← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Hidden in UAlberta system Files
WHITE Disable_Duck 2024-06-05 Modified: 2024-09-03
192
IOCs
HIGH VOLUME
Azure/Entra things hidden in System Files of UAlberta Sample Device. Found this too: Clarification: My account, but U of A owned Tenant, but not actually my account? Either way I avoid signing into Google or Microsoft UAlberta emails. Bad things happen. Found this though on the Microsoft Side: License Azure AD for Office 365 (Check out Strings in referenced files - no idea). Anyone? Tenant ID 718b8a9b-44d8-441a-a344-4294ea842172 Primary domain ualbertaca.onmicrosoft.com Custom Domain Names ualberta.ca Verified ualbertaca.onmicrosoft.com
falsetruevisibleapplicationmicrosoft teamsmicrosoft azureofficeservicedynamicshiddenandroidexplorerwriteconnectortestsharepointlivemeistertoolsdesktopsparkfrontenterprisedesigneratlaspremiumassistantallowazureadmyorggameverifymicrosoft powerchannelsurfclimtd1file transfermagnusmicrosoft crmyouth
Indicators of Compromise (192)
All FileHash-MD5 FileHash-SHA256 domain hostname FileHash-SHA1 URL
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 94d3210d19a24e11b4b13a1571b990a0 — 2024-06-05
FileHash-SHA256 025c9e860cda8b15a4049f92272ce3a628426d6d58573bdd25b0dd534c55a744 — 2024-06-05
FileHash-SHA256 04310944b07f86667fd8a7ce01fd632736980ce1dcdfefc045ec7520060c40f3 — 2024-06-05
FileHash-SHA256 04fb3bfbb77abb43ed3c7b152c5cbbed12b0846c9bcaca2ade8221f96654478d — 2024-06-05
FileHash-SHA256 0c63d42d9a81c4aa09ccc096abe426a1b372c2d7edb58fbd61af70daa5e7f025 — 2024-06-05
FileHash-SHA256 124f75e6038679340f0d0ef8b135e5113ff81509da619ee91679d5aa55decff1 — 2024-06-05
FileHash-SHA256 13441b1853d537544087820d473f49093cbd87b65c2cb957c3a83513c6008e1d — 2024-06-05
FileHash-SHA256 144c930540544d34a4d85ae580550f3af2401605401f140ff509e2a4bf4d44da — 2024-06-05
FileHash-SHA256 155cf53b0ab08324bdd6bdfb66eec67d0a026c80284345300e569b65e3e6af1d — 2024-06-05
FileHash-SHA256 1bc74d4245f24e3f1b9719a765b9be6817549b83fe27746de592c170afed6927 — 2024-06-05
FileHash-SHA256 24affb8c0019eb7c5d2d3a828062ba3736d3c54ce859ed03ad10f63bfa68b4d4 — 2024-06-05
FileHash-SHA256 2618b2065c667d9ee04c48a34ddc6487d224278737d685f96288cb3f2680e15d — 2024-06-05
FileHash-SHA256 29ced62b8b15645f9cca54e763bc382e2c3917c9077fef64efe2c6b1774227be — 2024-06-05
FileHash-SHA256 30c2e960f69b3402cb48b750cfead6bf321fa90de15dd2957f24d6af8dc022de — 2024-06-05
FileHash-SHA256 3119c03e5f18714e4e1c9f71f3ef9b338d8cd548eb9fd2679cf630f21a04ce20 — 2024-06-05
FileHash-SHA256 31ac2e312d519342387b1ab3ea9a86c50e1441a754744e36a15417d3f3903219 — 2024-06-05
FileHash-SHA256 35ff50eeb931d308f4f347b0d297eedd1cff2c8fa849cf4dd0c57be22be39ab2 — 2024-06-05
FileHash-SHA256 36c18acf8b4e71833d75789a0d8665f6a03a874b989e5d0fa92ac0c6cbb4db0c — 2024-06-05
FileHash-SHA256 3ef3ab1781441de967931165efb4c04ddccdbecf0b0c222ced90948e683c9411 — 2024-06-05
FileHash-SHA256 407f789f3c34f1ae99de1f24365dcd9e0b6ae1c08b2c1276d5f34c12496c3006 — 2024-06-05
FileHash-SHA256 4279752398c14cedfe42ab6d613fd5e777b19f15dd2af6276721e166e4b1019f — 2024-06-05
FileHash-SHA256 43cbf6d9ddd09627dac6a6e2f61e7ad8e896648a7d571add825a50b030af6d10 — 2024-06-05
FileHash-SHA256 440fbd279e755754c725409d1f4bc617b557cd8dcfc966cd5a359f202d04e0d5 — 2024-06-05
FileHash-SHA256 4478baf0eef195346a80d5a02cf05b65f4bc4feaf29cb4f8076aaf3c6298bb03 — 2024-06-05
FileHash-SHA256 4530d37f3b207efc84a0cf03af537a154a9d2412b7fa1fe9662affa024dd4a41 — 2024-06-05
FileHash-SHA256 45cc4a4ebb75e6f5208695323011e0d7d19aed52580fa545bda461d5a6ebd36b — 2024-06-05
FileHash-SHA256 4cbd86d7cefe74bb405f2070782b3d7124977bae2926dc6161f497ce1b4f3afb — 2024-06-05
FileHash-SHA256 50d9e7e5f2ab2ffafa6b1b4ea801a6b0eb0fe64d8b57e097acc062664f854c83 — 2024-06-05
FileHash-SHA256 53a969fe172b5144f19ed8270712cee1d4831b7185b8dbbf4e9c60536ae585cc — 2024-06-05
FileHash-SHA256 560ad59a2eefe28b707554c00322a23fad7b258ff5269f34021a445e01494b5a — 2024-06-05
FileHash-SHA256 615e90a08d6f8e8dd7bbe70da2c2b5c9c8019c5608bf55637385e5291782b432 — 2024-06-05
FileHash-SHA256 63a5aa9d43f1ab34d3403bc29342db6fdfd0446d7e1883d3c211d5945d124082 — 2024-06-05
FileHash-SHA256 6848ebb3e02d75df49e656caafb5dfea150ad93ec8510afcc1c67eaf10bfbba2 — 2024-06-05
FileHash-SHA256 6c72d2e77096209aabaaae0e26372cc59c30af4790123b59db65552f487de608 — 2024-06-05
FileHash-SHA256 6effc0f96357df90f6aa33ee737ae43c3e1e923302144ee6d82d051d2a1e5150 — 2024-06-05
FileHash-SHA256 7491fb10397e3b6dc091254b834490234fcb181589e86e57f7235a045f470f4c — 2024-06-05
FileHash-SHA256 7de5fbefb2a4fabef25eaa7ab51da6897d187694c3ce90f211f36c22bbd44984 — 2024-06-05
FileHash-SHA256 800fedc878fc9dabfc9411a070024c8e4f736e381c6953e19472cc735d464a01 — 2024-06-05
FileHash-SHA256 86e3adc1a0a5416d6f6d4bbb6fce2eddca5935beb9afb6d3c6e14cf50611d19c — 2024-06-05
FileHash-SHA256 940af7cac28a6bee542c812987e99b2759b48055c58a20fa523c324d76e05628 — 2024-06-05
FileHash-SHA256 94f6f58a8198a97ec9e110633febf8999b8a66f69e733d8f47fbeddde03d6faf — 2024-06-05
FileHash-SHA256 95bfd208c85bda746b67869301b026cc72b48feb3fb3743530ea4462d8399ce9 — 2024-06-05
FileHash-SHA256 9c9e0015c889fce22c00f6f0cb3b8ce9a36e89d936bae64605d5414879a3ae9a — 2024-06-05
FileHash-SHA256 9d5aba3b3818147a067e4305940d3d386c0a14c126fd8459bb25415ac11fa075 — 2024-06-05
FileHash-SHA256 a0aa66ed9873bdbbe6c5c2a2f865a94345fc164c784cc3b656e9a0d29d0a3935 — 2024-06-05
FileHash-SHA256 a79095d9ea0b7d700bb8ae0fe3a37970b079bf736ccd720d2cfc73bf0a94f362 — 2024-06-05
FileHash-SHA256 a92c4855ab67e67dceab0f48f9b901e54fec84302ccaeae0970ba52d9d4696fa — 2024-06-05
FileHash-SHA256 b194a5648c599901a18d49df21f6b1d77b2fbfb09b22dc6c5a12d29ea0c926e0 — 2024-06-05
FileHash-SHA256 b662926e03b2d05bdf94cca90d28f500dd243ed20e4bba1fd2980a0b8bf9f6f2 — 2024-06-05
FileHash-SHA256 b79415dfc201e1f027d28e37fa73eff5c49c218c16e20b0cb82394d6a91f00f2 — 2024-06-05
FileHash-SHA256 b906c20bc50a7e988d5a3bf43cc4aec33b9b62d7a2862552707b212df11bbc62 — 2024-06-05
FileHash-SHA256 ba20eda9555acb29c17af0bd79674be9c10f47f568049ba0f1a2ea5109377e39 — 2024-06-05
FileHash-SHA256 c38d2f4f2d114fe6b386edd2bbb8e0a6c1ecb909c067197fe1e1bc10b686caf2 — 2024-06-05
FileHash-SHA256 cb042a79f18f920e15ce2e4c336af6cea3ff6b3f3d14d295daf4b52147827508 — 2024-06-05
FileHash-SHA256 d29c61f36dd0a9c6751710c93c6db4bb74627351c342cb6d0cacca240b083764 — 2024-06-05
FileHash-SHA256 d386701c5a9c9ae1866cd412ed9f6b1fdfebeba5b9bcb22efc3cd4dfa55783c5 — 2024-06-05
FileHash-SHA256 d9e1b0f3315a3d7b65439a452e061793258d93a98e1a8e552b552f4eecc53c33 — 2024-06-05
FileHash-SHA256 e6ac7812ed2bdd19a28139a1cf0ed22ac560f31549738ebeeebec1ce920455ca — 2024-06-05
FileHash-SHA256 eabaca91d52c3a3063b1a203a09f2199bc53f7bc4d979fdd7e988c2a0f42815e — 2024-06-05
FileHash-SHA256 eb1d57aee982ff154e36fae275457fdd6de806ecd0ac406ae6313c60453c551d — 2024-06-05
FileHash-SHA256 ec77f9aa098922090dbbc21037d68e880dce3b851e1b26a9947d8723d745249b — 2024-06-05
FileHash-SHA256 ec9efa2cc8270e0a8bba0703991ea2c849cc16b45fd1267d92785915f6add98c — 2024-06-05
FileHash-SHA256 ed9b2e945e298dacda998c50674ed5b9c82c2ce51664e837ecc7f5be82733d3d — 2024-06-05
FileHash-SHA256 ede7855b75d610b56f1e6c472bc829030a9a203c324623ac38aa889a357ad316 — 2024-06-05
FileHash-SHA256 f0fe8bde992e676cf45c35fd11fc67134503d7b23acaac4bf242413b88e18afe — 2024-06-05
FileHash-SHA256 f1ba85a63c4321d08fc74d7f40ff9e1a7a6dafcb012934c5e1e4a5cc223eaf6b — 2024-06-05
FileHash-SHA256 f53b9d6971b5b8965d9bdb3baaeb4654d9cca7973879a74e73e192543c9c14e9 — 2024-06-05
FileHash-SHA256 f6002b0ca6cc85dd6bca998162d435c40e15dca19b21fd0524d31aa17e28fc66 — 2024-06-05
FileHash-SHA256 f9bed9498bc2ec178d957a2eb086739429d1f2d9339f9d0f49cc5df4d5bc5847 — 2024-06-05
FileHash-SHA256 fbee273263854ba85c208e66fb548202f1ff18b5884da83528d250fa9ef2fac8 — 2024-06-05
domain kialo-edu.com — 2024-06-05
domain solver.com — 2024-06-05
domain timeghost.io — 2024-06-05
domain xmind.works — 2024-06-05
hostname calendar-app.virtosoftware.com — 2024-06-05
hostname career.belairdirect.com — 2024-06-05
hostname careers.intact.ca — 2024-06-05
hostname learning.makamicollege.com — 2024-06-05
hostname pdf.apps-encodian.com — 2024-06-05
FileHash-SHA1 52e624890d3139c8cacc5ef891cc7fb6ffba2710 — 2024-06-05
URL https://alist.nn.ci/tool/onedrive/callback — 2024-06-05
URL https://anemobro.com/signin-microsoft — 2024-06-05
URL https://do.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-05
URL https://ju.tn/ — 2024-06-05
URL https://ms.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-05
domain anemobro.com — 2024-06-05
hostname do.sjgw.tk — 2024-06-05
hostname ms.sjgw.tk — 2024-06-05
FileHash-SHA256 0590d2c4fd59ffcb0b431748d38b199bbde2841e03f775b30a1d55cce41269d1 — 2024-06-05
FileHash-SHA256 3be7e5720ce46f22221140a2c4b4de3a65c622465f3eef471d6927b0572a2fcc — 2024-06-05
FileHash-SHA256 c9903e19d8d66274027d7ae6fee7ff9647cf5c8af2f2e74e896def4093b03f66 — 2024-06-05
FileHash-SHA1 52e624890d3139c8cacc5ef891cc7fb6ffba2710 — 2024-06-15
URL https://alist.nn.ci/tool/onedrive/callback — 2024-06-15
URL https://anemobro.com/signin-microsoft — 2024-06-15
URL https://do.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-15
URL https://ju.tn/ — 2024-06-15
URL https://ms.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-15
domain anemobro.com — 2024-06-15
hostname do.sjgw.tk — 2024-06-15
hostname ms.sjgw.tk — 2024-06-15
domain sjgw.tk — 2024-06-15
URL https://anemobro.com/signin — 2024-06-15
URL https://portal.office.com/account/?ref=MeControl#subscriptions — 2024-06-15
hostname portal.office.com — 2024-06-15
URL https://HHNYouth.powerappsportals.com — 2024-06-15
URL https://anemobro.azurewebsites.net/ — 2024-06-15
URL https://anemobro.azurewebsites.net/signin-microsoft — 2024-06-15
URL https://app.powerbi.com/embedsetup/SignInRedirect — 2024-06-15
URL https://dev.powerbi.com/Apps/SignInRedirect — 2024-06-15
URL https://func-anemobro-cqrf.azurewebsites.net — 2024-06-15
URL https://func-anemobro-cqrf.azurewebsites.net/.auth/login/aad/callback — 2024-06-15
URL https://hhn-youinyouth.powerappsportals.com — 2024-06-15
URL https://itworkx.powerappsportals.com — 2024-06-15
URL https://login.microsoftonline.com/common/oauth2/nativeclient — 2024-06-15
URL https://management.azure.com//subscriptions/60289dc3-9d33-4ddb-b715-256b0fa214d8/resourceGroups/site-recovery-vault-rg/providers/Microsoft.Automation/automationAccounts/site-reco-a60-asr-automationaccount — 2024-06-15
URL https://ualberta.ca/82b828e9-b8e5-48b0-a3ae-c7effcc9b138 — 2024-06-15
domain ju.tn — 2024-06-15
domain ualberta.ca — 2024-06-15
hostname alist.nn.ci — 2024-06-15
hostname anemobro.azurewebsites.net — 2024-06-15
hostname app.powerbi.com — 2024-06-15
hostname dev.powerbi.com — 2024-06-15
hostname func-anemobro-cqrf.azurewebsites.net — 2024-06-15
hostname hhn-youinyouth.powerappsportals.com — 2024-06-15
hostname hhnyouth.powerappsportals.com — 2024-06-15
hostname itworkx.powerappsportals.com — 2024-06-15
hostname login.microsoftonline.com — 2024-06-15
hostname management.azure.com — 2024-06-15
hostname ualbertaca.onmicrosoft.com — 2024-06-15
URL https://devicemanagement.portal.azure.com/#view/Microsoft_AAD_IAM/GroupsManagementMenuBlade/~/DeletedGroups — 2024-06-15
hostname devicemanagement.portal.azure.com — 2024-06-15
hostname ca.sjgw.tk — 2024-06-15
hostname ca1.sjgw.tk — 2024-06-15
hostname eu.sjgw.tk — 2024-06-15
hostname js.sjgw.tk — 2024-06-15
hostname n1.sjgw.tk — 2024-06-15
URL http://do.sjgw.tk — 2024-06-15
URL http://ms.sjgw.tk — 2024-06-15
URL http://ms.sjgw.tk/ — 2024-06-15
URL https://do.sjgw.tk — 2024-06-15
URL https://ms.sjgw.tk — 2024-06-15
URL https://alist.nn.ci/2 — 2024-06-15
URL https://alist.nn.ci/tool/aliyundrive/callback — 2024-06-15
URL https://alist.nn.ci/zh/guide/drivers/aliyundrive.html — 2024-06-15
FileHash-SHA256 18d6d33a7d8b711213b715c3aa57c8028baea18fb4512b63a193a1735fb01de7 — 2024-06-15
FileHash-SHA256 5df928975dbf110e58339c824ad4215b690e285483fedddf7b14de0a380d3cdd — 2024-06-15
FileHash-SHA256 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a — 2024-06-15
FileHash-SHA256 0488e7751d8f7fd3da1da0ac8b491efa8a95b68ba7339055c7017bcd10098b7b — 2024-06-15
FileHash-SHA256 2c30f4366eeb652d3fd3e52ecdc233684acf4594c248024834e04017fd4ab391 — 2024-06-15
FileHash-SHA256 3c7d53266d8e76c0497f9e615afce7c9d536c424e6b39d8a25a37f88ad1328f0 — 2024-06-15
FileHash-SHA256 00eee9172336289edaf026895e8fec12f809e437d1a0288a02e2911622149e2d — 2024-06-15
FileHash-SHA256 0cedb1e4b0d76cbe9686cc9d21cbd3016535beda9dc61c6df17a9149727f3ef5 — 2024-06-15
FileHash-SHA256 11502e351a2e0b8926fe607fadaeb52a92127dced3b82fae795abf939ba1331c — 2024-06-15
FileHash-SHA256 25ca456f99a748db5c411a6ea5fe567af157d45260d50591886dbcac6dad3fc6 — 2024-06-15
FileHash-SHA256 26c6762c02da659a7da1fd307262d18f0ab7bc7b6fd965f6518633fc20a49498 — 2024-06-15
FileHash-SHA256 295dd6a0a066117a3a368e210ed03750a6deeb898a619f6c97e91813f91afa0c — 2024-06-15
FileHash-SHA256 2c52c4b1821bba38580e77318fcd9d28f6833c7df094cdcc709e79a2287c08a9 — 2024-06-15
FileHash-SHA256 46b3ce16ea6174f9840c99dc14b0a94d893aa89803234f4e1b62f72b03604653 — 2024-06-15
FileHash-SHA256 6386b949e991f6e7d49ff604d36cde018f452a6cc84aa3f5f7be3b65542fc700 — 2024-06-15
FileHash-SHA256 6c1fa7ea801320a157178d1f6083607987fc623ba3ecae855916a0b12c13cf9c — 2024-06-15
FileHash-SHA256 7300195f48f41a9b6955ce3882b5bc0f751baf180031ebdd893226b77255edb9 — 2024-06-15
FileHash-SHA256 89c113ef901a84b376fa046076595e55c6fdb98cff39e5938d264c764bd48c3d — 2024-06-15
FileHash-SHA256 8ae8d6d63282228ee2c1b5d48cb58038947dc3ff352e2bd03110335a0decd8c3 — 2024-06-15
FileHash-SHA256 8b6b325ccb4cb10958a3ac01d7f49a48b3269fbd8f0ad3757ce0e296a42b9cf1 — 2024-06-15
FileHash-SHA256 a1f1dfdeee512201233da330a12428549aebecdf5d6f0bc24f818fed0d05fba5 — 2024-06-15
FileHash-SHA256 adf94b3a89d81de2a8e58cc7ea474a21798d78a513ef8bc193c6ca8626a0e63c — 2024-06-15
FileHash-SHA256 ae779be6ce28090debcce82c6f17217c56dd6ba4e4b76d2712356709584c00cb — 2024-06-15
FileHash-SHA256 b89d1043afe47c311c80eb20ac53202ace7927d1cba8fca8acfd2c7463f62dc0 — 2024-06-15
FileHash-SHA256 bbf7f7b3fd76a6cd932883627938ef8738c823f2372f18ce61a77939e1dfb8a2 — 2024-06-15
FileHash-SHA256 df2a571c5d1e3c2b43bfb3766fe4cf01155313da72d70e93b8c317aaaa05e38b — 2024-06-15
hostname businessreview.tauzia.com — 2024-06-15
hostname vesselanalytics.petronas.com — 2024-06-15
FileHash-SHA256 1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf — 2024-06-15
FileHash-SHA256 22bfcc65ae4cf0d66488dc24033d725a209950d38816edd78017faaccfefa42e — 2024-06-15
FileHash-SHA256 2b644e5a815c582349372c6fdcbfbe920e7fefdd77fff3dcfe7c790845a367b1 — 2024-06-15
FileHash-SHA256 3e2861e7a703bdf5c5e86075084f072335d2dd43c8999d43f4ae554f46a6e9de — 2024-06-15
FileHash-SHA256 7c826c7ffdc180d952b93d9bfeacf53ea30354c37a36620690a8eae84bde2fcd — 2024-06-15
FileHash-SHA256 7cf76be344cedbd3dabdb7a4022a314fbd86d68e3e5218bb0b0a0830e8cd294c — 2024-06-15
FileHash-SHA256 7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950 — 2024-06-15
FileHash-SHA256 89c69648bdccd50914138526712faa96d31df6f175632cf1a83b66de30c2f437 — 2024-06-15
FileHash-SHA256 8eb39aaddb14f5a8f39622b0173575bd811a04f4632ad1b4caf02724ec72bd57 — 2024-06-15
FileHash-SHA256 938269a53d7dfe31555e03c60e4e79d359b1a867bb79459d5141c87f85721241 — 2024-06-15
FileHash-SHA256 9f3d21fe46288092fe805d0002099b659bb6187b19af4cb8ace9bf06362ca726 — 2024-06-15
FileHash-SHA256 a67b07be04fb143a3162c1aa6c7e9588c1fd0faef334dc16cc6fcf49bd2b780e — 2024-06-15
FileHash-SHA256 c67f42097a00065bdac0fb4e6eb4677d2bb03e192460e523b926d0ea97401e39 — 2024-06-15
FileHash-SHA256 cf32b0c5e304bc7bd8eb3b869b8d655957bb68a0b3dd6179507ea2cf9fc8309c — 2024-06-15
FileHash-SHA256 d3948a933407d2c1d9b651834ca0e804a584ffb3065b742da924ada789bdda78 — 2024-06-15
FileHash-SHA256 d624ae49e9262250d43fd33066b89f33548dc56f55d9cbce9156e36d37095ef1 — 2024-06-15
FileHash-SHA256 db21a37923f1f82317fcf87a123317ea40f068907df60243c413e9ef7e73e4ad — 2024-06-15
FileHash-SHA256 e22b393f3fd4bae952404134783438bb3d336c889c1e386baeef2b8bb3c4de0b — 2024-06-15
FileHash-SHA256 eda47f725d05be33c9d1cb3ba488bd8dd5998595e22a2475b199fdee80206ba9 — 2024-06-15
FileHash-SHA256 ee570cdf10bb49b17adb6e8a550e651541db70dddf76f790bd119e8ba6f1fb56 — 2024-06-15
References (8)
↗ 08.31.23 - WTH UA - azure settings.json ↗ All - EnterpriseAppsList.csv ↗ EnterpriseAppsList.csv ↗ Hidden Apps - EnterpriseAppsList.csv ↗ AppRegistrationList.csv ↗ 3be7e5720ce46f22221140a2c4b4de3a65c622465f3eef471d6927b0572a2fcc ↗ c9903e19d8d66274027d7ae6fee7ff9647cf5c8af2f2e74e896def4093b03f66 ↗ 0590d2c4fd59ffcb0b431748d38b199bbde2841e03f775b30a1d55cce41269d1