57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055

Analysis

user interaction
yes
max time kernel
1049s
max time network
1020s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/04/2026, 03:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ferns_Installer.exe
Size 156.5MB
Sample260426-dkcpyaev4l
SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
MD5 b664d54732f9253a27f4da145fefc312
SHA1 22a22a9d33706840ffff372220e3ffc3190f7293
SHA512 84c373c827156cf755a577d5fb62f3c072216e9c28eba9a15cf77377b3e10164c56c2dcaf44b4f6a04e2b0b535c28024ff757256178fd43466d109fc044cc889
SSDEEP 3145728:huxtTxAQqlwovTG/ehtohUOkieYQDfnQFMifmmHZBT/G1vA9dEhkT+xgGO:hAxZYm/efohUOFwTnQHum3e1vA9dEhq
TLSH
T1F67833727A85A73FE67E563B08F5E71088371614F4A64C2A52D4488CCF6A0706EBF727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware google discovery installer persistence phishing spyware

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
404	Ferns_Installer.tmp
4228	unins000.exe
4124	_unins.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
298	3012	firefox.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\{79D068F5-40E4-3614-A683-E351DF40BEBD}\icon.ico	explorer.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	unins000.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	_unins.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2656	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/2288-0-0x00000000001D0000-0x00000000002D8000-memory.dmp	innosetup
behavioral1/memory/2288-10-0x00000000001D0000-0x00000000002D8000-memory.dmp	innosetup
behavioral1/memory/2288-9224-0x00000000001D0000-0x00000000002D8000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 30 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216465035967330"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-2#immutable1 = "Customize settings for the display of languages, numbers, times, and dates."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3001#immutable1 = "Sync files between your computer and network folders"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-2#immutable1 = "Recovery"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\LogicalViewMode = "2"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12122#immutable1 = "Windows Defender Firewall"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-3#immutable1 = "Region"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-102#immutable1 = "Keyboard"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\shell\open\command	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\shell\open	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\RADCUI.dll,-15301#immutable1 = "Manage your RemoteApp and Desktop Connections"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-2#immutable1 = "Check network status, change network settings and set preferences for sharing files and printers."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sdcpl.dll,-101#immutable1 = "Backup and Restore (Windows 7)"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\shell	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-1000#immutable1 = "Devices and Printers"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\GroupView = "0"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\MRUListEx = 00000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\DefaultIcon	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\accessibilitycpl.dll,-45#immutable1 = "Make your computer easier to use."	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202020202	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\{D674391B-52D9-4E07-834E-67C98610F39D}\GroupByDirection = "1"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4313#immutable1 = "Configure your Internet display and connection settings."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Ferns\\Client\\FernsLauncher.exe\" \"%1\""	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\main.cpl,-100#immutable1 = "Mouse"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-159#immutable1 = "Programs and Features"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\{D674391B-52D9-4E07-834E-67C98610F39D}\IconSize = "16"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-2#immutable1 = "Conserve energy or maximize performance by choosing how your computer manages power."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-601#immutable1 = "Indexing Options"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-51#immutable1 = "Date and Time"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\timedate.cpl,-52#immutable1 = "Set the date, time, and time zone for your computer."	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\GroupByKey:PID = "0"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\{D674391B-52D9-4E07-834E-67C98610F39D}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000050000001800000030f125b7ef471a10a5f102608c9eebac0a00000040010000904f1e8459ff164d8947e81bbffab36d02000000c0000000904f1e8459ff164d8947e81bbffab36d0b0000005000000030f125b7ef471a10a5f102608c9eebac0c00000050000000537def0c64fad111a2030000f81fedee0800000080000000	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\URL Protocol	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-602#immutable1 = "Change how Windows indexes to search faster"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4312#immutable1 = "Internet Options"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\systemcpl.dll,-2#immutable1 = "View information about your computer, and change settings for hardware, performance, and remote connections."	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\Rev = "0"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\IconSize = "48"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\{D674391B-52D9-4E07-834E-67C98610F39D}\LogicalViewMode = "1"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-10#immutable1 = "Choose which programs you want Windows to use for activities like web browsing, editing photos, sending e-mail, and playing music."	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-2#immutable1 = "Change default settings for CDs, DVDs, and devices so that you can automatically play music, view pictures, install software, and play games."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-2000#immutable1 = "View and manage devices, printers, and print jobs"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-15#immutable1 = "Troubleshoot and fix common computer problems."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-2#immutable1 = "Configure how speech recognition works on your computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-7#immutable1 = "Change advanced color management settings for displays, scanners, and printers."	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\FFlags = "18874369"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-1#immutable1 = "Phone and Modem"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-2#immutable1 = "Change user account settings and passwords for people who share this computer."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\colorcpl.exe,-6#immutable1 = "Color Management"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\NodeSlot = "9"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\ferns-launcher\shell\ = "open"	Ferns_Installer.tmp
Set value (data)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\{D674391B-52D9-4E07-834E-67C98610F39D}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-1#immutable1 = "Default Programs"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12123#immutable1 = "Set firewall security options to help protect your computer from hackers and malicious software."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-2#immutable1 = "Configure your telephone dialing rules and modem settings."	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-1#immutable1 = "Troubleshooting"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\netcenter.dll,-1#immutable1 = "Network and Sharing Center"	explorer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4588	explorer.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
404	Ferns_Installer.tmp
404	Ferns_Installer.tmp

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4588	explorer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4588	explorer.exe
Token: SeCreatePagefilePrivilege	4588	explorer.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe
Token: SeDebugPrivilege	3012	firefox.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
404	Ferns_Installer.tmp
4588	explorer.exe
4588	explorer.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
4228	unins000.exe
4124	_unins.tmp
4588	explorer.exe
2092	OpenWith.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe
3012	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 404	2288	Ferns_Installer.exe	84
PID 4588 wrote to memory of 4228	4588	explorer.exe	113
PID 4228 wrote to memory of 4124	4228	unins000.exe	115
PID 1892 wrote to memory of 4044	1892	msedge.exe	117
PID 4044 wrote to memory of 4680	4044	msedge.exe	118
PID 4044 wrote to memory of 2656	4044	msedge.exe	119
PID 4044 wrote to memory of 1980	4044	msedge.exe	120
PID 4044 wrote to memory of 1980	4044	msedge.exe	120
PID 4044 wrote to memory of 1980	4044	msedge.exe	120
PID 4044 wrote to memory of 3820	4044	msedge.exe	121
PID 4044 wrote to memory of 3820	4044	msedge.exe	121
PID 4044 wrote to memory of 3372	4044	msedge.exe	122
PID 4044 wrote to memory of 3372	4044	msedge.exe	122
PID 4044 wrote to memory of 3372	4044	msedge.exe	122
PID 4044 wrote to memory of 176	4044	msedge.exe	123
PID 4044 wrote to memory of 176	4044	msedge.exe	123
PID 4044 wrote to memory of 176	4044	msedge.exe	123
PID 4044 wrote to memory of 4564	4044	msedge.exe	125
PID 4044 wrote to memory of 4564	4044	msedge.exe	125
PID 4044 wrote to memory of 4564	4044	msedge.exe	125
PID 4044 wrote to memory of 3348	4044	msedge.exe	126
PID 4044 wrote to memory of 3348	4044	msedge.exe	126
PID 4044 wrote to memory of 3348	4044	msedge.exe	126
PID 4044 wrote to memory of 3448	4044	msedge.exe	129
PID 4044 wrote to memory of 3448	4044	msedge.exe	129
PID 4044 wrote to memory of 2968	4044	msedge.exe	130
PID 4044 wrote to memory of 2968	4044	msedge.exe	130
PID 4044 wrote to memory of 2968	4044	msedge.exe	130
PID 4044 wrote to memory of 4172	4044	msedge.exe	131
PID 4044 wrote to memory of 4172	4044	msedge.exe	131
PID 4044 wrote to memory of 1020	4044	msedge.exe	133
PID 4044 wrote to memory of 1020	4044	msedge.exe	133
PID 4044 wrote to memory of 5040	4044	msedge.exe	134
PID 4044 wrote to memory of 5040	4044	msedge.exe	134
PID 4044 wrote to memory of 3312	4044	msedge.exe	136
PID 4044 wrote to memory of 4204	4044	msedge.exe	137
PID 4044 wrote to memory of 4204	4044	msedge.exe	137
PID 4044 wrote to memory of 2044	4044	msedge.exe	138
PID 4044 wrote to memory of 2044	4044	msedge.exe	138
PID 4044 wrote to memory of 1076	4044	msedge.exe	139
PID 4044 wrote to memory of 1900	4044	msedge.exe	140
PID 4044 wrote to memory of 1076	4044	msedge.exe	139
PID 4044 wrote to memory of 1900	4044	msedge.exe	140
PID 4044 wrote to memory of 4164	4044	msedge.exe	141
PID 4044 wrote to memory of 4164	4044	msedge.exe	141
PID 4044 wrote to memory of 4528	4044	msedge.exe	142
PID 4044 wrote to memory of 4528	4044	msedge.exe	142
PID 4044 wrote to memory of 4528	4044	msedge.exe	142
PID 5660 wrote to memory of 3012	5660	firefox.exe	147
PID 5660 wrote to memory of 3012	5660	firefox.exe	147
PID 3012 wrote to memory of 4384	3012	firefox.exe	148
PID 3012 wrote to memory of 4384	3012	firefox.exe	148
PID 3012 wrote to memory of 4384	3012	firefox.exe	148
PID 3012 wrote to memory of 2504	3012	firefox.exe	149
PID 3012 wrote to memory of 2504	3012	firefox.exe	149
PID 3012 wrote to memory of 2504	3012	firefox.exe	149
PID 3012 wrote to memory of 2504	3012	firefox.exe	149
PID 3012 wrote to memory of 3312	3012	firefox.exe	150
PID 3012 wrote to memory of 3312	3012	firefox.exe	150
PID 3012 wrote to memory of 3312	3012	firefox.exe	150
PID 3012 wrote to memory of 3312	3012	firefox.exe	150
PID 3012 wrote to memory of 2604	3012	firefox.exe	151
PID 3012 wrote to memory of 2604	3012	firefox.exe	151
PID 3012 wrote to memory of 2604	3012	firefox.exe	151

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe
"C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Users\Admin\AppData\Local\Temp\is-0J0MB5DFNX.tmp\Ferns_Installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-0J0MB5DFNX.tmp\Ferns_Installer.tmp" /SL5="$50176,162626151,1019904,C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:404

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" display.dll,ShowAdapterSettings 0
1⤵
PID:2512

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4568

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Users\Admin\AppData\Local\Ferns\Client\unins000.exe
  "C:\Users\Admin\AppData\Local\Ferns\Client\unins000.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4228
- - C:\Users\Admin\AppData\Local\Temp\is-PJJMOGEA6R-uninstall.tmp\_unins.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-PJJMOGEA6R-uninstall.tmp\_unins.tmp" /SECONDPHASE="C:\Users\Admin\AppData\Local\Ferns\Client\unins000.exe" /FIRSTPHASEWND=$1031A
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:4124

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
- System Location Discovery: System Language Discovery
PID:1772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.bing.com/search?q=ferns+version+1.0&src=IE-SearchBox&FORM=IESR4N
1⤵
- Suspicious use of WriteProcessMemory
PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://www.bing.com/search?q=ferns+version+1.0&src=IE-SearchBox&FORM=IESR4N
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x278,0x7ffe4d38c188,0x7ffe4d38c194,0x7ffe4d38c1a0
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,5902347803782672135,7244439082612470028,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,10508062378107853546,3193058557296420929,262144 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
    3⤵
    PID:1980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,8948783288852674935,1558559540940688966,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
    3⤵
    PID:3820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,18233070852914589937,5321984074425798177,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
    3⤵
    PID:3372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,478997996607678611,9291741615583400071,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,5517957796582484265,14637807498171104163,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
    3⤵
    PID:4564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,9419008910270170480,14063656822852053843,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,1399685137018464363,12644866923424821515,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
    3⤵
    PID:3448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5004,i,5251056791635820488,12279753265258933920,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
    3⤵
    PID:2968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,5945846124589689230,6451560963581815533,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
    3⤵
    PID:4172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,4011597176171922536,18405046233561461682,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
    3⤵
    PID:1020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,11814095850091618976,11413142490597731247,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:8
    3⤵
    PID:5040
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7068317174435598981,4390341734354290544,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
    3⤵
    PID:2808
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7068317174435598981,4390341734354290544,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
    3⤵
    PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,2187822721601419923,14837578471442780066,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,15583223465521036554,16958553632161906424,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
    3⤵
    PID:2044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,3673417504826313328,5715850078478332693,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
    3⤵
    PID:1076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,15266411883989804011,4476397518026168997,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
    3⤵
    PID:1900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,16154664079411297477,1356843362717764859,524288 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:8
    3⤵
    PID:4164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6488,i,4082857966291131221,11158385979914497202,2097152 --field-trial-handle=2252,i,11822989904159257625,9957176193856746737,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:1
    3⤵
    PID:4528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:964

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:2092

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5660
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Detected potential entity reuse from brand GOOGLE.
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3012
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2016 -prefsLen 27099 -prefMapHandle 2020 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {978ed200-b3c1-4b45-bf9b-5cdc1244ab1b} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {e0faf8b0-9e53-40bb-9aaa-1c78b57fefc6} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3804 -prefsLen 27276 -prefMapHandle 3808 -prefMapSize 270279 -jsInitHandle 3812 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3820 -initialChannelId {d2d21ad0-0786-49f4-abb5-9ca32210f89c} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3996 -prefsLen 27276 -prefMapHandle 4000 -prefMapSize 270279 -ipcHandle 3808 -initialChannelId {118a0f5a-1258-4a81-8beb-ac56fa6feb7e} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2604
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4404 -prefsLen 34775 -prefMapHandle 4412 -prefMapSize 270279 -jsInitHandle 4416 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4420 -initialChannelId {5246d932-19a5-4cbc-b390-b6e13a0ce8a0} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 868 -prefsLen 35012 -prefMapHandle 1156 -prefMapSize 270279 -ipcHandle 4888 -initialChannelId {adb186f4-c5c4-4feb-bbec-19d15ae3d732} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4392
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3340 -prefsLen 32952 -prefMapHandle 1644 -prefMapSize 270279 -jsInitHandle 1648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5424 -initialChannelId {59c8ad37-af0f-4ad1-9aa7-ab48ce5e5d3c} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5572 -prefsLen 32952 -prefMapHandle 5576 -prefMapSize 270279 -jsInitHandle 5580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5316 -initialChannelId {8a6394bb-0699-4708-8eb8-a20e26dadca7} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5712 -prefsLen 32952 -prefMapHandle 5716 -prefMapSize 270279 -jsInitHandle 5720 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5540 -initialChannelId {a8befe22-5ae1-4afe-84cc-0e6a5eba1e7d} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2740 -prefsLen 33071 -prefMapHandle 6152 -prefMapSize 270279 -jsInitHandle 6156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6164 -initialChannelId {606ee94f-3e12-49e9-b673-de888817451e} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5924
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4760 -prefsLen 33850 -prefMapHandle 4768 -prefMapSize 270279 -jsInitHandle 4420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6468 -initialChannelId {40c8f1dd-ef38-4d9b-8304-d247ef42f957} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3836
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6064 -prefsLen 39877 -prefMapHandle 3228 -prefMapSize 270279 -ipcHandle 6884 -initialChannelId {0c52602b-2a56-4871-85a5-431cf82c9323} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:5876
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5860 -prefsLen 36845 -prefMapHandle 5428 -prefMapSize 270279 -jsInitHandle 5440 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6060 -initialChannelId {5add4451-c43f-4f70-a494-05887c189a20} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3912
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1440 -prefsLen 36845 -prefMapHandle 6604 -prefMapSize 270279 -jsInitHandle 4324 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6568 -initialChannelId {98be9835-ee1b-4bf5-9c17-c1a8bff5ff3f} -parentPid 3012 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3012" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:5976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

is-8PFKJMSA6E.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\AppTempCommon\LuaApp\Components\is-8PFKJMSA6E.tmp
Size 93B
SHA256 2a302dfa7c7366044a28fed4ed42b4092b04c323b08ac168208b5e830a08a30d
MD5 442236bb38b92a0fa8b566a20b882796
SHA1 8439b506a927e625634dee509e43745d9102ecd2
SHA512 b63e0172f1fe5e42490505e7911f7fb56665eeeb57f37fddd36d00da13e60e91a38a31dafd7b39474022c67d0b1e4203aecfaef16690cda5cd269a62e05ecdea
TLSH
T1F1B0122379D546CFB1C40582A03005800C3410B0738C0B3A5782D400C1C59211522241
MD5 SHA1 SHA512 TLSH

Submit Download

is-SF20GJTS5Z.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\LuaSocialLibrariesDeps\is-SF20GJTS5Z.tmp
Size 277B
SHA256 7796a00b8760b7193ad3726adbc106160b94ad06be0a59472e806ea709f3f27e
MD5 3ab96f2198f6b647418085e6606da162
SHA1 8f37db1320fb417b57cfeaa8788ae8c233303d42
SHA512 7bece3b2ea3cee7270fd8d692f8c755ec43e0e67586a11b9c9b6c0cbfd0900b338c359110771abe4d959870e0e7b353fefce6a17adce5792cf9b44bdad259e07
TLSH
T1BAD0C212B7C3D32468452E8660345E23BCFDF420BB9D11C0BAA691816181ABD44661DE
MD5 SHA1 SHA512 TLSH

Submit Download

is-VF3EV5HHAD.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\is-VF3EV5HHAD.tmp
Size 941B
SHA256 e6612e0e7157bf3c3d17fbc99430cbec36626021d3dda1b0f2f2ec17ef72b521
MD5 47e4946e31331e5e6fb3ce10ad235af7
SHA1 484ac75b63adf29c470003d1e4b76c9a258ace10
SHA512 4fb11a5e7936fef13ec0f5b7ef60281979565efd829daf0a894466f3b45c99590ea2b6a52cf41540fd0d437eec5b81d49119da88ca20d4e0082abae1038b5b0f
TLSH
T1271114BEBC83B2A12C51343B847CA154E59B9A181AFC7091F9FB805D1F1805C003E7DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-LSCOO47RB1.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\is-LSCOO47RB1.tmp
Size 255B
SHA256 1d9ea87e234d7c2dfe33a497c8a2d2c31894d970c23f6ce40073efe759e15a09
MD5 6168e36d1a0d44fd7186f1920ba11edc
SHA1 89298fc630158c3378369f6512a8ea0d214a7318
SHA512 e95ff43bb1e67cdbde64418fedf75187a35bbb70f521fa0c0161a1402e70f9c1528ec73555ca4aac82ae853572708982da7199efe7a70679f473d39ed5991b41
TLSH
T125D02E03FBC3C310A8423E8AB0388921FDBDF830B70C01C0B8BA2086A14067E04EB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-PJN62VFAS8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\is-PJN62VFAS8.tmp
Size 242B
SHA256 9ad175f853d1ac7fdd48697aae9499ff562878fd98df6305d240a1b28b5f655d
MD5 c0e8e3a5e364c7a1e3a6e36803967dff
SHA1 cb9237f20cce82d212e4782d6402040be1963c34
SHA512 900bd17b16b0dbb79ce672aea5cc2134eb6217ddf6a517ea8c790675e7d08d64807aa2f5b1463ebc8383ffa5faf210255de47130cb460f5f4cc794011075bcd9
TLSH
T184D05E07FBC3D794EA422E8671285961FEBDF430765C81E0B86A409B61506BD84AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-LDXNMBI06C.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\lua-promise\is-LDXNMBI06C.tmp
Size 9KB
SHA256 5b0d1c93121221674960b7dd154c1b364448f2de922a145d93bc6d4121cae0ac
MD5 35be3a1bf8b49fae51db7338fee8e53f
SHA1 e490fd31a53726c1e6be50a0eb43236cb5cd530e
SHA512 b98ffa0ff24c7cd4c630405b7b202d504be8d6ec714396129eaa7498a34b2f59eed3e85201890a062851770ec850cd75968c0af470f29b069e153c52151f8558
SSDEEP 192:uAZ43w8lKLMprpE7tBmh46BT0Q0u2gtqtlqGc:uA23w8lKIpra7P646BT0nu2GqtlqGc
TLSH
T1FA124093FA0BB5A74C65B1B6F13F5867ED6FD410103E0684F0A48299611396CB12ACFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-UKVTSCMNYY.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roact-navigation\is-UKVTSCMNYY.tmp
Size 245B
SHA256 69563265d73a4dc6fcd8dc7037f990e50aaf7cf011e32e096ca9e4f5d97a3eca
MD5 02efc49f84e601bf434c452269708f7d
SHA1 11763c4c423be87d6b9b05127d7a610bb6a5fb65
SHA512 29f8769c16d0ac041659e7c10358423a643272f8598b9e1e28f73b48bade128eff0f5efb55fe74bf86fd2395b4df71fab2622bf1119e4c125e512ba1a2e8f635
TLSH
T1B0D02E13FBC3C310A8062E87B0284820FCBDF420B64C51C0B87A5081600226D48AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-NHDDKER9NK.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-NHDDKER9NK.tmp
Size 247B
SHA256 968e261b51780a92ed1fe2b671b9e18b436c191be1df5a81734468e1c20578d1
MD5 56e11e22899b878524535c78aeabc2b1
SHA1 64934fb0c8c5ddc36329194a0b96116c9baba70b
SHA512 3fad9842ee34cd458ce6df6eaad3bcbb5931f2e5ad2d4d24c7847eda2cabd53a246b7687049d54ceebfa9a5187094d2e9343a9d01a81fb6be2cf1364282f9207
TLSH
T100D05E1BFBC3D364A8062E96B0384922FDBDF420775D82D0F9AA518560806AD54AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-WMCADXEP28.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-WMCADXEP28.tmp
Size 242B
SHA256 ab359dd77408c471bdc9274ab4547bc4ef9c00c404f29079c1340cdc1e1d32bd
MD5 c48308430f0744a0d056760f846e5fef
SHA1 b8bca04653ad51a9dc3e00a26d6f4430d8859ad1
SHA512 3f711a1f77e7517a080043aac7c63c301b536db2bd7c82e4b1f7157da851cea52a070186458bba9d1137bd0f80763146173ca1b550a07b769d4a91463122edab
TLSH
T153D05E57FFC3D760A8022E86742A4921FDFDF4207A5D41D0BC6A5185A04066D44AB59C
MD5 SHA1 SHA512 TLSH

Submit Download

is-6L9IDN5K3U.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_cryo\cryo\Dictionary\is-6L9IDN5K3U.tmp
Size 86B
SHA256 de12d26fa3ecb2ccd974d61e81e38de0ad81fc74414d4f0ca4a836fff1aa05cb
MD5 808f4f502813536820c7931cb044d385
SHA1 cab3f72e2609f54d289dbd90456e5e26cd76877a
SHA512 67cae16e004cdedf8ea18c5cc33c9707955fc3dc53827142051907d4f730710e85458f88ed971c3d6d9e3bc2e99a90345f97f06e0d42bb3e8099c4c8d120c164
TLSH
T18EA0122CF5C19025E00733A0603F00285633E46130B04010600540D148148C45812CD4
MD5 SHA1 SHA512 TLSH

Submit Download

is-WYOQLGXQBC.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_genericpagination\is-WYOQLGXQBC.tmp
Size 239B
SHA256 40e55b76ba3d9d9d20a16c89b7d3118b67355858a43778217a8abf2a532b4408
MD5 08c7e65b5b537ec75fa622a1423d5a16
SHA1 ca469e566b90ee6cfb0ae2234533116d44dc94fa
SHA512 0cabead8a9bd01d6d657feb57d3986c48c0cae54935369c17698d537c4ad41ebe3e086fb96a3f75edabe3d4209f4c20960a291b6be8040c86203eb6cdde6f156
TLSH
T1A0D05E1BFBC3D354A8122E96B4284921FDBDF430775D51D0B96A5085604067D44BB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-5Z0QCXBCGC.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_iap-experience\is-5Z0QCXBCGC.tmp
Size 247B
SHA256 208c19d2a7b9078f39c6e05e7c6dfe4a9b5e7505e37a045670ccf5789c5f079c
MD5 5f276c095487802a612eb20c8cd67db6
SHA1 aad32229b8b6ca8e1efa87e7f7be8bf66e2b4b5d
SHA512 b9c371026590cb24a49dfb80a3a58516207837ce92ddbe24ff8143177c247d988ec7d86dc0b17ddde107095b7dd13e5a65bcf69b8c7db6cc8f15cf7a4c60ae3c
TLSH
T1B2D02B17F7C3C35064021F82B4244421FD7DF420770C02C1F9A51041500126D046B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-A1YUOIZVUS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-A1YUOIZVUS.tmp
Size 479B
SHA256 ff14bfb9735cd84f4fc42a9555591bdaf16b32db623af3749737985d909995f5
MD5 3a009d9e21ecbdffb4c35d26fb939346
SHA1 f7851f95e4f54f1ce112dce1c773881fce9bac37
SHA512 321f61986c94e37ecad4399fa0d3ae589878816278f9f4c0defc611b7a19960fd45afb50697385b86ef5aa29649b02bdd7811a6553c4403c2b6c48899fc08a6c
TLSH
T181F0A7B4B0EBE3C54511B751D4377185FCDEF8E5913EB200D18E54DCA46012DD175995
MD5 SHA1 SHA512 TLSH

Submit Download

is-O47WYYR2CY.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-O47WYYR2CY.tmp
Size 11B
SHA256 91d968cb191d306da58f037c6d77a34080f0b07153b96c0a10a10e0033591859
MD5 f397df655598796f6c6bc35a98faec0c
SHA1 6fad457643ad9bcec4a82a2ff3b9133e8ce4e4bd
SHA512 404d35b9be358fbe853b864551fcfbdde88490bb29e6e74131360c3f8d2ee7c3b90aa1852c2f5c504a331eb79bd2be51aa003a8e1ae1b105fca2b8a4b5ed2034
MD5 SHA1 SHA512

Submit Download

is-WAQSMVFTU4.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-WAQSMVFTU4.tmp
Size 763B
SHA256 5c64fba19fa8f1463161a2ae63223c53fe4b476cb11798c3b8646ee323bedde6
MD5 113044c5129d315dfa55689ec5de0033
SHA1 741eadc1f96638f67d8b6f0512b6521904fd24b6
SHA512 1a7c4def2e811ed27c88ef3f997ede1cc20092538d911db6cf1c7c6cbb573a949bf18ce1047890dd695d979bf3b32d7ad35281c920ee94993bf8c3cc09a67db3
TLSH
T1DC0197E7699204C16F2B0293C77F8E31F0396496DB34A482B0409A1CE0482FDD7AF9ED
MD5 SHA1 SHA512 TLSH

Submit Download

is-1MXKJZZX2C.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-1MXKJZZX2C.tmp
Size 112B
SHA256 4cb300623ea92cab461551982738574c1c840462a20db4f10180f3c3f704143c
MD5 e32df457834f40e36d1776da916ef889
SHA1 f15e9985b28246ccff6eda299296742b1d23e1f9
SHA512 67a5cbdaf89add5bcd12385c9bffa875d3c6a2b1f6f5b6ef54bb3506a640e7a0e7ba152cbcbef814b1bfa769d4a7251295ea18bcc66d32a1ad9247d2358bc9d0
TLSH
T11BB092B3A8C7B1839220FBC3C938CB01AB8182B0B42F023E5C09964880B2A80C66A410
MD5 SHA1 SHA512 TLSH

Submit Download

is-MNP3Z5BZAH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-MNP3Z5BZAH.tmp
Size 1KB
SHA256 e0720a05671afc31d0e084d77ca3c3dc7ce70a73082430421a15f224816b2c73
MD5 9c271b7fa2e1ac02e3727d3f78c4198a
SHA1 b3092a97abfea60e42ed7fa974ab430499c8c800
SHA512 1444c24b6156b8fdbcbb9bdd8a4645ed85db9c0a3edd36eb425b60a8c739d26d68dd78134cd0d82918a54e380aa69d3b23bb2fb8f3c5fa0e79cdfd0048ae9774
TLSH
T1BF1180DFE003005278821FE2BDBF7424A7BAE810147D9185D4EE8061A992B1DF8B369B
MD5 SHA1 SHA512 TLSH

Submit Download

is-SEYBKLI123.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt-deps\is-SEYBKLI123.tmp
Size 279B
SHA256 b2b3bea7701e1319ec50b2682bca390d7e4995d36bc9b80925033b1a4ad03376
MD5 829683498619afafbedfa454defd292a
SHA1 6e1ae8a041930f21b25ee7c169b08a2f167ca212
SHA512 5759179a5204f2d933e3d1d49396fb344d7b67ce91115c857ff36cd16f8a7bb4b9569c18923367d20d669f87fc96dfbf25a706f84d453b3389867ac779b8e46a
TLSH
T166D0C203FFD3EB2465052E86F0341620FD7DF4A0764841C0B97A208575802BD04A71D8
MD5 SHA1 SHA512 TLSH

Submit Download

is-2DFP066DJA.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\is-2DFP066DJA.tmp
Size 259B
SHA256 ee2b76b3bf4f07b185a32ca32834a6543ac7e02500d678b753ffcbc03b1ef2c6
MD5 9de4999a9af39ca1d0ab433fd86dde4e
SHA1 f801150a4a0d28089d845eae7ccd418df1b9d2c1
SHA512 7181b7bec6a1d712ec67910f000f377cfd94b833cd382ff97497369f06cc208db3a81f59b671e408c6fbeb405239d8efca3ed39f98ea9ddb400638f18672c7c6
TLSH
T1EAD02E03FBC3D325A8062E8AB0388928FCBDF420764D06C0FDAA518A70803AD44AB1DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-B0X9AKAADG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-B0X9AKAADG.tmp
Size 107B
SHA256 249e2c590813a8f4ef4acbb0dd049fda5ccffe98ae373f43e38c3c0b1fa4f78d
MD5 ce13061e116a8defa74565a544c07ecb
SHA1 6d30778b5a0817c2954124ecf209369eb1d36e5f
SHA512 31784583d22efd6b28cf1c75317900d28a77d33c8f1a4e5be8cae08f5ef287f0f638e6ce1217e2d7b6f3b0f309b68702f3091f26e3f6b429ed3c307f78f0bd73
TLSH
T16FB092C83C82F2202C1B39C2C0A2C8C77FBA848004164020A85BE0011B621E0078206C
MD5 SHA1 SHA512 TLSH

Submit Download

is-WSMSG9ZXJ8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-WSMSG9ZXJ8.tmp
Size 113B
SHA256 d0fb8c19897a0fb0535126931f181b6219ff799421d1452c560ca57485fcb0fc
MD5 f76ab74f369ef7386257be49b7e4c201
SHA1 3881686848d3fffbc86bfe8c4bd1c82d6f72b709
SHA512 b8531c0e425e9a56ebe8ec2802457c084ba0244e1e2438b48f76072603ea2b23ffacbfcefc366d84a6f09900cd308509303480e60e3bbaa76f9fbfbea69cff4d
TLSH
T1C1B092CC3D82F2201D1B3AC2C0A2C8C37FBA848404168020AC8BE0011B621E0478206D
MD5 SHA1 SHA512 TLSH

Submit Download

is-CFKIXC0KV2.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Localization\Locales\is-CFKIXC0KV2.tmp
Size 706B
SHA256 54439b9542f022d546a2ada7758748406fe9b89641f96411cbe253d9fb168de7
MD5 c80e3e1ea55f88af6e1cf362450a9288
SHA1 0ce682c7797a88a0b4d5236fda9eb80bec463d17
SHA512 bea47b956ef677dd7e271a6a15f1d45a0dee2ea659fb407c01d87204aa629553ea3eeab4f9989f978d80365d8da40f432813b96e9717dd26ebe4b7d2651f28ed
TLSH
T1F0018BF32E81C7101613D75665A8E001FC328C944767C299790D81DFB99B969334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

is-YJ6RB4SQGB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_roact-gamepad\roact-gamepad\is-YJ6RB4SQGB.tmp
Size 632B
SHA256 da001abe84d9ce0f767b8350d0493b5372d13c07285f3ea26fa79f56e9f9f056
MD5 8a6ea8417f0a068865f6abd5255589c3
SHA1 a82b1dcc4f08e36ac355de4d71cbfc9cf672c44d
SHA512 8f65214d31547817515b1a23aac064d08ac65fb14c01d70778b35e65b4f2766db5ee079aad127de471ebbfb0cf636192765e5bde6fd1c82f72464e83c5b21a15
TLSH
T108F0DDAA684377712801353BD87C9194E56BEEA416F97090F8FE401C3B1C01C003EBEC
MD5 SHA1 SHA512 TLSH

Submit Download

is-2QDHTLPXAQ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-2QDHTLPXAQ.tmp
Size 2KB
SHA256 96ce1feaa1978b2eca1622a2f5a465ea84222c492aef2697e04d238f44ac975f
MD5 c06dcf5ee80c92feced9b502c86251e9
SHA1 60d2f427356a98d82309ba98d62e21bc68564904
SHA512 f04523247ee16b85ace2321f12c1fcd5ee1d575ccebf9b4adad41391507a9cdada0e6287c361f6895306cd2c953e91eb11d7098e77bed242c3cfcb6f043dd1e4
TLSH
T1EB41D45CF0DF20C59D0B72DAA83B411479BBD6426678224435D6EAA0C4F46CD57D2ECF
MD5 SHA1 SHA512 TLSH

Submit Download

is-D9TQO4PJQG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-D9TQO4PJQG.tmp
Size 1KB
SHA256 c3d600481ef7544a4b53326354269a74916854bb7dd158e10771d13889f75046
MD5 b5086523857f7966a929aba2a32d029e
SHA1 90430487e03c9cc156e4f2ed4a687a228a9532e8
SHA512 593305631641e06eb8374ee9a9edc9d175894dcf7a6e7308aa187f60184d3e1116afb6446ab983ff4b18b7c149614a1f09d3f3aab879595a4a7ca8fc79a05fe3
TLSH
T1A9113A55F34F24AA984F3456B035718C7DBAD8D0443C2918B0C7ADBD0AE8694C9DBDDD
MD5 SHA1 SHA512 TLSH

Submit Download

is-GJEQ0NVSK0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-GJEQ0NVSK0.tmp
Size 1KB
SHA256 495e805fa3011e62edbf2f333316f212fb2a176dd0abe2ce0a84d044246a16ef
MD5 8403a01bd88bccbbb46909c66734307e
SHA1 ad8a0eede3c5b7d18ce00576cc0775c80011cef2
SHA512 8b1f0d0221d6c2eb76340a415d42221bed68c42f8e9f57a7669ba2e5a47ab846523b1fb40cfb708da0c24f335c99bcc91ab0031616cc2f4b1551c6ebf592395e
TLSH
T196413B64F2CF2CAFDC99324AC47D9058BD9FD8242129262475C7801668F415C89AEE9F
MD5 SHA1 SHA512 TLSH

Submit Download

is-HJ5OJT8FGS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-HJ5OJT8FGS.tmp
Size 1KB
SHA256 49faff1a64dd19aeb1c9c9572719e7657de451907fd396427c846635785442aa
MD5 5f6006d06974cd9ae75ad0f86acf2636
SHA1 7edcc0b0cb093237038c0965a181e5dffe347cf0
SHA512 b25a189de43ef4aee203e3ec0370df690806e5de4393f23cea5693580ab11027ca933458d9d644184d3d674c0ce1c0b98dbc7bcb0e76996540f6ab29e0ec4ab4
TLSH
T1BD21F87CF68F608A981B3A9FB93D95083D6FC458603C2A04F5C7A86644E965C5DA1CCD
MD5 SHA1 SHA512 TLSH

Submit Download

is-KYZD7SYGEX.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-KYZD7SYGEX.tmp
Size 493B
SHA256 9112ad34ecca4ef942eb930868519b6328a11cfd5a2b519d93002b3e5fd38a57
MD5 8392959645f38760c25add370ab0fb6c
SHA1 fec9f2a7d7ae0257c2b09e2a1a2a2391c2a3e678
SHA512 87ae1d811265880b5cb9f3f1fa2af5f2f761c67ceaf875a8675f95f74d4dc28a2dae2de949a9a3101fb29d488404f8332b108f709c4b104e27c0fb21408cab97
TLSH
T1C1F09E93B6873A6E5DD13668C53E04E4FF67E8013211111070C255A5B51512DC13FB7E
MD5 SHA1 SHA512 TLSH

Submit Download

is-UE344498AW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-UE344498AW.tmp
Size 178B
SHA256 2b5ae697c53843e3a47406bf183a7e6bb11d2d3c6558122e48c7b9928699a2a0
MD5 3c3deb8043e857994c1538cafc674822
SHA1 894905c6e236eaed1fdde9b5d2281594df4fc069
SHA512 0ac66ac5ae4060271a50ec84bd76a520217cee8253ba7f01e5e7ce2f1ec0d89d601818bc29dd151e357c683441e415957f3ffdff6f09730abf34b1425a6ba13f
TLSH
T10CC0126CF5C66019E00735E8EC36041C692BD44170741455B0C610F04598BEC1913CD9
MD5 SHA1 SHA512 TLSH

Submit Download

is-WWHHJKOQ73.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-WWHHJKOQ73.tmp
Size 264B
SHA256 10c508b7b393ad1f0d826befe068b0be96cca79b4966d0c0f181be66f8cca861
MD5 0ff9e9d69e2be8d8db93fa05469792ae
SHA1 a3e52db5c0f0542c1b5f0a43296c6337fbe515a7
SHA512 849ebfc903bd908939d4dcfd8d58c9dbc495a75521020ecea48f307fc906f8d2fd45916885dcd3d78ffd3e6c01985a035fe88dee04208f4789b7486b7c943a03
TLSH
T1F7D05E4DB0CB676EAF817024C03F48B1F9ABDB0027A611C0B8869256383059EC0BFF68
MD5 SHA1 SHA512 TLSH

Submit Download

is-XVTP1733HE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-XVTP1733HE.tmp
Size 1KB
SHA256 93b4f42e6a929cdca91aa0ce852ed8b8dfece2ef638948fabf8ab960ddb5f278
MD5 c19c633062e402028f605f22dca8d9d3
SHA1 79f5e49171f9236c7a1ef653128f86540bf22b9d
SHA512 d7ea7dcce85d0952f8b9dee653c1938c21b840ca6899f6429b786cf03a35ef5c7b6fd0fedb4f0d2c87ca4e610fcd875ff793a3a19d9e60711e58e2b760074601
TLSH
T1C821C5A4F1EF78ABA84736A9E03F9098FD2FE455117A2210B0C3445058F459C859FE9E
MD5 SHA1 SHA512 TLSH

Submit Download

is-3DYBGS6LOG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-users\is-3DYBGS6LOG.tmp
Size 280B
SHA256 1a162fb261072bbc9261ef2fe32273cab5f9c07b9e0222d3ee7e5c53ba82a95d
MD5 3083aa1386ae9b78587fc9f566b19407
SHA1 46c9c7ab52f7b11387899a5c6118aa3bdca530b0
SHA512 0267eef62eae55cf37ee84863005c2dbdc8e211cbb5014be80cdce843030e298e0eaba9e73b4781cafd61d419dedbd1be77f24937e855196e286e58f9cb8d7da
TLSH
T1AFD0C247FFD7D32964012F8669245E11F8BDF420779D05E8B96601D6644836D046E2EC
MD5 SHA1 SHA512 TLSH

Submit Download

is-YIWWK7EEX4.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-0bf501c2-f322c986\is-YIWWK7EEX4.tmp
Size 270B
SHA256 8cb6aa6d41f241e088c860714f633def082d8264c2d1318abb580038f54d6216
MD5 1a4ef3622577a4ac7a0cb4d600fcb85f
SHA1 83036ed3a6707d9518ea37b124d2103c5f5976fd
SHA512 acd6d179699c8894e4911e3da0d7ba2b6ad731d722ee7987ef7fdc722430ab2284e7e10b69621d49ebd6307b483fbcac7e961a353e3c09a4d83a101e9374f3a2
TLSH
T10CD0C207FBC3C312D4021FD670280853FC7DB520B72805D1B96680855441A6E0C7B199
MD5 SHA1 SHA512 TLSH

Submit Download

is-47OOHOUEWF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-47OOHOUEWF.tmp
Size 99B
SHA256 07578aec1292beffd3811cce7ed09d496253245970feed11596dec4c6dba4456
MD5 ddbe71671da13a7da1d44a18f4335032
SHA1 5d242fa4745820e73f8c9abd265f162baf7ae837
SHA512 02d8b7217decdc7830e4f35306f252081ad6e51e22e0d09973ffd7a38c11effdd1724d0c08e3a843dc8c92364c37aa081aa6dfe437c3f174e05aec037e287799
TLSH
T11EB0929A39C392219C22CFEE60600002F63BF810201C29A1694A91900080AAA40E3884
MD5 SHA1 SHA512 TLSH

Submit Download

is-EDFN9EZG0P.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-EDFN9EZG0P.tmp
Size 277B
SHA256 aa2d6899ec3f36f3637fb13e4db490e726ee53c88689dc088e33a71b87ccd9b6
MD5 bdbe08728ccddb2a90ce19e3be745302
SHA1 14f3c18b3c20c988b355988ad8c03899a4cb52b1
SHA512 b4e7e18f1c8a45460a42a1d9de23ba38d9e2f287d2c6f8529548d9b2a34daf417237bcec253da55cfc1dad01e2818da53ca820713e919a45ab09d19dfc171128
TLSH
T105D01798BEC5F52CED9237C48432D505FE6BEA12710384A8C4888ADAA2915C1C9038BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-I2FNELGXO3.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-I2FNELGXO3.tmp
Size 431B
SHA256 3eabe75a8daaa45c0f9b83c66899dadc82576b53022078db2c26b45036937ae7
MD5 7c4c1ad7c382374050ae94da6c48b66e
SHA1 81aa509ff7d68875216cf4a8a48f68b6a822cdbb
SHA512 1a3bf63d3bef43abddf422b386754436dcdeceeefa6830120e94058c01f8e5dbfb65fc54bfed4bb6b7efc40a410772ad3d9ec29e2199a5e7af0cfde5dbe7f157
TLSH
T136E02763F09254C6BB2013D0523A9B00EC1BE5A1715B02FE5099530850DA40EA09FD9C
MD5 SHA1 SHA512 TLSH

Submit Download

is-ODHBN50S27.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-ODHBN50S27.tmp
Size 227B
SHA256 4fc12be217b12d6b163803195bc647d38265ef2afe2dde8dab1d0741701cf160
MD5 ff5bcc83363753d13ee63ed8ee762570
SHA1 df069143cf45ba39cdf9840844fa8a9cd0db4590
SHA512 7b9d487c00cede9d3a93b56721ab795210ecb3751b4ad08174881409b1790ba01f98f72ad4c8ad908344652dc3b0ecac7d9986735a7b123d34fdca04c7b17525
TLSH
T1A6D052AEB26B8563F5706436827A0228E5AED60232280360602C0D1926082E9C9100AE
MD5 SHA1 SHA512 TLSH

Submit Download

is-QL1LG7MQN7.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-QL1LG7MQN7.tmp
Size 86B
SHA256 10d8af321ed223823b0f8c5e2a1de4eac4dab87e3397db8b46abec59f1107e2d
MD5 09043aeba4a2ff7bcc050937f7667dba
SHA1 76b40d72a30a03e486c0c7ff6668ef60a78d50df
SHA512 d18a16967b1a07e3004265d9a806e829960ad990bf74567006d6bb2084f7b94e207e1767de79c255fc364f32de2fd446f1c04d55ed29b2d446f0492722ef0dda
TLSH
T14BA0120998C19A80A9C3358040178B04ECACC65050BF00DCD72C02C95040064C027818
MD5 SHA1 SHA512 TLSH

Submit Download

is-YEVIJI3ERP.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-YEVIJI3ERP.tmp
Size 101B
SHA256 6519f59d68989568a88e2f20fffdda72087311daafd8124e3b7829d05ab901a5
MD5 ebd8e1b1713f6af244b949724841ca2c
SHA1 dca9e19651f74132e022a5c4da64992d784e990b
SHA512 5b7816f29c385f1dcaecf7990c92b8e08329ba148210c04b55dd19d038747d3f53a644482fd37beebefd037c955bf8a9e692aa6ed358be91d4f885243d3a6c10
TLSH
T15BB0928A39C392229C22CFE960200002F63BE810101C2D616A5A919010D05AA40A3885
MD5 SHA1 SHA512 TLSH

Submit Download

is-K5JM90SY1X.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-K5JM90SY1X.tmp
Size 100B
SHA256 8ca0e3b50c875b8ece36b159068fd3ca73c677f3ee13ecc287a6f85ebde28903
MD5 a19880b31d14117f0e3d3c434d789fdd
SHA1 921bffe297359ece1e5fb34d668be3600722f51b
SHA512 daa7c17e8b81bb5af4a39cdf8b8d4be214dcfe69b8b4cb130abfd9557e2388930425e1005b7097d907203adc77f90655df21fcff81c84254be830c2675f5be29
TLSH
T132B0928A3DC39622AE22CFE960200402F63BF810101D2961698A929040805AA84A3998
MD5 SHA1 SHA512 TLSH

Submit Download

is-NC8IC4JFJL.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-NC8IC4JFJL.tmp
Size 98B
SHA256 063e091b70949bd1e52d57ae6805949d37f53c6f193dae108970c6d01200882b
MD5 d1851e20caaafa0ea877f24f81553ab0
SHA1 49f0898f24dff8edd5fa1036bd8962ba26183d2a
SHA512 ffe88619c29b36c008c3e3a0f5650298971bc8cd1049b48bb434cf003c11265690dd1de7cb03369192530b7b6bba8c8e92ac71042aac36807ffb82b3f793c1f6
TLSH
T12EB012CA7EC39621DC23CFED64700012F73BFC20201C2A71694A919000C05BF45E3C88
MD5 SHA1 SHA512 TLSH

Submit Download

is-SQCFMQ2BVW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-SQCFMQ2BVW.tmp
Size 3KB
SHA256 5e73bef439d48980573eea1f52dceb176def1449ff36758029c0b5bf4da6dac0
MD5 ae1ef70d5f0810c8498a40d0899af6d0
SHA1 b4ca5a2aa44fa53bc3b2b1f629b04cccb7a97d1b
SHA512 343706ce4379b05a688029fa0e13f1d99309864b94aa04509a6509a6c7cad7d10b9ee9cb92e9177c14a3ea049f3aea3be3b2ff7af40899648efc2304841b05d3
TLSH
T1B251AC3BB1827B86A6D33E54C43FAA46EE2A7590211DC271E07541DE3935E2C8235FBD
MD5 SHA1 SHA512 TLSH

Submit Download

is-XY7ME9OLPJ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-XY7ME9OLPJ.tmp
Size 39B
SHA256 4af127b610dc880d82427ed4f8b752b0800bc9af11995850e33074cbb71b50f3
MD5 4cd35c20c4e726be167e22c2e0c9a0f2
SHA1 46be585110b69b2ebc2d0953a725a551b6b13ad5
SHA512 60239126b82b004889136550314f9b58accd2cff5c44c7f63fc22fbfea16b63b1759b73c1d0d6d2b0913d0c90cdbcb311b5fd38a7508e69f5b07d2f9aeeacccb
MD5 SHA1 SHA512

Submit Download

is-3IZMDO07CH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-3IZMDO07CH.tmp
Size 97B
SHA256 d724788dd7f461984ce924d751e9d6258a779e66c9c04c9806e83a4b001a1d6f
MD5 ef5e39b86599bf194d76361bf62ac1aa
SHA1 992d644681610d46a54a3e35287da2bc4b04688d
SHA512 058b69226b30f2c89928fc852bc1e710ea64a906212755096a882818d37581e0e3bdb828b79c6f06ea2b7c7aa1a32b0a19a72f36a958d78aa37982f2832cad73
TLSH
T168B0128639C39212AC23CFDD60300612F72BFC10201C79517946829001D05AF41B3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-50Z854MNTE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-50Z854MNTE.tmp
Size 155B
SHA256 219258dad492c3446064bea71bc006badee416cf7ecdfbddb3d25dcdf514ae2f
MD5 8163203fd39b926407a7ca2a4be7e10f
SHA1 3a75da3090c591b2c1299c7e59e9c1ca620dda5a
SHA512 0fe1246088f0c5f64dd85254efbbac26db964077e46766160cedf2b7ccae96eb69b23580e24102fb47946f4d56b7e373203e86ff4886daa4ed56706682f4b532
TLSH
T1C7C08CD624839102DC93A3D2D82AF200F36BCE90366A2532C80A00D513A016DC7028E4
MD5 SHA1 SHA512 TLSH

Submit Download

is-BZK1AGEXGJ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-BZK1AGEXGJ.tmp
Size 391B
SHA256 1cdbe8651b99a04ffbffcf15f1e12a96d0026a38e5da7eba8344376d71b65855
MD5 14d0354618cbad305c6fea66bd8a0abc
SHA1 40e16cc3c6b4ba94580e75a90c4353c8d534ddac
SHA512 dabf37ccb8173b13747ed5b72d5c372a0d1f0ca6c3816607be1973e28e9f00a2010aca53972f3a6373a5dafef1a2c941e465066f9be93bdde749dca6f881d83d
TLSH
T1BCE092A4B48FB34ECE933691C57F10198C7FD262372A40056055E1EB643454AC6AFE9D
MD5 SHA1 SHA512 TLSH

Submit Download

is-M81NR6RDNG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-M81NR6RDNG.tmp
Size 94B
SHA256 186e3ccd9a001df0eb061577947ec2d8b8b5b26b08a69f4a572b40e86b275f73
MD5 b80fdfb8f65d4e22488b41b2b7ba80f2
SHA1 36e7757b0e343a5e7d49987ba7ce68423d238a69
SHA512 ce6603e89d52afd3afdfa3da1409bd5b17eb9a791a1df543097462ee7228d5cf3d4c8698945c741b163a132927613f3ee287afb8c80c836a8bd9da1feeba10e4
TLSH
T1DBB012C739C392128C23CFED70300003F62BFC10101C2D516A56819010D05AF40A3C41
MD5 SHA1 SHA512 TLSH

Submit Download

is-MSZTES5QEW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-MSZTES5QEW.tmp
Size 154B
SHA256 f29fcd2635b4951684ab6c6774f3f2bdf7b7c50211a4189be589bdebf93c1f0f
MD5 ef78e7300d7e6018de865c2be5ca008e
SHA1 5c1610ae2e5ba9b367d8dc9025f4690ebaea1aa1
SHA512 e23dcb1dad51d3c2608798ce82501ce804f06bc769efa05751f771476185a61a5b4850b190fb8f304f039aa9dc45d4dd744fde4b7bdc9c09e9bb67c912374d78
TLSH
T164C08C9725839102DCA363D2C82BF200F36AE990367E2432CC0900D113A41ACC7028E0
MD5 SHA1 SHA512 TLSH

Submit Download

is-T3CEH00K11.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-T3CEH00K11.tmp
Size 1KB
SHA256 30daab8b42dd1733d08d1db1427c63a06b2a26b4b7e7efba91018cb70fbfe7bf
MD5 8ad555da9c98536fbb7f6da32a413728
SHA1 41f8995668b3f9c5fc698887bd1023b0ad94bbcf
SHA512 6c91394c7f21881a74e15b0c0f420b49ab47ee63b086b542c7ffcdcb29ff4c743d7da126736e8ede3dc2c98e0f119ce3698aac2c5edebb5bdb00d15d3479d38d
TLSH
T1F2212D29256AF19D50C37BF059377F0CF0B28390652EE5EE502407F821D8238995B9BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-TNRUFMGI5K.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-TNRUFMGI5K.tmp
Size 513B
SHA256 b9532584ac376ac0ff794dc49faf6ff46c7fb41b27d6a7f4bade1c6cbe8a2d53
MD5 f78b689e51c133c0c8a94cab62b8eb13
SHA1 7a408d9039a70d1125f78c58a2d827fb42e08a06
SHA512 f66b52ad4af33e295abc501b955dfb43b876b0886e63933e4eca925f543324ee2d01f6be94ac222679ff2cf3d512d88ba08f2e12d6e26faa24873d618236f0e8
TLSH
T17CF02BBBBA59FC118B233297D037E354B83EE01263AE95B9C045488414F400F95B7965
MD5 SHA1 SHA512 TLSH

Submit Download

is-W7LLJNGI2L.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-W7LLJNGI2L.tmp
Size 1KB
SHA256 f82e3b36d8204961ababa9be3cdf3304fc531871e0b59524a172096fe8222509
MD5 d8386ca6b9d52f480fffc4aa647d3501
SHA1 a42bcd984e0b733d85721a0256f129a3941bc9d9
SHA512 a99e908b36895a94fd622edeca35131dc498e223f46b517acf82555e4ad75db2c26b5f19f7922ad6f70ec12e7eb2cfeb254bd67f99e0058f97e7119c7efb7076
TLSH
T1613112A2F647B3A14953323991BF94C5FC7CE420272440807898906D3D76A6BC57BEED
MD5 SHA1 SHA512 TLSH

Submit Download

is-Y05Z4LH2AE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-Y05Z4LH2AE.tmp
Size 91B
SHA256 5293c0086c40ddb2cc13d4c3a63310939d36e4688d7108b31bc7d3bd97326db9
MD5 73d69aca16f861158657183bb1a92350
SHA1 039ad1b1decb0d0140a902e58536db4ba202f3dd
SHA512 219b743617d4871c79e2416697c9942eb3e27c694cfce8919b5d4295bb1fabc9ba0b3259980309e4c79ec3f75135a3a3853fd3a03e13dc8f1f92602efc0f227a
TLSH
T1CFB012C67EC396118C23CFDD64300012F62BFC20201C2A616946819000C05BF45A3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-WIMN4270OK.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\is-WIMN4270OK.tmp
Size 242B
SHA256 c1403279db23f924c7b9a5737002d4d9fd39fbf774fb2027822965f5464162c2
MD5 8b22154353dd2aaed3794cf92d999c2a
SHA1 22531772cc1a68d3b896f090d4fb4135b8f1662d
SHA512 1662441cf000f70ed6920b90c06ef3a2710958a2f2f33759185f3b2c0d4b91ca5071745051dabf4716e90d3c5f22e20007985882e489ad5fcca26418d4648d9f
TLSH
T1DFD05E07FBC3E351A8022F86B0284921FDBDF430B75C52E2B86A4089606176D49AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-DC7LGZIOXM.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-DC7LGZIOXM.tmp
Size 668B
SHA256 673fa1519ce542d1c8fb6edb56d011e06d9fe7f50097f3be5a6ff704aa7a7db7
MD5 ab793f280246317f90f8dde5936f907c
SHA1 d62983ba90045464da5a58b85e13075ab5bfb55d
SHA512 47f0fa6badba419bcfce7dfc3fc64d022340b6a8f77a19b377759ce1c7724720e9de8aa9d8697de5597b85eea8448bc625a26360824b83f95fcf3cbfadc88e25
TLSH
T1EB0120F8FA8EB064AE537598C47B41C4FF3FD831112E1410F09580A955B41ED856FDAD
MD5 SHA1 SHA512 TLSH

Submit Download

is-SODF9DKEUY.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-SODF9DKEUY.tmp
Size 100B
SHA256 530d0c8472b0879a6674e9bd743bced935e8e9c8111e82e5080a966ea5431e20
MD5 553e6790573d7e2ec7c7d9cda047a75a
SHA1 ffe2c8ebbc9e6cd90038584b3678229351b2b31c
SHA512 abd95c84b8c705d13294b7b924680d867afef6984d42c2549e1f01a65de670a446e511a0df789438d0676c81f3250fd580725bed4da0077b1bfb638ba5fb4857
TLSH
T1AAB092CA3DC392219C23CFE9B0200042F63BE820101C6D616A4A91A010C09AA40E3D84
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z1DXYP01IT.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-Z1DXYP01IT.tmp
Size 635B
SHA256 7726cb609cf22c037e02ccb0701f6cc218bb76cda5c3a35fc38bb563d79146f3
MD5 06d2c4f9720a6adc2e2c0dbf6352dec2
SHA1 f7fbf2a606f66ecd095d4d832039a6f6c91fcad8
SHA512 8434e05b1831a8f36565175f0a128c64840a4292af23b31e619d8e7bd137ad37109dc454856be770e6e86db65d82ddb946bc1f5159c912c9efbd91ae8102798e
TLSH
T1F3F09E9DE0C3A5B5AC2177E1843856E4EE23DF1136696455B97E05856080AACC00BDE8
MD5 SHA1 SHA512 TLSH

Submit Download

is-CU5TJ6OSQD.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\is-CU5TJ6OSQD.tmp
Size 93B
SHA256 2e74892968e4e166e80c6da97c585e39918ee6e9c614f42ec9e3e1a724428b5b
MD5 9a355b3a2709212de4ce12bbfe43ab9f
SHA1 84d9093568f722d52a47c14d531db9664201074c
SHA512 9d3dd9386aeff89b1b77acbb923226e1b0f6e8fa155e5df5f74015ad56076a2a7cac422a2b7693f8d0a995f0eff00b437a50e4fccfb85267259c4b1a713a3ecf
TLSH
T1CFB012C63DC392218C23CFDDB0300002F62BFC20101C7D516A4681A010C09AF40E3D40
MD5 SHA1 SHA512 TLSH

Submit Download

is-91O4LVEV8H.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\RoactUtilities\is-91O4LVEV8H.tmp
Size 207B
SHA256 0e9c0118853f1e532c8d685ba49f866db0d985d4eb75bf0f08e5fb906f0a3821
MD5 9cc7abcaea1a9606e1f9b84cfeeaf895
SHA1 5789b25d048a3aa26bfaec478a0f0ebe42bdc3c2
SHA512 fb3e6ab40d9adfda6858f0279daf4c5da7357f1837a96b958c7c947479a3cdf1d90e4dc5bda0bf85938934fb8114b99d1ade31aa3db195e11316a8acf220c44a
TLSH
T1AED0C933799F55C7BAC449C7507481412C242CBC62483E2A6AC2DBE1D5CAD7C3512143
MD5 SHA1 SHA512 TLSH

Submit Download

is-LQ6DFCU2OK.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-LQ6DFCU2OK.tmp
Size 71KB
SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
MD5 3fec0191b36b9d9448a73ff1a937a1f7
SHA1 bee7d28204245e3088689ac08da18b43eae531ba
SHA512 a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce
SSDEEP 1536:mkeIYNLNDni8w1CeVoNtjWf6qf+yaq1y53jUlu3tZbDlFNMFphN:fkDiDADAfjI3jUwFFNq9
TLSH
T1C76312C11695DE6D80AA5795416EFBEBFC9252942FC167E300C063933838D8B6D5E2BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shimmer_lightTheme.png

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png
Size 20KB
SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
MD5 4f8f43c5d5c2895640ed4fdca39737d5
SHA1 fb46095bdfcab74d61e1171632c25f783ef495fa
SHA512 7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa
SSDEEP 384:DKy5t41PQOZeZspyI2wYZsNSHnZ/5CnMjF3jrwJSb0DfQFbXx3y3JE1UFYAK:h54QOZeZsp7YsNSHJ5CMjF3jukFbXx37
TLSH
T115A2E0467A278D40F22255A3A2FFD69305C8048B05E04CE6BC49B9DCFC76CF999035AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-7A5J15Z4R8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaDiscussions\is-7A5J15Z4R8.tmp
Size 247B
SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
MD5 81ce54dfd6605840a1bd2f9b0b3f807d
SHA1 4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c
SHA512 57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff
TLSH
T1B5D097DB55B2BE3BAF8308B482A5B0804B7BE91429058F0F0E80951B410CC0AC6D0302
MD5 SHA1 SHA512 TLSH

Submit Download

is-N9P6S1NID6.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\PlatformContent\pc\textures\cobblestone\is-N9P6S1NID6.tmp
Size 176B
SHA256 ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d
MD5 f527b5859d7ca6c080ba954f3013883f
SHA1 3d00b598b1fb762ae0921bcc49ca189f05f417d2
SHA512 e908a29c4316a15f5c16a005c69b402e0525b80e0c3284d6f19074ab8b05d62d079ecf43974b223a68d7c56cbf1789df69ab260553de1aab0edfbdad5e6d654d
TLSH
T11EC01202A08C53E2C70D0D34412B3304C1AA00110423C40507C41C833307130C5B1C40
MD5 SHA1 SHA512 TLSH

Submit Download

is-8CNRFJLGB6.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-8CNRFJLGB6.tmp
Size 2KB
SHA256 5d588b6cb27cfcf985e460635ec1b331d090345455592c4ab7a1d4e82dba4c03
MD5 63f6651063c2fb335191890286e00de7
SHA1 422194440a9d08a8eb058b81c57506341eb4ed30
SHA512 f835741c00e5a2789ea004ec0d6d3be1ceff008249eb323c05cc6bf141a41389978720999516130beaf1b5ac0e9242ab9cd8046b264241ea46067690f130602b
TLSH
T109419F2BC0C45E9B8EB677A9711AC382F48103BF45600C7B75BC8A6D8F3591B0B59A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-VWLKUR5HMW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-VWLKUR5HMW.tmp
Size 2KB
SHA256 39c368d993bba3f5ed4a5912705ded57293b4a908c1379d2883f9bd65cd4deea
MD5 f6c70ae470c8c0bffdf31e1dc1af67c2
SHA1 a1f8f6a57c77618b2bba599dab9ab48176ffd6c8
SHA512 e2e50de1a90b91e68a5668443f91b03b4d8bb544dbe3f67a53b49618a7a92762617054a37de5b62869c1390acd76295ba355dec71f9565749f26c0a16dd7a5ac
TLSH
T18741E52BC1C85E9B8EB677BA711AC382F48003BF45600C7B75BD866D4F3591B0B49A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-INTBU7TD7E.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\MorpherEditor\is-INTBU7TD7E.tmp
Size 546B
SHA256 993e3655350f2292ce54b472f355aaf42d0d71fde4ffea717d0b9875f6dd204e
MD5 27e25e8e79253929eaabe7ebb9a41019
SHA1 9eed3db83b00ff4175e84928466c5ee724976753
SHA512 238cbebe41bda44d153bbde931d4ff5accca44f7a96b999238aab6eaa840d944543c80ae863d7f0601d16551f67c819884159f553a5ea85b95a2ee0a92f9eb76
TLSH
T117F026F684674566CCA6DEE3E51AD2149C33FD860064EC4985045C3633AB5C954C7547
MD5 SHA1 SHA512 TLSH

Submit Download

is-3OJXPHJW26.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\StudioUIEditor\is-3OJXPHJW26.tmp
Size 130B
SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
MD5 521fb651c83453bf42d7432896040e5e
SHA1 8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9
SHA512 8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6
TLSH
T1DEC02BC1B42E383A8419D02743C6C010DC2E404405341834011340194210AB143D0762
MD5 SHA1 SHA512 TLSH

Submit Download

is-S9ZFHUWENG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\TerrainTools\is-S9ZFHUWENG.tmp
Size 985B
SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
MD5 2cb16991a26dc803f43963bdc7571e3f
SHA1 12ad66a51b60eeaed199bc521800f7c763a3bc7b
SHA512 4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8
TLSH
T1EE11255AE4501983565EEAC694FE40275913488099D5F055B9CAC82F08342BD446DACB
MD5 SHA1 SHA512 TLSH

Submit Download

unins000.dat

Path C:\Users\Admin\AppData\Local\Ferns\Client\unins000.dat
Size 1.3MB
SHA256 ff1dbc406874a84f14db3792fbb0d64f853bca598eff3df13a4fd2b04870eabc
MD5 2161c60ca365b25432be915051bf52f9
SHA1 e9473f42ede5f82ae63ae82604d226eb8dc61d91
SHA512 8c94c4abb3dd40ec337d995ad604e5f877764ab9f8dfebafe0232d8ef7f5aa7138c4ca2164d8a342d50a14ae78f857919bd36ae3223cbba3fe7f67b5df7ac341
SSDEEP 3072:dj9OOV1dfSawPCXVIYaST5RHl0t/eFLxuZL+vd89Pnth2vHmTBE5L0jROMSo8Hh6:6nthGiDI4GGnV3/XNspbE
TLSH
T124550A506BE97148F7FFAFF56FBA91154B7ABC722E04D40C14A8828D0876F568D21B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unins000.exe

Path C:\Users\Admin\AppData\Local\Ferns\Client\unins000.exe
Size 3.7MB
SHA256 75791650df8ea88f8df9ac5c15fe0424322091468f07b33f3ee06902e747ceff
MD5 cbab72986383dbddfc9921a35ee8ff33
SHA1 f143e0575fe4bb1fdf70928797449b73b1b7c582
SHA512 8ce931f7809219bc877904632fc24cb41d5dcc86fcf22851f26a9f8e71132307cd1edd3c231d26e5f4b50735f6146824a948c1c42dd86b333b0a3d4f570c38de
SSDEEP 49152:43SA9I3bZxTZElVySH6UNoO7zjQynN4s7UUZyE8eECaN2Ml3334FJ:4CbWroSkynN4sQ+TdMl3334f
TLSH
T1CB068E13B388643FE06B1A395837BA54583F7A7229168C675BF40E8C4F756802E3A777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 538c1a0bded49157881b1c0e111a58732912def07977f599efb60ebb986ecbbb
MD5 2e5f50c6e7cd1b1d6049d9d3e57a9866
SHA1 28319f3d040fd1e80776d82fef3baa00dc34dec2
SHA512 1a56a7d8e7dc2aa514d9d57d40d74133033bdabf84bd35a3b65f0b62eeda07a00060dd4058de9c4703a2c70d201c867647a11b5cbacf4bb2c1ee4acd92d13058
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1F7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0b04489861797cec03fc7404687d31ed4755ebf931038495ba158cbbf77e5994
MD5 8d5497a0d6d631f289ddce3b8713b067
SHA1 e9a86741ddb9ad11d98682073f961e7ab3f714c3
SHA512 509da8d02aa51e8910b1998ff4f2dc501dd78e46a217b34ab4cbd3c8fb5b35e21fc44077baf2fceb5ca1c6a95e4d892ddf87e1a0c25401516589fa338e6d3d4f
TLSH
T14BD02374F796E005C32C00735562D291375A850135938454F45D845DAC683F677D84C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9a68569752b554830bdaeb1e8a10446a2bf48a5c40d9055644b0ff7d12eb909e
MD5 619aee87184943036a7fd0a470ee34f3
SHA1 f2e0d05b802871a84b6abab52ce17fbe477f2644
SHA512 618e8ac028bfff63cbfb3dc8165970fe8da37fa98ba9c72a9b4a3b3eb9d922078cf4371b48f699b16e64d0205ac715cb0a1b9fccd6953e5bda90f6d945b76ad1
TLSH
T157D0805C53B1AC70C7CDC9B1585677453D1AC5629A4287252C732D7D0C435C174991C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 499f1baf84ccad9aec7e713f14831c28ec8ef6c26551e081f63481da9e10b787
MD5 0b7b7a3907c43b76a43eea92605bfc69
SHA1 b3d127433999df0affab0fc41fa6d73226ec079b
SHA512 67d637e6bb845665c58d6f0a256303841a077e8a03562447569857bb2f980056eb08233e2e8f7e3c0c468adc11695b7c60631f1f3f77f122b5344c0ccc3b2c7c
TLSH
T1D3D0805C9371AC70C7CDC9B1585777453D1AC5629A4247252C732D7D1C4258174991C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 859db21f90162b57374347478595decf68edbc2cb9749811ea853d741dcb7235
MD5 b9640b285f0446997a2a9ee7ae461e05
SHA1 e961e644523401a4187d03d3082b8abb31dbb4f8
SHA512 493c07bb3852e338821a6e15a21d5ea24cfba36d88b6264d20915f6d8bdc0cbc3ff9dd1d88af8698bd065f5e09c6e7876d9a2ad5bc18dc26098e2d7068ef30d8
SSDEEP 48:dAWb2faBdNZC6qOuhh38LsVmdvVKd4vmLdMpEONAC81Ul8/3ji+uTmRunU7YC:dAO2faPTQ38xoNaLmFcTmJYC
TLSH
T198A16D9CE0E9E027F7E402B206FC64E47E771B6822C71E8532F0B5BECA92711518961F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5bdf7f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5bdf7f.TMP
Size 3KB
SHA256 0b4600a55f9aa8fff1841d2aaa71184132d0cb541b4254037fe5b1a8aff1d919
MD5 8d8cbdc3348f0d261b2458e924678904
SHA1 c4bc54f8f3cfc07ca5d63b58f48297778c368bb5
SHA512 4733640ad5fabbcbc0e3d42df8ee2de664575bca35ec081f5fb181064c84c57f7d283c65fe0f14affaf7834f46781bb600820bc34dd0386bc4e39056e5f7da81
TLSH
T1DB614BDCD0BDE01BE7E042B206DC74D97EB11B2822C71E8633F4B5BE9A42721528C01D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\128.png
Size 4KB
SHA256 41b21cd721317759a1391ec66ec4606b1f1b0a66fc6542ec3e69f9a6ba9a60d3
MD5 a6e517fba00c44d26f516d2bc473042f
SHA1 bcedbf549056bfacff8820cac38713a1eacd95b9
SHA512 8c58b58a05b60420ff187c2dc8b71e019fc36cd6bcec050257b5532f131ba50ecd00fe2ca734805753a39f6911125d2d8684286207b1d1d039e862904279a145
SSDEEP 96:4niq7dWteEb8MsIhE+bf+rgEPQCGJxc4bOdpI0xeblJpzSkLqdsQ4pXnW3P:e97kteEnJEu+rxoi4b3RJpfhQ45nGP
TLSH
T14AA1AFFA12E3DA94303E91711B20659B4D7909385624364DDBB2AC7140C7A0D9B7CF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\af\messages.json
Size 908B
SHA256 b40bde5b612cfff936370b32fb0c58cc205fc89937729504c6c0b527b60e2cba
MD5 12403ebcce3ae8287a9e823c0256d205
SHA1 c82d43c501fae24bfe05db8b8f95ed1c9ac54037
SHA512 153401ecdb13086d2f65f9b9f20acb3cefe5e2aeff1c31ba021be35bf08ab0634812c33d1d34da270e5693a8048fc5e2085e30974f6a703f75ea1622a0ca0ffd
TLSH
T1FA11C004E5625D3F42F5E1D6793EB342D21006B65150DCBA7CBCD51C4FB2D12518AF88
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\am\messages.json
Size 1KB
SHA256 3d0361a85adfcd35d0de74135723a75b646965e775188f7dcdd35e3e42db788e
MD5 9721ebce89ec51eb2baeb4159e2e4d8c
SHA1 58979859b28513608626b563138097dc19236f1f
SHA512 fa3689e8663565d3c1c923c81a620b006ea69c99fb1eb15d07f8f45192ed9175a6a92315fa424159c1163382a3707b25b5fc23e590300c62cbe2dace79d84871
TLSH
T1C221D805E0E8BB1F0F2E9B02B4352B4AD1A45D6A41406CB5F72997AC7F3DF1788D6618
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ar\messages.json
Size 1KB
SHA256 abd0919121956ab535e6a235de67764f46cfc944071fcf2302148f5fb0e8c65a
MD5 3ec93ea8f8422fda079f8e5b3f386a73
SHA1 24640131ccfb21d9bc3373c0661da02d50350c15
SHA512 f40e879f85bc9b8120a9b7357ed44c22c075bf065f45bea42bd5316af929cbd035d5d6c35734e454aef5b79d378e51a77a71fa23f9ebd0b3754159718fceb95c
TLSH
T186217BB1A73094728526DE0BF1F13264D5B1AD73A143FC21385B45088BE3D23A68EBB8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\as\messages.json
Size 2KB
SHA256 01b549ef285c94b31891997c7d5728bee7b56040f8847f279fc46e5cc262c4e3
MD5 ccebda0ca2d2ce0ea65b7cc8651175e1
SHA1 1510e686a9e94ada32bd62b9fc5d8950850fda2d
SHA512 6a345812ca8d5e9f8bcffd96acb435e8576d26b376e1de39b0ce0687c115da8ad2832cbb42cf0f36534514db7e8291f6c5130e9351ec87557a0bf1f79f328846
TLSH
T19E51A219B0E5FE88060D6495DC3074FD5A8C598A01701A3A9D8FDACB7E2E17DC16FAB1
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\az\messages.json
Size 977B
SHA256 628145f4281fa825d75f1e332998904466abd050e8b0dc8bb9b6a20488d78a66
MD5 9a798fd298008074e59ecc253e2f2933
SHA1 1e93da985e880f3d3350fc94f5ccc498efc8c813
SHA512 9094480379f5ab711b3c32c55fd162290cb0031644ea09a145e2ef315da12f2e55369d824af218c3a7c37dd9a276aeec127d8b3627d3ab45a14b0191ed2bbe70
TLSH
T1D311CB08D09E2C1F823406263CBA3302F51506EC5040BCBFBA68E12C6FFDD538AC1B98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\be\messages.json
Size 3KB
SHA256 ddf16859a15f3eb3334d6241975ca3988ac3eafc3d96452ac3a4afd3644c8550
MD5 68884dfda320b85f9fc5244c2dd00568
SHA1 fd9c01e03320560cbbb91dc3d1917c96d792a549
SHA512 7ff0fbd555b1f9a9a4e36b745cbfcad47b33024664f0d99e8c080be541420d1955d35d04b5e973c07725573e592cd0dd84fdbb867c63482baff6929ada27ccde
TLSH
T1E351FFD2D0B5169C39C838D7E779BCDD34986E80D124EB3BDC3D1ADBD20C601AA91B29
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\bg\messages.json
Size 1KB
SHA256 ac4a8b5b7c0b0dd1c07910f30dcfbdf1bcb701cfcfd182b6153fd3911d566c0e
MD5 2e6423f38e148ac5a5a041b1d5989cc0
SHA1 88966ffe39510c06cd9f710dfac8545672ffdceb
SHA512 891fcdc6f07337970518322c69c6026896dd3588f41f1e6c8a1d91204412cae01808f87f9f2dea1754458d70f51c3cef5f12a9e3fc011165a42b0844c75ec683
TLSH
T19B21485199539CAF0225F16FB8083E0578A640BE3F518AC23078592E3FF583507D6B5E
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\bn\messages.json
Size 1KB
SHA256 1dbf38e425c5c7fc39e8077a837df0443692463ba1fbe94e288ab5a93242c46e
MD5 651375c6af22e2bcd228347a45e3c2c9
SHA1 109ac3a912326171d77869854d7300385f6e628c
SHA512 958aa7cf645fab991f2eca0937ba734861b373fb1c8bcc001599be57c65e0917f7833a971d93a7a6423c5f54a4839d3a4d5f100c26efa0d2a068516953989f9d
TLSH
T10C312724DC5E58BB90E1CDD627587320E1235E9A8752F71EFC1B82496E7DC3C0C99EA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ca\messages.json
Size 930B
SHA256 d6e65238187a430ff29d4c10cf1c46b3f0fa4b91a5900a17c5dfd16e67ffc9bd
MD5 d177261ffe5f8ab4b3796d26835f8331
SHA1 4be708e2ffe0f018ac183003b74353ad646c1657
SHA512 e7d730304aed78c0f4a78dadbf835a22b3d8114fb41d67b2b26f4fe938b572763d3e127b7c1c81ebe7d538da976a7a1e7adc40f918f88afadea2201ae8ab47d0
TLSH
T15A115B15D5D16D7B02B191537E671342E17416B42701D88B7A3C82185FB5D42A2CBFE8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\cs\messages.json
Size 913B
SHA256 21ae66ce537095408d21670585ad12599b0f575ff2cb3ee34e3a48f8cc71cfab
MD5 ccb00c63e4814f7c46b06e4a142f2de9
SHA1 860936b2a500ce09498b07a457e0cca6b69c5c23
SHA512 35839dac6c985a6ca11c1bff5b8b5e59db501fcb91298e2c41cb0816b6101bf322445b249eaea0cef38f76d73a4e198f2b6e25eea8d8a94ea6007d386d4f1055
TLSH
T1F6115C0ED0E22C7B127882623C77A311F6B484E21208986ABA7CE0498F75C5644D6FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\cy\messages.json
Size 806B
SHA256 a482663292a913b02a9cde4635c7c92270bf3c8726fd274475dc2c490019a7c9
MD5 a86407c6f20818972b80b9384acfbbed
SHA1 d1531cd0701371e95d2a6bb5edcb79b949d65e7c
SHA512 d9fbf675514a890e9656f83572208830c6d977e34d5744c298a012515bc7eb5a17726add0d9078501393babd65387c4f4d3ac0cc0f7c60c72e09f336dca88de7
TLSH
T1EB01B1571F203FBAA70FD587FE933525086ACFCA5488541355D8883E032A71935E6232
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\da\messages.json
Size 883B
SHA256 48847d57c75af51a44cbf8f7ef1a4496c2007e58ed56d340724fda1604ff9195
MD5 b922f7fd0e8ccac31b411fc26542c5ba
SHA1 2d25e153983e311e44a3a348b7d97af9aad21a30
SHA512 ad0954deeb17af04858dd5ec3d3b3da12dff7a666af4061deb6fd492992d95db3baf751ab6a59bec7ab22117103a93496e07632c2fc724623bb3acf2ca6093f3
TLSH
T145114C58D0A66E2B073B4266B4223B11E26402FB4152DC5A796DD51C9FB2C1351DBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\de\messages.json
Size 1KB
SHA256 36ac525fa6e28f18572d71d75293970e0e1ead68f358c20da4fdc643eea2c1c5
MD5 d116453277cc860d196887cec6432ffe
SHA1 0ae00288fde696795cc62fd36eabc507ab6f4ea4
SHA512 c788c3202a27ec220e3232ae25e3c855f3fdb8f124848f46a3d89510c564641a2dfea86d5014cea20d3d2d3c1405c96dbeb7ccad910d65c55a32fdca8a33fdd4
TLSH
T15A11AB46D2A24A2F42F7967370793791F72441BB8240AD5B786CE61D6FBA8530186F38
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\el\messages.json
Size 1KB
SHA256 37ca6ab271d6e7c9b00b846fdb969811c9ce7864a85b5714027050795ea24f00
MD5 9aba4337c670c6349ba38fddc27c2106
SHA1 1fc33be9ab4ad99216629bc89fbb30e7aa42b812
SHA512 8564f93ad8485c06034a89421ce74a4e719bbac865e33a7ed0b87baa80b7f7e54b240266f2edb595df4e6816144428db8be18a4252cbdcc1e37b9ecc9f9d7897
TLSH
T1493126DEF0691D6E90226253549DB0BAEB911CA87305EEDC363CCA253BF84710D32A5F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\en_GB\messages.json
Size 848B
SHA256 ab5cda04013dce0195e80af714fbf3a67675283768ffd062cf3cf16edb49f5d4
MD5 3734d498fb377cf5e4e2508b8131c0fa
SHA1 aa23e39bfe526b5e3379de04e00eacba89c55ade
SHA512 56d9c792954214b0de56558983f7eb7805ac330af00e944e734340be41c68e5dd03eddb17a63bc2ab99bdd9be1f2e2da5be8ba7c43d938a67151082a9041c7ba
TLSH
T196015506E3406B2B0372B12774613201F67001EA1200ECBF7A7CC42C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
MD5 578215fbb8c12cb7e6cd73fbd16ec994
SHA1 9471d71fa6d82ce1863b74e24237ad4fd9477187
SHA512 e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212
TLSH
T161210707DA04AB37827A6136BC656685F33007EE2201E86F7DBCD50C5F229A791A7798
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\es\messages.json
Size 961B
SHA256 2008f4faab71ab8c76a5d8811ad40102c380b6b929ce0bce9c378a7cadfc05eb
MD5 f61916a206ac0e971cdcb63b29e580e3
SHA1 994b8c985dc1e161655d6e553146fb84d0030619
SHA512 d9c63b2f99015355aca04d74a27fd6b81170750c4b4be7293390dc81ef4cd920ee9184b05c61dc8979b6c2783528949a4ae7180dbf460a2620dbb0d3fd7a05cf
TLSH
T15C113A43D5929D7B19B28261B4776312F5A406F52D80E8CB7D3C85382BA9D06E0E7F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\es_419\messages.json
Size 959B
SHA256 90a560ff82605db7eda26c90331650ff9e42c0b596cedb79b23598dec1b4988f
MD5 535331f8fb98894877811b14994fea9d
SHA1 42475e6afb6a8ae41e2fc2b9949189ef9bbe09fb
SHA512 2ce9c69e901ab5f766e6cfc1e592e1af5a07aa78d154ccbb7898519a12e6b42a21c5052a86783abe3e7a05043d4bd41b28960feddb30169ff7f7fe7208c8cfe9
TLSH
T177113D46D9D15CA715B68166B5775312F66406F52C80E9DB3D3C803C1BB9C06E0EBF9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\et\messages.json
Size 968B
SHA256 cc31b877238da6c1d51d9a6155fde565727a1956572f466c387b7e41c4923a29
MD5 64204786e7a7c1ed9c241f1c59b81007
SHA1 586528e87cd670249a44fb9c54b1796e40cdb794
SHA512 44fcf93f3fb10a3db68d74f9453995995ab2d16863ec89779db451a4d90f19743b8f51095eec3ecef5bd0c5c60d1bf3dfb0d64df288dccfbe70c129ae350b2c6
TLSH
T1F011BD14D1993A2F4633627A746A6B02D85593F00441CCAA39ACD39C6FBEC1691D6F1C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\eu\messages.json
Size 838B
SHA256 a41670d52423ba69c7a65e7e153e7b9994e8dd0370c584bda0714bd61c49c578
MD5 29a1da4acb4c9d04f080bb101e204e93
SHA1 2d0e4587ddd4bac1c90e79a88af3bd2c140b53b1
SHA512 b7b7a5a0aa8f6724b0fa15d65f25286d9c66873f03080cbaba037bdeea6aadc678ac4f083bc52c2db01beb1b41a755ed67bbddb9c0fe4e35a004537a3f7fc458
TLSH
T19801C2075213EDA6CF69A376FD13B4417B954E412E47710370AED608328FC2EA1A7375
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\fa\messages.json
Size 1KB
SHA256 7c4c09d19ac4da30cc0f7f521825f44c4dfbc19482a127fbfb2b74b3468f48f1
MD5 097f3ba8de41a0aaf436c783dcfe7ef3
SHA1 986b8cabd794e08c7ad41f0f35c93e4824ac84df
SHA512 8114ea7422e3b20ae3f08a3a64a6ffe1517a7579a3243919b8f789eb52c68d6f5a591f7b4d16cee4bd337ff4daf4057d81695732e5f7d9e761d04f859359fadb
TLSH
T1CD218E49A1786DB34122851372F23516C673AEA55101FD80B969472D0F3BD235E8EF2B
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\fi\messages.json
Size 911B
SHA256 2d752a5dbe80e34ea9a18c958b4c754f3bc10d63279484e4df5880b8fd1894d2
MD5 b38cbd6c2c5bfaa6ee252d573a0b12a1
SHA1 2e490d5a4942d2455c3e751f96bd9960f93c4b60
SHA512 6e65207f4d8212736059cc802c6a7104e71a9cc0935e07bd13d17ec46ea26d10bc87ad923cd84d78781e4f93231a11cb9ed8d3558877b6b0d52c07cb005f1c0c
TLSH
T162119046E0426E6B4276912638623202F2F005F61180DD5F39EC876C0FB9C0672DBF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\fil\messages.json
Size 939B
SHA256 f51eeb7aaf5f2103c1043d520e5a4de0fa75e4dc375e23a2c2c4afd4d9293a72
MD5 fcea43d62605860fff41be26bad80169
SHA1 f25c2ce893d65666cc46ea267e3d1aa080a25f5b
SHA512 f66f113a26e5bcf54b9aafa69dae3c02c9c59bd5b9a05f829c92af208c06dc8ccc7a1875cbb7b7ce425899e4ba27bfe8ce2cdaf43a00a1b9f95149e855989ee0
TLSH
T1D8119C16E240192B93B2846279E52501E2E001FA2F40A85F7B7DEE496FF7C12509AF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\fr\messages.json
Size 977B
SHA256 0518287950a8b010ffc8d52554eb82e5d93b6c3571823b7ceca898906c11abcc
MD5 a58c0eebd5dc6bb5d91daf923bd3a2aa
SHA1 f169870eeed333363950d0bcd5a46d712231e2ae
SHA512 b04afd61de490bc838354e8dc6c22be5c7ac6e55386fff78489031acbe2dbf1eaa2652366f7a1e62ce87cfccb75576da3b2645fea1645b0eceb38b1fa3a409e8
TLSH
T12B113808E9602D6F0E725233BA257253DA7001E67340D9957A2CD60D4FB5C6AE2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\fr_CA\messages.json
Size 972B
SHA256 4caa46656ecc46a420aa98d3307731e84f5ac1a89111d2e808a228c436d83834
MD5 6cac04bdcc09034981b4ab567b00c296
SHA1 84f4d0e89e30ed7b7acd7644e4867ffdb346d2a5
SHA512 160590b6ec3dcf48f3ea7a5baa11a8f6fa4131059469623e00ad273606b468b3a6e56d199e97daa0ecb6c526260ebae008570223f2822811f441d1c900dc33d6
TLSH
T13D11BD08D961397F0A7251327935A252DD7006E5B300D9CA3A2DD20C4FB5C97E2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\gl\messages.json
Size 990B
SHA256 0cf098dfe5bbb46fc0132b3cf0c54b06b4d2c8390d847ee2a65d20f9b7480f4c
MD5 6baafee2f718befbc7cd58a04ccc6c92
SHA1 ce0bddda2fa1f0ad222b604c13ff116cbb6d02cf
SHA512 3da23e74cd6cf9c0e2a0c4dba60301281d362fb0a2a908f39a55abdca4cc69ad55638c63cc3befd44dc032f9cbb9e2fdc1b4c4abe292917df8272ba25b82af20
TLSH
T1F8119E56C9C15C3B05729162B16A5213EA400AE12D80E4CB3D3DE63C1B68C55E5EBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\gu\messages.json
Size 1KB
SHA256 fe8218df25db54e633927c4a1640b1a41b8e6cb3360fa386b5382f833b0b237c
MD5 bc7e1d09028b085b74cb4e04d8a90814
SHA1 e28b2919f000b41b41209e56b7bf3a4448456cfe
SHA512 040a8267d67db05bbaa52f1fac3460f58d35c5b73aa76bbf17fa78acc6d3bfb796a870dd44638f9ac3967e35217578a20d6f0b975ceeeedbadfc9f65be7e72c9
TLSH
T12C319890D2B4E4B614E69B7FA0AD2230C6705363D1162206328CD90D8E22C5B3CFABCF
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\hi\messages.json
Size 1KB
SHA256 d2d1afa224cda388ff1dc8fac24cda228d7ce09de5d375947d7207fa4a6c4f8d
MD5 98a7fc3e2e05afffc1cfe4a029f47476
SHA1 a17e077d6e6ba1d8a90c1f3faf25d37b0ff5a6ad
SHA512 457e295c760abfd29fc6bbbb7fc7d4959287bca7fb0e3e99eb834087d17eed331def18138838d35c48c6ddc8a0134affff1a5a24033f9b5607b355d3d48fdf88
TLSH
T18831270CDBBDF67F18BC789631591A33D2A537B4B3D05617B588B2DE4E61C3110AB612
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\hr\messages.json
Size 935B
SHA256 73e6e246ceeab9875625cd4889fbf931f93b7b9deaa11288ae1a0f8a6e311e76
MD5 25cdff9d60c5fc4740a48ef9804bf5c7
SHA1 4fadecc52fb43aec084df9ff86d2d465fbebcdc0
SHA512 ef00b08496427feb5a6b9fb3fe2e5404525be7c329d9dd2a417480637fd91885837d134a26980dcf9f61e463e6cb68f09a24402805807e656af16b116a75e02c
TLSH
T1B5118C1580B56E6F817A82B378B4B302F5B442BD11808D777A3CE12C4FBAE2195C5F2C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\hu\messages.json
Size 1KB
SHA256 958c0f664fca20855fa84293566b2ddb7f297185619143457d6479e6ac81d240
MD5 8930a51e3ace3dd897c9e61a2aea1d02
SHA1 4108506500c68c054ba03310c49fa5b8ee246ea4
SHA512 126b80cd3428c0bc459eeaafcbe4b9fde2541a57f19f3ec7346baf449f36dc073a9cf015594a57203255941551b25f6faa6d2c73c57c44725f563883ff902606
TLSH
T1A911C009D0A1692B91BB426739753705D21802FA2340ACDF396CC17D9F75F234497F79
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\hy\messages.json
Size 2KB
SHA256 0b16e3f8bd904a767284345ae86a0a9927c47afe89e05ea2b13ad80009bdf9e4
MD5 55de859ad778e0aa9d950ef505b29da9
SHA1 4479be637a50c9ee8a2f7690ad362a6a8ffc59b2
SHA512 edab2fcc14cabb6d116e9c2907b42cfbc34f1d9035f43e454f1f4d1f3774c100cbadf6b4c81b025810ed90fa91c22f1aefe83056e4543d92527e4fe81c7889a8
TLSH
T12051818A9F771F9C0E756DBBD434A78D28881DD101A7A71AD4C4CD8AF38B60D10D7A2D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\id\messages.json
Size 858B
SHA256 e3c86ddd2efebe88eed8484765a9868202546149753e03a61eb7c28fd62cfca1
MD5 34d6ee258af9429465ae6a078c2fb1f5
SHA1 612cae151984449a4346a66c0a0df4235d64d932
SHA512 20427807b64a0f79a6349f8a923152d9647da95c05de19ad3a4bf7db817e25227f3b99307c8745dd323a6591b515221bd2f1e92b6f1a1783bdfa7142e84601b1
TLSH
T17F11250696D1282F423652A374B63302F65102EA0A00A8AE7A7CCB285FBB81214CAF95
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\is\messages.json
Size 954B
SHA256 943e61988c859bb088f548889f0449885525dd660626a89ba67b2c94cfbfbb1b
MD5 caeb37f451b5b5e9f5eb2e7e7f46e2d7
SHA1 f917f9eae268a385a10db3e19e3cc3aced56d02e
SHA512 a55dec2404e1d7fa5a05475284cbecc2a6208730f09a227d75fdd4ac82ce50f3751c89dc687c14b91950f9aa85503bd6bf705113f2f1d478e728df64d476a9ee
TLSH
T13211274E72F46CADBF8DC261BC30B7EDC6BA06C00686D4D6528F164E117670922B2321
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\it\messages.json
Size 899B
SHA256 f41862665b13c0b4c4f562ef1743684cce29d4bcf7fe3ea494208df253e33885
MD5 0d82b734ef045d5fe7aa680b6a12e711
SHA1 bd04f181e4ee09f02cd53161dcabcef902423092
SHA512 01f305a280112482884485085494e871c66d40c0b03de710b4e5f49c6a478d541c2c1fda2ceaf4307900485946dee9d905851e98a2eb237642c80d464d1b3ada
TLSH
T15A118C45C5D3292B1A76A31334763205EA7502F66A80A94B7F6DC91C1FBBC43D086F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\iw\messages.json
Size 2KB
SHA256 bbb81c32f482ba3216c9b1189c70cef39ca8c2181af3538ffa07b4c6ad52f06a
MD5 26b1533c0852ee4661ec1a27bd87d6bf
SHA1 18234e3abaf702df9330552780c2f33b83a1188a
SHA512 450bfaf0e8159a4fae309737ea69ca8dd91caafd27ef662087c4e7716b2dcad3172555898e75814d6f11487f4f254de8625ef0cfea8df0133fc49e18ec7fd5d2
TLSH
T17E41669EC276678D0F386C779C34ABD914BB47D0349073268C1CD186B3A66B890ADDF9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ja\messages.json
Size 1KB
SHA256 34ac08f3c4f2d42962a3395508818b48ca323d22f498738cc9f09e78cb197d73
MD5 15ec1963fc113d4ad6e7e59ae5de7c0a
SHA1 4017fc6d8b302335469091b91d063b07c9e12109
SHA512 427251f471fa3b759ca1555e9600c10f755bc023701d058ff661bec605b6ab94cfb3456c1fea68d12b4d815ffbafabceb6c12311dd1199fc783ed6863af97c0f
TLSH
T1CB21F67DC384293B153582B2B5A932C2F1559CEAE542B86A7A2CC1191F7AE6DD040FB4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ka\messages.json
Size 3KB
SHA256 30898bbf51bdd58db397ff780f061e33431a38ef5cfc288b5177ecf76b399f26
MD5 83f81d30913dc4344573d7a58bd20d85
SHA1 5ad0e91ea18045232a8f9df1627007fe506a70e0
SHA512 85f97f12ad4482b5d9a6166bb2ae3c4458a582cf575190c71c1d8e0fb87c58482f8c0efead56e3a70edd42bed945816db5e07732ad27b8ffc93f4093710dd58f
TLSH
T119617E7D10FD36EEF6CED16A9C7165B6C8F70A900A45B439BA463B4B0D217306EB0925
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\kk\messages.json
Size 3KB
SHA256 548dc6c96e31a16ce355dc55c64833b08ef3fba8bf33149031b4a685959e3af4
MD5 2d94a58795f7b1e6e43c9656a147ad3c
SHA1 e377db505c6924b6bfc9d73dc7c02610062f674e
SHA512 f51cc857e4cf2d4545c76a2dce7d837381ce59016e250319bf8d39718be79f9f6ee74ea5a56de0e8759e4e586d93430d51651fc902376d8a5698628e54a0f2d8
TLSH
T18E61EFD2C1B6168C29D475ABE771BCDD24989B90E100FB37EC3D15EFE20C629BA91720
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\km\messages.json
Size 3KB
SHA256 a6118f0a0de329e07c01f53cd6fb4fed43e54c5f53db4cd1c7f5b2b4d9fb10e6
MD5 b3699c20a94776a5c2f90aef6eb0dad9
SHA1 1f9b968b0679a20fa097624c9abfa2b96c8c0bea
SHA512 1e8d15b8bff1d289434a244172f9ed42b4bb6bcb6372c1f300b01acea5a88167e97fedaba0a7ae3beb5e24763d1b09046ae8e30745b80e2e2fe785c94df362f6
TLSH
T13D51738855928B3AE6C786BE9C725F4444E733226B52D4BC9F8F3C0D5411A28ACDF867
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\kn\messages.json
Size 1KB
SHA256 30078ef35a76e02a400f03b3698708a0145d9b57241cc4009e010696895cf3a1
MD5 38be0974108fc1cc30f13d8230ee5c40
SHA1 acf44889dd07db97d26d534ad5afa1bc1a827bad
SHA512 7bdb2bade4680801fc3b33e82c8aa4fac648f45c795b4bace4669d6e907a578ff181c093464884c0e00c9762e8db75586a253d55cd10a7777d281b4bffafe302
TLSH
T18C41B70CAC7A6D3A5BE5016724AD203EDFF017D25D5847D2F49DEB442E61C2B4183E9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ko\messages.json
Size 1KB
SHA256 c52d9b955d229373725a6e713334bbb31ea72efa9b5cf4fbd76a566417b12cac
MD5 f3e59eeeb007144ea26306c20e04c292
SHA1 83e7bdfa1f18f4c7534208493c3ff6b1f2f57d90
SHA512 7808cb5ff041b002cbd78171ec5a0b4dba3e017e21f7e8039084c2790f395b839bee04ad6c942eed47ccb53e90f6de818a725d1450bf81ba2990154afd3763af
TLSH
T1BA113565A0A62D9F12B6C6437DA53601D2A060F653075456BE2CC90E8F359A251C1EB9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\lo\messages.json
Size 2KB
SHA256 89082fb05229826bc222f5d22c158235f025f0e6df67ff135a18bd899e13bb8f
MD5 e20d6c27840b406555e2f5091b118fc5
SHA1 0dcecc1a58ceb4936e255a64a2830956bfa6ec14
SHA512 ad53fc0b153005f47f9f4344df6c4804049fac94932d895fd02eebe75222cfe77eedd9cd3fdc4c88376d18c5972055b00190507aa896488499d64e884f84f093
TLSH
T19051F2CF90B6EB1D2A0971AEE930994618BC09E28031B336CF7EC18A2D0E51DC79B751
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\lt\messages.json
Size 1KB
SHA256 5dfcbd4dfeaec3abe973a78277d3bd02cd77ae635d5c8cd1f816446c61808f59
MD5 970544ab4622701ffdf66dc556847652
SHA1 14bee2b77ee74c5e38ebd1db09e8d8104cf75317
SHA512 cc12d00c10b970189e90d47390eeb142359a8d6f3a9174c2ef3ae0118f09c88ab9b689d9773028834839a7dfaf3aac6747bc1dcb23794a9f067281e20b8dc6ea
TLSH
T1D811CC15D8807C3F4336729FB4A47705D96442B19110AC5534BCC20D4FBBC67908AF48
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\lv\messages.json
Size 994B
SHA256 0621de9161748f45d53052ed8a430962139d7f19074c7ffe7223ecb06b0b87db
MD5 a568a58817375590007d1b8abcaebf82
SHA1 b0f51fe6927bb4975fc6eda7d8a631bf0c1ab597
SHA512 fcfbadec9f73975301ab404db6b09d31457fac7ccad2fa5be348e1cad6800f87cb5b56de50880c55bbadb3c40423351a6b5c2d03f6a327d898e35f517b1c628c
TLSH
T12C11E10DD0D22E1B6E7580477A38B752D29490F56540DA4EB9BCCA5C2FBDC0B81CAF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\mk\messages.json
Size 2KB
SHA256 d0ae7739adea379b6390d1ee65699fc78d8649b7977503b062f34a52690a5744
MD5 5237e2a0ad375fa0f462b95eeb4b8cfc
SHA1 8fcf0fda66d275f70bd5ee2a491c797c2d0fe976
SHA512 4158ee0ab8e651c66720fd64a6414717d596ac9f642c3f50704ced9bb2b57d1add25b087dc9068a0094e9c05b51242af7bb77bd15ce2094be0796faf6ad21063
TLSH
T1FA51B2E390B3165C29C879DAE771BCED34987880D218D77FEC7E2787D20862125D171A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ml\messages.json
Size 2KB
SHA256 22ca9415e294d9c3ec3384b9d08cdaf5164af73b4e4c251559e09e529c843ea6
MD5 4717efe4651f94eff6acb6653e868d1a
SHA1 b8a7703152767fbe1819808876d09d9cc1c44450
SHA512 487eab4938f6bc47b1d77dd47a5e2a389b94e01d29849e38e96c95cabc7bd98679451f0e22d3fea25c045558cd69fddb6c4fef7c581141f1c53c4aa17578d7f7
TLSH
T13741D0079131CD3F0EA152267B1E2F57C91B8EA1409B6A8B3D3DF2664D6AF2D0C86931
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\mn\messages.json
Size 2KB
SHA256 613d8751f6cc9d3fa319f4b7ea8b2bd3bed37fd077482ca825929dd7c12a69a8
MD5 83e7a14b7fc60d4c66bf313c8a2bef0b
SHA1 1ccf1d79cded5d65439266db58480089cc110b18
SHA512 3742e24ffc4b5283e6ee496813c1bdc6835630d006e8647d427c3de8b8e7bf814201adf9a27bfab3abd130b6fec64ebb102ac0eb8dedfe7b63d82d3e1233305d
TLSH
T14251EEE2D1B6574C2D847593E67AFDDD348CAD80D114EB3BCC7E2287E340278A592715
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\mr\messages.json
Size 1KB
SHA256 adeb082a9c754dfd5a9d47340a3ddcc19bf9c7efa6e629a2f1796305f1c9a66f
MD5 3b98c4ed8874a160c3789fead5553cfa
SHA1 5550d0ec548335293d962aaa96b6443dd8abb9f6
SHA512 5139b6c6df9459c7b5cdc08a98348891499408cd75b46519ba3ac29e99aaafcc5911a1dee6c3a57e3413dbd0fae72d7cbc676027248dce6364377982b5ce4151
TLSH
T1B631030DFB7AF76E0DBC7D6A31280E33D1A555F1C3D4885B7564B2CA4EA4CB0018AA92
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ms\messages.json
Size 936B
SHA256 2824cf97513dc3ecc261f378bfd595ae95a5997e9d1c63f5731a58b1f8cd54f9
MD5 7d273824b1e22426c033ff5d8d7162b7
SHA1 eadbe9dbe5519bd60458b3551bdfc36a10049dd1
SHA512 e5b611bbfab24c9924d1d5e1774925433c65c322769e1f3b116254b1e9c69b6df1be7828141eebbf7524dd179875d40c1d8f29c4fb86d663b8a365c6c60421a7
TLSH
T11F115B0EC3A5283F407652A770E86701F98406AA0F40ED9F3D5C9F384FBA9926681F58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\my\messages.json
Size 3KB
SHA256 243befbd6b67a21433dcc97dc1a728896d3a070dc20055eb04d644e1bb955fe7
MD5 342335a22f1886b8bc92008597326b24
SHA1 2cb04f892e430dcd7705c02bf0a8619354515513
SHA512 cd344d060e30242e5a4705547e807ce3ce2231ee983bb9a8ad22b3e7598a7ec87399094b04a80245ad51d039370f09d74fe54c0b0738583884a73f0c7e888ad8
TLSH
T1A2812B2CA82E25EE5BCF46C11CE24C5F84B31CB0466DFC6C96B62A474A027E83DE165D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ne\messages.json
Size 1KB
SHA256 729cf12e1ce062efc5eda3796ca6d7a29b1c52aabb0ac4889d6fa6aa88ad9526
MD5 4291b668707082a28738168f2d84d0a3
SHA1 dbebedc946705efed87e59e7b4988eaa7e05dcce
SHA512 8f25c7baa768d6dd17a3ac21d03d7649954500074f33ea190c8dc6e905450b5a6eee576d292db924501ef11018c2463e9c3058a288ed59db61b0c51569524faa
TLSH
T1D141A44DEBB8F3DB05BC785B361C1E36D1945B704392554BF8B8B2C74AB0CB101D5A96
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\nl\messages.json
Size 914B
SHA256 f3fe1ffcb182183b76e1b46c4463168c746a38e461fd25ca91ff2a40846f1d61
MD5 32df72f14be59a9bc9777113a8b21de6
SHA1 2a8d9b9a998453144307dd0b700a76e783062ad0
SHA512 e0966f5cca5a8a6d91c58d716e662e892d1c3441daa5d632e5e843839bb989f620d8ac33ed3edbafe18d7306b40cd0c4639e5a4e04da2c598331dacec2112aad
TLSH
T125112C15DA526E3B42E19162746A3343EAA002FD0149F8AF796CD96C4FF2D12019EE68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\no\messages.json
Size 878B
SHA256 21ceff02b45a4bfd60d144879dfa9f427949a027dd49a3eb0e9e345bd0b7c9a8
MD5 a1744b0f53ccf889955b95108367f9c8
SHA1 6a5a6771dff13dcb4fd425ed839ba100b7123de0
SHA512 f55e43f14514eecb89f6727a0d3c234149609020a516b193542b5964d2536d192f40cc12d377e70c683c269a1bdcde1c6a0e634aa84a164775cffe776536a961
TLSH
T1E011CE00D1927C2F077AD27675357322E26004B95A10ACDA7A2CD95EAFF7C8210D1FDA
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\or\messages.json
Size 2KB
SHA256 4fa7d3ed5b6003b4b0b3d1cedf0a7dd6489b96311b4bc320e8a3dd16852d59d9
MD5 2c38f78a74ab24d6aeec34fc890fdf11
SHA1 6bcd1873e513962c511a5eeb5e96dfe7f0b1daec
SHA512 2b0bda5283272e6ac62652a64e8756fe74c0866db5d82e7188d456d6f9a60e0883023c339e265c10758256f4e46c43df98bb41a6d758321e8b6385c288e7990c
TLSH
T1C85130C3B371354A15F8B362D53AA4FE298AACF05373C2AA5DA91BDFC2073509713621
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\pa\messages.json
Size 2KB
SHA256 bbd37d41b7de6f93948fa2437a7699d4c30a3c39e736179702f212cb36a3133c
MD5 97f769f51b83d35c260d1f8cfd7990af
SHA1 0d59a76564b0aee31d0a074305905472f740ceca
SHA512 d91f5e2d22fc2d7f73c1f1c4af79db98fcfd1c7804069ae9b2348cbc729a6d2dff7fb6f44d152b0bdaba6e0d05dff54987e8472c081c4d39315cec2cbc593816
TLSH
T19A51DAC7E7B27964150AB074D23ED4CE5B924CE48051E2B7BDE72AB9C2CDE7382102A0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\pl\messages.json
Size 978B
SHA256 e00ff20437599a5c184ca0c79546cb6500171a95e5f24b9b5535e89a89d3ec3d
MD5 b8d55e4e3b9619784aeca61ba15c9c0f
SHA1 b4a9c9885fbeb78635957296fddd12579fefa033
SHA512 266589116eee223056391c65808255edae10eb6dc5c26655d96f8178a41e283b06360ab8e08ac3857d172023c4f616ef073d0bea770a3b3dd3ee74f5ffb2296b
TLSH
T17B112729D0D21E7F4675967379F63301E9A044E62600DADB7A2C801D8F7AD5604DEFAC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\pt_BR\messages.json
Size 889B
SHA256 e1e271d195f102684616637aa6a899ca75817ebd557868ae0d6150a12bfa856b
MD5 aaaa87feff00f6bfec8a3f2e7a247713
SHA1 52708fba117af3bfe109e49804efb852ab688bbf
SHA512 28fdd66f924b70d893e625ad361a6e3fac952de8840c1d19309fa7ce8cf8ea7769bd7fcf94b20413c6b1888d7f5282b4625431bea8662524de78d6dbe166eb2a
TLSH
T14C115923E6636D3F03318223B0792701E6140AF21E45DC8B7D6E884D4FF1C429083FA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\pt_PT\messages.json
Size 914B
SHA256 e93b8e7fb86d2f7dfae57416bb1fb6ee0eea25629b972a5922940f0023c85f90
MD5 0963f2f3641a62a78b02825f6fa3941c
SHA1 7e6972beab3d18e49857079a24fb9336bc4d2d48
SHA512 22dd42d967124da5a2209dd05fb6ad3f5d0d2687ea956a22ba1e31c56ec09deb53f0711cd5b24d672405358502e9d1c502659bb36ced66caf83923b021ca0286
TLSH
T15E117A29C593153B07369123B5796702F6580AE72540ECCB3E2C890C1FF5D16E1D3FA4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ro\messages.json
Size 937B
SHA256 085787999d78fadff9600c9dc5e3ff4fb4eb9be06d6bb19df2eef8c284be7b20
MD5 bed8332ab788098d276b448ec2b33351
SHA1 6084124a2b32f386967da980cbe79dd86742859e
SHA512 22596584d10707cc1c8179ed3abe46ef2c314cf9c3d0685921475944b8855aab660590f8fa1cfdce7976b4bb3bd9abbbf053f61f1249a325fd0094e1c95692ed
TLSH
T112119C05D1524EEF0A7142A3B8703A81E13584E66544AD9B796CC92E5FB6C0381C3FCC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ru\messages.json
Size 1KB
SHA256 c0a776448a258efd47065bf3f4b45260d1b4cb431d57ecc97995e122249081f6
MD5 1ca9a6bd3d62b1abec854ff1864e10b9
SHA1 f8a3351adee093489c19fad2d46ef2ce532718dd
SHA512 81ff14cb54e01cc17cdb55a0c3a315001a12e91028606b49f7d46af3b57bba3ea10d75f6c1753fa59e1297a79a92efbff623b02036fa8102b5b93e665b6e666c
TLSH
T17B214611D54A78FE123AB537FC047E02B8A240BE3E466A9535382D2F3BF541502FB719
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\si\messages.json
Size 2KB
SHA256 54241ebe651a8344235cc47afd274c080abaebc8c3a25afb95d8373b6a5670a2
MD5 b8a4fd612534a171a9a03c1984bb4bdd
SHA1 f513f7300827fe352e8ecb5bd4bb1729f3a0e22a
SHA512 c03e35bfde546aeb3245024ef721e7e606327581efe9eaf8c5b11989d9033bdb58437041a5cb6d567baa05466b6aaf054c47f976fd940eeedf69fdf80d79095b
TLSH
T18C51029EF0B6FF9A5A3592026C71E4A9048E9F9015F010BBD8CAC1CA6C0DD3CD66F953
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sk\messages.json
Size 934B
SHA256 903060ec9e76040b46deb47bbb041d0b28a6816cb9b892d7342fc7dc6782f87c
MD5 8e55817bf7a87052f11fe554a61c52d5
SHA1 9abdc0725fe27967f6f6be0df5d6c46e2957f455
SHA512 eff9ec7e72b272dde5f29123653bc056a4bc2c3c662ae3c448f8cb6a4d1865a0679b7e74c1b3189f3e262109ed6bc8f8d2bde14aefc8e87e0f785ae4837d01c7
TLSH
T15E117A0AC0922D6F463D4661B8723245E3E889F60648E8AB7ABC900A4FB1813949AF49
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sl\messages.json
Size 963B
SHA256 aab9cf9098294a46dc0f2fa468afff7ca7c323a1a0efa70c9db1e3a4da05d1d4
MD5 bfaefeff32813df91c56b71b79ec2af4
SHA1 f8eda2b632610972b581724d6b2f9782ac37377b
SHA512 971f2bbf5e9c84de3d31e5f2a4d1a00d891a2504f8af6d3f75fc19056bfd059a270c4c9836af35258aba586a1888133fb22b484f260c1cbc2d1d17bc3b4451aa
TLSH
T12D11BD2498B22D2F1C76D16F74B53302EA10057D5445588A3A1CB7180FB6D52D5CEF28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sq\messages.json
Size 950B
SHA256 8558d3adaec20033c83b2e5c4c8121f969f531ae779c15181e65a2f7954ebc6b
MD5 aa1bc08cf49cbc6a8cb8e6a04c4f1a4a
SHA1 9c06fa875d0a6d5ee4a1bcca25424cbe55d97a28
SHA512 5d99f7c5fbf724563e2b0f64e297f415219feba376d48b1c0fe752da198d4a5b61e05244226c3ef3bf38288df97761397a08206fbb84e0909875a9f2e3e1c542
TLSH
T120119B0184611EBBC272516739653201E2A011FF11D4EC6EBA6CDA1E8FB2C3640A6E0C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sr\messages.json
Size 1KB
SHA256 4e8b69e864f57cddd4dc4e4faf2c28d496874d06016bc22e8d39e0cb69552769
MD5 7f5f8933d2d078618496c67526a2b066
SHA1 b7050e3efa4d39548577cf47cb119fa0e246b7a4
SHA512 0fbab56629368eef87deef2977ca51831beb7deae98e02504e564218425c751853c4fdeaa40f51ecfe75c633128b56ae105a6eb308fd5b4a2e983013197f5dba
TLSH
T1A321295199AB6CAF4226E01BB8047D05B9AA41BE3F1654C5326C2C1F3BF147807D7B5D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sv\messages.json
Size 884B
SHA256 64b1e422b346ab77c5d1c77142685b3ff7661d498767d104b0c24cb36d0eb859
MD5 90d8fb448ce9c0b9ba3d07fb8de6d7ee
SHA1 d8688cac0245fd7b886d0deb51394f5df8ae7e84
SHA512 6d58f49ee3ef0d3186ea036b868b2203fe936ce30dc8e246c32e90b58d9b18c624825419346b62af8f7d61767dbe9721957280aa3c524d3a5dfb1a3a76c00742
TLSH
T10811C246D4612C7B0F3A922B31753306E26402F91290DC9A75BC842CEFB7D1750DBF1A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\sw\messages.json
Size 980B
SHA256 0d20680b74af10ef8c754fcde259124a438dce3848305b0caf994d98e787d263
MD5 d0579209686889e079d87c23817eddd5
SHA1 c4f99e66a5891973315d7f2bc9c1daa524cb30dc
SHA512 d59911f91ed6c8ff78fd158389b4d326daf4c031b940c399569fe210f6985e23897e7f404b7014fc7b0acec086c01cc5f76354f7e5d3a1e0dedef788c23c2978
TLSH
T18D119B71E430287B42B5026735E83721F3D5C6B11554AC877A2C9B9E5F32C4701DBF54
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ta\messages.json
Size 1KB
SHA256 6282bf9df12ad453858b0b531c8999d5fd6251eb855234546a1b30858462231a
MD5 dcc0d1725aeaeaaf1690ef8053529601
SHA1 bb9d31859469760ac93e84b70b57909dcc02ea65
SHA512 6243982d764026d342b3c47c706d822bb2b0caffa51f0591d8c878f981eef2a7fc68b76d012630b1c1eb394af90eb782e2b49329eb6538dd5608a7f0791fdcf5
TLSH
T18F418FCF813DFE8B1EA3145F2329135562547156C02AF3A23C7C5E25D9ECC9ACA60ABC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\te\messages.json
Size 1KB
SHA256 026c164bae27dbb36a564888a796aa3f188aad9e0c37176d48910395cf772cea
MD5 385e65ef723f1c4018eee6e4e56bc03f
SHA1 0cea195638a403fd99baef88a360bd746c21df42
SHA512 e55167cb5638e04df3543d57c8027b86b9483bfcafa8e7c148eded66454aebf554b4c1cf3c33e93ec63d73e43800d6a6e7b9b1a1b0798b6bdb2f699d3989b052
TLSH
T12F41B0017622EA25DBE702B37528F608495817D262C5E72D3E7FA74BFF57C2D0083A26
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\th\messages.json
Size 1KB
SHA256 d147631b2334a25b8aa4519e4a30fb3a1a85b6a0396bc688c68dc124ec387d58
MD5 64077e3d186e585a8bea86ff415aa19d
SHA1 73a861ac810dabb4ce63ad052e6e1834f8ca0e65
SHA512 56dd389eb9dd335a6214e206b3bf5d63562584394d1de1928b67d369e548477004146e6cb2ad19d291cb06564676e2b2ac078162356f6bc9278b04d29825ef0c
TLSH
T13D313373A2425DEA6421231332653381F61CACAA3B63FCD1B959200E0BF1B168413FEB
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\tr\messages.json
Size 1KB
SHA256 b9066a162bee00fd50dc48c71b32b69dffa362a01f84b45698b017a624f46824
MD5 76b59aaacc7b469792694cf3855d3f4c
SHA1 7c04a2c1c808fa57057a4cceee66855251a3c231
SHA512 2e507ca6874de8028dc769f3d9dfd9e5494c268432ba41b51568d56f7426f8a5f2e5b111ddd04259eb8d9a036bb4e3333863a8fc65aab793bcef39edfe41403b
TLSH
T1DB116A44E0D3281F8A74170F35AA2256E59507BA3220FC9936BDC50CEFB595640E3B68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\uk\messages.json
Size 1KB
SHA256 9fa26ff09f6acde2457ed366c0c4124b6cac1435d0c4fd8a870a0c090417da19
MD5 970963c25c2cef16bb6f60952e103105
SHA1 bbddacfeee60e22fb1c130e1ee8efda75ea600aa
SHA512 1bed9fe4d4adeed3d0bc8258d9f2fd72c6a177c713c3b03fc6f5452b6d6c2cb2236c54ea972ece7dbfd756733805eb2352cae44bab93aa8ea73bb80460349504
TLSH
T14721BB1599553CFF0226A32FFC447A00BCA501BA2B129B6B35A86C2E3FF5416026AB59
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\ur\messages.json
Size 1KB
SHA256 5da836224d0f3a96f1c5eb5063061aad837ca9fc6fed15d19c66da25cf56f8ac
MD5 8b4df6a9281333341c939c244ddb7648
SHA1 382c80cad29bcf8aaf52d9a24ca5a6ecf1941c6b
SHA512 fa1c015d4ea349f73468c78fdb798d462eef0f73c1a762298798e19f825e968383b0a133e0a2ce3b3df95f24c71992235bfc872c69dc98166b44d3183bf8a9e5
TLSH
T110217BA1E5F41B774331C467E0A77E20D3760E634240F6997929464A8FB64035B8AEBC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\uz\messages.json
Size 865B
SHA256 1eba3f2228c3e838a666f85ba3ee42c1d62c98a51287c5cf1de3fcd204c3bc4c
MD5 043e661611bed481ea3d1734a792c5a8
SHA1 1b3deccd3128081cada2bc88244609c36f2c4f8c
SHA512 43a716864098252bdeabda2d121302d9085bc610c03c3f27a37f519318c6994ea959123775c3bbcb808d6502dcec4f91a9bcb09b7e629bfb341c6b165d7bd072
TLSH
T18811C244F0A19E7BC37182A335552A01F29001B55640DCBA7E3C7A1E4FF6D2266C3F28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\vi\messages.json
Size 1KB
SHA256 597c5f32bc999746bc5c2ed1e5115c523b7eb1d33f81b042203e1c1df4bbcafe
MD5 773a3b9e708d052d6cbaa6d55c8a5438
SHA1 5617235844595d5c73961a2c0a4ac66d8ea5f90f
SHA512 e5f906729e38b23f64d7f146fa48f3abf6baed9aafc0e5f6fa59f369dc47829dbb4bfa94448580bd61a34e844241f590b8d7aec7091861105d8ebb2590a3bee9
TLSH
T10811C004A7B9243B417C8A37B56C7202EB61D5EECE80DC863ABC913C6FB78519455F9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\zh_CN\messages.json
Size 873B
SHA256 c047235c983d3dcf835d4ecc1c9270c6262a09a5acadf093d87e709c0a23cae7
MD5 de9899623560d8a6f389cb0726abfa7c
SHA1 3edb7a2736cbd8808b5ba3b77734bc0e54797ca5
SHA512 4b34ddfe9c94b651ff6926ef15bda94f8f72a106ad9f81d2a937731f2fc9566b66c70fb4e7006769ec13f17492c552af8d0449b3a8967b045d3e71a31e7c9fad
TLSH
T17B11AF00D2A0797F06379253752AB243F1F155B460249C9E7D6DD54C5F71C53125BF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\zh_HK\messages.json
Size 1KB
SHA256 30f44cfad052d73d86d12fa20cfc111563a3b2e4523b43f7d66d934ba8dace91
MD5 524e1b2a370d0e71342d05dde3d3e774
SHA1 60d1f59714f9e8f90ef34138d33fbff6dd39e85a
SHA512 d2225cf2fa94b01a7b0f70a933e1fdcf69cdf92f76c424ce4f9fcc86510c481c9a87a7b71f907c836cbb1ca41a8bebbd08f68dbc90710984ca738d293f905272
TLSH
T13E2149EEA2456AAB47BAC1CAFD283D4FC5930E602063D173C0FC698C370692D5DA6864
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\zh_TW\messages.json
Size 843B
SHA256 f94c6ddedf067642a1af18d629778ec65e02b6097a8532b7e794502747aeb008
MD5 0e60627acfd18f44d4df469d8dce6d30
SHA1 2bfcb0c3ca6b50d69ad5745fa692baf0708db4b5
SHA512 6ff517eed4381a61075ac7c8e80c73fafae7c0583ba4fa7f4951dd7dbe183c253702dee44b3276efc566f295dac1592271be5e0ac0c7d2c9f6062054418c7c27
TLSH
T100014C64D2A0387B4136D16375A83352E19C52F50404BCD6BB1C9D8CCFB5C1A01FAF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_locales\zu\messages.json
Size 912B
SHA256 ec78ddd4ccf32b5d76ec701a20167c3fbd146d79a505e4fb0421fc1e5cf4aa63
MD5 71f916a64f98b6d1b5d1f62d297fdec1
SHA1 9386e8f723c3f42da5b3f7e0b9970d2664ea0baa
SHA512 30fa4e02120af1be6e7cc7dbb15fae5d50825bd6b3cf28ef21d2f2e217b14af5b76cfcc165685c3edc1d09536bfcb10ca07e1e2cc0da891cec05e19394ad7144
TLSH
T1F611C0C543D25FC9472E83577B15B0112BE60BB562C23A73E9E9321D18578B57907F38
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\_metadata\verified_contents.json
Size 11KB
SHA256 6e7f425854ad23b4a516ea6d49bc620ae0f800212eb55af7c385006f43f510a2
MD5 3df50be3952bb8a517e4eb24f62a2bcf
SHA1 0abfb2ba917c162ab93734572cc35086e2628cf5
SHA512 06acbc50a6fd32ac70d5f98d05d478650eaecbde771f8b0f39e6281be540ca5d0df7636e3b9ac192cfad5a25b04ad55d9767ecdd9ddeb5c1f3f9c2af5f92142f
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbONd/jUmkD2mLLpPwcgT9QrWB95nTfd:e5xn3Bol8U1m5
TLSH
T191327669DC4D708DBC16FB758B6A79B69B48C9C9A14D2E1E13D34C603CF7A4988A30DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\manifest.json
Size 2KB
SHA256 4375dfec1feb4295bdee57adb32a4cbaf351904be807160eabe87ca692b2b5b2
MD5 a60bd7255f6a78622887303990f4b4af
SHA1 61d77694628cdaf7f5ace1332a01d05e79f13772
SHA512 96b411c6b37e927de84cd363e37d0203bd692cbe2cc1aea56780830f23889562a8a512a07316c2c0ca7909a43a7ab879d9e908421ba6e7b99fdbeba1202e2282
TLSH
T173516DFBBC10AC634BB08594991A710EF729735E45CFC4DBB2BC60734BE4CAA1D60598
MD5 SHA1 SHA512 TLSH

Submit Download

offscreendocument.html

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\offscreendocument.html
Size 97B
SHA256 b9fa2d52a4ffabb438b56184131b893b04655b01f336066415d4fe839efe64e7
MD5 b747b5922a0bc74bbf0a9bc59df7685f
SHA1 7bf124b0be8ee2cfcd2506c1c6ffc74d1650108c
SHA512 7567761be4054fcb31885e16d119cd4e419a423ffb83c3b3ed80bfbf64e78a73c2e97aae4e24ab25486cd1e43877842db0836db58fbfbcef495bc53f9b2a20ec
TLSH
T132B012EE6C03C10004551E8A38E092146412638870D1A1445CDEE0334D4075C9C0B44C
MD5 SHA1 SHA512 TLSH

Submit Download

offscreendocument_main.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\offscreendocument_main.js
Size 115KB
SHA256 f6b3a786b1178d0d853f37559c83a4b5e40e2af451dca20af583137416af8416
MD5 5c3d8dc7447cc707f8da55f8c3b7d2b9
SHA1 1ff4cf8647c578a29a7b75c56d3dad86fce729a0
SHA512 0c09e9b71e0721e45ea3cc8797eb1e9b2bd2d762c0939eeb63b4bcb2c2508d4f09c5dd8c54fd51fa422d621a848367219f3bde8ab10a9e9a3dbb5e5fc22433ce
SSDEEP 1536:bdcu4XPM3pxqVv3AZWN4pI6PfRYPCf/JKIcAemoa1mAXC+4UKSomSWmmqekWdsXU:SApA34cmI6Pf3JKICnaPXC+BmmxkQbN
TLSH
T1D7C3FACDB6A574624363A5F5002F010BB23AB8AAE44C81E8F189D9E97DB446D4377F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4044_226836395\CRX_INSTALL\page_embed_script.js
Size 339B
SHA256 e9bdab7a401dd22885c7a7a8bb9c55f27783807a64402e62b39758c7fdccb345
MD5 19280b929163e1c79f981de8804826e6
SHA1 aa0b31d2ba9609100a914b70943cfdee3eff8708
SHA512 0cdcdadf3d04aac9bb15ee1d074879e1042816c1ecbc96e0cc6a23d4eab29231f7e85aaa66c985dd7a209ec0b707906d1866508b12a83a67c227ea971cfd6e14
TLSH
T12EE04F070F095929F0BA890EEB133A03AB3541106C35954F26CE0451BB4339BD1192AC
MD5 SHA1 SHA512 TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9d05b8d45fc1662ffa16f0cf9a542919a22c754a020c1af5016165b8f2aa9a61
MD5 dec8a03128556ee713acd095e17132d5
SHA1 56b0ddc42785b2334f4820189ad48386ffcb97de
SHA512 52ed6580a2eabe6b2b6251ea8462628d8fb42b0d7c4981540e4471ae66ae0bc5998fdb2a5590e0a2caabb8db8194c503403a548d2cdae42ae6117f5820758749
TLSH
T140518DF7C3E8866E891155F0AA186E2FCE1D0955836C3C5689E4DF1B93E2470E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 9fb3bfe5012d6db573ef737d430ff29b54d0afd77ee475c8b138d395a9889b70
MD5 f9e5b1b63626f6b5e72a691c0a607b98
SHA1 59605693a2ff762a708ede64a8a2b1fbcfdfcc00
SHA512 b11d711f6b12d2342cadb600b127d1d644890a3fb4da58231da83e9b0a8d9665f216e132c6737d9ae077bdc85875322ef96774ca7926378fcee0a42a7b796509
SSDEEP 192:sxZXRdyM//K1Ml8BfcB1L/fvsQWpVXzyzy5jMsdpTDjgHW6+WNLhti/Y64I69IgU:sxZXv0m1L/fvsQWvj04ocMHbC/su1P
TLSH
T19A72D8566A249977CCDBD608FA25BF53D7F504339A911E889DFCCA0C00EA6FD220785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 b5fb984918ae9ee7104e0e05859a130feee23960f0a405bc5c641b8ae2231f63
MD5 11561c28b433975092d4a394f47a26c8
SHA1 85b54673b3e278b4283201930ff11a90c1b34653
SHA512 74ad13c53b7261dd891b9d413736157c8ebf15763f7c62008da95c22942188908adaa58bf3335f1e921dc57b6e886daa2d798986d58c2bbccbc027d41c66b8e7
SSDEEP 768:6A0G97F7pLuLnFJWvFnSP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIc18LlSMdFFro7:6A0G97TEnFJWvFnSPu1ja5c18LcEF+n7
TLSH
T100F21B3B6C0CCB7E4F844E9CEC2A7E9A6DE8018B96DC894447FA844C03C66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85476c042ab83114513e55e7832adec2d6b53423e2ea0e9ab9820d9e5da8944f
MD5 6f8f86fd419f8ff66717d343c1accbab
SHA1 f7770f2ca32356668962e0858afbe916360154c5
SHA512 a0e20e47a4e885582ef715b1a087aa7cf6568f6f9ac7c9c05f1e6e6f38b2d17d03a4cb20231477906b786564ae01b8a34146986d3808b107f43affc42d1711b0
SSDEEP 48:K8EInKVWc/yo+Jiugsok4srPIr2kKaBCIkmO0ZLgbtINKGYIfywKRG64cD:K8EwKVWWGLiKIYPtGKGYyi
TLSH
T1FB91A312737F8285397E685D9654B99F428230A37414F42B77B852BA8F27F108CFD8E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d76d7228db951b52621ab45a1e4fc3dee2d7a483d99b42f8998db5be04ff1013
MD5 442f9a4dae7cd2baa654feb0188025be
SHA1 e4706d450e772f4261c8cbde6a2379f709ffa1de
SHA512 dd24e781b569e46e05d9c7efbffc4643c3b44c3c7b73ce6527c4c35c7c8f0175127fdabbd7f98b0bf4d3a07c50d6b920215d4d5fd69c9a314af105a95de0ddd1
SSDEEP 96:RqONkrQsjpf5ZGNwaT5ih/cIPURHl8h4otop5jLD3BFP6vBXJf4qNTtIRdor9OVr:YON36TZ0qQmiUyTxlab+j2OVsdo8gnU6
TLSH
T11902F735696C2CABCEE2AE45F48B27235FE4117BE9C52B94E6D85F1C00D779C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 77cfec41b9c1d827254d5bf4cdf19d275d7ecb2e69f27417030392c66da884f1
MD5 fadac69251db88d1f8edb35aa136f758
SHA1 435e1f1f6d84565c5d731ab8f7e950109681e5c5
SHA512 415150eae8df6ff3e073107801fb118df00511d735caca43afae96bd7b7ba9a136aa674307cb3b2161ba420a612ad290d94c95a114b2d834f59d8affccb4bd88
SSDEEP 768:NccQPL5C4WDOZxhSbVSYq5J4e0fTmDmBb:NccQP2DOezfTgUb
TLSH
T143B27CB698A55CFB4491D4C8A587F6436EF41037899C5A1CE6F8BB3C308F9FC27168A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 51f39b2b8cd89e33a942e0afa92858c2fbb5ae5a39714905bd744174f690735c
MD5 b8d435011107b8b1f50fd4b0913681a9
SHA1 cb276d98d5a1b97b2285c8096c4d59b38161c7f3
SHA512 b65938332343919ed88d51813d73917dfdcdac0abd6cb11e188c5205941832ce8d8ff010231929741b414520ad2e31e8a00832cdb0379c46fd8d6f032e7d3b05
SSDEEP 192:HONw6TZ0cQmiUySxUab+j2OVsKhF8rSJrS2cXVq6U6:HONw6TCszUg+SO+KPpJrS9LU6
TLSH
T162121A3669684C679DE2A590F84B32135EE44127EE8A7F94E1DC6F0C01DFBAC230B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

964723e5-efd5-4b1c-8a0d-b1db6030e30c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\964723e5-efd5-4b1c-8a0d-b1db6030e30c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e64b27b1396ede1daf5e2f2d0bc3b7f09f86e409fe5e0475e455501999ca4d36
MD5 23ab855473826614606da30faa4601e9
SHA1 c208ed144b7a195314ddcbb28bbeb51bf0fbe9bf
SHA512 dec01dba118395cbbc735fb1e7d2ced9c0788babf30f054799089d1a923f739ce9c8ee3359aef43624ced144add25831fe9dbfe63150d4131c7f862aea2f740e
TLSH
T193415F5CA6F91148F373AF195BF6A86D447EB8772E06D15D00010E4F0A67E00D8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\activity-stream.contile.json
Size 4KB
SHA256 f4ee2c760dbcb13b42c5a8d00c861328077b11c9c04864b669897487547514af
MD5 891a335efe5ae3d9ad09d298e48ccc04
SHA1 60a89e52219638796af97dbe919901d28c8e70c8
SHA512 24cbab676164ccfb7972eea10905f993d4ddf2999fff29f5f00494aaa92d70b601df7a56ea5d84ef68a58c795e991334daca5a6870f0a43640e4b521985dc777
SSDEEP 96:KmtMQquVwsldH5IDTfd8Dl9Nv8xrHVvP8ytlYZT+mR+Hl:KmtMQBtdH56WlH8xrHV8ytlBmR+Hl
TLSH
T1E8A119EB5871C4638F22E7F13C0B271DB04B7096DEE5C788A5A48C01B2D510681DEAC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 9678f15d26c2c33277cf9e1b98263cef1eb51027768022ab51a64089ad1d9309
MD5 e98109f49e6d3081b69e4b9f7e417a91
SHA1 a4498a2bb06d4265a5554184bea50762b57e0d12
SHA512 8724b4c470c5e51adb106abd8264d0930f9b98efabbe06eca7fb1c44fc07ccdf6ecbdbbf7404482ddc750ca58a01c50fa49e242f093b143b4ad919fe7d86b290
SSDEEP 768:CyDsq+yJSxCsUny8ycysH2+FwOydFrBO1ko2u21lUMrBZmt0qvu:5DsKCjDsWDOcBroDYBZFsu
TLSH
T12E7329A3A7E8B5BB0B9027CB2C4F755B26E24145E78A41C9ECEDC91CC1CD750423A6BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16593

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\doomed\16593
Size 13KB
SHA256 d4cf16477a63c0bc8680e314eca66e5fe759f7f54f235b309006a11c03f93761
MD5 2ed8319c78c7b4b8d661044156062a67
SHA1 3ff984c2b8a3de1eadecb380e8c57fab0a8e2089
SHA512 53454210951afcdd5236647b836a4b98b5dc4c9fa482fbabbcba0c5e31f434490c6cb19f59f31ed4ca71ccea18032bbb445353aa0aba4ef667bb139b3276ad26
SSDEEP 384:wLOm6uuJPIsYL+YD87Nzvzfa1C5vzfa1CI:8OJYL+YD87Rvzf0Kvzf0l
TLSH
T16D525BFB1C2858045E60AFD2F9B573CC6D12650BEADC98F9E1647A4384C4FB8B0066CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0708213C4B0751E250FF14705A151AB29E3AFC44

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\0708213C4B0751E250FF14705A151AB29E3AFC44
Size 20KB
SHA256 b18cbe91d378b01b9d5512893a53d63d3507090c7a7d49474e313fdc41d5c27d
MD5 c5a67b11f9068b9d6ab9fa4db147d514
SHA1 825bdfa0ba248b30c393d971271cb9be0cad8957
SHA512 b50ca21d6a18978fffdf5eea96f3a077315e22c02c6647ba493d25c63083832032195e58e91e9e59276d57151fe7f2a217e88597eec3c88e32bcbba1cd448838
SSDEEP 384:o3AGuEa7VrRQNlTG8r77STujhh6ly/hrZoWcMGYL+YD87NYvzfaNRvzfa+x:oIEYrRQNkoe2hhv1qjrYL+YD87+vzfal
TLSH
T1BA929EFB5C08B8055A605ED2F425B2CCAD56B856AFACE9FA516823870480FBCF4466CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8DFCB45CB093C5CE9C9E83A56E36D1DEDE8629E1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\8DFCB45CB093C5CE9C9E83A56E36D1DEDE8629E1
Size 32KB
SHA256 6a7d0356d3f8fcc25fd3a601e5518dd412de34241f921770a05d3c40f130a76e
MD5 3f00c97cf4f6a4bbf41c6967308402ba
SHA1 278552bfeb9218a62690600e68b1894a6c211e15
SHA512 f16cce37249e4e7bcb1445520ac316aae7ea95f6e85de705acc71b3c6ccf3e32ca7b4d839a7a83ce10e2423c4c1a9ddd35ac73720b76d57908b0557e8e2fcfe0
SSDEEP 768:85f2PrdwnVhCGsB62FgiGW7+mfmbkhscvN9j6fVnYL+YD87IupuZ:8gZsVcw2lb7PQkhB6Nm+udupuZ
TLSH
T1EDE2E0726D6992006A407E92ACF432D92C417613B8CDE1F976A43727F98FFB0B505D8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B4287BF1898C1078F8C92608480F318EC0281E01

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\B4287BF1898C1078F8C92608480F318EC0281E01
Size 90KB
SHA256 4efdaef15c6fbf38f13e366b359a0115b2ffb53d63b10dbf158c0d72fcd290b0
MD5 c7d83f99a1bd487b71f64befce56d0a4
SHA1 cc8782d0fdd2bb57d86b884c1c6d271cc27c16f5
SHA512 83126c530e3f4097339f6b373dfc87d34087017d40f7f027a5cf988a4ce30174fece972cad3da5615c706ff259d46b009f665ffae5479e0979c6a5112b8b517f
SSDEEP 1536:JXRJuSnhU/8WEQlSGBD7b8ErULhpR4mZqoPVrPtSEhtB84FCwORBXNetm+uN7h7K:JXRJuSnhfleLXb8EcV1VBSyp4wkBXNeD
TLSH
T1879312F96C7155E00EA16B48687673AD1AD86F86FF2D5CF518C2230F05C6B30A8677CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 6d3ae6eae1c49d3c5485b3e7768013af183a87e7120afb2093710b4606692da3
MD5 0ffc731ceccbfd02595bbed7c5582850
SHA1 8134a77058bbe249f214f5c9422af7806c967cc9
SHA512 a1182417e5cbbfc2c0011335e6593d0cc776e4835577ae688552d05b56f43f4e1103357b44cb3fe38cd6d5a774205464ef0fdac19c53a729805887d1673eb61e
SSDEEP 384:HbaFrLiO024Y/Fuhw+5EL1pPsac4j0lpDII+OXdXA:7aAZY/FuK+5EB9sac4ID8Lv
TLSH
T181528E7E9F0238BA0A6BE1D4D8E99204CD04E6BFEEE2D15205143C45CA847BDB4F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CE78FEB8A0BDE96608DC95BC066D741BF61FF14D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\CE78FEB8A0BDE96608DC95BC066D741BF61FF14D
Size 39KB
SHA256 43663af7412fdd11d1788d0757492f1a54ad38b2ab08021b1cfe40a2c05b335a
MD5 4f2f85770c01584cf2bba11b810d94a5
SHA1 7bb8a46c9a59384fff88550299b995d9021c9dbb
SHA512 7b2ba30987710308825825557873f07115c2601a5971ef7d14adce8fd917d48edd98035e97c9d9eadd120200ae2f32845d48d00e82fd6344030908e2e70a04bf
SSDEEP 768:WP4gMxh4F6MRbOI/odAG4x1/y7Ox8ViCE4EqbDwrx80/YL+YD87huSAuS0:WP4gMkF7og+exrv4fEFm+u8uSAuS0
TLSH
T13403E1771E6514907E61A971EA3072CCBE807553B2ACB578A3503B86FCC2AFCB5442DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D63AB25884CD06C77075DB2C0EB017533205569D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\cache2\entries\D63AB25884CD06C77075DB2C0EB017533205569D
Size 147KB
SHA256 b781380c443d9d237cd27979d174738a44733856efd3d093ae5d3b28e3b73d8d
MD5 37ee98fe0e839d569a185abf076a404b
SHA1 2aec08cb89e21173627d60b2a0ad5291ad2e7b11
SHA512 314feaf18bc1cc7bf53201709ce7ecbcee0d19bb6d9a81a654e4f21af1b2bbee2d3dd89c793d6fc048cda574185dcfde085639a070961374302e1b563110375d
SSDEEP 3072:9u9alKkOwY46HlrKbfDdKxEDBLM9mUXlV6drJ7IOHkYnkLN3BqgFZo02G:89qtISDdKxEFe9XX6jc2to5
TLSH
T1ECE312B37C1166B4811406AD812D39119D7C370A2BF9999BF00B6D1DDEFAC626CEF474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3tJMCE1+NK64WJa+AXRgEhnuHMS4W6dGberVyavKyGs=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\jumpListCache\3tJMCE1+NK64WJa+AXRgEhnuHMS4W6dGberVyavKyGs=.ico
Size 691B
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013
TLSH
T15D0194C2B2203025F81A82B05613C895D04E81EE0998A42A8CA7D1F6A848A23958EFE4
MD5 SHA1 SHA512 TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\14tbp3gd.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

18b3e6b8-0fa8-4040-af4f-5a1bf60b9c24.tmp

Path C:\Users\Admin\AppData\Local\Temp\18b3e6b8-0fa8-4040-af4f-5a1bf60b9c24.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

379d60c1-690f-4d80-850e-ffdeb0a22711.zip

Path C:\Users\Admin\AppData\Local\Temp\379d60c1-690f-4d80-850e-ffdeb0a22711.zip
Size 3.7MB
SHA256 41f88315ccb5feca6d1f0ca29ee131700bfe0f0a4a0cb4cc56912f7525275fab
MD5 3161f12ccf7dae28d5ba50957dcb38ab
SHA1 28750e8ab50cbeb7918f8b0e2c64df1d12a6f7f5
SHA512 f8a64ea32e684e0c7ca84f7faed743c74b31f194a8f8412cc41162c89e6c7a93dfbb90dc8041ce8e5dc101522c06ac68a4a57c12ad68baaa26072a9327b452d3
SSDEEP 98304:yLr0Cmjpv8wpUBBQBMEfINmTn7ylp5MAU:ewrtUQBMEfINmT7+MD
TLSH
T17E06E035DE9C1E08C98F83FA850C2FC29B4C4F668054A95B7E6A9571DFB31A21B47B43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d0815c0-724c-4835-a1c8-929252953986.tmp

Path C:\Users\Admin\AppData\Local\Temp\7d0815c0-724c-4835-a1c8-929252953986.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

Ferns_Installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-0J0MB5DFNX.tmp\Ferns_Installer.tmp
Size 3.7MB
SHA256 34826c370a10e036f8edaf778ee7a5ef5c337a499a99f052df8e602b27610a66
MD5 4f5586eb38e6d71ad834a7652fc09d9f
SHA1 1daf17d6dd6f369d66f7d511e8a463bf427ab27c
SHA512 517273acbdcfb78481110a80354874afd4c2dfd728028c71ef981fca8ac16406456121837ab02a85021cce8c67152830ed17c57644accb8daea5f24d1d4868b2
SSDEEP 49152:g3SA9I3bZxTZElVySH6UNoO7zjQynN4s7UUZyE8eECaN2Ml3334FE:gCbWroSkynN4sQ+TdMl3334C
TLSH
T1BE068D13B388643FD06B1A395837BA54583F7A7229168C675BF40E8C8F752842E3A777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 391KB
SHA256 1ce7848ae4441593497998f43b42f90c0d1946e093a35cc4b2e7502d76374efd
MD5 7a62517bfa96ed34a85877c07a355a69
SHA1 26433ba9419b4cc1877eec08df9a73828af7af64
SHA512 d306059de4a7d7ed4b4b9acedc62dd3ce1a6b519d5811d129b33c5a46b3d2e3d885d2e9c9f46b06801ef0a9a73fda4b907546145daa949051487533bd0f8265b
SSDEEP 12288:nIcjLHwPipMaXrmJlzo1XaFjL0r7eLpApNlCnQUDs:nIaHuiqmrg+4IrSANlC5g
TLSH
T1D28402F5F76078D3277E430BAE556FAE47A28D13C78E90DC582B778044BBB285E9A104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08b6338a-e299-4c1d-a38b-cd84ca23aa6d.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4044_1504320110\08b6338a-e299-4c1d-a38b-cd84ca23aa6d.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4044_1504320110\CRX_INSTALL\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4044_1504320110\CRX_INSTALL\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4044_1504320110\CRX_INSTALL\service_worker_bin_prod.js
Size 121KB
SHA256 ed3803ef5bac39e8b153d283695ee3562398e5d771a6c7fe5d1a85805672ab3e
MD5 aac97879e3f1c5a71cfb46b0fdbb29a1
SHA1 0cb02f7bbcbf207606888361be551e6d682c4c05
SHA512 8878736f8500a668e51e1f543ad7fe13eb7b4e19632918714dc64e952cb1f8400fa2026cfdac9ec757f4a285eacf6ce89f606a395500c56d2f2f39f8a64aa760
SSDEEP 3072:L3zCum5nHBRKbYK2ANj6a/4rxMwDLE2sk:LwB34GASx/DLETk
TLSH
T15FC3E9CCB7A574664363A5B6002F000FB23AB8AAE44C85A8F188D9E97D7446D4377F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4044_740470384\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IC7L978YI3Q55ETCZQ3T.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IC7L978YI3Q55ETCZQ3T.temp
Size 21KB
SHA256 abf79040e08e9d6603283a1903bc6ddf4c266d1b885d87e9258f3e0522d9ce5e
MD5 d21d47bdf64126b0ba1e78caa0400034
SHA1 abe9574ed297f2adde71769adb631f8dab00c38f
SHA512 26e6f5b73d660e4b5ea586ae44a615dbb6926246601ea27ac99179462430fe23ff6740cab52b721419c79b2d847fe96fad62590466f4195eb8574454f22b5f4d
SSDEEP 192:EnRnAn/9SnanwK3nxX9WsSQlnKXnuwjOZ4Lln29o/WosnmeBbDEG:8NQVumr3rWsSCatjOZ4VP4Bj
TLSH
T1C8A21F0127F61A16F6F38A31BEB0B3556F7BFD029A06A64E4240520A0D72F50CD69F77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\AlternateServices.bin
Size 10KB
SHA256 f09777596e5cccfd8931aa8714c9a924bf6a21841342034fce02b21d476dd167
MD5 0393d96fd38558a143ed78cdcb257cfc
SHA1 95fc19f54b2acf57149f7596bf828896afec8d70
SHA512 6dddfd53980a666ef692197cc11a7bdd9336d84bab2a8632c9cfb425d3e347f9d7b88160c8f830adc9332642c2d9b990e897d544263ad1e33847aca64bccf163
SSDEEP 24:2uhMZIj91Rms9BJmM9xy5j1J5q9F55A55A9Vvyw9F+/k9l6:LRKe2+2j1I565KBy6A/Gs
TLSH
T12022B4E76B71B462F0D28FB0909C754C9C33172659AE91C4CA6490F742C5BEAD03FBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\AlternateServices.bin
Size 23KB
SHA256 1399b50042daef3c06933859005af1ef0201b11e4af7f45cbcc3d157ad0627fb
MD5 0f2f8c80a5a974e0a30b8cef8dfe18ea
SHA1 fe74400d74ddb0f7c8da78821efaf5d3f5066a3c
SHA512 52a302341996b1db8f3b03f058e689c4687992dbbc0cb1957e48d9dff81affae6e6d796275eaa95c95c2c8d06941d25e50dd660131ea980871922ce5325edd7c
SSDEEP 96:G33Tqi5I56FOBeyIWsGqDM/pwEWCsiYbPCwcMQx2z4:SQ
TLSH
T1C5B295E76BB1E862F0928FF0509C749C9C33172958ADD1C5CA6490E742C5BA5E13FBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\AlternateServices.bin
Size 23KB
SHA256 02232d4202ba1541efe585e90f944860f16a2e200cd8bb66a6c55ab06852260f
MD5 de651bed5f37950ed3ee2005eef10059
SHA1 27823d54fd93a4870f0716d9d9f56ef60222e2af
SHA512 e52c04c870a46509b084e30eae843f1c331f38f2212546ebd3a5a3fb11c72dbba1d7f700aa4e6c7e297ecdcf7e53365a1c1ed9c91e8eae5806636910b5ffcfe5
SSDEEP 96:5i5I56FOBeyIWsGqj0M/pRrDXeINKK5Kq3bLHnxh24:A0QOO
TLSH
T1EBB2B3F76BB1A8A2F0928FF050AC749C9C33172558A9D1C1C66484E742C5BA5E13EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\addonStartup.json.lz4
Size 4KB
SHA256 e5d3c68f1ac04fa50214504059406eb347d601fff6abc5e77c3c35a943ca3dc6
MD5 a60c377de71858d7d671b19dfcd5d8ce
SHA1 29a0dc61ed75a7d8ba0b3c75e0025a549589607f
SHA512 9c7b4b35838155febbc8cbc6540b88b11d0b21678e206169204ff406e1fb83a00f3e524c771f28124eac4e773d8b512a4465555dd10df4d98a663ec13721fa10
SSDEEP 96:NMaq4sHNw6M2xWGhD41MgGvmHZ+rUpO1LnOYvhQhIRhN:ND152xxhD8rGvmwApwnHUuhN
TLSH
T1D3A17DBAD541EFA2FE32C04388D93FB2E699AB7420B9C4D4F1AA71194D24A735705340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-04-26_10_OMqA5Dg6t6qeEvcee6S4NVjypu8nqbJ02BS21y3a3NI=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\bookmarkbackups\bookmarks-2026-04-26_10_OMqA5Dg6t6qeEvcee6S4NVjypu8nqbJ02BS21y3a3NI=.jsonlz4
Size 856B
SHA256 9ab191361758f5a24695ead89ad11325083de3841dcb66422b095454a894a3a3
MD5 7e5545fb11d012b7a7dc0711bcd34c07
SHA1 7c36db6ef87b5433368d0ee0750af5f25a0551ac
SHA512 b6c4e603dccb9897b4a94ada3fbcca4ddde7a28d864f3aa4300195fc8e41640a9fb45aeaeb191cd6fa18820785bdc882e2bf2447af7bee1cc5fc3448ddfd4c0a
TLSH
T17911524CEAB215D40AD104BA00016EA5B9F37E06DFD948ECEE8E0CA460A89C853CA7CD
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 c212d1ebcc4f18d4cf8729f80c4656d30d3468721bccdc7abde0fbe86ad23017
MD5 9c59d869800250ab7c9681c276f6c247
SHA1 f6d01a1f8e3d03e9e39c4fb9eef49e5f4961c94e
SHA512 e2c6e9fc532585b331e0b33a4120f51fe15a22e560d92bbddf78348554bf801339b26d501703be1ad524a08dbe6a1777c88a35c486997a19c0eff5934c846a90
SSDEEP 96:KZFW2FDFLFbFUQ/dFl66JozGzgClKtmc0d/UOSdF95/7bkW60rvE8FyUR61WI:KoQ1/66JozGzgCl6mc0dtOv5zbowM8FO
TLSH
T11CC1EC64E628563FC449523BCCA52F400F76388BA88E3F25329C659C3D572DE7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 7ab4dce48a6fef35e8d5a888778c60ebb9bc606170a39e86427c3e43d678ff62
MD5 a492f671240f11afc88b48cf4aa944c7
SHA1 3d615f574f590f66e1b72207d9abe520e300bf2b
SHA512 8a8991e92b42c0acbe1a94296d91bfec95cd8ea7419ea30f0f8028f5c84091d3e0240bb8d57ff910fbd26561892692b60bac9f44dde4f28636fb939c92913f46
SSDEEP 192:kOv5zboEZ8FyjCyNoQ1/66JozGzgCl6mc0dz:nboEZ8Fyj4K/66JozGzgC1jd
TLSH
T111E11064E628563FC405127BCCA12F414F39388BE88E3F29369C655C2D5B2DE7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\db\data.safe.tmp
Size 112KB
SHA256 4919f7c2e41c7bcdd15b4dd6c4e5d0352d3d84a3cc88100cc760cd89cc177809
MD5 6bd1cb9b5ff93895d848c0af7c617fbc
SHA1 3e44d59e304cbf4aa004f2098adb1ca9fa6a8dd6
SHA512 5e2da79ada4ca682d341a913291b7d585b7abfa404dd1c43af92e5b9a87c6ba07105646c0a72496cb697b0328436d6c252c2689ecfbd238d357370610aa9da00
SSDEEP 3072:cQ1Cm0XDqS3BQeiZr0XQ5QpnCkky9xxKU:c6Cm0XDqS3BQeiZr0XQ5QpnCkky9xxKU
TLSH
T1CAB3EF80DB1A407BEC2485BFB495672C3735F4654A595B0B3AAC00762DCB3FF2D4E62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\db\data.safe.tmp
Size 112KB
SHA256 8c15c1a6079d01a4a54cabe001ee7c722dfe94a30ce628649bcbf5d580631a70
MD5 d61e7c61703fe153b1e163d0814ececa
SHA1 a0538a0be397c9a5d35a77166d42373968765cb3
SHA512 aead7eac829f7c58cb3b46979381d9abeadcc4ab7f3f419c8eabf8dd05b2c44920f20587632fc5780e9e9812941fef3846f052df85012fff64c631f82956a0f0
SSDEEP 3072:1Q1Cm0XDqS3BQeiZr0XQ5QpnCkky9xxK9:16Cm0XDqS3BQeiZr0XQ5QpnCkky9xxK9
TLSH
T136B3EF80DB1A407BEC2485BFB495272C3735F4654A595B0B3AAC00762DCB3FF2D4E62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\db\data.safe.tmp
Size 112KB
SHA256 421d334242505491f95028ebe77e1dea47e0a00d3ee0fd16eb3bad94d831913a
MD5 1cd0e5443040590174902174bba23d98
SHA1 cfe8ec7e75a382c3980862858f7ef7a42191b35d
SHA512 39029d73401f288417f2c997462294b1fcd015382482a86e4e6843d265232c22c9ea9b23e84ac4d42f4578fc64c8394aeaed556c14ccdcf6f0c9e63e885a83e7
SSDEEP 3072:LQ1Cm0XDqS3BQeiZr0XQ5QpnCkky9xxK7:L6Cm0XDqS3BQeiZr0XQ5QpnCkky9xxK7
TLSH
T1B5B3EF80DB1A407BEC2485BFB495672C3735F4654A595B0B3AAC00762DCB3FF2D4E62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\events\events
Size 1KB
SHA256 eef1ac5d6add7533128984097883321009a168c9e616aa8b4af22b9f4c54af90
MD5 235c3c8965027408013b8378af22751c
SHA1 596fcb78193c3589c05262a2f7302e33bca74837
SHA512 656f55c2c1393142ad6ffd81bd4ec5a75b39775f285e88ee0716b6c01005d1317ac02306332db59d46743d6a65302743f0a9e0f5448893a920ce5b3249101d73
TLSH
T12121799C3AF88D6AA8CBF35C7484128E63A58E0604C75D430E02EFCCCDD5AE9716A57D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\events\events
Size 5KB
SHA256 2b9ecf1f01b085b81e530ceec61a0719487fae38f0ad5c1ddec7145aec5bef69
MD5 dabe114db3bc2f89d73b7c37f10f8f85
SHA1 0ad0279908c5fec4fd517970988ec78039956885
SHA512 7863cc9c7a28d28ce3437830276744dcf9f0d9e873a26e94a9bcd634f22d466d61bf7a4cee6c23a8265b53c26635b4f826a1997398be43c2c88ba73fef7feaba
SSDEEP 96:3QI3Yx0nSxUCCxxL4oZ64t76ds0d10oONLs61b:3QIofxexhCPsO16931b
TLSH
T184C1111D35E40CBE65E7D39CB84142DE93AC4A02D0CB1C878DCBDF89CDD96A9725A178
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

107b2d16-ab95-44b5-b83d-64c4270bf77b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\107b2d16-ab95-44b5-b83d-64c4270bf77b
Size 2KB
SHA256 2ca93020888824aaafdea6d83cca6c451c898a8559a1f2824b49f473fd971e34
MD5 1fd8c6f92c4a0d6e48447b2c731332e6
SHA1 deb3b64a3b0bcea7e47a4239a773620daac3ea5f
SHA512 e73f886b31938f9eaee4360bbc0fe427b3a57d22bf4c8f10270f45d423db8253ae39e2ccd188ecfa5f8dbca2cb678176c02720b714e0b4260a46def35f98e17f
TLSH
T11641136839785CBA9CDAF19DD08136CE57644A4380C619432E52DF4C8CA26AA73AA52B
MD5 SHA1 SHA512 TLSH

Submit Download

2510f985-9a72-463f-9505-7b34035333a1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\2510f985-9a72-463f-9505-7b34035333a1
Size 235B
SHA256 6a895981ca0df53f557dd289cf745d8d843158953f08fb0192c1661a81544496
MD5 5f76ba45b7a6c2a6ecbde4e0f447c31f
SHA1 94768dba712470e3d61e1deb45c04456c4e1298a
SHA512 d797f11f84940323a8f09a2352c525607a36fe1186b670f26e1d3d7c1a1349beaef4c78a715973dd0de7264c00390d4591e7f2b7d014d8da9e4f514f6973f0d2
TLSH
T1E3D09798249867AC0C150F13F0E02AD6B0888C332868A860C59206B8BAB9DC401A581B
MD5 SHA1 SHA512 TLSH

Submit Download

4425ace2-6c13-4b97-9bac-e584e0f99b98

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\4425ace2-6c13-4b97-9bac-e584e0f99b98
Size 883B
SHA256 f3c34eba7eea61c76276ec8865637b4454b9c0c285f4fb167fc0ad27a0fff302
MD5 dd776ec6181d6d1475f9e09c39a4a1f0
SHA1 0283f1298f9aafcc9ed852de68894ccfb1cbc9fc
SHA512 8a2778903ada76f1b19d55737caa902c057ff93f88777c40c6d98151ee1222c0bda43c704e75fd5c6a371f844e04313404e4b29fa28e57ca739d4d05f871e1d6
TLSH
T113110081D23079B28D68D25BC5853B4287E87413C0CA05143FA54B180D7B51EA36E20B
MD5 SHA1 SHA512 TLSH

Submit Download

c2846955-e380-4f91-b4ab-5b74937f0f9d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\c2846955-e380-4f91-b4ab-5b74937f0f9d
Size 886B
SHA256 4c720727e0f3b9a749f16ff4b129abab44701e23dc99116a71e43abcff745b2f
MD5 59e717a97e1c911509c5987b8ccd78fc
SHA1 45d142e74504505fd25c6c6b923224f797979487
SHA512 6f989921982232e641fc0e76349015aea7c8394375c6df46cd6d2f4f8d4e3cdbc72a175526a9f02d4ea56a2dd7a45c2135eb1fed6d2f57a20e2f78495f22db2e
TLSH
T1F011E391C67479F28D78E29BD5907B4287E47163C0CB09187F614B1C4DAB11FA7AB30B
MD5 SHA1 SHA512 TLSH

Submit Download

c719725c-d7a6-4a03-870d-93968b662bf8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\c719725c-d7a6-4a03-870d-93968b662bf8
Size 235B
SHA256 abfcd5f2dee99d52c5f9a8f30a6e3ee2af71cd9e6d4719c71c7c68b0b97437f5
MD5 0b9359d03361d58326910abd3e8048ff
SHA1 01dac3bbeb91f7be933b8361de844ff9defade19
SHA512 675eca0b3cd4920b275f131714e47e7536369345fadfa69e189324f5091f2913aeee015c8a3d2160c4c75882217d8ea8206998830b44bae4700702373d5fbdf8
TLSH
T1EDD09780149C235C09000F03B2E028C230988C3328B99810DA61047CD9FAFC84231806
MD5 SHA1 SHA512 TLSH

Submit Download

cb99de7d-659e-4c95-9196-c00f4416c283

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\datareporting\glean\pending_pings\cb99de7d-659e-4c95-9196-c00f4416c283
Size 16KB
SHA256 8adaff994b4f423b0a009a207f46242bc3e3225ad8791ac8ee9289ea70543322
MD5 d1cb368fb94aaaed1702c4e1b64b064c
SHA1 d19cfbe4470f46b6bae722193df253cfb8c8cfab
SHA512 c4df4ec9b9e05bf0d0319d4aad787f2ade17918f6d7319351e98237e7ea612001287d4e4a7162fa40e310599947b2888a1a3fe0ccdb52230db4935800ac77164
SSDEEP 192:DeXq9QcOzRmUKX5HjJvqY/NgN62oKVQsg3h6Bbw1vDctJRF51zxR1D8bcG8guDWm:6kCSK/MkpptFHlR1D8bcZjdrkBve
TLSH
T18772D956586049BA8291E3A894FCBFC3E6F538CB4C428FC997E4BD086DDF05E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\extensions.json
Size 16KB
SHA256 5f680e1a39b3c744d12a3ddccc2ef3b2377eeaf4b105dc4ebdd4a66b5767d69f
MD5 410c868f0a95467448f95839bb6488e5
SHA1 b699bb20ae0068cf8840e6b75cfa194b920b606d
SHA512 641f89520b9bba7a3d098f303abeb0ead9f562752f5d4faf1de609c2e7c980c7a03b60b73637576cf5697d7d7e17ced2a89e42b9f43ccd34f6e2a45f06a2c389
SSDEEP 384:FZkI4vXUmldvS8dhWH94zH96oVL4HNL4P8L4H+L4HCL4Huq4hp:cI4fRfXXG4x6+4t4u4k4Q4Z4b
TLSH
T16A72431545049EB8298FA79AAA367E01C37D473B60845C78F4DD8FC802FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs-1.js
Size 13KB
SHA256 94a89bc60a416f384c09930831b96e4511a1d9d70d6b0513ad9e7f2ab747c48f
MD5 9457a3110fea66684fd2a65e28fbd6eb
SHA1 004484d5fac7e36171d4ddc8ee9207d21d78d023
SHA512 006a1bb53f6100cd32905b1a3a00a496db1c708461dd87655ce35b5b53100659353ecf159b444b081191b8adc7058c280596a84fafaa8d005c8b55c442e02aca
SSDEEP 192:PtRvf/S62SSG+XLRfII/umVw8/kF0HjRSfwvO6p:3HaRQI/pwMe0N7T
TLSH
T1C652AC386144CF3F28B6327DBC258DA11A610527B7BFBCD306B984D5449CF2481E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs-1.js
Size 12KB
SHA256 aed165cc8df9575e5838714fb4c238ba52577a8e2be58f0f1f00a236364d3a83
MD5 1f26a5e478f004590e2ff14f00fb5fc3
SHA1 ffb834a6ee7f1dd6616c1dbbf2bd8a8b8b5075f0
SHA512 9836e7c64ee7bd90e7024638c94005324f7c43799eb1836fc401d8cb6b025d19fba909e0c3592015d48520dd06ae68304c6b4bf1800cfb2a89807bdf4170a153
SSDEEP 192:PtRvf/S65SSG+XLRfIIyumVw88ZDq9CBnp:36aRQIypwd/T
TLSH
T10B42AA3C5140CE3F28B2327DBC2549A029714627BABFBCD306BD84C1049CF6591E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs-1.js
Size 8KB
SHA256 c6fd72a333fe2a731ad279d7879ef37f150572be9e45604aed3709ae0b99cecd
MD5 6787ef30d935a6c02ef9296a122512f6
SHA1 e8005032f9d4568de4bac18b8226fa503711a19d
SHA512 797f596a1c2b0d791fce8b87efcad2d94366c03649aa2a2cbc33daabf75901646b2121ad592daa3bbbc4de656cc516aeac1a14799332c4b68230fcc9aac4b439
SSDEEP 96:xHJs9TU9qGqvf/S6NbzSwSSl8pdv9j/nq3RWRkWG92b9Bw88Hd8L4cnA7eAGS:MtRvf/S65SSG+8RfII9Bw88HXp
TLSH
T1D802EB789504CF7F68B2776CAC6889716A72013BB7BF68D710B944C4015CF3485EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs.js
Size 6KB
SHA256 d5796b03b16e24e6df637435b33bd43884335380a1bf5ee639bf6f701f6060f8
MD5 21203967e7ab12b5fcd80d874791f2f2
SHA1 b06233072777a8f8b6a50f7b61453f7e4534a288
SHA512 68fbc89acfc3d2d30493c8102d94ce11a7ce5ac32d1960263c402c068ac1f5601c6379131e5c6830099b6817247606c7029268755a95e17b05c918437322b2de
SSDEEP 96:xHJsUTU9qGqvfClKjwnj21zSpCMaSSl8pdv9jjnq3RHKG924Bw88n8L4cnA8b1:MwRvfCl36oCMaSSGS9KItBw88ap
TLSH
T17DE10F7891088B7F74B677ACAC6489719AB2017BB7BF68D750BA44C4010CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs.js
Size 7KB
SHA256 935840ddc47148b89a7c449d996d91bd438be44c048161fc66a913277667b307
MD5 ea77d5cacf99a4a47776e5d42d025046
SHA1 a15f66317b5463fa253c1a5d5558b621006ea1a5
SHA512 3536456d7eee6de73fcc37609c5ee92e61658c87ab478950b1b6580f48c6a87b601b5561f9fb690924c9fab8927178a520277f5b334a9f23849e145ffb3cf4b2
SSDEEP 96:xHJsUTU9qGqvfClS6NbzSwSSl8pdv9j/nq3RHKG924Bw88n8L4cnA8bAGS:MwRvfClS65SSG+9KItBw88ai
TLSH
T176E11F7891088B7F78B6776CAC6888316AB2017BBBBF68D710B554C8015CF3445F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\prefs.js
Size 6KB
SHA256 8c3f1c7b1b1f19905f4396813c9a9a1cec9ddd43e6ba7b381bba77fd860290f6
MD5 e3bca8fd7c10d1609ba4836177accc68
SHA1 ad032801e82d3c56e54c019c379027bba0b5c1bd
SHA512 1ee0bc072c51ebef72f2d8fba793ec647b7b27a9ea09504a75f1d1adfbda0ff3eda1d87a3afaf981fb7c05896d1211655a530ebde3aef727a9eca997e3f68d05
SSDEEP 96:xHJsUTU9qGqvfClS61zSwSSl8pdv9j/nq3RHKG924Bw88n8L4cnA8b1:MwRvfClS6dSSG+9KItBw88ap
TLSH
T1BBE11F7891088B7F74B6776CAC6888316AB2017BBBBF68D710B944C4015CF3445F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\sessionstore-backups\recovery.baklz4
Size 135KB
SHA256 ff502fe095a388d1698491dc074943adbf6b8e5defcbece8703e336d23a333ad
MD5 58d156571849900982784358563b2aae
SHA1 a9a5dd4329f63f892ac6347ce384dfd1d05a1256
SHA512 955902a4d824c932409272308992600c0c0e0f69e897d889d08d64d9a6c780d324df019426d097381e446049432f258512fe753c24582fb5564c9af770fb9f04
SSDEEP 3072:nzaGYzYE1COF1aO4SBcy2zVeY+BVSbYWFA:zas7Ty2zVeTvEA
TLSH
T13CD3F2477814AD38179D2235EC8D9B5E5D1E1CCF39C05FF2711B77A025BA929A42A0FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 4dca012cc651254e198d5622e1840480bcbaf0e53e99be29b0de8f75103a8b83
MD5 8e332a574dfdb8b558d024deb5ac562c
SHA1 98cd2b7210370ac9c4894713916722fdb747097a
SHA512 b99bb8fb79584510ae69f2e0c924d52bb44d29955754fd09da984d9798186d8c94814441de40e4d447cc460f6956aa0c6ed37295a4aa49d066585dc128fc9529
TLSH
T1AF815A32DD2DACC6FCF8B2BB20E14AE2EB3B500043E6D8A499450435C48B2852BD5A76
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\sessionstore-backups\recovery.baklz4
Size 138KB
SHA256 d52eeba84c5870a58cba9cb7eefb3cdebcf83aad3671fc5391b9f0c3a084d6a6
MD5 0a0b879917d7da7c7e66b147917039d0
SHA1 ab05df1cbe74f50734767eb29a13cdec8d1d5149
SHA512 ee0737f9c4f74b20ddc173cb850145642f1bc4454fb2a23cac188aa55a2b6bdcb2eeddbccaee3236b90882f3adda8e6ca9a874c6d292361cd9c14d8c59ac09ec
SSDEEP 3072:xgDI1knP3YE1COF1aO4SBcy2zVeY+BVSbYWFj:xg81J7Ty2zVeTvEj
TLSH
T1D9D302576C14AD381B9D2635EC8D8B5D4D1A1CCF39C05FF2711BB7A029BA92DA42A0FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\sessionstore-backups\recovery.baklz4
Size 7KB
SHA256 5532d36a4c37dc5ec4971412475feb5ed5e68b3987cde3550f73efa7699af7b8
MD5 fd2437616ec6549a9a7daa29c2afab9a
SHA1 f7d38de8c509b912248efd3fe1a3eeb90797aa9b
SHA512 7a77069226746f8b872cc05e118061034b836b5023b4b533e06fec7745fb6a23df035dd899a6bda7ac4b44b1bd1f9c9140bf443c10fdf8279105dc07abbb3a7c
SSDEEP 192:/j5M89yxxC5JVp4116E1+KJAxfX3Pnq9i0v/4LY5:m8IxmJV2uE1+KKZEpgL0
TLSH
T107F1AEA7A02B48AAA179F8602F6F0F4556523C5984E9114E5B35BEB085F874F472091D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.9MB
SHA256 c58b36fca6a0fb32afee251e3fe58fc63de3f3179b764d8bae3471fabdc563d7
MD5 bc44d7b659d17c8ce23f9eb389488b14
SHA1 0272c454c1aab19530994f86a86374712b97d2c6
SHA512 2dc7bdea0ba86cd7ce6cd5c2eb058c111beb687592f3158e57c9be46299935e5dbf852719207db4efb1295c78d760db54b4c558643ae821568ee160d53f81ef6
SSDEEP 49152:5luJnob4VLDI3/GEMn3w7mgmoYRZPcP8D4xDIa+pXUHR8a3tF66QKhlLH+clhVlP:ruYwL83/GDn3JzZ
TLSH
T1DB565CE420E2D252F38540B3719A53FB10EFC01C60768E44579896FAA978CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.9MB
SHA256 3b495d769a30e1d9dd9f283abb8af8da89a07bff9ce1805ebe06ea647eddbf52
MD5 6114ff0ba04dd819185c7c27f23a30a4
SHA1 70334800fc168041dba0438fa188b6eac15ddb9f
SHA512 2de735cb5abad8da5d4f90950ec09f8c673bb687786ec796918bcf11009bb0da764393c389dfd2937203ad2fe9b38309382779abb978126f3dbc7ccbbbc304a3
SSDEEP 49152:PykURVaAIoW8zN6wl/qT9lxy7/1Y2pz8YwRQF6BxA0Wau6NDLR8IUJnoNE2LDI3T:34WDL83/Aqn3QlI
TLSH
T16D565CE420E29252F38544B3719A53FB10EFC01C6076CE44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\14tbp3gd.default-release\xulstore.json
Size 167B
SHA256 c1bed5f53e44f988d50469fe36ee52ab0bfe2215cc126514ad06b5c0c28dfd87
MD5 2ad8b3c13995ae985a912f3297c6103d
SHA1 45b786fb55ccbb948a89c9a233fdab1fd3c82eb9
SHA512 c9853c003b0c9fe66ae2cd849dcf17fe1e3646520a5d2d5cf5ec1bdc1308ba504f58a248ff4b5fda487d7fd97318899e2c41ce1c628a5895aa75648d10a34ac3
TLSH
T109C08CB0216FD8487D27CBCF128D22983D3A8A54A1D0529A69EA94E018C570F9D18388
MD5 SHA1 SHA512 TLSH

Submit Download

memory/404-11-0x0000000000970000-0x0000000000D34000-memory.dmp

Download

memory/404-12-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

Download

memory/404-6484-0x0000000000970000-0x0000000000D34000-memory.dmp

Download

memory/404-5-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

Download

memory/404-9217-0x0000000000970000-0x0000000000D34000-memory.dmp

Download

memory/404-9222-0x0000000000970000-0x0000000000D34000-memory.dmp

Download

memory/404-9223-0x0000000000970000-0x0000000000D34000-memory.dmp

Download

memory/2092-10499-0x000001E998B90000-0x000001E998C2E000-memory.dmp

Download

memory/2288-10-0x00000000001D0000-0x00000000002D8000-memory.dmp

Download

memory/2288-9224-0x00000000001D0000-0x00000000002D8000-memory.dmp

Download

memory/2288-0-0x00000000001D0000-0x00000000002D8000-memory.dmp

Download

memory/2512-9220-0x0000020648B60000-0x0000020648C75000-memory.dmp

Download

memory/3312-10461-0x0000027CDE200000-0x0000027CDE315000-memory.dmp

Download

memory/4124-10483-0x00000000000D0000-0x0000000000494000-memory.dmp

Download

memory/4124-9240-0x00000000000D0000-0x0000000000494000-memory.dmp

Download

memory/4228-9239-0x0000000000950000-0x0000000000D14000-memory.dmp

Download

memory/4228-10484-0x0000000000950000-0x0000000000D14000-memory.dmp

Download

memory/4568-9225-0x0000016E75500000-0x0000016E75615000-memory.dmp

Download

memory/4588-9226-0x0000000003440000-0x0000000003555000-memory.dmp

Download

memory/4588-9241-0x0000000003440000-0x0000000003555000-memory.dmp

Download

memory/4588-10493-0x0000000003440000-0x0000000003555000-memory.dmp

Download

memory/4588-10498-0x0000000003440000-0x0000000003555000-memory.dmp

Download