fa0a44e6eed6c39bca2012caf3876c7a049d9b2f87abbc0bbc3e070dbcd54393

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 15:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dexter_dk_release/CasinoLoader/upload.html
Size 1KB
Sample260727-se3fqsgp4y
SHA256 fa0a44e6eed6c39bca2012caf3876c7a049d9b2f87abbc0bbc3e070dbcd54393
MD5 b2640cea86e5171662a082b6a043fcc2
SHA1 907a1b4331849fc91fc9a217f6aad6e9ef27b96b
SHA512 07faa00e0265ad7f958d61dee311e4fa173f7daa3697a8bae2ae38a6f3d6a01dd6487d96993e7d0cd5e6a3bc25f087d7a011e7ef0181fcbf581e209b41106850
TLSH
T1D2310265B0429EB88165EBF567140C00E2A5C36383056F183886B8BBD9B44A513FE6CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4828	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296382313105949"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{780935EC-7F3D-47A6-8412-F2023BF0C023}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2224	msedge.exe
2224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1912 wrote to memory of 4288	1912	msedge.exe	84
PID 1912 wrote to memory of 4828	1912	msedge.exe	85
PID 1912 wrote to memory of 4296	1912	msedge.exe	86
PID 1912 wrote to memory of 4296	1912	msedge.exe	86
PID 1912 wrote to memory of 4296	1912	msedge.exe	86
PID 1912 wrote to memory of 5028	1912	msedge.exe	88
PID 1912 wrote to memory of 5028	1912	msedge.exe	88
PID 1912 wrote to memory of 2044	1912	msedge.exe	89
PID 1912 wrote to memory of 2044	1912	msedge.exe	89
PID 1912 wrote to memory of 2044	1912	msedge.exe	89
PID 1912 wrote to memory of 4192	1912	msedge.exe	90
PID 1912 wrote to memory of 4192	1912	msedge.exe	90
PID 1912 wrote to memory of 4192	1912	msedge.exe	90
PID 1912 wrote to memory of 116	1912	msedge.exe	91
PID 1912 wrote to memory of 240	1912	msedge.exe	92
PID 1912 wrote to memory of 116	1912	msedge.exe	91
PID 1912 wrote to memory of 116	1912	msedge.exe	91
PID 1912 wrote to memory of 240	1912	msedge.exe	92
PID 1912 wrote to memory of 240	1912	msedge.exe	92
PID 1912 wrote to memory of 3860	1912	msedge.exe	96
PID 1912 wrote to memory of 4740	1912	msedge.exe	97
PID 1912 wrote to memory of 3860	1912	msedge.exe	96
PID 1912 wrote to memory of 4740	1912	msedge.exe	97
PID 1912 wrote to memory of 4696	1912	msedge.exe	100
PID 1912 wrote to memory of 1712	1912	msedge.exe	104
PID 1912 wrote to memory of 408	1912	msedge.exe	105
PID 1912 wrote to memory of 4528	1912	msedge.exe	106
PID 1912 wrote to memory of 876	1912	msedge.exe	107
PID 1912 wrote to memory of 876	1912	msedge.exe	107
PID 1912 wrote to memory of 4700	1912	msedge.exe	114
PID 1912 wrote to memory of 4700	1912	msedge.exe	114
PID 1912 wrote to memory of 3364	1912	msedge.exe	115
PID 1912 wrote to memory of 3364	1912	msedge.exe	115
PID 1912 wrote to memory of 2224	1912	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dexter_dk_release\CasinoLoader\upload.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc705dc188,0x7ffc705dc194,0x7ffc705dc1a0
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,16362048017235285055,11683746197852124290,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,4442093938117235547,16629910691505993610,262144 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,16689743605892751806,3292775886807276565,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,17851724757392054875,9529987061496655391,2097152 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,10654318255531027748,12701568148920839110,2097152 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,14236532194243693977,1179281282163417006,2097152 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,10382042356755934337,17553701517006135736,2097152 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,16884576042595554344,9366808740386647138,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,2772586384942427041,6546708507802037143,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2668449942616954902,13247345430144804943,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2668449942616954902,13247345430144804943,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,3593768757336932449,2284116631131440548,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,15558845162502427277,8499639638611023822,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,16906070455734295821,14341673607710821231,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2848,i,343131277806853906,13197442159196849614,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,12257973484211355808,16197183545454678792,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,13801648309926995288,14244336786257307772,524288 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6088,i,4125501220259458464,3269614024080536977,262144 --field-trial-handle=2384,i,5718343507616243084,9650593232832646226,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 145B
SHA256 afc8b9a23a4c37f9b2e18a706a304e148ec1f50c249e13e1a77bff2f3ecfeb4a
MD5 161970ae7b9c62e9590ba9aeff61cea5
SHA1 601534e12e090c99f26c59ffd9447b25b4dd296d
SHA512 174544ed7f1898d7de4b017c5f1457b1411f56601e0e39af4884667ce89cce524a4da087469385f285b1999b2ce524f6a31522d0287a27ce2e27c50d6aac805b
TLSH
T14CC02B4804C6C31BB204F8CB0278A71CC2C0730F8AC4660F031CC5C9F143C88B293550
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2cff3fbe2d3f907e1fcf2d2276a1514cbdb32265122e701d90f57571135d7728
MD5 5e1753079413befef5564613963b4cec
SHA1 b33f9616aeced25fedbe5766e39998e71a9315a5
SHA512 b06b86dc75952560344c76cc2db716a7c2e793c8068629dbc40f28b66831fee8b70bb1da5a1ef442782815f7ff3d6428c75adf29a6d0c93cf9ae0c3dca94c8f3
TLSH
T1F3613A7402427282E3E31530D3CA160137B248BDBBDBDE1923B0B87EB536F5A852943B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5909da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5909da.TMP
Size 3KB
SHA256 76f265c56821d55ca623f54dab7b0804726a3f0600be88eaee9ad164917ccf03
MD5 77488bd76d913f50bd878629f69f4652
SHA1 925dcdba7f0751280778f76d67bd238626a777fa
SHA512 55586e16480a035dfdb7ad6c55ebf36d7f8f27631e09b1a48f7d956441a49be5f8ce9d66ff2dd3d7676e5956e457b7f55f11b8fd64ae5986ee89279e20336c00
TLSH
T1A9613A7402427282E7E31530D3CA160537B208BDBBDBDE1927B0787EB536F9A852943B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1cbe493702012b3378e2d49c1d3d8868d929240d3ffa413e92ca54701bd4d07f
MD5 b58617d5a9b47b8b186d91086f25d267
SHA1 3940c8b5ccdfc0737cb110b20f72c53a492466c7
SHA512 0ccbfbb698603f04ea57771019c1c27c7fc9db707668e5c59c27ad04d5d3912884ad013f64dc82f4f365079a114c2b6603b334c9d2e9dc37699ba7d6bab099fb
TLSH
T1C411BDF7C7D585AE8A0116F06A24AE1BCE2D0906831C7C2685D4EF2B83E3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fe7e0af9f620ec35dc72660d255729e50545eddd3e1650297851a64012212bc8
MD5 07770246b6eb013a7d40eb5e41d9ca0f
SHA1 9161f7592d563261d6669fe2f4e801d9cf37eddd
SHA512 4b3ae53699990de64f14b7f94f91712474c31f737013cb813de7a658e4fb3468f1cadd29fde3246e631042a55524faa584aef8039af3ff0f1ee44a0c0337a7a8
SSDEEP 192:sxZURlkp/f7sc5LEIdpdiHW6+WNGYwK+kxIgrJ:sxZU4p/f7sc5LdUHbGc9
TLSH
T1B422A6166E38A93B8CC7E219BB25BF13E6F9503291941E58E6FC860C05E6ADD131780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2821a89cdd0eaeb2e15cc318ddfb1c674df08dd1c7dd40b32542fd555c09f61c
MD5 e3d5622b28457b6a42ac8fb0bd1241d7
SHA1 dd407b6b940691dcfb68675a18934eb97e7d5e83
SHA512 0d8571b1a18532b3c32036c40a61b2813953e8dfaf772a7433553b20adfc6a285dbf90335d20562edaa638236f27c0c5f129666107e1445141a36435019822a9
SSDEEP 192:sxZURlkp/f7sa5LEIdpdiHW6+WNGYwK+kxIg5sJ:sxZU4p/f7sa5LdUHbGcm
TLSH
T18422B7166E38A97B8CC7D219BB15BF53E6F9503291941E58E6FC860C05E6ACD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ee4800a8dd72fed6bd75b7ae4e08543d50e0336d72690c10f95b433e6098e65e
MD5 dc91d8e5936e0e5fc57ee26286ca1aeb
SHA1 e7d46a2f8ffdbc0d662f27dff48962f9d56788c6
SHA512 383042b0128890e3eca9211ff4555d56d003f5a0946b64631bcdf320d33fcfdc594d339f05de93477521a63da24addde051b40653f2d98347d147f5abe6603c9
SSDEEP 192:sxZURlkp/f7sa5GEIdpdiHW6+WNGYwJMkxIg5eJ:sxZU4p/f7sa5GdUHbGlk
TLSH
T16422B6166E28A97B8CC7E219BB15BF13E6F9503291911E58E6FC870C05E6ACD131740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e3cc773ba5c07222757d5fe50d7c8705bd7884c521e19b941955c64d202514c1
MD5 f05bf3beddc268a93ff34c10d732e59b
SHA1 9421e167dd0ab1e1a77e94dbcdc52f7a70f3237f
SHA512 0b0275de0350811ea04f64c2ca6eeca8feee78ac2f414392bc4716a765128c6b8d8d84e29250bb1d4c6ec0b3231d1dbb18be820cb0f876aadf94b95596abcf58
SSDEEP 768:4AmjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+DbrofkRac:4AmjYDmWvmKyEu1jakPLZQDo8x
TLSH
T138C2FA3B244CCF7E4F801A9DDD5A6F973EA802C76B588D4047FA954C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 64b2f82404915551407e3f267eff025aaf6741252eb806179e831193dc3daa6c
MD5 f03d1a315d5d30fd24249607ebd570f4
SHA1 8f6e45368a3ef96583d0c7095bb7dc0cfddb5bad
SHA512 17c1cad5e413e460f874f9117d2d49322d340bac01c1d4e19cd70d63c43ce12ab3d56dfcba21cf505048e489c4196199983307db7b4d7c966fd8f02a3e9383b2
SSDEEP 384:3sZcIIzsNY1a+CEI8f+W86nX69FKOObjI9G6w75y:q0ac3X6XK29M5y
TLSH
T138927D36AC38AC7799E2A551F4CA36175EE8603BD7C46F44E2ECAB0C04DA9EC1317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c97384ccbd008142c258dda7fd585daa3c936bf6eb6388a56188d2b0a0331f73
MD5 78d64be2d4e8c7c2037646da41d3f07d
SHA1 ba8beaa7d0a47473e7af3d8e1cd9fd638b9d79ef
SHA512 e42b741d420705f93c56d9a05a52f68acd8b6f0b8203ba4aba18387939b7f994eeded8c57c22b66b15feb8d724da6652b009b5d25137c5dd16d7a8530e424c69
SSDEEP 384:GZcIhsNYAa+CEI8f+W86nX6TFKOObjI9G6w75y:Uhfc3X6BK29M5y
TLSH
T14B928E36AC386C7799E3A551F4CB35275EF8613BD7D46B84E2ECAB0C009A9EC1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 93e7b3fe5f2bb97359f3553449a1fe5d079473f84e2e7e309019ba916d4ed540
MD5 7ae1e3cc9f4a601966b602af8453b8b8
SHA1 48d226ad6b04a2ee0f2cfba132ac02f9573e089d
SHA512 bca75977b5c8d113d4ae3b92a76fbb94ab4e10d2197773ad8d21253f7b607692b294364799e4aee37053b52a12bdf38c6a753d8d1a5ad8985c912f9bad2e725e
SSDEEP 192:EONz6hZ0QmiUySkpc/+jV8jzorxoE5wOZJtU6:EONz6oipu+W86723U6
TLSH
T11F02D83569787C7B8EE2AE45F48727135FE8212BEA956B84D6E81B1C00D769C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5779fff0094e1925f40e989cccb1caad0da8db9912921a5def8ac3af6be02062
MD5 ced37c60f222297c889db664cba37a95
SHA1 1f1d803dbdf0fb92974bae95876611d09c43b1c9
SHA512 9300cdcb767cba08ef4e2c9982309b5a3c742d33f8ae7d39fac701e85f2e691d6e91dd2178a58c195748b6e26d75677b1dbc0eee0b96786fe250c988d5a4280e
SSDEEP 192:NONJ6hZLQmiUytksc/+jV8jzorxonX6P5cOqaqyU6:NONJ6xDsu+W86nX6i9KU6
TLSH
T18E12F9366968BC679DD2A591F48732135EE8512BEFC57F80D6EC1B1C00DF6AC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 364ac3ddf782ff5a985fd49ee7c28fd1b9dfd3e6e4fa7bba0e5f5ec8b1a2c445
MD5 066db5f90c3ff2fa28f4b2f6557aed05
SHA1 dbdd813b84d197d931ccd826bd082d2975195304
SHA512 4883ace55d6b6d5ad8517760f16f9278048a8f6349dff729f7f13742ba24973e1200a8e3c5c373a9131c38666a2e687fdb6a1c31af4b95834c75868f449a2386
SSDEEP 384:PxZcIhsNY1a+CEI8f+W86nX6TFKOObjI9G6w75y:hhac3X6BK29M5y
TLSH
T138928E36AC386C7799E3A551F4CB35275EF8613BD7D46B84E2ECAB0C009A9EC1317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

795097e4-a91c-4831-abb8-1f9b1657fc0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\795097e4-a91c-4831-abb8-1f9b1657fc0d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a47e0e80bd2745c5beac7bb1570b48c85470e3236fa744ea74d1f07b6890a66
MD5 a4ef4a55f3522b859daacf9fbbf41052
SHA1 e374fb8099f12becd6a164a5ef384d8c5b5fc431
SHA512 94fba0ae0f522ec130a116f5d5061d7d1260bb0cf724805b387af89603099c63bbf861322172261877d77fd51d1264f95cb9797df8973245f1e9c853629db2a0
TLSH
T14841C959AAED1148B373BE56BBF6696E487BB9772E06C45E10110E4F0967E00C861B33
MD5 SHA1 SHA512 TLSH

Submit Download