hxxps://ifbw[.]uk/

Analysis

user interaction
yes
max time kernel
899s
max time network
800s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
12/07/2026, 05:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ifbw.uk/
Sample260712-fp66fsey8s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1216	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283062512684922"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1131776342-1023621610-2767477260-1000\{478041A7-D780-4CE7-855F-8CEE1C4E6735}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
468	msedge.exe
468	msedge.exe
468	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe
468	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 468 wrote to memory of 2724	468	msedge.exe	82
PID 468 wrote to memory of 1216	468	msedge.exe	84
PID 468 wrote to memory of 5108	468	msedge.exe	83
PID 468 wrote to memory of 5108	468	msedge.exe	83
PID 468 wrote to memory of 5108	468	msedge.exe	83
PID 468 wrote to memory of 6092	468	msedge.exe	85
PID 468 wrote to memory of 6092	468	msedge.exe	85
PID 468 wrote to memory of 996	468	msedge.exe	86
PID 468 wrote to memory of 1532	468	msedge.exe	87
PID 468 wrote to memory of 996	468	msedge.exe	86
PID 468 wrote to memory of 996	468	msedge.exe	86
PID 468 wrote to memory of 1532	468	msedge.exe	87
PID 468 wrote to memory of 1532	468	msedge.exe	87
PID 468 wrote to memory of 4876	468	msedge.exe	91
PID 468 wrote to memory of 3084	468	msedge.exe	92
PID 468 wrote to memory of 4876	468	msedge.exe	91
PID 468 wrote to memory of 3084	468	msedge.exe	92
PID 468 wrote to memory of 3668	468	msedge.exe	94
PID 468 wrote to memory of 3144	468	msedge.exe	106
PID 468 wrote to memory of 4812	468	msedge.exe	107
PID 468 wrote to memory of 576	468	msedge.exe	108
PID 468 wrote to memory of 6024	468	msedge.exe	109
PID 468 wrote to memory of 6024	468	msedge.exe	109
PID 468 wrote to memory of 4884	468	msedge.exe	110
PID 468 wrote to memory of 5444	468	msedge.exe	111
PID 468 wrote to memory of 5444	468	msedge.exe	111
PID 468 wrote to memory of 2600	468	msedge.exe	112
PID 468 wrote to memory of 2600	468	msedge.exe	112
PID 468 wrote to memory of 5824	468	msedge.exe	113
PID 468 wrote to memory of 5824	468	msedge.exe	113
PID 468 wrote to memory of 1036	468	msedge.exe	114
PID 468 wrote to memory of 1036	468	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ifbw.uk/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdeeaec188,0x7ffdeeaec194,0x7ffdeeaec1a0
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,10278211752614264100,6102850920866403599,262144 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,3110075387893474022,5073455282466781644,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,12318226251629173245,622148886542525544,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,6203019833449126976,2220777619673415375,2097152 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,4984981684851164934,15148648083369845261,2097152 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,11415910985323165382,13993512472758376162,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,17502534442879605689,18183832692277513665,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,15441016358861693447,10062509363099924354,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,15441016358861693447,10062509363099924354,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,3059694446425556445,1348159083553765462,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,15084411561087246751,10674548364461361004,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,2765853055363604654,10846682447593514337,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,9353712439135610243,7828536354739096636,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6072,i,15127279667875344382,14812885626007536040,262144 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,4884296823557097048,16807808782918669632,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,1272914969630036155,3990561631666482680,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,11103889011638978156,18041904676346121959,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,9893356760178151812,10868482668902147391,524288 --field-trial-handle=2248,i,49880161099572805,682625707323632070,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8365d8597d396643eb3cb27ae8751c52f3b1ae3e25576cd2bd50becbaaae5ffd
MD5 b16e94a14013394e81faaffb1edb0866
SHA1 095be96d92aca0f788caa8c464e88fe0093428bb
SHA512 d08bfded37a6166d23fc97a47902156684e9e48ea9630c13d74b30f201e0b1cbdefd310a06a35543c33ad6c261585c043ccdbbaf6a515ba32c8540521104e42a
TLSH
T12CD022223B4AB000E2AB4132E2228740236908A128824604A218C86C4EA00C022C22C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e4479a36b7b992bbec7177088f2e15db8dffdd7e78e85279d2c83088a29343e2
MD5 03578bb8b6e22240ff9f962052e3bfd0
SHA1 e88cfa2a99ba4cde156cb76df3c1e5e4d0f31844
SHA512 14b486114c608d9c481d03eaacc4af4e96cd2250b09e5c1fbb1fe214e6bcbd9291efe72cc52c99c5a4d7d0533399a4d773de86fc6cc9233bb147b5ebe349bec8
TLSH
T177D0C0333F4AB000E2EB4132F363C740337D04A12C824604A25CC87C4EF00C022C22C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2bd71602a798eff2694b86293dc71a911a4b4a0713d92400b3ad38e3f118fba2
MD5 240559936152344b856c80075fce31c6
SHA1 4ffcaa5e6fdaa05e7a8c935883a4e76e16fb78c6
SHA512 f96aac09807307e80ef62ec234d12187e647e2d0b271cbaab58a29de8f58de9facb553ebd045d2b3eb246378a2b9aeef9460c162d37a2c44051b07d212d45fb2
TLSH
T127E0209C56C9C35E6540B44F4154974C71B2364FD7C45E89274086C8F081591E3B2DE5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 f14af1c1fb653dea8f522105f5c2ce8be96671c4ad7e1b5aa863fe8283d8553f
MD5 011484edfc8feaa114255fd6491b2ab7
SHA1 814cbaf80dd0a3ec765b4d8bb98e4de4f9bde719
SHA512 3b12df61465dbe399924e36086c28cd12cdc594a65bbbab5858d0a18d40fbb7618db9c4a9cb223f03446331f8188a70f44a9b349f589bc3bca8da645f41871ec
TLSH
T155E0D86C5A82CDDC21A19586C0B493DF0943B557E1CD96B973D6F2DCF480A205F5709C
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ae99fdfc3fbac7deff206af98556f3993f1c3f40fe1176939f3effc93833bc8d
MD5 9683ee0effa2bfca240118d3a9a92e68
SHA1 7f5846f3cd2adc8fd0788f67733e1a66a9a4502d
SHA512 063dd8a1a4838b395fcd50939ca3e5b24ac72a8407ffd4463838b0b2ee5bb8d41938609e4216ead91f6f1a45a694113987c815ba88fb7d83f6eb6cc2fa33d737
TLSH
T194D02B9AFDEC9E5ED7E41ABD5BA5B4000A4802A2840B9B1300747EC03495AF01E25030
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cf207643268eb07c740dc9ebe1778a898c8d832725f3e84158d001a0b64bbb62
MD5 57f602f8978853e0f7c03a87c7681987
SHA1 b5a76e66806ddb42f1411480d72981ecaee40c53
SHA512 15f18ed2489ef5972a51f13793d073784769cd1ea91023a9c2bc900d5ffe31ea20353ccc1639326bd51ca7028699136f6685f97d34f61a6e4fc4f6d1f2877752
TLSH
T15FE02BAAC831AC2718FA0B5824914B45EB91175B2751C54F7B3D83098FB433742928AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 89154ab6d4a544feda391b13e6d62c794cd43809bd7a0c18c91f952c79008dbc
MD5 4268b4c16ddf9ba38f4b90d807e3084b
SHA1 cc0a292021a75654ca0ebaed9ce3a9747c3eacbc
SHA512 00abbba1efccbad94235b3fc38855ce817479dda37a7e8800ddb437c3279185f9b7a8bf47fa0d8cf1d010bb15a7422bef279aafc3562b6721259b4a43ac582d5
TLSH
T17471802BC20701F1FB43C130E5D301A1BC3A85305E579F4A2068E8B6BA17BA2F58C9C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bed6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bed6.TMP
Size 3KB
SHA256 380a7b5ae6c1dec9ebc81e7bb9cac063ef2d0a328fcffc8ae1696a82305d80ad
MD5 0da09b5d4e67c4cb86220386b7d01b22
SHA1 1e840a7fb1e4b1113ba75ea6c66618ada7e7e611
SHA512 73241821b1f5e5ad0edd5dd1c8a28d7ea803cb01368b19771a3be92ce2db96cdec7d7dbd4fe69a24bc456207f709bddc9c9424e35625652f2d73e9ce8c3b61ad
TLSH
T1AC71712AC24701F1FB43C170E5E301E5BC7AC5305D575F4A6068E8B6BA17BA2F58C9C9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 770f79af430918f153b073452ed111eea0d6321bd42bceb330d497b3dc607e20
MD5 4b82728d92f6783cd72323329e7e90ad
SHA1 436497117f843ad3d0864316998581db85f6f673
SHA512 6fe284fbc4f4102c05e5b0520b947eefbce68151816ef6f5a72ecd4b0953492f5f3637c6097dfee57c4c2d2756f35fef1888e5cdbdafe42d41a4568157a0c1fb
TLSH
T18661CEF753B1426EDA0192F0AA146E2BCF2D0055436C3D6A89E0AE5BD3E2071E141B4E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0e22b267e88b57b9e107f3d378fa90656c328cbfadaf1fb428a7277ade1d30ad
MD5 b645cbb349e97e7062a3f1b9e2eace77
SHA1 9b00532affb12c87d1f0a0c2061b095a86a0439f
SHA512 c9e1123b1708aacdd78acc413ad9a7c1f39cff1b0da434ed22b7808c6638d64df163ae215dc3059eb1d21c41dd5b4204a972f0b6b3c8a050a9a325a5d6d60e69
TLSH
T1CA61CFF383E4826EC90156F0AB147E2BCF2D0555436C3D5A89E4AF6BD3E24B1F241A4E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1456a1de1123746de9cd7f8d62e3c0f9fd8a8b3b34d65fdc21975c648352430f
MD5 b38a064997d9785a6b0b511139e4f599
SHA1 e471d568d264f668e839c4963c982a5e1f4deef3
SHA512 5e2ad3556102efd2634d52702d81b6dde6b1ad8f087eddaae000df480f5114153fd7ea6045af1b9a7edba5abceadcc23c95c3bd9b5402ca848c4359a8438e948
SSDEEP 192:sxZgRiyMqZjK1Ml8UQtkT/f/slCCZtuzodpTzHW6+WNs9Q+/YqmYy+KIg5aNYJ:sxZgLqGT/f/slCEt1nHbsj/Soi
TLSH
T1D362E9166A349D778CD7D209FA45BB93D2F9057392904E44AAFCCB0C05E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d500d6489b77fcf02f9471990c738842fb6b458f996d0f87636826b149eb8bb6
MD5 4b8d061c429a3ccaef8eea52f94ae5be
SHA1 22f8f534be6c04a8fdcc4e851c1790b881ab61a6
SHA512 07f25c09cebd4eb6308349552fc2762a32eab9bafe6fdaa94db108d2593566234031fbb83b43b343edc470384f0ad8b3ae4950ea874f04e264e98e9a36944418
SSDEEP 192:sxZgRiyMqZjK1Ml8MkT/f/smn6CZtuzodpTzHW6+WNs9Q+/YqWY7+KIgjNYJ:sxZgLMT/f/smn6Et1nHbsj/rji
TLSH
T1CB62E8166A349D778CD7D209FA45BB93D6F9153392904E489AFCCB0C05E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 767567e423e5e544174c5ca175af5c25f36d091fd8f7189458185dc1c1e75ae9
MD5 2e5cd3746e8cce5abbb5099759fed1bf
SHA1 9150814c2570bcbcae3dcb179899ffda84faf2b1
SHA512 96adc5abf2899e9f4071b0941b09dbd68c0f970893854f5201517c7672411464543a37dad974c3e908cda68563a454bfb731eef2b2d2ff13021a3c89455aed06
SSDEEP 768:+IM2tv5WvF3I/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4sLl2cNV9rolDWr8ljQ:+IM2tv5WvF3I/u1ja1sLUcV2lqr5
TLSH
T164E2E93B680CCB7E4F840E9DDC266F976ED8018BA698495487EA484C03C77EB52265DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\index-dir\the-real-index
Size 2KB
SHA256 877370f8f2181e4b7585f9b45dca3032ee265e8f7c072738fdc1ebf90733d42f
MD5 4820e8fee5fdda680ec0bcfc5c7bb2ee
SHA1 ec15181918dd5bea0b0c0ba8a93c0a84033bd7d5
SHA512 dc5b3396e464c81123f6a99bba5252ddb5bb6867b2b96add7d6609fb78e9248ef6e45e0a4855fef2f19be5d8ea6115caa74a9e5864cf2ef6389f5eb2a3fdf4b6
TLSH
T1D251D68F0D56676AD9A809B314B314A03BB0C9CC675496236CFD127678837AD1D6B398
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ce46c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\index-dir\the-real-index~RFe5ce46c.TMP
Size 2KB
SHA256 9d24ed1df900c94e4c3741854ec45402d1db203634fd20b4d34d788a951d3ac8
MD5 38186a8f42594f97d8ce8ea2d52692be
SHA1 3ab2c0198d03da3280fe435789d4e622d11ce25c
SHA512 f48fb868722e3a300d533ebe116567831b30642774c5dacdfc159cf44cd38921fe3fa8afce3eebb1634ffe768395074715f84aca33b4b3a4a1b23779242ecb72
TLSH
T1F551829E8E42463AD8D441B309D3A4A437396900971ABE5374FC9636BCE23AE3D5E2C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6f29c33f1a0b08b7241bde62335a02a4d52cf3f826676cf056be76002d423500
MD5 229dec4bc5190ab303304264d0334462
SHA1 d84bf4478ab57dee64fc619f0312f754a31fafb1
SHA512 41a1f8600f2edc6da9bb55a7de6e104cb8c79df72b155123ef739f8d3e907ac3cec86fc35284b8dc8be25b9c4e742ac4f334f281bd8f200d5a9f2f674b61acd9
TLSH
T1B7E0D8FB3DE71920ED6FC3D5283144B4864578F4CC517C4E6819AAEB20B23093456C22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9d1ed250ec816996ac5668daa521b3435ada272035ec6a885d98e0a2a1b334a8
MD5 890204ccfc0874b8f4ce815e9eb90694
SHA1 5b4450db97c7ae3ff2f20e068d087280d00be300
SHA512 a463a90f4a3c14e5c9bdd35d7c586e5a6e63167ceaf1f75621952ad05e8e30ec1919dcbd82706144f8c8b7a7b866611cb64e57b921d5eaa9bc03a46ec7adf943
SSDEEP 96:KMkAKd6OezWKEADWcKHqy6UgKhCK7+Ko8iq68K3qYKAKjai6oIKp+SaUKXquWJSE:KrFjPXY9/gfrWThFLh/DNTVllpBe
TLSH
T17DB24E56303B12023CBD2808A7D6D6779E8231B33119E6AF7BAC14664E67E125DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6a5b0241c17a0bf8f7322b089d3e60fb39af97923da8ed6a7b9e8070880e18ac
MD5 230cf08fb82cb4ff95ee2d81e85bae35
SHA1 001f50b10185cfd7f0c598f0f7db5d73782ad4db
SHA512 81f8a26943d0dd039107459173b04575b15348add83b80269ed68f857bb970c9baf6b9c6083966e1049eb3436189ecaf1b558e5cb347525403c37f12b460db1a
SSDEEP 384:nPiF1tNn/s3n9Sg3sNr8TUNTUlI4k4n7fW9smRitfCUGZQu0amJcMhWtP+9OObji:aF1j+9p3QwgImcGuqOWp+929Mq
TLSH
T1C3D25B36EC55CAABECD78AD9B34A3A47DEE0426782C85AD8D6D85E0C00D71ED4307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 f795d57a08ed427d971d3e79b1e7effbedf7d8264d765a7b70ead06ef2eadccd
MD5 0c2e4104e3e6fbe749031d35299e7f6d
SHA1 39acf157038af3b1bcd474c377baa7fd647bab7f
SHA512 d4f8e0fa4098855b35cddc382dc5171435e924eb54b079d1029d5c681cca432ad4d77d7d69b53b8f0dac46a84106aecf862b0023e8191ab0e524d628f2b7f0f0
SSDEEP 384:nziF9CcmyWCs3sND8TUNTUlImkrn7fWmsjmitfCUGZQu0amJcMhWkbOe4KV8p0pC:eFccps3MwgajdGuqOWkaI8p0pLW
TLSH
T180B25C35EC69CAABECE79FD9B74A3B03DEE0016782D899E8DAD85D0D00971DD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ca1b43ec9aeb8dff15148d86a5da34d6103983e86158315ee1e4318fbca590a6
MD5 d66ccc1116cd13f1f211566d6455690a
SHA1 7addde413bac421340574026101b85e2280dd43c
SHA512 fab48dbfd3fbd05ce576c7e7764bc0356118fe7be0717ffa05fb03af0b234590b604041649db85a8ce6fcb751ff4d5971b805b36446ddaef49e2d77455757f7e
SSDEEP 384:nJiF9CcmyWCo3sNr8TUNTUlI4kon7fWmsmRitfCUGZQu0amJcMhWtP+9e4KV8p0t:gFccpo3QwgJmcGuqOWp+9I8p0pLr
TLSH
T108C25C36EC65CA67ECD79B99B74A3603DEE0416382C89AE4DADC5E0D00DB1ED430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 231952c7c995b18446b45c070da5dc8b7c1cd3f912ef8639bc598923ff851d6e
MD5 7616bf9b5f6cd4353b3679060d0bd343
SHA1 c9498748c4e29bb6bfca124c4a2147bfd05cc54e
SHA512 d7b30149b5dd9a7d583386336218ff70c903d821dc7feb9630815a39fda5846acbf37e4cdf441b00d897615e9bd417e39df46d79cc3836a595ca4fcdee9c02a7
SSDEEP 384:n3iF9CcmyWCs3sNX8TUNTUlImkrn7fW4shSitfCUGZQu0amJcMhWtP29e4KV8p0M:yFccps3gwgQhhGuqOWp29I8p0pLW
TLSH
T148C25C36EC55CAABECD69BD9F74A3603DEE0416782C89AE4DADC5D0D00DB1ED430B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 e5de8b3aa389c96a24e50287fbcc4da7f64ffa344a1e2d6e2371a9c481f29843
MD5 31771dfc7042a6259c07b09216731f0b
SHA1 0e8a48fbd1d499aa8b7de160527853fa29981d8c
SHA512 906bced49b812614bc1189c0fb78b19bd467c3e25008ad6640450e48a9fffac5ada593374df4cb25a24707a865a244749364126528c4cf19b20284248ea2a037
SSDEEP 384:naiF1tNn/s3n9SWM3sNr8TUNTUlI4k4n7fW9sBRitfCUGZQu0amJcMhWtPi9OOb+:RF1j+9a3QwgIBcGuqOWpi929Mq
TLSH
T199E2D5F598D78A77E89E4797A37E2E069AFCC163B1885984B7C85D0CCC961BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e0798ca439d71e8343943f44f92982619a165da20db1059e0946821bbc12ba4b
MD5 a52e66ad6cc5e1a578b1094358d63e70
SHA1 d66ed05d741c2af180926017a226a6c3cb1288b3
SHA512 60fe413215f5f2e459b14029da7e7fea851348082049c0c84315a1e02a22a4672785b525c6b54052fd1df4931faac7f8106f5960e8928364e291360ed63cfb34
TLSH
T134412A98B6F91048B3B77F1AABF6B86E487FB9332F06945D00110E4E4662B40C872733
MD5 SHA1 SHA512 TLSH

Submit Download