hxxps://brewdeskgrid[.]com/rewgrid

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://brewdeskgrid.com/rewgrid
Sample260723-ncppmscc67

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2260	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292789423646966"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{D96E27A9-15FD-4D3F-8E98-BF12728AC4EA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4144	msedge.exe
4144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1896 wrote to memory of 1772	1896	msedge.exe	85
PID 1896 wrote to memory of 2260	1896	msedge.exe	86
PID 1896 wrote to memory of 4724	1896	msedge.exe	87
PID 1896 wrote to memory of 4724	1896	msedge.exe	87
PID 1896 wrote to memory of 4724	1896	msedge.exe	87
PID 1896 wrote to memory of 3788	1896	msedge.exe	89
PID 1896 wrote to memory of 3788	1896	msedge.exe	89
PID 1896 wrote to memory of 5040	1896	msedge.exe	90
PID 1896 wrote to memory of 5040	1896	msedge.exe	90
PID 1896 wrote to memory of 5040	1896	msedge.exe	90
PID 1896 wrote to memory of 1328	1896	msedge.exe	91
PID 1896 wrote to memory of 1328	1896	msedge.exe	91
PID 1896 wrote to memory of 1328	1896	msedge.exe	91
PID 1896 wrote to memory of 1220	1896	msedge.exe	92
PID 1896 wrote to memory of 1220	1896	msedge.exe	92
PID 1896 wrote to memory of 1220	1896	msedge.exe	92
PID 1896 wrote to memory of 2496	1896	msedge.exe	93
PID 1896 wrote to memory of 2496	1896	msedge.exe	93
PID 1896 wrote to memory of 2496	1896	msedge.exe	93
PID 1896 wrote to memory of 2368	1896	msedge.exe	97
PID 1896 wrote to memory of 2756	1896	msedge.exe	98
PID 1896 wrote to memory of 2368	1896	msedge.exe	97
PID 1896 wrote to memory of 2756	1896	msedge.exe	98
PID 1896 wrote to memory of 3468	1896	msedge.exe	99
PID 1896 wrote to memory of 3468	1896	msedge.exe	99
PID 1896 wrote to memory of 3468	1896	msedge.exe	99
PID 1896 wrote to memory of 1892	1896	msedge.exe	101
PID 1896 wrote to memory of 4332	1896	msedge.exe	110
PID 1896 wrote to memory of 1780	1896	msedge.exe	111
PID 1896 wrote to memory of 4992	1896	msedge.exe	112
PID 1896 wrote to memory of 3336	1896	msedge.exe	115
PID 1896 wrote to memory of 3336	1896	msedge.exe	115
PID 1896 wrote to memory of 4144	1896	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://brewdeskgrid.com/rewgrid
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x210,0x23c,0x240,0x21c,0x248,0x7ffa6ec8c188,0x7ffa6ec8c194,0x7ffa6ec8c1a0
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,13743570379359526356,5496439125747613543,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,10071336129451189247,16347538955129296426,262144 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,5688535304959142075,8009604845569462219,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16271592077661872944,6164792418924406324,2097152 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,8798501817156720863,17664409577735430123,2097152 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,18023970879452912038,11704046041544186675,2097152 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,12392331033868996173,18296196881871469133,2097152 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,7737009610915263879,3525070078028481782,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,11682929591420639820,6101731760583245484,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5468,i,13961138033212757769,6208195288864614808,2097152 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,2562344315632954815,13656371695960114082,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,2562344315632954815,13656371695960114082,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,234598669428202196,6447549057496731626,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=568 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,11215939784808694327,16675661982413654838,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5965455663854613553,11461448551136083864,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,136427551391401848,4893020402220388553,524288 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3732,i,2733633286039510485,17241949188015609875,262144 --field-trial-handle=2252,i,5968155906401144591,10301074587233907836,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

272253bd-6d5c-4585-b899-40ac21a4dbc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\272253bd-6d5c-4585-b899-40ac21a4dbc9.tmp
Size 8KB
SHA256 534169b0e9498f6d534fdb4d7c6ca5a991af6d9532225f4aafae9c82095a8d78
MD5 5cfefc78f95eb967e924b1d305396dd0
SHA1 a7562c1e37a7c0384fc7115ca8e67a74e29a7e38
SHA512 d4a9d311210af93c4f24c108e8f4c58670360a5a85808ca4a3eb9e502949b6dec4a7090ed2f91a9d915d05ba9c50d29575e1bd8ee81886c3132077404c0fbda3
SSDEEP 192:qONy6O7+3hQmiUyjWGttb0cO2coGgGI26U6:qONy61JGt9lOa4B6U6
TLSH
T16A02E7356C686CB78EF2AE45F98727179FA8103BE9962F40D6E85E0C00DB65C2347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 03e9501fef3fc3275a805d5c717c4a107689aa3b794356b7c18674d84cc43be9
MD5 c98ab4ad27600be9376c7911e9196032
SHA1 d4807d8a356202adb25bc26ce9f576c3c0d39bdf
SHA512 15b6ff98689b87b8279b3fd55bdc0c973564cc3a974e35bc5c8b524f85f687a5c43fb1782fdf7a75b2b056ae63c775c53315d9a401d03b7e39a71e77176f3b0e
TLSH
T159717EA9F1320C84E3B16770CA911A1D39F1CF84DA2B8E5143D8A4BCC5DA33F91B1C4A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 63f1613b40a5f63d29af36028b14708b9fb2a1c8e31b5a05083f9ec765e1146b
MD5 4af61cf88fb5f1420f275b7bb789dfa3
SHA1 cf3a977ced79c3334db936330f8592f3fa81513b
SHA512 62f406aabb186e818f42bd6ffa4f7ede67950e7cc300c4a37b4e60f4301574c02bd725fdf75ff69c5e12c7be63446b56447c18ef863bd6e5f4800ef104718000
TLSH
T1FB7199B7C3D9852DC90156F49715BF2ECE2E0A14432C3D2AC8D8BE5BA3E2871D11565E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7de001976b69b6a1d2df30c1325bc81772bd78f34bc00dd4af03d5db62767721
MD5 2bc18bee683fe02167ab6368fb649d9c
SHA1 b9000ba57eb8cf833c81db55f2665812c4bd92df
SHA512 adcfc6fbd6febe98549163b757ea1a8988d27e19e70a061b947d87e628a3bd5a84ddfe63e0c749c020ff64fe7d26d28d519967dfba10596c010f6b7f055565a2
SSDEEP 192:sxZDRMyM/jK1Ml8Mkt/ffRsCMuIdpqrcHW6+WNrdR/YL0Ur/IgrJ:sxZD+Mt/f5sCM/BHbP/C9
TLSH
T13652F9166A3459778CDBD209B955BF63D6F50472D2940D88AAFCDB0C04E6BED230782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 44735fa1e8ad2f5db4903f89564f9139ade8d967944d7209abf69cdba9757d80
MD5 98fa76ef12900f2094c91ef3c66cfb54
SHA1 c1bbb7e07cb62bdd7637aba23dd051c40b31c96c
SHA512 285e4f49533c9550e4e7e3f45a28f3192f78014064fe63e16f27d4f3efc099d0baba2f8786a8703d809c57ab2494f2a2cde58b733d01437334268d5c622764d6
SSDEEP 192:sxZDRMyM/jK1Ml8UQNkt/ffRsMoMuIdporcHW6+WNrdR/YLD/Ta/Ig59J:sxZD+qmt/f5sMoM/THbP/xd
TLSH
T19C52D9166A345977CCDBD209B595BF63E6F50472D2540E88AAFCDB0C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7aeb8142df5ff5f5c0db34b5418c662f32d0980d45fa580bf41401e885b47665
MD5 241ef45e082f04c6306e0b59d36aa23c
SHA1 b35a71cbdf6274c6c1c44e07085962e1aee96b87
SHA512 73c8531a0754832cee31de7113dc30bcc74246f3001ed1bc4c067312af8e0bded075774b42cdbe6542e8d287b0a2f4655ea73bcf3d18eca135623a89f05c6185
SSDEEP 768:RJs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNKro8G:RJs6pD1WvxzWju1jahILIsNh8G
TLSH
T1D0D2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 12fa2a2e2e8ae1efb2a56b460345894594fb3c7903fc00819aa6d4261aa6420d
MD5 98aa4b245e73a235866bff5617430c86
SHA1 bc3e01e6ab36d4795dda1794051d67b48401212b
SHA512 bf6499e78358c5f9e1057a2d01e56f6f929fe0808745b31049b46c88ab2d171bd2f91697f8633f7dc56ec82f12ad60181654f1d6b786e222d90e0f5daaad287e
TLSH
T146A0027C12C40A6AD8091A7B19991292761569123309FB6360DF1084DDA3269A15A01B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 9a23edb61d038cf5607cfa6bc45b818649d2d21f42192504b1b788299f7a154c
MD5 5956d2898ee154bcc7bbe1cb51d8b06c
SHA1 88a73452596d501aa8b600b141c2249267ee0180
SHA512 e009cbbd47d0fb316dcaee0e22df12c52ac11237352f3e0a0fc564befecf67ad40cf3ba1157e1d2702f9df26f9a6b2471d84cf38d2dbe10689d598e868203569
SSDEEP 96:KUAAKtePtYhM46SS+4iDlqY+KyLqO+2QYr+ofuVKKOAJ+IKHKS6eUKryj:iitYhM46SSPiDIYYLqOzQYr+ofdxXvw
TLSH
T1B8E1E45771BB42023C7E2A4C9794C7269E42B5633024A42B7FEC01B61E67E209EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58c147.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58c147.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 38dc5ecee9fbb878e8440d5e445f1c5bef535d97a1276eb75f7cb24e38916096
MD5 4246b6b314b0e1767ff051131420ef07
SHA1 59c659bbd829a0cc80b3eacc6c448e44af9bf582
SHA512 3da898a52ef8e09be2a4f021b474fb124e61b666bb9ce9c828d0c4100c478706b1d947ebfaab6e1640399c2a954fe162f977220d9ae773e2548a18f5b878e42b
SSDEEP 384:5ZcIhsNf32bXB9iC1a9lOaaR3c8DVcl1lIO7w/MxpBuz:Rh3vpYvOaaR3c8DVcLCO7w/SBuz
TLSH
T1ED927D3158789CB75DA6A145F98736075FBC8033D7892E84D1ED6F0E01DEAA8231792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e0650e817ba0797003b12e94000952670015ab6892c5535f0b90113f0f3a7c68
MD5 896aab73949a4ecccbc6cebe5071f855
SHA1 ad81d68b04e9c234405f2ab06cc7424385efaecf
SHA512 32dfb175451027b24468ac41a402736b10de1013f1e2b728a2a09cb7e2d2343339781d533e6c5a2a1e6d7412409878a0a5339f99a1d6047dc48e95a3e37cff77
SSDEEP 384:uNiFiZcIKzsNB8TUNTUlIl22bXB9iq1a9lOaaR3X8DVcl1lIO7w/MxpBuz:lFQC0wg7vFYvOaaR3X8DVcLCO7w/SBuz
TLSH
T16AD23AF248E78876D9AD5743BBBD2D034EBCC023F6856980B3985A0DCD9A5BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8e96da0c1795e84bf95c938aa11498c1c3ba3682810e7b5a6d022eb394fc8bc1
MD5 e4390aa8317593db1978303fd02586e4
SHA1 a322f4ca3c1d45a5a1f4dab2d1f5977be0e3ab05
SHA512 d835a4e5a22baba0f64d15706c6ce466319daf9bfb82cb6b2ee1451534c5a3562912e6aee0705539baae1dee275457329e7b95459090a2771dbcd805a6033f76
SSDEEP 384:+ZcIhsNf22bXB9iC1a9lOaaR3c8DVcl1lIO7w/MxpBuz:8h+vpYvOaaR3c8DVcLCO7w/SBuz
TLSH
T125927D3168749CB75DE6A145F98636075FBC8033D7892E84D1ECAF0E01DFAAC231792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 14040a0d809a36fee2d45b1d6913a59ff8d58c5af324194dc7fb78ef480ef89d
MD5 b0c9e96b1bf5b07f5571bb24a3d4df6d
SHA1 dcb8f16853c5ae313ac88fb443a10336036a8604
SHA512 ca35b009471d56adac74716a0bc80da98dbf57794e07c71b227e8b23767e76c48776ec91004e4df1e1875ff1d794afe65352954bbe457b0e8e6ae7af8a8c6bce
SSDEEP 192:nONC6O7+37QmiUyFWHttb0cO2coaR0EicNmqByU6:nONC6jdHt9lOaaR3b8U6
TLSH
T108120B367868ACB71DE29545F9C736139FA90137DA467F80D5EC6E0C01EF6AC234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 08626159c8adfc06f2a98354b8bc68538d53a7844b3fef4c6660cb1df13b39a3
MD5 719adce73b6ce633c83b04e6aa30568a
SHA1 c278697d59581142d07cd2d88b0d012af5eac692
SHA512 cb4faf5c9ff85f27b2d530c8e8ed6ee7ed32b3dcced4591a1fcea002859dac1329b2e0ab3dcdb39d2ff49c8e018ec707c881d1bf1a63692732afd173d1da3d90
TLSH
T13541095CB6F91148B3B7BF59ABF6A86D887E78272E06D55D00110E4E4A23A40D8A1737
MD5 SHA1 SHA512 TLSH

Submit Download