hxxps://www[.]eclipse[.]org/downloads/

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-09-2024 12:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.eclipse.org/downloads/

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3676	msedge.exe
3676	msedge.exe
4404	msedge.exe
4404	msedge.exe
4936	identity_helper.exe
4936	identity_helper.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 5104	4404	msedge.exe	83
PID 4404 wrote to memory of 5104	4404	msedge.exe	83
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3164	4404	msedge.exe	84
PID 4404 wrote to memory of 3676	4404	msedge.exe	85
PID 4404 wrote to memory of 3676	4404	msedge.exe	85
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86
PID 4404 wrote to memory of 2848	4404	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.eclipse.org/downloads/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9023646f8,0x7ff902364708,0x7ff902364718
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,13757431467332053687,3381727987330799216,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6132 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3196

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
f05713f84d0f8a7bc717e847fd1f3c53

SHA1
540ecfe00a1cc6980f7c6a791c0b3e21b43c52fd

SHA256
cff0ab2603b1980eb114f50e0a416fd01e8fb244d538a52654108110bb453e70

SHA512
6c59fa9edc4b9b9ebe8ae39aa4e9f49a7fbbf8255e81d84b03192bd8155f5e61eae2fb10accb7b844fb9824ce8a503d64733e7be86e4fb96995b682e22477b5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1011B

MD5
01682cf69b37187d5a8f776c14d798dc

SHA1
3424eea618f0ada9ac81c9688643a935c4e19c5a

SHA256
48279cd760bb6f1cf437070612486db5fa1d1d1df8322b49b0a9f41b2dd601df

SHA512
2e889082ab51001abe96130027ddb0bf01825badc721cae52b63a9bd6a6fd424acbb707eaccb3065d42736e3d0992b3ace105019c0bdfd3b514aff2b07899685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a1489e1d5da9796f8cd3207aed597e54

SHA1
5c7ebd6c82e57108bd6c80a784240389c89d02d9

SHA256
a2b1abbc48598dcadf770b9ce3853cd913a4f50a76c8ab5f72f3bef6c80d7ee3

SHA512
93218c392bd9a62f890aa17060ec7391e4b1c8e21bc12e1c03d87954414dcf70e45ee3c943939f6dc776355da3a0f38037f90ff39197d5aa7d4e23bd663a4d08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
57b6f486f1881edacc2bb424ec4eab39

SHA1
7217a2c4984f912edd474fd87ddc8602367e9b83

SHA256
4ce459f5f9be70bc1868d49210b264dba5a380c1049f52ec648e4d9f5ea74e57

SHA512
5b7289dd1c56ae7a5375e4a30adda4e8db187f4e874bd76ea8d1980f9717e5708e294461b66e8296296129c7060471fd3f9eff6b7095c4c105bd508654088d9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
78d946488b3ad1d832b9382b0cf9befa

SHA1
089f2083408415e6f6f8c397868483f925093b78

SHA256
39157f7d41f26aa4a9a4752a24458b4079a8eec300184031c3e3a52453208644

SHA512
d6c404aa18d261789f343bd641f9fed4968a98ad0397a30ff654b9b4aadfc77f3b0b854292051220fd2003c9008de2700bf31925aafa67d23c4b4335949424f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
a1c03c6eb7ae57113e063b201b55a023

SHA1
3756fc79910742785b088221a5f7b5ce102a014c

SHA256
af28abbc768a779643bea951a83c038de79e2cdd226537b8e450f1bd13a01144

SHA512
1011399a8b1870c2f9fd3dd87f184c0bf170a6ca10ef7288208baa5bfb9c4aef38256502a14aa41ff69c545e012e26e86d710301d66ce22685e9abd87ff81015

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f9b2.TMP

Filesize
705B

MD5
e71479e1865d30df27447fda393d9502

SHA1
0edfbc095336f83a3c3776eb245794bbf7df78f1

SHA256
2211cb54cf0e91fb0bd896258bf167ddd023b6e2351a3c334c7c47e5b39ea618

SHA512
4bf62c43137f57f5c42424a0c6cde5a22ec48ee91fce1a1b20a353808713e163d32e2c484e06aaa0ddf36a2a17d8ec02a54ff14217359fa0dd2076bf42e7779e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
45d30abe9f23672ae3b04d2904bf041e

SHA1
2728865fbfe14b6fa6921379a30bda87f981d2e0

SHA256
45d4750a73c92bdeb231d96225c0789539a47cb99b11048460374df2fef855b9

SHA512
8d7f35c532bf2e03ef697dd4845c85338cfb4bb606179caa037aa90fd4784cfcf3b0053c4a15ccac3b8f4167ed7fcd894edb62f5b795bb869d0b81dae17b38e3

Download Submit