← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Hidden in UAlberta system Files
WHITE Disable_Duck 2024-06-05 Modified: 2024-09-03
91
IOCs
HIGH VOLUME
Azure/Entra things hidden in System Files
falsetruevisibleapplicationmicrosoft teamsmicrosoft azureofficeservicedynamicshiddenandroidexplorerwriteconnectortestsharepointlivemeistertoolsdesktopsparkfrontenterprisedesigneratlaspremiumassistantallowazureadmyorggameverifymicrosoft powerchannelsurfclimtd1file transfermagnusmicrosoft crmyouth
Indicators of Compromise (91)
All FileHash-MD5 FileHash-SHA256 domain hostname FileHash-SHA1 URL
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 94d3210d19a24e11b4b13a1571b990a0 — 2024-06-05
FileHash-SHA256 025c9e860cda8b15a4049f92272ce3a628426d6d58573bdd25b0dd534c55a744 — 2024-06-05
FileHash-SHA256 04310944b07f86667fd8a7ce01fd632736980ce1dcdfefc045ec7520060c40f3 — 2024-06-05
FileHash-SHA256 04fb3bfbb77abb43ed3c7b152c5cbbed12b0846c9bcaca2ade8221f96654478d — 2024-06-05
FileHash-SHA256 0c63d42d9a81c4aa09ccc096abe426a1b372c2d7edb58fbd61af70daa5e7f025 — 2024-06-05
FileHash-SHA256 124f75e6038679340f0d0ef8b135e5113ff81509da619ee91679d5aa55decff1 — 2024-06-05
FileHash-SHA256 13441b1853d537544087820d473f49093cbd87b65c2cb957c3a83513c6008e1d — 2024-06-05
FileHash-SHA256 144c930540544d34a4d85ae580550f3af2401605401f140ff509e2a4bf4d44da — 2024-06-05
FileHash-SHA256 155cf53b0ab08324bdd6bdfb66eec67d0a026c80284345300e569b65e3e6af1d — 2024-06-05
FileHash-SHA256 1bc74d4245f24e3f1b9719a765b9be6817549b83fe27746de592c170afed6927 — 2024-06-05
FileHash-SHA256 24affb8c0019eb7c5d2d3a828062ba3736d3c54ce859ed03ad10f63bfa68b4d4 — 2024-06-05
FileHash-SHA256 2618b2065c667d9ee04c48a34ddc6487d224278737d685f96288cb3f2680e15d — 2024-06-05
FileHash-SHA256 29ced62b8b15645f9cca54e763bc382e2c3917c9077fef64efe2c6b1774227be — 2024-06-05
FileHash-SHA256 30c2e960f69b3402cb48b750cfead6bf321fa90de15dd2957f24d6af8dc022de — 2024-06-05
FileHash-SHA256 3119c03e5f18714e4e1c9f71f3ef9b338d8cd548eb9fd2679cf630f21a04ce20 — 2024-06-05
FileHash-SHA256 31ac2e312d519342387b1ab3ea9a86c50e1441a754744e36a15417d3f3903219 — 2024-06-05
FileHash-SHA256 35ff50eeb931d308f4f347b0d297eedd1cff2c8fa849cf4dd0c57be22be39ab2 — 2024-06-05
FileHash-SHA256 36c18acf8b4e71833d75789a0d8665f6a03a874b989e5d0fa92ac0c6cbb4db0c — 2024-06-05
FileHash-SHA256 3ef3ab1781441de967931165efb4c04ddccdbecf0b0c222ced90948e683c9411 — 2024-06-05
FileHash-SHA256 407f789f3c34f1ae99de1f24365dcd9e0b6ae1c08b2c1276d5f34c12496c3006 — 2024-06-05
FileHash-SHA256 4279752398c14cedfe42ab6d613fd5e777b19f15dd2af6276721e166e4b1019f — 2024-06-05
FileHash-SHA256 43cbf6d9ddd09627dac6a6e2f61e7ad8e896648a7d571add825a50b030af6d10 — 2024-06-05
FileHash-SHA256 440fbd279e755754c725409d1f4bc617b557cd8dcfc966cd5a359f202d04e0d5 — 2024-06-05
FileHash-SHA256 4478baf0eef195346a80d5a02cf05b65f4bc4feaf29cb4f8076aaf3c6298bb03 — 2024-06-05
FileHash-SHA256 4530d37f3b207efc84a0cf03af537a154a9d2412b7fa1fe9662affa024dd4a41 — 2024-06-05
FileHash-SHA256 45cc4a4ebb75e6f5208695323011e0d7d19aed52580fa545bda461d5a6ebd36b — 2024-06-05
FileHash-SHA256 4cbd86d7cefe74bb405f2070782b3d7124977bae2926dc6161f497ce1b4f3afb — 2024-06-05
FileHash-SHA256 50d9e7e5f2ab2ffafa6b1b4ea801a6b0eb0fe64d8b57e097acc062664f854c83 — 2024-06-05
FileHash-SHA256 53a969fe172b5144f19ed8270712cee1d4831b7185b8dbbf4e9c60536ae585cc — 2024-06-05
FileHash-SHA256 560ad59a2eefe28b707554c00322a23fad7b258ff5269f34021a445e01494b5a — 2024-06-05
FileHash-SHA256 615e90a08d6f8e8dd7bbe70da2c2b5c9c8019c5608bf55637385e5291782b432 — 2024-06-05
FileHash-SHA256 63a5aa9d43f1ab34d3403bc29342db6fdfd0446d7e1883d3c211d5945d124082 — 2024-06-05
FileHash-SHA256 6848ebb3e02d75df49e656caafb5dfea150ad93ec8510afcc1c67eaf10bfbba2 — 2024-06-05
FileHash-SHA256 6c72d2e77096209aabaaae0e26372cc59c30af4790123b59db65552f487de608 — 2024-06-05
FileHash-SHA256 6effc0f96357df90f6aa33ee737ae43c3e1e923302144ee6d82d051d2a1e5150 — 2024-06-05
FileHash-SHA256 7491fb10397e3b6dc091254b834490234fcb181589e86e57f7235a045f470f4c — 2024-06-05
FileHash-SHA256 7de5fbefb2a4fabef25eaa7ab51da6897d187694c3ce90f211f36c22bbd44984 — 2024-06-05
FileHash-SHA256 800fedc878fc9dabfc9411a070024c8e4f736e381c6953e19472cc735d464a01 — 2024-06-05
FileHash-SHA256 86e3adc1a0a5416d6f6d4bbb6fce2eddca5935beb9afb6d3c6e14cf50611d19c — 2024-06-05
FileHash-SHA256 940af7cac28a6bee542c812987e99b2759b48055c58a20fa523c324d76e05628 — 2024-06-05
FileHash-SHA256 94f6f58a8198a97ec9e110633febf8999b8a66f69e733d8f47fbeddde03d6faf — 2024-06-05
FileHash-SHA256 95bfd208c85bda746b67869301b026cc72b48feb3fb3743530ea4462d8399ce9 — 2024-06-05
FileHash-SHA256 9c9e0015c889fce22c00f6f0cb3b8ce9a36e89d936bae64605d5414879a3ae9a — 2024-06-05
FileHash-SHA256 9d5aba3b3818147a067e4305940d3d386c0a14c126fd8459bb25415ac11fa075 — 2024-06-05
FileHash-SHA256 a0aa66ed9873bdbbe6c5c2a2f865a94345fc164c784cc3b656e9a0d29d0a3935 — 2024-06-05
FileHash-SHA256 a79095d9ea0b7d700bb8ae0fe3a37970b079bf736ccd720d2cfc73bf0a94f362 — 2024-06-05
FileHash-SHA256 a92c4855ab67e67dceab0f48f9b901e54fec84302ccaeae0970ba52d9d4696fa — 2024-06-05
FileHash-SHA256 b194a5648c599901a18d49df21f6b1d77b2fbfb09b22dc6c5a12d29ea0c926e0 — 2024-06-05
FileHash-SHA256 b662926e03b2d05bdf94cca90d28f500dd243ed20e4bba1fd2980a0b8bf9f6f2 — 2024-06-05
FileHash-SHA256 b79415dfc201e1f027d28e37fa73eff5c49c218c16e20b0cb82394d6a91f00f2 — 2024-06-05
FileHash-SHA256 b906c20bc50a7e988d5a3bf43cc4aec33b9b62d7a2862552707b212df11bbc62 — 2024-06-05
FileHash-SHA256 ba20eda9555acb29c17af0bd79674be9c10f47f568049ba0f1a2ea5109377e39 — 2024-06-05
FileHash-SHA256 c38d2f4f2d114fe6b386edd2bbb8e0a6c1ecb909c067197fe1e1bc10b686caf2 — 2024-06-05
FileHash-SHA256 cb042a79f18f920e15ce2e4c336af6cea3ff6b3f3d14d295daf4b52147827508 — 2024-06-05
FileHash-SHA256 d29c61f36dd0a9c6751710c93c6db4bb74627351c342cb6d0cacca240b083764 — 2024-06-05
FileHash-SHA256 d386701c5a9c9ae1866cd412ed9f6b1fdfebeba5b9bcb22efc3cd4dfa55783c5 — 2024-06-05
FileHash-SHA256 d9e1b0f3315a3d7b65439a452e061793258d93a98e1a8e552b552f4eecc53c33 — 2024-06-05
FileHash-SHA256 e6ac7812ed2bdd19a28139a1cf0ed22ac560f31549738ebeeebec1ce920455ca — 2024-06-05
FileHash-SHA256 eabaca91d52c3a3063b1a203a09f2199bc53f7bc4d979fdd7e988c2a0f42815e — 2024-06-05
FileHash-SHA256 eb1d57aee982ff154e36fae275457fdd6de806ecd0ac406ae6313c60453c551d — 2024-06-05
FileHash-SHA256 ec77f9aa098922090dbbc21037d68e880dce3b851e1b26a9947d8723d745249b — 2024-06-05
FileHash-SHA256 ec9efa2cc8270e0a8bba0703991ea2c849cc16b45fd1267d92785915f6add98c — 2024-06-05
FileHash-SHA256 ed9b2e945e298dacda998c50674ed5b9c82c2ce51664e837ecc7f5be82733d3d — 2024-06-05
FileHash-SHA256 ede7855b75d610b56f1e6c472bc829030a9a203c324623ac38aa889a357ad316 — 2024-06-05
FileHash-SHA256 f0fe8bde992e676cf45c35fd11fc67134503d7b23acaac4bf242413b88e18afe — 2024-06-05
FileHash-SHA256 f1ba85a63c4321d08fc74d7f40ff9e1a7a6dafcb012934c5e1e4a5cc223eaf6b — 2024-06-05
FileHash-SHA256 f53b9d6971b5b8965d9bdb3baaeb4654d9cca7973879a74e73e192543c9c14e9 — 2024-06-05
FileHash-SHA256 f6002b0ca6cc85dd6bca998162d435c40e15dca19b21fd0524d31aa17e28fc66 — 2024-06-05
FileHash-SHA256 f9bed9498bc2ec178d957a2eb086739429d1f2d9339f9d0f49cc5df4d5bc5847 — 2024-06-05
FileHash-SHA256 fbee273263854ba85c208e66fb548202f1ff18b5884da83528d250fa9ef2fac8 — 2024-06-05
domain kialo-edu.com — 2024-06-05
domain solver.com — 2024-06-05
domain timeghost.io — 2024-06-05
domain xmind.works — 2024-06-05
hostname calendar-app.virtosoftware.com — 2024-06-05
hostname career.belairdirect.com — 2024-06-05
hostname careers.intact.ca — 2024-06-05
hostname learning.makamicollege.com — 2024-06-05
hostname pdf.apps-encodian.com — 2024-06-05
FileHash-SHA1 52e624890d3139c8cacc5ef891cc7fb6ffba2710 — 2024-06-05
URL https://alist.nn.ci/tool/onedrive/callback — 2024-06-05
URL https://anemobro.com/signin-microsoft — 2024-06-05
URL https://do.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-05
URL https://ju.tn/ — 2024-06-05
URL https://ms.sjgw.tk/api/v3/callback/onedrive/auth — 2024-06-05
domain anemobro.com — 2024-06-05
hostname do.sjgw.tk — 2024-06-05
hostname ms.sjgw.tk — 2024-06-05
FileHash-SHA256 b937a6b26aca7abdf4bc432b78caf0c9db18cca9970878bed517bbc8fe618a9a CSV File (database) - U of A Related Unknown 2024-06-07
FileHash-SHA256 b937a6b26aca7abdf4bc432b78caf0c9db18cca9970878bed517bbc8fe618a9a — 2024-06-07
FileHash-SHA256 bc0b1d3b05f817390bc34b6da89bcdb6f497a933afc71628fc331a21f2d5a1b6 — 2024-06-07
References (13)
↗ 08.31.23 - WTH UA - azure settings.json ↗ All - EnterpriseAppsList.csv ↗ EnterpriseAppsList.csv ↗ Hidden Apps - EnterpriseAppsList.csv ↗ AppRegistrationList.csv ↗ allitems.csv ↗ https://tria.ge/240606-wjxmtsae82/behavioral2 ↗ http://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html ↗ https://www.filescan.io/uploads/66635cb00bf5978c0b0d760d ↗ https://www.virustotal.com/graph/embed/ga852fc7fe89d4149b2988943e5b58b36236338ac2b3047e982f50246b891dc67?theme=dark ↗ https://app.malcore.io/report/66635d7e78b32b5eeb45406d/scan/66635d8b78b32b5eeb454119 ↗ allitems.zip ↗ https://app.malcore.io/share/652553f6aec33d70a1dbbd25/66635d8978b32b5eeb4540dd