0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3976	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{A9E985E9-296B-4C58-8698-363F58E937D7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3860 wrote to memory of 1476	3860	msedge.exe	88
PID 3860 wrote to memory of 3976	3860	msedge.exe	89
PID 3860 wrote to memory of 4004	3860	msedge.exe	90
PID 3860 wrote to memory of 4004	3860	msedge.exe	90
PID 3860 wrote to memory of 4004	3860	msedge.exe	90
PID 3860 wrote to memory of 2064	3860	msedge.exe	91
PID 3860 wrote to memory of 2064	3860	msedge.exe	91
PID 3860 wrote to memory of 3300	3860	msedge.exe	92
PID 3860 wrote to memory of 1668	3860	msedge.exe	93
PID 3860 wrote to memory of 3300	3860	msedge.exe	92
PID 3860 wrote to memory of 3300	3860	msedge.exe	92
PID 3860 wrote to memory of 1668	3860	msedge.exe	93
PID 3860 wrote to memory of 1668	3860	msedge.exe	93
PID 3860 wrote to memory of 3832	3860	msedge.exe	95
PID 3860 wrote to memory of 3400	3860	msedge.exe	96
PID 3860 wrote to memory of 3832	3860	msedge.exe	95
PID 3860 wrote to memory of 3832	3860	msedge.exe	95
PID 3860 wrote to memory of 3400	3860	msedge.exe	96
PID 3860 wrote to memory of 3400	3860	msedge.exe	96
PID 3860 wrote to memory of 4524	3860	msedge.exe	99
PID 3860 wrote to memory of 2240	3860	msedge.exe	100
PID 3860 wrote to memory of 4524	3860	msedge.exe	99
PID 3860 wrote to memory of 2240	3860	msedge.exe	100
PID 3860 wrote to memory of 3252	3860	msedge.exe	104
PID 3860 wrote to memory of 4572	3860	msedge.exe	113
PID 3860 wrote to memory of 4624	3860	msedge.exe	114
PID 3860 wrote to memory of 2780	3860	msedge.exe	115
PID 3860 wrote to memory of 1704	3860	msedge.exe	124
PID 3860 wrote to memory of 1704	3860	msedge.exe	124
PID 3860 wrote to memory of 2092	3860	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffce085c188,0x7ffce085c194,0x7ffce085c1a0
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,424136256593281338,14010474718300912002,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,6915893853348396228,3533078786016991568,262144 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,6191747633584642589,14557916160079920547,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7778301844603305151,10660243955875090535,2097152 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,3029708292969846283,7836820187729510572,2097152 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,8257593654438907548,706979099622784727,2097152 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,16983901442872620185,2997758623079826978,2097152 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2783266137694495360,11487658092418666124,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14757544790896110295,10683166122497167674,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1627789031545567465,911792516694701477,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1627789031545567465,911792516694701477,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,7765860015003297652,6240076643349749219,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,872125050314667304,8178496056610661265,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,4829579976811199180,186915817828071982,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,9422641708340905311,13922324613234761143,524288 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,13873527037976698786,17238771007847543001,262144 --field-trial-handle=2228,i,18439388771688208621,15731981084478529022,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8e64af57-9312-41f8-bcd3-5367394ffb8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e64af57-9312-41f8-bcd3-5367394ffb8b.tmp
Size 21KB
SHA256 3018d8c672be857410e83e178b8be5fca6167fb2cd120cc050e1e43e9bb49db9
MD5 b0b004c69586d2cbe780104de55b5bce
SHA1 6fac79560ffd8c8e52a490fd1635191c52411878
SHA512 28d6eb3726894366fbf3e911842c619fb01a62957ee90bdf3133db7660b25a81e14d98240966b871a19adb388561c2bea3abdd19a30f24428cbfe3c2f5043222
SSDEEP 384:xiFiZcIqzsNO8TUNTUlIlBwzWKyfNe4OjTV92OqG7YjbNVZh6DKhHioi:YFQiLwg0SeLnWO0jbNfYGHi5
TLSH
T1A1A26D735C689D7BADF69A41F94A3603CFF480A7D995AA94D2CC9B0C11DB1DC130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18de691d-30a7-4938-99d4-73fb165da7f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\18de691d-30a7-4938-99d4-73fb165da7f0.tmp
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
MD5 60b4515826d1c9f4b017a7d286115708
SHA1 91a906bd437f5276b450fa960823a1d8884f5b5c
SHA512 49ec0ba508a1c4d76e366cceb731579d594d5a8727c9089704a8f0f492164a13db6579377d36e91cd39359f1ee2ac85e2aa9a737f1640db34a67d8a1c0d408df
TLSH
T176D080B49D685AE4D0A5307D1335454173DD97529603210D65D10A150D743D31551CE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

3aed8661-4f5a-461e-add1-7207908d2e49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3aed8661-4f5a-461e-add1-7207908d2e49.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

635e2ba4-5ab7-45fe-8973-b78c9e718715.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\635e2ba4-5ab7-45fe-8973-b78c9e718715.tmp
Size 10KB
SHA256 10e986bbdfbd1beb5438e75e591d0f4df6bb219d80573e1c35609e88763c1626
MD5 2f0661e4c7745f1b8672898642641903
SHA1 459afe1172497f6d112e5dd67ab0656e83b1b85c
SHA512 252640dac3aefbe6041813abe2dc6b4265d954d498d122d8df8de38af2d28a43d76151e0bf41def3c42841ef8361d679bb824f4fe38b3be62aa301b65fe83340
SSDEEP 192:sxZlR7Wu/fJsWMIdpHOHW6+WNGYRP06VJIg5wJ:sxZlku/fJsWVuHbGm5C
TLSH
T1C222C8527E28657B8CC7E20DBE25BF53D6F95432A1901E48AAFCC61C15E6ACD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67e0bf9e-cc6f-4266-b081-51c72f403239.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67e0bf9e-cc6f-4266-b081-51c72f403239.tmp
Size 9KB
SHA256 744f26c29537e64b247a021dae9eb83c78ba69c6ee9c03572fb5207b3e0c4b6c
MD5 4d2523dbc225735f252a1f6887fcbb46
SHA1 167770f0a78d36adfd2e8d4f9949323e0957f841
SHA512 cbcd0b294e0359f7fa73370ff8f955a18221fc7876a988d05188f2f7f9cf5e35b0623a492908841f054ffaed6cbc3c9308950d3a4c73311ab91cbb9df9b62ec2
SSDEEP 192:sxZlR7Wu/fJsFMIdpdOHW6+WNGYRPR6VJIgrJ:sxZlku/fJsFVAHbGme9
TLSH
T18112C8126E28A57B8CC7E20DBE25BF53D6F95432A1941E58EAFCC61C15E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79a4af6f-db38-487c-ba27-199b2ade6ce8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\79a4af6f-db38-487c-ba27-199b2ade6ce8.tmp
Size 10KB
SHA256 6c3ca716bbe9252df4e4ccddcf3888b9dd6368fe19584a661f3bf96b5ab9f2ae
MD5 ddbf18d74027cf2bca35daf353be4136
SHA1 bbb76d4ba8130992be4193808e4378b4c2384698
SHA512 be87bddd1395953d3a614d559faca73a5acef16893d9d68b73a116423848473b1208dd8b16fe33afd93deb8fde106622365545f7a602b49c153d90369d06b900
SSDEEP 192:sxZlR7Wu/fJsWMIdpdOHW6+WNGYRPu6VJIg5wJ:sxZlku/fJsWVAHbGmvC
TLSH
T1A722C8527E28657B8CC7E20DBB257F53D6F95432A1941E48AAFCC61C15E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fa6568e-68e8-46e7-a7ef-e7026b76a3d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fa6568e-68e8-46e7-a7ef-e7026b76a3d6.tmp
Size 9KB
SHA256 ec978d9f800dd01492e47d3b5b4e022a99767cea2879360c0eab718dc66ecc92
MD5 739ec416e4876e051aa976450f6a3576
SHA1 8f2635a14d08c64e31feb955cc9e8022a348f065
SHA512 859e0accfb830b1be102092330dbe6d3443d3d02da18b00ba2f0441230e87010d54483da45a0961d27e418f11d52ee6908c01f76d53419abe5476cddbb3181f6
SSDEEP 192:sxZlR7Wu/fJsSMIdpdOHW6+WNGYRPR6VJIg5aJ:sxZlku/fJsSVAHbGmeY
TLSH
T17D22C7127E28A57B8CC7D20DBB25BF53D6F95432A1941E48AAFCC61C15E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eea4190-ba25-4428-b639-2dd5cbe74977.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9eea4190-ba25-4428-b639-2dd5cbe74977.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3294892bc25aad0fb7b0d9ca1a9c96032374fc27f84daf103375c4d0eb37b95e
MD5 1d9e3035c03f02ce9c0d97147c991e7e
SHA1 a8024e6f65d4e997a46194509c70a94374081873
SHA512 27f46feee4a29cbd461c268893d1e085292889b0f681d082c7fdb07b143843c130d2765d567b63e5ae724757d2525e90566ff1f0078ce44e5f7ef79894ae2d61
TLSH
T19B616FF778ABA4D1F7A8A1BCAAD210D3B6B7749019673C0E1BB0DF79988A7185004093
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d95837de9db430cc3066be94aecf3a96e4257d596f920ec4bcf3f22124733db4
MD5 cae4b55936f698c111bee84563c9bda8
SHA1 332db5334843c89a7b539b4bd8191a92b6ea4032
SHA512 4ad7b318ae60d9c89b6392a295e2ed5b4885f6baf2e00e706e8a0dfb48ab7d8d5f3ad604a81004fc13c6b5882672b1b0a9a347481a5d96a50b27af02569af266
TLSH
T1F36180F778ABA4D1F7A8A0BCABD210D3B6B770A019673C0E1B74DF39988E7185004093
MD5 SHA1 SHA512 TLSH

Submit Download

938b6451-3fd0-4392-837c-f81ec82c8b71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\938b6451-3fd0-4392-837c-f81ec82c8b71.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0ab390b6-f458-404a-abf3-8071ad4bc2df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ab390b6-f458-404a-abf3-8071ad4bc2df.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e649fcea-256a-491c-926e-ce9cfa353fd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e649fcea-256a-491c-926e-ce9cfa353fd8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f3db7717-8190-4274-ae7d-b69c88dc4d61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f3db7717-8190-4274-ae7d-b69c88dc4d61.tmp
Size 949B
SHA256 42cd006de120ca36813b653a769bdc6383b5a4ee54d667b071b71b7b1d584410
MD5 eff2fce43628b85c4a5606c58e768424
SHA1 dc7f7694607b61e774fb5a76bc3707886271c4d5
SHA512 e4286d8b53a6d8b72006ba04651b45d22407006518edd30e7747eea89854d03b639ed044f27a061171a187e5ab2cde2ec9e6c0b6327c27f4e847914224cf9d75
TLSH
T1B3115BB3C3E585AEC90116F06A24AE2BCE1D0505421C7C1989D4EF6B97E3075E14199B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5d9f0bf081100e6c874f1a8af7035c113090b8a4574b121b6f16292e217839ec
MD5 10bf911e6b951abf4f88463b393cdaf0
SHA1 bc3796778394b4375b758fc0be6e39a1e2d224d5
SHA512 a142be27e1955ed39fbe84fdf928a41803e73a22c7314db7e6231c59a46b4a3d51999107c3a296923cff52f27efb5e4024d73a74149a52635a41818616e5caf0
SSDEEP 96:K0mFzKKkcmbOPCugYY+uohlQO+K4LQE+MGOp05goKBel:XZbOPCugYYdoh+OOLQERGOp0GC
TLSH
T1ED911E0032BB164139BD294C90B5C66B125231F33068E76BBFBD61A28E6FE045DFE5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4ff03f8-f678-441c-a0b7-a0adfc2e4435.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e4ff03f8-f678-441c-a0b7-a0adfc2e4435.tmp
Size 27KB
SHA256 3863143c758270b876eb75c411724faf4fe47c5399c660d59ec6fecb3631dc5a
MD5 0927aefbc17fd29206908f8b4f052b50
SHA1 19f9966ed163a6cdf2bafd5b2d32d2935960dc15
SHA512 ab2e01970c90d824407105096e48e004fc4e276a1a79e950d3369eebf68aaf8c83469c3c4d83e74df47ba3244e29a18ef06301e4c5201135321a16bd036c0e67
SSDEEP 768:zLK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k34ro/+dB:zLK9uzYWvcQWsu1ja0HL7Q3D/+dB
TLSH
T1F9C20A3F640CCB7E4FC01A9DDC5A6F973E9802D7A6688D4047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

dd8e4bfd-3b24-4e62-a9b9-29dfd2c934a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dd8e4bfd-3b24-4e62-a9b9-29dfd2c934a9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d32c5324-ee27-4437-bcfb-253e741b436a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d32c5324-ee27-4437-bcfb-253e741b436a.tmp
Size 8KB
SHA256 ae3da3a5bdeecb479fd2938398d4e1315b3d5d6a08ba01aac745d7e6d9b04fde
MD5 3db8477878b1db7f44edd53f8f79ca32
SHA1 cb8b6d28a477323d4bbd20fbb4fd169170517cd5
SHA512 b7065f86b7407bb34eac04fa67af9e6f821147eabef254a0118fd28f726beade7bf66485f8c7799b900904afdd2e3ddee01d745d9faf710c051cd2b363a628e6
SSDEEP 192:SONf6y2QmiUyLyPVOCTVg+2OqR07YjpT3U8q3U6:SONf6tYuVOCTV92OqG7YjuNU6
TLSH
T1D9120835BC386C775DE3A941F48B32139EA88167EA457F90D5DC2E1C01EF6AC630AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfc0f226-e076-436c-8b60-c8c44efbb594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfc0f226-e076-436c-8b60-c8c44efbb594.tmp
Size 8KB
SHA256 118e4fd32f826630d19a5852c604b853a411835d56bbf19727cb8fa743f01801
MD5 2a16c1a5686f9555ef00a8e36120a49b
SHA1 312dba3e41d91208c2a5580c6ee9e962ee854b78
SHA512 e5bc344bbf546ae21ba43bc9cdd4dc7ebd3d7ee0830923bee3b536a80d671f45f25046314022529cc82a8c2fb713aea0a5aad6ee449f18d332276043ebc73427
SSDEEP 192:SON66ygpQmiUyUPtOCTVg+2OqR0BzPcNU6:SON66lHNtOCTV92OqGNEU6
TLSH
T1D602D634BC686CBB8EF3AE46F48A36139FE8116BE9512B84D9D81E1C01D765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c48cfe43-8bc2-4539-8f4f-6e05efeef0b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c48cfe43-8bc2-4539-8f4f-6e05efeef0b6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f75a5b77-9406-4a04-acb6-22e394472552.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f75a5b77-9406-4a04-acb6-22e394472552.tmp
Size 18KB
SHA256 11bbbb008b5c980295b9427631ab19a122a48009137de9d98205ae9b25e5b4f3
MD5 77754a5861d5af3adc614e816be7913f
SHA1 c1a4af6774468f4e3cca9301c53d1c7c1bdb2e1b
SHA512 d4ac1248f50ab0e8502cf73b8bb8acb17796cd22655cd68004a2dbd8a2d047f3a6b8cfa9e6f0a7b9d6406a418690ab3d6308ac14dd038b7fa7766e1937e038bf
SSDEEP 384:NZcIhsN+BwzWKyfNe4OjTV92OqG7YjDNVZh6DKhHioi:VhISeLnWO0jDNfYGHi5
TLSH
T10B829F317C386D7658F7A541F44736078FF880A3E6C56F9490DCAB0D11EB6A8230BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb99b517-0fb0-4bfc-a283-bdf98fa8b6d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb99b517-0fb0-4bfc-a283-bdf98fa8b6d2.tmp
Size 18KB
SHA256 651573a546b0834343051f7e8beb6727a9f4de44792f837b1928950f73541512
MD5 4cb79b72918cd649c265eba38a4b6630
SHA1 c18dcb1cc680728f8c54aa156fbd5fd3ec55c7e7
SHA512 4e483eb54accc50416ce06cc97bf3639df2230acbf1f38b197060b343b697cf16c2271bb3122ce32536229527d487973bbce203c891cdce1d9ac40237dd9c986
SSDEEP 384:WZcIhsN+UwzWKyfNe4OjTV92OqG7YjDNVZh6DKhHioi:EhvSeLnWO0jDNfYGHi5
TLSH
T1CB828F31AC786D7658F7A541F44736078FF881A3E6856FD490DCAB0D11EB6A8231BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4a0e8cae8f608d40ce0e833f633c708bd4e3bdc8fc28f1c7b13e3ac6fe9a67d7
MD5 0e48dbdfe498615c00e81801b577e04a
SHA1 4990a8ad9039e5dfbcb80436b574229d7d697f88
SHA512 144a6ec01fcc2b67382bc8a0c1aef21f1eefa72c865a5859bc9f64f877705f3171873ab4fb5bc2e3ce21cbd83872275caf7643a0d7eb6982964579902f9278d4
TLSH
T15741295DB6EA1148B7736E5AABF6A86D847EB9372F07D18E10110E4E0623B41C871B37
MD5 SHA1 SHA512 TLSH

Submit Download