hxxps://streamflix[.]web[.]app/

Analysis

user interaction
yes
max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://streamflix.web.app/
Sample260710-sr3l9set2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3440	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281705690772053"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{DBF6722B-4CD0-4DDE-895C-CE4E4A71EA4C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 872	5112	msedge.exe	85
PID 5112 wrote to memory of 4960	5112	msedge.exe	86
PID 5112 wrote to memory of 3440	5112	msedge.exe	87
PID 5112 wrote to memory of 4960	5112	msedge.exe	86
PID 5112 wrote to memory of 4960	5112	msedge.exe	86
PID 5112 wrote to memory of 5080	5112	msedge.exe	88
PID 5112 wrote to memory of 5080	5112	msedge.exe	88
PID 5112 wrote to memory of 2132	5112	msedge.exe	90
PID 5112 wrote to memory of 2492	5112	msedge.exe	91
PID 5112 wrote to memory of 2132	5112	msedge.exe	90
PID 5112 wrote to memory of 2132	5112	msedge.exe	90
PID 5112 wrote to memory of 2492	5112	msedge.exe	91
PID 5112 wrote to memory of 2492	5112	msedge.exe	91
PID 5112 wrote to memory of 4284	5112	msedge.exe	92
PID 5112 wrote to memory of 4284	5112	msedge.exe	92
PID 5112 wrote to memory of 4284	5112	msedge.exe	92
PID 5112 wrote to memory of 3492	5112	msedge.exe	93
PID 5112 wrote to memory of 3492	5112	msedge.exe	93
PID 5112 wrote to memory of 3492	5112	msedge.exe	93
PID 5112 wrote to memory of 4996	5112	msedge.exe	96
PID 5112 wrote to memory of 3288	5112	msedge.exe	97
PID 5112 wrote to memory of 4996	5112	msedge.exe	96
PID 5112 wrote to memory of 3288	5112	msedge.exe	97
PID 5112 wrote to memory of 3524	5112	msedge.exe	99
PID 5112 wrote to memory of 1004	5112	msedge.exe	111
PID 5112 wrote to memory of 3192	5112	msedge.exe	112
PID 5112 wrote to memory of 4652	5112	msedge.exe	113
PID 5112 wrote to memory of 3256	5112	msedge.exe	115
PID 5112 wrote to memory of 3256	5112	msedge.exe	115
PID 5112 wrote to memory of 4196	5112	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://streamflix.web.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa6ec8c188,0x7ffa6ec8c194,0x7ffa6ec8c1a0
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,1595905778691006857,4213907435114264679,262144 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,5168176958882701513,2497403332740618324,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,5360474996608984448,17182198849608687228,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,12586591135923670930,9041028300557773656,2097152 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,1769045143395388347,11452954923711203252,2097152 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,14061322098474237706,6865076605284811611,2097152 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,5838041728993780412,12156055530791250664,2097152 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,8647787369397085258,12985507047915527751,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7260558018984306336,572787727170366551,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,17730097262715422420,508470975696914202,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,17730097262715422420,508470975696914202,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,10715356644051706099,17521225223565720164,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,13332273890277226701,16203118252101765782,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,448716630706699464,9975715184594383078,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,3483083417618118193,3400849666055665347,524288 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,7483083497531882735,12870218625124507595,262144 --field-trial-handle=2112,i,4220473676907852995,644327328254042570,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 88bfb1a29d9a117574b0ed4507c30cfa627fd7b9f26485371caa09552b23f51c
MD5 082538e36577fdb3c833272d5f458903
SHA1 8a8a626b76c01c8bb3673c348c23b02a29e37a11
SHA512 44fc7d077eeddc3b488caebf4bc344ff8c7c5cad1040083814be69b9f04ec125f6bf277a81146e64ca6c22fd434f95abe666ca92c20a9e484c4f4bdaccce1a80
TLSH
T1EE710728F6310CA0E3B11370DA925A0C38F0CF94DA579E6253D8A0BCC6DA37F8275C59
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 43b451c44a07eabd80abd7c836a453098615c919b9e9485b118486bb7c3aa4dc
MD5 dd5826f23ad659f045858ad7e5afa253
SHA1 c9ffe859da7b82fa4a66482f8ce0f189231fa393
SHA512 4eb7bf165e3690e6bcd324b60f8f447bc5d93e5270374d269c4ded501e160cc80228da3b9813a532a5f4be900f581c45f50c970285b6b9d28f038a9cba927b52
TLSH
T12E41CDBBC3E9852DDA0116F0AB246D27CE5D1525832C3C6AC4D8FF8B93F2474E25154E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 79b2493ddef402b29151daac04e8d5ff184657901e50f220852cbfd67ccabd5d
MD5 9153e824d691ffb73460fc10280be688
SHA1 48b7648243e6e216e888815e28e0e8aeb4ca9f82
SHA512 7792ec0b00c5fb555c38e342b566b76b1d5fd69b8f18e11fd2bebd5f0558dd70be491d61cee40090c5df8e09fb12b15041d6c04f5958ba632034f9cabd990f16
SSDEEP 192:sxZUR4yM/jK1Ml8MkK/fFsfe2Idp9EHW6+WN5I9D/YLkS9q+IIgrJ:sxZUqMK/fFsfe3GHb5O/7L9
TLSH
T15A52F9126A349977CCDBD209F951BB93D6F9057392940E48AAFCDA0C04E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d09595943b3320b5ffc2fb74d06b6e00ec26581eccbe5988c904d0ac0180dead
MD5 a9d83e412b6f3f1a8650c3fe83ff9c39
SHA1 c25e7d43f8909c7e342a352c11b3afb39bf5e367
SHA512 b568ab021a7dafd59eab9bcd45f7bb61bd9bf1b4393d1a0e2360e060dff5b048ec6fb4cc325099c758652aec2abb96f3fe4780f87027814ded4ba29340b4dbef
SSDEEP 192:sxZUR4yM/jK1Ml8UQQkK/fFswL2Idp7EHW6+WN5ImgdYL4SkV+IIg5jJ:sxZUqqjK/fFswL3wHb5WdbLj
TLSH
T12952E8126A349977CCDBD209F951BB93E6F5047396940E48AAFCDA0C00E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 16d4593c9033a62dba0ac1bea00547a5da49b128ceee623efe64e683a5950c59
MD5 8cfd8971a72694435c3a9c510eafb48e
SHA1 b948c75d94de939acea8053bfb4a97791f854bcf
SHA512 78ba7c70b34c473a9d0febc53f6044f24254d08fe86bf70c4a315b279da3519aee26f6d1802cdf6dde56e835ff4fcce21e0c77b586de7e1997efd6ebb4c823d1
SSDEEP 768:u8s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNVroyKN:u8s6pD1WvxzWju1jahILIsNuyKN
TLSH
T1B0D2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB94899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 dba9b4c3d27770805ca18e382642b3a0d0a9e78307dd6221f9184b2dc961c885
MD5 56ec85efd48f127bc7654ee9d295350c
SHA1 b5273107ae53392cc5b211087833c18d1a462484
SHA512 27434c53f45ae5e0b599c9af7609e3dd567d3ee3fac744b90cdbad3448dcb58030b3eee5002aadbe849d7fc6c7538a1731b92b0c0c2eeee8b17c3a5bbff868ae
SSDEEP 96:KUAAKtePtYhM46SS+4iDlqY+KyLqO+2QYr+ofuVKKOAJ+IKHKS6eUKryD:iitYhM46SSPiDIYYLqOzQYr+ofdxXvk
TLSH
T1BCE1C45771B742023C7E2A4C8794C7269E42B6633028A42B7FEC01765E67E209EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58c196.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58c196.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c2adfc595d6383b4e2fa9a68320c9656dff02a0dcd254b6adf88a01ad0a8da3c
MD5 1b349f8ca816888f2139e0ffd2a2773e
SHA1 a51e12db25eb7e522f4c2d9c2695f7e7a43104f7
SHA512 8a70ebc1b90db62f4f09f71074a6ab6c629e556e85b9016ed5f18f496bf7c5366dd1ebe66a6a0d0461e2000e13eec0228e18093847cd0a3a83566ee1306f8c5e
SSDEEP 384:0iF1tNn/s3n9SozsNx8TUNTUlIli13VB6Ia9lOaaR3HuOObjI9G6w74:PF1j+9rcwgyb6RvOaaR3Hu29M4
TLSH
T11CC228F218D78976D9AE4747B77E2E038EBCC06BB5852A44B3985A0CCC971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9c2af9783d6832d528aa6ab996177f092d9849d05d78d941f50d2cdcc199aa11
MD5 8ddfe9010a25e601b59a18dfe9c22751
SHA1 87794dca8d984158e31a540a553d12904ae6977b
SHA512 ee88fd518c8e94f0bf82854e766f238cfaab1b8980f81af02ab9f28ab1f78a7cb4f068c1f278f79aa70234f3d016e3e617aa31f1ca7a60ab3804443768015bdd
SSDEEP 192:qONy6O7+3hQmiUyBTGttb0cO2coGgGr26U6:qONy61eGt9lOa4i6U6
TLSH
T1EB02E8357C686CB79EF2AE45FA8737179FA8103BE9952F40D6E81E0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 38a3b389c899a5e45465e8a621a36849fa82a9dff8f8e001447d4fee71c11033
MD5 3470596e20c1e26070c7fb87593dd8f9
SHA1 e77e73a5dfdf2e4e6543c9a2791da963eb6dac30
SHA512 8fdc2049712c7fe1f65a7eb95218aa69217a8ccb0d1809a52332476040db2327a5a74c585d78c2ebaa0a78ee65e904dc2b844a94c3f7ab3f66a413629679fc39
SSDEEP 384:3tNn/s3n9SfsNQUD13VBIIa9lOaaR3MuOObjI9G6w74:3j+9U2bIRvOaaR3Mu29M4
TLSH
T1F8928E326C289DB70DA38199F9473A179FF8407F96C52F88D5ECAF0C05EB6AC1306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a4b0a955a6ff17cce81a6e6cb3b0f70215bf52941df9119c08d5de565a16a703
MD5 619e92d430a996db1f1130bbb01ee9b5
SHA1 e6d5dc950b33fa1ea0fb53ebfc3b7a6cf64d3da2
SHA512 c1710ed0e6d4eeaa9c344974dc3d0687fe87562f7dd0822f237b08ff84fb96a9ae4c4822b2e4a5b919cbf329581643f3d4697bbe66b121e173f1cf9ad1aafe3c
SSDEEP 384:JtNn/s3n9SfsNQUi13VBIIa9lOaaR3MuOObjI9G6w74:Jj+9UxbIRvOaaR3Mu29M4
TLSH
T183928E326C289E774DA39199F94736179FF8407F96C52F84D5ECAF0C01EB6AC1306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f51c5618e5c43bd0258a35fdc8a8a51be952fa137ad9ae78a4a97a5bb44708d5
MD5 2a01c349653be003da2f24e38b905823
SHA1 324085504da8eb2dd4fb367a69f9ea2ed519cb52
SHA512 e2e36ec5bc5545ef23844f68575dac39bc1d2c7b3d5cdeaa3e9f8460bbf6cecf9f330fc885752eb02f04d29b498de7f178331f6da26f75669deb0308949a39c2
SSDEEP 192:zONC6O7+3oQmiUyRtT4ttb0cO2coaR0E0cNpqMGU6:zONC6aex4t9lOaaR3duU6
TLSH
T175121C367C689C771DE29585F9C736139FA9003BDA866F80D5EC2E0C01EF69C234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72694ac8-a735-413b-bc0c-46d51c5b33f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\72694ac8-a735-413b-bc0c-46d51c5b33f8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 724b59e36e3f27039a10d5fe24ea2adedf111bf4c582f7137b0f3683e6bf253b
MD5 438e9be1bdc0051cc50766dc36d1e1a5
SHA1 dff72ec94a411fded5d3359785335014fbcbe7c9
SHA512 773c6b8ec6a706dd0df3ac774f90db8cc77939c684581a53c12468c51e3d5fd91c815cff56b8d370068228311a57c2b242dcd11f83da35cd3da4fa91b91f0ee7
TLSH
T1E341D858A6FA1148B3B77F469BF6686E087EBD772E4AD45D10010E4E4A26A00C972737
MD5 SHA1 SHA512 TLSH

Submit Download