0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/core/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3264	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{5A272E2B-C52B-4BEB-8382-006DB7AAFE97}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 4024	4648	msedge.exe	87
PID 4648 wrote to memory of 3264	4648	msedge.exe	89
PID 4648 wrote to memory of 4396	4648	msedge.exe	90
PID 4648 wrote to memory of 4580	4648	msedge.exe	91
PID 4648 wrote to memory of 4396	4648	msedge.exe	90
PID 4648 wrote to memory of 4580	4648	msedge.exe	91
PID 4648 wrote to memory of 4580	4648	msedge.exe	91
PID 4648 wrote to memory of 2624	4648	msedge.exe	92
PID 4648 wrote to memory of 2624	4648	msedge.exe	92
PID 4648 wrote to memory of 2624	4648	msedge.exe	92
PID 4648 wrote to memory of 3424	4648	msedge.exe	93
PID 4648 wrote to memory of 3424	4648	msedge.exe	93
PID 4648 wrote to memory of 3424	4648	msedge.exe	93
PID 4648 wrote to memory of 2304	4648	msedge.exe	94
PID 4648 wrote to memory of 1784	4648	msedge.exe	95
PID 4648 wrote to memory of 2304	4648	msedge.exe	94
PID 4648 wrote to memory of 2304	4648	msedge.exe	94
PID 4648 wrote to memory of 1784	4648	msedge.exe	95
PID 4648 wrote to memory of 1784	4648	msedge.exe	95
PID 4648 wrote to memory of 3604	4648	msedge.exe	102
PID 4648 wrote to memory of 4780	4648	msedge.exe	103
PID 4648 wrote to memory of 3604	4648	msedge.exe	102
PID 4648 wrote to memory of 4780	4648	msedge.exe	103
PID 4648 wrote to memory of 64	4648	msedge.exe	105
PID 4648 wrote to memory of 3744	4648	msedge.exe	110
PID 4648 wrote to memory of 3024	4648	msedge.exe	111
PID 4648 wrote to memory of 4056	4648	msedge.exe	112
PID 4648 wrote to memory of 3856	4648	msedge.exe	120
PID 4648 wrote to memory of 3856	4648	msedge.exe	120
PID 4648 wrote to memory of 4984	4648	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\core\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f4,0x7fff4fd2c188,0x7fff4fd2c194,0x7fff4fd2c1a0
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,6452474768206258199,4726349650230007998,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,5634915706927079968,14291340147328923031,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,15523307267833330703,12323148809997107777,262144 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:2
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16025802438242050594,6519648177021918562,2097152 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,6202196103109100498,1587418320028786688,2097152 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,12800074315896961091,7778303187190834991,2097152 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,17728289438358605207,2453762627081982615,2097152 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,15258863902066980325,12544135354585210295,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7941311854293994180,14362071063223063411,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,4862507948484289517,7989677619773711273,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,4862507948484289517,7989677619773711273,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,5673580026661044667,13049423406539738203,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,15621747463260605418,65584613420742891,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,10690987850113618702,1480941759935912982,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,13969642759704012971,14315433393123173526,524288 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,9907938198100768043,1320519279214039664,262144 --field-trial-handle=2800,i,10206478937093352552,908267621458095524,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:64

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10e7cd54-a233-4214-9744-b59b8700e775.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10e7cd54-a233-4214-9744-b59b8700e775.tmp
Size 8KB
SHA256 48d4b98547ed2d0b67cac7ec9364a25b219a928d1445f0ae818c1d4c5ca0442c
MD5 22695ae974235c5e7a33c79811b0518a
SHA1 038612486e62e2e14623a363f0cb82830e165912
SHA512 34864225f473be0b42faf6fc9153c64f480f4b0d0579b61278a6a21786e36889645619f39b59a805f90c63f9616224eea574c58c0dc48fae88737ac0a9b260b0
SSDEEP 192:EONc6nnHdQmiUyxsGLYcX5hQDP1C8jzorqo/+XEcFfErsg3Zq5GU6:EONc6n7GlLNX5+DtCM8l/+Xv8rnKGU6
TLSH
T1B912FC31BCA8AC6B5ED26595748731539EA51127EA487BC0D7FC1E1C11DF69C130ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fb5e3e1-a309-446d-9507-ce92d467ca2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fb5e3e1-a309-446d-9507-ce92d467ca2b.tmp
Size 18KB
SHA256 7642ae97860b29a1254cf0483222f62db8e46ddc67ef7d4e3a4b3d632ac64587
MD5 08392a5a271a528d33e1b97e8ddcc3e7
SHA1 685cf695f133b7849b9ba095a1a16f2a5b73fad0
SHA512 005c46ccda1d43d31827dc811d66c0fe546ac700f0dc9f34224a740960aea2018263f56ca4e091cb62b8df7c9f1a3f99312b1d862317c38d5bde18977232ddb9
SSDEEP 384:lZcIhsNpZmSi/ldTpQX5+DtCM8l/+Xv8riKGVZh6DKhH0lox:dhrSaukDY/u0riKGfYGH0lq
TLSH
T1A6829032AC78AC7B5DF6A182F54636139FB45063E2C85BC0C6FCAB1D01EA664231BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

17c375ef-939e-486a-8b20-0953188f5117.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17c375ef-939e-486a-8b20-0953188f5117.tmp
Size 9KB
SHA256 7d5e9b2905f91195dc678f4eb9f6b53c7bc0c1702e91c8ef3d8883e62695538c
MD5 b2473c0c4c63bb045ca2cd4207c8ddb2
SHA1 e384b791f0885205f2970eaaf27f541262ad4055
SHA512 cdb354929718d6049d906adf3e5714eaf9355266221b111e0497aa37ecc86fe1ed0ca732c151ad2dfada3e641dbf9383e2b78f7449dc9df304e8724939c9cc80
SSDEEP 192:sxZsRpWj/fwsUfIdpdOHW6+WNGYYBa57Ig5IJ:sxZsSj/fwsUQoHbGfuC
TLSH
T1FA22C7116E28A57B8CC7E20DBB15BF53E6F95032A1D01E48AAFCC61C15E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31b628ff-e6db-4742-a11d-3106159d8dc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31b628ff-e6db-4742-a11d-3106159d8dc6.tmp
Size 10KB
SHA256 9101d3a2c9b60dff0444262255f2d4318be6d37e5d86e6f86e360d583d7c99c2
MD5 c032e16eec131deaa8c68d51525320e9
SHA1 6d3728e27d22f2bb96c481b63c6b055196026c4a
SHA512 53fe1ba43722d5e212eb260c074c04ba02e56681d952d8861e7e8ac162d950e1563845c56a843468c6d524e509d3480f37b38b7a2cfe3bf927ccaa9a14c28fa9
SSDEEP 192:sxZsRpWj/fwsQfIdpdOHW6+WNGYYBo57Ig5qJ:sxZsSj/fwsQQoHbGfIA
TLSH
T15D22C7516E28697B8CC7E20DBB25BF53E6F95432A1D41E48AAFCC61C15E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

342c25c4-27f6-417b-868d-5ba37cafffa0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\342c25c4-27f6-417b-868d-5ba37cafffa0.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

521548d6-6621-43d8-bfaf-2d7d98b78bb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\521548d6-6621-43d8-bfaf-2d7d98b78bb6.tmp
Size 10KB
SHA256 0ea2e1a0511242f0064fd77018158829f1a86b8e63844df692f1ec7616630625
MD5 fcd70905ba3feab9fab0cfd44a4b91cb
SHA1 80cc55822279a0e015974c9e29b3ac5e5e1deabe
SHA512 980c7703d00b7ecda4674300a0c7cb9da56b24fed0ff23d89b0d3e32aa3e37d4767b2e8ee0cf74fb2d27afc5b05ea0de5eaa920d7c888b5ea281548d9dfc0894
SSDEEP 192:sxZsRpWj/fwsQfIdpHOHW6+WNGYYB557Ig5qJ:sxZsSj/fwsQQuHbGf7A
TLSH
T15A22C8526E28697B8CC7E20DBB15BF53E6F95432A1D01E48AAFCC61C15E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52cacbab-faa8-43e1-8282-e1987a965f79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52cacbab-faa8-43e1-8282-e1987a965f79.tmp
Size 9KB
SHA256 586c7a9930688200cee00798efc60d2077c91f1a30dee1099e5bf48124a4d946
MD5 f9f2b159213992f2658589c96e4a94bc
SHA1 3597fc7da6396e7def368cfdf10cc9fecf57ae2c
SHA512 d06495d707fd5430fb525b8954b8a58581a641d6506beb4f0f2da119be5ceaa771c27003ab66b8cf71d25413220bc619c1f538b74138995d89f5b66473d5e5b1
SSDEEP 192:sxZsRpWj/fwsMfIdpdOHW6+WNGYYBa57IgrJ:sxZsSj/fwsMQoHbGfu9
TLSH
T12912B7116E28A57B8CC7E20DBB25BF53E6F9543261D41E48AAFCC61C15E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5389352b-e8bd-4d1a-80a0-8b269d886515.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5389352b-e8bd-4d1a-80a0-8b269d886515.tmp
Size 27KB
SHA256 1d3fb2382bcbccd19c74c7a840731ed4f496954ef6f106a6e1508e01d25037c7
MD5 f81056cb8c82333ae2b3f5c16d8fde2b
SHA1 c7f1d2b74d3131462cecae9e9a559f50c93cc3d4
SHA512 aac3e475ed80c8b1713419492efa889109534bf317a2d62f22f4ad0313c1c5f791251c897441b2f539454a28c554386bd2e195eedccd510c684788794c05c0ac
SSDEEP 768:foyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXkropcAY:foyYR7jWv3NpBu1ja/CL8OXva
TLSH
T1C0C2F92B640DCB7E4FC01E9DDC5AAFDB6E9802C7A6548D4047FA944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66127769-9434-46b5-b840-ebf0ebe5a0ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66127769-9434-46b5-b840-ebf0ebe5a0ee.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 be6958a31d6e441ee93fa7b93c02afea2b3c36804130e3ae49ac22f7ebc6fc87
MD5 ccec3acd9f88802b0d1950005f1dbaf8
SHA1 538dde8653a2b10bc1db59f59f148076a07f315c
SHA512 e1065f1851a705cf5dc08dc89ccd314d4e643238f7062826c1322325ab492917e0abc022c5de98548a503235794f777d83fc902c7e9c90f859b4fe50680fc41f
TLSH
T19A518384964DCBC0F3EA4CB145D9078BFF32318487A7BEA632A8DBB96456764C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 59475320facb94f07c358ecf1664ca7a28536511a51c72e5a1a7eea6f2f968ee
MD5 e09f629d77bc9e3cc4804026a13eedeb
SHA1 22922dac9f3a178a0d598fbacc28ba55c59a0296
SHA512 d26954f80e4aaacbf62e2c430cc6aba370172985bcc092167d163aa8530b3c588614210fd9059420764097851dcfc427f69950c76c9ebdfc00671dbc28e36cc4
TLSH
T18D515485954DCBC0F3E64CB145D9478BFF32358447A77EA632A8DB795456754C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

d08872b7-4d5e-4c1d-8604-49c737def4e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d08872b7-4d5e-4c1d-8604-49c737def4e9.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4392427a-6797-412c-8798-60e6a54991a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4392427a-6797-412c-8798-60e6a54991a9.tmp
Size 949B
SHA256 0079bdd8764ff73fe14ed570a5a150fc3c7e9e4ba33fd8794b17cabc8bca63bf
MD5 3c0c72605d36bc1abad3b689c014e358
SHA1 302b92142356aad3eeca31b290cf32fe90a72af1
SHA512 92f8172b02ec1eb8546896d5d262c076766735d3acad4bb31e79f131f4bf151e7b4620af280dc96b3fe62bb44c0de5010f62ca517969216a9af3ead8edffe9fe
TLSH
T1EB117DF7C3D595AE890156F06A24AE2BCE1D0906421C7C1A99D4EF6B93F3075E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

57e5575f-54a1-4bd9-9557-a5e4da8fc081.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57e5575f-54a1-4bd9-9557-a5e4da8fc081.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bed73d8a-4a7c-4d5c-aac3-ea3fe6479cff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bed73d8a-4a7c-4d5c-aac3-ea3fe6479cff.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 02ee675300557be224e573bf1ccd6cc35f79dcb9a1fc85d5f31d7f5f95e03eed
MD5 fc71a91672878a76be2c01ead36c80ab
SHA1 89141f3e63d472a204270e2fac2e922d66685a15
SHA512 a69dd5167c683f3302ad3324eed60187d73062a0f2b1ac6a1f916ab7c0eff9b62e65498a1b461e30b5421993c164dce11661162ee96d566595e7de56df0f500c
SSDEEP 96:KhrANJD1l1GBqIEh1KMEET1IeyMKHqeO/KKYUPOH:GrANJD1lkBqFhHEETSDDxr
TLSH
T17291234031BB060838BE2A9980A7971B524171B3B01CEAFBFFBD80519D6EE045DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62f63209-2ec7-408a-b19b-f00eaeb021f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\62f63209-2ec7-408a-b19b-f00eaeb021f9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d45d659e-7c2d-4450-95f8-fa414696f2be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d45d659e-7c2d-4450-95f8-fa414696f2be.tmp
Size 21KB
SHA256 4bb9cff666d5082a1e888a9442687670a4e4bc0371fb8deebf8077534e44efc6
MD5 70812fe1aa2b1b14cacc64519ada028f
SHA1 00b04d4055e731bec10737ce41e382017f440f90
SHA512 71e11f3cadb2db0c224454c8305a8fb93c0015b756d883295dd8b6af68f6bdcf0f52a78a82083e30889f39020c942b97a2036ef1f6067227276d7184c3d39619
SSDEEP 384:OiFiZcIizsNL8TUNTUlIlZmSi/ldTpQX5+DtCM8l/+Xv8r4KGVZh6DKhH0lox:lFQq+wg2SaukDY/u0r4KGfYGH0lq
TLSH
T13EA27E339CA8DD7F9DF66B85F94A3213CFB41073D584AAC0D7DC9A1C10A6198131BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da12766b-0813-4673-b57d-56ed1c200d27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da12766b-0813-4673-b57d-56ed1c200d27.tmp
Size 8KB
SHA256 0a311cdee913df643b4395db955978cb796767fba2a27a5704aef2dca84de466
MD5 021734738379bcef073cc739a0cc5d53
SHA1 3d207e50e4f0c193725b312d41b88e0876c15a1c
SHA512 9ced5e6b53acd4b2f23b86614832a1b8199afc1870fca0effb478f6e23545039798f4acf9d84ac32cf3ff062af6d487a86fd628c6fbe236d4644256a5446daa1
SSDEEP 192:EONq6nnHGQmiUyMGQYcX5hQDP1C8jzorqo/qMc9p4U6:EONq6nCCQNX5+DtCM8l/SwU6
TLSH
T17202DA35BCB87CBB8EF36D46B48636139F94212BE5942B80DAF85E1C10D765C230A937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7c5fc29-12a9-48d1-9a76-11d509a293e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7c5fc29-12a9-48d1-9a76-11d509a293e6.tmp
Size 18KB
SHA256 3c3c65a3dd2b1b20f6b3d4b77f1876baa9bfd7003b5293860518c8430e160a34
MD5 f739ef3aae26ecdbf063e83ae8397967
SHA1 ebce919634742c6c080659ed94e8c75d84deedc2
SHA512 f08641281a51c430e0c331b2bde2cb3043378badb6ef9cdd5e56e54e22ad90f8572d7f36f0ca25ec87d93cc12ef740a1fff7da18d20475862889cb013844312e
SSDEEP 384:AZcIhsNpImSi/ldTpQX5+DtCM8l/+Xv8riKGVZh6DKhH0lox:+hISaukDY/u0riKGfYGH0lq
TLSH
T1F8829032AC78AC7B5DF6A181F54636139FB45063E2C85BC0C6FCAB1D01EA664231BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfee051b-4aa7-4fbb-8c27-38a858c68128.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cfee051b-4aa7-4fbb-8c27-38a858c68128.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d929016b2290a8d5aa65e3f075cddc4d519f161b9e10d902c80dacf231940755
MD5 f47123887230100f6e15f623210a678f
SHA1 f7ee6acb562d88cc05220aa97b95cc40dd764afe
SHA512 7654edcc9c393df800a254b0cd9c819f36cde94c11e56a46c2f9e238095d1b29d2e17ca932b0db408d7127a1417fc05c9bc067b609784760d5f844442dd64739
TLSH
T1A9411658B6FE1108B3B76F469BF2A86E487B79332E06D5AD10010D4E0A67E40DD71B37
MD5 SHA1 SHA512 TLSH

Submit Download