04aca2d37e6f6ffd37723bdff9481b531048ce750636ce79998cf5c89cf36cee

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2024, 01:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b1a740cd999fdb4fe358211f583f2b3c_JaffaCakes118.html
Size

28KB
MD5

b1a740cd999fdb4fe358211f583f2b3c
SHA1

edaccbc5f7b96ae24a0e8cd76192bbec9f2d00c3
SHA256

04aca2d37e6f6ffd37723bdff9481b531048ce750636ce79998cf5c89cf36cee
SHA512

04f083e8202b07f2b7443743675258410f81cdab57d17d3819dc07d84df6e5f2a4f55db1a10ca2464f6163ca05b540c10964c5363ff75e3263181579991ebe00
SSDEEP

768:hdkR/+1hg2ica2W7tojt4d62qYxkIYvz3PAhIi:hQ+1hqca2aVdPqY07AhIi

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3352	msedge.exe
3352	msedge.exe
3444	msedge.exe
3444	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3444 wrote to memory of 5036	3444	msedge.exe	84
PID 3444 wrote to memory of 5036	3444	msedge.exe	84
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 2408	3444	msedge.exe	85
PID 3444 wrote to memory of 3352	3444	msedge.exe	86
PID 3444 wrote to memory of 3352	3444	msedge.exe	86
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87
PID 3444 wrote to memory of 4780	3444	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b1a740cd999fdb4fe358211f583f2b3c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe72da46f8,0x7ffe72da4708,0x7ffe72da4718
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2267898984302679334,12572519367109234615,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3136 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3304

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
1c7fb2f32b0d081bc77313d7ba4cbb1b

SHA1
0c0abb20e3468c5186c377e626ac4cb53af626e8

SHA256
69096974d4642b4a1b8cf3c9fcdfc98c1b763659f41917a18ab8080a4f67dc06

SHA512
ead0013ea3df6933b15fc627bdb9f4f12290b55dc9af0cc46c9f327174335d5cc6f9c0b036f47bbbfec9dd4ef88a33aff1e99d5f464ed40be4aa394419132406

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
779B

MD5
b1b21b55def48d1e7b7b3f92ae77d4e1

SHA1
6f24faa7b924bfe4cb5bf2c1e6f635b13c03e45a

SHA256
99cf2a7a8394bfc455de60247ad868f207779afcf01e270a56b77dea465e3d04

SHA512
ae2800e8954546bd78b6b8e8735f0503b04268feb959d694b92487b642482c9d6135309ce11e6e0ff69856c5b1d6d2b4da6d6af090f2bdd8130e4ec46b5515e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c897c41155e23965063906bd4663eccd

SHA1
f28bfdea21fd94f7bcec77fdd153e459c5726d15

SHA256
2ffde47e54d500578078fcd8667314142f36beab2a4adbff26192bca0b4d23b4

SHA512
701c3ac3934ca92cd5f26e681f192503f6a7dbac5e04aa174bc54cffe12b9fda2b0245a52a813834761b9d95bec2f039eb0c62cdd89d3ea71959306f5996b531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5eb472260f5848989e01e0054cbd8b42

SHA1
7b91ee9a0b94743694ba9d03f9fe4439befe56e6

SHA256
65c761acdbb601feb5eda661a82b0002647e9392bdaf34fa81b6813cb6ba66eb

SHA512
09d9e2ce124537c060a736b06999d5989b76009378eaa7eb148870820224ba9cde73e00a30d9fe686e318ea227b5b49c3b25f0ae86b39e15b2b5456a0ece9289

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2954bc6a0e08187435258610e05a09784d24c3f7\index.txt

Filesize
104B

MD5
bad0a04b948acd03039c658839d9c95a

SHA1
591e0202cdda6a92d3c19f8214dadbed522f733d

SHA256
634f96287ca3b4ae640a450b5940a6ee91ea2da153f1fa93ceaa1ac2592a98fc

SHA512
86ea4a967c7c68198c2975034238537a327222cbf83c4eb3cc3f80a529886c73e75493bda837e0a448b9cb444588ddfb110e9ffcd611c79213a2919446c98996

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2954bc6a0e08187435258610e05a09784d24c3f7\index.txt

Filesize
97B

MD5
82a17e3a3fdf46746fd6f6a6a9f9285c

SHA1
2643e21ff882b09fd5187188dcf80c932aacc746

SHA256
34f483fbf4aa31928711fd74674ddd653232cdb9928b95b1296709747c7a890c

SHA512
ac260afd647f022d258afc2c13b57f9d7e696899ec925ca7d3129fb705ce7084322307db1d3b3a7d8c50dae1090703c206100c9d8917b9b6b2f2a35d484cb745

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
02de202dd64d46bd6f015fd947a77084

SHA1
d445646dce56940a7fbd044250d7d8b0223a428c

SHA256
b0181c6393bcf683465aa0d2ab977da25f8e31da01d0294337275f8840118569

SHA512
f6feedde56623a0ae459b01fc74640925333557ebd2acff29968de25904a13e3c4b52c24ac8c80adc1c70549e9eba7e114730e5e52ec5e78801ff8f27095810d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f54d.TMP

Filesize
48B

MD5
e722e70f9e71bed9a9efd4f8f9d993e0

SHA1
0a93911aa7cd9375f143ae9aeb6c8b30e8525ebc

SHA256
6ec6d86d2de775691b635f40f2c85bbfc5451c7a91654dbcf64074f4a15e9c6a

SHA512
788e8e15034a28367211ce5788f663d862c89f7352b111485ea31fe1b92e90ac0eba66391913830fc0635e9120c8cbe2374fe849f44e25b9adccdb0acfc81d98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a46960aff53193c273447c0fa48b2e21

SHA1
c2468ef8a40dfc32f38d5edcdc919d8e9a0c1201

SHA256
5fa541ec3a466ee7c394bd316f3d3790cd4cfc95a9d2a6d4a756a99fffbeebdc

SHA512
71e30c132fcce208ec544d29ac3bd8cf4876216c6c5c98ece55daf9478230372335730d0badbb8df7c6d3f5268fb3c40cec5fcb4d65ab848bee779139558e859

Download Submit