hxxps://wyv[.]gg/ | Triage™

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://wyv.gg/
Sample260727-bblkdagg78

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295875086566600"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{67BEDD5C-DA43-4E4D-A123-BD5B055D20B0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
208	msedge.exe
208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 2932	2284	msedge.exe	85
PID 2284 wrote to memory of 2648	2284	msedge.exe	86
PID 2284 wrote to memory of 1576	2284	msedge.exe	87
PID 2284 wrote to memory of 1576	2284	msedge.exe	87
PID 2284 wrote to memory of 4888	2284	msedge.exe	88
PID 2284 wrote to memory of 4888	2284	msedge.exe	88
PID 2284 wrote to memory of 4888	2284	msedge.exe	88
PID 2284 wrote to memory of 3000	2284	msedge.exe	90
PID 2284 wrote to memory of 3000	2284	msedge.exe	90
PID 2284 wrote to memory of 3000	2284	msedge.exe	90
PID 2284 wrote to memory of 4200	2284	msedge.exe	91
PID 2284 wrote to memory of 4200	2284	msedge.exe	91
PID 2284 wrote to memory of 4200	2284	msedge.exe	91
PID 2284 wrote to memory of 2788	2284	msedge.exe	92
PID 2284 wrote to memory of 2788	2284	msedge.exe	92
PID 2284 wrote to memory of 2788	2284	msedge.exe	92
PID 2284 wrote to memory of 2424	2284	msedge.exe	93
PID 2284 wrote to memory of 2424	2284	msedge.exe	93
PID 2284 wrote to memory of 2424	2284	msedge.exe	93
PID 2284 wrote to memory of 1220	2284	msedge.exe	96
PID 2284 wrote to memory of 1220	2284	msedge.exe	96
PID 2284 wrote to memory of 4444	2284	msedge.exe	97
PID 2284 wrote to memory of 4444	2284	msedge.exe	97
PID 2284 wrote to memory of 4152	2284	msedge.exe	99
PID 2284 wrote to memory of 1904	2284	msedge.exe	110
PID 2284 wrote to memory of 4844	2284	msedge.exe	111
PID 2284 wrote to memory of 4584	2284	msedge.exe	112
PID 2284 wrote to memory of 808	2284	msedge.exe	114
PID 2284 wrote to memory of 808	2284	msedge.exe	114
PID 2284 wrote to memory of 4740	2284	msedge.exe	116
PID 2284 wrote to memory of 4740	2284	msedge.exe	116
PID 2284 wrote to memory of 208	2284	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://wyv.gg/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffab253c188,0x7ffab253c194,0x7ffab253c1a0
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,6130106606874183032,6451066218114282596,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,5300329270084105015,16043413297042081377,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,3587456946063945593,18260395128109586299,262144 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3312,i,7312089814920052487,3158861785670588785,2097152 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3308,i,11706276092847209280,3965155289469302420,2097152 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,3755202231083157629,11701921285989294802,2097152 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,5354133289531376508,6734164894109422316,2097152 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,12901346580218959287,2186073187673219074,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,10193421832888486101,5202724025161629965,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,2296677513190808261,5631270402808891652,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,2296677513190808261,5631270402808891652,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,2536443689902869815,11408584867164367327,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14305133129621456648,161994027212319508,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,16510876901010303143,4775284238835425407,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,6306706587224381672,8007819184642754580,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,14528506591013409533,7548326370687613857,524288 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=744,i,6923701433655662324,15770589310797598376,262144 --field-trial-handle=2468,i,11692530445054567059,1027043632331907128,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0ffa96930c76c0b587b273ff2c76b802e8db30fa748fef2dd70e760af3aa45a9
MD5 080e831e4f6547d0348def81ccb4c5ec
SHA1 99305d6b79dfbb15e81caef042864ea70ffe838a
SHA512 ffa157d8048221d086df1cf5b1db83c66f7d7af28934238f21203a2248a906d3af0ac1f36da68deb83dc010acd80d65aa80dcb0eeef908eae6f1c327caabd15b
TLSH
T18D7140E015164993EF1C8EB0E4F121A2B478B7B38AC75FCE01500BBFE69A7964D5B718
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c927.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c927.TMP
Size 3KB
SHA256 f11ce6183ec59ed8f2b20e40faeec8453eb28cdad0f89899ed35514d6d6d979b
MD5 4bc4459b063e0e1930a62fd8f9d7deec
SHA1 2a410d91b1119d234f8f22428580ab994d245ced
SHA512 d0d6803483e72407eed0cf0a1409be76ea766f6088e79609e44d113868d9327cf14726dee5031fd9d23c4fb01932a94422fd036d9bca64f18d07788bc0bc1655
TLSH
T1D7612AE405028993EF2D8DB0D4B21272B470B7B68AC70FCD01501BBFE69A7264D57718
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 97a4b4dc3987e82cc6a88e1710f250cfe37b078d6d86a1d6763a0caa190c59eb
MD5 1e1da13eda962c27ccb921e4f4cd384f
SHA1 83a5ae8e435be47e153e40f9fb8317b87d292bc0
SHA512 afe14bb89a76cb054e25a37c7d19d1f042dfe075ebe5070bc33ed39a61e895a3993b1f005920c76fc95b4220f55aaab2c6635a22432584c0f3951e6f6959599a
TLSH
T1EB51CEF7C3E5456ECA019AF0EA54BE17CE5D0A1643693D4A85D4AF0BA3F3870E28194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2a9498986f61fa752fe8bffeb913a096fd0f2ff7452e07f29ee0f467095882a1
MD5 066c4cc01ed5e38231d7bf76a015379d
SHA1 85b5b027436881d6f644af62cdd5f5d12a5698f5
SHA512 580f36e377e7fd3e84cef33cd43bc21fede14e14abf32be39212fef4c1100e5a70a79fd4791c1658e2a63cec053058d3f2db84c4cb5094722ef81337830105d7
SSDEEP 192:sxZXRAyM/jK1Ml8MkX/fNsr3DsIdpNFHW6+WNio+/YLpNt+LIgrJ:sxZX2MX/fNsr3D13Hbw/Ye9
TLSH
T15D52E8166A34597BCCDBD209FA55BB53D6F54472E2900E84A9FCCA0C04E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7a7bba21506b438d09ef9aaddef778d4cb232d447737d63d34f0a9d433ced4b7
MD5 24299984b9d890061276db8e3b08c1ba
SHA1 643c508da7f4badf94917842b1a94afc62f2ba36
SHA512 e6de903bd8d155e030301972c0d3b3ef20b2d65f166c70be0015d5327d21b4928d441e72dc965b84a5faa50a663dec3a139230b7c70409a6eb13043b478ba07e
SSDEEP 192:sxZXRAyM/jK1Ml8UQDkX/fNsy3NsIdp7FHW6+WNiaJZYLOUr+LIg5sJ:sxZX2qoX/fNsy3N1xHbNZSe+
TLSH
T1ED52D8166A34597BCCDBD209B955BB53D6F54472D2900E88A9FCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7488051efef9c939b633ea8ff97d71aa7e7c01fcf757237d12d492e5a2593bf2
MD5 6dd4a29365b573026bf628b2543bb7d9
SHA1 adabdc13c28f09730e09ebd18e5827565ab23490
SHA512 69e8971f6e73214ea01d30d5c0da72855c375323f63fc3a5d5330c14bdd47c7b164b45ab44234a647c5d5b4fa874a5454cddde2b88fbff8e80b24cbf80e96fb4
SSDEEP 768:2Us6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN9ro0p:2Us6pD1WvxzWju1jahILIsN20p
TLSH
T160D2EA3B680CCB7E4F841E5CAC2A6F967DD801CBAB98899447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 abbd37476ded9637fc49dd9cbe5f0b4285a7579c898977bae099e98a3ec4ef39
MD5 ca6f9deccbb38f7f71c62d3b4f02ceee
SHA1 6bea8c9e832a4e7e64b70684c3c02bda63512e9a
SHA512 e9f7da417a6cb2d7c707ab0d69004c22d29a01de449f6f2342838df7ed8ffa0893074ded0d2ca9c7c12b95be18ea1ecf5db677f857a3c7f32fb09388a9b6fd95
SSDEEP 96:KUAAKtePW7iKEM+qCZ67g86wQx5cpszExKL4zaxviqREQSKkwKZi61w:iihRJ67g86wQvcpgE24zaBiqREQSno
TLSH
T191E1F82672BA13023D7E194C83D497678AC172937464A42B3BAC04B6CD57E21CEFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 02530ef96940d095fafdc0c5896aceaf21a0eb5907044ada80006ddf5d4d7f42
MD5 5445e0bf6e6aab599443d0c939aee7b2
SHA1 4bec6a8078cd93dd269ec3ad0e2e5a0bc47890e9
SHA512 c90fde2a7d7856d4ef107ba94a687823ec38d0391ac5ee3de6269faa4814d6c411cc4e43f9fc06a792142d87a4f6ea2bdf13268fd607d36b5c79193b3605e354
SSDEEP 384:9ZcIhsNRUpTcNwca9xO7glzJrVRvOObjI9G6w7hH:lhzFDO7g9hVd29MhH
TLSH
T1B0926D366C389D7769A39541F98A35278FF9803BD6D52F80D1EDAF0D01DB9AC130681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 8fddfc5ad881df3d18d4b2f78b16a22eab4ff894a8a48711ecd40cb4dd3b1159
MD5 6ac5c43c20eeaf3026d3d3824ffb71f3
SHA1 c6beb0d2e04f0c4468bd8fc1822e85eb32196bbe
SHA512 9db8eb789538c8ef172c52dc3622c114485ae3b9b46627dcf4405da46a144b24c3538a4bbc308b9de7840ac0298fbd17d214256e410efce52b4690ebbf976c22
SSDEEP 384:OZcIzzsNRUkTcNqca9xO7glzJriRvOObjI9G6w7hH:sXcFDO7g9hid29MhH
TLSH
T125C229F268E74836D5AE5303B7BE2D174EBDC027B6941A40B3D99A0CCD9657FD306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b907d477fd3a4cee778f79ac53b26a2ebf9ec22df535c79c6272392cee9fa80d
MD5 8cbc1bc06d08be21b2c5629512b97b88
SHA1 c225650b4896b5c492d76665bea1156726efc7fb
SHA512 7f6744a7b0e7a5c4e931a0691e0f94a87dc6e8d38da7ddf9875ffd1b42a892076740b08b5fe1b6cb405b8ae9cd10c8d8daa844329b5ffd9608409a348172ed45
SSDEEP 192:0ONT6O7+3MQmiUyepMttb0gO2VogHF0SJrNCcN5qBevU6:0ONT6qtMt9xO7glzJr1RvU6
TLSH
T1DC121B3678689C775EE2A545F98735178FA9412BDE866F80D1DC1E0C01EF66C2346C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d31abd42c107a1f2464af177ddc8940607febb05681c51225137d5129aee17e
MD5 bd4d67311490849391e0a742c7d1bb11
SHA1 ea20f4119c83fb1dc9f2ca454e0f3999aac973ce
SHA512 ad873759ff2279849a10c340dcc0adae35938c61b88618bc364037218df3e9556e4140441a2642cc0bb759e547af85f220a40dc2fdb25ca8951d45262ce4e3de
SSDEEP 192:qONx6O7+3hQmiUy3pGttb0gO2VoIgGBmU6:qONx61iGt9xO7+YU6
TLSH
T14F02E7397D686CB75EF2AD46F98737239FA9103BE9922F40D6E81E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e96cc5fd935754f78a0e6a46bc1ef0ffcde81c05b1c15814090ceed799d26a42
MD5 8b52318435b29af4ade333c83988471b
SHA1 4325a1bd77e2a59943de9ff43553205bce9d9e89
SHA512 f4794b2126b30b0591350343cacf168c0b72f31f347374d09a36d170ddbf1636589de5d983123b0efeca479dc0c4d380d121a125a094bff8d97bce50d4025183
SSDEEP 384:GZcIhsNRUkTcNwca9xO7glzJrVRvOObjI9G6w7hH:UhOFDO7g9hVd29MhH
TLSH
T1E1927D366C389D7759A39501F98A35278FF9803BD7D91F80D1EDAF0D01DB9AC170681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34c1fcff-66ec-4884-9925-534882804fb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\34c1fcff-66ec-4884-9925-534882804fb6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4df4dc8ddeb616c836a39d95d0ebf3a7f6a6586308b62546db12279c76406fe2
MD5 daf8d4bd565246193afdf93d6d664646
SHA1 e3ec4cfce9e211efd7a594859a0b3392ebfbd9b1
SHA512 cdc805f1a52d09be51cbe163e79a668d0e6ea686eb2976709be2ebd9c409e7e762338d757364a2fdf4668355de41d953b91bf8521fed345d945f507d56cafa59
TLSH
T1D0412858B6F91148B3B36E5AABF2A86D48BFBD771F0AD05D00110E4E0A26A40CD72737
MD5 SHA1 SHA512 TLSH

Submit Download