hxxps://dev-banrug00w[.]pantheonsite[.]io/

Analysis

max time kernel
155s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dev-banrug00w.pantheonsite.io/
Sample240108-bbwqcaaeb3

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
4768	msedge.exe
4768	msedge.exe
2276	identity_helper.exe
2276	identity_helper.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 3788	4768	msedge.exe	89
PID 4768 wrote to memory of 3788	4768	msedge.exe	89
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 4744	4768	msedge.exe	91
PID 4768 wrote to memory of 5060	4768	msedge.exe	92
PID 4768 wrote to memory of 5060	4768	msedge.exe	92
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93
PID 4768 wrote to memory of 400	4768	msedge.exe	93

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://dev-banrug00w.pantheonsite.io/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8c2da46f8,0x7ff8c2da4708,0x7ff8c2da4718
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,10962505518914116050,12927090426775784154,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3300 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:344

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7af7b56e2f0a84ae008785726f3404eb9001baa4b5531d0d618c6bdcb05a3a7a
MD5 efc9c7501d0a6db520763baad1e05ce8
SHA1 60b5e190124b54ff7234bb2e36071d9c8db8545f
SHA512 bda611ddba56513a30295ea5ca8bc59e552154f860d13fed97201cdb81814dd6d1bca7deca6f8f58c9ae585d91e450f4383a365f80560f4b8e59a4c8b53c327d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 592B
SHA256 916f9926fdd3bc2d132877f2a909d94dad5c84bf32ef32c8f1fa31f869f68d54
MD5 5b1dd81c267c4a71793ff4a111f59bf4
SHA1 abd85d7f1dd8b745945666d6b7b3f3325ae17e94
SHA512 1131b13e5bedf7badd8331347aff908a1284bdf982cfa8b1fd41fe966a157b22a268f68e3056a93240ee29f8d405cf43150cd88ce4624f51a6c9925c956266c2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 413c5a17ef9a195a9ef2d5239d74cdf179ab9bee9f2cf0241b161b9e7b9ce695
MD5 c9c2d74dd3c1496a828519baed20f0fb
SHA1 1d47363ef05bc13c028e5d4d1e78def213d8d967
SHA512 d8b8f45a35cd2dafc3b6b3b5353b5ad3372c50442f4b481e4a078a50df02aa079355070e3aef0d607191c9cd980db1fbde417c7f46ca6be42ef8e8068b04fe78
SSDEEP 96:n1kytM1x5VTlwpvWMoiVmdeHcQn5UWQyV+VD7AiEwb:n1kbXnTlGWMXh5rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b67ed8bc73b459d82a0981b205317caa3014acd8241197337614f5c7d8446819
MD5 1a1a9a34f9d654268966277e576f2c81
SHA1 1b70e73c0822869c31e91064c90b7aaaa4c7f77d
SHA512 c43710e810852d91801ebe802380bc9788fee56f7f8b15b001d72020aaf6c44c8f199bd1564cb3c0653bd89b7e30eb2e108af16f89e62c01a388f951615f3391
SSDEEP 96:n1kyEM1x5VjlwpvWMoiVmderuL1jcSFn5UWQyV+VD7AiEwb:n1kgXnjlGWMbuLhJ5rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b8d5a081b4d989a5ddf32ac9b2b2e8b7e04386d2689103042cb1f3cc42ff6c83
MD5 8587801b098233630d6ead5ef4938899
SHA1 4abe11d733315d0e18f698366f26d2d06a27a950
SHA512 2f303a80eaf5b96ecbc3b43e87fa29d2cad041eb9ad2fdd14c3d5e0fa8a074668116b9daa64a5d1a7a0a3f8ce1fbbdc94f40810f1c1977b014939b2addd08e53
SSDEEP 96:nDkfM1x5VTlwpvWMoiVmdeHc+5UWQyV+VDCzia:nDkkXnTlGWMX95rj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 c2c76e96f27d54fab9abb8196f0ada95e54cbbdee5198098bcbf1a51e1fb1edd
MD5 29e253c03a73e8e8e17d57b0677c3fa0
SHA1 d07e2cc8fe3489a4a252367332c0e1455dc47e41
SHA512 08a8fe9970adbbd63c50ff3f889fe498ee3ff3484447ddf6592a9ec7b44504c3e22c32211c2e7a4969d39f42a6339e01338005634094a205481ebef9dbf213a2
SSDEEP 96:nDkfxF1x5VTlwpvWMoiVmdeHc+5UWQyV+VDCzia:nDkZFXnTlGWMX95rj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 24KB
SHA256 cf5d26bc399d0200a32080741e12f77d784a3117e6d58e07106e913f257aa46c
MD5 121510c1483c9de9fdb590c20526ec0a
SHA1 96443a812fe4d3c522cfdbc9c95155e11939f4e2
SHA512 b367741da9ab4e9a621ad663762bd9c459676e0fb1412e60f7068834cbd5c83b050608e33d5320e1b191be1d809fef48831e0f42b3ecabd38b24ec222576fa81
SSDEEP 768:nrCWQ08F1+UoAYDCx9Tuqh0VfUC9xbog/OVSLllmrUBd:nrCWQ0u1jaXLVn
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e1f01309430dbb9ce0305366d4f2502775c74106a78b7d62987393b93af98b61
MD5 29654a68833981c7244a4711a734704c
SHA1 76de2e283b163408920cf77b22ca9ea485087c8e
SHA512 74a97b43abae95fd916ea86ae835684d2c437eefb025cfcd060c82a2dae2c27084d6d247bf882a17ae8c236b565290ae1ea68365636da2d2285ca8a028ad7697
SSDEEP 192:5oCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuprtz4e2RUNZ6bHSEqD38LkK:l9iIxuERzA83h09RZxYrMAujy38wgv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 3KB
SHA256 b44052cc273835bd410b24107523ccea1d8d22a6560e17dd8ea120ef34731519
MD5 6fb5d37eee8efdb0510b1104b14ec801
SHA1 90661d0527e513a426dce16c55ba31e0af15f419
SHA512 9de2ece7b4f8f8d549906c701b0988e59359b510050c8a1c4e71fd748e7de4c97ec8a4fe72aa8f2944398e3b67b592dfebed4ff5103524bbd1bbcbc1eecc6cdf
MD5 SHA1 SHA512

Submit Download