hxxps://drive[.]google[.]com/file/d/1mp9kmy69VHIL6Z_w80hn8okMB928PGKr/view?usp=sharing

Analysis

max time kernel
253s
max time network
275s
platform
windows10-2004_x64
resource
win10v2004-20250207-en
resource tags

arch:x64arch:x86image:win10v2004-20250207-enlocale:en-usos:windows10-2004-x64system
submitted
07-02-2025 15:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1mp9kmy69VHIL6Z_w80hn8okMB928PGKr/view?usp=sharing

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
2	drive.google.com
5	drive.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3944	msedge.exe
3944	msedge.exe
4540	msedge.exe
4540	msedge.exe
4564	identity_helper.exe
4564	identity_helper.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe
3444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 4580	4540	msedge.exe	79
PID 4540 wrote to memory of 4580	4540	msedge.exe	79
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 1480	4540	msedge.exe	80
PID 4540 wrote to memory of 3944	4540	msedge.exe	81
PID 4540 wrote to memory of 3944	4540	msedge.exe	81
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82
PID 4540 wrote to memory of 4612	4540	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://drive.google.com/file/d/1mp9kmy69VHIL6Z_w80hn8okMB928PGKr/view?usp=sharing
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc7fa846f8,0x7ffc7fa84708,0x7ffc7fa84718
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,11885557699895291780,16875716183167083646,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3444

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
aa50e46aef7f210bf65d44c570031714

SHA1
41993bb24a2c4cffdb5ea9bd4eeb825bf6b6fa79

SHA256
857a7702a47be49f185619891e5c74e34b4bb2515279033f3b5a0a9be2da839d

SHA512
dd5a1e88b2000957e3ddf057329a24dbbfc5408857cd1432799f20c21b967b627627bf1a3caa23e9698bb8133b7033d925487bcf46d864186a707176f8969029

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fc7e2abfae997eac3dd58ba7132b3a2a

SHA1
ed7e80b26252b600acc6d89b985f4235b0fb03fb

SHA256
be084d16cf52949ceb38b98ebc8761cd5bf1a6ac9e8c247efc12bb669f5f023a

SHA512
a504e52646c4be5ee0f0d979b0d7a539228ab638394c658d1a88eff86f6db4091146b176484388afa6967a296af7ea97b4d2678577ea85f83d721ef2fe63f928

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44dd1eb7-7070-46f0-bb59-6b65fe57daf5.tmp

Filesize
6KB

MD5
06a77597cf80d496d5f91651d5b82172

SHA1
ace5bda357ddc2e0c9a50d6b4fadf534f00959a8

SHA256
1dd75e7822f37ffe6c807f074d13ffe7f42f08fea427931b3daa0b8872a6d709

SHA512
4566f2ba54a9c6ca364ca96749fcd416781f87986d1776938102c73e059256b75bca82833c505e243bf62450f6c732750d15cd66766aad14331de50562e02e0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
36665fc70a9d26ccb48f3a3e712915a7

SHA1
a98b04776d31c3caf9ffb814d981ca2fd78bb596

SHA256
44d079252d01b63ccb71f468cb0ca54e25a2b409518883df641ea56cd0e339a1

SHA512
6e0becebc0228f28a98eed899a255241088eda155271691b872a6c8c1903479ac2bbae75038b976d03a30c42d334dfa6c8616170e8a141ce9436d0678823e503

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
236c924625dd6a4682e8c15f32020f3a

SHA1
84c476a06ce27b79bf86f87fc048b9e73625ed05

SHA256
9762d4553122f1a5e1cd06a53cf24fcd50ecb1bcc10f25444478872376ea9ffb

SHA512
353f59afdc18d64d0ca37f928469dc3dc5e9a45a558ff553a33ca94615b24db1f9635d4a3a6006879f512962575c2012c1b492dfded07ff8103a4fa3ac0697d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
bcdff795cc49b43fea431cc8dd8a3251

SHA1
15117e7ba8617515b6138ed7b95787f848030c79

SHA256
0f296fbfe28306e8636f9ddb9e922db1c1ecda12caa344c16d1b118437c72ede

SHA512
f6aa5f333abdc1d888cb270a88da3e01ce6bcdb338ddab8e561ebb98fc7dbe8ba489df6eedfe3ad4bae7bf05cd2b1269fd6699d34b0043482a1e03e404dfe8bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
711a42507162534dea3d3a288ccb1540

SHA1
42d0b7c8635f5553ad003e8b1587f0cc9581116c

SHA256
ebbf59517647e3f1b16e90b14fb631d5570e4c6cd75547e428afbde0e1b710c7

SHA512
1427d7a742cd9796b6b61e34c95906349040661fd03832a60590701e5b06b36801651ed92896bec2a9ab99ad4887744636b60aae7c58b3679d44a730f18bee1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1fd42f9a4406d91c448e4fc289542286

SHA1
42fe54138c1de0d1b246621781d0e2c7a27b5dec

SHA256
7e7949f3e35735f8885d79e425e1d07f85366ecabd5c948c8208f2a4822a1d7a

SHA512
bfa93a07971a90294f10383f185011635ed8cc2aa86ed4158609ff31932b34df4054e02fd1d2a4e7cdec07b3739920c0d36c80c483b2c84b7dc73004d8939fd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d098a626ca2dfb68aa120ec12a04299a

SHA1
eae57c6d0d839a66d23c609afbb8bdae8b1e11c3

SHA256
124df33063b81c63c274a0e072f2597f3e956879ba6935d71b9df204e4b2edff

SHA512
56e6e1feb35ec5358b885624a49b495c73e339d575ae452f92276af795c1be95a732ba4908ad12374b9aa40e9ee15be7ec8d28ccfdcf100e2e6fcb7064c03632

Download Submit