hxxp://lrs[.]ae | Triage™

Resubmissions

02/11/2026, 22:40

261102-2llagaxtfw3

02/11/2026, 22:33

261102-2gnvssdw4t3

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 22:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://lrs.ae
Sample261102-2llagaxtfw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2924	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{B12905BC-95CE-45EC-915D-9782AA4DED55}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2804	msedge.exe
2804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 3520	5112	msedge.exe	85
PID 5112 wrote to memory of 2924	5112	msedge.exe	86
PID 5112 wrote to memory of 3992	5112	msedge.exe	87
PID 5112 wrote to memory of 3992	5112	msedge.exe	87
PID 5112 wrote to memory of 3992	5112	msedge.exe	87
PID 5112 wrote to memory of 2476	5112	msedge.exe	88
PID 5112 wrote to memory of 2476	5112	msedge.exe	88
PID 5112 wrote to memory of 1736	5112	msedge.exe	89
PID 5112 wrote to memory of 3888	5112	msedge.exe	90
PID 5112 wrote to memory of 1736	5112	msedge.exe	89
PID 5112 wrote to memory of 1736	5112	msedge.exe	89
PID 5112 wrote to memory of 3888	5112	msedge.exe	90
PID 5112 wrote to memory of 3888	5112	msedge.exe	90
PID 5112 wrote to memory of 4168	5112	msedge.exe	92
PID 5112 wrote to memory of 4168	5112	msedge.exe	92
PID 5112 wrote to memory of 4168	5112	msedge.exe	92
PID 5112 wrote to memory of 456	5112	msedge.exe	93
PID 5112 wrote to memory of 456	5112	msedge.exe	93
PID 5112 wrote to memory of 456	5112	msedge.exe	93
PID 5112 wrote to memory of 3164	5112	msedge.exe	97
PID 5112 wrote to memory of 3228	5112	msedge.exe	98
PID 5112 wrote to memory of 3164	5112	msedge.exe	97
PID 5112 wrote to memory of 3228	5112	msedge.exe	98
PID 5112 wrote to memory of 4916	5112	msedge.exe	103
PID 5112 wrote to memory of 4940	5112	msedge.exe	117
PID 5112 wrote to memory of 2104	5112	msedge.exe	118
PID 5112 wrote to memory of 3012	5112	msedge.exe	119
PID 5112 wrote to memory of 3012	5112	msedge.exe	128
PID 5112 wrote to memory of 3012	5112	msedge.exe	128
PID 5112 wrote to memory of 4736	5112	msedge.exe	130
PID 5112 wrote to memory of 4736	5112	msedge.exe	130
PID 5112 wrote to memory of 2804	5112	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://lrs.ae
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffbbef4c188,0x7ffbbef4c194,0x7ffbbef4c1a0
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1864,i,17977977385997330786,17118955256547289367,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,8438524554566110884,12624196189916642459,262144 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2584,i,13368841864372537190,14864720926210368662,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,2408241242538330449,15640185432609920181,2097152 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8624152165017328831,16115869235539177642,2097152 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,9768760116309388227,17360269344325962872,2097152 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,17490728103990840273,1350996413402662358,2097152 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5008,i,12993949123226022950,677754845639924549,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5124,i,12251560219689863804,17996548009830626467,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5856,i,12925889482799825197,10390110243002453692,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5856,i,12925889482799825197,10390110243002453692,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4448,i,387437225975804579,11168527592648771084,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4440,i,12061609725287821899,8404511367367174187,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4524,i,12681799543421358332,14268847304697055905,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5412,i,3967127463875275913,55908467061620400,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=756,i,1989015811068190135,5151144607906601508,524288 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,4536108870496943373,12250180077178605298,262144 --field-trial-handle=1748,i,18274710275491229343,6258208229696168743,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

28d79313-849e-4810-8075-aaa226b3f99c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\28d79313-849e-4810-8075-aaa226b3f99c.tmp
Size 18KB
SHA256 3cebca09062316c5ccd0024ccce03246b63b79352cbb09982449a000a523c929
MD5 e663cdf9d2e48f71f4bcda145e4a5ebe
SHA1 2eb59242bd981f3616e61c77f1fc6e1edaa8fc01
SHA512 8ad26ea08cc9dc63c31f6ba4cd0f86533912ba500de4f13824a9925cff23b69cb8c9ff5ef99d616762409b761c04bf3cc32c403f60f02cd130b9b2f16ad903e8
SSDEEP 384:iQkUSv0sNuxw0Jbk/TOjTVu6diGrnRwJrN5H7vBEw3IIla:a0OCnbNihN5H75Ew3Lw
TLSH
T159828D31A8242D7B4DF3B101F14A3647DFB0D06BDAD92B94E8DD9B1C01CA6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

595c704f-1331-44ad-b5c0-e90ca9b658c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\595c704f-1331-44ad-b5c0-e90ca9b658c2.tmp
Size 26KB
SHA256 0d1a23059c419f180b3c8bd03a2cded7a80b27b84b276c4610066e40bc44eaae
MD5 250326de225cf8954870b0e4bb3d372a
SHA1 111ec386acdb586fa2146efddc605b5fbe478c3f
SHA512 296a1c6f5b3a2c205e9b470e4a5a76e3374817e10e709fc869e1f95b8145b9b68eec7517a7a01259d11f37321a02a22fffecb9159e521a568f01e98210f852ba
SSDEEP 384:PiFzQkUSvpzsN+8TUNTUlIlxw0JbkfTOjTVu6diGrnRwJrX5H7vBEw3IIla:aFdJ/wgKCnbNihX5H75Ew3Lw
TLSH
T1D3C228F248D7597AC9AE6703A33D2D038EBCC067F9956690B7884A0CCC861BFD34A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68a14d9c-41ba-4087-92c2-95fec259244b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68a14d9c-41ba-4087-92c2-95fec259244b.tmp
Size 18KB
SHA256 a3373fea71005e9746c662deae85be3bc4559157aa3b1d2e5597bb95a3626f77
MD5 b7cf25c247acdec4997f872570e2ade2
SHA1 bbfc1c9da6979f85a019d4d5c167d280eb785248
SHA512 e4010b2b5b2495af5e57b570ec611b349f634576946a2e6fbb74cb2ddd01415c92083ddc9945af706515c1a6f6988d8a0ebfbafc8d0a8b596b28ef3400ecba0d
SSDEEP 384:9QkUSv0sNukw0Jbk/TOjTVu6diGrnRwJrN5H7vBEw3IIla:n0xCnbNihN5H75Ew3Lw
TLSH
T11D828D31A8246D7B4EF3B101F14A3647DFB0D067DAD92B94E8DD9B1C01CA6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a1da951-82a5-4c94-a98a-e081c0ae1ae3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a1da951-82a5-4c94-a98a-e081c0ae1ae3.tmp
Size 8KB
SHA256 1308ecbe4898606aceb2e2071dbe7abb25e17d118f48ce0c4f5d53c5961ebbaf
MD5 fdb094c160c6793db8c88547aebd0e23
SHA1 82417215e2901e06291d9d6086a3bdf82103ae1b
SHA512 55c3e207b2b19eae051dafbfdad8fc2715eb75d7704d124a5145a31ff4f8d997d496b072947f610ae13df5a79abfe537eb9b3b55bde5f5b9383a450ac468009d
SSDEEP 192:SONa6ygpQmiUyqdtOCTVg9l+FdV0R0rNzPK0U6:SONa6lHZtOCTVu6diGrBvU6
TLSH
T18D02D735AC683CBB8DF3BE06F48B36139FE4116BDA952F94D9E81B1C01D765C2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80973544-a666-4934-99ae-ddf82d7352c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\80973544-a666-4934-99ae-ddf82d7352c7.tmp
Size 8KB
SHA256 549ad7a27b0fc7aaadb51419335561cb29d5d0c6c7613e488c2616cf21809e83
MD5 05e377a1b841b666a7c2ea155dae4ef7
SHA1 0d698a09298acf9e4cc00722cb7ee424b28f896e
SHA512 42f489c78d464c5f31dfa5929f0f3000a7ac8a7a3941d1d84f9b2d53cfe92e860ff35b292e83ff91f6661c7b59c7fc2769f7e387c5b946a39e9123746fad42e9
SSDEEP 192:mON36yCQmiUyUdBOCTVg9l+FdV0R0rnhxFJSJru3UkrqbU6:mON36hlBOCTVu6diGrnRwJrH5U6
TLSH
T1DB121A35A8686C7B5DA3B502F48731179FE48167DE8A3F94D5EC1F1C01DBAAC234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

24e9753c-ad4e-4fd4-9c8f-a9a25a1206f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24e9753c-ad4e-4fd4-9c8f-a9a25a1206f0.tmp
Size 10KB
SHA256 55522ccafc56db10807003d667217225fc533a771c254bf568176b28a7d7bc13
MD5 3c29d9b79be5bfbd40e3da4e5fff12a1
SHA1 d35fc724dadb439d63bc736c918ca995fb57726f
SHA512 6a658b9b4f52ebf51a2ecd0a9242de40250adfc9dccc604fe5f19ec5d579c090163c435d24093fc916109d5751912c9ca70928a277e5a2b81c7c5a2da0eb6202
SSDEEP 192:sxZmJRLWxd/fJsH+iuIdp37HVo6+WN8IqI/YRPj26fIgrJ:sxZmJsxd/fJsH+i/rHfX/mz9
TLSH
T15722B9126E38A57B8CC7E21DBA25BF53D6F9503291D51E58AAFCC61C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3740a1a8-b7cc-4b20-9a47-1392f4a10308.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3740a1a8-b7cc-4b20-9a47-1392f4a10308.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

518fc09f-cd0d-4ee8-a223-4a370adc2d90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\518fc09f-cd0d-4ee8-a223-4a370adc2d90.tmp
Size 10KB
SHA256 e8ff18669d22a4b1c26ce9b449db4bcdbea4b955b18142380523278ad81be444
MD5 9735dca0bb33c0f05ba50f30f34bb454
SHA1 b60ef9d0eeb06fd455ac1064a2dfc82b6544dfa6
SHA512 d66afed03cca4557cfb12fd970724fb88ae83d3001f8ce0b3004433770f98f0216ef56ecad97a6748c5905804a17e65bc68fe70bb9da08704d203eb9c2e91745
SSDEEP 192:sxZmJRLWxd/fJsLRiuIdpN7HVo6+WN8IqI/YRPhZ6fIg5YJJ:sxZmJsxd/fJsLRi/pHfX/mQCz
TLSH
T1AB22CA526E38697B8CC7F21DBA15BF53E6F9503251D11E48AEFCC61C05E6ACD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5607d5c1-5796-47d2-8cd6-eaa0259d896b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5607d5c1-5796-47d2-8cd6-eaa0259d896b.tmp
Size 10KB
SHA256 88daec7bac5af87fe96868f39eb2a870fbe6b866251c10ff7a498605a8d7cea5
MD5 659518165e4ee27794de2a4146edcdf0
SHA1 3791df4d25f0ddb9ab2ce7bf10578ab6117b6cdf
SHA512 e32cd0e9cf70ab68b443d41dcc01c2e92d7b3c40234e2118ddbaf1fec99a7d83f6fd1dae567828df4a43e78ad609374ed876342236bf42795c5d251066ea6f8b
SSDEEP 192:sxZmJRLWxd/fJsL+iuIdp37HVo6+WN8IqI/YRPj26fIg5YrJ:sxZmJsxd/fJsL+i/rHfX/mzC9
TLSH
T18D22D9216E38A57B8CC7E21DBA15BF57D6F9503192D11E58AEFC861C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5648872e-3a64-4b4f-ace0-4465854c40e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5648872e-3a64-4b4f-ace0-4465854c40e0.tmp
Size 10KB
SHA256 711ad3a734113cd113c9127c9c0fc11df886bacb877d38870dab39b06195e58e
MD5 0e7286fdc90bb0213924114bc755d853
SHA1 79535a43305c4a5c35ac26195a2ea813ccad135c
SHA512 493ba0cbba5d887ca98991d3e50229a1b6c147facff6508ffb981c8b855a89fa9b995ee3d1f0f4e1506f04381f1b1dc16b36bfdbd8bf21be0a1cc1bc286b9351
SSDEEP 192:sxZmJRLWxd/fJsLRiuIdp37HVo6+WN8IqI/YRPl66fIg5YJJ:sxZmJsxd/fJsLRi/rHfX/mtCz
TLSH
T1DF22CA216E28697B8CC7F21DBA15BF57E6F9503251D51E48AAFCC61C05E6ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e6fe79caaf28f8c8c9530642c0ad140eb1c40006c2b554f8a22540d72c9e270d
MD5 b1b710f9a8489f22f7425c61e4e4b20e
SHA1 61bcb2aaf644902c767905b9059136f11384c687
SHA512 bcb67b23bdcb631961ca36f3dd2f0ab45919abcc4db448c6c2e364c7b7d6db53fef17d59d18c0e0d09ee6d9f4aa301a1bc0cac88e591afa44e8d0fd88b6a3727
TLSH
T1F3E0D8AB48D8C32D530CA45702A4534CC282361FABC17DAA5740C8C9F04614462DE670
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3f856d2686108dc36427f3338b1eeef54d8ad9f8efe9d672bef9fa4777aa3267
MD5 77d1dab7dbd3509ac56006331ea03051
SHA1 7616c4e81b1f34a423b824e9d1bdadd64869a792
SHA512 a4777fa12ebf01268b24c4b5d3851547a1791c87b0aa29208c2b98c1aa655b5aa2d07bccd1d0d90030886f6c55d45f28c72eb59ef2dbeaa75312617489475c92
TLSH
T10751C6C4DCB14394FB991F79D2D801CF36B867A1668BDF3E1A9DE8B9580AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 71ce0bef6094858056b27da96a5c7a453dac46f11998dae92f9eec4690375b7f
MD5 0fee9d0792ec8df41aa46aadc8a23148
SHA1 19cd809d86991390fbeea4abb34a6dd5c9d98157
SHA512 6d2d2e76439e3e08e4ca2bdbaf764da0cbe6b2507fe2599f180e171d36ca8a938260ab8d7842e790920e50b277e8255ded2d163ec54f247331428fd6af65f99a
TLSH
T1C751E6C4CCB14354FBA90F79D2D801CF36B867A1668BDF3E1A9DE8B9580AF19600C348
MD5 SHA1 SHA512 TLSH

Submit Download

10a73e74-7580-4727-a6dd-3f3af09208fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\10a73e74-7580-4727-a6dd-3f3af09208fd.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2ecef4dc-5a7c-4409-8ab2-7bcf919f9247.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2ecef4dc-5a7c-4409-8ab2-7bcf919f9247.tmp
Size 949B
SHA256 971bae8a68a675a481e7b5c961a164997289a54c3fa04b94936ac277928a31f8
MD5 9db5735fcb110335955564978fdeef22
SHA1 dbca1d983066f347206e36ffa900cba3ee575f64
SHA512 3c5348d3d0a0109c5c2d9e976163f00a0e55ef1278821c5a400d7fbdcb82f0a918f38ad1517c19b5e8e5eb6be67620c04847ab5ac5d12b2590d9440868fe049c
TLSH
T15F11BDB3C3D5856EC9111AF09A24AE2BCE2C0506421C3C1985D4EF2BC3F3475D00199B
MD5 SHA1 SHA512 TLSH

Submit Download

71c27630-1fe9-4377-ba1b-d40c1c3eac6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\71c27630-1fe9-4377-ba1b-d40c1c3eac6a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c86389b6-21ae-45d1-9054-f665f52567ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c86389b6-21ae-45d1-9054-f665f52567ba.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e3bc224f-cd12-4c82-91ad-c674c1d3ea7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3bc224f-cd12-4c82-91ad-c674c1d3ea7c.tmp
Size 27KB
SHA256 aaa2935e261a7edeb60595bf93dd6d6161cea51f92f474904ed1a8e51de4f23b
MD5 a75c92894de42857d221c9e37b8a9960
SHA1 9d29d31fa5c6e3c530a05032d321a5f6d60dd48b
SHA512 ab4730305ebc8dd2a0683a4fc6764695e34ae8cfeed92f2d72ebf3e2821d1c0f4c5ea5d0e05632d80002932260ddae7c1a2cf872af766cdc46941823b41f35c0
SSDEEP 768:/LK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k34ro5+Fd:/LK9uzYWvcQWsu1ja0HL7Q3D5+Fd
TLSH
T1DDC2093F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed30ac9f-fee2-44f1-a51d-136d44998c07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ed30ac9f-fee2-44f1-a51d-136d44998c07.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3ebc098-ba35-4efb-8494-e7f4f267ca23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a3ebc098-ba35-4efb-8494-e7f4f267ca23.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 46bb3efd4cd5d39d382955f365c64fc7383959f1394b870f63a934ff3a153662
MD5 e4c96f2f369560205f4be4ed044a1c2c
SHA1 127bae11020edc74890c9691d9912a31db97676a
SHA512 a27f9108f8aabc576f2e996b85c9353413af35f586117df75b3c3dd2bdb22b969cec4dc30e8ad910e47ff90fb9ed2558e078e221ab3aea6f9666db7ffb8efebd
TLSH
T1A6410B58A6E91248B3B7AF599FF6A8AE847BB9772F07C45D00110D4E0672F44C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download