hxxps://streamflix[.]web[.]app/

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://streamflix.web.app/
Sample260710-sr3l9set2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1320	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281705706687534"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{98539835-EDE6-4DC0-BD24-C94573E90912}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2588	msedge.exe
2588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4128 wrote to memory of 4876	4128	msedge.exe	87
PID 4128 wrote to memory of 4148	4128	msedge.exe	88
PID 4128 wrote to memory of 1320	4128	msedge.exe	89
PID 4128 wrote to memory of 4148	4128	msedge.exe	88
PID 4128 wrote to memory of 4148	4128	msedge.exe	88
PID 4128 wrote to memory of 2204	4128	msedge.exe	90
PID 4128 wrote to memory of 2204	4128	msedge.exe	90
PID 4128 wrote to memory of 2756	4128	msedge.exe	92
PID 4128 wrote to memory of 2756	4128	msedge.exe	92
PID 4128 wrote to memory of 2756	4128	msedge.exe	92
PID 4128 wrote to memory of 5988	4128	msedge.exe	93
PID 4128 wrote to memory of 5988	4128	msedge.exe	93
PID 4128 wrote to memory of 5988	4128	msedge.exe	93
PID 4128 wrote to memory of 4408	4128	msedge.exe	94
PID 4128 wrote to memory of 4408	4128	msedge.exe	94
PID 4128 wrote to memory of 3432	4128	msedge.exe	95
PID 4128 wrote to memory of 4408	4128	msedge.exe	94
PID 4128 wrote to memory of 3432	4128	msedge.exe	95
PID 4128 wrote to memory of 3432	4128	msedge.exe	95
PID 4128 wrote to memory of 3752	4128	msedge.exe	98
PID 4128 wrote to memory of 6040	4128	msedge.exe	97
PID 4128 wrote to memory of 3752	4128	msedge.exe	98
PID 4128 wrote to memory of 6040	4128	msedge.exe	97
PID 4128 wrote to memory of 3680	4128	msedge.exe	100
PID 4128 wrote to memory of 1128	4128	msedge.exe	104
PID 4128 wrote to memory of 2200	4128	msedge.exe	105
PID 4128 wrote to memory of 3444	4128	msedge.exe	106
PID 4128 wrote to memory of 2600	4128	msedge.exe	107
PID 4128 wrote to memory of 2600	4128	msedge.exe	107
PID 4128 wrote to memory of 2588	4128	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://streamflix.web.app/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe4fa6c188,0x7ffe4fa6c194,0x7ffe4fa6c1a0
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,9338031798932017025,9539781803942260732,262144 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,10241601780018761892,1162346058578018353,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,5338208745218521733,8774967482105555319,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:13
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,206647427600973508,5871690780588823337,2097152 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,3581390788757333334,10679495955689556682,2097152 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,9422788654881627412,12164961992950667525,2097152 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:9
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,2710850488540582562,2732040497734977407,2097152 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,3440988342961250041,12665742875777096202,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,1129123950277013442,11742420748106017395,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,8863682977467152076,2057906509519003475,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,8863682977467152076,2057906509519003475,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,6886516452483315136,15135609571771611207,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,4264369096079829482,7545085771600122262,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,12054223439586994960,11915870699110890118,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,11343114332771064983,817376970896934371,524288 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,4853523280743662458,1041211853028805220,262144 --field-trial-handle=2352,i,13435331434516594525,11254890241244061395,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3dc952eae31fca9eb6138fce1f9ef4a6fe413e73cc7357a197318ef75328dddc
MD5 08333d2539a1c66d1c87920717d85d82
SHA1 a9708fde52cf235dd3c90ac955eead8c820077a5
SHA512 fc215af675f9b015b1fde810317d646495de9cc6ab301bb4f862d441bd219002027beb77719fb567da14e9febf9d7e526a4fd43949c20fab8eda8b55692899af
TLSH
T1305130498BA51BE3F36018F594EB44ADBAF0E1E900076F2A63E17DF4860EF4A11D20D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5973ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5973ee.TMP
Size 2KB
SHA256 9d5cca3ec0106fae7cc5f97c3ea586ea03485a2c91932fd46df5a9b89d5c58c8
MD5 8a9e6470525c79a46b3217705f47a68c
SHA1 b6b73e89093561dec51d310a531a4465a1a04254
SHA512 b4d1648749dd059d360a1b9efcc4e880ec2b1e08361ddffce319d9d5f54bbefea2fcd1f17847da6e0d4a953d0760ba040bed962b6dc5122eead8d2865ff5b794
TLSH
T15A512B588BA65BD3F36058F1D5EA84ADBBE0E1E900076B1A53E13DF8490AF0920D21D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52b490c9-ce14-495f-acc0-6fdaa6959642.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\52b490c9-ce14-495f-acc0-6fdaa6959642.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 25e75d51530cde869b82fe100d64e06bdfdd56b882a478e37eca96616f529f8b
MD5 37bbc3609f9402bd9f38cece0350a150
SHA1 ea0a3423ee7e8948eb8c783b3281679f3dca25c3
SHA512 094225d3917550f3f48069328263af84325ebfc938b716234622c52301ec63dcdb4372d2718aca26e1f5701679d4fea6f59ff4f123a2fb01eed021d365a6149e
TLSH
T1C161DEF7C3E9852DDA1155F0AB187E1BCE1D0925832C3C6AC4E4EE5BA3F2871E14164E
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4fff1d68dd92c04ef86553d74ddff05f3eeed8049457cd2eb5af712d0840253a
MD5 73f33a277362a06d79ff32a98d7229f5
SHA1 798ce0af019bca1d07b98555568cde687f302c7a
SHA512 2cfbbd98cfcff1f95877cf534201447876a27ca27c03562071c7e57f0fc088c746b30dddc0b7302972ff350d731477c31410a5fd42b34cdc4a3f36447cd03a8a
SSDEEP 192:sxRnRp1yM/jK1Ml8wbM/f8s+7ZHm2Sm7aX1zoD8pKY/g6+WN7I/Q/Y3wVL6GfIgs:sxRn7PlM/f8sQZ2jv/57l/XVRs
TLSH
T19862FB156A349D7BCCDBD209FA517F53D6F95563A2901E44AAFCCB0C40E6AEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 13ddbcfacadd1ac9e229686bf12c910f8efa517d503a9ec5e8f2643bf8b770b2
MD5 5c6255bbf5c7834fce030db35be3ea0b
SHA1 41e843c31b15d0381f1f02e9a88487fb64f4e4dd
SHA512 d814f66b4d503ce24c1d51bfb17077154234ac7aa72dee0df9537614b467aa4e854940878feeca2d0eb3e60e59870819f14497f776f908c2e28b542f727392a1
SSDEEP 192:sxRERp1yM/jK1Ml8wbM/f8sqd7ZHm2Sm7aX1zoD8pKY/g6+WN7I/Q/Y3wVL6GfI9:sxRE7PlM/f8sqtZ2jv/57l/XVR2
TLSH
T1A162FC15A6349D7BCCDBD209FA517F53D6F85563A2901E44AAFCDB0C40E66EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 40fbdea73b247864911dd86358b1e81fc6bff72ec1fbf400b41dadcacb4eb173
MD5 9d090733d5c1de782c2c43a9adcb9704
SHA1 c3e73d191d2fe1f6ffda84136e51e2c8018092e5
SHA512 7a571881fd6fd23a6b879bf03a3da64bf3b321e4fbb1a22a33d573f937ef0967266fd8c0f9dc6e8759c1670f830a2ef2cd68fe40568985492687f81ca7783730
SSDEEP 192:sxRERp1yM/jK1Ml8UQ1bM/f8sqd7SHm2Sm7aX1zoD8pcY/g6+WN7I/Q/Y3wW6GfE:sxRE7PqtM/f8sqtS2jd/57l/XCE
TLSH
T1FE62EA16A6249D7BDCDBD209F951BF93D6F85563A2901E44AAFCCB0C00E76DD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b864ad6de4be1f4d3aa6e36f701cfc432f106cba442734fb8a72fb71574d4adc
MD5 67cb129a581327c30786f45c7c206aaa
SHA1 caae180cfc153117c4b512f0b559b96d976d7e19
SHA512 e44fab6d510174e0f4ad72e3ca356e0122f3e4e4b93e752c28654c13f0227a776da3464c6a24d953cc8924965722bf3c4e63d8b93b904c86187aa8c8a4ce930b
SSDEEP 768:GiqbvkWg0CfDs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV+MW6VroZ7il:GiqbvkWg0CfDsu1jaDF6uZ2l
TLSH
T166C21B3B640CC77E4F804EADEC26AED76D9801CB9B988D5447EA890C03C67FB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0a32891f5df8b15aacc943e78aceb6d9a00fa85d9ce77a2173350cb4d62d6e4d
MD5 434e4724ad04cda0fa8392f014c6d4b2
SHA1 b896102f851a362ccf76e129392ba8f56fe10b7b
SHA512 ef8412c5e69221b8814c5cc39c9985620343b9b2d564f7e53a033f3e74924a20b5ac74d9a2f3451796e573ff7e288be78d3479ccc986ea4e35b32b9fdead9826
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHEFw0Oy2UWS/fg8UK4Rg2Uc00/uUJqEwKa:C1i7PF/DWrwfX9mgpct1o7zsHEFw0OyZ
TLSH
T15C911851B13B02803D7D691C94A8C92BA6C274B3741DE4AA7BA915A10F67F038DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a06f6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a06f6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 ee0df4a978486f77ff5f137b8811b01bdbabb96048d64648fabf8071999e1687
MD5 71eda21d5cc54696b4891fdd7f50e3f0
SHA1 6efa94a5613b985ed7df76e8e43959198d90ab59
SHA512 bcf7152041510cba11d910b2b9c3771701f8712d914d424ac64adca3ca87c0a13cfc1f7cd3174efecf7ba9a0aa7e7c09e650d41370db36949c201d292540527d
SSDEEP 768:brv+4UNbdb3WmQc+wfZO8f466WfY66wvShCQRob9MG:bbsb93kwfXfr6WfL6wvSsb+G
TLSH
T16713C031FC689A339EE2825875477B53BEE96273C5C84788DACD5B0C06C35EE270B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2893bea8a52df1025566b008cac52df1c706e279a7db9f4a9971a5791e113d79
MD5 841389fd5a19285eef912898c51121f5
SHA1 7b0644e657c356464d57e5fd26afccb33aef6f3d
SHA512 10bfa2fbe8b79d8ef124738ae6e71031a23976feb53249aa25d57d6740a2a209b8c837a5be8aa2cf9f9097169b2ae52541db335570062146ce68aa57bd4ee75b
SSDEEP 768:wj+9h3WWQc+wfZO8f466WfY66pvShCQRob9MN:P9h3+wfXfr6WfL6pvSsb+N
TLSH
T148F2BF71EC659E338DD282987A4B2B57FEE55273C5C85A8CDACC5F0C01C36AE271B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 bbf257cded51ede26505c454b89e8124913c95ad04d2195c2fe63aa7341d7f2b
MD5 23feb7165c354574b7232fa44ebd18d9
SHA1 939aa14d334359d50516afcbb8ed787a119ecb10
SHA512 ba985093bc65a7b0b738af16440ed6c08e95402259e0a54884040a99d4519372637c2cac38297f228a289904847c64251ef346615a1a8e9e72207d96ab9bbe09
SSDEEP 768:RF1j+9M3cwgcDQc+wfZO8f466WfY66hvShCQRob9MN:w9M32wfXfr6WfL6hvSsb+N
TLSH
T160136BF298D78A32D99E475B773E2E52ADBDD163B4845648F7C85A0CCC832BFD206811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bf1d90d3d4c4a4b2a9c96ca14cf0116119af2e7ce5433d80c269ca0b3b2a0a8b
MD5 ce96f8c7249c22ebcd6e73702169f5d6
SHA1 b62ecf4464f3ef7eddd541c6981d1efc5c1d672f
SHA512 8d08630cc458cebb7fca0693d713d7aff3a9da48294e37a4844bc8e03a1141d517e45ef639630d49145038d985ca9237c7afbea51b52efdfa50720edcfe3e1b2
SSDEEP 768:Rrv+4UNbd43qMkc+wfZO8f466xvShCQtT2bwWV:RbsbO3qBwfXfr6xvSP0wO
TLSH
T13103D072E86899339EE782487646BB53BEB85273C8C54784D6CD4B0D018369F370BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download