hxxps://skids[.]dev/verify

Analysis

max time kernel
145s
max time network
138s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
29/09/2024, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://skids.dev/verify
Sample240929-tk2bas1aqq

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
2208	msedge.exe
2208	msedge.exe
1712	msedge.exe
1712	msedge.exe
4640	identity_helper.exe
4640	identity_helper.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 2168	2208	msedge.exe	78
PID 2208 wrote to memory of 2168	2208	msedge.exe	78
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 4876	2208	msedge.exe	79
PID 2208 wrote to memory of 1936	2208	msedge.exe	80
PID 2208 wrote to memory of 1936	2208	msedge.exe	80
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81
PID 2208 wrote to memory of 708	2208	msedge.exe	81

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://skids.dev/verify
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa5ac13cb8,0x7ffa5ac13cc8,0x7ffa5ac13cd8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1772 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2144 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1828,3258384563203983333,9407597553448693815,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3028 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1416

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4600

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a3d21f0fb6563a5c9d0f7a6e9c125ec3faaa86ff43f37cb85a8778abc87950f7
MD5 9828ffacf3deee7f4c1300366ec22fab
SHA1 9aff54b57502b0fc2be1b0b4b3380256fb785602
SHA512 2e73ea4d2fcd7c8d52487816110f5f4a808ed636ae87dd119702d1cd1ae315cbb25c8094a9dddf18f07472b4deaed3e7e26c9b499334b26bdb70d4fa7f84168d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b7f0d9ece2307bdc4f05a2d814c947451b007067ff8af977f77f06c3d5706942
MD5 6fdbe80e9fe20761b59e8f32398f4b14
SHA1 049b1f0c6fc4e93a4ba6b3c992f1d6cecf3ada1f
SHA512 cf25c7fd0d6eccc46e7b58949c16d17ebeefb7edd6c76aa62f7ab5da52d1c6fc88bde620be40396d336789bd0d62b2162209a947d7ab69389e8c03682e880234
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 863a20d0372162b8f95ea1953a0b681b41e14d705cb3ea3034aa8d958cf5021c
MD5 2a4ed187ea5dc762dab385e4ea2502f8
SHA1 65080315cab2ea2ddf5abab514ea5f866c0a0da2
SHA512 e22b63ab8830c1ce3d2d0916e426a2fc56058a2c6042c5f02937c90f4713e821130115f36ca0a2326fe0c9284f333b0f1b72d7722e3e1fc85049f8712706cd0e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 447B
SHA256 4fd0af92edfec01ef60b5a09ae804fce47a695aeae86b7eb911ca531a452dfb0
MD5 e2d4a1b278f9b22a63c36c8728fd8e72
SHA1 21c0d20109c3c5cac71383416decd804f75cbaf4
SHA512 3793deb34302df198843543b3b43c8e5b7d936f4afe6e6e64da1068f8c7b67c92ddb8164edcaf80f215691fccc4ef04c52ec586ff75b022282da4d55e8d15f0f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 53aa8653924ef2eb553901fd7e9bd771f66430a33c3ed010660d6302c1200ffb
MD5 26df5408a0ec7c6a6985a8f56ecbec36
SHA1 452bcf0c9e13acc3990ca9b1a0ecfe14e617f2f0
SHA512 a293afebff51966952b0df91a51ef1181b6a5cac5f78ce43c4c7813c5fe0e1c17f9373f8aa30f35cb6ad8f72951391e54cae0b970e212a93165ad53743bc390c
SSDEEP 96:nfqk3DZvEZVkio5wSv0MoiVmdHIRJ5ull0WQyV+VuziX3wI3:nSk3DcVk1v0MAIzkllLM93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4f80a85ddda2ce5062fdc263f871af7a51a122e5de01e8e3e0d132d36d00b418
MD5 22e0b57723c4dc08cb77ac014962ca8d
SHA1 3703f68ee1904d57d9e89fde6bbcd51e20c8c09e
SHA512 8f42375c722bf47a6f0016102991b1cb20614bd703edea38a732ef134347b07029069ac0b86c3de9bebaf80b717b303756e4bbdb977696bbcc32e6caf00318b1
SSDEEP 96:nfqk3DJvEZVkio5wSv0MoiVmdyHYwQjNImHZJ5ull0WQyV+VpAiX3wI3:nSk3DMVk1v0McwQpIAkllLe93
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ca01f3b07f9b426ac74c8e2295c4bbe86f0538032fd276f25c1d9e5202419e7d
MD5 daf33e98a252c5a67dbd5358957e0f16
SHA1 a222265e0e58058a03c2997e1b987bd3206bd966
SHA512 4f8f8e4af0c5a204c643ce66a6a163e13f9d7e260d55a45860401ea9fc067900285036c94fec6437c3be83b36a49770d51bdaf2ec569b22ee5592ed12261eb8d
SSDEEP 96:nfqk3DJvEZVkio5wSv0MoiVmdBup1jImJ5ull0WQyV+VpAiX3wI3:nSk3DMVk1v0MCuphIUkllLe93
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 f7a2b070fb93882ff0372ac3dd6c3b422959ce4f678693ed1ffd6f4e9bb569c2
MD5 755755d9a1eb70813d60e333115e5402
SHA1 c255f786849822935cff5293f4ece8d40b6ac23f
SHA512 8ac05cb319d836ab974ef08c84cc9d66f5a7aa8b60269a8d04a6a503b8b184a43f3c1d9cb8a12dc18b7dedd38bc7cdad3a67757be6cf20193a1874a63b73980f
SSDEEP 192:coCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxASG2Pe2RUqNRcQpr3oQ8wx0Yv/V:M9iIxuERzA83h09RZxASGWjk03oQQY8c
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 682dc8ce549b2dc209624f946d566378ed845d0d3f173fda6c596d8f506e7304
MD5 acbaace8f7777a3b8e50aff380ee7bc7
SHA1 6c4fb1e5df0e4f40ee461f6fc4f63ea6c152030a
SHA512 42f8f9c1ad51f44e513910c3d1279dd60f29bf3ffe9387c09a29e748fcf03e9b6d58f972cfb78c2923aa4f088239c0f76d15cf71e6bcfe104e133ba936e0fd3f
SSDEEP 192:BoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxASG2vwe2RUqNRYXOwoQ8wx0Yv/V:99iIxuERzA83h09RZxASGzjeOwoQQY8c
MD5 SHA1 SHA512 SSDEEP

Submit Download