hxxps://snap[.]licdn[.]com/

Analysis

user interaction
yes
max time kernel
149s
max time network
125s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/09/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://snap.licdn.com/
Sample260930-vmfytadf46

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3116	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{89411D7E-78AD-4229-9A1A-16E0A1388B12}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
916	msedge.exe
916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 3732 wrote to memory of 5048	3732	msedge.exe	80
PID 3732 wrote to memory of 3116	3732	msedge.exe	82
PID 3732 wrote to memory of 3552	3732	msedge.exe	83
PID 3732 wrote to memory of 3552	3732	msedge.exe	83
PID 3732 wrote to memory of 3552	3732	msedge.exe	83
PID 3732 wrote to memory of 5200	3732	msedge.exe	84
PID 3732 wrote to memory of 5200	3732	msedge.exe	84
PID 3732 wrote to memory of 4428	3732	msedge.exe	85
PID 3732 wrote to memory of 4428	3732	msedge.exe	85
PID 3732 wrote to memory of 4428	3732	msedge.exe	85
PID 3732 wrote to memory of 1324	3732	msedge.exe	86
PID 3732 wrote to memory of 1324	3732	msedge.exe	86
PID 3732 wrote to memory of 1324	3732	msedge.exe	86
PID 3732 wrote to memory of 6112	3732	msedge.exe	88
PID 3732 wrote to memory of 6112	3732	msedge.exe	88
PID 3732 wrote to memory of 764	3732	msedge.exe	89
PID 3732 wrote to memory of 764	3732	msedge.exe	89
PID 3732 wrote to memory of 2392	3732	msedge.exe	91
PID 3732 wrote to memory of 3736	3732	msedge.exe	92
PID 2392 wrote to memory of 5000	2392	msedge.exe	93
PID 3732 wrote to memory of 2792	3732	msedge.exe	96
PID 3732 wrote to memory of 5084	3732	msedge.exe	97
PID 3732 wrote to memory of 3520	3732	msedge.exe	98
PID 3732 wrote to memory of 1784	3732	msedge.exe	99
PID 3732 wrote to memory of 1784	3732	msedge.exe	99
PID 3732 wrote to memory of 916	3732	msedge.exe	101

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://snap.licdn.com/
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ffde7b7c188,0x7ffde7b7c194,0x7ffde7b7c1a0
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,7775728432001380138,5952898517295939562,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,17285754669594577118,908989081430116543,262144 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,10871075028554636768,962949064893106320,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=1700 /prefetch:13
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13100897087143352197,10165101996105525582,2097152 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,14500037729380208344,15784271877035813267,2097152 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,14688101524259302568,8759723265519942266,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,7646780605544921379,4328605857725798399,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,3901245324543247122,14301409907322715744,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,13213827927558792579,5082274853461535122,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2392
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,3901245324543247122,14301409907322715744,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5583904080086044146,7152249993869829465,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,13720233238194960549,1904072714201627626,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3920620645861357317,6702786052192642617,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,8261265604606388601,69777926628852393,524288 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,2604755963358752472,481524355765156050,262144 --field-trial-handle=2380,i,13407832761653842392,15362323357233841339,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e34e4f32-cb70-4c41-b794-5250e8c3748f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\e34e4f32-cb70-4c41-b794-5250e8c3748f.tmp
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d06c655b2480a29ad334636f95a35c5bdce83a66295adea08a8856dcd298e39e
MD5 5dab4062f87d6ffd5dbc44ebf48fd8c6
SHA1 bffdeffc524afddf1ff9a0fbcfae676c4de6a3ac
SHA512 df19db1241309a372c6eeb5a332eb1a5cf13caf28f98f4b9727e26379c541aea8e4d6c5acea40f3adbe049e1527b086f83b2d59149638912f8c9f6d02fd77d74
TLSH
T15ED02B84A8D97104C0131437002161103F8898440906E012D0C0027E0985AD30355062
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 6edeca9c68d866084b5f737dcc915ad8edef86c935a6d9de55d7134cb52464f6
MD5 785d844dce17124a183792fc6217284f
SHA1 d76f8374dfdd7cd5a4b427b20d3336eb23a0144b
SHA512 9be4855c390229ea17efa4247a3e4ad9dd40b411d71f60d6f322b5c9f99649f422ea7989fdc38306f8da89a00fe597da9cdb537178d5689fc207cad7d70167cd
TLSH
T116F0F4A5CD21EC2B18FD0B2920655B0AF754132737C0955F3A3D420C8FB063B528AC2C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 782702b9b37785ebcb028ee181d9adaee09fba4ddacb9a81f0a70ea185b2c55b
MD5 24a73f0d928ed0df4f5dedc7880a4008
SHA1 715d3a8bc4db53f70caf478558db770a54ec2f07
SHA512 a3e8ddba04e33b4c7b2af97c5c1f0f9e6133e2cc30466276c95ae4dc4caddd8128a1cb42eb0fe41f468e8aa5084693e767ed060b675df1ebcfceaeb7951555ed
TLSH
T1C8419EF7C3E8866D890156F0A718AE1BCE1D0A14832C3D5AC8D4AF1B93F2472E241A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 88d89ab8fc8f2af481d7cc51855bbfd81dd8c790fbea8a979eb35230964c6c56
MD5 c66feac36f4c91cb4b57611556542861
SHA1 fccd72d95a7f84c7b47a79e845d0a552435038b9
SHA512 cc73843bb166b265edf8754f000f9abf0739ade43219a0c5aa867673a7f88451a4ea03c4685278ab4bc8c9d75939bac9c04cedd33eb76de3ca6fa715fcb5b6f1
SSDEEP 192:sxZCgRlFJe/fjs5qQ705RsfU9zodpXn9/W6+WN3qSXY0RyEk0KIg5gRJ:sxZCgxJe/fjs5q35/WX9/bXX5fkDab
TLSH
T12A42F9156D64E97B9CD7D219FB16BF53D2F9503291D11E48A6FC8A1C00EBADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 df08c85ea631b3a893aab4073962f13e5b8e8b54abd6b7b871c802a8f04692af
MD5 ebeb1dd4c13e85ec13a457a0bc599d88
SHA1 828bc04b4c33f0841e8191983ceb4e4c733e5192
SHA512 d6d77adfad34f83b3eca14e175d9ecc0a7ebece48bbff3e0a867443f85b0ae4c554a1d5196f9cbad27d9d1f74b5b9b04210c76131e2f56212e2000a579aa9077
SSDEEP 192:sxZCgRlFJe/fjsMnQ705RsfU9zodpXn9/W6+WN3zB/Y0R9Ek0KIgjRJ:sxZCgxJe/fjsMn35/WX9/bN/58kDjb
TLSH
T1BE42E8556E64A97B9CD7D209FA16BF53E2F9503391D11E48A6FC8A1C00E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d3857a36365ed09b6bc86ded4897a3c3495363c5ba1500be668a9cc1ce60c489
MD5 8554f1da1d2fff25f397eaedf484f0f7
SHA1 7283506de1ed937cff66bde5bef802c7adc25afc
SHA512 b150e8f25c18baad17b673142b715711a53fcd2f5a62267604ef49582d26bb68e9262dc0bde7082c0d9bee77f6823c07b41f8aab88962415f9e1c6b0ba1315f4
SSDEEP 192:sxZCgRlFJe/fjs5nQ705RsfU9zodpXn9/W6+WN3qSXY0ReEk0KIg5gRJ:sxZCgxJe/fjs5n35/WX9/bXX5fkDab
TLSH
T13242E8156D64E97B9CD7D219FB16BF53E2F9503291D11E48A6FC8A1C00E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 f8c6613100e2e03836efce332c8c5b99b84085e0b6f868f5c5c9c1389626922f
MD5 95a52ada67c41eceec136ae85247798c
SHA1 7c9c88f0c0d48deba1e6e3a9fb378893d7886aa6
SHA512 2d9a23ba1dee928150d2ba9496c043c54d8589f336a29864b3e21bdb589a6ef429d58c758da0b943356dab48499438267c2ec14074ecad740916c178072435b1
SSDEEP 768:WJ6E28xO215WRmp3QX/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3fsLl/LN0Y3Zroyw:WJ6E28xO215WRmp3QX/u1jaKfsLpLKYG
TLSH
T114D20B2B740CCB7E4FC05AADDC666F976E9802C7A6688D4047FE894C02C77EA511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 88f94cf96472a49ebbf48d37f9049137f0468c98b0ffbe76777e9f7751d1839e
MD5 d1cf5463c4ad178d24dc5839d506d26e
SHA1 26a102b751fac4234cad5764861de537fad7fae4
SHA512 01b9296584a00ec3abae1825ff78257bab5dc21083ef2fb22160f44800264cb60bc05bc73595e9ee7d3d7cde9b509f76c20229e214fba3dcecf27fc4f51eacf4
SSDEEP 384:88/T0DaLz5M3cZw7YwRkwuOu72vQAYfqKfQoXCg9X:88/T0DaLz5M3cZw7YwRkwuOu72vQAYfD
TLSH
T1F0B2211171BA12153CBE290D81B49B2F564232B37119EA3B7FBD00B68E6BE441DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7a55f8b39144682c65e978f531ad8067e7698347b5c7229a5dfe8a941eb2f81b
MD5 1cdf1032b9c4a47c7ce8f6bcd0b5c2f7
SHA1 b6d138a84c82ef55baf50282d1f8303b0a2d9108
SHA512 e16cebfa7625711aa1aa0765be9c743339ee064b032ab91143a3b5b512bdb38cdc895ddec572a49f19bf684b71aaf1aa739497652da791e6a526e40e9048c906
SSDEEP 384:n17iFiZcIk38NE8TUNTUlIReQnhxoumGutzTfoBQsQ1rjK11JFVJjtgOIwZOycSe:MFQk3jwgbhlmFUBHQ1rm1pjXsUA
TLSH
T170C24C32D869CDBBACEB4A99A78A7643DEF01023D5DC9AD4E5D84D5C00971DE130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 fa2844c808f26f10441753ccb88b8975cb1b8273e288054330d142f8bcb8b0f3
MD5 52364be584e606149c9675db8a1204e1
SHA1 3ddd2cd78f1865411115ab71f41163088aa63b4d
SHA512 f15529f843f55d23627e3127da402dec39325daee4ca59624917174cf0b2a7f6883aef78f77058d33160421ba7403d8bcb8baed057ee2030d00ba9816e3c04c7
SSDEEP 384:nR7iFiZcIk38NE8TUNTUlIReQnhxMdumGutzTfoBQsQ1rjK11JFVJjtgOIwZOycr:IFQk3jwgbhdmFUBHQ1rm1pjXsUA
TLSH
T11EC24C32D869CDBBACEB4A99A78A7643DEF01023D5DC9AD4E9D84D5C00971DE130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 c40f53cb88dd925500c4843108c559016212370d505be1bb7ab74c21664ba58a
MD5 bf0fb7b9880b446b0ef5f4a06ca759b4
SHA1 4017ff75bd0244cbe4a2ca5b2ae47b3b7aafbd10
SHA512 33c01aa3a3b9186e500032d56da62f8d16356717dd0a2ec746f76c974322c389689e3bcfbfa386ec4754683cbc96efd00bbe72b1eabddc8b09fdc10f10375036
SSDEEP 384:n18iFiZcIB38NE8TUNTUlIReQnhxolmGutzTfoBQsQ1rjK11JFVAjtgOIwZOycSe:dFQB3jwgbhmmFUBHQ1rm1gjXsUA
TLSH
T1F5E292F198E789B6E8AE4B97677D6D429AFCC013B5885A84B7D44C1CCC421BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 6d11b8dac18cbbc8bedce8f74e63cda664c31a250a85d5e3a9e042577e05fed2
MD5 b9f55573e48bb74b8bcb8c070720dcfc
SHA1 4b340b6353416df23655e5ff859245fc7c2be5b2
SHA512 d894c89904cc765b7ae8b8603d9c39165f507f266ee4e58a6f06f31ae654f2d58541f93dfa5b3a20005e3ebb7a94472ffe23506d12f77ddba878f22c2e474bdc
SSDEEP 384:zPiFiZcI638N08TUNTUlIxBQnhxqN9itzTfoBQsQ1rjKk6pdgL/7Izso0:OFQ63fwg2h+98UBHQ1rmk6p2z
TLSH
T1AEB23A36ECA5C9BBECEA4ED9A74A3602DEF04123D69C9AC4E5D81D1D009B1DD130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download