Overview

overview

3

Static

static

1

URLScan

urlscan

http://data:image/jp...

windows10-2004-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    26s
  • max time network
    29s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    06/05/2026, 01:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://data:image/jpeg;base64,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
  • Sample260506-bc995ac14k
Score
3/10
discovery

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://data:image/jpeg;base64,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
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1564
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fffa3f7c188,0x7fffa3f7c194,0x7fffa3f7c1a0
      2⤵
        PID:3824
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,15643079351886417724,12009153972700148076,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2784
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,12957802949138266637,813362002354334550,262144 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
        2⤵
          PID:4384
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,14885008030498890405,1858781399127354470,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
          2⤵
            PID:2292
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,16994000160934281130,364447223168650193,2097152 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
            2⤵
              PID:3284
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,16059196940434554959,1845424321933775579,2097152 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
              2⤵
                PID:3948
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,4261533607371727386,4166983617224565819,2097152 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
                2⤵
                  PID:328
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,8110570677572153401,15844524592012169351,2097152 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
                  2⤵
                    PID:1064
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,13625488657423338111,1405613142765217989,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
                    2⤵
                      PID:2660
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,13529255965242328706,8814831123094195357,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                      2⤵
                        PID:796
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,3960220631446525842,6191150205794925317,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:8
                        2⤵
                          PID:2024
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,17741053161450185235,5308919946223284902,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
                          2⤵
                            PID:1500
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,6315029384589204136,18298847988181301948,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
                            2⤵
                              PID:4220
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,6315029384589204136,18298847988181301948,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
                              2⤵
                                PID:4208
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,1259530382435703108,6315970136145576026,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
                                2⤵
                                  PID:3964
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,4516481587736308100,17924962660159824614,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
                                  2⤵
                                    PID:4320
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,4767524133927846562,1059919818003393847,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
                                    2⤵
                                      PID:1776
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,15358276716618105310,18051972206080182521,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8
                                      2⤵
                                        PID:2440
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,15523133185961992147,1685317310972013958,524288 --field-trial-handle=2324,i,9525450042086812428,5301590710763971420,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                                        2⤵
                                          PID:3656
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:4848

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              blocklist
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                              • Size 105KB
                                              • SHA256 44e9a43c63982734361d58f6dbb1502c3d740628b05ab5bec57406bde04add60
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 499f1baf84ccad9aec7e713f14831c28ec8ef6c26551e081f63481da9e10b787
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 9a68569752b554830bdaeb1e8a10446a2bf48a5c40d9055644b0ff7d12eb909e
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              BookmarkMergedSurfaceOrdering
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              SiteList-Enterprise.json
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Edge Profile.ico
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              HubApps
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                              • Size 106KB
                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              SCT Auditing Pending Reports
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 15KB
                                              • SHA256 a59248d21843e3bb59479fcc410547dc7590a3615ba0823bb290fdc157ca5232
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                              • Size 35KB
                                              • SHA256 8e44653d4e9054b0646b00fca6fef3d4250227bd422c1764e3e131706d77f374
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index
                                              • Size 1KB
                                              • SHA256 41841f751dac55d13ca83b869c1d76b61cd84f623e84f3e7a820fbcfff13a889
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe586184.TMP
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index~RFe586184.TMP
                                              • Size 1KB
                                              • SHA256 b80e0205a8c1028441b8d95fcd9df6463a3169e2ef67989ba9667302f6f542e1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 5776c5d4fa4c0b75c3abe736db75b09399d5a1a510295ad9749e0c7db0b22526
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 c3f1481ecb27e2e3cb56fd72cb3b51fe10c6dceacff25686ab9492e63a5540f4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 96897fe34979133543f463e4af04b78c8fefe307327bbe7e91b36bebc8d30809
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe58b7c2.TMP
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b7c2.TMP
                                              • Size 48B
                                              • SHA256 abb4e03150ea94c402559409261c6b0014e10b8d21c43eb871ebc1aac2ba7b1d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              sync_diagnostic.log
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 c64a1201f591f736c38cb008f941994541afee2f75bcf096c0cbd06029a09206
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              CURRENT
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              MANIFEST-000001
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 18KB
                                              • SHA256 7e596b5a450b19c68600d38467b75b01ab04ce389acfdcfe27cc4338cbd18326
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 22a75028dc343306e8b1a5321f3aa975d7e32dce5f60e1eefa0de39eced5589b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 18KB
                                              • SHA256 3936cd3a1142010ca3de3e7140e20f6e2160cdaeccad3ea617ace083462438d9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 8a91b00736f967bffea818b5721382f169da068c4886017c801deed2acd3586b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              fffbb67b-3efb-46df-8576-631c4aad5393.tmp
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fffbb67b-3efb-46df-8576-631c4aad5393.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 946afd65dd1bec6cc4e02758881aacfd918f1d6d914676b60ed710deae159080
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              3bdb7041-8cd8-4ecd-922a-4fa4f98b0687.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\3bdb7041-8cd8-4ecd-922a-4fa4f98b0687.tmp
                                              • Size 1B
                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              65dc0731-ee4d-4022-8cd4-9681e31714f9.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\65dc0731-ee4d-4022-8cd4-9681e31714f9.tmp
                                              • Size 10KB
                                              • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              content_new.js
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1564_49046891\CRX_INSTALL\content_new.js
                                              • Size 10KB
                                              • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              87b6d70a-8445-424d-b7d1-5ea6fcb5fbf8.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1564_842922499\87b6d70a-8445-424d-b7d1-5ea6fcb5fbf8.tmp
                                              • Size 147KB
                                              • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download