hxxp://migliorcasinononaamsit[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 14:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://migliorcasinononaamsit.com
Sample260721-r97hhawwev

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291192865109190"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{D3E3B79D-3CD3-4A73-8836-4F0EE90E8936}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 1924	628	msedge.exe	85
PID 628 wrote to memory of 1752	628	msedge.exe	86
PID 628 wrote to memory of 1068	628	msedge.exe	87
PID 628 wrote to memory of 1068	628	msedge.exe	87
PID 628 wrote to memory of 396	628	msedge.exe	88
PID 628 wrote to memory of 396	628	msedge.exe	88
PID 628 wrote to memory of 396	628	msedge.exe	88
PID 628 wrote to memory of 2992	628	msedge.exe	89
PID 628 wrote to memory of 2992	628	msedge.exe	89
PID 628 wrote to memory of 2992	628	msedge.exe	89
PID 628 wrote to memory of 3756	628	msedge.exe	90
PID 628 wrote to memory of 3756	628	msedge.exe	90
PID 628 wrote to memory of 3756	628	msedge.exe	90
PID 628 wrote to memory of 3848	628	msedge.exe	92
PID 628 wrote to memory of 3848	628	msedge.exe	92
PID 628 wrote to memory of 3848	628	msedge.exe	92
PID 628 wrote to memory of 4612	628	msedge.exe	93
PID 628 wrote to memory of 4612	628	msedge.exe	93
PID 628 wrote to memory of 4612	628	msedge.exe	93
PID 628 wrote to memory of 2900	628	msedge.exe	96
PID 628 wrote to memory of 2900	628	msedge.exe	96
PID 628 wrote to memory of 2900	628	msedge.exe	96
PID 628 wrote to memory of 4756	628	msedge.exe	99
PID 628 wrote to memory of 2860	628	msedge.exe	100
PID 628 wrote to memory of 4756	628	msedge.exe	99
PID 628 wrote to memory of 2860	628	msedge.exe	100
PID 628 wrote to memory of 2592	628	msedge.exe	102
PID 628 wrote to memory of 3184	628	msedge.exe	114
PID 628 wrote to memory of 2736	628	msedge.exe	115
PID 628 wrote to memory of 952	628	msedge.exe	116
PID 628 wrote to memory of 4872	628	msedge.exe	117
PID 628 wrote to memory of 4872	628	msedge.exe	117
PID 628 wrote to memory of 3440	628	msedge.exe	125
PID 628 wrote to memory of 3440	628	msedge.exe	125
PID 628 wrote to memory of 4392	628	msedge.exe	126
PID 628 wrote to memory of 4392	628	msedge.exe	126
PID 628 wrote to memory of 3924	628	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://migliorcasinononaamsit.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffcf500c188,0x7ffcf500c194,0x7ffcf500c1a0
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,14751011340660070433,16272492737256853160,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,13144855535843013588,10995401985149406270,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,7579787584329192905,14445302395642776416,262144 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6226324729874805847,16552593682577655389,2097152 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,606312468289936518,1845075360740748582,2097152 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,4159178375138353740,10043111431344777616,2097152 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,10164051916031978892,14318219892677272059,2097152 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5060,i,10954158894899485159,2375665731637512201,2097152 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,17465173803541884947,9680922743004157986,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,17199562514592552264,11719681215715564043,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,12104789519199993086,5934205966699246179,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,12104789519199993086,5934205966699246179,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,12842353109559840506,14278972744582776620,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,3678545660175364577,13853468238464346425,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,18011967652481128000,212426102884340046,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,7858141739319534361,5031970958644487489,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=3992 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,17696547050096896391,8814758315675155391,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,8733088275742399600,3897718525575689742,524288 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5964,i,7861136731898293653,8723590870412908735,262144 --field-trial-handle=2432,i,11724887624707172176,15043396235230388935,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

8dda2675-d68e-418c-94cd-19a21c8fffe3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8dda2675-d68e-418c-94cd-19a21c8fffe3.tmp
Size 12KB
SHA256 174b75539a4d1379fa4cce8d06d79ceeb2b066fc3408e761c6dd8eb48c4cb091
MD5 1110760e67cdadd8a957b16b6e6f42d5
SHA1 58e7cac8c7bf8d326ea89054c8ef96178fd24f31
SHA512 efea4be9258cacc5e4bf6c5fe0bbab5f6dba2c1b9ea74b27697a6ea87d66776c67ac236751dd703329c4a91009068bd8cf5a1aeba657c2a52073c16dc4358742
SSDEEP 192:sxZzRxyM/jK1Ml8Mka/fss/devHIdpOAHW6+WNd7n/Yz/nHQIgrJ:sxZzbMa/fss/degvHbl/39
TLSH
T10E42D756AB349977CCCBD209FA55BB53D6F90472D2900E44AAFC9A1C04E6BED231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 29f27397898bbcbbba300c66d2efda825acc30a4030c0d2cb0ac90500d20271f
MD5 0964a67cb42977ee0b25be44e8ebcfc0
SHA1 efab498624af7c1a0c4f3dde1d89f5e48957c9d2
SHA512 9715c9da49c02221ea236f67f574562b807b704cf469285f03f33cf0a7c9f22a090fd198a325160abfa2ac0a65f4151f0dc1ea25bfac946b727f908706cc9767
TLSH
T184E0D8A416C5C66E5B6064874268D30CD2A036AFA2C46D091708C4A5700608863E199F
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5ee87006bbe22d9f06ceb7f7503e58a9790e894430b9d94e6007cf606ae3795b
MD5 75d4d9b056a5703285fcd098b356cb4e
SHA1 823b5f348a0727a14d1ebe482f1a492c40cfc6b6
SHA512 d97391045bca1af87305908d66f61f75d1a56409867fdeda2d1d51789cd2d7cda95228a953e05f83481fcf40bf0bc3e1a10429656f5ceffa4983e73a3c496349
TLSH
T15581A8380E6F00B5F3B11FF1B3D14B44347E82EBF993BD9662816A74790A761B2C9405
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589df1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589df1.TMP
Size 3KB
SHA256 5ad70118256c5c472c1a77ced410786b443a2dc016f13ef38cbb43a6d938f1e1
MD5 b3f461ea5b534b858deeccb6ac749c3a
SHA1 42f8056683636fd44fdbf63b199f5a917ddf3428
SHA512 8fd3b2620359410f01f2e4a5068b8b97a4462db5278e58c8619129ddda8b59fc705e12b4e6513585d20e7b720d3f746d63ea421b2ed4464b2331d2e18ce3ad6c
TLSH
T13C8196380E6F00B5F3B11FF2B3D14B44347E82EBF993BD9A62816A74790A761B2C9404
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8d1494878228ddc67118a68d79b42498d3004b7c04e91223d333dff200533c04
MD5 ea10bd7260b80d71e122b75eb7429cf7
SHA1 c58e42bc777562c91837c3bdc15fad423cb1ca19
SHA512 5bbdece2ef12f0ba09f5e767f45424de4bb3b5708f2c6f0527dc1974061b23917273536684b295e27cfc26fd2d793a42178cfe603a005df8e5ef7dfca56db405
TLSH
T124419BB783D4877DDD014AF05A147E27CD6D091542283C2AA8E4EF9B93E2421A20154F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 577f4b244ccff22c592668c3a2da7fc3dc5790a88ec3627295f13e5f5333ec17
MD5 27e7638a53af039d11c7150b006b680e
SHA1 3a53831d4583d87fd8edc85ce27a6c4315a9fe8d
SHA512 df4b9648ac0c8e672eab8211b9481a98a53555da7918d2b2e041bb699e87c197fa52d36655b96390f8c6e3f8ec4395cd745f1216d0e47611eb7aa98c65d1306b
SSDEEP 192:sxZzRxyM/jK1Ml8UQXka/fss6vevHIdp4AHW6+WNd7n/YzsOHQIg5NJ:sxZzbqUa/fss6vegtHbl/PR
TLSH
T17852D656AA345977CCDBD209FA45BF53D6F50472D2A00E44AAFCCA1C05E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a316cc41ca25f3f63c3f777f56d1e0cfeaf89e2af4ad4df6c72843ea4ce12e3b
MD5 f986e2bc023f996676e6f23ffb6c2b8c
SHA1 50fe09847bf297623061d75a5bb55f15d55b51b2
SHA512 ff9ee24bdb0c384837669848b3f0cfa4d0daa9c851f049b180ce3ae2a6808ced2f29c946421496f53afeb7c904e154b97a71c8d5b4c1bffeb175ed69e5c30797
SSDEEP 768:k3W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjrroITi1YM:k3W7kf0Wvqidau1jaa5LA3jYCM
TLSH
T107D20B3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9734e76602237728970b2fca65f7c3d598c2187167354bf612388f22b55356c8
MD5 5abaaa30961828eacf84d01d1690d48e
SHA1 a0aebbb53309f2a3c2fa920104775aae31895c1c
SHA512 c29ab9e42f593d75d72af1dd2d50d24e7466cf346bd2fb9ba565e1ae6c26e3cb6996c92e004c7ab5be0f4eefa517b6d3d9aff667a8ca7061a227578144e78e73
SSDEEP 96:KIbCKc061e6UccuKMf10auKsb0IuQCa34qv+XeKEcLnqKog:sCFp5g
TLSH
T12C917102713F060138BD28089276D9369E82B1673558A4FF7BB914A31E6BE114EFEDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e07b1d7119e03d8b529a66743e5ad4dfe6b5546c12b184fce7fe33e5c3f1cb66
MD5 17a5e11a76cf2dbda2729bebd9aabdc0
SHA1 6ab44b716f66abc6f9c6cb8fbf8483adf68937ee
SHA512 99a21c04f0e689466824bfbb748516d0303818c8a3ac466ce7f33aad7351fe457a69f44edb911ff28a6b102c1d08f35047dc31bd70af621683f13c93fe103065
SSDEEP 384:btNn/s3n9SfsN1v2/2bLBOIdEaACEJrk9OObjI9G6w7C:bj+9Uc5jyhk929MC
TLSH
T120929D356C359E375EA2A145F4473B175EF8817BD3C52E88E6EDAF0C06DBAAC0312806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 92632125d8fe696911ff76da69220ebdf18a599fe02aadafd49a401b13a1f597
MD5 fd3226e603effcf8d82223d3cbfd21a0
SHA1 bd3f8f8a4cd577912d31b3202c72b3a4858fdd4a
SHA512 6deff7ca96935ad1f7cc4a5ec1a6be28f3396cd8c479bec855bafc1b05205f59bfee6fe077e615b0a7d64528995e40cff4fc983c92b24d2762e7e5a7aa8a7c40
SSDEEP 384:ktNn/s3n9SvzsN1K2/2bLHOIdEaACEJr/9OObjI9G6w7C:kj+9sJPjyh/929MC
TLSH
T195B24AF568E75936D99E5347B37E2E060EBCC16BB2842A44B3E99B0CCD8667FC301406
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f412463ecc14fd626085c4080aba70b8c3cf75801dbdf4ec2cfaaad66292a105
MD5 575623889bd053b795cdc83122d929ef
SHA1 b9381eb6ed6f22fd7523c5325bbd75899fa43c5c
SHA512 7073574b762bd366f7d02b8d297978f469eedb50941e141439cd099dc98e2de9e86bfc938c0fb996f8c49bb49df9de81b2bfb7548fd75efdd19907de1ca0a95e
SSDEEP 384:2tNn/s3n9SfsN1K2/2bLBOIdEaACEJrk9OObjI9G6w7C:2j+9UJ5jyhk929MC
TLSH
T194929C356C259E375EA2A145F4473B175EF8817BD3C52E88E6EDAF0C06DBAAC0312806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 db4cec25e4adca9cb2941b2a1655b831df5e566060205ab35aecf4483f8c0808
MD5 5d9cd9167e9229bf643cac609c1b1aff
SHA1 17238c845943819cffc6f3ecc00d4443431b9f2d
SHA512 d934eededf4755d0e992f2b2eb92ed300f7b078d49c71e1fbfcd54d72666b9569fbd530d55af863ecfe911c02b189294f6c548d47ac144ee0df97d3911132920
SSDEEP 192:MON664BAQmiUyZO1CW5GBPKXo+FdGJaraD0hLU6:MON66eAn4WTdEaQqLU6
TLSH
T12902F939AC786C7B9EB2AE45F58737175FD8103BE6C41B44EAE85B1C009764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 37ae306e6cfaf8e44fc829e1d09dd9580781c650c95943ed7fe6151290b54133
MD5 93d75c36df2a506493810114c5ccef85
SHA1 61958301dc6215bc8980516cf577a30963246466
SHA512 5cfc3a2da6fce041c2d5887c0df62ae2e9cbf16e8dd5a3521ad924e5dcb8cfaaf002bfd928536e097c04031128ba6f8beddaca9080e9ef755b53950e69828cf8
SSDEEP 192:mONY64BVQmiUyZRCq5GBPKXo+FdGJaV6FC1SJr8WwjqeU6:mONY6ezzqTdEaACEJrS9U6
TLSH
T1CE121A35A874AC3B5EA2B541F48737135EE4413BEBC56F84F6EC6B1C02EB69C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7e3b23b-1429-4b9d-a217-cbe753f47edd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a7e3b23b-1429-4b9d-a217-cbe753f47edd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 129ebf11d7296f9d8627cce046b8fd1fa56bfe4a9243d670a775b98c5f95cd9a
MD5 8fac4ee3b3b3ed4b88b8e6f5ff7e853b
SHA1 6e26702fb1eb7b3b47872a60d4f991cd0422f055
SHA512 f723465f562992bffe5cb12f4a6799a172a6bcc2b2ccc7519bb57858caaec764264eb02700550161d2f72d01ef6248778639761f7f0788628345b620841df152
TLSH
T15E411859BAFA1148F3B77E569BF6A86D487EB8772F06949D00110E4F4A22F40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download