hxxps://topg[.]org/minecraft-servers/server-659351

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 01:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://topg.org/minecraft-servers/server-659351
Sample260728-bmeafahk6w

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
221	raw.githubusercontent.com
222	raw.githubusercontent.com
228	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4952	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296749349978411"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{F4398E97-17F8-49DF-BC56-0C7942F05C64}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{967AA7E0-B422-478F-8FDC-3F9D5187AF44}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6088	msedge.exe
6088	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 4348	4148	msedge.exe	84
PID 4148 wrote to memory of 4952	4148	msedge.exe	85
PID 4148 wrote to memory of 1620	4148	msedge.exe	87
PID 4148 wrote to memory of 1620	4148	msedge.exe	87
PID 4148 wrote to memory of 1620	4148	msedge.exe	87
PID 4148 wrote to memory of 3744	4148	msedge.exe	88
PID 4148 wrote to memory of 3744	4148	msedge.exe	88
PID 4148 wrote to memory of 1092	4148	msedge.exe	89
PID 4148 wrote to memory of 4304	4148	msedge.exe	90
PID 4148 wrote to memory of 1092	4148	msedge.exe	89
PID 4148 wrote to memory of 1092	4148	msedge.exe	89
PID 4148 wrote to memory of 4304	4148	msedge.exe	90
PID 4148 wrote to memory of 4304	4148	msedge.exe	90
PID 4148 wrote to memory of 3608	4148	msedge.exe	91
PID 4148 wrote to memory of 3608	4148	msedge.exe	91
PID 4148 wrote to memory of 3608	4148	msedge.exe	91
PID 4148 wrote to memory of 1772	4148	msedge.exe	92
PID 4148 wrote to memory of 1772	4148	msedge.exe	92
PID 4148 wrote to memory of 1772	4148	msedge.exe	92
PID 4148 wrote to memory of 2652	4148	msedge.exe	95
PID 4148 wrote to memory of 2652	4148	msedge.exe	95
PID 4148 wrote to memory of 2652	4148	msedge.exe	95
PID 4148 wrote to memory of 2932	4148	msedge.exe	97
PID 4148 wrote to memory of 2932	4148	msedge.exe	97
PID 4148 wrote to memory of 2516	4148	msedge.exe	98
PID 4148 wrote to memory of 2516	4148	msedge.exe	98
PID 4148 wrote to memory of 5040	4148	msedge.exe	101
PID 4148 wrote to memory of 2376	4148	msedge.exe	109
PID 4148 wrote to memory of 3892	4148	msedge.exe	110
PID 4148 wrote to memory of 1080	4148	msedge.exe	111
PID 4148 wrote to memory of 2568	4148	msedge.exe	112
PID 4148 wrote to memory of 2568	4148	msedge.exe	112
PID 4148 wrote to memory of 2568	4148	msedge.exe	112
PID 4148 wrote to memory of 4968	4148	msedge.exe	114
PID 4148 wrote to memory of 4968	4148	msedge.exe	114
PID 4148 wrote to memory of 2404	4148	msedge.exe	118
PID 4148 wrote to memory of 2404	4148	msedge.exe	118
PID 4148 wrote to memory of 3252	4148	msedge.exe	119
PID 4148 wrote to memory of 3252	4148	msedge.exe	119
PID 4148 wrote to memory of 3252	4148	msedge.exe	119
PID 4148 wrote to memory of 3752	4148	msedge.exe	120
PID 4148 wrote to memory of 3752	4148	msedge.exe	120
PID 4148 wrote to memory of 3752	4148	msedge.exe	120
PID 4148 wrote to memory of 1880	4148	msedge.exe	122
PID 4148 wrote to memory of 1880	4148	msedge.exe	122
PID 4148 wrote to memory of 1880	4148	msedge.exe	122
PID 4148 wrote to memory of 5160	4148	msedge.exe	125
PID 4148 wrote to memory of 5160	4148	msedge.exe	125
PID 4148 wrote to memory of 5160	4148	msedge.exe	125
PID 4148 wrote to memory of 5784	4148	msedge.exe	126
PID 4148 wrote to memory of 5784	4148	msedge.exe	126
PID 4148 wrote to memory of 5784	4148	msedge.exe	126
PID 4148 wrote to memory of 6080	4148	msedge.exe	127
PID 4148 wrote to memory of 6080	4148	msedge.exe	127
PID 4148 wrote to memory of 6080	4148	msedge.exe	127
PID 4148 wrote to memory of 5348	4148	msedge.exe	128
PID 4148 wrote to memory of 5356	4148	msedge.exe	129
PID 4148 wrote to memory of 5356	4148	msedge.exe	129
PID 4148 wrote to memory of 6088	4148	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://topg.org/minecraft-servers/server-659351
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdd527c188,0x7ffdd527c194,0x7ffdd527c1a0
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,10190341019043580894,7500125261501766559,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,4014341261398524252,17513476519315696745,262144 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,2224757360976307535,16369102745542223146,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,560434117813742494,17759926097925496636,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7642327795445288205,671471514428791580,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,8045354602313521973,5464729718123552746,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,11077168959291446391,9428869099210795874,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3596,i,17051034516321329751,2118791016408978401,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,5210870597030618527,3634614021868220789,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,17756685834068350860,3694735170039447553,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,2933872746061423422,16392793528568445318,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,2933872746061423422,16392793528568445318,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,5731565121256087193,1947338314323037846,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16608208949792285095,6409787071988188836,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,17171788218230889726,10322580583954519870,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4416,i,608470353789322411,12428764431891597165,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,10096403244150221330,16380400303818881423,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,12681139519067673374,13696706052255610498,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4280,i,6617451381150112761,12087508867457634687,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7100,i,2752258334908787508,5270332664155662200,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7220,i,6862609530469585996,10701285209727785060,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7116,i,495043502928776228,3391253518613210760,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7464,i,9717578127872991015,9178514412007577721,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7424,i,13314357717563908483,14865716933184945485,2097152 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7760,i,15192919714254588077,13804221460650033661,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=7756 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7776,i,15943188607393690105,6826120901661700646,524288 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:8
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5348,i,7138921730205277088,8880549657786400907,262144 --field-trial-handle=2080,i,8392190603310498410,5205189451225027892,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6088

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

04f6a39a-9496-44c9-a8b0-a40eb6ff8da0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04f6a39a-9496-44c9-a8b0-a40eb6ff8da0.tmp
Size 30KB
SHA256 cc75b305c87cf815f71cef3ed7b1cacb34728a3d957ee5d3fdd8801b4b27a346
MD5 5d8f9a1f9b3fd5f9aa8a9d78aaa03189
SHA1 b601738e714bdfa1303b362b578af916cc12008c
SHA512 ba5a09d72c524cfcbd5aea7e82019ad744ad79f14fbb0d2aa514e5ed4144bbcd4478c4c1dd9297ea20acd1001e8474194d55bc9c625495626142e55994d332e7
SSDEEP 768:wus6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN/rovK:wus6pD1WvxzWju1jahILIsNsvK
TLSH
T1DED2FB3B680CC77E4F841E5CEC2A6F967DD801CBAB94895447FA844C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6c9fed67bd1448cddc189e4b1c7569be18dd4117dd64ee026f01646218f57324
MD5 effd72d9c03d1c92f400f62b491402b7
SHA1 06de2f585fc92ea3b2148c0f88e2892305995179
SHA512 6ce4516b392f9c14caabd04701be9774d6c4afcf3e2ba967faf87a3e5c1774dd8ead902e6d35bdb526e497fe7a1d04007baebfbd1cb69158f27a29e826860ea6
TLSH
T19D710B391D22C883E3B90370D0E13FFCB5F961B50A2B1DCA11509A7D992FF636039524
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 ad8267b5467662334bec62ee70594ae4d0df1dd2c15662d06c76ae405f0484b2
MD5 f128b2fc3bfeb7bbf0a5502089e23c9f
SHA1 b1d3b817bec178a958368c145497c558aa141198
SHA512 03c26354f48449733d58de34881db443f6dd26d0e628ffa87798fcc9771e6e26acd89a62a6d761ede7244b99f4d468bbcb26257126566be1bf739bce6fb1f544
SSDEEP 192:N40/EoSG3fJBoqWj4adjNJHTogSHm1WiM/5V/AH1EZrVk8SqHJGQp7hI:NjP7InKVZIQ0
TLSH
T1BC0260644BA08896EB7812BCDCE93FFC38FD45A2412FBBA71288856C921FFE71591105
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c196.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c196.TMP
Size 3KB
SHA256 ad33cb4a23bca017f7376c9a5e3eb6df9d3b3b50e73e352b104452455e481ba9
MD5 9fa8ac1ce34e2f3cffe2207edcf39338
SHA1 6b4b03523cdff00c973b1ee9854ae49d50ace14c
SHA512 8361fbfab325c7082471faf32a2213c011c7f58fa149f72468da0c83f5c2dfa348deb2d51e5fe274c665141ee2ae4422cf212a474c2d96cc3fac007f3daa1de2
TLSH
T11561F8380D22C886E3B117B1D4E23FFC79F991B50A632DC9018499BE9A0FF63A139508
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 401847550d13733a78ff576336e73156a5e450fa5affbd3981676bf4eba5bab3
MD5 d0d3b42fefd8058e582c4f89a9a37219
SHA1 6f16708bae923baad8c603922038d3f15709fe5c
SHA512 9a716b88e557fe2763ca907ff4fae48e87693df7fcda521c90ee0db0dee6f2d329f9320b20f5365e60cbd1196051ddfdb1dc13f0d4c6a6dc7d20bb5b4579f8d2
SSDEEP 96:DZOJofwyP8cvzBj5BvIwM7cR3lMGnGjobQdo0l:DcWfwy0cv1j/vIR7c1lMGnGjobuo0l
TLSH
T14AA19AF7C3E9866EC91196F0EA146F1BCE1C0956436C3C1A85D4AF1BA7F2470E251A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 f548f614aac718110f3d2f6e16b0698a65105a6b206b6c02f0370f2562da16a6
MD5 08ada527a4ccd8c8587dc6fbb06f1783
SHA1 417baf2b1c9512896dcf2a4f2a2a545d383f4cae
SHA512 a6a072c112d2ff547e9e5f18860fd38ae1a4e1617a6ffcc3633284463d4dd765f945f223a06a9aa6b0b4ac5a2ef43c59d333494597e38dfea0eb2dbe65e8365c
SSDEEP 384:DcWfwyD0H2GwesBmmZoA4jbhe5zVPDe6cv1/vF7c1lMGtjn1G6nUEavrDBzaK70f:c9lABIZ+nf
TLSH
T1D472ADF38AE9416DCD11DAF0DA142F1BDE1D052A436C380AE5D89E4FB7F2560D28269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 9d61513df4b454cb7614952df20a02615e2ee6a46934b4435348f6f08e79f29a
MD5 e4fed8643aaf77f15654a064b19e6435
SHA1 dfe6d10deb63a184abbc92c3b5584a925598aff1
SHA512 40303e7ec8b4c441ffb43f7328cf42561aaa94d312f5eeb0300a84511137f5cf33002f4103d108c585fe9f13e357d5bcca8d0111e85d22f1cbfcfefe4c9a735a
SSDEEP 192:sxZaQUnvR2yMojK1Ml8MWOe/fLs0x9qlbGddpmrlHW6+WNBw8F40BYLycJZIg5bJ:sxZMnv7uOe/fLsY9hR0HbNxBiD
TLSH
T19C72F916A634597BDCDBD219F916BF53E9F81472D6500E88AAFCCA0C04E6BDD231381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f4de972cb08f7220c13151d153658437a978a55de5963aeeba6963e6ff0b4ffb
MD5 88d97e3c2aaf306da61b54f8439ccced
SHA1 0fc7681e17367474addf4a55bc25a2a1c37ab856
SHA512 4c3daa8806b64d3a0126b3c4e9a23d878a206cdb2f69fe64ec85ff94af03e905f5f03663d7dc0dd800e6a7a14dd8c844808f36302fc5a16f5ecd535a547516c1
SSDEEP 192:sxZ6R2yM/jK1Ml8Mke/fLsdxjEIdpHlHW6+WNMqh/YLPcJZIgrJ:sxZ6sMe/fLsPjdFHbf/N9
TLSH
T15A52E816AA349977CCDBD209BA55BF53D5F91472D2500E48AAFCCA0C04E6BED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 df1c477a6e336609be8a2c5a2d1854d4c66475a09fa8c900cb401ddc3b586a80
MD5 b3f627b278a19b3f820c983673e80a1e
SHA1 da8bf356ded957dcd9b788b1c6b9029daef043f2
SHA512 7c6601b8b0f2ce480d69c05d775c1f10092fd4b3ebe022147445494ec4093b249078ad3438ac8bfcdb5c40f0da6530ec1e3b8a16c5d43807474b735d6a3fb455
SSDEEP 192:sxZaQUnAR2yMojK1Ml8Mke/fLs0x9HlbGXddp4WplHW6+WNZQsLqw8F40BYL3v/t:sxZMnA7Me/fLsY9AhbHbZOxBqD
TLSH
T1FC72E916A534597BCCEBD219F905BF53E6F91472D6500E88AAFCCA0C04E6BED231381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 badebe94531d09649bbb37aa8de54a416019c77139ee745aebb6604b06993799
MD5 1a83cdb58b6120cd8535efdc2b90d4ea
SHA1 2386c4d7f6917c79dd6caeef00c3c2a1b4c505ad
SHA512 6fb59f71c146d3887aac095ad882176b4cd1ed975f54f234161a6e9a2744729a113d48f10039f743c1eabc1cad2b1e2b258549f214d8135035232975209af0af
SSDEEP 192:sxZ6R2yMojK1Ml8Mke/fLs0xjEIdpHlHW6+WNMfMdYLCcJZIg5hJ:sxZ67Me/fLsYjdFHbndeN
TLSH
T14852C616AA345977CCDBD209F945BF53E6F91472E2501E48AAFCCA0C04E6AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6550f333e9181af6257f7b0ae025d5a86a149079b0f34afb99d3ad9418deb68f
MD5 c642290aa9d8267e97ba7443beef4ea2
SHA1 e1dec02521043a0b71aa50b05693640de3461c16
SHA512 326b269950abca62ee54f3d416cb9b09d01aaeeac9a16565b93d9de840fa7f34fd1754c896c8e3c087e1b1c8bb99ea6669874d4849747e6aa64aaf48dd176af7
SSDEEP 192:sxZ6R2yMojK1Ml8MWOe/fLs0x9qQbGTdpmXlHW6+WNBw8F40BYLycJZIg5bJ:sxZ67uOe/fLsY9cfUHbNxBiD
TLSH
T14262E816AA345977CCDBD209F915BF53E9F81472D6501E88AAFCCA0C04E6BDD231781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 b435a6f2bb374f74f0c9d57c30c762fd52f801a960f017d38776cae77e273f20
MD5 9f4bf292d21722200dcccda4631eddf8
SHA1 4f9726dedbf9f06d7a57f065cbb847d5fc466c00
SHA512 513855fc57ef41213d9c7f2d3bcf073d83a71b57069bfd7545fb4af1bf21eb632be6f9a7431f6452c4e2a1eea959bbcc67f77798d5b5c97c80147523276774b6
TLSH
T11F51E90D4C875B5BCDAC11B358BB00C4277574DE59C89B1B759CA138FCD323D295A214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 82b43bf1d7a014aa8661db90a7016f25d5b5cbff37c51bb0819ad617f53ce4a6
MD5 bb13dcd0289a840de43ca9956c317c0b
SHA1 82eeb11c61ab7095a85e14996fcfeb1bfa8320af
SHA512 0fe884bdd8f4e694e6970b85058d8624bf868f2598fbbfea212ff50dde3bea82c4a142c3687ab1481b4ee4ffe3cb70b1e4fd1b11b8cda07f64bf23d18859ac70
TLSH
T1A641D68C0C428B6FE9A840B31472A4943770A8CC1A955613AC7C3235BD4776D295A3FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d2db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe58d2db.TMP
Size 2KB
SHA256 24ddbd65519927c6f60ff7faa57f5c7f46522f2f0f9f1391dcff8d484aca0df5
MD5 f389265aeb650eab1ee554087626aac6
SHA1 633fc68abc3065995b6add5f1c454a4dde1694a8
SHA512 0c554109070846152f7d3cb093311b55c828cafdff0594f6ce20c619513b0eb0238eef7655c859c733d52f0aca43e15a9c64015bbefa65e17c6028919290c8f2
TLSH
T15D41DA9A4E818A2EE99440B30DE264F43335580087557F4378BCA236AC927AD3E4D1D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 950477fa9ccf49e40d9a04806e3ac464d2cfe3d55e099cf643d764913ff01c43
MD5 23e8a1ecfc62c2e48d489329d34f7c2f
SHA1 6d2d52af661f0eaf54e1524d2616ebed54714369
SHA512 d167eb0ebd4135e8d9390e8db0008f2a8b2ead3334d9c16f7c4ef1a1781a7b8761ccc95d3793c4dac7288c7ebb1022141b3416f61c6c53b6e5c4453e0ca3e76c
TLSH
T1ACA0023907D14253C50213F52ED651B923644D14E316174541910284C854565454300C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 0cd3b2661520980559676c769be6aafe30b3f09b9aba19163dcbec1b478f73ef
MD5 385e0783c0c54aa5ef30b1f4315413fd
SHA1 6c508a9e5467af902b309477f5ead6aa98ed84f6
SHA512 0a1791eb5d023b8c913f946f47c717c1a2bbf935dbcdf6b29654221a8bb69111c8447db0eedf1785f1594d1770f4526e1c7b62fe2094a1dd7c5b42c6e01f0b1e
TLSH
T174A002900380801AC01255F6AD5212413391DC942180231740E90249DC554405DC100E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 7255d3d9b5f8e7e7708e1a0b8ae3ba53a5733a8484aa213142b90d226d113c50
MD5 7bf7ecd0e2527aa912c7f84f8606f017
SHA1 8d20421cc96f9a7db39c5e1c6af74cd47aa2949a
SHA512 3841a24fa48b1512e02ad21c51aea2a7e9514b8a8ed7e0eb2bd9698487afb297cec1708231f7a1caa019e1a282df8f372be930ba08c10064a3ef270a2ef241bd
TLSH
T166E06FBB2EA32820EDABE3E32830A4B10241382C8800FC0F686A96C790B03213806C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 69670f5e81fa1aa81021cb62bea806a1527d380d6abb59938636a51ee633e3d6
MD5 5161348267de098eb880c96cffb84e0a
SHA1 ec0a40621e1085262e2eddea27a6792e2cff0188
SHA512 49b0df177fd6c83d749774bf036fba15575b4800e72a439a4f2fceaf3590e98ab8c88ad2fde9d37f2210d5d8da21ffbee044c89985a70260a04069027f902011
TLSH
T19CA00231CA5DA5CDD848067894B10AC822148CDC6B09631140AF0258885024081FE146
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594116.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594116.TMP
Size 48B
SHA256 2ed801bea485a44e514f439522bf57abbc24ecbc6982240a5083235da975184b
MD5 d8632bbcea23966f95e8fffe01a780d1
SHA1 9f1032b187758e147dda4d393e95bcee53219755
SHA512 9f231af5a5ef0f0fa74e56fb543f6c01650610fba0d6ac2a5326d7c15468e40a141f0a7b4b1a85f9f026ff698362ad910864b3aedab2931ec662abeda4902232
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 3beedd38177cabcbafed594ef1273eea7973967655194111067d3c434133f744
MD5 433c7bd95f334ec9410c0606d11496ae
SHA1 a08195334c8ca2d8d45007108e0df91ad6f863be
SHA512 8138aa2f8d50e3cca8d51d21d1b3be9466a4f9b826a86ba6f6d6d38518af5655091cdc02255714a3aaf74b96761a3c1cf6d078fd40450f79f76b79102d66e4d1
TLSH
T13AA0025517489402D005077010C21B532768DC54820A070750D4C655DCD45917D92000
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e4581483ec9b863cc2648ac63216b054829685648e0b455352148f9f781444a9
MD5 2f34ce98dc841e7d4ff09fd384f3a1f2
SHA1 0692062fe976aafb0ad19a15e5f0b9215b01846d
SHA512 5173b04aa18d75f7b4c21e2d9588549d471aecf4e21a6c5075b94d143458dcb0768772801cea99750b7cec4f8b674b4b76eae625905e7030e9bcc04aee05c18e
SSDEEP 96:KUAAKtePbJSKqoCe589p7nTkjn2PdhkKlBdzkRJpW73:iieBe589p7nTqn2lhFBdz6JpW73
TLSH
T17DA1C55235BB03123C7E2918E264872A8782FA677028E92F77AC50754E67E344DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 160B
SHA256 fef36d19e34877507fad892219dd61437d1b1ec42577a244fe021bf9e5b7e6fc
MD5 9d42e574cd3e1c78cf09f3c0bff5011f
SHA1 65f92a339c7ce3825327e8dd14c939d049e56fb9
SHA512 f1607e5fc8aec07d420e04b03d26140ab2b1ce59552d05ec71d2234eae229e337620bdd2146a3ddac9b0e5704158ad359236e542442d52805a47260d3e3fc6eb
TLSH
T162C08CD319008A8B0AB4DACD6430720DC20F86588CD0CCF8E448509A31B4A334883E64
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59bffb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe59bffb.TMP
Size 167B
SHA256 9c708a3a75a31a3429dbaa0ef5e6117673a838033fcddb755796ad672043ba53
MD5 48fbe9dda0c2b9634c7ce14fc5b3c772
SHA1 d65f70761fc78deebfd54dcee540a0954b45887a
SHA512 f8d1dce5cd7ed1209891db626afcfdd9c1fd40b43b10578b344f9da0011e6726d7f8018a9eec6da640044ab754389fd4a161844c91c713cb327334c91ccfbd0d
TLSH
T199C080931510494B4771D5CD6430710DC11F4D598CC0CCF4E445705531745334442D64
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 100B
SHA256 12a732d5de9550afa7903a93cce8581927931a52ff219e015864bc6aae753a32
MD5 da8c4043f0651166cb907dd58945be0a
SHA1 53a5ab4decb97f94db8d98c31af0940406f29011
SHA512 2f4ca5ef5d090014ba96e09ca517e3a4ea8d87c34d1e15b60768ef61417ca02b5d0de0592b67021d33bbc3b32bf1dd2eecfa5924619db0b3d048b6a413bd7875
TLSH
T115B012FB00427AC32E6536EF400531CCC57373D85C84DACC9471101833404BE2002C24
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5980ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5980ee.TMP
Size 187B
SHA256 d7a41c44c56d1a28879fa30fbae087bfc424cede2192b5037dc03481c4afda98
MD5 af7c3084965d2138e0d76edfb33f8efb
SHA1 4394533c43a8e90767001c25ad4172b5fc8a45d8
SHA512 f6905208f45a39f5e9f3d73b158df9046e57264268e23a5ad212ee9ba2a62428cab3f933f0df40e113b9a9c33a2fa8aad85ced73cb8b8f21c9b88dbb6cdbd6c4
TLSH
T16BC080BB60467D923F6955DF515135CCC676BFD51CC4564C5835305532B097D1041D30
MD5 SHA1 SHA512 TLSH

Submit Download

d5d1f7b8-38f5-49ae-b578-f4f83f2d71fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d5d1f7b8-38f5-49ae-b578-f4f83f2d71fe.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 113e12d19a73df8c9ecba60a4027ecddde887c82f038871678890e199e625e94
MD5 e786c67bb1586ed7315952b0c1f950f6
SHA1 a3085c930550305155e33ab28b522ae80121b14e
SHA512 a1b0548ad323fa8149905bf6057ebb30daf3e234ef76317934c916d34c028f40fc5a3ce82f51152ceddbf8c90b44fe63fc6a138fcda94cbb2146d6e5616052fd
SSDEEP 384:BiFiZcIpzsNz8TUNTUlIlaTBr4vdph2a9wvzJrq8COObjI9G6w76:oFQJewgaaDh38hpC29M6
TLSH
T162D229F298D74976E9AE9703A7BE2E135EBCC067F5955A40B3D89A0CCC9607FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b858bd2edab8fbe5a20fefe65cd659035b34fb5d80d03d09c6e2fb2c25572dbe
MD5 4d8e582db2aebd76914d0ea7ca209230
SHA1 b1c60163df3743e6a318c816b27c84b05919dd9d
SHA512 d4b50a89869607d069e736a0e0eb6737320d8b6bbd2804ce59a0bfebe53eb986e8e08a839d6389f1a97d6b66661aa2507cddfb5d1abfc1540fcac62b38a3a8a4
SSDEEP 384:FZcIhsNh8or4vdVwa9wvzJrqxCOObjI9G6w76:9hga758hqC29M6
TLSH
T1AF929D36AC384DB659E3E111F8CB3A135EF8807BE6D91B84D1ECEF0C04AB96C1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 61e6e8c2bc2d33455512d77f30696a943ab9d66ef7b6b67fe61bcb0eda52c5d9
MD5 3ec4c28e07f873c249e08ce09fa046ed
SHA1 60086a94038a773e9da2cf77498118345eb4bb8f
SHA512 a0079c3bdb59b9cd668a9c201a6ff9301469526126771851e0fdc2967491d721f7b6b1f78081b681f6d2cefb89e12ff9fde6ab34a5bd652ef6220bb9993a0c68
SSDEEP 96:nqONkXQsjpfg7+otEol5ih/cIPURHl8h4otop5ZJDiB8PHvIVytb0gigBabJxgGx:qONL6O7+3hQmiUyziGttb0j3bvgGQ6U6
TLSH
T13C02E7396C686CBB8EF2AD45F58737275FA5117BA9A62F40D6E81E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 eb2fda06acfa14d61da23a6aa8a40feee86a92b7a5f304f272452f9814df9a8c
MD5 46ab48e4619af1fd83480ff61e97ce6b
SHA1 a5a8023e279d658fbb40d31fb446557e477e3947
SHA512 5f59cf77b0a64c60eeef8043cd1557d4a4cd3a7fe683f4dd8cad159e96246316ce149c7ee37c6207de3eb690e61a9bcd2d2ec5aba274668cf969ea4b4d4bfc02
SSDEEP 384:HZcIhsNh8TBr4vdBh2a9wvzJrqxCOObjI9G6w76:vh9anh38hqC29M6
TLSH
T106928D36AC384DB659E3E111F8CA3A135EF8907BE6D91F84D1ECEF0C04AB96C1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 69a72fb13df7750029361a4f117908ea3265f6232b1b2cb23af819567ddfb2cf
MD5 bd8b8f359fb2707cb0e9d8dd168a01dc
SHA1 3392fc91b0e638d10ac620c73d311de93ef8d1bc
SHA512 250734abb002cd12903b7af640799e952d753f85d05ce587c0c7530d1861229976911c64bba07b50aeca41281c2e6a622d630974284ddfc95339403587293d16
SSDEEP 192:AONc6O7+3IQmiUy1iwttb0j3bsuF0SJrqOEcNyqVmLU6:AONc6KFwt9wvzJrq6CU6
TLSH
T1AB121A36A86C5CBB5DE2E541F9CB36136FB54137EA8A6F40D1EC2E0C01EF66C2346816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6bd4a98d769f9c58b648ac23f3569bf398ec6928a56742a74b23cc94898db82c
MD5 f297ea8b72b9e22cb3e60a3628539860
SHA1 de07db8ee55323f4ab4b3947382a44b524ed4803
SHA512 0e2a7daba44e4d3824692665dae59faaa90dc3beab7493ded9547d33de045319310545f4faf845fe84ca5e7ae766cc8beae41ddca1ebe77a789895c519cd2f83
TLSH
T17DE00213D20544FFC028033505876A2036E3402042B20144CE2003683C533401A30FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe597e4e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe597e4e.TMP
Size 392B
SHA256 0cf64e75b85ed9590bcce0eaea2dd436d771ed026ec857a4e14d69159705cd96
MD5 032704c4251f2d79991f9758482d9ad7
SHA1 2842efa0b7bf8613cf1d64f9421914e46ba6d4e4
SHA512 dfda61cc55306e72258fe63806512645782a7f5d7592e23b812cfb64d6128cc8b250ac1a43e5bc1697d6b5225790d79808b46e3b0cddd12fbfdf117e5cf4bce5
TLSH
T161E00212510544AEC024033505476A2026D2401041710104CE2003581C533401A20BC1
MD5 SHA1 SHA512 TLSH

Submit Download

20668821-025c-4359-8d7d-e6ac38e71b95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20668821-025c-4359-8d7d-e6ac38e71b95.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2ee60f6007003f118fe105d9737b9e73a5c6ae79ba3a6fe1caa607e01f9e795d
MD5 4eda521d6be4622742f323503a30087c
SHA1 9656f2fcaf697edb6feb4f8d4a9928a5ed38ac23
SHA512 e46c1f51ba26930e28a41502aec1db6752f36a33fcb71d1fbbab4f659de8f78314dbd463d561906d74c36197f8903ec6754924818ef349d92be487213ea50263
TLSH
T15E412958B6F90148B3B76F5A9BF2A86D487FBD732E0AD45E00110E4E0A66E40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download