hxxps://drive[.]google[.]com/file/d/10Idm0dpgasQxIYHnfXXNH7RHbymzjgxA/view?usp=classroom_web&authuser=0

Analysis

max time kernel
146s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2025 08:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/10Idm0dpgasQxIYHnfXXNH7RHbymzjgxA/view?usp=classroom_web&authuser=0

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
5	drive.google.com
8	drive.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
1288	msedge.exe
1288	msedge.exe
3440	identity_helper.exe
3440	identity_helper.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe
1288	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1288 wrote to memory of 4016	1288	msedge.exe	82
PID 1288 wrote to memory of 4016	1288	msedge.exe	82
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3668	1288	msedge.exe	83
PID 1288 wrote to memory of 3740	1288	msedge.exe	84
PID 1288 wrote to memory of 3740	1288	msedge.exe	84
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85
PID 1288 wrote to memory of 4844	1288	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://drive.google.com/file/d/10Idm0dpgasQxIYHnfXXNH7RHbymzjgxA/view?usp=classroom_web&authuser=0
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc8e1646f8,0x7ffc8e164708,0x7ffc8e164718
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2312 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,5734703068613884211,8574044638303800913,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4956 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
768B

MD5
8de78628dc421c0cb72504c4e62b9cb3

SHA1
384f4df9d6e3e71d4a093daafe00fc5bc9f7fd1b

SHA256
38f03eb16351b71fcd5f365f6dc6f3abbfa302a3ae3f3764efb01e9735a054aa

SHA512
45ed2192fcceb8809caab006e01f68b2c2168889e309ff3d5c97019e58e6ff09359ce0eca12f998d8155b27ff379ff85def804fccbe8213ae483204c37e8bc1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
696B

MD5
26074721ee5b89bc1b9bbd5ffd23c62c

SHA1
0c5fa7e2793c369279e7aa888a0ec91aa5485447

SHA256
d593650ad3c99c01eeeed886439cd93a0a16ffe68c29cafc76c3dc1544c3fe9a

SHA512
edea5651d3af92ca4398d60abddaef9d4309deddbf9e8a2df4a34872e734bb58ac11d3850a03763c5fa75c2e233d3ccdd40592765fde39c8de55c5a3e47c46a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0d168e86ac9a66ae1f89b15830e6f62b

SHA1
42a3f92f6066235423239f5a66470fdc745fbddb

SHA256
9a5f321d6b8baaa870261398f4c9aa790cf564cc4d9795459827ed9330900922

SHA512
8290b8105f027e7cfdc1e015217c4e2f40001e357a0d4a329b47c73a4dcef3ce3168484a54aa4181c6d68da703a004323df4e4012cc201c9ffa152eee4d0cf27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
7ebb4e030e485649605dc8a2a5c40b32

SHA1
58611e9f19b566e9565d93397587240d662c035d

SHA256
b960c67c8b5b34ad74927c831cbe5ace39bf21eea10ca601ec9f67918fd1c692

SHA512
90f67485bb8e7b61f682c4a18077c35c95fd4b1be64dcd2216e128f80a1007719df5ee93eef3340112aaf63982c01e537947ce62249cca306d2fc52b63271a22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5fc64c71e914ed85c044dd86cff15eab

SHA1
6fb9d8949a67226d93f1811e6af6e2420817e92a

SHA256
c15ee2985e2175ecdc8feeb461282c281f54cdc747be371c2fd2f33908cd06ab

SHA512
6583ab324d414c9b3647620ecfbeeed15ac156b16e1b01e20931435a3afb69061bb11dfc032377ea4a39b9c0c239adf13db3790f420f8f2a5ccddcaa5d260397

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
70e91be744089a88aedcef2ca4bfe06a

SHA1
b3e1fc2847a6263e1c33219e01d117b870ff1612

SHA256
f713dd712baf587357b279341480886bbc21cce0ff28c2c9d1201a8181cde553

SHA512
8cd2593fc0d95d0155b435dd5fa24ccd84598c0b9de6dfcfa80191d1334b21f2a591dd86165909f5331da3f6e012aba567f017423162adddbb96f2ebc2b0c3b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
926dd7f653309415dc9711017b52886e

SHA1
d694ba84194b7c73666efcf578c309fe80112435

SHA256
ce475bac29da3ad7d077720428f1206d0872f3396c4fc3ffa8ad85b2de1f0e27

SHA512
ea2bf27bdc25531f51e90de597b370d483a7df4113074f01c23a9c6837fc7b426b2a77333e12ef673dad75a40fd1bc82166be536699c379e9d748b57a2089aec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
5afc64bfd2c31b76619675ee4697304e

SHA1
584038dc8da3d1fb355946c12dbb1491af28cf55

SHA256
134232880086a0a1c696bb684d4337fa8227e0b03f1adf9804bb8be406e00775

SHA512
20fe8f01481ef387aeba3ef66559377c80fe70849886a0a18c93be9cfaf9a71bb5170d7102c7d02a124fe0e8fba543a9771a9ef1dc9e193f240386804e1f18ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
0a9d8cedacd36e425e1ea3e75ed8dcde

SHA1
386fc29b77212422ca70147dc243daea33850835

SHA256
f1ae63f4dc300365416fe421ea85d5a2c77aa485a5c761809e33f9788cf22b42

SHA512
d0df162a56a7c5df76d81d4fc795de04596ae89a256bb43a2d3b590b1c1b1839a4a4881b187ca3842fa12cac6e43796d7d5bfc203b837fe61e98a98352e54d61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
b14526ca7774201c29f63cb2d8489b07

SHA1
3464f46b1c62f836d6c89eac3f1a2100a2cb2be6

SHA256
7b8f077439ffe9ab6e5de598d29345f54de8fbd61c2ef1100d16cdd8ed52622c

SHA512
69d4403734563a7129f7c4782b98672a051f1cf6f6b8d4ea349b6d055c07e012d5f8c1ea5755c92c58521b4ca2485edbdebf79897c93c1fa66e7ea6a41b2a15f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
ddd918ea81dc79effefa0ffd75e1e173

SHA1
a05dec5f771de2d14c5c226c5b28d8a7997827cd

SHA256
e8cf88ca1119eb2d54449c14455106eb6604a9f8fccdf1167c3e3fc157dd637c

SHA512
9b3c58790a83e54addbb6a71e343feee447234e8b636b8cc74b1bb1e87a2cdec290671e8a2c259160d3dd8241cb32629f627ac09a05ebe5d7a008bbea82576e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
4c28ff96c3fff04e471bc61c34578e7b

SHA1
16847a646f063f29c88f9b3d5b1d99cfe39f51a9

SHA256
fa18c8a1d2352215febed475760d268dc2c6d5e25136047d2ba709268e7bd4ca

SHA512
64281244aef56ebd3036e40330d08250982e88fb8f8c9579bf03adff8221cd5bec6fd12a728782749afcef25296eb03ade2cd94b7042991bbd02135530ef123f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
201B

MD5
60c3f2aa924351db82004f99a59f3856

SHA1
c8732696fbeacaa3b907a88301f4cdfff5077747

SHA256
104311767f35d07eb6a3f871d28c860b07a73cfb7b552e8e6c34f2c5d6548db2

SHA512
5fc4852dcea765f323378c791abab8d9d0bc934449b1c3233253551d7b9513a1b1aed5b3f982b6676e500f842d70a42a6eb8c79bffa999017ebed8e8d5453a4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
a97f145db1a574a94a001b6efe4f1511

SHA1
bb73e2d1f8b93854482bff69d839561c35dba6a9

SHA256
b4e05d480fa3af1160c5dba2426e34bd3e4311fb6ff0fd441da2c5bd43201bff

SHA512
57a2f22f63dd97cc2011cd3c52018b983b61fe704ee630c972628cc842a9af019126000571fbfd7e4b89b64f16a625cc81e0fa9a580e274830411f557ea4e31b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
f0d64678121651b7a3bd5112104b2b54

SHA1
0c50ac80a4ec7682bebe576669ff29519c247ef0

SHA256
4cefd05908510ffac59327d1f57f17943791f89589fb02dfa1204ed4ee4c10e8

SHA512
e2d796e4a3d7590fc51880ec695fe96d1661ccb35d0848fe5bc23a71fa822ad26a3c523416cf7a0f3f63f024acf73e3d9b77acb1ea40ddefa72684ea5f628c22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
203B

MD5
e332beb4f0058e46315cbbb1c7b5eace

SHA1
63a9198bf65959bfe5c950debaf963d0bf0326ce

SHA256
b66aa9ad7f0b88b0a947e02b2c8e9547a9552b313af595effc7efe6433dffe31

SHA512
b4d4330203de580f111b8ebd269decbc6f6695447a29736a7fdd1a3979bcdb3d8100edc27c9e30476cee2bc96e4dfca570f4728ca3a7e06cd3b2657a324583d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d9b6.TMP

Filesize
203B

MD5
a0bc1e375fbb90d2f070c9ec31f1c149

SHA1
85e075ecb7d0d3f6fb499e8e907d86d837276124

SHA256
ba3f1b836ea300edcd10e42d1d3dac637f97a006d001f9bfb271416de8ac5e7d

SHA512
67558301e8a344326845ed4eb3210aa4c5f0ce04e97a1a71ee4ffe46fbd360097a4bb6fd8201da6e2fcbbea178ef5f0a3347e939567f9d3cb01b9f2c7df4fd80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
2a4df7886a958b71959f4563d9d4098f

SHA1
2df4af2fdbcc5240bafc3b5c39592234576f1444

SHA256
0ae804bc5534800055f44e4fc2920c73878ded27ad53e706a387e82a5c7ac361

SHA512
5b13fa022352e445bc43dbdba4bba06611897a5ef3788495657222e31255df41a8dacafa4d25e89b4dee0e5c630b1baca3068a208811dc8327d799727ab8edad

Download Submit