0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/helpers/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{C30E5635-8A4B-43F5-AB01-9BB52B03546B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5252	msedge.exe
5252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe
4872	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4872 wrote to memory of 944	4872	msedge.exe	86
PID 4872 wrote to memory of 4192	4872	msedge.exe	87
PID 4872 wrote to memory of 2304	4872	msedge.exe	88
PID 4872 wrote to memory of 2304	4872	msedge.exe	88
PID 4872 wrote to memory of 2304	4872	msedge.exe	88
PID 4872 wrote to memory of 784	4872	msedge.exe	89
PID 4872 wrote to memory of 784	4872	msedge.exe	89
PID 4872 wrote to memory of 4640	4872	msedge.exe	90
PID 4872 wrote to memory of 1988	4872	msedge.exe	91
PID 4872 wrote to memory of 4640	4872	msedge.exe	90
PID 4872 wrote to memory of 4640	4872	msedge.exe	90
PID 4872 wrote to memory of 1988	4872	msedge.exe	91
PID 4872 wrote to memory of 1988	4872	msedge.exe	91
PID 4872 wrote to memory of 216	4872	msedge.exe	93
PID 4872 wrote to memory of 216	4872	msedge.exe	93
PID 4872 wrote to memory of 216	4872	msedge.exe	93
PID 4872 wrote to memory of 204	4872	msedge.exe	94
PID 4872 wrote to memory of 204	4872	msedge.exe	94
PID 4872 wrote to memory of 204	4872	msedge.exe	94
PID 4872 wrote to memory of 3564	4872	msedge.exe	101
PID 4872 wrote to memory of 4204	4872	msedge.exe	102
PID 4872 wrote to memory of 3564	4872	msedge.exe	101
PID 4872 wrote to memory of 4204	4872	msedge.exe	102
PID 4872 wrote to memory of 1592	4872	msedge.exe	104
PID 4872 wrote to memory of 4232	4872	msedge.exe	114
PID 4872 wrote to memory of 4328	4872	msedge.exe	115
PID 4872 wrote to memory of 4444	4872	msedge.exe	116
PID 4872 wrote to memory of 5640	4872	msedge.exe	120
PID 4872 wrote to memory of 5640	4872	msedge.exe	120
PID 4872 wrote to memory of 5252	4872	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\helpers\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7fffd621c188,0x7fffd621c194,0x7fffd621c1a0
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,7367128859810478940,513937797581131875,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,17815213106056182560,1090732720702013131,262144 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:2
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,9405566578193328844,8036560585856159526,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:8
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,1844675113932155000,8085730599607611281,2097152 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,6720023149838911148,17952575902183332668,2097152 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,9392287195330365087,396883322863497229,2097152 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,3891288531087030163,15919771997988920820,2097152 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5606092216515295494,6406081932897873187,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,1874977440925150030,1889110355437138523,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,11469100758251363735,3337384379518884271,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,11469100758251363735,3337384379518884271,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,3525117006839381798,6924765416159289540,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,9769743998614878928,1718144330479575200,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,2727597588387537322,598707522056945485,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,16099905820528256272,2453959367735026598,524288 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,16394161158027962508,16708827039528699558,262144 --field-trial-handle=2808,i,17755623445438347271,7835787784183157729,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

035dbc00-bca5-4506-bb22-355af0d0ad18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\035dbc00-bca5-4506-bb22-355af0d0ad18.tmp
Size 8KB
SHA256 c5554656da1f48f4567ee81b288fa03cd5d2a31eb9d6dbb88f94560dfcbb8e3f
MD5 5f6713e1e0d290010eed124d6e4c1403
SHA1 cfeac841105227df447e473ce945fa8c2de7eb9b
SHA512 cc9a16fe8d161544cae3f64d4100cf477db6339b86052c10095aca6f8aecba1cdb6f6e1691cffbf459a517e05349b9888dc36dbae7fcf4f2d91d078e71c30042
SSDEEP 192:SON86iDCQmiUyTJHq5u88PLuhLSqaroU6:SON86/QHq5u8iqvjU6
TLSH
T11002E839AC683C7BAEF3AD05B5477B275FA4013FE6942B84D9E81A1C41E769C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f8decc1-1f9a-4241-82f0-5ae3878ccebf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f8decc1-1f9a-4241-82f0-5ae3878ccebf.tmp
Size 8KB
SHA256 de0d70abae53776cf6d1c388ba74c619c260543a78dbd90af8295c947ebac59c
MD5 53034a1f84d6427586c104b3442ac1ce
SHA1 e1e0da172d8f071e10c762fb47abc95f5a929fe2
SHA512 64e9d3f59d4c82d25acbd2530a240a50318bddde0c9cdb8da18219ab83e66e1697716c0ce9b712e812560838328f73d266d38a8d4dfbaacc8002b5434726a74a
SSDEEP 192:SON46iDFQmiUyc/JLq5u88PLuh1tetGGuZLqSU6:SON46aDBLq5u8iqHt5pU6
TLSH
T176121B36A8687C7B6EE3A961B48736135EA4422BD7C87F84D9DC1A1C01EF69C130B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

802ef7b0-0c0f-4398-b997-04cc707472c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\802ef7b0-0c0f-4398-b997-04cc707472c6.tmp
Size 18KB
SHA256 9fd0a6a1c00738881cee3257305d49caa752609c155e055a93d7e83fbf8593ff
MD5 898c9aabb2f57aa14bdbf7b2e3e8390b
SHA1 ad7c52eb1c154b3de13f44d13ee459a699cfc242
SHA512 1e929e4d227f101345d35caf9b3a59b043b8faa7150b912844a3abdb13372732bf9355c59a4888a14c90f953bcd4af9d75ba8656be03e53990c9f6365525fd8d
SSDEEP 384:3ZcIhsNN+GTVRmipp5u8iqHtlpVZh6DKhHToN:/holkqTpfYGHTG
TLSH
T16E828D32AC786C7A6DE7E511F9473A035EB88137D3C86F84D4ECA71D00EB6A81317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

906d040b-4c04-4146-a280-ca2e86dcb333.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\906d040b-4c04-4146-a280-ca2e86dcb333.tmp
Size 21KB
SHA256 3ea9ab4a3fb5238f456f6156524ad58b6e35c49f78ac0b5a420adb63e95432bc
MD5 58592a89670b12e686616e70327eb0b8
SHA1 d832b083bff8183e612a8e9f8fbcd9eadb24c3ae
SHA512 7b73650c4fbdbea35f7a274cc12185b253b1088ab0bed76f570b7ecea169d9155a39c8aa3a1a69594b841a1390e255d9cf9e31a1ccf798002591832044e0ffdb
SSDEEP 384:3iFiZcIJzsNX8TUNTUlIl+GTVRmipp5u8iqHtQpVZh6DKhHToN:yFQp6wgtlkqOpfYGHTG
TLSH
T131A27C339CA8987EADF79E51F9473A038EB44177C6C8AB94E6DC9A0C00EB1D81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

2d8b2e20-2459-4176-8742-2ad29c035d21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d8b2e20-2459-4176-8742-2ad29c035d21.tmp
Size 9KB
SHA256 8775fe29c20bda11900f304a8620abab30a3bf915bce88509b550053dd3d3699
MD5 78e7f2167a4b3d86c4ffaf171efe94cd
SHA1 139afa42cc2afaf6ebd4c84a5fbe9b956841d483
SHA512 2a6c13137218e0b055390fddf658ef6d9a29c4469d73e6642423d9c20e7e8f1045c0d1b0da3e7a1dfd1c69d932711be54faa3358311e5b452e6eb7957c629d94
SSDEEP 192:sxZbRXWC/fzsBBnIdpdAHW6+WNGYaQJOIgrJ:sxZbQC/fzsBBoOHbG19
TLSH
T15912A751AE28A57B8CC7D20DBB25BF53E6F9503291941E48AAFC961C04E7ACD130B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37d90b96-555b-457c-94d0-c30ddfd3263b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\37d90b96-555b-457c-94d0-c30ddfd3263b.tmp
Size 10KB
SHA256 cc40dab71460862b506a433209936eb566826d5b78f141b72b7fc68f7b407ddc
MD5 7758d8b0ddacdc71eeac2baab61eaccc
SHA1 daee9c00bd80364502aac36503db5ffa7a9b2d9d
SHA512 0032b1e92092775dd20858869f45ed32f05a96b3d5b8b5ecf0aa4bba1ffb1568a112587ae1c8b6f5d36208540fd5765e5f40f664d39597eb2d253f4551e6b96b
SSDEEP 192:sxZbRXWC/fzslBnIdpdAHW6+WNGYaMJOIg58J:sxZbQC/fzslBoOHbG5i
TLSH
T167229651AE28697B8CC7E20DBA25BF53E6F9503291951E48A6FCC61C15E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b3e6403-7583-4231-9bd7-5de873f93a37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b3e6403-7583-4231-9bd7-5de873f93a37.tmp
Size 9KB
SHA256 f7f7ee07c8a4c2d43fdbb11789e9c96e3629e2b1f089031d4128caa57f9992c3
MD5 31c24fa802cd3259ca4513c982e408f1
SHA1 53d21aa018a132fd4d3bd676cb87518b4ea35941
SHA512 e64188b5967ff8c5c1ae40aa368fb375542de3bc8f60977a484a6c0d6bb59303143b6f3905bfe1c1584d4cebe6526d7702f1590e4a0639c82d410e3c73ba5358
SSDEEP 192:sxZbRXWC/fzsRBnIdpdAHW6+WNGYaQJOIg5WJ:sxZbQC/fzsRBoOHbG14
TLSH
T1F622B751BE28A97B8CC7D20DBB25BF53E6F9503291941E48AAFC961C05E76CD131B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b006001-b36b-45a1-a320-b9144c3c0844.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b006001-b36b-45a1-a320-b9144c3c0844.tmp
Size 10KB
SHA256 344fb48221855fac6fe7399b63f1ff1c558d11580a7cd2c726dcfc9697460551
MD5 17d35c3a16b7a5e2d26142994ff76602
SHA1 6fa3fd750e0f9e14c8a4b2bd776b3e7646af357c
SHA512 5b1e7a608d378553fc1102447f594f2092313fbe644d947cf4a99c25e48a7cc95b85d687582bd900bcdd868b83050a9d3b1ac5dd7ca325f3dc3502e8d28ee521
SSDEEP 192:sxZbRXWC/fzslBnIdpHAHW6+WNGYaIJOIg58J:sxZbQC/fzslBogHbGdi
TLSH
T12122A752BE28697B8CC7E20DBA25BF53E6F9503291941E48AAFCC61C15E7ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 fa48c676dcb96c229f4e8abe8325484fa80624beb02367b515ab977c84f442f7
MD5 d1c68a55e7bc3cb8383287adb34b65fe
SHA1 10060705ab3839c85aaa6a068b1f1f97ffd75313
SHA512 1c2febae006cf32bac279b5a14c846758ac2fb98085c4cbf572930fa2060cb265d45e68fa3bca26f861a4961814d0698dcf3f48e12ed2253cd9a54ce940ea510
TLSH
T1CC613B8057B08472DB98A6B0D1F1D09B3AF459F149CBEE5235E0FEFA4713F5490E4062
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9dda4e46c7eba952da1c15d13012495bbddf93964873aa2045878a458eebf6c2
MD5 29ed8adffda4395b219b5fb5bc2f909c
SHA1 64dcbaf7169288f45e95f51d0d64f14968bfddc1
SHA512 ea78cb0e9e40314839de804177e1d7c296e24c8eba688a9734fe5389cb72ba1c0eab2463a3c0efd18022cd40d7b92fa9e1afe961d8274ca95c9113e2c0faaba1
TLSH
T11D613B8057B08472DB98A670D1F1D09B3AF459F149CBEE9235E0FEFA4713F5490E4062
MD5 SHA1 SHA512 TLSH

Submit Download

32051026-9444-4940-a0ee-ea64ce207303.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\32051026-9444-4940-a0ee-ea64ce207303.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5ea5812e-b0c0-4c18-968a-88d39661986a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5ea5812e-b0c0-4c18-968a-88d39661986a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

88228b45-c53a-4d19-b290-557a6005d668.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88228b45-c53a-4d19-b290-557a6005d668.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f2970739-33d9-43a6-9777-dbaeec1527bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2970739-33d9-43a6-9777-dbaeec1527bb.tmp
Size 949B
SHA256 beb7d95d059a8181757fd310255bf2195eb4f0e43bc8072f7da2e57a56e69596
MD5 37081ae875746e25736388047d3b24cf
SHA1 254fd2cd3a0e98ce83444d03d047a84f7146ad74
SHA512 4f71722b3ff551cd2f6a2e70dafbf66aa24ae8db8d752e7293ac57c140eec4f624bc71d4025fe6dca3659a307d9d2a48654784cb19f25f908bf45c665dcf912e
TLSH
T116115BF3C3D595AE890116F06A24EE2BCE1D0506821C7C1989D4EF2793E3475E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 184b30dfd3dc83902b2b8b013f41425d9d8198e0a538bb6be7774fea6cb3e335
MD5 ac579032316777f854b6d0001c21117e
SHA1 d97bf73d86693bd8b18b8b30bd1fba4f241bee7c
SHA512 0363df28c3b50a1a7742b4d737df6a7149afdd4e3644060075b850ace7a4325524c74550a14a4b0660098644eacb6737e706efce3b70029f817f828281825174
SSDEEP 48:K0u5uIuVupuzu3uLukbu3uSuPISuBukK9uB1urukxuJu0YuyuzuJu5yLmBcBLPTF:KgBSKaEKlqoKzK5H2KIwu6c
TLSH
T18091A81131BB5281387E354C42A8972B429131B33429F66F7FBC48A28E2FE155DFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4889632-f4b9-403b-b99b-6f27272e6998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4889632-f4b9-403b-b99b-6f27272e6998.tmp
Size 27KB
SHA256 229c1c769d73064a3ad21162722bcd64ec4575729d78d872d0bebde9d18b6efa
MD5 65338667a66dfaca90df53a382377e10
SHA1 429924aff7d118319139e78e49cc21e740891f3b
SHA512 379b57c5ea1b570ccee69c5c8aba72f7f1b5e5f4ab29c88feafe9d7ed97f59f0f1d4a0aff56e3ef953d7b34809ba23b424036503141cf46d81fc6586946791dd
SSDEEP 768:layQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH32rowZ0o:layQRbrWvvlpZu1jaXKLf33NwZ0o
TLSH
T1E5C2F92B640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA994C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3134022-69a2-46de-bc26-f38d1eb8a9d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3134022-69a2-46de-bc26-f38d1eb8a9d3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f98e500-0fc8-4450-a2b3-5e4389cdb212.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3f98e500-0fc8-4450-a2b3-5e4389cdb212.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9bb0fb4-c615-42ca-880d-10238de06d49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a9bb0fb4-c615-42ca-880d-10238de06d49.tmp
Size 18KB
SHA256 440f7a114ae1817950aa4a310a925325a9a4563caf7bc91e7c5c4d33de92fd67
MD5 e9af3e9aa15a76608b090e0ae19eadf1
SHA1 31782a1b89fc5e6efdd439717f0fea335ba3673f
SHA512 ea70efc0873de4b1b6142a31a2a456e2f421f4c46f525e9fa79b79dff27d1708689b75446ec5128c8774f9c0e46bfccfecd5c7f554cb9e2aeedb3b7d3ae9a9ac
SSDEEP 384:IZcIhsNNPGTVRmipp5u8iqHtlpVZh6DKhHToN:2h7lkqTpfYGHTG
TLSH
T10E827C32AC786C7A6DE7E511F9473A035EB88177D3C86F84D4ECAB1D00EB2A81317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0f53427-163c-4aec-9472-eb4a5cd01b9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a0f53427-163c-4aec-9472-eb4a5cd01b9f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fe8d642546cb0b521473d54f2a6f3b3203526edc3bfef255eaded7129205c196
MD5 8afb813f74ff9ef4eb79dd15e519e9c2
SHA1 0c26830c89ebe5fe0cc8a2a7d3a3db8787a6ef95
SHA512 d54dfa273ebc38b602d6a3bae487c3a51471c93c9a1c9336843fe33fc17d7329c432aafe8304f42fbd807f7c579c22bc95f124953da13b6b9cdd145db1ea3ffc
TLSH
T1F241295CAAFD1144B3B76F5A9BF6A46D487FBD332E06D46D00110D4F0A22A40D872B37
MD5 SHA1 SHA512 TLSH

Submit Download