hxxps://drive[.]google[.]com/file/d/1Pv2Zha8XAO3kheToD4RMn1vc-X2GqLrD/view

Analysis

max time kernel
119s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 19:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1Pv2Zha8XAO3kheToD4RMn1vc-X2GqLrD/view

Score

10^/10

microsoft discovery phishing product:outlook

Malware Config

Signatures

Detected microsoft outlook phishing page
phishing microsoft product:outlook

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
8	drive.google.com
12	drive.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Suspicious behavior: EnumeratesProcesses 17 IoCs

pid	Process
2756	msedge.exe
2756	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
3624	identity_helper.exe
3624	identity_helper.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe
2892	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2892	2088	msedge.exe	84
PID 2088 wrote to memory of 2892	2088	msedge.exe	84
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2380	2088	msedge.exe	85
PID 2088 wrote to memory of 2756	2088	msedge.exe	86
PID 2088 wrote to memory of 2756	2088	msedge.exe	86
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87
PID 2088 wrote to memory of 1608	2088	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://drive.google.com/file/d/1Pv2Zha8XAO3kheToD4RMn1vc-X2GqLrD/view
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe11e546f8,0x7ffe11e54708,0x7ffe11e54718
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2420 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,6693504125258148294,15440872764293555792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2080 /prefetch:1
  2⤵
  PID:4868

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\0d8f8fe3-8c3e-46a2-9ae9-9089386fdd4a.dmp

Filesize
6.8MB

MD5
e2f3fa6c7f88a90b1398714bbda6f610

SHA1
639c593530f33b2afee2fb10e653474fea4eacbe

SHA256
9f6f79a7cc0bee981df426efd42a5e95ecab4f643fdaa453587fdd672f171725

SHA512
4465f4cd2f9d9b887c9b0393760416e0412f0b15feccdceab28938483103151bef38a2bc3596ad56aff41c13293b752a81dfaa238103e53772a1dd9c58548491

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
99afa4934d1e3c56bbce114b356e8a99

SHA1
3f0e7a1a28d9d9c06b6663df5d83a65c84d52581

SHA256
08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8

SHA512
76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
443a627d539ca4eab732bad0cbe7332b

SHA1
86b18b906a1acd2a22f4b2c78ac3564c394a9569

SHA256
1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9

SHA512
923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
7363b1ba91f4b2dc4cb2e9fa4056af7f

SHA1
ba2d2c04fed7d24a0de4212d7231b21b56ddb07f

SHA256
3e2da53d95944ea51ec07eca3e881b0bb6f7a91e42730b914e6ba417c27c0696

SHA512
93e8c15cbd117ff16dfe4042bc77aa6406067fc2296aa9b34af65813b743cb607635b043569fece48859cff87515bb0d80089e004c7e67eb663510177d5dc691

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6369f41d480ea930c0537dcd0b594b8c

SHA1
5fc5c52717404b27cf046f0ae9bbdb84feb3312a

SHA256
f5a3b0927f1165254179d617993096b879b045a6da0dec0ebb8933829f0a0085

SHA512
0b0a253da232d51c8613ed090dc02c05f3cdc0f096adb51b78d89b56388d56fd1d6fdb6a84d467b39bd2cd14377aa6074aeb7f9539227a474d13fc69cfb51d56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8605e1abd35a9d46678069de3d6d4196

SHA1
5eeeeb5f8833084243094340c342032d70a79d53

SHA256
7302e3434cc3b1ad4ac7a70db9bfca14ca516bd835fc8c29fbe42404b13619d2

SHA512
899c6b7437f0e7ac942a1d26f9787a9c3c79097e8cc4869f121c6e1e25ac8985c477e52ed97413d872f403db427b16d5cc47b20460d2ed4de783696988fd4857

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b9d81fc9e178ad94d6ecfd2fea110ecc

SHA1
0403c3e71022f4925c0b3bef827371d27d30ddeb

SHA256
b94213e4a804337ad5a04e893e628445432e403550f988fae11d284262437c46

SHA512
4c28a3ab41cacb953314237f72a96d233a77d7ed4082b31c0fcbc592cfe43002227a223ec3ac5cdb362580923ddb022183f0759e02a9e46bed8611bfdb8125fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
334d2458d0ac994178b0d2b08138ad2e

SHA1
77a3357e042b5421d71e8c52e72acac53f4ec078

SHA256
ad6ecb3dd963dd3dd83ecc325106ee7e9718ed2e1aa4659d790742f24cc28e35

SHA512
1dff7f41867600b5ea132a1925cb31d042bae6650f3a5b0407201774f60d6f851c6a973772fa9b27667597029557913f7f59ebf7733ed5bc07da27444a184200

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
791de6f07bb87bb01a6cf7c5395e1e7d

SHA1
d6d17b214a6bc699b7ee8211ac740aac30e74359

SHA256
963c7a3dfb616fb74ed2a513d5c174ce049e049a239592e5525eeff78a6212b0

SHA512
ca1de07b6f60b36df0ac0f7fc0834446d2b68a1116bfe637296a49edb46df4628fa095556a97343d1f2bfc5475a010cc2b217d8de3e03854a4480b13373efd9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\0b366ccf-132f-4bc1-a9e7-86ea0f0c7bf6\index-dir\the-real-index

Filesize
2KB

MD5
3b56e35ac3b2e9f4285c26a51d4a4ab4

SHA1
6d3418e00598f3591493e213c293a01957cbea5c

SHA256
e4d1f8544b776f7b4dd2bcb0c0038de0e4001fe3e60a5505393c4f2118dbaa40

SHA512
bf52752b139a5f2b9c6fe81823e5146d6800a732b086cf1ec3f5a5324a4839b30339e00e8107456f568027937b05e43df3197fee56700bdb9d042c5b6bd603f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\0b366ccf-132f-4bc1-a9e7-86ea0f0c7bf6\index-dir\the-real-index~RFe588d08.TMP

Filesize
48B

MD5
ffe580949c553999461a37b94702a002

SHA1
f61af0edfc5c9cdd6b89c281f1422e08e1b469ea

SHA256
fc3718edffbc06ca2b56ef7eb6a844c4ba733489b18b27b26f1ae8d24cf68fcf

SHA512
d5707b5c792aa2b2811fcbeb456b4d0aa46eb863c4a2a1a334f3b096fc3b93da60b089e05c9d143714ee5acd94ab51cf014cb815a03521630a39ed122f1ba281

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt

Filesize
228B

MD5
74b233dc3d802070b9b84f8eb6e5a8b7

SHA1
731f82725d7438b0f50491dbde2d4231d87ff176

SHA256
c2c1d068e4756b1f810090cd8c8b0a1888fbbd2bee05d2aace967ad30ad617e3

SHA512
dc071ade42dc96210df7b5123ea5f4d6b7e20623476451987369dba71cca8ab03130a206323a9b5ff5dc8fa77d974d1e38b064ec155605aaa42b01382619768d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt

Filesize
231B

MD5
fc40960168f3f8b20dc179a250978df2

SHA1
bb3314ba7eade9e224a7b98d6583109216c2c9bb

SHA256
79dd57f65f4b7f63d7b33d97462b1573e9f3d0963700225696dc08a9e3d15ccc

SHA512
e9ff651fb7f00569c717efb2f1c77c366d750df52a69344f7068ded8227b07f84f52cf208f3c92ff1e719a446c543d371caf506a31733e9941ceb90bcb781d00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt~RFe5879bf.TMP

Filesize
235B

MD5
58651df61ed9ca8180702ef53f02d4bd

SHA1
495b883a0e2c4a94d8e3fb8ba6a6083f116577d1

SHA256
5c2be2fcd5c8ef6f5845151d8dd54b0e70563c00d3c3213834518dc9f54139a1

SHA512
62dea8e818c9d6a6742d77817f84ed280fc8a801fd50168f29c9e0320afb243a054218bf90b97c988ee340926b2778f3d48f437c26a339947d1f4d8e3a96fdde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
240B

MD5
654c6a4123d8dad4a465a6fc65aa062f

SHA1
dcc76c04bcd39029a111beba4440ddd0c82a6b6e

SHA256
bcb8d0bfa01da101c505e70069e2015b1ef85e8ceafcd7ceb19962afedb332d1

SHA512
f9d1cb20339826afe5eb1fc8e71bda2d437f58c23fc85a6ccf4e0e016b55c2b6b600417735b5aa58d8317296cbf90b444215e916d024720f4b150a2ae3b99590

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587980.TMP

Filesize
48B

MD5
e54037b661a31ac93af184cdd6afc830

SHA1
dda13c804fffdf7cfb5a16cf3c065b10db800e3b

SHA256
79fbe68a7e6369c7056547837a4303603e3c9eb6155ec6c7b4fda32b4601070f

SHA512
72c8fa7e26def2d211a51a548e30038965b1f76091510fb85b71aec43c069cf5c3728f96d548a5423dab06e2f9abccec3f172a463cb7f02687229c8ef2a6dd7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d51ce1b670852eae0eddac98dd992e84

SHA1
725319285b7d3c8624a9071c2426cd2b8679dc80

SHA256
4006840b799fde17b9da97a9b19ee524a38d246bf0de2565c7bcce262bbceb55

SHA512
101091dcb0de463ab2a9bc0d8b2a4165938a47b8d887278836efecfae660c8c6a300710dfe2ce81182e5b8811948a24b30a38cc41db6a88b28e4714c088c2969

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
79b5887079774e73fe70b0759d78312d

SHA1
1ba6406a3ed418335fa192d20b6c817486ff48a0

SHA256
c613acf5e298ba29ed1397ec9d85746c7fdb52bb6797a458f3a80d28aaa6b288

SHA512
40e6a5dac097decb8a21dcda395468674d271715bc54e91f7a794316597e43a04f2f5bb8915d800e7613107b273c3e2218e8f4ebd9e4eec73b4365db9d6ed94e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6f7939abb51cde3e71259e7c79520d75

SHA1
defbbd804e186521a87aea87508567d4f92fc9e2

SHA256
16255e3353c2d4a64d633c939532459449554fb80ee88f8c17c0f16ace164b1c

SHA512
56ac7d490788ffb69eed9866d358b571636412d68a7a0142d0c711f49ecb6d58587edd85398eb0385f23da61bfbbfce2c8c5718fff71167b9c157f3fc6fd06aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ec408acb75229e410b616f9f58dc09f5

SHA1
7b8546900a21a02490a61af0ec66b3bb01d06846

SHA256
0b56b1089e79f0f98ff33027453fbba3b31aa7ae08887ea80ab60da93ee4dc68

SHA512
96f33fa65fb4336b77447201778d9511536c150f6fadf9b48fb0f710ff491a6586a790c574b351da4be6139905a837b286927d7c04c446c556cf0e4cb8a59487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582b70.TMP

Filesize
204B

MD5
b1f3829369d0cf8c168cb62bcec520f1

SHA1
1a4886cdf6bfc60bde33f9e9f8dda54ef52ca279

SHA256
99654a2b2a7135864c92bc65abeef5273e752c302c1df8271a30354564d0b57e

SHA512
f21c1103c6d86c6ef4187c5980fe2d418353186aa03fdfadfeca7244d9a5d1cf41f5ffe68b1163fab6240572367545776845946b1cde34abf49086041e6c24a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
16218f503b6a81cf863fad7dba3a8fcf

SHA1
026301c1c14b6c09acc65fa1fefb61b6890b5700

SHA256
14b731ea92007fec95aa02552e6505ca8f77367e0b6dfe0cfae368e598ef7d98

SHA512
07de659e073f4f2e1f5045b0e236a4909205a20c6262e23f93fca4664393b8b856c4f1ba37e710af7c744a82fd64bb68b4f9e81b93750afec2ee2c8715342218

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
cc8dcddf4b1395da004f5965483978eb

SHA1
6884affea0c380f640933d443d796589fdb4fa57

SHA256
15d8e5bdad28e8124e00ee9e7556c1eb7113e1c9eca39f99496d8289e3283b89

SHA512
018fc85d2a16d491772d5fc8211db843a9852e550e5c9067f1cd30cf4ff7fd96dc0b569dd17ab3f518eeae42f7de66b31aa3f661f7e42cb59d089a80355e9cb3

Download Submit