hxxps://drive[.]google[.]com/file/d/1O27lxXSxDiv0hLKIwyZJd5aXXyFLam7Y/view?usp=sharing

Analysis

max time kernel
148s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
06-07-2024 14:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1O27lxXSxDiv0hLKIwyZJd5aXXyFLam7Y/view?usp=sharing

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
5	drive.google.com
7	drive.google.com
8	drive.google.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4692	msedge.exe
4692	msedge.exe
1148	msedge.exe
1148	msedge.exe
4644	identity_helper.exe
4644	identity_helper.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 884	1148	msedge.exe	82
PID 1148 wrote to memory of 884	1148	msedge.exe	82
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 2672	1148	msedge.exe	86
PID 1148 wrote to memory of 4692	1148	msedge.exe	87
PID 1148 wrote to memory of 4692	1148	msedge.exe	87
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88
PID 1148 wrote to memory of 2092	1148	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/file/d/1O27lxXSxDiv0hLKIwyZJd5aXXyFLam7Y/view?usp=sharing
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe611646f8,0x7ffe61164708,0x7ffe61164718
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,10846114069374325395,6024726314201057120,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3116 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3c78617ec8f88da19254f9ff03312175

SHA1
344e9fed9434d924d1c9f05351259cbc21e434d3

SHA256
3cb47fcdca33bb3c8f4acc98424140987235ad79815da4f0e7593e4591ae90ed

SHA512
5b58675088b0fc2b2d705cb648ea89385b80c7cf908b0f4f95a9acdbd350b50754e1b586202db6a918eef70029fafb210947f3c43c570ecf7657e08939fd7e9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
09c7ae658385f6de986103443217840b

SHA1
298d880503edce4413337c09d3525f27a2edcd28

SHA256
91e04ec38abdb0204458543592c4621b7bc0306407884f764aa9596a52454cd7

SHA512
4e1272b209487d1e9e7d8502be49ebce91c76718410e817b3ac7faf47d9b699210aab1b941fbb5ddafc192ddf4b2ba151afd47fab753ec62bc0bca36039c55c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
2e028f70c3c28e27e3eda613e9016159

SHA1
0d2007c26a16f2b8d4c0ea7116ea9c41500c721e

SHA256
3c5e826d4cd3ad42013b251587d3b47cff094a5375e4820f6de70323038a511d

SHA512
e1af92295229b240b9d5478bf5038cf4542344398447b2a79c32cbd69db997d20295249427f5d2db0e3642ba22dcc60bf5aeae63fbfffad3fb531f5fda292cbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
e53f1177d4ff395e13b890cef25b4dc4

SHA1
af5b1c4f9089b79b32776141109d8c5571aeaff9

SHA256
fc5c733ef751f89bb592d28e73a552412273733f496bc49d154383140a07ad54

SHA512
5c76516de5ed7f440f196fe4bc3461167197923f84238691e7a1e8952afb28595705720bcb92e17aa23faa418b13b9516be2367488c04b1db4ff0bb216c62e04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
3afe2e9310b94081c7f63b050a628410

SHA1
91cb1fcc3d31fe8e3843e0fb000c17093bd34c51

SHA256
0b36e3d81d59764b4bffcd3e87d22a2752f9cf1e185c6b8b659748f8310bc1e8

SHA512
8391949a4ba4093668d134ea721fbd349395da44af049be92f162520d8ef7dfecec8de5d00ce687ea8e4bd76d84b7f23a3ca442966af65663f85b50788dd8293

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
90999fcbd8e2b9a6043900f7baae18ab

SHA1
de1438995a655e65cc07555af2c8dcbf90946dbd

SHA256
bb1346417f0f31b1e11ec6862ea2c9d561d25f615b379a5dee572f778bde59d4

SHA512
ecc5fbe38bf521dbbcd84f1d0b233ca97c7f1ef4b7a344360d24081e8316a450dc929e453bc37f5944162cd45d57c26d2537303dc3bd58201dd0b92c3146d7c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2c32b01f4e15499255cf008114981f4f

SHA1
43faccfe7ad150ee6b35526f9342c5797d1e4343

SHA256
55414251c9633efd87ff47def7b1c0bc690fa24f307070209abd94c2a8ecd7dc

SHA512
28ed675fd15752a7443ca7b0ab302a67a96c07629c509bfe3bf99f459378c16131d670541f833d0ca12fe0ea07fa0280e7e40a98ad36a3a5ff2d5640e2073e4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d044042f3309505f195fac60974aa1a4

SHA1
0b3d6a49a0b2919a5ec44dbfe6131a591472d123

SHA256
510ed1f5a030d82aaffbff6f903559add19cd5cc16ec58e15fd95e756f61d3f3

SHA512
f96c65821f64c42b9163405086b658b72e22128245bdc7e8a6a10f55e6c3e0b582c1ccfa210528de2ff4bc25a7be0554723b7553df6dba771edcb8f42354542b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
99b60fa49ddd95e91d652fab6fed3c8c

SHA1
73aff9f42031bcbfa41aca9faec3fbb78c471385

SHA256
e8306e861fb012d8e85a89c8f85a543f9a3a1fdf5abee15c72a31ba4f7b66d06

SHA512
17e1012fba1ac7818d2777f33b59bcd1ee17c2e61fc7c8d23cfacef190aeb30cd19eadf71aa635efeeb2af6416816389d9625bf2bcb45293215be100c773c87e

Download Submit