hxxps://apkgk[.]com/pt/ai[.]motora[.]rspmobile2

Analysis

max time kernel
124s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2025, 20:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://apkgk.com/pt/ai.motora.rspmobile2
Sample250127-zds91avkcx

Score

6^/10

discovery motw phishing

Malware Config

Signatures

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
11	https://apkgk.com/offline.html	1928	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1928	msedge.exe
1928	msedge.exe
4224	msedge.exe
4224	msedge.exe
2428	identity_helper.exe
2428	identity_helper.exe
5900	msedge.exe
5900	msedge.exe
5900	msedge.exe
5900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4224 wrote to memory of 1044	4224	msedge.exe	82
PID 4224 wrote to memory of 1044	4224	msedge.exe	82
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 3164	4224	msedge.exe	83
PID 4224 wrote to memory of 1928	4224	msedge.exe	84
PID 4224 wrote to memory of 1928	4224	msedge.exe	84
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85
PID 4224 wrote to memory of 3920	4224	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://apkgk.com/pt/ai.motora.rspmobile2
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff911c046f8,0x7ff911c04708,0x7ff911c04718
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - Suspicious behavior: EnumeratesProcesses
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3020 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,6047641037763816758,6480355733640984192,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5416 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1252

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:32

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea
MD5 fab8d8d865e33fe195732aa7dcb91c30
SHA1 2637e832f38acc70af3e511f5eba80fbd7461f2c
SHA512 39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6
MD5 36988ca14952e1848e81a959880ea217
SHA1 a0482ef725657760502c2d1a5abe0bb37aebaadb
SHA512 d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173
MD5 SHA1 SHA512

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 52KB
SHA256 6f1a68759445c041211dae8fd89e6d2bb9831e29f0ac893066fa199b05396fdb
MD5 c23485c08cda263560e9b17ced9229be
SHA1 e3ce3b1a3964f9f71772c37b93cff92ca14c629a
SHA512 56d79e4f3618c924eb2b91c442517bdbeafb9561331d31bfb9163747ee51fb0c0f2680b5e18ace30c5d2ff33f8c7b3e82c27bc3fe6c90c31fae7fd8c4baf991e
SSDEEP 1536:8Jx3ZwZrKgEFuI5sixQHBf2QSEm4KbTYqnolv4pQ/xpkx:8D3ZUegOz+HBE/lQ/xpa
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 105KB
SHA256 017b17e31881c24efa331dd15833ba554c71875d751b5652ecfde711a9aeb524
MD5 3ebc8eb9a1a3cce51aa562705bf6da6a
SHA1 ff3a8ea3ff6ae7e219e7af696732ac6a40328bd9
SHA512 f925b3bdab44bc3ceb8e96d86610bd546c2b2cffda49f5cdda591b4d7e58e4875c1e431907db9bd7564a549fa035bba1e004fd0c0489a3e363ad4cdd85f3ca0f
SSDEEP 3072:VVNwZiWSC218K64t+drfBOJEfgKu1vv4aV0:mSC25t0bBOJkevgae
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 144KB
SHA256 c34fcc2e9ebef3ac0923c06ef65a174d2f0789336253c42b48b62f71f3705d6c
MD5 80889a8586ef59c5a0d8212ec34f644e
SHA1 289311abe2bcbaeb80030837f8ce3b74c2d2a94b
SHA512 0c8eed5c701d18157cea3fac28b8cf1a561766f945b2b86a8f5a6e3f18fd5726a54bb99970c38bb22a20e5d210e33099cd4fb6b72c18fa70d1136ea4a8d1b544
SSDEEP 3072:f47HQguM6djrtw4/ioCcsJ37kOsgVmgbRT3claxbiY3VOyCfNSg4IVDls:fcHQBBRw4XC33AZImgBM8T3mQxUW
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 27KB
SHA256 a27d999d25c0006ba2bc6410d91390453a72b0e4c5badb4e17562017c0d4d39f
MD5 17e4e975b929db8bef9b05306bf4496f
SHA1 0e1e312d2fcd3445559db81b64be16651c7fc939
SHA512 d2dd668c65d04831de3defbffb78c626eaa98757b0f3be0e7d7bf8442f2eb3e1ed72480704c96664e50cc2039245f7a733c18114ef16762f610218189f6d2cd1
SSDEEP 768:jS3c/Uxhti2z1KWIKQs00B8mlbUUjulvWwUiFV:23cM5i2zcaQs00B8mltKl+iFV
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 16KB
SHA256 ba191bf3b5c39a50676e4ecae47adff7f404f9481890530cdbf64252fbb1a57e
MD5 a2edb5c7eb3c7ef98d0eb329c6fb268f
SHA1 5f3037dc517afd44b644c712c5966bfe3289354c
SHA512 cc5644caf32302521ca5d6fd3c8cc81a6bbf0c44a56c00f0a19996610d65cf40d5bae6446610f05a601f63dea343a9000e76f93a0680cfbf1e4cf15a3563a62c
SSDEEP 384:Lha7McMVhiB+XmITjsy+wHXjov+sc8idzmAKUcLIS:Va7McSPXpjsy+wHzu+nZdKDUcLr
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 66KB
SHA256 28442a56b016bfade0e368929138aaaadfc36156734e8ec7a6325b3e58fddc25
MD5 f53b6d474350dce73f4fdc90c7b04899
SHA1 b06ca246301a6aea038956d48b48e842d893c05a
SHA512 7f275614052ebae8876ad28fc5d48e4f63ed9ebc610ed981f81377ea3ba4c49a2031ff771deb12adabcf33d4789ba35354c1e52524c067a9e7ce078703683f1e
SSDEEP 1536:ers7BE+w8lQQcFc3Zxrzz3l2xk5wB/wAURIevycs7Wqa4bvSfR+ym7z3sOexr:ers7mf5fFmxT3l2xk5cwAqqqllK3s/r
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 20KB
SHA256 4618589e5948a8d8ee3127edcf3c9d991281ebd0c4ee800948f189858d1c2507
MD5 29f554359bbbd907f84d10ccc6b147b8
SHA1 4599317817dbb289b648e1280f1fa2a4682a26d1
SHA512 0769c0999cdfe078b582f6516051fde73901afa2761ad860b8e654f7463bf774e2d32e634fabcfba0ff7228bc7e2362b122a0913bda5faad61bbf42b248c887a
SSDEEP 384:zKJXWT+Zv0lD7pY7XPNo93HtRUZvVSMfOXp6Tt9Fgs9lsfv9/Heodk:z0XWqZMh7qfN4sVDOIBk39eYk
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 20KB
SHA256 0bbf84d7088148e0a398ffa522218b3e0c12a56f95c613cd5b205fa22414ad4f
MD5 dac18388ad86ed5ec1bd4d3bdedd4bb9
SHA1 1e30106429e1e84a697db46be2dff99a6df0f6bf
SHA512 9b108ca9cdcf79577525ccdc752ce6c753323ca918a23b8f4e99041be4e5411f702d185884494b57fa2f2f58083dbe067c37312a6d4663d6d923990b0c4e499f
SSDEEP 384:Rc6V2kfvsLNvF7vwGpF03Uyg9GE4f1hV3xFN5iUeRbXMI:7sb7IGpF0ky1fXVJ5mb7
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 20KB
SHA256 5e5dd8d3d067b5a50d9284de24e90b9538b96938d56b024074ef602ae7d83584
MD5 4c0e50267e16196f98c0817785a8c125
SHA1 23064de7af9d53d06a82fcfb4cb107731127c437
SHA512 86ca6e9de22af6d21ac57a3775cdb4a287ee39c1cf656d9dffca64ed09f13dd54c30f324e2ee322014272d504e5a4c09297ba8b75a742f4ee67e314c80021e54
SSDEEP 384:dDzTVpgQZPLcpDjOrOIxdPsAYKsxfdVD65KZqgPIhfpyFHpYXR:RVrZzOSrVxW/xf3ycIJP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 35KB
SHA256 77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583
MD5 7c702451150c376ff54a34249bceb819
SHA1 3ab4dc2f57c0fd141456c1cbe24f112adf3710e2
SHA512 9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59
SSDEEP 768:HjSgOUH5cnvjCxPZcF4Qfg4sm+7SG1JGfUGIU8Rdo1Sf7Yxk8QxGYj:D7/ZcOcvgVSGmfUNU8/oEDYxVQxh
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 245KB
SHA256 aaf5e0e57b6d9f5ead658bc5131e026a3b02fd38e46cb18895bb09b14d92b429
MD5 5f7212c339cd126d0b791f53986b9958
SHA1 9635b34637a9567b31973ea931f20d41afee7c03
SHA512 278bf95268fa741eda667eabeab2a43e0c18eff902ae71e3fe3bdf7dc3c8720e7ab776e426329903298dc7d15c2d05c03a22a7ebdf4818d714bdcf57615ace95
SSDEEP 6144:baxqvqA8crdHtk8iC/d8On1Bt1swXQRBakWM:wqc0gC18OZlQRchM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 92KB
SHA256 e5e5232bf6a92de950879a8c6c0e51268c9809aa37c5f6afd38fa949bb2e1aad
MD5 44c8184c389734e42bf26b437fe18ea4
SHA1 f4e461b9a5156fe5b25da5a8e61208201c139cbb
SHA512 d4652ea73df45533e699970aca45a11bebbec4e3abd58c657227e31ecd499b600bac8be21b4fb7db4667dad10cc5235fd7664c7beda8fb7a94cdc71e36d7e414
SSDEEP 1536:G9phWjSA7n30ZlDfOowYfmDUWslpEJekvLTKVHqncOyE03W5Z9G4t5ECbJeHG8TQ:G9adclOmmoz+JeOTKVHYxYW5Z04MCVe0
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 33KB
SHA256 07ab5426632ac7ed5459aa38e2edf581e676750bb07daae68fefd22d78166a4c
MD5 333500f74c6df1fd426545b33f68bfdd
SHA1 afd686b762c6d0ec0d8f46562d803a2ac8041773
SHA512 5cc9ff451fd70c796ec5be9ddb4ace349fac3050beb41c32321d199adaed36c372dd8dc5c7a30bf30c07f63f2e7e1e041f74d48495aaef51efe3f7dc140b99e3
SSDEEP 768:HBc8wN1noBI72XskRqIvylOTgyEbk8EIAnMTAqGqIBeoIl6ntikp+omS:HO8wXD72Lj8O9Eb4MTAqJx7kpNmS
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
Size 20KB
SHA256 a6d94814e21ec2102241bbae2506c3134b94a084157134100a171f0884cd0b49
MD5 844b35b52c5959f8bb26060dc32c391c
SHA1 1f48b029f8627106a8da34bb050a0ac6ba67649d
SHA512 42055ac770400e1622180f2e9e40bcd502f21960b05f1e52f0d672e0d230b2c6540f50afe8dd63786d148c432aa70f96d1261987361fa05197165330131e6ef4
SSDEEP 384:6U4qL3CD5fcmTW/ZTLmNhNyU5gPj/RpadmNhND5pVmDa3AnsD5:6ULSD5NypLmNhN67TadmNhN7VmDE
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
Size 130KB
SHA256 26062369871e0666b2bdc4903d6198edabfd3562f49370020c548c4296a658fc
MD5 5a411aeb5637c1d0f6248f018891c54d
SHA1 e7c3d280e875af05a6f946e8d331a8b22f4061ae
SHA512 4a0d563433548f99651eb3e2a9b239534e42d124dc2baed0112b404e5e53bc423fe89a788aea9587d813054bcd94ea8e26e9727887d63b5279b19dacdef21c0e
SSDEEP 3072:z2ii8DILd6ldJHqae3HofQEcoTnDwZQjUJAbCMlF0AqtdAgdas1FW:ZvI56zAae3HofQ9oPwZQoJc1KKgdc
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Size 290KB
SHA256 fe231c063e77cbbc44b2f6072ae0cada8582b39e6c0b91e56ec888ef13f01869
MD5 082975bbad7b1ef1ab9a3fe7502fdf15
SHA1 b15e90046707c1b6a553b5b0462e5de8be5be34f
SHA512 34676fe469d02825784e45dc7e2d7763aa84af20765ba4f8e17caa1853f7127a089baabfd9718f2ebdd723b19bc36967040554072043f6a545de963898e17a52
SSDEEP 6144:QJo8k7BDz8MJPJT+xy6JISAH+ShE+YyVz6UEl4qFT9fH8r+:qVOhPPZVI1K+YE+bVz6zlHFFM+
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
Size 25KB
SHA256 75310b8dcb511e824684c40202fb6edb67136e7b747e2d42c71a628bce42c2f2
MD5 0c2785ae737e4a3a6baf270c42954aaa
SHA1 ba03fa7243d6e4f184c3f2f05f733f5f40b96cc3
SHA512 bb9cf9627a92cfedf7db7a786edba870c7a365be59aea08cfa80752dcea5c5824af52ab7904f915faf51dcd9d8cb9dfdc5cf2619d8170248b62058acacb603eb
SSDEEP 768:/Afwj1KOVqvDdydVexd/Hk47kBsT9MQUXnDM:/AOKOYvUbCENI9VKDM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
Size 41KB
SHA256 65451d12c37acf751e9f4732e9f9f217149b41eebad5b9028eac8bd8d2d46d8f
MD5 4a686349993965721f090d158a10a6c4
SHA1 fb0f61ba49cfd7e213111690b7753baf3fcce583
SHA512 0dc571487fd798b62678378c2dd514fb439f6c131637d244c8c3dd48d5e84267d21fe633c5b20578e621d5e8fe2958c5e58bc18ebe2d4731b18669fec4031489
SSDEEP 768:prRKpEQmW643evwSMZAg1HeX+ithdSZ6e03m3t+FDEN0cjIQYbMSWJ:prRKyQoyevbmbRPKq2W3t+Far0QYYJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
Size 215KB
SHA256 747c584047f6a46912d5c5354b6186e04ea24cf61246a89c57077faf96679db6
MD5 7b49e7ed72d5c3ab75ea4aa12182314a
SHA1 1338fc8f099438e5465615ace45c245450f98c84
SHA512 6edf4594e2b850f3ede5a68738e6482dd6e9a5312bffa61b053312aa383df787641f6747ac91fa71bb80c51ed52a0c23cc911f063cd6e322d9a1210aea64e985
SSDEEP 3072:xnFoCqtH0TTVwLdezRM6vC53MTQlq6ot8ZGZlAwlTyo1t694+m4nOn5ZC6dhk6E:5F8OWLaM6W1lnogK2o1M4+moiPC6wh
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 70c7a713128448bb5daf36c294b650ee9806c91263a72526983818221525132b
MD5 1907df51bf38816ee457abf311823811
SHA1 9b6ab68fad4b546062f6abddcbb572d983d3f8cd
SHA512 ca286f1f80e6f8d25665b1b1380b23fadfb5d7994dc5dca424005f60f8b315120fdda2f0a0eadbe83f6a8fccff2161aff90ad354f3df1032b7aec3d396cbfef4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b2fbfa0f96b5d0782cf5a3605294c7cd5f3b60e1c315239c97dd44930ec8de1b
MD5 c5a500662ece5df7f4cfafc845f527fe
SHA1 b9e6b8e3b6ccde38d4bf2235a4fe42e919aae6c0
SHA512 850bbf7f721fdc2786b42cb4e870c58a9e3e7cc3f1fdd4fc7e5fd07cad59ac9d0a0c6a7672d4b3b92963c16a9a092797ca6f821e8b1c565ee17820ccad4ed5cd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 4eb22a4c851c320150c0594bfab9d9ac044bc9fef2c7cbeacdd0e105864c8bbf
MD5 e21e163953059e2f7e467b53696d07d6
SHA1 b3f56252e018a503125a9a97107672792dc73b69
SHA512 6c9bf16dfe840bad5e2720abc398e6adf7967460d6f37435884c2650fd083733050559932ee81b515265901a4f509cadaee2afe0ef75eb1ad5de60e7923c26dc
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 05ce294fd79d89c60576a8a041ff0f8415019ae5c7f92098391b322f83368b12
MD5 7c35bb5569a15d9af129a92b7be127b5
SHA1 13d7c32ea1ea8738fb4b4ae4d92a46e7c72dc7a1
SHA512 fdf156f11d9c5199a4857797dd6a42eee69d11206088baa791b4858db5ad1cb18787e9e762d01caddd71744e342c92aef18a64b3a414d5ad7940f481cc67a96f
SSDEEP 192:nDk+ZKh3WMkCcfme3/+Qd+98WOdI/l3pgTS5CbB1Veah:nDRZcW7f9DJIHTah
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d7b17ec8ed3b12be0eed24be85a5f95cef91ae2abd663c772907656c710f2410
MD5 244d5cfbca6affd3b01cb8ecaf56ec77
SHA1 ec3090e3f454428fd53e0ba65a7e5abff70e075c
SHA512 a4c320a2f7cc6f8507bcb66498a99e00cc9a3916e10e8dd2c1a0f5db3fb49479fc4a99a49ceee8f5de3afd6c53d7775412de161ed38366d2505e35ef24565db3
SSDEEP 192:nDkNZJh3WMMw7tgLOqjPjk4gVX/nqeOSEv0MBfreah:nDyZTWStC4k2ah
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 79b26d69e283f8db47dadeb0f71f432016fe37b78ae1fdba4e51aeda35c994d2
MD5 7717ea3a4eb690dc5b709e6ff566f1a2
SHA1 e9b1c446ea3b48a68b86c1b93e836538c67ca985
SHA512 d94dad1da86cd855965ba217bcb6e9488e32b6deff018cc35c90bc0aced550feb9de777a55211f6bf218c8718819d94fd8f337345bddc09b8a71c6a5e85dbc27
SSDEEP 96:nDkux1bGKSwpojDWMoiVmde+un1DYHIbTUgGTBd2/2Bj4unUWQyVea1VDkZ0AiEc:nDkuZGxh3WMOundYHkTUtBE/2BFreah
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 dcb1f25d3423ddcdeb628acea8a64b7d9d6e7cfd1625f9522280cf7019624b4a
MD5 cc06801856649c01ce5fdf2780fb318f
SHA1 61add1031b7a9c3f896ca433a3728ba630a2c214
SHA512 fd9d4bcd4391f37798781e87e24fab9be39cd042d831832fa862b17e1e35f50b6288bfe6964bc6f8a69adc8086f0fa1050f4c2c76e3b481d1860413e3a458677
SSDEEP 96:nDkix13aSwpvWMoiVmdeHBjsunUWQyV+VDCziEwb:nDkaJBGWMXBBro
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\017d8db1e4a4c65336af48e219b823a2fe9495d3\b2e175e4-203c-4ae0-8fc0-bf7de27c7a95\index-dir\the-real-index
Size 72B
SHA256 0aa1f6ceb3d567406925e151ef0b4df3b8cd874baad5aebab7990a52c613ba92
MD5 f50f4b062dd3d1dac8cf9915336aca1e
SHA1 0ec9b2b7d3b522fb3875c3cdea672f113b362975
SHA512 5069e9d98638b50be84391041a600b7d0c2250b30ab3a3130b1ca60d88068aa2d96146d610832da0f9b4ec6d042d361cdb713efef0a6462dc2bb2feca8ab36d0
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57f1e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\017d8db1e4a4c65336af48e219b823a2fe9495d3\b2e175e4-203c-4ae0-8fc0-bf7de27c7a95\index-dir\the-real-index~RFe57f1e2.TMP
Size 48B
SHA256 43cac62e1e0cd373afbdf637804deb61468750e80f64776bdde23d8d28531d17
MD5 1f7790d721d78627dec7a95e6bc0490c
SHA1 4564dffb06a25da3bdf879a327f95db359515508
SHA512 6140447340e7df7b92a9ce17df83028b0228800ec890d5739684cb5783e6ac6b6a9fca996a98b95f09a85e9a98c4d6ad0d0a963ef35a2ed1286c88508e3ec4bc
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\017d8db1e4a4c65336af48e219b823a2fe9495d3\index.txt
Size 82B
SHA256 4409964900e8ba2c348ab086e76240d517a5d6cf31b572556e9c2b8b5eb3cc27
MD5 55d32b50ec6d49f185656066f72d3352
SHA1 37723d94f539e18c906612591200a6599308c7a1
SHA512 dfded414c8274e7eb27b19a4b4919d032224e43c507d2d56aa2eae608fd292cf965aef47a1a6efd28f6e2fa16e45e9230030aae1ba6034e7e4a3c24e98ab020b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\017d8db1e4a4c65336af48e219b823a2fe9495d3\index.txt
Size 76B
SHA256 f07f112f3ee71e84a5043e4f06f07dcaafbfc033a01740febb120784e8cc1f87
MD5 649dbcbda4d643770ab2a50568bf044d
SHA1 c5a3c6bb1546bd21071b9843c9e23ee7eedbbb6d
SHA512 1a8206fef559cd9fd4c5929f6e7c7161921ffd92ebec17bd80edd2450ad1ea147c177d79783a2ff64f72d8008119e4dc92904425997641d9bc39663ac6e28a07
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 df34128e00a99891859af704fd240cc622b57e4929c149e605d23b6a1125d878
MD5 19585ca0ec12fd66c8928bfc0b4fa4e6
SHA1 7d2fe40ff074791908858bb4f4c41a2f61be4af6
SHA512 ce616f144f700ce239b259db36b885c5afe593bbd50f85dd616d08ad3695298fac2fe383868c6b4cf09afaa2f9af3981c683322683b5e1091dc9f58e1c22ff34
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57f0d8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f0d8.TMP
Size 48B
SHA256 b4beffc86f0eadfc4aef2ab96e0f137ec89cadf87d43f44cb7e1b014164a425c
MD5 5617cad8dd07f46d3ee1c76d99b7b01d
SHA1 c7fc49de2d7ab1d2c6f46e600daef0d81a75b1a7
SHA512 2c9382fa4e79e4aa9253735cda618b37539dcb21c21b0f648ea3c2718546e45a6db8eb26d5a2d49e595bdc91357f176c3ff98ee6c126c260e05ea340bd6c0df9
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 703B
SHA256 71b3ee19a54717ba47b17e3c4bf6c1ed7135a6f95f30ad980906812175ad520c
MD5 7788616bb7a7da3dbc5b6cbfe006cd55
SHA1 7a624996a3bbe5d8ea7ed4d401c05ac373a98d0a
SHA512 9396e8e2618870ee7536e2efb6d47f7d1ac204f713062c79faab86ffec3b9528d51da0df0f092def85cc8c2e4103b6676af4a5b89d57301462fb61079f06b05b
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 703B
SHA256 0ed1773ff7a8f7e0c16ee3323e475ab9a57ac8f53db1d54728060455300858e8
MD5 a9c75e5d54bb181fcf8453147aecce31
SHA1 d84e6758c0dea7b987134869a7b338f33a8168a3
SHA512 a7ac5c7bb8215613251e37e49ad906168c776e35cf0a2459cefd6abb503291e4beb6d8fa87e73511f023b5a4e32e4797a96475c82712949e0ccf026bae61e73b
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57fb96.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fb96.TMP
Size 371B
SHA256 ae386dceaca1ea42f7cc3f1e146a7f076e63960069bc6019b2e8bf56b90e5c42
MD5 c3e25a3b2c8ad2ef8df53280de9df6a4
SHA1 c3e7ae8dbf7a8074742d97e0a7d1fa98f962fa36
SHA512 da4c40c50393754a38f21f5fb65e348d8daab1d88a402025f8857258a587bf0107b15df722c881627fd996e53887ea4e690b017cd94bae5945c5084d0f242311
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 f93ccb4abd31e38a188e9ffe4cf7fa2927451841834c81c95f6897ddb04cf8d9
MD5 6bbebeafd1260229de5a85c689c4521b
SHA1 4372ce39ec598f17e3073b48c00dc61f7ae95b44
SHA512 2be2e3bd2458417b9399451e72db56ce720dafa75985c56dae19b541a32bbaf0483207be470644c026142700fc2864c561277cd25854f4ccf47b15922563d985
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupJe2RULchm+vYVkZu:A9iIxuERzA83h09RZxYdxmFGu
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download