hxxp://anidb[.]app

Resubmissions

04/08/2026, 16:20

260804-ts28kasthw

04/08/2026, 16:17

260804-trsyhade793

Analysis

user interaction
yes
max time kernel
116s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://anidb.app
Sample260804-trsyhade79

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4396	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303338801133340"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{E3D0A1EA-084F-41AC-AAC1-6DE8667B66EA}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3504 wrote to memory of 2760	3504	msedge.exe	86
PID 3504 wrote to memory of 4396	3504	msedge.exe	87
PID 3504 wrote to memory of 2004	3504	msedge.exe	88
PID 3504 wrote to memory of 2004	3504	msedge.exe	88
PID 3504 wrote to memory of 2004	3504	msedge.exe	88
PID 3504 wrote to memory of 3632	3504	msedge.exe	90
PID 3504 wrote to memory of 3632	3504	msedge.exe	90
PID 3504 wrote to memory of 1484	3504	msedge.exe	92
PID 3504 wrote to memory of 1484	3504	msedge.exe	92
PID 3504 wrote to memory of 1484	3504	msedge.exe	92
PID 3504 wrote to memory of 1888	3504	msedge.exe	91
PID 3504 wrote to memory of 1888	3504	msedge.exe	91
PID 3504 wrote to memory of 1888	3504	msedge.exe	91
PID 3504 wrote to memory of 1080	3504	msedge.exe	93
PID 3504 wrote to memory of 1080	3504	msedge.exe	93
PID 3504 wrote to memory of 1080	3504	msedge.exe	93
PID 3504 wrote to memory of 3804	3504	msedge.exe	94
PID 3504 wrote to memory of 3804	3504	msedge.exe	94
PID 3504 wrote to memory of 3804	3504	msedge.exe	94
PID 3504 wrote to memory of 2708	3504	msedge.exe	97
PID 3504 wrote to memory of 2708	3504	msedge.exe	97
PID 3504 wrote to memory of 2708	3504	msedge.exe	97
PID 3504 wrote to memory of 4048	3504	msedge.exe	99
PID 3504 wrote to memory of 4048	3504	msedge.exe	99
PID 3504 wrote to memory of 4660	3504	msedge.exe	100
PID 3504 wrote to memory of 4660	3504	msedge.exe	100
PID 3504 wrote to memory of 5048	3504	msedge.exe	102
PID 3504 wrote to memory of 4060	3504	msedge.exe	108
PID 3504 wrote to memory of 376	3504	msedge.exe	109
PID 3504 wrote to memory of 4336	3504	msedge.exe	110
PID 3504 wrote to memory of 2756	3504	msedge.exe	120
PID 3504 wrote to memory of 2756	3504	msedge.exe	120
PID 3504 wrote to memory of 3808	3504	msedge.exe	123
PID 3504 wrote to memory of 3808	3504	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://anidb.app
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff9cc79c188,0x7ff9cc79c194,0x7ff9cc79c1a0
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,6629350729191208262,14167299985002595714,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,1464368315878976142,16892811057838638393,262144 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,18408384225952737796,749761161022146172,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,2805887199615097413,639207695351041104,2097152 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,5825492245913434845,6316253082366411227,2097152 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,14912254723710973332,14763554154130215181,2097152 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,4639158253041664846,14641320439848232525,2097152 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3912,i,17804152778985739589,17092066476679734170,2097152 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,5318808749283527299,11406565081025456234,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,6198246596385091832,2357030013553182577,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,18162568362093563015,8223569156472547892,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,18162568362093563015,8223569156472547892,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,9312472632317033906,18316197915963124553,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,293384348889623173,8301370437600740783,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,1467648232048239301,5463056742624491203,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,13991891182123649917,13166095185361220073,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,4921562447623989150,12811750308810170644,524288 --field-trial-handle=2288,i,16284827168149829131,5702697040816558519,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

7995590e-04c7-4329-a13b-8229c9b30996.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7995590e-04c7-4329-a13b-8229c9b30996.tmp
Size 10KB
SHA256 c6b594ec88755aa3e4818c6401ac6b6df6cbfc1ba3d7aacf01e786582fef6555
MD5 ee0af6bf300f6fa05a38672f70fa2b42
SHA1 5e849bf20cb514669b1d44eb6fd9181491cc4692
SHA512 8ac7e193ead35d61a3e3a8aea06eb82edb3409a0db7a685536d9e7b40ed50b38942aad8c9e362318075e14d14da97bf93c340a8c28a9d3ffdc0d62703fbfe2b6
SSDEEP 192:sxZ6RpkK/foszEEjIdpeB4HW6+WNteG1XYz+1v4DIg5sJ:sxZ6IK/foszEjY4HbUyX1oO
TLSH
T10E32D7526E28A97B8CCBD209BA55BF53E2FA503291905E5CB7FC961C04E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 23KB
SHA256 0374d029ea711cd683d9267496295ce9800c12eb1459ad516bec2aef3774f7d8
MD5 1db1395e23a1f9044b5dcc2d4d7a6cc6
SHA1 cb3c115e44da0298a5f6fe4fe9ebe01c88c251ca
SHA512 9c8153cc1f20864f8f101fb79f299edfd10ad4df1f0d19d80210b885fdcc9c1778e5b67985c684fdee22e2a5c266a5cf7124741b0d35eaa18dea52959e976178
SSDEEP 384:bHtyL8yRZ/FG0ca5c8YUnjCUpljqZq1SZl5PIL5964lpH4pHnNZPS9AU3h1xAB9l:LtS8yR94S50UjCU7jqQSCtwgpH4pH2RC
TLSH
T1C1B2E1457CB4ECA93E9561E6B63E1206E7909A857C4631D9C7BF2014424C538BE29FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 56KB
SHA256 aaa0aae98a752470c3818c18e9d95e2d83869dbe9cf74c0e669ed77303ae5dec
MD5 d147f37944f672266a873cb9065ed3f1
SHA1 21d62e8bfd94fa7df79a42009cc558bab1aebef6
SHA512 deac65e0d9acaebf8212d71b439f1e42c0ca9fc458b53a08546d2cd8d95fc7d1cb7679a70b02abe0445646774f6d000942e13171effbd7b99e7d8d4fca9dbf47
SSDEEP 1536:GxhNyD4LTHgoCBPjfkYO7OlaYU6zWr+5M:u1gJPjSKUYvCr+5M
TLSH
T1424301D7760339A3662AFB7DB9338B943F8F884884D7519F381701871B02D9ABE5156C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 73013254c14056e0651787f0210c372a1450a27b3e8da3fcc31c64b0f5bb62e2
MD5 2aad1146dd17075741c680c8f55f156e
SHA1 3c41155d51cd5b37adad7b0e5cf85130724f488b
SHA512 b88229466af8d155f13fa5a3d897c7d198f4fd9ea8e55c3ade80ffa472bdd52649d57e0d46c792dd63a67fca1de26994326728f493f3d0f10f147905de5314ee
TLSH
T16E71EA3C026243B7D76E01F193DE720D357182FAFBE32E858097AA3B5826761C148BC8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d52c02d776fa3262a05aefc63d28c7ac4c428bf34adf1b422d368a403c857789
MD5 fb681ea4fa187ccec06f5dcac562d9d8
SHA1 e6be06b78bdc40e8dee9f0f7596512ed05784614
SHA512 fe27f79d3de546e3102a0f6cbecda371a49935c58bd5e847765ec2861d964ab7a58b638aa6acbc9ea76fd04c689280a5d1050f3a0d4ec0c9be5f442ff67c0481
TLSH
T1CC81E8BC066243B7D39E01B153DE720D753193FAFBE32EA58097AA3B5816751C1587C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c204f457ab130db4aa60bfeccfc620da1d218bb606fdc67f0ab41e0d621d81f7
MD5 aa6d76e6b378efdd7d83ccf6f9e9e099
SHA1 f86affb8c075287debcfa626c8e99e396f7ea5ae
SHA512 bf3cbc946c019abb1412013a9333a4f4bfb13f8d8164c08ee60df9c299c6774cdf32c0395b1728cf11e088e9927edd5d2c230d4263a3b9f8b3515b49a8ef4623
TLSH
T115819CB7C3E6852DC92256F09B14EE1BCE5C0525432C3936C9D8AF57A3E2471E211B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 00a235c44024ed86b8ef92043a852f6fffca02f1a5377c9988fac9b4c51f0e82
MD5 30dce75b9337c20cab93c93deb427c69
SHA1 63f5284b9cd2a0a2947163291e734b7f14a2394a
SHA512 5b7b0f3f332ec857dd55050c39244b5fa226037b175b4500e03d38087b07d48921e63fe7a8402caf4b7525eafecc5f31790c66750ef6cf3d7f4f1a8278f9f3ba
SSDEEP 192:sxZ6RpkK/fosq4LjIdpeJHW6+WNtoO/Yzgt4DIgrJ:sxZ6IK/fosq4oKHb7/W9
TLSH
T1AA22D7526E38A87B8CC7D209BA15BF53D2FA503291945E5CF7FC961C04E6ACD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1b78a6066ee076350e5d9b165c710491a0eef7867c41c2c175a6b222fba5ccd3
MD5 9c0dc8e8c2b727d174b070b86b5c287f
SHA1 2cf1671e1da5534dd5a9dd185a5cbd6eb8d1caa2
SHA512 fe7814a1ed73ab1879ab7dfeb2b6e6646309c3f7fec3479f790e01f6864841961d7c9895af69da79ede56988f8c3d5b8e89172a6720ac92ca61646dc2fd89838
SSDEEP 192:sxZ6RpkK/fosz4LjIdpeJHW6+WNtoO/Yzgt4DIg5GJ:sxZ6IK/fosz4oKHb7/Wk
TLSH
T1A822D7526E38A97B8CCBD209BA55BF53D2FA503291945E5CE7FC961C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a041a80e0de5490d00961636ae74e19198224c48e50bd5fca4020f949ac7844a
MD5 086fcf6a901c2f141344a6e297a82e99
SHA1 50d6ccbd47bdaeb4cb7cd18614719cc09371f024
SHA512 b28a9bde2f4c20f191ca678d767688ee1513684fa80e6e0fc202d976d667db13a68d490545544b8c2aead18be389c2b31e952e5034c5d073772b4f487fab4dfa
SSDEEP 192:sxZ6RpkK/foszEOjIdpwZHW6+WNtTzZYzjo1DIg5sJ:sxZ6IK/foszEp0Hb5ZbO
TLSH
T1D332C7526E38A97B8CCBD209BA55BF53E6F6503291905E5CA7FC961C04E7BCD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c7a1bfcf780722b6eebb0af14a54aecdac8eb3ef00955a1abe29a61aacf0e387
MD5 e68cb2ee8c75cbb42982192e8f3614e4
SHA1 45b7dfeb864e056d60cdbec2c69dc8b0846c58dd
SHA512 f34e86c10c2efeeb7109c34f822b6bf3bf9c4f3e21ec83ff4792fc96dd98282653687cca074005f3b35f1f2169e077c0e3a0f164fcd9efbc87bcc223fffc3767
SSDEEP 192:sxZ6RpkK/foszECjIdpeOHW6+WNteG1XYz+1v4DIg5sJ:sxZ6IK/foszEV5HbUyX1oO
TLSH
T10732D6526E28A97B8CCBD209BA55BF53E6FA503291905E5CB7FC961C04E7BCD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 33038fb8639f107433372f5606ab1c8dfece25cb0d8a918d773422f0a29cab9f
MD5 a5126837f88d4e27abd22bc6961c6257
SHA1 e1153f4212122a21f6728af75ce0ec1b963930f7
SHA512 b5834fbdd34dbde097b2b9a77ad7c088ee1a9269e4ad75718bb408bbd34c3620c1d872dd6b03dba6bee2b4007f8545a3323c919b7c10e8bc2296043b6aca904d
SSDEEP 768:oyk7u70Wvqica8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBFroyTYk:oyk7u70Wvqicau1jai5LA3B+nk
TLSH
T159C2E93B740CCB7E4F801E9DAC566F977E9802C7A6948D4087FA984C02C77EA61264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 610b666d0e3dd91dca9c9914473f71763ef3325879c6898aafee83e7678b591b
MD5 c4266f6dde77641672482f9b025a3421
SHA1 6db99a4141575fe71f3a6876b3852e58c4dc85fb
SHA512 78ed30d7a28483acec0d8e29c0c68395ea7d2036d039bb38611cd99cdf72a243d71b2c80c8f48a26848efe287e4da2456c5429549ed1df25f216ccc9b68128f4
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT//I9KA8QCy9dIBKeEMAWI3Kj9:KIbCKc//iKA83GdaKeEPWoKj9
TLSH
T1A1911256317F46523CBF2D58A256C62A4E4235A33418E47F7BB810A70E6BE110EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 da0582959e961c4d739d5d3339d5c80af9975d94dbdb80535c7a21fd2623ecc2
MD5 0f24c4a4c618227430e24e2caefe8d7c
SHA1 cba25132fe3f396b416b06e4a6032720c2a96694
SHA512 a8ee32b9a8b974974e5170f8d50dc568bd4eefc15fb4d40c774efe7d87962e81b55269413ca5032c2da8a373f66133bcf4a3cc91ed156237b168989eaf3587c4
SSDEEP 384:2ZcIhsNyaZ9bVQxrdPsqI3hBeRs9JKgqijUvUQq:khGuh23hTjKgqmUS
TLSH
T1BC928D354875AA379AB2B581F08636074FF89037E7C06F68B6FDEF0D019A698131751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 38cfacd09c65041b6815df1eb84d1a9ad846621d78d677031a428f2e4c7956ce
MD5 350af11c4c1215e5d8905dfea4b57a65
SHA1 3236eaf8cc102436eba012253acc72e9f24f29eb
SHA512 54b088e1d699daf2b54aabc4f08d03da1736034c2ad9076736d7939784bc56ee5bb63b7ca102902447747c5b258097d565a1bcb3b2343306b19f025093e80a3b
SSDEEP 384:hZcIhsNyfZ9bVQxrdPsqI3hBeRs9JKgqijUvUQq:phpuh23hTjKgqmUS
TLSH
T197928C314875AA379AB2B582F08636074FF89037E7C06F68B6FDEF0D019A698131751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d12f18a2bce11e77403e8272e2a1b0b0ff101d47fa962e32cdcdb841dc255b03
MD5 0e581786d55e527e02193624066d6796
SHA1 dfaf1b4afb1b2c0ca2623a55f810cf706b809b47
SHA512 dafbb7812fd303c1e4f167f20ec91467c724919e4707219c3cc33a24fc71f139689eef4f40f3be3f64ea1ce4b0162608a8ef3efa965f41217e592f1bb4ece5e6
SSDEEP 384:/FiZcI4zsNG8TUNTUlIlfZ9bVLxrdPsqz3hBeRs9JKgqijUvUQq:/FQEfwgJhh13hTjKgqmUS
TLSH
T172C22BF148E39536D9AEA743A77D2E034EBCD067F580AA54B3D89A0CCC561BFC306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 34897b1dfc30ddcc789ae252bcc34acebcfbd496252bf8caa7905ac7b6f09b89
MD5 2f28fab5a17f4511f41fec215fb0a638
SHA1 0c587fb9b6e1a7c859145a6fb8a0f8ece62fe8ab
SHA512 512c00273e27bbb9980d0b58b2c5ed9265e6a6959e6b7ac81cffa8424b1449089d2df92142cf1944fc4bfcabf08fbecfe83fbf3303967beca54604e75b8c6a05
SSDEEP 192:KONT64BKQmiUy3qD5GBPK1B+FdGw5LGPNqtWw33rqdtyU6:KONT6eGbDUdPsqR3hU6
TLSH
T15C120935AC747C2B9EA2A541F08736075EA5513BEA84AF54F7EC6B1C01EF6AC2306417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8ca03e03bea54fee232b86490c1834b765b7aa8d7f864c99506758459395c7d0
MD5 03f8ab0f67e4bd8230eecceec8cd2474
SHA1 07b31fc5b38f28a039791b1b7820d3c48030b707
SHA512 e004c20bc92c4a3a3c5721a150cdfc035f6b8f342fbf581c2a6ded7a5685efd7ee4f3170ba6d36e25d45f7ff50048148abbd8bb67ca5e48cd05ac642cba1af32
SSDEEP 192:MONg64BAQmiUyX1qW5GBPK1B+FdGw5caD3xmCU6:MONg6eA48WUdPT3LU6
TLSH
T14502FA356C797C6B9EB2AE45F48737175FA5103BE6946B44EBE85B0C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 194d501c6598dae8672de4fa8e76eb58cb3531ffe47bf4a93499440e3b4681e5
MD5 ab708d8cfc985f49b7d15dab38d1f1fe
SHA1 63c82f5f189badb1dd76cef9b0ee66775a1bba0c
SHA512 843e57f6eed302a79cd0a8a6586594a1cc3d2a8bf94e79786c766499a3a88dbe6718593f7988ab19df65698d1a2dd5d409524163ec9d9e2c7c31d5f272561dd8
TLSH
T121E00202534000E6C115133000931F103EA28122039613058B2001691C303013D31D40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe593975.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe593975.TMP
Size 392B
SHA256 4ea3327b117ece01bb21c28f522fdae8be7f0a0569e60c60b76df70d0566f8fd
MD5 1f1aae07e63532ae3464461ea00ca244
SHA1 72dfcf7caa605918184965ef5c1a64055cf5aaa6
SHA512 62e6ce9088d3f652b24297bdf8f630f1913801de0b266f0387812e5dc6d946ae0648f82889c36c16820306aa2b9fc3c48003c0bf53b86d0910bd00666071abe8
MD5 SHA1 SHA512

Submit Download

b6ea5132-3a8e-4068-b1f9-c16880104f90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b6ea5132-3a8e-4068-b1f9-c16880104f90.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3931dd11a93c0bf5897d5a7e37cb70965d125fbf2ccdf2d95c34b999ff705ab1
MD5 82cb3f95e5418fe7c77b5120a932d4c4
SHA1 e924247eafb3fdbe3bc41eff237f298c87c05db9
SHA512 2268efda1f353385433768b4aca3aeff67cae842e91583cddbc82d9a521718ff3dee8e0ac845a012cfa2a9cc5d06cacd2016497d311f4b278c69c089339d1e16
TLSH
T172411658AAEE1148B373AF1A9BF6A4AD487F7D332E0AD45D10510D4E0A22E408961737
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads