c8e962cc91261d991bbaaddad665
SSDEEP 192:LJONR6DphJqQmiUyYO1TwGYX59ezVCNY+YpDyeMkIII2q5vU6:lONR61G3sTwGYX5E0S+YpDbIFU6
TLSH
T17D122B31A8B8AC7B4DD3A991F4873A135FA4522BEB847F94D5DC1A1C11DF69C130F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d50d1a8-5609-4d3b-bd58-e0a8851399a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d50d1a8-5609-4d3b-bd58-e0a8851399a7.tmp
Size 18KB
SHA256 f70bf00a887c2a9c4e5997ee0f96cdf39fa33e2c678a95e72f912aef0996d3ba
MD5 401035c6d09f4c05d003b4f2410453e3
SHA1 c2d177f6a9c6b76f9e84e3d5400e032e4e017f55
SHA512 9218b7c92b6ca9f5f639fc1c16d1ac40d91753436715bac7d26a3e57d512d8ebd6f3a71d6493d3f7e51b92c15fe2e34d23e59601e75da7955e8283da66a6ed0e
SSDEEP 384:/ZcIhsNgzY5blaAhBGYX5E0S+YpDSIFVZh6DKhHhoo:XhY/TGYu0SVp+IFfYGHhX
TLSH
T11D828E72AC789C7A4CE7A542F8473A034FB85527E7C8AF9481EC671C11DF694131BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

01e94219-7dd8-4e3e-b6a4-c28f45d47e37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01e94219-7dd8-4e3e-b6a4-c28f45d47e37.tmp
Size 9KB
SHA256 d2343c553981b0819682941939492ec9219aed5b1cbcf17e15ce124630b1664b
MD5 79b1c82ad608a71ef03d133aa351763b
SHA1 4e78f60982fad3dddf778f64ea41979cafe31e86
SHA512 c15bf866555d0ef028760d9daf4d0ddc6e68b5e1106936309a8d40a10a66bdd4614ae7a27c830966a0476c6f53670ce4dea773e7835fed71ba895f1a7307630e
SSDEEP 192:sxZ6RUWf/fMssd/Idpd3HW6+WNGYgU7RIg5NJ:sxZ6Ff/fMsywJHbGS1
TLSH
T10922B611AE28A97F8CCBD20DBB25BF53D6F9143261941E48EAFCC61C14E6ACD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d2c7a40-3379-469b-86c5-1b516e959746.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d2c7a40-3379-469b-86c5-1b516e959746.tmp
Size 27KB
SHA256 08aab527b4ddf024a96918e362da3acd474c85c8a3e629af5c711c95e4a7e424
MD5 12ed74830f73781281812ba9de3f6b95
SHA1 22c853eb46233aec70b109b4578523af7041bf80
SHA512 37d2e65055ae763e7f4780f2cae513ddb00d35f63b79f5100892bedbae5c64d46a1f3cdf73f2a4147ab9bd5f785f925a77987accdbae01de0ee566f575b46a3a
SSDEEP 768:x6ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzirokYN:x6ichfPWvPZplu1jan+LKgz5hN
TLSH
T125C2F93B640CCA7E4FC00A5DDD5A6F9B7E9802C7A6588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

469a1d59-fe04-40ad-96be-fbf1866deb5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\469a1d59-fe04-40ad-96be-fbf1866deb5c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

487d7521-b160-437f-ad5f-93dd6f0fb778.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\487d7521-b160-437f-ad5f-93dd6f0fb778.tmp
Size 9KB
SHA256 2734915071b66174dd6596b7978f1a6e4b913cb2ba8890a369600c0405813b62
MD5 2dea9508629626cae666098a4cab1bf5
SHA1 ab3d5b3eb4f9fb10630c5b2f95efc1b92bd3ed9a
SHA512 bdb84ab6fc563931ca9618ddffb2c089b369d2269ae1929893b3607b81f34a42690b9992f5dbc3a931e4492c587c87a7244eba12d6c01e1c45f550b2615da8c2
SSDEEP 192:sxZ6RUWf/fMsDd/Idpd3HW6+WNGYgU7RIgrJ:sxZ6Ff/fMsRwJHbGS9
TLSH
T10E12A611AE28A97B8CCBD20DBB25BF53D6F9543261951E48EAFCC61C14E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 760977276eceb0ac2fd219fb01b974e75786619e69ba4cbf4e3b9b5e903c2a42
MD5 9bf7a69acf9b4939b661cf66e1d061db
SHA1 97ed40b6a6dec8d3c6ea2b20ca07f5894646a414
SHA512 39e751e10f6e725336a9d26b3def7859822af34d8ffed836631ee48c3ae4a4164bba02e8163b76c47c5d8ddaab90cecfcd599300cb3c331bb6955d05aca4b845
TLSH
T172617479AA70E2B9FFA84479D5DA14CF39325D95B447BEC30EB4E87ACC7A30491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dc2cadf781ac21d732c35d92b69a216ae1ce4745c12e4084d01fc2b7560a19c6
MD5 341ec0a1edb28b217796cb7be7aae223
SHA1 f86dfa3b1a5a48da5b08f24402b27d4da082ef4e
SHA512 7e3fcf97f2eaabad30a1be8873695a3c71eae95d1a4f60890c2a44f6c566e1304788ebde3b11ae05a407db1d3aa8a03b68d42c5ba6bb587d9165717bc0e2fd39
TLSH
T1E5618579AA60E2B9FFA84479C4DA14CF39325D95B447BEC30EB4E87ACC7630491B8101
MD5 SHA1 SHA512 TLSH

Submit Download

96975f75-8c6e-45d1-911c-0f66d575b702.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\96975f75-8c6e-45d1-911c-0f66d575b702.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

32094f48-e427-4dae-8495-ab6053e3632c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32094f48-e427-4dae-8495-ab6053e3632c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bc7481af-c280-428d-aa6d-a8b314743a75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc7481af-c280-428d-aa6d-a8b314743a75.tmp
Size 1KB
SHA256 c6626f75863d807c2c68284a4251444abd8edc92a4f9e62d81e05847f18d74c2
MD5 cfda4b63799b5a5777baed306bb1640e
SHA1 aeeec606a37626b12076e43d69ec459a29abd4e8
SHA512 dad35a55158fd3a917b1e7a8438de7f0ee06c5898a484e2f53196e17401b9b4e662032cb446aa0e187c103c4be2c7c07c943e355266f8bc57fa4e0a767d19d90
TLSH
T151219BF3C3D5956D8A0516F06A24AE2BDF1D0A0682583C1AC9D4EF6BD7F34B1E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

e3047bad-2cf3-4513-bfba-1d929056da7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3047bad-2cf3-4513-bfba-1d929056da7a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 19835c5c68916cb629b33a7eab88e3e2b6a437b886418e9fe75a1ffb9e62cbd4
MD5 961ed3595708420b738629d69dd82265
SHA1 44d53476ebcae63d54f278f2e0bba9350d084247
SHA512 d29083abe848762e9173d9969dd18a0f3cd19a6820b913265f867682eeb23c92c3d48547bc834576ed74cfc249e6c0cb30c2d9db935167eaf18b2ec35238413a
SSDEEP 96:K3idmC3TeK8ouOtqKGoyJqreaAcIkYcxP+ikKWB+okS6aRA9:WidmCiVFxJqreaAcIFcxWi2B+oV6aRA9
TLSH
T1D891965031BAA300387E264D516C996B529230F3309CEABF7BAC51928D6FE505CFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2bae50d-38bb-4c66-88a7-f316c3535342.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2bae50d-38bb-4c66-88a7-f316c3535342.tmp
Size 10KB
SHA256 4d8a920f926f72528843431025f730742f2b06ace05177b79b473f20ac4df21a
MD5 9b67b5d9d1f516b3b553523a38bd1540
SHA1 fc061e0abeac891610c3a4acaffd0d41739070d6
SHA512 c13caddfd1f173e8f32a90f4ff9c2ba947ff325bba6a54c01eb353d1ed3c2d1758053d2db3975209432317ba5defa8c0df973d149cea5604eb783ab01803291e
SSDEEP 192:sxZ6RUWf/fMs7d/IdpH3HW6+WNGYgc7RIg5nJ:sxZ6Ff/fMsZwXHbGub
TLSH
T1E422C852AE28697B8CCBD20DBB25BF53D6F9543291901E48EAFCC61C15E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daf552ef-ece9-4059-be47-66ade2cf2762.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\daf552ef-ece9-4059-be47-66ade2cf2762.tmp
Size 10KB
SHA256 da14f9d1d91dc32304ccc202a56c83825399598d1d2a649a9e78be20d9d8558e
MD5 be245948335395295cf99f0869dfa4ec
SHA1 d259c3548bd0d1763753c6d0f84c836e58a1ddf3
SHA512 09524fb000a92e81ee41564098a64cd6bbedb83ef12f18e5776ed5ac3791d2416bc9ce78cd852aedeb581077e281cf134e5801680769442056ef069c230c5c99
SSDEEP 192:sxZ6RUWf/fMs7d/Idpd3HW6+WNGYgE7RIg5nJ:sxZ6Ff/fMsZwJHbGeb
TLSH
T1F822B711AE28697B8CCBE20DBB25BF53E6F9543251951E48EAFCC61C15E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2010038f-56b6-4dca-a116-2db84931980d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2010038f-56b6-4dca-a116-2db84931980d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cf332c55-26ea-4a20-a0e6-6d1d362172de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf332c55-26ea-4a20-a0e6-6d1d362172de.tmp
Size 18KB
SHA256 d67930ebc72693853aa8161295b3f02cf5ee436378ebba68bd7bca48bdc36c69
MD5 6a094904921df722aeff53c52ac11190
SHA1 99454d9cc1d390770a2377847a5d67b963a17774
SHA512 eb821f76d1521cffbb3cf834fba854c2f8e9f70ccb5be88106fc7a410e2107f7f59447acd390fe97b4d52e0e534bdb8d5656c2976498567bb8c1d02d6868e563
SSDEEP 384:aZcIhsNgqY5blaAhBGYX5E0S+YpDSIFVZh6DKhHhoo:Yhp/TGYu0SVp+IFfYGHhX
TLSH
T116828F72AC789C7A4CE7A542F8473A034FB85527E7C8AF9481EC671C10DF694131BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dd4003-2ee1-40e8-a888-7194161687d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d3dd4003-2ee1-40e8-a888-7194161687d4.tmp
Size 8KB
SHA256 10afd52ed617c2a617d761b841b78604243eb33f51d9e9e466b9325f6c7dc161
MD5 b34f6414ce70ec8b9792e5e6501b15e2
SHA1 bf82c46354168b2c7ce2896b506c64295eb4bc1a
SHA512 12698a41a582f24a82cd68fecae839ce3c2a0a9796fc46a3be4eb921a7fcf15b64ddceb70750c20b64a493bcdbc002755e97e8e4dfa121109b502503129db279
SSDEEP 192:LJONc6DphmqQmiUy01q8wGYX59ezVCNY+Yjkk7IDr/U6:lONc619RRwGYX5E0S+YbI/U6
TLSH
T15D02D935E8786CBB8DE36E45B48B3B235FD4112BAA946F84D6E81E1C11D769C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6bf36b1-df5d-44f8-b513-8112cadd5531.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e6bf36b1-df5d-44f8-b513-8112cadd5531.tmp
Size 21KB
SHA256 e025c031f77b3bb085e467f0ece3cb51325c6432a0e5bd7058722660e74e61be
MD5 50abf144184fc7bdcd96fdff8d75e74c
SHA1 45e0d8c63700e712f7929771d31c474476637822
SHA512 fede9312bc94a8ef7b62950a0164faead905a1c56e747acaf224193dc012bf1b81fad79be38f2e96e710835b46c7522b2e61d0547c5eb25cecf8c821491a1399
SSDEEP 384:HiFiZcIszsNg8TUNTUlIlqY5blaAhBGYX5E0S+YpDEIFVZh6DKhHhoo:CFQQdwg//TGYu0SVpIIFfYGHhX
TLSH
T11AA27D739CB8D87F5CFA9A82F94A36038EB44177D685EB94D2DC9A1C10DB1D8130BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5913f343-18dd-43bb-af5a-4de71f2f5d1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5913f343-18dd-43bb-af5a-4de71f2f5d1d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3a912e66a9b405ec15e34b0d81d45f525be91029db7bf4a9e882c0727c40d7c8
MD5 bdb5d729e6bcf510bbf1abf618d8d890
SHA1 2dad7b59d5ade751381728ec309ba0a9931b7080
SHA512 d891e776278719fed076f8c1ae33edd182ae2691b5c276a583e8658349795827f535d4315200a10853ad29fa43d78209c106237d665fa4cc65fe6af517ffa76f
TLSH
T16F410B58A6E91148B3B76F5AABF6B86E487B79761E06949E10010E4F4A63B00C971B33
MD5 SHA1 SHA512 TLSH

Submit Download