hxxps://profinetuniversity[.]com/naming-addressing/profinet-dcp/

Analysis

max time kernel
169s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 11:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://profinetuniversity.com/naming-addressing/profinet-dcp/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
4564	msedge.exe
4564	msedge.exe
2640	identity_helper.exe
2640	identity_helper.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4564 wrote to memory of 708	4564	msedge.exe	84
PID 4564 wrote to memory of 708	4564	msedge.exe	84
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 4456	4564	msedge.exe	85
PID 4564 wrote to memory of 2652	4564	msedge.exe	86
PID 4564 wrote to memory of 2652	4564	msedge.exe	86
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88
PID 4564 wrote to memory of 1856	4564	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://profinetuniversity.com/naming-addressing/profinet-dcp/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8d8646f8,0x7ffe8d864708,0x7ffe8d864718
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,11774134165324039717,6019084732952701278,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36bb45cb1262fcfcab1e3e7960784eaa

SHA1
ab0e15841b027632c9e1b0a47d3dec42162fc637

SHA256
7c6b0de6f9b4c3ca1f5d6af23c3380f849825af00b58420b76c72b62cfae44ae

SHA512
02c54c919f8cf3fc28f5f965fe1755955636d7d89b5f0504a02fcd9d94de8c50e046c7c2d6cf349fabde03b0fbbcc61df6e9968f2af237106bf7edd697e07456

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1e3dc6a82a2cb341f7c9feeaf53f466f

SHA1
915decb72e1f86e14114f14ac9bfd9ba198fdfce

SHA256
a56135007f4dadf6606bc237cb75ff5ff77326ba093dff30d6881ce9a04a114c

SHA512
0a5223e8cecce77613b1c02535c79b3795e5ad89fc0a934e9795e488712e02b527413109ad1f94bbd4eb35dd07b86dd6e9f4b57d4d7c8a0a57ec3f7f76c7890a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
d04c69a90b882e2663bb918d0e125724

SHA1
f6ac3a1c2bc2a4e430403f76f48fe88e30f6989f

SHA256
f5aedbc132a27e76cdecf3a70b8b31a145fbae49c2d1852cdc626372a63ef0d5

SHA512
ae6626325b163d2045bd4b4c8d5d6bc0abfe634abf6dfb6d59c49ca6e78f3d59a3fff77e3ebc7c7a43be2a88f99dec9db15edb219947c0957926746a63ffbb75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2721a41b1dee8d1f80c6b5dcb410d9fb

SHA1
850f4f4ad368584780b3c9f3abcdb23d48a33aa3

SHA256
ae2d11c6b4d8c1394a672185a742fcee308283b02d57340d199b27143ecb80be

SHA512
28d096c6375241f303705f04422dd89575626eb098defe961ae8c39e3e5e47e1cc0760633369f597f04b7181b82627ac73331a37adb555841861426547206716

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
41e165d745736ba155d187489f2aa599

SHA1
f5b47eee9943b1102075bd95dbf2d271c9e562ab

SHA256
f73ae018b16dbf3a17e0bfb8080fec8f131bcfcc79fd4c59e4f82df0b5600661

SHA512
a3c7078a038b8cd49952d83a5214fb5e4cbb06cca99e34b4c24b0df0cc48038e4f2141db35bb2a377f0593af6c2cd26c15b3dd48703f97e0282e49f1338971e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bf7d223c2f18bb3260098661df661cb7

SHA1
157673f20384e3e1423ef7a73f29c837873b7c96

SHA256
1c17f9c7f5f6afd2ee43e56cea3ea5a8ea07cc596e5471e0989b662cd4692792

SHA512
4ea5eeae2e23acfe986f85e4f14b6f1b2abd16f2281dbd12357034eb1e2e9d1dc158c171e7eae2eab33ac319185201eafd4e2bf266d3a3349ddb4f3f97e705fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
23ba30642d13f2fbe63139d52369c272

SHA1
aac5e3ccb190923683f24eb16232626f3552029f

SHA256
ba31a023dc75fa2c590e82b9a9fba1de2bfbc5e48481acfd66adf198fb9139a0

SHA512
0fce53d87ee341cfbef9269bfa0504ae97204e3a4f1e943fd81814ce2ca62f68b3735c153fd1bee0bdea99a84c1690f6b2a5f4f0ba29595ebed861a16d758e61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
625864d9dd9ea60347d5034b424e2156

SHA1
e3e88da9b6f9f822ddd66c6866c50178cc789c33

SHA256
eff3f8afabce30add74882b5f2eb9502d7a07a500810dca77f71bf4b6745240f

SHA512
29b3c174e5a20826e13a45396a340bbb5fb7081b47a877e322d3764bb3aa85e2803c24581be50a33d06f57484c60a681b02517288de5e65d1371f0750f910c3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2b726f17c3b0e701a717d390f8bb6884

SHA1
842800734a8011af4714c17a267a1fe25eacf147

SHA256
4037759114e418d26a700036961292e629137be0a030257b1151ed7f9149a238

SHA512
29610491b4e36883a0362ff88d04b6170fa9b66e8b2d42c129f2a9fde2ccdc0e0585fc72055192760c681191e5b831e641e845a7d26fbec1c1d8e02e26c18589

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58dd0d.TMP

Filesize
872B

MD5
1de49dfb252d420edacfbd6abd133917

SHA1
b1d13ca58598783af023d019a1a19fd6c6ce0b79

SHA256
d10e45a57fb8696468c25a3000f8b70b9003aa1ac99a108012cc5fc38f358ab7

SHA512
ed87ec1254e6b2cada95a208916e1fe0a4e08326fe01a71e103902429f2f61ec66bd94101243ee0000256cdaa3c09e185cbfeee87636f811c20aaef2217fcde6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c5242b33e0e6bcc34a6a080b272b0817

SHA1
ed0a6d7e2293bf2afc91d519bfc4f6007de82bf0

SHA256
81d2fe3133bca748cf2455849c60c5bfff82620c687c01356c3e067ced059049

SHA512
ee83b17bcce6fbc36689fea98cbb557acb60f4c1f20ef30a629a1c119916b4ee1d9a462859ec42ddfb9a25e05435bdc09ef5f516e46e2a95a674a5d11631e4c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
05ba0655e9d87466dbcddc6e2264e0c1

SHA1
78cf8abb655b630a01a0edc56f3966240191a88d

SHA256
365dbd3640e2cc999583c4041482f300abf984e198cf1d2830d5cb9d33898c5a

SHA512
4e6aa01348705003299c087007b640acddbc391ac836963d22403090c39db3211acbe511b7237fbcc495c7bf0a2a6fadab2a326dc16ec54bb46b18811aae782b

Download Submit