hxxps://streamflix[.]web[.]app/

Analysis

max time kernel
148s
max time network
147s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
10/07/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://streamflix.web.app/
Sample260710-sr3l9set2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4904	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281705689223787"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-101591186-421676486-4137282292-1000\{3148209C-A0FB-4B75-886F-E6573AEE3A2B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
652	msedge.exe
652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4520 wrote to memory of 4468	4520	msedge.exe	82
PID 4520 wrote to memory of 4904	4520	msedge.exe	83
PID 4520 wrote to memory of 4872	4520	msedge.exe	84
PID 4520 wrote to memory of 4872	4520	msedge.exe	84
PID 4520 wrote to memory of 4872	4520	msedge.exe	84
PID 4520 wrote to memory of 5340	4520	msedge.exe	85
PID 4520 wrote to memory of 5340	4520	msedge.exe	85
PID 4520 wrote to memory of 3100	4520	msedge.exe	87
PID 4520 wrote to memory of 2152	4520	msedge.exe	88
PID 4520 wrote to memory of 3100	4520	msedge.exe	87
PID 4520 wrote to memory of 3100	4520	msedge.exe	87
PID 4520 wrote to memory of 2152	4520	msedge.exe	88
PID 4520 wrote to memory of 2152	4520	msedge.exe	88
PID 4520 wrote to memory of 3236	4520	msedge.exe	91
PID 4520 wrote to memory of 4356	4520	msedge.exe	92
PID 4520 wrote to memory of 3236	4520	msedge.exe	91
PID 4520 wrote to memory of 4356	4520	msedge.exe	92
PID 4520 wrote to memory of 3864	4520	msedge.exe	94
PID 4520 wrote to memory of 1124	4520	msedge.exe	101
PID 4520 wrote to memory of 1120	4520	msedge.exe	102
PID 4520 wrote to memory of 420	4520	msedge.exe	103
PID 4520 wrote to memory of 2056	4520	msedge.exe	109
PID 4520 wrote to memory of 2056	4520	msedge.exe	109
PID 4520 wrote to memory of 652	4520	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://streamflix.web.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ffd36aac188,0x7ffd36aac194,0x7ffd36aac1a0
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,11965177950168049879,7123824550075460381,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,16861397921570117886,11018684741702801409,262144 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,7112589177838693356,5263731344612721389,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,4903447147613069048,8663759434183295672,2097152 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,17932841761044472467,18307001221482895768,2097152 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,5852839836201367248,7245028982841742133,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,13681755322916091152,3675283353911863513,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,14417676070705135957,8504679554202558392,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,14417676070705135957,8504679554202558392,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,18215952881472010725,5974704393283998095,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,400451261952697484,5108530516995394675,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,9159250057308751015,134281453453677531,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,9329557254715858771,9765215382314407223,524288 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,118610286180039752,3552370317187607973,262144 --field-trial-handle=2288,i,3759897287445543155,7308093544671885996,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35cc5409a0e92c7b1f173401d1114c9d5fdc977752a8e45ce9068d8101c9a651
MD5 4177a98ec95c7b8511089a1be66e9e7b
SHA1 523d632928047252508b7d45169327ef4523179e
SHA512 d9e67625f1cfcaf9b90149a3ed0ce8899f43e93e14c729f7cf114adedf8a6a345c93240cebfa58351038924578a437d9d7144c7dcd826b1b8892dc523920e947
TLSH
T17AD08077670FF411E36D5131D503C75117AE547179625723F118C40D99741D693C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e9b606cfbfc7b0fcbfab1ff9a90d94ddcf0c4033903cc47f13cbcd8bcac95cc
MD5 66bd1dbef8b4df50e7a09a2d2848fb79
SHA1 69983a576369225e69f3c4e38eef011e7e436249
SHA512 7f8546014287d3ced2b59766b273c8d8981aee3ef643630332615e594a89f92a95f1ce112c2fa889b0e249a10643792bfc57043bfc523d6ada97b8bc7d6e7d6c
TLSH
T17CD080776B0BF411E35D5131D503C75127BE507179625723F158C41D99B41D697C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ebaff96a5e6307c5c54ca4cbdfbe4ecebc4b949b939181fabe011764939dff07
MD5 371698c7287ce620c45a58a5da51727d
SHA1 562e0438fad95e44eda3b29336650dfe98e1839e
SHA512 f3e863e4b1392d3ab0092885fc9dc51b72931887df5ca04e0be770fdc36b04be4a0d4a3dbe2a37977c3cac2b66902f4ba86e6ab3a08d474535882a4211bb28b8
TLSH
T1A2E0E5AAC922AC3758FC1B2C68190787E60403172F80552F3B3D92098FB16371A8A95C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 13fb9335a021170f9668ec905bf2b19706a6908541cc220225c5c9a7a2d49933
MD5 69df506bce25b4526f20c00aa7d0ac38
SHA1 58185787776aaeddc5beb70f6fae3ddaadd1a69d
SHA512 1195322ecdccc06fccdd8db9302e15e98a40b3976b6b0d50d8b5eb3dcfcb7392885fea8cfac8f47618fed55d0182a3569fe1c9997403b4cec32c3a9ed2340eac
TLSH
T1C181A33C519B98F0E750C3B2B0F21EE6387E42B9E9134D8E1050E4F87A1A763A2C5C47
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585f03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585f03.TMP
Size 3KB
SHA256 475b9f97707d6ca032381d75a54f35614829ac13c532f19cc13db68f674ba322
MD5 717ea42bc91500f233dd3cf7788f82be
SHA1 bc9e8f015c3fab96f18186ea8dbd555834f2a5ab
SHA512 3184bfa1b67b58a23ef5543058d04c8e7c602b66f9673a1a0408d5ff4f8465215f458c0f9ec93ad84867f5b8ef1e135b3e0a30b4734b2409da4bad8a822b3d3e
TLSH
T196718E3C909B98F4E760C372B0F21EE679BD46B9E8134D8D1090E4F87A5AB6381D5C4B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 295ae04602be9ec2444481aa0e083cc042ffe46ab33d5b2ccf6a7d87d47fc010
MD5 aba86a3db6a3968a3a646bc452c73638
SHA1 cb1ac8776db5ad9a22bfe136328b7fc74d9c2c66
SHA512 e7fe3aad7935128d0b421b070f051c98efc0309180bba89b72e4f704d17d9789b881a0de04a70c1838c0df42f1e34c27e8330872a4af478b2e93f5f7ad71e64a
TLSH
T10151BEF783E9856DDB0155F0AB28BE2BCE1D0525432C3D6AC5E8EE4B93F2470E14164E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1ada3eb7b3ae34197d5dc6b701dc32015a263736199312c39cf989f56f9fcfa6
MD5 241afe1a9972eaef8806b8ba306cf77c
SHA1 8cbc4ace5d9b993c33aaeb5b6e492966c66d8888
SHA512 beb984c6ef70b755220c1a3c2fd4bbe50de5b8a1a417a2a5d3c37b815347a1903d9a65ed0c16124c6f73aee748629930366ca820b1e9c28f7dee5e90df847d96
SSDEEP 192:sxZXyRNyMqZjK1Ml8UQ9k2B/fEsiMuo4qgmjzodp7pHW6+WN5IOl/YXxhSotmIgP:sxZimqWI/fEsi7F1Hb5L/g4vH
TLSH
T15D62FA166A38997BCCD7D209FA457F93D2F9447392904E489AFC9B0C04E7ADD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7c845e685817bcbab7272d865d315564d5db47a6487673d8ef7924fe73dcd064
MD5 9e6972f3fcb91e94ca4cc4cc0fc0c0f4
SHA1 d0088b3c258ae75efe7510e7d6edd6be07d04306
SHA512 32afd60bfc826480caa8edbde57d5f769472ed74b1aad630f37c097520fcc8974312820507f6528f02aac035d036141fada551a48734fd6af96f6e18b1e1780a
SSDEEP 192:sxZXyRNyMqZjK1Ml8Mk2B/fEs3Suo4qgmjzodp7pHW6+WN5IOl/YXxrSoCmIgj9J:sxZimMI/fEs3JF1Hb5L/g3jH
TLSH
T10262FA166A38997BCCD7D209FA457F93D3F9446392904E489AFC9B0C44E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 33a391965bb825fae1d2497f21874e02decd5b8ff9cdf8aebc5e72f48bfeb07a
MD5 f507ff5bd5c06654fcd9e4a6ca28d6b2
SHA1 a6187c5652047c7037e91a584b1ca96d7dade399
SHA512 3e724b626826c7c781641fa2a424bc9a18388d5a8173091a2139547486c15caa5137487bd38922f981006881decfd8ac7a5b0db4c5c85de6a406a6263478b5dd
SSDEEP 768:/Zk4PXDWvXt4h8F1+UoAYDCx9Tuqh0VfUC9xbog/OViiLl42vJ4roWpN1Z4STU:/Zk4PXDWvXt4hu1jaHiL+QJDWpah
TLSH
T1D0D21B3F680CCB7E4F844E5CEC26AF966ED801CB66988D4447FA494C03C77EB521A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 4aa47496355a8e703ee4c7600fbfecb84e38389c7c7e698a6db05f56d6adf339
MD5 dea67c9717f2f48df112de382d7287ac
SHA1 aba4585afe857045f5b480e8872402c8ebc04b78
SHA512 ce045ca75439d89efd2d85d00f93b56c1f1e3ce38c49666630d77d8c39ccfe6695e78729e0d0c6f5e774c0823ea325e464857ae0bfaaf314ec48c1375b0d9d0c
SSDEEP 192:EtjGz7Y1/St59NZp1ZVzDqHgnmz3th9AZkzPr1PVIfPU1Otv4:EJGnYNSv9PpHV/qjwl4
TLSH
T12EB21B17313A03423CBE2918A2A696779E4231B33019E6BF77A904764E67E124DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 0c6fa5a5a102825ee3a096fa06862f8be9be9df4bf17005dcead26d9a02e487e
MD5 86479bfc36ba14e82717de4ec3db1461
SHA1 0ac0de30f928c0835aa674371b7dc4664528b7a2
SHA512 4d73453697bca95cbab07cc7cf2ef856d03c694ba62a97ac0c980cac3d9903fb5453d3c6e4c1cb08bc2b5c2cb9a05a9040fb3593ffbf514672ee25415a6bd91a
SSDEEP 384:nsiF1tNn/s3n9SQR3sNE8TUNTUlI4kMzoNmYFSNTwBfgViXcReQHmOObjI9G6w7r:XF1j+9937wgmhhViXceQHm29Mr
TLSH
T17AD24B32D865CAB7ADE74AD9B74A3A47DEE052A7868C5AC8DADC5E0D00D71DC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 8ce2e26194cb3742235223b3a76af89835269beeabcca5a620057a64c21dd6a1
MD5 d92bca208986172de30435ac66d42c43
SHA1 fcf724104e4a3aa3f157cfb4b5d7bc8ef0c4f69e
SHA512 b8631a047a73e098fc59fc16670772a6a10970bb1d56376148a64c04ff50ea3813b86d1097b2aac9d9ceb483e0aefae451aa562148ccb5e5cf3421f0ecb9e612
SSDEEP 384:nhiF1tNn/s3n9SkMR3sNE8TUNTUlI4kMzoNmYF8NTwBfgViXcRa9mOObjI9G6w7r:IF1j+9Q37wgmPhViXca9m29Mr
TLSH
T1A6E2D5F198D78976E89E4B97673E2E069AFCC157B5881988F7D81D0CCC871BFC206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 5333738e3a774f5964fb3a51fb12fa8f435f1df8599e59a585b59a37b2cadc55
MD5 563d3334616b4e4689303e3841592d37
SHA1 5b2412b8a0396a9d577af422bf5e4711b267e892
SHA512 6bb500fc6433bd0437ddc68caeb496c439a21dd6671663b249278bd5274792a2230dad2dab2c0fa445bdeb0175fffa9e812c8481eb0ae5240e480ee068edf052
SSDEEP 384:nmaiF9CcmyWCs3sNM8TUNTUlImkrzoNmfw5vwBfgViqQ1r6HhkP+lFYS/11lDHyB:mRFccps33wglsNViqQ1MhkoFYS/5u
TLSH
T130B25C31DC98CEBBEDE74F8AA74A7A47DEE012A7859859C8DAD81E1D00C719D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 9866485219fa74e127c3b67ac0e3dd967a565dc7212c48d5d2ff34ea6aceaf12
MD5 a4e0b6bda84a3bf1765634e40a9b146a
SHA1 4694cc1d82239feb671f867b73152b7109cf19e1
SHA512 8321355b851195e0121710314acddfad1f05171606127f40d8d9b62096f98e86fead852a2747873cba8687dcf7b1ebbc2c26384fbd406fd7518059a0f7df49c4
SSDEEP 384:nMiF1tNn/s3n9SQR3sNE8TUNTUlI4kMzoNmYbSNTwBfgViXcReQHmOObjI9G6w7r:3F1j+9937wgm/hViXceQHm29Mr
TLSH
T1A4D24C32D865CAB7ADE74AD9B74A3A47DEE052A7868C5AC8DADC5E0D00D71DC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c61fbfd4d8984ed7121d538f83763207bdf9bbbb2967fa34bb4a9b286f64b9ee
MD5 646efb5f44d25c2605b352b74f942f7c
SHA1 a6d215b1212ba7a14a8fd1eb32d6268f92bd67e4
SHA512 8fd3872d1a094aef7a534dbf05b04b7c1d63ff267c26a0c1368b59df78c0e7c0390ae4e4e4ada3d261e224e43ed66fcc9beb5bafe2e6006e22c3263a037f4e95
SSDEEP 384:naiF9CcmyWCs3sNQ8TUNTUlImkrzoNm205gwBfgViXcReQ6mhkP+lFYS/11lDHyB:RFccps3Lwglj8ViXceQ6mhkoFYS/5u
TLSH
T13EC24B32DC94C9BBECE64BDAA74A7A47DEE05263C68C99D4DADC1D1C00DB1DC130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6bfc44e3812e7cefae5bd45909435342151110640d2a57424e2fa8a66a109211
MD5 6082bdb4a538c57e8409435d0ce6a961
SHA1 62a7b47c896249e93af551b75d39f20e94aed2fe
SHA512 2573c2743d08d15b245572fbd4b4d7f99c1532f0956b72079c494c9b229e8f9a0ea3eef90280dca55094f58b5a46ee3e5ba70727de8c469c96d433ba30bc7cb7
TLSH
T162411B58BAFA1158B3B36F5A9BF6686E487E7D772F46D05D00110E4F0A63A01CD61B33
MD5 SHA1 SHA512 TLSH

Submit Download