ac47ea4abc28dbac37febe1b3cfd751cb0d9f0011977dd7f3f801b7a7afd80fc

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 15:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dexter_dk_release/CasinoLoader/pagination.html
Size 6KB
Sample260727-se3fqsgp4y
SHA256 ac47ea4abc28dbac37febe1b3cfd751cb0d9f0011977dd7f3f801b7a7afd80fc
MD5 1a8d91c12263dd5298a70c72976c5e97
SHA1 5970099d5c56b94827408f23143a79da6c8831de
SHA512 a327e265d09055fa86ec960518d0ca592b505d357928ea58bd5a161744030b15b20209a77e5e3a884ca7209ad4ab75b43e21055fd4d289a7f87a83e11773008c
SSDEEP 96:Z8MszIFO3VFcXMR2x9R59lypXl8FpF519qDpgpdN:ZbmP3D8R3lhvF514DpgpdN
TLSH
T11DD1A78177CA46399623B661717957B2CC7AD0747A8CACD87EDF21CBA78E534034E160
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5460	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296382347529597"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{48CD9482-E671-4DB8-BA7D-A9CC42114CDE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
972	msedge.exe
972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 4128	2908	msedge.exe	89
PID 2908 wrote to memory of 1056	2908	msedge.exe	90
PID 2908 wrote to memory of 5460	2908	msedge.exe	91
PID 2908 wrote to memory of 1056	2908	msedge.exe	90
PID 2908 wrote to memory of 1056	2908	msedge.exe	90
PID 2908 wrote to memory of 3876	2908	msedge.exe	92
PID 2908 wrote to memory of 3876	2908	msedge.exe	92
PID 2908 wrote to memory of 2852	2908	msedge.exe	94
PID 2908 wrote to memory of 1500	2908	msedge.exe	95
PID 2908 wrote to memory of 2852	2908	msedge.exe	94
PID 2908 wrote to memory of 2852	2908	msedge.exe	94
PID 2908 wrote to memory of 1500	2908	msedge.exe	95
PID 2908 wrote to memory of 1500	2908	msedge.exe	95
PID 2908 wrote to memory of 1252	2908	msedge.exe	96
PID 2908 wrote to memory of 5100	2908	msedge.exe	97
PID 2908 wrote to memory of 1252	2908	msedge.exe	96
PID 2908 wrote to memory of 1252	2908	msedge.exe	96
PID 2908 wrote to memory of 5100	2908	msedge.exe	97
PID 2908 wrote to memory of 5100	2908	msedge.exe	97
PID 2908 wrote to memory of 6112	2908	msedge.exe	100
PID 2908 wrote to memory of 2584	2908	msedge.exe	99
PID 2908 wrote to memory of 6112	2908	msedge.exe	100
PID 2908 wrote to memory of 2584	2908	msedge.exe	99
PID 2908 wrote to memory of 2612	2908	msedge.exe	102
PID 2908 wrote to memory of 4556	2908	msedge.exe	106
PID 2908 wrote to memory of 2024	2908	msedge.exe	107
PID 2908 wrote to memory of 5344	2908	msedge.exe	108
PID 2908 wrote to memory of 3532	2908	msedge.exe	109
PID 2908 wrote to memory of 3532	2908	msedge.exe	109
PID 2908 wrote to memory of 972	2908	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dexter_dk_release\CasinoLoader\pagination.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,7977472565442310579,8628509796350317555,262144 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,7602313686891165752,633859871770230288,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,6716888658803628916,16260726510261179447,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=3168 /prefetch:13
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,7600552642753648526,1580791675336881701,2097152 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,14112186707564578782,10359461457585729080,2097152 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,10681323053940398267,16689538147625384321,2097152 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,12529988712341804225,11441222996994193060,2097152 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,2245024799902653718,15981586485022810566,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,93339930681974907,4975860809468427238,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,2290642613475969775,4732303825093987225,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,2290642613475969775,4732303825093987225,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,13742977675741026441,8896196830001503916,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,7914681176675813179,11508093972059087745,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,10137491626978929117,4030667541523322855,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,15159744505255445605,6391782836010728505,524288 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,16070887729191200979,13495755368990177035,262144 --field-trial-handle=2272,i,1312870138753349919,15759695826305172680,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b3b369762a135a227b3bb8a1b25633129aefb35d45d7482e1bc737b038ea70f1
MD5 21449fa3fdddd19bc7337a573e0aefb1
SHA1 fd63a2447474a84ab4c036dfde856dbe9036165a
SHA512 ea62872df2d29dbb0fb2081ebee26788dad3faa0c7321d94e9a9c2b7f3a5dbb3580d0380b8abef05022bfcdb7066a564090a8e0922a85333c931908fc8cecff6
TLSH
T1FC31FB428BA031C2DBB695F209ED675632F0F479A5036E67759CAEB48B01FD2C2D0037
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 14d02964b029b5a04562defc46e36b8c0cd5b92a18c19b4a9efbe1bb3f540c69
MD5 d0f876aa052ee9f452aa8db0deada9a7
SHA1 d0f3220943faf27ddef920f021bbe513f1872d57
SHA512 df072fda0e4abb375d48294ea1315fb3ba79c052f990a548a36f8cf9fa822da70e2c278cfad95ac4899997c6e669688469ce3ac1a47decf5d7b63c2564446a49
TLSH
T17041BBF7C3E8866E8D0156F0AA186E2BCE2C0915832C3C5AC9E4AE1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9417b5d81f4f6a62a5b1efef73b9dae1ee9a6e35e42ce677811650056d44b835
MD5 6999ec55152ba331dc3a966ee0fa0952
SHA1 2792e78293796aafbd7fcd147e9bfbfbf2b02059
SHA512 5069fcd45fdc556defa18082c4e012b2423f48ac39d3e7bbbf37446ed299a09bc5bd4e12bda617567d391fd01d5ce30ad0fa9e79d67aef02eeff05addaf49d85
SSDEEP 192:sxRuR1bq/fps+dpq1zWqzoD8p4Z/g6+WNIYGlkUcGVIgIJ:sxRujq/fps+d46WI/5IPxs
TLSH
T13632D9166928993B8CCBD20DBB257F53E6FD5032A1952E18B7FC860C04E7ADE521740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b0126d5900a4b744b938c290a26e22836cd52467adccc4b8429cdb1373281012
MD5 c413a346082b14493f0d89e8f572deca
SHA1 374b6d6b6d22740df4d25103daadcfc7cb82cb72
SHA512 522e354ac27599205cb0492c0554ce6b0e3988eae3dac26f49b838f0a8f5dcef735a3dfd6e5d0f187a749936b2c313881cf8942e4c1068df3247e643c379b048
SSDEEP 192:sxRBR1bq/fps5+pq1zWqzoD8p4Z/g6+WNIYGKUcGVIgDEJ:sxRBjq/fps5+46WI/5IPx0
TLSH
T11542D8166928993B9CCBE20DBB657F53E6FD5032A1952E18B7FC860C04E7ADE121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e54668f04d462cc59c1044b9cbe4058f9deea2da1e25bbe59d7889cc9c37b808
MD5 8aaa8f429ce0ef575b69ddd02c1a4425
SHA1 b20e1372519f8c5db0c21d8771940c47bdefffaa
SHA512 ef1268f332edd3108aade19704284a0afd558678f3061472f8cdf140848a878acab3a225a5281f37bdecd1922378d102923438993af450b795d3e8c19cef099d
SSDEEP 192:sxRBR1bq/fps5dpq1zWqzoD8p4Z/g6+WNIYGlkUcGVIgD+J:sxRBjq/fps5d46WI/5IPxm
TLSH
T1B432D9166928993B8CCBD20DBB65BF53E6FD5032A1952E18A7FC860C04E7ADE521740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e596152f4a947883b916d73cf0ea9bbd98dd39fb7f149b9c4c05760a504c63b6
MD5 80968cba8d06b5b89463bd2d65b7b2b5
SHA1 8a561a4d1cab163ac7a9aa3a39b0f4a056f6c519
SHA512 9428e30c2dcb338bf1cdbf887bd7f35bafa1ac76b436bae17e728e4fc3c5a475f8b98f7a42d2d008a671c5202a44e2ab87eb7d0f00cbd67d850e2e7a48582c5d
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRItrows:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Vk
TLSH
T115B2FC3B600DCB7E9F800AAD9C197FDB6D9802C79A589D4047FE990C02C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0ebb83e33161657f2207c8b534497feba8d4654006a6ac97fec6c91150e79103
MD5 ecd5ee18145974f80061b70fc4d28106
SHA1 e05da5088a0a62f8ac90b169fdd2c861b6fcffdb
SHA512 0fb81a1cec43785344a1bd24e9a57f9c7092ab9c7abb5cff85ab7c512aa96c8e87f4818999391977b758b21c183a6a5c678f7bea0cdf18fafac2bfbf8b9d2137
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkr0xFzJZlWNiYgtlK4UgDlcLTqN5eHBoBZBsL:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNT
TLSH
T16791DA16317A1250387EB50891BA982F92C275A33259E43B7BB951B60F77E038DFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6ccbe4ccbd54cfb1aa0227b076d21dcfc6d05c4b32a6697af4b0be386ea0b5e8
MD5 c51b632a4d116049abaa2e3229b44dc7
SHA1 d76e860a8269f89b4aee74ba751c5a01363267b3
SHA512 6e7ce9246b4db353fc2830471e5ea93355320c0c2769cbe4eb278a89615ab79135ba8c7902465a0b5d0f00a120de3ab626041deda06d57fc2aabdcecbf742fe2
SSDEEP 768:1krv+4UNbdE3PmO4lYya67Hucys6BRvi82oP4/z6himo6Hb9MpS:1kbsb63PL3imOz6ImoYb+pS
TLSH
T1C613B035F818CA73DCA7C295B0877E537FE4522785CC1A90E6DA6B0D06CB9AE531B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9de01b1d0d3e1e3f88e73b1bfd83d314533b32209ce103476546980e33859cc8
MD5 b2d1de4029393da64a4eba40f936568c
SHA1 800c97c89f2e8fa71ed1bdc8878fe690a97d2f21
SHA512 e0fb9bc4ca019f6ceb5d9d1193ac5ae5de7ed732eade1c35135130c6569b082149589357e862cefc52465c3aea1255365ae9f0f955569c814ab91d144145e560
SSDEEP 768:QAH3imf4lYya67Hucys6BRvi82oP4/z6himo6Hb9Mpp:QAH3io3imOz6ImoYb+pp
TLSH
T109F2C034E8558D73DC9BC295B4863E527FE4A33786CC5E80E5EEAB0D0587E6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 316103b1d3dc1c7a67f3a1834c3cd43aad45ae40e495ab35a6b13320cb64bdc7
MD5 e6ee6730553262b786068c90d1a3b6b0
SHA1 bdc81ce5592f719590788c6327478f2e5553855c
SHA512 ffd03d96fc256d4d569e362e03f6b340aab8029f40aefaa6b146da34f5feb5f534332f4b5bf5ad40f5758ed3112dfea8a71fe5dd3334e10ecf4921fda042e45d
SSDEEP 768:YAU3imf4lYyay7Hucys6BRvi82oP4/z6himo6Hb9Mpp:YAU3iW3imOz6ImoYb+pp
TLSH
T1FBF2C034E8558D73DCDBC296B4863E527EE4622786CC5E80E5EEAB0D05C7E6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 749fe621d91b7352c09db9ffdb45dd596819422e691c49ec84a6ed6bda20628f
MD5 f01417befc39404b2b9d17a0c9af30ef
SHA1 bd30ab8666b9559755708a216d0cc0eed7ed7b77
SHA512 caee3f1f741d4ba4e68f7da0fa0f1a15b1bc1bc3a2264620a8152ae87c0bd66af77d70327b00f83c6f37d84b5fe062595dc790ff4ef68295067fcb1bfb9333fb
SSDEEP 768:1AH3zmf4lYya67Hucys6BRvi82oP4/z6himo6Hb9Mpp:1AH3zo3imOz6ImoYb+pp
TLSH
T106F2C034E8558D72DC9BC295B4863E537FE4A33786CC5E80E5EEAB0D0587E6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fa51ce482d105050a43d4b4e3badb98df1660ff1824d478c3fa20c2b3dfbdc06
MD5 66bd1b3b5ccafc1a8c8dc46b937bdc27
SHA1 419b0790e898ac3efa9324dbfa3c3ba5892c638a
SHA512 973023e9967af3a0c1d290aaec514dfe8e5595d2ee0f90ae564d03c68349c73288a5284fb2ef0a01adda4a6b78553a39cb3b9eb39ef71f8f1d271d060ef29169
SSDEEP 768:xGrv+4UNbdS3OyjlYyh7Hucys6BRvi82oP4/z6himo+M2bwn+h:xGbsbw3Od3imOz6Imoj0w+
TLSH
T1D003CF35F4588973ECEBC18874467A533FF8522386C91AD0E6DE5B0E128BA5E530BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36951ef2-6c63-449e-b7d0-c56b921776e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\36951ef2-6c63-449e-b7d0-c56b921776e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download