hxxp://icsglobal[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/07/2026, 08:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://icsglobal.com
Sample260721-kq3xmsbs8m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3588	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290973647831605"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{ABBECC12-D8DB-47BA-9892-252CD25CF8EC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2968	msedge.exe
2968	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3648 wrote to memory of 3348	3648	msedge.exe	81
PID 3648 wrote to memory of 3588	3648	msedge.exe	82
PID 3648 wrote to memory of 3252	3648	msedge.exe	85
PID 3648 wrote to memory of 3252	3648	msedge.exe	85
PID 3648 wrote to memory of 3720	3648	msedge.exe	83
PID 3648 wrote to memory of 3720	3648	msedge.exe	83
PID 3648 wrote to memory of 3720	3648	msedge.exe	83
PID 3648 wrote to memory of 2464	3648	msedge.exe	86
PID 3648 wrote to memory of 2464	3648	msedge.exe	86
PID 3648 wrote to memory of 2464	3648	msedge.exe	86
PID 3648 wrote to memory of 4676	3648	msedge.exe	87
PID 3648 wrote to memory of 4676	3648	msedge.exe	87
PID 3648 wrote to memory of 4676	3648	msedge.exe	87
PID 3648 wrote to memory of 1492	3648	msedge.exe	88
PID 3648 wrote to memory of 5036	3648	msedge.exe	89
PID 3648 wrote to memory of 4160	3648	msedge.exe	90
PID 3648 wrote to memory of 1492	3648	msedge.exe	88
PID 3648 wrote to memory of 1492	3648	msedge.exe	88
PID 3648 wrote to memory of 2968	3648	msedge.exe	91
PID 3648 wrote to memory of 5036	3648	msedge.exe	89
PID 3648 wrote to memory of 5036	3648	msedge.exe	89
PID 3648 wrote to memory of 4160	3648	msedge.exe	90
PID 3648 wrote to memory of 4160	3648	msedge.exe	90
PID 3648 wrote to memory of 2968	3648	msedge.exe	91
PID 3648 wrote to memory of 2968	3648	msedge.exe	91
PID 3648 wrote to memory of 2440	3648	msedge.exe	94
PID 3648 wrote to memory of 2812	3648	msedge.exe	95
PID 3648 wrote to memory of 2440	3648	msedge.exe	94
PID 3648 wrote to memory of 2812	3648	msedge.exe	95
PID 3648 wrote to memory of 5044	3648	msedge.exe	96
PID 3648 wrote to memory of 3184	3648	msedge.exe	98
PID 5044 wrote to memory of 3752	5044	msedge.exe	99
PID 3648 wrote to memory of 444	3648	msedge.exe	100
PID 3648 wrote to memory of 444	3648	msedge.exe	100
PID 3648 wrote to memory of 444	3648	msedge.exe	100
PID 3648 wrote to memory of 4328	3648	msedge.exe	101
PID 3648 wrote to memory of 4328	3648	msedge.exe	101
PID 3648 wrote to memory of 4328	3648	msedge.exe	101
PID 3648 wrote to memory of 5052	3648	msedge.exe	102
PID 3648 wrote to memory of 5052	3648	msedge.exe	102
PID 3648 wrote to memory of 5052	3648	msedge.exe	102
PID 3648 wrote to memory of 1912	3648	msedge.exe	103
PID 3648 wrote to memory of 1912	3648	msedge.exe	103
PID 3648 wrote to memory of 1912	3648	msedge.exe	103
PID 3648 wrote to memory of 4788	3648	msedge.exe	104
PID 3648 wrote to memory of 1396	3648	msedge.exe	105
PID 3648 wrote to memory of 4964	3648	msedge.exe	106
PID 3648 wrote to memory of 1956	3648	msedge.exe	107
PID 3648 wrote to memory of 1956	3648	msedge.exe	107
PID 3648 wrote to memory of 1956	3648	msedge.exe	107
PID 3648 wrote to memory of 1008	3648	msedge.exe	108
PID 3648 wrote to memory of 1008	3648	msedge.exe	108
PID 3648 wrote to memory of 1008	3648	msedge.exe	108
PID 3648 wrote to memory of 3320	3648	msedge.exe	109
PID 3648 wrote to memory of 3320	3648	msedge.exe	109
PID 3648 wrote to memory of 3320	3648	msedge.exe	109
PID 3648 wrote to memory of 4324	3648	msedge.exe	110
PID 3648 wrote to memory of 4324	3648	msedge.exe	110
PID 3648 wrote to memory of 4324	3648	msedge.exe	110
PID 3648 wrote to memory of 3944	3648	msedge.exe	111
PID 3648 wrote to memory of 3944	3648	msedge.exe	111
PID 3648 wrote to memory of 3944	3648	msedge.exe	111
PID 3648 wrote to memory of 3184	3648	msedge.exe	112
PID 3648 wrote to memory of 3184	3648	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://icsglobal.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b4,0x7ffad901c188,0x7ffad901c194,0x7ffad901c1a0
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,16905666585736981009,7413810197054978178,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,6189718202869996162,10647549847853009361,262144 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,8116741277203963668,4072539468060087680,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,10473375802324524132,2383504103327089813,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,11286404811949180592,13165531666840496940,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,4187091707947355188,2303588512045656849,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,12849234406719850697,2708700567814620569,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:9
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4212,i,4269896099750119039,3427529783901582388,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4312,i,3036824480618276938,6883816849752954189,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,5484750067780404898,5539641232526086958,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,12192795733295830057,8389573032617433183,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,2905087079183624159,15485354654390034643,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5044
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1040
    3⤵
    PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,18136557929118985026,2572739581648727175,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,18136557929118985026,2572739581648727175,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6552,i,11361077013577818363,5486861230396210633,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3908,i,14713725562020312782,16982638967176718506,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4428,i,18164609859611319530,14681675876651102120,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4232,i,224544508216885287,3441413899328508335,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,4647326001124170169,17118659566045148049,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,8725614325008811614,10000702270166941478,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,12028715437083397639,1315931663340384836,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3904,i,17261631276085969233,9030198201676708751,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6876,i,3391121076672861383,9644117549802869274,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6936,i,8762067949020157216,14831878895671612084,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4652,i,3970859731476755452,3514904510398836768,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=3936,i,3305201931343512427,16410455063929715801,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,3250283264565560494,15635058242509147974,524288 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5216,i,18336553391940623318,15161475948124332737,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6532,i,5420564721719098180,3316513080097073973,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5536,i,7537456403758269695,15991617868722115574,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4584,i,100549326896738791,4300929486231717204,262144 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5644,i,5012203153926865640,3140080225617709415,2097152 --field-trial-handle=2088,i,5847383363001878039,12196518656542693776,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:1440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4b35a6422c1c682176591bd42ebef96b0cb78607f98b3c5ee2c0e2d44e526da
MD5 63b4ddb137c55bd42461aacc1eb4cf83
SHA1 e41f99c448526208c80f1acecf1939a8e3f06728
SHA512 88b7f5970c19ff8d8362281bde3b29f3c7b018ff88c03d8ce082f66572704c79543ea528e6962172f18f1cdde2d1aaad0aca218b732ba8a673b844844d3ae585
TLSH
T125D080B23D4DB010D75B51F1F903D741121A857528536B33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2e4c78c9d4b6915833ca44ba5f9b735c9d9e0bf49d6aa045c47aaaa63f1f9359
MD5 f7389aaad82eb86ca1896ff3c7af7a86
SHA1 a7833bad037b8c94d375310ccb5bf39c3f9df83c
SHA512 cdfd274480229d612566789a9d9cdf47643a9543e303957436e5121c790936878b1b7eb452100170489121bede724239183c48208033a8c70d6070e93b3f1226
TLSH
T1E5D080B23D4DB010D75B51F1F903D741121A85752853AB33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

199b8507-58bc-4973-8cc8-17a630589f7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\199b8507-58bc-4973-8cc8-17a630589f7e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b83f26910c6f5c22843434afeb25fc75b0612b5a51162877ce9ff59655c5ea8a
MD5 75ffcbebdbee324e2ef7a98595fd6fc7
SHA1 4e2e4e749dee12828dc2ee0fe2d6e157cab0e7e0
SHA512 64b5facf44304ec1358f0f057226af6f059b8b4534b1141842b3bb2196af4be92bd284da94f0f804b9a659ba9c3a88e345aa98216604d519cea03473865e8afd
TLSH
T172617FAD03336F85F35325F3B1DC0D84F57284791AB70DA612C258B5690EFA36D96238
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 938177d6db6c3958db952e430fca4c744b66c80af8fa47311a79d4f4751f9fea
MD5 65b27211fe650c581a6487229b3a5a1a
SHA1 b2d6fab08560dc7f44273a75314e2228c9560db4
SHA512 cac517b7d89c3262af3ac6615d5f3e6ffc223d560d9ef4eab0b9c1df948edb1bd02186776ca63ef59450c79f00a893d888bfafd73c716b34261e792438d56483
SSDEEP 96:rScisMJXW9rBNcl7ukDwSpYaZfTiOYB//yccXO8Vte0N:eci39WZBNWukDwkZQBNc+8te0N
TLSH
T1ACB1D55CB7BAABB2FB0350B335DC6C55F271887949370B5608E146B0750BBE37E8A264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe589630.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589630.TMP
Size 3KB
SHA256 3f1d2d433295b7b8a30b288e298c48c3144cce545c85a41b1df60af22b282e58
MD5 ce2c03837e0be55e219d1a4270c8ee15
SHA1 03c70fb3d81b7f397410b365968817812f635c25
SHA512 6abb980d9929f8bb491526c5759d74a6cbacdc4e96d6f697ee17a71615fde609a60476e2a075f6188f1beed0cafd991f1e44c4dd0cd76b653d98c96670aa8850
TLSH
T1FC617FAE03736F85F35325F3B1DC0D84F57284791AB70DA612C208B5690EFA35D96238
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 8ee0870f74a9c1141f1177611dd2924744862498d10af11c395f0d49fff85e3d
MD5 3f2b956c33551f67d7f1c32bff843430
SHA1 a27e7807e0c729d6f35e2f33e1520b1e18b5ce00
SHA512 1ea646cd95e61b8e51825cdd18150965ca8f639d30bc63a806145ee03bcc6341dee7f7bdb3ca94c8cec532d9be3a451655cc5c95796d0462c518124f0163f5ff
TLSH
T1A061BAF7C3E6826DD91156F0AA146F1BCE1D0442436C3D0985E4AF4B93B2871F212B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 c49fe4a12599b9d9711e410be210460635b29d857fd924e602b3da9ab1803b71
MD5 6b0b41bb9847c9f0b8d80db43140a575
SHA1 b84def43fda4d64d8cf5812a5e8bb06544b06e42
SHA512 82b5291501cee3e38aa76ec3933134dc9508220308ccf5509432b9c0657a54dc614804d4c939fb222d0bc97ee732ea454dc7e94d8eda1dcc17fcc7b069eb8f33
SSDEEP 192:sxZDQUnqRWyM/jK1Ml8UQxFp/fNsbiQiMhXiQIcbymadp9ex/JK6+WNjLHq3k/YH:sxZnnqsq3p/fNsuQiMgjnQ/hvl/543h
TLSH
T1D672E60776241D7B9CEBD219F902BB93D5F85466D6944E84E9FC8E0C04E6BEE221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c86658356c49f285d7e03765d93f0eb56bacacd52eab4a916035b1ab7af76cc0
MD5 f7f835bfbf5640b790d52a38e9392f38
SHA1 6efc3a7874a6151ee41f373ce8177f63e5621373
SHA512 a3b1a91e64aee6e8f221363d22de9dc8f864f1c0d652b5ea127ecf650d5401948b46f03dddabcd902fdab4875891a259f1de337bfd2cfccbad7784716a350197
SSDEEP 192:sxZoRWyM/jK1Ml8MFp/fNsTiQimhIdpoY/JW6+WNGY05gv8wXIgrJ:sxZosdp/fNsGQimKZ/dG5C39
TLSH
T10852F8066B345977CCDBD209FA56BF53D6F91562E2900E44E9FCCA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 e8c39ae9e7ea2c817ded85c187875a0651f530ef089307ab0df641e0fc2583c0
MD5 5c83f38f098a890fd09a0cb76892e406
SHA1 03b4677ab848dc53a149da810d55144fa45d85d0
SHA512 af097dbdf6ad11d07cc6cfcace451199df17917e6b7410821c2dfa0b1e742d2b90cfc531800290d2d8869e977e152ef66bb5408fa7ba312742c8c13b47e78f6a
SSDEEP 192:sxZDQUnqRWyM/jK1Ml8M8Op/fNsbiQiMmkbyYadpjDz/Jm6+WNjZOq3k/Y05vf88:sxZnnqsEOp/fNsuQiMMF7/dQl/5n3h
TLSH
T14372E747B6245D7B9CDBD219F916BB63D6F81466D6940E84E9FC8E0C00E2BDE221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4655bfe0f997eac21cb5a4674cb30febd72d103821b6b5f3b4bade82ef931a6c
MD5 2b93b38c95934be4e9df88fc9b82ae1e
SHA1 6ee6be84948a6fd75402a773e4d4db9587e89028
SHA512 3c3deb4cea1038d90b58ad94b6a351619d003d90dfcedaf8aab998a9740d7cfb454dbb7199c40a517f84a4c6ccb5515b1bd813292f02614180cf5246792e103f
SSDEEP 192:sxZoRWyM/jK1Ml8M8Op/fNsbiQiMhMdpoz/Ji6+WNjZO/Y05Vf8wXIg59J:sxZosEOp/fNsuQiMKy/ZQ/5t3h
TLSH
T19352D746AA34597BDCDBD209F555BB53D6F91562D2940E84AAFCCE0C00E2AED321381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 3e6f4ff784dccf7e539023c1d0eb5275f9fbdfe55ad4a762d88235d722b58060
MD5 c3d5a3f9aaafcafd896cc0415ad58bcb
SHA1 acbc2af700a78bd675cadf402c2670a38c129b54
SHA512 e26963a5afbfddb003cc14cc93872027a7c94fb8732e0035e34ebb6c534ebcfdf8c246d7cea936b9b2757d58863a725e2768f9479cb1ec1ae787c8524ff7b0c6
SSDEEP 768:JkzXl8pZ221WRmsYQL08F1+UoAYDCx9Tuqh0VfUC9xbog/OV3u/Ll/df0hUKro0k:JkzXl8pZ221WRmsYQL0u1jaKu/Lpd8hs
TLSH
T1E3E21A3F244CCB7E4F840E9CEC266F966ED802CBA7984D5447FA494C03C67EB521A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\21fe119b-cfbd-4e7d-a241-ecc2e61e5323\index-dir\the-real-index
Size 72B
SHA256 a12a8f4b6806a1d47ad24244905d441f937598bdf326eb7ced0bcd22992e125c
MD5 9696db7823be8e909f4887efb3cd1016
SHA1 8f846bbf8f7c2289c8ffcdfd56048d0b705c0fc4
SHA512 83ae69589ba2de81639911220d37a5b856bef33e0a29ac014b3ce05353069bf20ac3ba9e54824996c402716959df091643d5319a31fa0b2b75147aa12eab2862
TLSH
T154A0021003C0804ED01227B2DF5202813300C89015001707C0DD0045FCA04915DE500E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\21fe119b-cfbd-4e7d-a241-ecc2e61e5323\index-dir\the-real-index
Size 72B
SHA256 37f266567a7a85536f085908087d46b104b2647f688d58f3788257e2969c0c7d
MD5 08fce70c86e98e4a97bdd6aecff4395a
SHA1 41881334b3299eb9ac94112334ea2a3aae486465
SHA512 6f8cf4c5c5a35202dacc32a01def431df2af0a4b7e8be59b64e765660c7c5462e920123c93c6042f3c81f68cb201e2398b68e7a77781028348310a78bd12b2e6
TLSH
T1D7A0025402C59211C04627B2F5D6C56172904A105301238D61D441D8C9509C6558200D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f35d4dc-b060-4880-abcf-35b75a3e9ccb\index-dir\the-real-index
Size 2KB
SHA256 5c5711d63ab211c3725078272fef964573802f97f0f52310c7e49542b5d27f6f
MD5 e7a7f8f450d265bffd195ce967adae4f
SHA1 aa8b11fa7ab42bb265d28c76a5bccb6cdb10c087
SHA512 3155aa7e3506cad597b653ded6e24a57f87da91d5aba1a4b86021673f5f3bce9db8b0e9bc4812e22cfe6398c281ae61ffd4ffbc5e4cd1b4ac6ee70982b2e6fe7
TLSH
T17151A74ECD8A5E9BDC7C11B368FA1480737768DD0A889A0B29FC7274FCD3369290A559
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f35d4dc-b060-4880-abcf-35b75a3e9ccb\index-dir\the-real-index
Size 1KB
SHA256 3c9a03aed4bdb3903d2eb592d1101a32c82dfd57f7e7f42e50cbe691f57375f0
MD5 f132a1181c5420a5f85bcfab586fa5ca
SHA1 dd39a1d3e6ba95b607bee231e60145035d19fd0a
SHA512 e4f7316900eea70096c75f12bf8e4d629a2025ba888121f868f991fe875a165650aa370e3ae6c7812ad8bc37bbbe6c88b738861de31052e58ceeae6194759527
TLSH
T12741895A8E91D9AEDD6840B215B6A4A8733088CC1B55B71358FC51367E137691A8B0EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c8c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f35d4dc-b060-4880-abcf-35b75a3e9ccb\index-dir\the-real-index~RFe58c8c9.TMP
Size 1KB
SHA256 7d15b28d376ee566e3ee6bda852bdfe3afe702ffe1e863dfb1d72e7fa8a29c3d
MD5 b650d665ef5f61bafe1679f22c43c024
SHA1 42bfa0ddf159765b2daf17708f03fd53bf035203
SHA512 6edda419e5a743652b7bd8ec4cb96a70b53fd312d7782d9fe5911e2c1480f3801e7752467367cc913e7a23411b4da6ab0b954ea5d414d12e894e58b440053a53
TLSH
T1EC41989A4E848A1EFCD440770EA3B8B87335984083167B4374BC5135ADA27BE2E5E0E8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a447ed3e-bdd8-44c7-a798-1bc78c08338a\index-dir\the-real-index
Size 96B
SHA256 18c6d6f6d58db2ad648631c3c23b2240e776fa73bd0bed646986c4eb78f31f51
MD5 0b4784785b6627d30f215a08a62e4a35
SHA1 b058d6cff044e417523ed7178e331ecd8c549b09
SHA512 5e87e0a0e82f92eb0b6d7e9175276f9ec9641f8bf3194ad83685b7114ac27ae41ac7598e04abbe079c70f9d5cfebf001007b2fc155880c44a8595d5fd34435c6
TLSH
T148B01269B081C372C00043B511E1045073108A20520922722250A366C20C3560091000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59619e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a447ed3e-bdd8-44c7-a798-1bc78c08338a\index-dir\the-real-index~RFe59619e.TMP
Size 48B
SHA256 7e7a0de65852f3f2eb2dfb69db7cfae4490d0277a56c7865dc1021e02c3517e1
MD5 c27dd4fe1a86195dc6c6986964a66aa7
SHA1 f63c55fa045e9842be23af47b2c141403b77dbf8
SHA512 08df65ab04c06d559657af42d8afa2b727c3379268ceb7e1b370ddee973c9af82700303f28bac30a1bb1974207544f423aeaef253e872cc24dfffeece36269d4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b7978f03-500a-4266-8c8c-b504f996fc13\index-dir\the-real-index
Size 72B
SHA256 932916ceacb76e67b944392196dc1afbb1ae0983906fc4e3af8e519af4317d7a
MD5 46e60b7cfd9cc0c79ba06015d5b1905f
SHA1 43f1a780462298b2b8a35583be78dac31abe240b
SHA512 186ae9252d79bb79300420788087e3b0ef8800ac07a678121790ebcfd2c0d28905fda4db648ee606ea335e21d1e1dce789162504c7e3b427c540f35507e92e34
TLSH
T1D2A002611198B151C0114AB27BD225723719AC950101532942D0195DC8E27688611849
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c1e721bb-729b-4311-9fd6-047b9aa3c83d\index-dir\the-real-index
Size 72B
SHA256 9b50b45e2f25e7c17becff37e7275ab25dc7de54e98a4cd312773b150dfd3bbe
MD5 02a1a1cbddf997767037211b182fbbb2
SHA1 34bfebf3f3966809483b0c36fb16520ddf3956d4
SHA512 65d58cebbf2ebe951bac17426ea5b2f1d0ef75415540c18d28312444a00541361761bfbcf721a7e8d1e694c2cb5b697e8d2d674d973fca90225dfd6b17002181
TLSH
T1E2A0025542C4687AC51803F424530A85B3206D129515074D5791E5E8DC907475116081
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5961ae.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c1e721bb-729b-4311-9fd6-047b9aa3c83d\index-dir\the-real-index~RFe5961ae.TMP
Size 48B
SHA256 5b4bc0daff7888e3118964d1faecd3772037c6ec31baeee7f8a740d41b371137
MD5 64d112c526deddc542f05023a7715eae
SHA1 91fe370fae2d83716aa946ce4291b2f90fffd82e
SHA512 0b765ac55dd16fd62769eaf3aa34443325fdbcbeb55ab1b8c6f5f258db4e3bb7f693c48e3ed8d1c0b609723b73d442c06276cd37e3368013e899537254e8ed9d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 a27946d14b0eabf435fa23a8af378cb3401656bb2328310184df8ddc648cd7f5
MD5 f65937f20b7ef894c7dd678ead49e17e
SHA1 68c0297aa22c5f0a7b28f5e2d0d4f68cb2b0dd04
SHA512 205f07d066cdf45e5abe069a49e9656de651e8677db5040391785aa2e3e1b4ac939ce3e0cc2a03d2972125c38928f6e9bb2f4c9d2dcf7c042debe333fc794c2f
TLSH
T148F052BB3EF32811B97FABE51C3160A44129FC09CA88EC8F9127A1C710B3241601AC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 4fefeab96990de04aa18dde2ebb3b98716abaedbd5d775f7a4c7f39514c7f730
MD5 c5ffb24887a6d0059ea5e73ee5d08c77
SHA1 15cea5058cc52a7829952d047d4b52fdfd6b004e
SHA512 4647ff6a3d78c305dd010055141b1f451ff98bfc97fb3642a20df5a00b014c0298400e12a59e6a6c42ba50cdb99f4ceddfaa259513beb826828a26185a43dd0f
TLSH
T151F072BB3FF32811F87FE7E0283110640625B858CAA4EC8FA427A1C780B22082059CA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 290f98b2aea3ddb4f478ad832a2838394c9fa85d14a65f5716d8f6851392b970
MD5 8c0a4219a6c94ca6217480403da3869e
SHA1 7c3990b63ac5b4c064b670dad6c019659439e3ca
SHA512 7f3023043bbe06e07ed5aa2017a5fa6564bebdffe891130dda8548baaddcb3a91129f2718b88ab3e08902aeba699249d671a6f75f58b99bfa6d4e57c9531a9e7
TLSH
T1B8F072BB3FF72815F97FE7E1283160A40524BC08C994EC4FA027A1C780B2208205DCA2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e6c1b54fd63b2bc51479e7963f2303e3b45d6294c891354de6e6bbea276eb8a4
MD5 a45a34f7d274c46e0a5954cd76fe99a3
SHA1 f827175d1e44ae79a4c8744e508fdeabdf7e8cca
SHA512 fb0c9a0a814e6e0898f05f446473e3b328ccb49c6c57e9982c04f2c304b79e969cc7a2bd1e28bcc232bfe8697472a187a0c69ff6b28df34bf84d3d66a21e4816
TLSH
T1A1A00221C9988152F1D0E3B091A20E887210CCE84B2D231262AC415888689409EE3204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591d04.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591d04.TMP
Size 48B
SHA256 a5e38e166739c6cfe718eda1d10f2b475b380b0c8b66d5f3beab9196be88743f
MD5 7cfd026e2e4b09c7e79efbe687a4b3f0
SHA1 3a5b71f7bd6554faea41ae78f9b53360a0de3c9f
SHA512 e4c30410d7bcd643582c0b85fc8b87d6536ab595c00e13308fc964eb9dc2fd0f61339241d721b9ca285ce5962cc52caeeb97e4a649e4bb88e770b239dd61b576
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0056d5760e233fe8ac26a7f6e3e76999764e3a994fd5a0cddc2f7b6b73381651
MD5 7fbe87f8893919c3ab03d8e654c0d50b
SHA1 c88075ac236fa786f3710682420da2159dd73251
SHA512 8da809a3b513406387771ae2e0168d8e715cc1f3bf1262b5041aaf93ac28fe81053aadf52eab5db5168719bbdb24fb633f86695ccaffdd19ff417a1c6bb4f91b
SSDEEP 24:KdXRfXcXHXuaXLdXzXfXn4X3Xb+xf8nOardT/H4X7+eIjbHKiQhalH1ExXSmpMc9:KUGOIfKXK43yhgI3KlWcFDIxKEoMK
TLSH
T12891E31671BA07417DBD280CC275DA674A82B1E73028E93B7BB810761E66E126DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593212.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593212.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 8909abb8fc1469e39605182069d6c54f55e2163cdb9d5b2783be07380ca5ee94
MD5 38eb02f485a2caf9ba63e2c14030001f
SHA1 afc585d495b1956e3b123e1416767349509a740e
SHA512 b034b2060ecb19eb50bb81bdd1c375ad58cb1d0d4f2d58248eca1e60857298b70ac716d36c71b9a7cb88b52653e1431ee331f564a39bdedcb98e867584c8c000
SSDEEP 384:UiFKtNn/s3n9SZ+8N+8TUNTUlIlbTZd46JEssNg2K/JDf4h25kYZzOObjI9G6w7/:vFKj+9xXwg26agh/xfR5kYZz29M/
TLSH
T1A9A26B33AC989E7B9DA28A94F50B36179EF450BBC6856E94E2EC6F0C01DB1EC5303D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 271dbc7499d341dce41b5140eb0c14c33f2ff8f23031282696cb40a581b7ba74
MD5 37eee405cac6ef5b09378be6f9c9de9d
SHA1 1e40444246962d67b584c7eb1ca6aaf5240fca98
SHA512 a52861974c3744e9e4deb6af563f971540cd704c309717500f7fb177996763e3b30874473e4c7a53e79f85483a59a80dd745a8bd34d44d214241ad4ed1d7a884
SSDEEP 384:DtNn/s3n9SV8NuQOd46JErsdfK/JDf4h258etzOObjI9G6w7/:Dj+96s6tC/xfR58etz29M/
TLSH
T1A7928C36ACA8AE7A4DD28564F1073A1B6EB450BF97C42F88D5EC7F0C05DB5AC531281A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b20a76c1ba98b9c6ecc1ea686fbb3e1b35a75784dcad4596d1b70fcac06e7baa
MD5 e3e438d7fd7f9d0c244caca70057b32c
SHA1 6c0580db8a7cb5b593193c685a813b01b2da7977
SHA512 af3ffa31dd1e3cc6ea2acec1017e9b6f72bd55992aba91ab9fd1755e19e57d0ae5089fb0b956f571c7530b9a831e0d0ca5119fc4c8eacdf437f041fd28cedc36
SSDEEP 384:ltNn/s3n9SV8NubTZd46JEssIg2K/JDf4h258YtzOObjI9G6w7/:lj+96O6Dgh/xfR58Ytz29M/
TLSH
T1BC928C36ACA9AE7A4DD28564F1073A1B6EB450AF97C41F88D1FC6F0C05DB5AC631381A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a234180862719d97838f4fa2d16e1722fdcecf8930fcbfb1576b03e5f30b0d67
MD5 11ab9377ae10ad34d95600d4ef7e05a8
SHA1 4e0c284279abf49d45bf3c1d0386236f54c636fd
SHA512 691a451c91ea18b4f6f887ef2a2e0dfbc8e0c540ed4e386df2d9bca832972beccceb03e798f0e538e2263ce93a0782876353a5c22c24f197b2569c598e93b02a
SSDEEP 192:7GNd6fNNQmiUyYzH3PL/GPT2AXRQfMV7qtFU6:7GNd61LjzXPL/JDfMUnU6
TLSH
T13D020935ACA86C7B8EE2AE19F5873B175FA4106BEA951F44C6E82F0C00D359C2303836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 04ef2f1fa9c9742a9e4c28b81321daa3135f39774f84f9b3364dae4ac73230fd
MD5 4e4254def2377dbdc1769c8b42e63407
SHA1 cd2f00b794c8be4fdf665e24c140a77827a5d76b
SHA512 2cdf0b6401d93ddfd55c6239031ae8baf828de69525bfa77ac479161b805e8b6c733c5adc33c3dad4a15ae17e4a24470f7294e49135393003d472ce60b9d678e
SSDEEP 192:kGNP6fNPQmiUyNS39L/GPT2AXRQf4h1E5LV3ZuqnU6:kGNP61Rou9L/JDf4h25LLzU6
TLSH
T1BB121836B8A8AC7B4DD2A955F04336136EA4512BDB896F80D6EC3F1C01EB59C2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a70551347ab5bb2e4329870ffb4895de38632a278a1aef24627a4160f8f4c88c
MD5 1b4fcef3b6269c00c8da8c6737de9afb
SHA1 ed143dd2614a84c3d976f2f47d0b67dd9d2f1f69
SHA512 a8bf05c0fb31d4bab39b7a06c1e6edf098225b1f66c8655127d68f0b3a035219a1590af272af2ef976241165242f34b1923a17912aeace8ce2cfd6629f812a52
SSDEEP 384:gtNn/s3n9SV8NuEOd46JEZscfK/JDf4h258YtzOObjI9G6w7/:gj+96M6wC/xfR58Ytz29M/
TLSH
T1A3928C36AC68AE7A4D928564F1073A1B6EB450BF97C42F88D1EC6F0C05DB5EC531281A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bffbf8f0-8b25-49fc-879e-e6871daab40b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bffbf8f0-8b25-49fc-879e-e6871daab40b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download