0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/language/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2716	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{7C4FE7F0-0C02-4788-82D7-CB4A505673FD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 452	4540	msedge.exe	86
PID 4540 wrote to memory of 2480	4540	msedge.exe	87
PID 4540 wrote to memory of 2716	4540	msedge.exe	88
PID 4540 wrote to memory of 2480	4540	msedge.exe	87
PID 4540 wrote to memory of 2480	4540	msedge.exe	87
PID 4540 wrote to memory of 2252	4540	msedge.exe	89
PID 4540 wrote to memory of 2252	4540	msedge.exe	89
PID 4540 wrote to memory of 1872	4540	msedge.exe	91
PID 4540 wrote to memory of 1872	4540	msedge.exe	91
PID 4540 wrote to memory of 1872	4540	msedge.exe	91
PID 4540 wrote to memory of 2788	4540	msedge.exe	92
PID 4540 wrote to memory of 2788	4540	msedge.exe	92
PID 4540 wrote to memory of 2788	4540	msedge.exe	92
PID 4540 wrote to memory of 4080	4540	msedge.exe	93
PID 4540 wrote to memory of 4080	4540	msedge.exe	93
PID 4540 wrote to memory of 4080	4540	msedge.exe	93
PID 4540 wrote to memory of 3848	4540	msedge.exe	94
PID 4540 wrote to memory of 3848	4540	msedge.exe	94
PID 4540 wrote to memory of 3848	4540	msedge.exe	94
PID 4540 wrote to memory of 4892	4540	msedge.exe	99
PID 4540 wrote to memory of 4892	4540	msedge.exe	99
PID 4540 wrote to memory of 1208	4540	msedge.exe	100
PID 4540 wrote to memory of 1208	4540	msedge.exe	100
PID 4540 wrote to memory of 5068	4540	msedge.exe	105
PID 4540 wrote to memory of 2392	4540	msedge.exe	112
PID 4540 wrote to memory of 3716	4540	msedge.exe	113
PID 4540 wrote to memory of 1748	4540	msedge.exe	114
PID 4540 wrote to memory of 1444	4540	msedge.exe	121
PID 4540 wrote to memory of 1444	4540	msedge.exe	121
PID 4540 wrote to memory of 768	4540	msedge.exe	124
PID 4540 wrote to memory of 768	4540	msedge.exe	124
PID 4540 wrote to memory of 4888	4540	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\language\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff87b9ac188,0x7ff87b9ac194,0x7ff87b9ac1a0
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,2133112975866188655,5834904648142270777,262144 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,11573514582702967990,9883717972142056485,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,15073922407813136617,3356191952239272347,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,14457480562174975651,15649747426350875569,2097152 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,2745632417224718383,16127850178110419274,2097152 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,18184266248457449374,2355281925524707430,2097152 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,17320176356214867580,17108381903852070868,2097152 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,5458738753100064641,16796625394836743517,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,9561853897214977403,13777100430744320159,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7831250709923276741,3645708240658910051,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7831250709923276741,3645708240658910051,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,4212021023303806464,15592133412104351615,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,11835780260484017134,17085064261000819217,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,10895215597923815686,3192220572094361812,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,11060645582070673996,6409109060444582006,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,9201041064165921893,17196739770259013941,524288 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6696,i,2418762742688582130,8977915641163031956,262144 --field-trial-handle=2272,i,5045835099333392050,7523200631772068812,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4888

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

36eff46f-e76a-48a8-ba43-38e982b90750.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36eff46f-e76a-48a8-ba43-38e982b90750.tmp
Size 18KB
SHA256 5953393a6c594da4a581d86cbaaed88f92c0cc9e27230c1d66e67060096b716b
MD5 3513cfb4bc2d557cec6def57d720dce0
SHA1 19954406594989a79eb61c657d4410cd88e0a801
SHA512 811e520be155c0383e6a1981753cf18d7b697816f9dfa30b1fda058953eef46d8a8eed919c1edd21e72df7c5fc518fd6c72be1eaf96c6c2f3bebb3c582132789
SSDEEP 384:BZcIhsNhTs1r1MLqiLzIGmpE8ro7XPiyVJVZh6DKhHdo+:JhFifSKzPiufYGHdV
TLSH
T1D8827D729C786C7A5DF3E545F8463913AEB88027D6C85F40D5ECAB1D00EF658131BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ef93c4a-aabe-49cb-b231-78ba6a2b6115.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ef93c4a-aabe-49cb-b231-78ba6a2b6115.tmp
Size 18KB
SHA256 e1a9828651ea5d20095537602202755ca7c78ae65b54f6b3410dc9fe6bf4c00f
MD5 ede0ff00d067975377f336a7c719c0b0
SHA1 d188b550063b538f3a110a8ae10cdcb1f36df108
SHA512 f905410b90152f065bbcc154d39cd12934849c1aeb228c752de2d4f137a6c073c0a3d598727b7e4d9ab29c020386519eb14987d73f47b4b9c3e495e9f73f9a67
SSDEEP 384:pZcIhsNh0s1r1MLqiLzIGmpE8ro7XPiyVJVZh6DKhHdo+:hhWifSKzPiufYGHdV
TLSH
T1D4827C729C786CBA5DF3E545F84639139EB88027D6C85F40D5DCAB1D00EF658131B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ef275f0-b4fd-462d-b895-9a06d38e971c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ef275f0-b4fd-462d-b895-9a06d38e971c.tmp
Size 8KB
SHA256 6c34f97667328fb1e60d79153962e16ae6d301e63e441962682445180e7f0646
MD5 e86d9023c7b68525031366c972310d74
SHA1 c8ebe49a0b659d9443f0972ee164bfb7a34b7194
SHA512 ace70fdfd2b1830f200a6920cdcd18fe430f0e0506cd00f002834b04cf28ea56949631d66585835b4eb64933e04a519dcc9100b016504fa24c71448eeec38a97
SSDEEP 192:aONM6IEtQmiUygh+TJuIGmpUjzor0Ao7XEeUA27HsqIv9JU6:aONM6DrL+JuIGmpE8ro7XcHyVJU6
TLSH
T161121B36D878BC7F5EA3A944B4473913AD654127DA886F50E6DC2B1C01EF65C130E827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

3775a8b7-6c2f-400d-a7c2-ce2e3636b49c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3775a8b7-6c2f-400d-a7c2-ce2e3636b49c.tmp
Size 9KB
SHA256 385d6de104e593cc18fc88cc567b88b82541711b896a999b9b066bcbd30dde2f
MD5 4f9a60c529b03f662b5cd80c96042f71
SHA1 55c7e1afb29263f988d19a6f225525d7ca6d2bfc
SHA512 1ce61f238f59a94f81f214333ba6560e08b8cc10d56326330b8f871a1def363e2b94a685080ca9ca52f7c8837cbeadb81623ef4897aec1c63d848ba22565f7e0
SSDEEP 192:sxZFRgW//fss2IDIdpdaHW6+WNGYapY8TIg5KJ:sxZF1//fss2TAHbGFY
TLSH
T1A722B652BE28A57B8CC7D20DBB65BF53E6F9143251D11E48AAFC961C04E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57d6d9c9-a269-4dc1-a643-6bd25df3f394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57d6d9c9-a269-4dc1-a643-6bd25df3f394.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86b97b35-fcd8-4e1f-bb37-1ff10302f127.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86b97b35-fcd8-4e1f-bb37-1ff10302f127.tmp
Size 10KB
SHA256 987c902e83ae1dfd3c95026d558137d0fa72c4443b4500765450fdaf4fa92e84
MD5 e4d0f5c5069a543b187aef4c75f417e6
SHA1 3a654eb1c4ab06dbb0262fb0af9cfdcee86dc1c3
SHA512 0d24a2b8f3e5ced4b5ad42cfd4821a4fc4fe9034295d19893017a91d29e1b31f9fd6947ca4c56c03fea8d2db9df1d763a4741d47c028b16bcaf24fbe60811f4e
SSDEEP 192:sxZFRgW//fssAOIDIdpHaHW6+WNGYapD78TIg5gJ:sxZF1//fssvT6HbG5CC
TLSH
T19622D752BE28A97B8CC7E20DBB25BF53E6F9103251901E48AAFCC61C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9516d372-8b60-4c5b-8c69-8e74e520efdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9516d372-8b60-4c5b-8c69-8e74e520efdd.tmp
Size 27KB
SHA256 0fef3f1185713d3a064b49e93e6d7b8048356aea07889c709e18df9dae588f96
MD5 506275ce775f6cffb0f3767efab80460
SHA1 2421ae561a7db34fe4c41724000a1026552ed371
SHA512 6eea3463e94be969d3dc31550b2380ee189657ffd3f5a9fd6bddb1b08d2d21f677ada0aa0b8e70b9a66e2178558b59f848ae902dbe11cd46741b1bc7f4ae92c7
SSDEEP 768:0EWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Lro4JHfeAmR5:0EWPcLKWvKeEeu1jaClLiF744JHWAmR5
TLSH
T1CFC2FA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a4078d12d600b7d44c39aa7c9dfbbff858a39371896edd06a35dcb8e2eaf3920
MD5 6f282488d846e7b076c014b864ee3f5c
SHA1 80989f36e1d27d9e2c09c61b7e0d2cd27d872213
SHA512 bd37462cae25808667d093fc520d8124b4593cb83f04094745b5da1097e19312672ca3cf82f0c9921a544829585a862436db03a0c2e71646d710eb27b9ef99b2
TLSH
T19A51C4C516A58FA0FBBB857090C432433B3489F3D2932E42779DE0FA0D65B16BCDA004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 14db45486993f3f74d8203df59943fe76abe5ea2188b16ae51b0606f64e4a24c
MD5 54f233094c25fe069313d2333a7a8442
SHA1 5c587ae352ca219f16d79447bb0f899257869ec9
SHA512 7946d34864492b072fb21d388096af684e6f3f2328b2e1330c41481038fc08f3821b2d68929fd7e2fb7ff11a3011293b04b5e064f47f0c45ad0b7c483276402c
TLSH
T17D51C4C516958FA0FBBB857090D432433B3489F3D2932E02779DE0FA1D61B16BCDA004
MD5 SHA1 SHA512 TLSH

Submit Download

e6067dd0-043e-45c1-a629-842fe9aaf423.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e6067dd0-043e-45c1-a629-842fe9aaf423.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9d84dba9-ff21-4678-aa9f-d9dab0747f5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d84dba9-ff21-4678-aa9f-d9dab0747f5a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

be72d1a5-934c-46c4-b3a8-b278ce5b6907.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\be72d1a5-934c-46c4-b3a8-b278ce5b6907.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d0ff819a-6b1e-4491-8450-1171fb2f5716.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d0ff819a-6b1e-4491-8450-1171fb2f5716.tmp
Size 949B
SHA256 e9f63bdae49ba3aecffb92fa745b123817bbca375296aebb587f67b59905d67f
MD5 4af2fc592bae45781de35690d238b612
SHA1 2cdfe64fb54769b0847808db9bc93f348aaea59d
SHA512 b8b29b2aca194d1d9943abd986d7ab932735d3907cfd6910a878eee07328cc340bcb2b440c852237f2c95df035f1bbb757e3ebaa42fc932959337a89de2499c8
TLSH
T10E117DF3C3D585AE891116F06A28EE2BCE2D0506421C7D1989D4EF2793F3475D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

a408bead-3c89-488d-a01c-77a9970b99df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a408bead-3c89-488d-a01c-77a9970b99df.tmp
Size 10KB
SHA256 b3510e37aa5827f1c43f8d560f41b398baead984b321a75e97b72101c5c6f1c8
MD5 396812bf2d09abe767bcb8a1dafe1a80
SHA1 6f64c75b36cdb392bde1905f6e4bbac2ad13822b
SHA512 fc639ed7f768cde04ec404af340cb2ea29b6b54b758c8d14f6c8c256b0d87c05288c2bdb1659ee4135d5aac5d8dc93473dac5f40634e03c59f3f8a644a2c3feb
SSDEEP 192:sxZFRgW//fssAOIDIdpdaHW6+WNGYapk8TIg5gJ:sxZF1//fssvTAHbGtC
TLSH
T12422C752BE28A97B8CC7E20DBB257F53E6F9503251911E48AAFCC61C15E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de2b0300-501e-4331-abc4-114fb6b06916.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de2b0300-501e-4331-abc4-114fb6b06916.tmp
Size 9KB
SHA256 97452a12575a576fa39c42cf6319aead8923b318f818c76972f59a00d07c0555
MD5 e29539e4008031edd0c9ab42a27819ca
SHA1 996c61a2e6c7e6ebb6adba5431e63902be87aa05
SHA512 6980066563e2a3fb466b8bab6cfd534e4ab3e3444f68d3b44d33e2c247c56ca4b1e85a301104563e513769da632e7b6ccf5be5ed71b4dd66d2646f2e2120b63e
SSDEEP 192:sxZFRgW//fssKIDIdpdaHW6+WNGYapY8TIgrJ:sxZF1//fssKTAHbGF9
TLSH
T15212B652AE28A57B8CC7D20DBB25BF53E6F9143251D11E48EAFC961C08E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea48a523-ed7f-42c9-a733-b508a723d584.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ea48a523-ed7f-42c9-a733-b508a723d584.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af5f4d0b-7f77-4cf8-b8c0-c733774f5f66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af5f4d0b-7f77-4cf8-b8c0-c733774f5f66.tmp
Size 21KB
SHA256 9edd57eca0e195bdc0e4516e6a1ead9ed469c6e8f34bd5eb77f834851c8ed11d
MD5 08f45cef37df281256e6cfdcf1267840
SHA1 2eef069895e98c187dda2789728d63ed7d45e054
SHA512 bab07bc9eaff79fe1af312de40bcb8ba68206566ad92c1df054180d0a5ccc5d847c7d8f561472443a32c15f4e038689815bdab3c95b07ea162257d2ac9bc0c7d
SSDEEP 384:jiFiZcI4qzsNz8TUNTUlIlTs1r1MLqiLzIGmpE8ro7Xv0iyVJVZh6DKhHdo+:OFQXOwgQifSKzv0iufYGHdV
TLSH
T14EA26D739CB89C7FADF7AA45F84639039EB44067C6C9AB50E2DCAB0D10DB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9c0b854-6894-478f-952a-8f387701c08d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9c0b854-6894-478f-952a-8f387701c08d.tmp
Size 8KB
SHA256 a442faa29b5cf73b48a9584c2471a4f3d3a8bac6482a91f236248ac2707f3316
MD5 6ff00fb61aa7e7b049d8b07226397a91
SHA1 8e675c6fb388e1a8d0cfcb324d0c6195554aa252
SHA512 1b01cf0bc54929e559f1291df9854a727cb4cc49e835ea2997072aaac2e469071510838c70a384252b5cd8c56cf48f60c2175078760ad6c32935056a498c17dc
SSDEEP 192:aON/6IE7QmiUyl+TPuIGmpUjzor0AxC7s0+U6:aON/6DtHPuIGmpE8rys3U6
TLSH
T14002EA35EC787CBB9FF3AE09B4872A23AEA5112BD5952F44DAD81B1D00D764C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a6f8462-4751-4bdb-b4a9-277d7b0c1c80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7a6f8462-4751-4bdb-b4a9-277d7b0c1c80.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a55293f3512fe3f590ba7c21deb58c7aba25e4d54803e5588516b8e65c67b518
MD5 60883fc025068fd9c4c8456f869025e1
SHA1 10f55c42c38ca291a81502000ca621f0b5642769
SHA512 0f385d55f8921ddf55f5b05b0c32b804a5ba85cbad3b4bdeea651a3d7ba363a316fb9b1e2c170eb4d10d8dc8347f5d2efb29f02e1b899479222885c00109ecca
TLSH
T1A8412A6DE6FD114CB3B3AE56AFF6A86D487ABC372E06D04D00010E4F0562A40D9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download