hxxps://skids[.]dev/verify

Analysis

max time kernel
145s
max time network
138s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
29/09/2024, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://skids.dev/verify
Sample240929-tk2bas1aqq

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4260	msedge.exe
4260	msedge.exe
2448	msedge.exe
2448	msedge.exe
1820	identity_helper.exe
1820	identity_helper.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 224	4260	msedge.exe	79
PID 4260 wrote to memory of 224	4260	msedge.exe	79
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4304	4260	msedge.exe	80
PID 4260 wrote to memory of 4276	4260	msedge.exe	81
PID 4260 wrote to memory of 4276	4260	msedge.exe	81
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82
PID 4260 wrote to memory of 4568	4260	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://skids.dev/verify
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8f3573cb8,0x7ff8f3573cc8,0x7ff8f3573cd8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,5708321466642378603,18115218349887160824,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5268 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2416

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1036

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 593f20dfb73d2b81a17bfcc1f246848080dfc96898a1a62c5ddca62105ed1292
MD5 026e0c65239e15ba609a874aeac2dc33
SHA1 a75e1622bc647ab73ab3bb2809872c2730dcf2df
SHA512 9fb7644c87bdd3430700f42137154069badbf2b7a67e5ac6c364382bca8cba95136d460f49279b346703d4b4fd81087e884822a01a2a38901568a3c3e3387569
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 448d09169319374935a249b1fc76bcf2430b4e1436611f3c2f3331b6eafe55a2
MD5 228fefc98d7fb5b4e27c6abab1de7207
SHA1 ada493791316e154a906ec2c83c412adf3a7061a
SHA512 fa74f1cc5da8db978a7a5b8c9ebff3cd433660db7e91ce03c44a1d543dd667a51659ba79270d3d783d52b9e45d76d0f9467458df1482ded72ea79c873b2a5e56
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 1f2aff8b21930f41384b37703627734ef7425309fc3d9656e5ccfc68b9e42eee
MD5 f1b0b6217e340477a3bd720e09b8d4ed
SHA1 948b8977b6708ecdf5c3c709724e88748e89c9f9
SHA512 070a1bc16c17f8834a9e0c3b42315ca4ebf8e17d5ec18d4a62aa6be67dcb83d3609f27e35300f04b1f24d7116b1209324691289cb2ede60076e6b477528df313
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 447B
SHA256 c491645009f803061a0f5931872d2fb3e93257b8e4db51a5f937675d80b85a0a
MD5 994d0f95e79056afaf7a3c66c214efd4
SHA1 902b55c308fa69787cc20b810669534eeb0f459f
SHA512 2c1be21a197191fa5e5f414c7290865cba88bdffec21b45d116f6696bc664147e4dffa84d9ba5352b0bceba413a101f4d5078123023f395eeb9ac5bfd17626cf
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 47aead60a2965f83f24d7a9f97ca0d2c89c78843688085c578610abfc7148574
MD5 53f8d2d6c61d516426c62e53b48bfba4
SHA1 d787fdb4a2442d0bf59e6c6643aeb5b1f2707a51
SHA512 7b77173b5b7d8d7de4c95091c50add6a7421b5bf6cb83e89038f0e3dd7d6b545178aff6efa903488001979e0cfb6c959de69674f591c6fa7c80987d582914366
SSDEEP 96:n/Xk3nlZvhGkivwSv0MoiVmdHIEJJ5hKs0WQyV+VuziX3wI3:n/Xk3lZhGkivv0MAIAPKsLM93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f037ae24eef61452a6a6ffd90ba93672eadc7f5b7a20066083ee521473d7501c
MD5 6d49601e1c471019741059c1f41ba229
SHA1 921e0eeb21065d1872aae1dcb884c89c5dbc87a1
SHA512 e056fbc5e7bf6891c7d46972156379426a6e2238e721c8f69c4721d338bff2df2672588349b3ffaabb1ca4f8d3a61302483d6bb26f6837de0dbdaefee094ab1e
SSDEEP 96:n/Xk3tJvhGkivwSv0MoiVmdC+ws6jNIE2hJ5hKs0WQyV+VpAiX3wI3:n/Xk3tJhGkivv0M6wlpIBPKsLe93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 2810921360f22025d1953a67ac44f36d638d3f5cfcaebc07a26c1acceec7d2b6
MD5 3f3bc84e82956fa5fce27775253cc08c
SHA1 c9e7925c68c390645faa678142adbc42cd2ece63
SHA512 942633f267671a043e0e772c0eb054db124a0a811fff1562720a27c018dbafcd3fc4f051f1459b1aec2306204a64ff744707b72d1da916e9b9a825a53a329a63
SSDEEP 96:n/Xk3tJvhGkivwSv0MoiVmdLub1jIE0J5hKs0WQyV+VuAiX3wI3:n/Xk3tJhGkivv0MEubhIfPKsLH93
MD5 SHA1 SHA512 SSDEEP

Submit Download

bb7e0021-38ba-40f3-81f2-ba21ed2399bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bb7e0021-38ba-40f3-81f2-ba21ed2399bb.tmp
Size 6KB
SHA256 39254d396f44381f05645c1a80b44cbcf889db9565f2a24b9894deca66d0412f
MD5 4d2235b3a5440230bd1ff245a98b5eb2
SHA1 c8c9ead137c8e46f8f263650ae817a2bd5152c0b
SHA512 972af67cbdcbdb08712f05e17095ea3de31467749dfe1b8f35f60eba40e411ed7841a21712573f9ebc105bac1ad64966fc45ef73ca8200fd07b8b44348ea93b4
SSDEEP 96:n/Xk3tJvhGkivwSv0MoiVmd79bN4MF0IEfWJ7hKs0WQyV+VpAiX3wI3:n/Xk3tJhGkivv0Mibu7Ih1KsLe93
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 f0568b6353bb29c13848871343e1822d6233d27de39eea81e9c0da1443d4d60e
MD5 6f03665ad52a2c9cd1cc55b186b8b23a
SHA1 70ecabb22f4f294acfc633df7541aba950d4e279
SHA512 569e1372b6c61a8319acd04e59756a86eb7262f2a186feac0501e3b25fdd241d0c6e7e17921de6a594f19a2cd94009524f980ad347bd480c01928b101d52670f
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxA3SKanDqe2RUYBdRywSc3ToQ8wg:M9iIxuERzA83h09RZxA3unolJJToQQYi
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 d98794b3acf6bfa00751f6b6f62e64bb0dff4c34bca77b03fb0e5eee26be9e09
MD5 a52d923441fd0a8313ec0d2aaa58f472
SHA1 269c96c7072a2ecb4e0ede50d69d9b9f77846faf
SHA512 710a9183972557f3084c91be2ca32b821e2af57e896ee35fa386e584f9794281459039d5c2130a629a96393ded0ec39c673d026295c47c46a153536e35710984
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxASGxKanDqe2RUYBdRywScOSoQ8T:M9iIxuERzA83h09RZxASGXnolJgSoQQB
MD5 SHA1 SHA512 SSDEEP

Submit Download