hxxps://clearviewpublishing[.]com[:]443/wp-content/uploads/2026/07/866132106-swisseam2027banner728x90[.]png

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 11:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://clearviewpublishing.com:443/wp-content/uploads/2026/07/866132106-swisseam2027banner728x90.png
Sample260817-np4z4abb39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4332	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314401242761519"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{35D029CB-7C05-4B4A-9491-F6B10F1E87BD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2408	msedge.exe
2408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe
3576	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3576 wrote to memory of 4836	3576	msedge.exe	85
PID 3576 wrote to memory of 4332	3576	msedge.exe	86
PID 3576 wrote to memory of 4292	3576	msedge.exe	87
PID 3576 wrote to memory of 4292	3576	msedge.exe	87
PID 3576 wrote to memory of 4292	3576	msedge.exe	87
PID 3576 wrote to memory of 2372	3576	msedge.exe	88
PID 3576 wrote to memory of 2372	3576	msedge.exe	88
PID 3576 wrote to memory of 2684	3576	msedge.exe	91
PID 3576 wrote to memory of 4812	3576	msedge.exe	90
PID 3576 wrote to memory of 2684	3576	msedge.exe	91
PID 3576 wrote to memory of 2684	3576	msedge.exe	91
PID 3576 wrote to memory of 4812	3576	msedge.exe	90
PID 3576 wrote to memory of 4812	3576	msedge.exe	90
PID 3576 wrote to memory of 3412	3576	msedge.exe	92
PID 3576 wrote to memory of 4024	3576	msedge.exe	93
PID 3576 wrote to memory of 3412	3576	msedge.exe	92
PID 3576 wrote to memory of 3412	3576	msedge.exe	92
PID 3576 wrote to memory of 4024	3576	msedge.exe	93
PID 3576 wrote to memory of 4024	3576	msedge.exe	93
PID 3576 wrote to memory of 3908	3576	msedge.exe	97
PID 3576 wrote to memory of 1196	3576	msedge.exe	98
PID 3576 wrote to memory of 3908	3576	msedge.exe	97
PID 3576 wrote to memory of 1196	3576	msedge.exe	98
PID 3576 wrote to memory of 4728	3576	msedge.exe	100
PID 3576 wrote to memory of 4760	3576	msedge.exe	110
PID 3576 wrote to memory of 4140	3576	msedge.exe	111
PID 3576 wrote to memory of 3076	3576	msedge.exe	112
PID 3576 wrote to memory of 3284	3576	msedge.exe	113
PID 3576 wrote to memory of 3284	3576	msedge.exe	113
PID 3576 wrote to memory of 4120	3576	msedge.exe	114
PID 3576 wrote to memory of 4120	3576	msedge.exe	114
PID 3576 wrote to memory of 3228	3576	msedge.exe	117
PID 3576 wrote to memory of 3228	3576	msedge.exe	117
PID 3576 wrote to memory of 2408	3576	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://clearviewpublishing.com:443/wp-content/uploads/2026/07/866132106-swisseam2027banner728x90.png
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x290,0x7ff9116dc188,0x7ff9116dc194,0x7ff9116dc1a0
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,5143352353021569060,1005902657961677702,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2195737219257176423,17519144782543763545,262144 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,2269135604637549676,5529277971395591362,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,18275889564062257900,3458230635055711429,2097152 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,5984424219102971295,5331639861465879535,2097152 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,4419844586106203504,2784947931229360967,2097152 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,3758816906503791550,12637679183012198393,2097152 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16867212607052231334,9917798013853049659,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,8636517126644969756,2594508502193482722,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,13446886042076524521,6335203009676178508,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,13446886042076524521,6335203009676178508,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,14454759591850388105,1271776983989171442,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,2815743662548818804,13580139241033433973,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,18108749462145560597,17404099020587477606,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17982798371715473416,14165528741258731488,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,3796414360653150300,16131263334371221760,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,9545879249747440928,18339440433450230695,524288 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2164,i,15889621427590020391,1467217006105213792,262144 --field-trial-handle=2204,i,16880117431648527368,13622640676896785142,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a8588cddb823d8d12f36aacd51b467c9ac59720ea10ba2810fd3447648877faf
MD5 23f9fc30e5266ad705afe94b899001ad
SHA1 85022ce11bae8e6f3918133c3247ff916e45e193
SHA512 f8139a32ad10a0319290cd27df0fad7b701042560cc3f325c769b7babce6a80ef2c82fa5f0d0b578c732f18996029471f00f544cee16e1e15ea004f5b0ea459a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T1FEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

489d7a84-b477-4cd1-81af-1b8bdb59a112.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\489d7a84-b477-4cd1-81af-1b8bdb59a112.tmp
Size 30KB
SHA256 5a6296eef6de4dcda8d1129df4af0dc9745c869472ee78e0a7d51ae2592e2a43
MD5 8f3b9c3c04c2b9ca05c33494a8a9e983
SHA1 0250d3311a70e285d1a2083bca5373c3d1f9363b
SHA512 3a58ce7c9776dae64c4e5605f9b4a21dc500c115fad345db1052c18de60ba06e7c8833d7213500ac02b1e720bcf847f60f7806cb5a43fa43bea7a18fb8af0dde
SSDEEP 768:dxs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNCroChl:dxs6pD1WvxzWju1jahILIsNZMl
TLSH
T13ED2FA3B680CCB7E4F841E5CEC2AAE967DD801CBAB98895447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 0e171107cb2801aca604e309c182c1981adb614442795d03254989c38542c845
MD5 e5728eafb8dc1f78afe3dcb92091e8f0
SHA1 44502e1c54a10f460e894099656ea5b6bedfead2
SHA512 e59cf4c8bdd47571e897b90af2339b4e2513d3814e4de255971aafa4aa92d1fbeb9415b799454f37e0db26fa0a768cc57b0ed6eb05d8c3c3c49325c324e34787
SSDEEP 192:yj2ABBBBBBBBBBBBBBBBBBBBBBBBBBBBBB9LO:yj2ABBBBBBBBBBBBBBBBBBBBBBBBBBBG
TLSH
T1BDE1419282E5EA9E8F1512CB9B64635C5470370DEBDCF70813CC9DDE318F89AB4B2691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 825b2753ef1927fafa62ebc4d7a5ea7e3668bace0899774f9e4f941f84666ca5
MD5 67abbcc3eba9fd5d42b8c27db450aeb7
SHA1 e7f607bf647ee6f68ac38dbbc50c11716094fa67
SHA512 2403d008cfda485e23f7cfbc82c4c3e8346fefab8c3e41d122bf9974972f99533ce4b2705fb1d8d6f9446b3fafb3f28c34215a8724e3e760298a4bf4ac050536
TLSH
T1E7612A0A87534CE1F3701173F4AE42463B71C159FBB79E10A5E484BD772CB6D816652B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589b8f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589b8f.TMP
Size 3KB
SHA256 c111de917feaeab205e146361be1c6100b86243fc3492d74c9d8ddcc9078b8eb
MD5 4a8d8f401908b8a411202c0ad0b7942c
SHA1 8888f705c2b237985399da749dbee556a3179669
SHA512 468846f6f2972e072d0ed0f47dbb462f5a60d93ef34de848956a405280078708c23e1ae6f024c9aac9fc9fcaf2a8dd98cdfad5f6042e3c4e5a052c9a2016af5f
TLSH
T1B9612B0A87534CE1F3701173F4AE42463B71C199FBB79E1094E484BD772CB6D416551B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 aa035c92ac51a5f47049363845acdfbb6f50a0c31c6ef834ae3ac522dbbecc71
MD5 526a6e80b708b4d8347dd21e6281fc36
SHA1 a979e7936b432ad0cc4cd8be67cce420727d5a03
SHA512 1741cab063abfe31ec528ddc70c973a73e2abb12d17b13039cc42216445324c0a82c8a72be89d1d49f789eee04363f139e17df0f269648adae2f8f84a905d529
TLSH
T14311ADB383E5856ECA0157F0AA14BF2BCE2D0605432C7C15C9D4AF2B93E3075E00259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 68d9f09dc68a1b2aaf986d2186f1ce03acaa4f920dc7521e047f083f00c5a37a
MD5 09879fbc12b38ed8668f8cc3303df44c
SHA1 cb22eeeede76c26dde12c209bfa0f425d345a81e
SHA512 040ec442e26d76e9dd5a1d78fead0d546024820af58d093c1a1943c34f38984e5920c3996ac475357248a71cd704f96d2aef88fd38a77ed34468e3836c3aaa94
SSDEEP 192:sxZfRKyM/jK1Ml8Mkd/fcsxppIdpBgHW6+WNmNb/YLsm27IgrJ:sxZfAMd/fcsxpiCHbs/r9
TLSH
T1AB52F8116A34A977CCDBD209FA45BF53D6F9053296910E44AEFCCA1C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4a8ca2078b00c491d8e2a22be2bd0beb07081029abfbb4b9775dac9f0fac6daf
MD5 cc36dc7c7f0525a496845d35af06b667
SHA1 48d0893a80dcc8499cb3c97ed545ffabf84753fb
SHA512 2d9f7b3cb79d5b76ce7417edcccf777bab7894837c9c9efe276a63ac0cf9c0829372b41a2bce32172e20085a4b10374342f8bf84e97d5808b9df90db6d35c666
SSDEEP 192:sxZfRKyM/jK1Ml8UQ9kd/fcso1pIdpbgHW6+WNmNb/YL62NP7Ig5GJ:sxZfAqWd/fcso1i8Hbs/yk
TLSH
T17B52F7126A34A977CCDBE209B945BF53D6F9053296910E44ADFCCA1C00E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 fa20bf4ca23d3127f39527b0e319db4a943cbfe92724202a3f3604237af39150
MD5 eca3bd52e57a64c40bc9bf54bcd59714
SHA1 88a2471b9d7254a7872432c84e69eee4dea6ae0f
SHA512 10c1a67d1a7adab34393c8ec9cf450f859b37d5ccbdb7990fa9e02ac47b527ea4333c419867eb518d9c278826407c58b7d894b1515c7bd61200cc99d8851e7a8
SSDEEP 96:KUAAKtePGhOKy46CK8K/aMHeKIoWKqsKHq7:ii1Z3CN/U
TLSH
T156E15A4272B702123C7E690CA29987275F9277633514E42B7BA850F24E76E381DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a3c5c73-65c5-4db2-86de-d620c4e3e81a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1a3c5c73-65c5-4db2-86de-d620c4e3e81a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 90cdbcc349bdab130fcece892fb06742118c71bb98fd2143ce47f75e4aaae3d7
MD5 7d3762b006f3d3331c97854323464925
SHA1 d2cfe7015781674fc1ad2659b59d4ecdf2b85ac8
SHA512 403f287c2346b1c3ab2660dc34fccc80038ea7fcac8318cfbc4475a93b8677c0ba767c20f9b1b285445b3a4bfa5ad4d72965e9f47bfb9b7468b6ef4941ebd095
SSDEEP 384:2ZcIhsNxXTUqtJua9pd1ABxOOPrXLpe8C/PyE:khSdbIBxOi9PwyE
TLSH
T1C7928D3068786C6799F6E941F58726078FF88277EAC62B84E5FCDF0D01DA5681307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2c1c6fa1f1623fae7e38ea0bbb0b877702259d336e1a6a771bab3f84c6cabff9
MD5 5d08017dcfcf43e84a33ebc1d2258c4e
SHA1 1bbc57e368b949369d96ed71f85fa24a3d250db0
SHA512 a1600cf590e75722c59cbe7cd2f0cdff2a042dd800f17c4c8bb63f689de2083384ffe1372e590924b8bbedbddc91a4b304b929d57b351ffb7ec3da96609075c8
SSDEEP 384:ziFiZcI/sND8TUNTUlIlXTUqeJua9pd1LBxOOPrXLpe8C/PyE:eFQ/awgSdbjBxOi9PwyE
TLSH
T10BD219F258E75876D9AE9B43E77E2E078EBCC163B9815650B7D89A0CCC8607FC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ab06ebdfbfefe8bb231a5ff54d221535b37665ac0cd14c2b5061f9827834ab6a
MD5 3d8b0c59f65c88e6828ba72f416d0d41
SHA1 9dc5330764c22e5fe8d3c8511779913c3bb7a191
SHA512 ea4f0cbc439fa68dfb2e70a6bffe3e8c71aed8795ad71fcdb3f1a8b415a2c0b36a1adf6c3394dcb3b2e9210a7ba64769a1620ad5c91dbe6f7fb416c5002c8bc9
SSDEEP 192:qON66O7+3hQmiUyL9Gttb0/+Fd1DgGP5OiU6:qON661+Gt9pd1HB1U6
TLSH
T11902D83968782CA78EF2AD45F68727175FA5117BE9A62B40DAE85E0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cee006a54b8a294700fabe937afbe38cb09c859b054a79812452b0931998b004
MD5 1dc08eca84d874bbc13812b598bd74fd
SHA1 010356699253ad01818c605c27aa876fb9567538
SHA512 b6ca671f56dcfe7d1632f1eb2919231357b95e79ade2cb65e5c3951bc6b5e38e2d2079c5e54a9b1b4e1dfaa4f08de721ff38b55b48c518518cdfc1bcc42fea45
SSDEEP 384:3ZcIhsNx3TUqtJua9pd1ABxOOPrXLpe8C/PyE:/h2dbIBxOi9PwyE
TLSH
T17D928D3068786CA769F2E541F5872A078FF88277EAC62B84E5FCDF1D01DA5681307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 578a25474fba1266bbb7cd4c14cc841a290576a018d97de7ab09e625e888e3e1
MD5 94e6098a6b1d633ff238ea6aa64aab59
SHA1 68c8a4df8cb96177538690621a8d76660c7cb0fc
SHA512 53507d80ebc6909a825bab238331d2d6e5217350301835c3766df97416bb37bd07f14d6a675bc9396578b2ab1ded5045c71d43789ca95fc84a5fa6fe29d529c6
SSDEEP 192:8ONs6O7+3QQmiUyT9Uttb0/+Fd15GHcNP5GqjJU6:8ONs6KIUt9pd19BxU6
TLSH
T17A12083578786C6B4EA2A441F58736178FA5827BDE8A6B80E5EC5E1C01DF56C234A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bfe6a4f9bf99119f29d87621a8847ac6e8428a600031a17f1f65aeffed9a329c
MD5 ce5854e229a624b557d394e59ac6bc21
SHA1 39c3840cadacd638f2d52025b6f63d5953db8da9
SHA512 ea53cba6fb939e57752758671a942dbeca871914653a31b8a0d04b67d40753100f7988a1fadcc751ef78da906ed8b10be963dc033ffb3d1f1a3257f0e931c5e7
TLSH
T1C9412748B6F91148B3B76F5AABF299AD487AB8772F06945E10110E4F0A22F40DCA1737
MD5 SHA1 SHA512 TLSH

Submit Download