hxxps://leiahomestore[.]com[.]br/ws

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 17:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://leiahomestore.com.br/ws
Sample260910-vj3neael5y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335333297155500"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{DB8FC73F-88B2-413C-A5FC-6DB1DBEEF7C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 1952 wrote to memory of 1968	1952	msedge.exe	86
PID 1952 wrote to memory of 3620	1952	msedge.exe	87
PID 1952 wrote to memory of 3748	1952	msedge.exe	88
PID 1952 wrote to memory of 3748	1952	msedge.exe	88
PID 1952 wrote to memory of 3748	1952	msedge.exe	88
PID 1952 wrote to memory of 2440	1952	msedge.exe	89
PID 1952 wrote to memory of 2440	1952	msedge.exe	89
PID 1952 wrote to memory of 3232	1952	msedge.exe	90
PID 1952 wrote to memory of 3232	1952	msedge.exe	90
PID 1952 wrote to memory of 3232	1952	msedge.exe	90
PID 1952 wrote to memory of 2148	1952	msedge.exe	91
PID 1952 wrote to memory of 2148	1952	msedge.exe	91
PID 1952 wrote to memory of 2148	1952	msedge.exe	91
PID 1952 wrote to memory of 4400	1952	msedge.exe	93
PID 1952 wrote to memory of 3784	1952	msedge.exe	94
PID 1952 wrote to memory of 4400	1952	msedge.exe	93
PID 1952 wrote to memory of 4400	1952	msedge.exe	93
PID 1952 wrote to memory of 3784	1952	msedge.exe	94
PID 1952 wrote to memory of 3784	1952	msedge.exe	94
PID 1952 wrote to memory of 4868	1952	msedge.exe	98
PID 1952 wrote to memory of 4868	1952	msedge.exe	98
PID 1952 wrote to memory of 4304	1952	msedge.exe	99
PID 1952 wrote to memory of 4304	1952	msedge.exe	99
PID 1952 wrote to memory of 2376	1952	msedge.exe	101
PID 1952 wrote to memory of 4608	1952	msedge.exe	105
PID 1952 wrote to memory of 4608	1952	msedge.exe	105
PID 1952 wrote to memory of 4608	1952	msedge.exe	105
PID 1952 wrote to memory of 2640	1952	msedge.exe	106
PID 1952 wrote to memory of 2640	1952	msedge.exe	106
PID 1952 wrote to memory of 2640	1952	msedge.exe	106
PID 1952 wrote to memory of 1008	1952	msedge.exe	107
PID 1952 wrote to memory of 1008	1952	msedge.exe	107
PID 1952 wrote to memory of 1008	1952	msedge.exe	107
PID 1952 wrote to memory of 1660	1952	msedge.exe	108
PID 1952 wrote to memory of 1660	1952	msedge.exe	108
PID 1952 wrote to memory of 1660	1952	msedge.exe	108
PID 1952 wrote to memory of 2792	1952	msedge.exe	113
PID 1952 wrote to memory of 1072	1952	msedge.exe	114
PID 1952 wrote to memory of 3260	1952	msedge.exe	115
PID 1952 wrote to memory of 3644	1952	msedge.exe	123
PID 1952 wrote to memory of 3644	1952	msedge.exe	123
PID 1952 wrote to memory of 3736	1952	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://leiahomestore.com.br/ws
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffdba86c188,0x7ffdba86c194,0x7ffdba86c1a0
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,17147897572070925711,2310882549981089115,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,3719167101231911705,5159417664998188674,262144 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,3859027367116868114,14444144451785560375,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,1487391442669639336,4805947992566837146,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,13875432666331339619,14584111211636609436,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,3702532126337908587,11879229076728510810,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,15670727208686137836,2353462791614085897,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,3741249897165374675,10474714487931914216,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,6944513209122102873,6968319141146483426,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4797092823623617517,17839429483081677304,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4797092823623617517,17839429483081677304,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4532,i,7030399092107050178,2238045105050805984,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3480,i,6607626825117794569,7065836688168844665,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4236,i,5409493407911747531,15751064390548808869,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4628,i,8342000984824488357,16363496852283323409,2097152 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,7855260380887708419,2725108165794279314,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,10372312602208671406,3501863730773026331,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,10149819605246147365,11542675568017351562,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,10785743409673038397,8154255550780124260,524288 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4508,i,11761492641232598564,11002527143296943106,262144 --field-trial-handle=2304,i,5697945533300244041,9894023079711991683,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 33a618b5bb060b868def0bdfae8e96acc55b5ac8f0b843a92c829ceb3f354fb5
MD5 49c665e8cd3ff53238116620906d6f97
SHA1 21eeebad6a338eee64edbe7af70d8b098c23e2b1
SHA512 f8c96efb2b92306fa9725f5a9ef975216a5442b2dd2f3dfa4c272413e0e7a551a282d4d0ed5d89dd1986faa283e42345964d5ffdaae5da6866caa7bf6ac46f69
TLSH
T184716F3820434FB9EB22A17388CE209D7B3082F4F4135ECD5CA4E67465E1329CEC674A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 21235b2b6a4d8f252003f02c2f04d7a572f5142275097cb90f0efe91e4ace059
MD5 eb964d62bc4d32e267ffab319ff793a2
SHA1 c6e2aee2d0c8160dcb64aedde3b26d9900f8cf80
SHA512 beed212c90ce22f9f869d666822697eb0526ec93fe93ea1899260e842bb5ca535b81348105724154e3377b1ec4ba4d07dec5690a1a28aaeaf51b01164d6145eb
TLSH
T10D81A43861834F79EB21B17384CE14AD773086F4F9125ECE1CA4E67465E6328CDC2709
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58df6e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58df6e.TMP
Size 3KB
SHA256 b4742568b5de9b61dc149d31b7d0cdd7d28319c202ca9bc32df5e33cd338da0b
MD5 3eaf663d583fa5d7be3103fa2045775c
SHA1 67b59a98fdec5f98202c9097a05c03f25f9590a9
SHA512 bc98085d86c1ea5a5381c043f1d80d5704b459910f9f27911e2152bf485a86cf1d53c068324d7a8badd2a902b2a3397b1039f867aedb5cae1dcf293352cd425c
TLSH
T123715F3820474FB9EB22A1B388DE209D7B3082F5F4225ECD5CA4E67565E1329CEC6759
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5711c8dbf14383e7cdd253161d12db90963b9475f7d18560ad236ba0ce3a0360
MD5 d87138104b3ba3092630e3fe23d85d47
SHA1 f96f5a5c94761d6a569dc7bbff63ed80f017261b
SHA512 f53ee286cc66733a210fb4472737ea787fea6b6ce1232847c93b672252b217d01708fc340bd2249900222328e83717b724c5116a7fd13c1d2f289380ecb71692
TLSH
T14E4170F387B0996ECD2152F4AB256E2FCE1D0511536C7829C6D4BE2793F2470E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 dadfef59fb5cd61014ac7072f92a4795202f1fdabb941dfdcd5ef92ac3713292
MD5 2a82eabf7dbb12886f086b821ef6c8d5
SHA1 5ffd8f38db25eacb5c7dacd4f3811dfab07ef55f
SHA512 64730217bbd0bc8d87f76658a630c5d586776101b031b086dfea932412558d6d76a231697ddb5f0167acd605451723672fc44dad64b37e62d282b245b02bfac9
SSDEEP 192:sxZ4VRfWtW/fpXsUa51IdpJHW6+WNGYzc11iIgrJ:sxZ4VktW/f5spIJHbG89
TLSH
T18C22A8526E38A97B8CC7D20DBA157F53D6FA5032A1945E48BAFC861C05E7ADD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2a4cdd30230471894845e90a2934d5ecf1e7cb520ec98f48bcea7cba411b1897
MD5 a7abe75b6507a1f5e4b5642b9e333a55
SHA1 4e9e5b81884ebdf74449b2c5bbb2e4340f5cdad7
SHA512 a9cee878f258db43143930d6a7c3fdd36b9e834faad6657f0ff4eac461219bff0691aa7ac31c30a837ae4d6c155dac8a76ca3188e9f2cf095ea82624d6ee160a
SSDEEP 192:sxZ4VRfWtW/fpXsfa51IdpJHW6+WNGYzc11iIg5+J:sxZ4VktW/f5sSIJHbG8E
TLSH
T12A22A7526E38A97B8CC7D21DFA157F53D6FA5032A1945E48AAFC861C05E7BCD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ae0f6a94e1df1b3178eb8529794fb933313f3aa6c1ffcf20c8d22f5046f1092e
MD5 5b4e6342ba46f9499985e4212d3e9bb9
SHA1 bfe0d3e649b7d37d9b4b852d9381120c5e7dc421
SHA512 3871816574a9b646af44d73cc1926df4acc9233682bd5c3728314f15205101d2e3274a013f07097c171380edaff80e9884380031eeaf9487cbf35f54dc73f99f
SSDEEP 192:sxZ4VRfWtW/fpXsfEIn1IdpMuvHW6+WNLTzLR/Yz9n1iIg5UJ:sxZ4VktW/f5ssBxHbZ/fu
TLSH
T1E532C8526D34A97B8CCBD209BA55BF53E2F55032A1D45E48ABFC8A1C05E77DD220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6205ec16613fdd0a7e04c3fa84e004b2d0690b5506e4f8e7cddcf9ba2308205d
MD5 da4d71d580966e72e372a56c5e65dbbd
SHA1 3fd9e6f541da10b046d1a14df98247188c935503
SHA512 e51ad1c5c67f61dee06ea623c0dd8fe1ba8b0afe501c787a251fcfc2caf1ca156d8b16b20fa228cbba24161bec71f410a8ce2168149cd5170d255f03844a5640
SSDEEP 192:sxZ4HCRfWtW/fpXsfEh1IdpOEvHW6+WNLTzLR/YzTQ6iIg5UJ:sxZ4iktW/f5sswFHbZ/zu
TLSH
T1E532C85269346D7B8CC7D219BA15BF53E2F95032A1D45E48BBFC8A1C05E77DD220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 26021caa944efc7a1828160d12e08f8a3a0e37589e6dd5d70256cd3efa6f4fb3
MD5 f2d49a43332f3fcb3b6f76263cb01cce
SHA1 eba90094d44af0df9603e7b6c3771c3a26e36272
SHA512 161d6a51f7888888a4f65350427a38b1ab809a4b79059a05cf64f602d4a0a188d3f60cb80effbe16dfc318380f9bfcf430e8b512ff24cd8db1a5a6fd6ca29b7d
SSDEEP 192:sxZ4HCRfWtW/fpXsfEh1IdpMEvHW6+WNLTzLR/Yz9n1iIg5UJ:sxZ4iktW/f5ssw/HbZ/fu
TLSH
T11732C8516D34A97B8CC7D219BA15BF53E2F95032A1D45E48BBFC8A1C05E77DD220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9f44ec73ef0c46a919454467699dd8d4c3dc8b596c403a9f1adfa3e1cb7c9983
MD5 f0adc8b0e2a6d6edb722cfe23ebbf9da
SHA1 17a98ff96f246d6020877e0e62d32100d5340b5f
SHA512 d6fb86d0fffaffa2bb021580357e009ab9a91346371010e60e41b4e61e83e9d89d9e857bd4e54faa14201b80a20ead8f64c22dbff6cd7d9f8453ff9bb3ebcb16
SSDEEP 768:1Zk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBCroyYYy:1Zk7u70WvqiEau1jai5LA3BZqy
TLSH
T1FBC2E93B740CCB7E4FC01E9DAC5A6F977E9802C7A6948D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 24a72c966064437d77341d3253a39157e0a21912fe1a8b66587c49c9c672105a
MD5 b7f1f40348333f1585341a1d137f711d
SHA1 db0a5cd8cbd7bab5dabc07e80aec9f1d5bbe1597
SHA512 aaeb7be4573f39fcc199332b47d67cacccaa37b4a11e30e66d4af6161558aba6f9f7230f6f67cf0ca2e4f2b3fcab1d695e1262bc3c8146ed7a0da49b5ab519f3
TLSH
T13DA0022385A400D2C9401278E0C1168573A0CCA00742935380F448DC8C6C146891300C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594c51.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594c51.TMP
Size 48B
SHA256 93b1de56818f1626358933c445357b08dddab1f45678a47ac5d88be148237402
MD5 deb04342ea08d1c6f36375427816d7db
SHA1 65b3bef39307fa4e6aefbe66a118de94debef56f
SHA512 ecd2b07103b22e19a09915968d606db8eaddbd8e4f99faf859edbb08637af76777f321fbb24ae5ee80ee8b8a084187e2f98e70c6d492d5f3a8f512369a84aeec
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7ac5a42af2ed2d8f0e51ab8848e3f086ce7c2fdc9f06119ab6575cc0b0b04c3e
MD5 f79b09312c8c01120401f96819a1c0b4
SHA1 1fe8023e51bfb4bb9e656a74237a62e66050b4dd
SHA512 dc4ffb277f711d471099d49003ad0d7b9539a21480de7badfee7d427efd6d37da357f8972a1a93bb13b577a1d3c6dc6fefb5a70966124fbb2c549eff2ff2f71a
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfJIdKiQoPyVvI5KYIMTm/aW840kE4VPIVukKCB6j:KIbCKcfJiKiQamvGKYI75CKSC
TLSH
T17B9155527337060138BE2809A6999B374F4331637418A56F3BB805721E27F215EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597b8f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597b8f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 0a988413f869accef2f38edff2a60bf0f43dfd29dec4247ff34dff596ccca54e
MD5 7422ec3b7cf813730b37f3a9776ae6d3
SHA1 c29c8ae1af62036b44c5a447244d130a70884d6b
SHA512 471832ec3da4a5ddddb28581e9a10cec323e24c8941076866a64ed74b5da980da7a10c6438ff384efacca3eb94fb899ab4f7c3162eb32dcfa8fa2b3c9658d062
SSDEEP 192:uqLsNBhQ7JfpnBbT2QmiU11bn4aGBPKmx+FdG+Po5Z7pEimMZdNSrqtqva+4LcYO:dsNBhGbeD4OdWGimUdsa+VYXW
TLSH
T1F1623A356C78AD7B9D936382F44636435FB48167A6C86E98E7EC9B0C05DE39C230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 40f2f3eba2339362461e8b83a890aa0775edf4559f425be901e1c5ef26fc48fc
MD5 78153a9a8fb7cea1ff111c2d2b6b9046
SHA1 1e94f208661f1c972408bab3f7c149c76be6ff4b
SHA512 868a3bfc6edd7148c74e94069bbdcdfc1b81dbb161cd4a9a7c0a981e23120dee2b045138d6e290cecdbe134b6fe8deb956f222db9c15bf6db0d5b4680227befd
SSDEEP 384:DiFiZcIOsNT8TUNTUlIlX2Gbeg4OdWGimzdsa+VYXUoy:uFQOGwgjdzoGiQdhgAUV
TLSH
T189C23CF20CE7997AD9AE5743E77D2D024EBCC163B584A954B3D89A0CCC961BFD306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 93df373d3a65f147078e5a5c71d8b00891a0cfc0eba1d30bd5a7f64c48a67f41
MD5 4b97af9384d03d87c5b0af08e6315a21
SHA1 92a643c0eb672dc3b3d996c46a2388d83283827c
SHA512 7cc2740b3543b946444076b0b1fb939d2991ca0d502a75ae7970ba14b3c87fd5563e33adaa688d732a9c7dd72ba32ad8a2b00729a642c2b8fb95a643c71631fe
SSDEEP 192:MON364BAQmiUy71WW5GBPKmx+FdG+Po5Z4aDMZ6U6:MON36eAc4WldWFi6U6
TLSH
T17C02F734AC796C7B9EB2AE45F4863B175F98113BE6C06F44EAE85B0C009735C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a1f1cbb76d51e5c31012792f20fba37d04db220bbeddef8ed52204622edc522c
MD5 b63f721d555bde90d0c430f0cb63dc7c
SHA1 cdc56dd4214087194da3e8a35d3b3a0d6d03ef7a
SHA512 f010ceef1f2994b675723a63c708b762373838ec8ce2b86f8e3fd490089307700fb224a6b702abb6149fe0e06ca5da888787c558a6b4a531b7735f1f7f6c62ca
SSDEEP 192:vONM64BXQmiUycWI5GBPKmx+FdG+Po5Z7pEimMSWwSrqtU6:vONM6e5EIldWGimvdU6
TLSH
T1E3121B316C78BC2B5E926545F08736435EA8522BEAC96F44E7EC6B1C01EF7AC230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7a8382185e340148672936cfe981170a70938b46dee24f6b3efba29123af0cba
MD5 4222866cd76495f2d5533a332e8fa271
SHA1 857bf58cd488c0cae19ef82de9ca80a9d4efacdf
SHA512 af77a35285887489e663d1491fb82e1fac736c9dc7d141a925dac2dfe9127e618584eb519cebf8d8fce4e5a78eb56419a4ccd1e8e94340c37a1963bdf9845174
SSDEEP 192:ugm+xasuheOwQxMGsNBX2Q7JfpnBbT2QmiU11bn4aGBPKmx+FdG+Po5Z7pEimMZq:QZcIhsNBX2GbeD4OdWGimUdsa+VYXUoy
TLSH
T1B1828E715C74AD7B5DE7A382F44236035FB89167A6C8AE44E7ECAB0D01DE798130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

303df726-0765-46e1-8b44-9afe83f508a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\303df726-0765-46e1-8b44-9afe83f508a1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2d6dd8a64f5c19122c94c0b415850292a6d8f744a61253d9bf5056a63f7f7d7d
MD5 91b7df2c7dec5fab208d027e6c39456f
SHA1 92392957331d4988f76eb5b239daaa519326c7f0
SHA512 24eba1c5076678fc153039e1ac725bba1371c2d0d7cb06755a045b1f00f34ae22b50b736c00c00f2b71a9916f2eca20f44e2d47083101c5823962b89962190d4
TLSH
T1E2411898B6E91148B3B77F5A9BF6A86D447BB8772E06D59E10110E4F0A73B00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download