4ff61fcc438948a9d517cf557064daee8654afb616229dd08fcf912b39d71684

Analysis

max time kernel
1800s
max time network
1685s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
20/05/2024, 13:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

51KB
MD5

0d7062d04bbf60503256af62a3161302
SHA1

ec133106b1be53cc9dc4f2d4479fc3b331dfc865
SHA256

4ff61fcc438948a9d517cf557064daee8654afb616229dd08fcf912b39d71684
SHA512

5d3739094a845b4b9991cf150bfc5fcc80bf767d81cdb52fb9c858a063d31c66b5378a9f45eb864e877df61ef43b765d1e675bb2d1fc4dd9a8d23cee23623a04
SSDEEP

768:/QHSSpPNpm4YOGrWKkJbze65kX7nFeiIDNeMSkEeONSmyWZgXAnsOh5St:IHSSpPNpmkGZ/X7tbSmyWZgXjOHSt

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
6	discord.com
13	discord.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe
3360	msedge.exe
3360	msedge.exe
2768	msedge.exe
2768	msedge.exe
3692	identity_helper.exe
3692	identity_helper.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe
3360	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3360 wrote to memory of 3020	3360	msedge.exe	77
PID 3360 wrote to memory of 3020	3360	msedge.exe	77
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 2864	3360	msedge.exe	78
PID 3360 wrote to memory of 4156	3360	msedge.exe	79
PID 3360 wrote to memory of 4156	3360	msedge.exe	79
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80
PID 3360 wrote to memory of 4192	3360	msedge.exe	80

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe6db73cb8,0x7ffe6db73cc8,0x7ffe6db73cd8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1104 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,11935114527529384605,16387647513796472374,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4780 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
330B

MD5
f34dac2279e7070b92815a20037f2abb

SHA1
16b3286bda253e85437f02579e67d20eee1b9817

SHA256
85bec94fc7a30c05663743686fc607d13021e11b407b4341d9a11a3ca77778d9

SHA512
370e58ebb787f5093e7047cd5606abaa9a113f9a5fd2b111b938a7e010ae6d3188e67b9807b71c9ea48ea1f43557eb966efae3d9314e001a81b4a5bef746494c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
330B

MD5
ecc38721752bdad910cdcf7e0d270ffc

SHA1
7b8ab2f9d3d5bab6d3971d04ad886d13f6db52cb

SHA256
d86bde92e843c8165fddc3bc25917a64a68dcdfb85da0a6feb365d39acc4ebba

SHA512
ad537ad7370eb9b9e3b6453f7a6ccd06ac65bea9629b5f4808569f97c89ffd4dcce7e914901cf1ef2e145f1e00dbeb6a138be2c9c21e54e88fee4e7ed7010b14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9faad3e004614b187287bed750e56acc

SHA1
eeea3627a208df5a8cf627b0d39561167d272ac5

SHA256
64a60300c46447926ce44b48ce179d01eff3dba906b83b17e48db0c738ca38a9

SHA512
a7470fe359229c2932aa39417e1cd0dc47f351963cbb39f4026f3a2954e05e3238f3605e13c870c9fe24ae56a0d07e1a6943df0e891bdcd46fd9ae4b7a48ab90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7915c5c12c884cc2fa03af40f3d2e49d

SHA1
d48085f85761cde9c287b0b70a918c7ce8008629

SHA256
e79d4b86d8cabd981d719da7f55e0540831df7fa0f8df5b19c0671137406c3da

SHA512
4c71eb6836546d4cfdb39cd84b6c44687b2c2dee31e2e658d12f809225cbd495f20ce69030bff1d80468605a3523d23b6dea166975cedae25b02a75479c3f217

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
917B

MD5
3ff03ebbcb197034e031cfbc39b5ad2c

SHA1
f7c4ac952e6d6928f99b33088df7a1799cc54fe3

SHA256
9847c6d63c966154a4e96916a1c50daf281e8957bccb406e960bc7dc78cf999c

SHA512
eab5e7286ab1be7a436cbb11cd3c1ba91ccddfd4f21a2849e98781dcf5c59fb457654a81218ccc5043bdb52b630bacbf6f510709d530f2bce0639ca597e0a28d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8453e82625b7b71639b92b3128d49e1c

SHA1
14a820823c733573939b827992c96cc1394ebe97

SHA256
a8ad682f908a019bb44c375055b61155c60071a63fe2f1238dedba49941c715a

SHA512
5174b9df54fca6028913bddbe4cf9ecfb9fb06084e2af3310645016ada2fabd79c483eeba8ab807270ce924b2c24edf78d1f493bdbc20291002ad25f55c84381

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
83c84f07794d466d71eb22e1a9458967

SHA1
2a1771b5abaece8e26033ba7b5930d604a0e814a

SHA256
2766d0df36d03f1437d56fc4c48cd195fd2ff997a7431bd6b7ea4cc741b44280

SHA512
3b66c7e3246182943ca4aa9cd1f22b72c4209a2f8526e1eb4defa85c0a772da6907e999b01a3f30f9fecdc6e36d3aae28fa546efb8ce3414e87eac1e0107f89f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a11624f9f0a4a85d0d2066b91653e33f

SHA1
a505b40dddcc3757a9f2e5dfdbf407c32787ccf8

SHA256
8d1aab1815300d6ebea37f9deb4d135a259cfe7224a126960bb07776180717d5

SHA512
640a53430caee095a76b2d605c27854bee56b900c50db461449ac98da96bc845b0415e6db3bce7a2a83179272deff6c538b2eb4a44871a94ab731fe7f9bc2f71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
105560f2c390dc8a86df29ba05889585

SHA1
f5ceb84dd982450dff6d201d96e4ff86761ff78b

SHA256
0c8b636280640fe205d35734249313a8efac495e933837a9103586e0543efb04

SHA512
8fa6d1421e5415f7ac2edfac146f42a248861a89aa3bec160fc44f49deecb86e828423323e2a013ecb026694dc72689d554ef071dae2b8b12af0d504b61b2600

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d4f3.TMP

Filesize
370B

MD5
fb007fc9e57836346ec7933f2196c5f1

SHA1
8f8cba3f51bd56b8edcaa7caadbe6ca75401300f

SHA256
3326e01c21a5c95221c1666004304d8333b81364f05384b27cbbd2cc0170453d

SHA512
86476b1c15c3a6306927ddce9307fe64657f61fba4c26212060e9a4063bf5e06f93f45b18d2d1c22398968419f426e9a80900786f7904f836db7e42850c6a8e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d72b7783ead040a9c9f20e4c030e19ae

SHA1
f2c5ebff376fd9f6a6acbe2d07f0a1a007d21ecd

SHA256
3820f52c1d61047f0f12ed0e56fb3c3f3eca813d1abe5f26696dc25d0a3b648a

SHA512
95358d476d002f995285b7c92a7aec7a415376ee777019cb2a81ff3276547626b56e26235421cd2d0f441eaf4de803197582109ed1c5ad8ebbe0ebd60ecf073a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7188a8bb54d4c46c465cf3dfce8069b8

SHA1
fc4f3713c9bb100293c097fc825ab779a82a7ec7

SHA256
491c031855c3601b97b619f5c5998ae27e3074169f51137bcaed4e9cff1a24d9

SHA512
0b3823cb57b0bf895cb12466b40b0768c878186f8080ee548a86a20e2a52cacb6b6aba31669fa3a313a5199926eda5163ad618ff697a7f35082fefe1fbea8969

Download Submit