0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Academy-course-based-learning-management-system/Academy-LMS/application/config/index.html
Size 131B
Sample261005-arma6sty9k
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2420	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{0C0610E1-66AC-466B-B3B1-D21733DC85C8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3832	msedge.exe
3832	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4968 wrote to memory of 2452	4968	msedge.exe	87
PID 4968 wrote to memory of 2420	4968	msedge.exe	88
PID 4968 wrote to memory of 896	4968	msedge.exe	89
PID 4968 wrote to memory of 896	4968	msedge.exe	89
PID 4968 wrote to memory of 896	4968	msedge.exe	89
PID 4968 wrote to memory of 4428	4968	msedge.exe	91
PID 4968 wrote to memory of 4428	4968	msedge.exe	91
PID 4968 wrote to memory of 3632	4968	msedge.exe	92
PID 4968 wrote to memory of 3632	4968	msedge.exe	92
PID 4968 wrote to memory of 3632	4968	msedge.exe	92
PID 4968 wrote to memory of 3524	4968	msedge.exe	93
PID 4968 wrote to memory of 3524	4968	msedge.exe	93
PID 4968 wrote to memory of 3524	4968	msedge.exe	93
PID 4968 wrote to memory of 2772	4968	msedge.exe	94
PID 4968 wrote to memory of 4088	4968	msedge.exe	95
PID 4968 wrote to memory of 2772	4968	msedge.exe	94
PID 4968 wrote to memory of 2772	4968	msedge.exe	94
PID 4968 wrote to memory of 4088	4968	msedge.exe	95
PID 4968 wrote to memory of 4088	4968	msedge.exe	95
PID 4968 wrote to memory of 3448	4968	msedge.exe	98
PID 4968 wrote to memory of 2880	4968	msedge.exe	99
PID 4968 wrote to memory of 3448	4968	msedge.exe	98
PID 4968 wrote to memory of 2880	4968	msedge.exe	99
PID 4968 wrote to memory of 4584	4968	msedge.exe	101
PID 4968 wrote to memory of 4148	4968	msedge.exe	110
PID 4968 wrote to memory of 3736	4968	msedge.exe	111
PID 4968 wrote to memory of 3864	4968	msedge.exe	112
PID 4968 wrote to memory of 1100	4968	msedge.exe	121
PID 4968 wrote to memory of 1100	4968	msedge.exe	121
PID 4968 wrote to memory of 3832	4968	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Academy-course-based-learning-management-system\Academy-LMS\application\config\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffacc05c188,0x7ffacc05c194,0x7ffacc05c1a0
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,7175782190577027169,16943342511907635216,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7150827242096802147,2260808479742673712,262144 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2668,i,13187919494332504232,17571157602335190071,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,12521997485527431434,18101473715692381437,2097152 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14361442017507995983,15872633421409829833,2097152 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,17628492862989359248,15349256254966555869,2097152 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,15380620647484473512,14291248571568314252,2097152 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,14630342122188668533,5510501109113056850,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,7808844045688514856,15154361130537533485,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,2424400554115214533,2757782995615356216,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,2424400554115214533,2757782995615356216,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,9992633658652223256,16127579197777262829,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,5853366553706041694,10769412741419357362,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,4919957231633313735,10960420640778649402,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,14947453062348622920,826517017813734326,524288 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2176,i,5171318437482624424,2171776252291676788,262144 --field-trial-handle=2304,i,15929630256266267356,6075165928132190107,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3832

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

42a8328d-36da-4a54-b451-7b29e80cc03d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\42a8328d-36da-4a54-b451-7b29e80cc03d.tmp
Size 18KB
SHA256 9409e9c3ec2b389abc78340656bfc9ec81439f7f506f5cdb3c1a43c8cfaf310c
MD5 e9de042fbfcf5e1b78a1145276e579cb
SHA1 54751dfb269f43d9a366153ce01dee6d80d4a61c
SHA512 0a366c46eb9a3512dbd19385903c74847dc64f49b203ed6c4e7aede73485c6944d38bf056b6058b0ca32472fa9ecc7ee232d56709997f41f3a98d83021e78894
SSDEEP 384:9ZcIhsNC4e1zlaJ+zIGmf9waviAVZh6DKhHBoN:lh16IAuiiAfYGHBG
TLSH
T16B828E32ECBCAC765DF7A545E8463E135EB88163D7C86B9494DC970D00EB2581317E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d81505c-314b-4783-b109-60b913eb5e3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d81505c-314b-4783-b109-60b913eb5e3d.tmp
Size 18KB
SHA256 76a320cdc972db3d9b484aca54fd8254944e7543c8725e50cd10f6f2dbdc74bb
MD5 f451971ac3a04c0180305e2aa3dfe86d
SHA1 9f919a75a3975427a022e9438e176ff484b6b795
SHA512 b4db876ba6606b0bfd2635202966393c6d46cfa6339d255e6d0302a42f57fdb4a97b05a443542bfccce2377339cd4ff87f58127b714daabe1ad6293ff19a98d6
SSDEEP 384:3ZcIhsNC9e1zlaJ+zIGmf9waviAVZh6DKhHBoN:/ha6IAuiiAfYGHBG
TLSH
T149828D72ECBCAC765DF7A545E8863E135EB88173D3C86F9494DC9B0D00EB2581317A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

28b714d8-3eef-4eb0-8bb3-80ac22455d69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28b714d8-3eef-4eb0-8bb3-80ac22455d69.tmp
Size 10KB
SHA256 09a676920b1c1ababbfe4657f9f6a16a4770fad70160b07234edb84bae99112d
MD5 ed28cbfc4b51e2c257ea3f2be211ef6c
SHA1 2a2e4aec6a14741e6862f8316a28cbbb68552f81
SHA512 31befa5009e1af83ed7fa972dcd812748ef706d204589fd85f0ac93555e8d4ff9c176e7a2e19ce59ec6b2758b7661dd898a0a0b2227432feaa9006db33c78fc2
SSDEEP 192:sxZVRm3WM/fQszJNIdpdQHW6+WNGYapXLhIg5pJ:sxZVFM/fQsz8CHbGnJ
TLSH
T12A22B752AE28697B8CCBE20DBB257F53E6F9503291901E58BAFCC61C15E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ee9be39-5389-4ff5-aa15-ad609d9be99d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4ee9be39-5389-4ff5-aa15-ad609d9be99d.tmp
Size 9KB
SHA256 67478c436a6cbc302d8c540b6dfba0411e996a2c9fa8779c719c6beed7ec9c39
MD5 4316d369cbac01c1f49d8e3e753c696f
SHA1 46aa10a3d77784466aa40fdfc8e6632dc814ee63
SHA512 581a214a1ce00626b58204d7de08d4c06aab3710adf6bd49c18bf4e192c75e160409effa52a17e9da4c378cb1a0a74d0a70678387911f2c5aeb2779ea034f132
SSDEEP 192:sxZVRm3WM/fQs1JNIdpdQHW6+WNGYapYLhIgrJ:sxZVFM/fQs18CHbGC9
TLSH
T12B12A612AE28A97B8CCBE21DBB257F53D6F9543251D41E58EAFCC61C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

513ae87d-73ce-44c7-ad36-bb0f0ed53146.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\513ae87d-73ce-44c7-ad36-bb0f0ed53146.tmp
Size 10KB
SHA256 bb72dfbf93d0280474ffdfd0d74f968868e7aa555a9e202bb404e2a20dced0be
MD5 e7892ae9aded8f6d875d1f7306872ad0
SHA1 79c56735f2b7d34b323074890a14a982f5507083
SHA512 0dbbed7280ebb902ed733764b4c5134e2e50e7f6d9eb09618b470f0588bfba27ef414f354dd25e16ea4e5624121a0d78531d25f61d3bdb8ced61eae213e83ffe
SSDEEP 192:sxZVRm3WM/fQszJNIdpHQHW6+WNGYapDLhIg5pJ:sxZVFM/fQsz8wHbG7J
TLSH
T13F22B752AE28697B8CCBE20DBB257F53E6F9543291901E48BAFCC61C15E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62a6b6e0-204f-4e68-a39d-eda53373b065.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62a6b6e0-204f-4e68-a39d-eda53373b065.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a58eb069ecb85660aa49ab0a784c698064341169f8f39f984e471f5e68242556
MD5 2078b4909f96263899c1515dca7e6ea8
SHA1 7b68c120c304ee8131882885016dc41ae5cb3139
SHA512 c129864d83ecedcb098807d0e861915591406ef1a7de614a29e5fd36562822f8554ac52f07da4d37827c5647b0651db93341e03d58f6edda54b33c4cff71f172
TLSH
T1AC51008BAE604C51FF671332B2D53383B63891A53E930E420FA1D7FB8D16775591806B
MD5 SHA1 SHA512 TLSH

Submit Download

fdf9a57c-d45c-42f5-af2a-33abb7dd4853.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fdf9a57c-d45c-42f5-af2a-33abb7dd4853.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1b3d2b92-2abb-4a22-9a29-d6eae3e7726c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b3d2b92-2abb-4a22-9a29-d6eae3e7726c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

3dfcb695-86cc-4683-a724-996bb471b2f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3dfcb695-86cc-4683-a724-996bb471b2f7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fa1eed8e-2ff1-4b06-b899-e884a9dbae69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa1eed8e-2ff1-4b06-b899-e884a9dbae69.tmp
Size 949B
SHA256 ab1ff7dd2f2104234c1eb048a98ecc7103d9ba6f6122c4700da9bd9d7d5d2a54
MD5 c4fd3fa5ca31baef7e94e8203f1039da
SHA1 35b97be1ae963c33b87bdcdc1fbfe03a75b8e1be
SHA512 7f5916f468c6b24b94085a06fb96f893bab471032e5b26de1223f40265c4ee4ce30f2a27e4e9e4d6fcdc5befbce294c8e305195b60ce260be3d5815f20f2dcb9
TLSH
T199117DF3C3D595AE891116F06A24AE2BCE1D0606431C7C1989D4EF67D3E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 badc5a3f5402985523b62f062859ccc6c65b968baf71501e872895589b89eb21
MD5 8152e3321edcbbd4cd1b63ccbed5cb9c
SHA1 83649f02b3809db5469adbbf1354a059b158d63c
SHA512 fc9ed5b0d3a3c0d1ac93d17ead84fc298e5a7c76e954dbbc0f45293afac431f8959498c47dcc67f5a9c8b814fd9dd5797ebcdaa592dd9153cd329a38dc52419d
SSDEEP 48:K0Ujiu8+SbbiRqISGbK9i1wbxULY5ayoyLwfWaAqefbWt2ISyfK9O1UfxoPYVGa4:KYj+KwciOv6Kcg7TaKccul
TLSH
T17591801132BB5241387D394C62A89B2B025235F33478E66B7BBC42A5DE2FE005DFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d92cc58a-43fa-44ac-90a9-ba9ebf19774b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d92cc58a-43fa-44ac-90a9-ba9ebf19774b.tmp
Size 27KB
SHA256 e6cd34e22f885abd9412193bf3044323e42d07811bfe7da23bca80cbde00aaa1
MD5 0b922f8ec16a7063f121d950df789a74
SHA1 918e1991fc318a84df5513a77606390220ad1c63
SHA512 0d194576fdc14cf8e73c6e4bf15afbfd5ea121032f5ae8c5ecc8bd4b08c09a7e7849acd98cc7d9b44ffc332e3eb31af5c9b4e891f9d8f218d725d8b2185a276a
SSDEEP 768:P1WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7oro4pfe9mRe:P1WPcLKWvKeEeu1jaClLiF7T4pW9mRe
TLSH
T17EC2EA3B640CCB7E5FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0719b6a-025f-4c3a-a75a-2dcfcf9409db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0719b6a-025f-4c3a-a75a-2dcfcf9409db.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbf05c19-c862-4f34-b80e-c67aa2cbc4bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbf05c19-c862-4f34-b80e-c67aa2cbc4bd.tmp
Size 9KB
SHA256 5212649a0343b195f8c40cf34cc083ecaddc38c9b1c2ca4134d55e1661fa70e2
MD5 564910b440c86dcb9958b1d1f22988fc
SHA1 de7a613ec895e16a7c2d4ae5d262656c208549d1
SHA512 b2fa8f667b654aafccff0d082647b93d9afbfe722f002e331fba10499837d046945ebd3e341c9e3cdae852ced61be9a9c735ca7206e1e8b5aaf9ff422d223043
SSDEEP 192:sxZVRm3WM/fQsOJNIdpdQHW6+WNGYapYLhIg5LJ:sxZVFM/fQsO8CHbGCX
TLSH
T17D22B612AE38A97B8CCBD20DBB257F53D6F9543291D01E58AAFCC61C04E66DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

beaad84e-ed3d-42a8-95e4-34b946347a2e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\beaad84e-ed3d-42a8-95e4-34b946347a2e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4e2bf9e-d287-4d83-aab1-1d9a09987c90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4e2bf9e-d287-4d83-aab1-1d9a09987c90.tmp
Size 8KB
SHA256 2f7035ee519cce7f59f450e5a2313cdf7fee1aa8cbc66c7cef8993e3c6971350
MD5 31f5f5675cacfe7d7234874b8ca461b1
SHA1 76a295312723a02436f40212f923134254378bd0
SHA512 c7305860803cb094bfde46a4fa8c72bb907bba47bf8ef6ca8b6bd432f9f2da6af49de72efdc2eb69d73c7b39472defc6502c8524e602ca9d7e270642bca690bc
SSDEEP 192:aONU6IE7QmiUyZ6TPuIGmfpL5DC7sHAU6:aONU6DtLPuIGmf96sgU6
TLSH
T18602F835EC787C7B9EF3AD49F4877B236EA5112BE5942F84D9E85A0D00DB24C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b980539e-070f-4820-81db-b4704d1bde41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b980539e-070f-4820-81db-b4704d1bde41.tmp
Size 8KB
SHA256 8e1585a14be420a45fa6a333024611e6d481d17733ebec0f8536d47f076fa943
MD5 d43c075b288fa0475ba986f84312ee8c
SHA1 34e9651838af0c9c952ef28a1da32f232310b743
SHA512 4df39de634e03f5be117d957d32cd57488c04eb16e149122b653443eee75b36e0b3fe98bed943b6328af280c1d69ca61830db339c221baef60281f740844736e
SSDEEP 192:aONr6IEoQmiUykz6T6uIGmfpL5iaU27HhqtU6:aONr6DIP06uIGmf9watHAU6
TLSH
T1D8120932ECB8BC7B9EA3A944B4873A135EA54227D6887F90D5DC1A0C01EF25C130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d59c7364-52c9-4c1d-9ee0-e5031ada2381.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d59c7364-52c9-4c1d-9ee0-e5031ada2381.tmp
Size 21KB
SHA256 827a84539ce5763fdbcaf58f8ebed5e34187d60f405a5a5b1603f6199e2b69bd
MD5 3ac728a668dc31bdb80ad6e016391228
SHA1 b0317314a5f2fc9f2392aabab6e919151b2b2a22
SHA512 9a6d4af7738b433415c87b4e9dd5f129bf863006d15e56cf30af081d8adce77ff64a2bbe82d58c6be4b1739d0d669cbd9de777c51fc9b143c64d4eab25665d8a
SSDEEP 384:yiFiZcIEzsNa8TUNTUlIl9e1zlaJ+zIGmf9wacViAVZh6DKhHBoN:5FQ4Lwg26IAuPViAfYGHBG
TLSH
T168A27E73DCA8D87BAEF7AA45F9463A139EB54173C6C4EB94E6C89B0D00DB1980307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f571603-c756-42f3-8542-a8d33afc6ec7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f571603-c756-42f3-8542-a8d33afc6ec7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 58f1da2f85df6a052eec8ed4c9bf3d1a82034e38ac8493e5929ad214a1253f1b
MD5 ea8093fdd5b189c8c73fd77331f26336
SHA1 eed17479c5259ce4995e517c5e34d92f58da27fb
SHA512 083744a9c9ec5102270cba408bf962e5f5015aeaed1421164821c334344d4f1b2fb0976ba45c0908c597be734295a7b9e5578ef239849e9c5787f780248b66c3
TLSH
T199414759AAE91158B3B77F1A9BF2686E487E7C372E07D0AD10120E4F4623A408C71B37
MD5 SHA1 SHA512 TLSH

Submit Download