hxxps://haezdev[.]itch[.]io/galvan

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
1798s
max time network
1798s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://haezdev.itch.io/galvan
Sample260503-prphvshv2v

Score

7^/10

google discovery persistence phishing

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4444	msedge.exe

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
647	1972	firefox.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-hy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\edge_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\wallet.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-hi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\bnpl_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-shared-components\ko\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1149001795\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-la.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-pa.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-ec\hu\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\zh-Hant\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_304363057\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-mn-cyrl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-ec\ko\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-ec\pt-PT\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-mobile-hub\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-ec\ru\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\es\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\zh-Hant\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-tokenized-card\zh-Hans\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\shopping_iframe_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_304363057\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_131042153\kp_pinslist.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1149001795\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-bg.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\ko\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\wallet\wallet-checkout-eligible-sites.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-lv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\bnpl\bnpl.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\pt-BR\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-mobile-hub\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1589959096\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-mr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-mul-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1363575625\Filtering Rules	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1363575625\Part-FR	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\app-setup.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\ko\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-sk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1363575625\Filtering Rules-CA	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-hub\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification\ru\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\el\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-notification-shared\fr-CA\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-tokenized-card\fr\strings.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3964	msedge.exe

Checks processor information in registry 2 TTPs 28 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222852600768396"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{C8CC70D7-572D-4A08-B88F-E705D35F80EB}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe
Token: SeDebugPrivilege	1972	firefox.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe
1972	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 4624	4444	msedge.exe	85
PID 4444 wrote to memory of 3964	4444	msedge.exe	86
PID 4444 wrote to memory of 4752	4444	msedge.exe	87
PID 4444 wrote to memory of 4752	4444	msedge.exe	87
PID 4444 wrote to memory of 4752	4444	msedge.exe	87
PID 4444 wrote to memory of 4512	4444	msedge.exe	88
PID 4444 wrote to memory of 4512	4444	msedge.exe	88
PID 4444 wrote to memory of 4788	4444	msedge.exe	89
PID 4444 wrote to memory of 836	4444	msedge.exe	90
PID 4444 wrote to memory of 4788	4444	msedge.exe	89
PID 4444 wrote to memory of 4788	4444	msedge.exe	89
PID 4444 wrote to memory of 836	4444	msedge.exe	90
PID 4444 wrote to memory of 836	4444	msedge.exe	90
PID 4444 wrote to memory of 2116	4444	msedge.exe	94
PID 4444 wrote to memory of 2116	4444	msedge.exe	94
PID 4444 wrote to memory of 3872	4444	msedge.exe	95
PID 4444 wrote to memory of 3872	4444	msedge.exe	95
PID 4444 wrote to memory of 1092	4444	msedge.exe	97
PID 4444 wrote to memory of 4068	4444	msedge.exe	105
PID 4444 wrote to memory of 4068	4444	msedge.exe	105
PID 4444 wrote to memory of 4068	4444	msedge.exe	105
PID 4444 wrote to memory of 4248	4444	msedge.exe	107
PID 4444 wrote to memory of 4248	4444	msedge.exe	107
PID 4444 wrote to memory of 2588	4444	msedge.exe	106
PID 4444 wrote to memory of 4248	4444	msedge.exe	107
PID 4444 wrote to memory of 2588	4444	msedge.exe	106
PID 4444 wrote to memory of 5456	4444	msedge.exe	111
PID 4444 wrote to memory of 5728	4444	msedge.exe	112
PID 4444 wrote to memory of 4668	4444	msedge.exe	113
PID 4444 wrote to memory of 5088	4444	msedge.exe	114
PID 4444 wrote to memory of 5088	4444	msedge.exe	114
PID 4444 wrote to memory of 2028	4444	msedge.exe	115
PID 4444 wrote to memory of 2028	4444	msedge.exe	115
PID 4444 wrote to memory of 1252	4444	msedge.exe	117
PID 4444 wrote to memory of 1252	4444	msedge.exe	117
PID 4444 wrote to memory of 2076	4444	msedge.exe	120
PID 4444 wrote to memory of 2076	4444	msedge.exe	120
PID 4444 wrote to memory of 2696	4444	msedge.exe	121
PID 4444 wrote to memory of 2696	4444	msedge.exe	121
PID 4444 wrote to memory of 6120	4444	msedge.exe	122
PID 4444 wrote to memory of 1872	4444	msedge.exe	123
PID 4444 wrote to memory of 1872	4444	msedge.exe	123
PID 4444 wrote to memory of 1872	4444	msedge.exe	123
PID 4444 wrote to memory of 5696	4444	msedge.exe	124
PID 4444 wrote to memory of 5696	4444	msedge.exe	124
PID 4444 wrote to memory of 5696	4444	msedge.exe	124
PID 4444 wrote to memory of 656	4444	msedge.exe	125
PID 4444 wrote to memory of 656	4444	msedge.exe	125
PID 4444 wrote to memory of 656	4444	msedge.exe	125
PID 4444 wrote to memory of 2004	4444	msedge.exe	126
PID 4444 wrote to memory of 2004	4444	msedge.exe	126
PID 4444 wrote to memory of 5468	4444	msedge.exe	127
PID 4444 wrote to memory of 5468	4444	msedge.exe	127
PID 4444 wrote to memory of 5468	4444	msedge.exe	127
PID 4444 wrote to memory of 4652	4444	msedge.exe	128
PID 4444 wrote to memory of 4652	4444	msedge.exe	128
PID 4444 wrote to memory of 4652	4444	msedge.exe	128
PID 4444 wrote to memory of 4580	4444	msedge.exe	129
PID 4444 wrote to memory of 4580	4444	msedge.exe	129
PID 4444 wrote to memory of 4104	4444	msedge.exe	130
PID 4444 wrote to memory of 4104	4444	msedge.exe	130
PID 4444 wrote to memory of 5692	4444	msedge.exe	131
PID 4444 wrote to memory of 5692	4444	msedge.exe	131
PID 4444 wrote to memory of 1384	4444	msedge.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://haezdev.itch.io/galvan
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbef0ac188,0x7ffbef0ac194,0x7ffbef0ac1a0
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,4720835904798670252,10729600583901134236,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,996809590229653908,8668405337826257772,262144 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,16332466450095135803,12838859777879009815,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,2045518000783161640,13763638359187405933,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16855560256612141816,18434347667086846063,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,10220412793106277091,3465849292781443419,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,1725262606460284458,4947939827959597086,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4304874085472200973,13359578119488232396,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4304874085472200973,13359578119488232396,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6152,i,4244268984976423232,17973415779665924637,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,14908735863670647197,1234888209854295337,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6352,i,8108571550206143953,4544474524094496924,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1331267987061926308,17769958261654571946,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6808,i,3332592390819004433,3570209803730975803,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:8
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,1385605484763008759,12709650363738088440,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,5684335047383052301,1957851201749685853,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,8186708382675072230,14880095468041029381,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,8674721382022265340,10085325884003839020,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,17709579892751025215,6865780443873811194,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,12057703443699863165,5882056974549549503,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5468,i,7820253168224500780,1551313147223310615,262144 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6928,i,17521515231869555700,7594212319316655848,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3636,i,16681830653215149195,14574475123027310295,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6800,i,1092643062257419669,6356428043195648110,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3164,i,8531887616257140792,9474652898430926765,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6528,i,753818934191988536,1601193484893209336,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6816,i,8568550255306822110,16691302513661568809,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,5777881616979076115,16049392661554394018,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,9492820075014161338,13918695008203739495,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,11103839787244417884,3485296250509219111,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5528,i,13768417376927200210,7224160098559361233,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6220,i,18329861562467927604,15508352429589241582,2097152 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6996,i,8545630138425163278,12305888551597836571,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,11486236349603718088,874554126735766775,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,16205868540955725912,14161184912832295799,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7260,i,7991401612482598325,4288733988077983544,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,16471751850393107605,166967571472399868,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,8428512635963360817,16138695686426263895,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,12231791990156613773,1966801263043579878,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,15237268170110261538,10959472621038179057,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:8
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,12562678666391652432,17513857112546258124,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,11384303087392146728,6931513353485647017,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,10025924178085539538,17795603462502108731,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:8
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,6654587515027314408,7092568199233144678,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,3493218364175676478,13910970887032229864,524288 --field-trial-handle=2300,i,4045128966675118006,455777848977387989,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:776

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3792

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:5192
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Detected potential entity reuse from brand GOOGLE.
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:1972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {5b97d5a4-42f1-4a0d-ad8a-eeb1220124f0} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4296
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2468 -prefsLen 27135 -prefMapHandle 2472 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {a406b0bd-c324-4b82-82a1-727ebab35902} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3764 -prefsLen 27276 -prefMapHandle 3768 -prefMapSize 270279 -jsInitHandle 3772 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3780 -initialChannelId {8d96e98f-3ff6-4ee7-83a2-348dbfe87038} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2140
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3956 -prefsLen 27276 -prefMapHandle 3960 -prefMapSize 270279 -ipcHandle 3764 -initialChannelId {4013e3d0-ee0e-484c-a70e-0db610849832} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4576 -prefsLen 34775 -prefMapHandle 4580 -prefMapSize 270279 -jsInitHandle 4584 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4592 -initialChannelId {364c76b0-c62f-4c80-9dfa-af88e1d8cdcb} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4764 -prefsLen 34905 -prefMapHandle 3396 -prefMapSize 270279 -ipcHandle 1248 -initialChannelId {90d76e58-df47-4d13-b93d-b33394eda31a} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5412 -prefsLen 32845 -prefMapHandle 5416 -prefMapSize 270279 -jsInitHandle 5420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5428 -initialChannelId {cf7cc56a-6a0b-4a5f-9a73-9e83856445d7} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4320
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5608 -prefsLen 32845 -prefMapHandle 5612 -prefMapSize 270279 -jsInitHandle 5616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5624 -initialChannelId {25beecef-8741-4fcb-8dce-1ce7a7600807} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6096
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5796 -prefsLen 32845 -prefMapHandle 5800 -prefMapSize 270279 -jsInitHandle 5804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5812 -initialChannelId {f9fe57f7-1dda-43e9-a75d-96f370d5f0dc} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6532 -prefsLen 33031 -prefMapHandle 6536 -prefMapSize 270279 -jsInitHandle 6400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4684 -initialChannelId {73d1333d-82fa-4108-8595-98f2004ce040} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 18836 -prefsLen 37533 -prefMapHandle 19668 -prefMapSize 270279 -jsInitHandle 19656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8392 -initialChannelId {444b7ba2-bfae-4bf0-a3b1-fe523589c7ec} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:5764
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19668 -prefsLen 37533 -prefMapHandle 18836 -prefMapSize 270279 -jsInitHandle 18760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5644 -initialChannelId {27edb56e-54f2-4a2f-8de6-4651768082a7} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:808
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19668 -prefsLen 37533 -prefMapHandle 5672 -prefMapSize 270279 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5644 -initialChannelId {27109919-0b94-436b-914e-b394a54d3241} -parentPid 1972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1149001795\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1212902907\manifest.json
Size 52B
SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
MD5 50ba36034cb8b97ce52eb941d76e9103
SHA1 a8757a3700f2af777ce5efc382010d2619f51491
SHA512 001110c3e45514a09cf6f60ca14855524e83ac15cf56776cf3005e016464dc6584b107c63842328a7c1738cc7f2154d8689f84d913b9b8199367699c3f9085aa
TLSH
T1FC900260082491171AC10E506570F8859391661A95851D1D0445154802A646CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_131042153\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1363575625\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1420056576\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

notification_fast.bundle.js.LICENSE.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\Notification\notification_fast.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

tokenized-card.bundle.js.LICENSE.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\json\i18n-tokenized-card\fr-CA\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1573160266\manifest.json
Size 121B
SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
MD5 8083caaf7f5bc5f01ede464e68db1c7e
SHA1 ed6cf18f79c4ee2968adfffe7bf1bce163ef3873
SHA512 60924bd5617ac5f994805f9a871999764ba93c6adda79c501a0b692dce51b9db6f6531a5e25129bc424ae7c4de868ba6e5a976d6bcfbac2bb8bd192c5513c7ee
TLSH
T10CB0922289429D300469079809B486A6E230674BE406F0397B7041CC8B785B8A4A2A94
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_161142489\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1788471284\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1861616174\edge_checkout_page_validator.js
Size 996KB
SHA256 65a91c695553a3535c6df406e4b00c51b8fd7ea237bf24dcbca52dd3734278c6
MD5 8ff56f0810dd4bd46186349b66d328a7
SHA1 14fb3ad9b4b5905705db300fa6bf0ba32f70c40a
SHA512 2a2f8fc266ab748921bc6b92285070059d12b1e3a0f9e57f4e2293366684a2d3ff0d2fb6a86d3d701f0f64640319ed41c09d0f0d7aa4f7b7b1603a9b288f2153
SSDEEP 24576:cs4imRAbs1vGrkJUA5jKQmwzErc9Ot3LYVfik0BwrpiUWLRKLRzMEiJsfaGx1huq:cs4imRAg1vGrkJUA5jKQmwzErc9Ot3LS
TLSH
T140253C84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C588ADB0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1861616174\manifest.json
Size 146B
SHA256 69484b9597231b609eddea4c78716e7c316fe6d39076c76a3eb3fb440fa74486
MD5 a6ed09a4ee7b9c1f82c53cefc32b02e8
SHA1 2561022ed2d48c4badddc448a3f9288c7eaa20b9
SHA512 ffcef7c16facf3e5d8651a7833bd16c618726b00505975d570797707d79a7a177fce7beb96633a2ba5f2cd4a755f86a628483d6ef3467e95effb1b4e3b696852
TLSH
T1E6C02B33CC31AC30093007D448F08701EB34234BF500B0163730008D0B3C47050206D0
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_1985807383\LICENSE
Size 499B
SHA256 55064d7d8fecdd90ba36cebaff34f05583c183b34686b17b40b974442fc07523
MD5 d8a9bfce875f2081d41dbb18dc618b14
SHA1 5bc4e44bd455d8838fc382b5a5525aff1a117e4b
SHA512 643b0befb7244283f08188fafb2e7f96cdf82353d06ca5c0b25ad0157eabe786809677c876faf3b12888a8c3ce38e97c8090505b06c514370a16c955db3fd8ee
TLSH
T14DF09E7EBA224772459603C7011540D47B1707FAF25422D1B358C1E4276E27982FF184
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_2029248123\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_304363057\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_304363057\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4444_35397834\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
MD5 1fd2da899cebd4d5aac2a3d85c0bfd18
SHA1 3f4e6dbc96df63582e9ba17acceda5012e453d7a
SHA512 840622178b39a880be2d80a1349d1dc0f7bfb63bf38c38c71fd96b89033d54de3e6a88f15ad237f3b66a8ebbff2bcfb19f5b6a6e94882c94044f73046f231584
TLSH
T1D5D0C0CC33B13C26C58C807004457F4D340BC4A20D42C3263433297C0CC30C428514C3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 541090cde41cd1e0db2a655546f5eee2ee248d81a576cc15f2549530964dcbdc
MD5 a323c741e32b9971997314bbc79946a2
SHA1 e392db18e0064e495b124ae2f6d8f198b3c2a517
SHA512 654308c8fc2e418eba3b447839a3f29292b58f5b66ffd889c4efd770917e24727c8c82049ad142e5e198731c638d71be149b6d91fabd3059642ac294ba14cb1a
SSDEEP 192:6jmklIIIIIIIIIIIIIOOOOOOOOOOOOOOOOOOOnh:6jmklIIIIIIIIIIIIIOOOOOOOOOOOOO1
TLSH
T1B5F1A15342D4DA9A8F1910CA4AF0635F80F5370DEFDCD69813ECD9D9308D8DAA4AA9A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 ed4283f6be726f7bf4587927b457cc568b3c4172f338200d693f547613033612
MD5 2dc6fa1d8e98237c7af5b57bf3a92f85
SHA1 61743108d91f658ed5ad70a62759e362426d9208
SHA512 fd11c72f9cfaf745f3c652d9c7be418bf855b76556fcee594c3d2104836d4dd5e026d70e363746d0412f78586ababe46016f47a583c3f76f3ea1a1ae16372bee
TLSH
T1DBE0D80C52C0D5A50E00A8DB8255A37BC1C07007934C56D573BCEFC66C02810652A1E6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1a0b641a6deae427ebb3e859e720494a8b0ff7827eb00a8dad290dd2dc52bdde
MD5 7cd85c07e2db20b5bafb6ae936887b56
SHA1 84575c21032830afa099818fa5654138b12fab9c
SHA512 eeb7fcb6580815c57c52859266b3c76708aa9abf445c3b1109f59c0cf5268cbd39d92e57572ae4c223e118d84b0c0ada1a6d0d8a3cead4a318238707adf7020d
TLSH
T1E9E02BAAC8219C6B18F9072920534647EF55135B1B50894B3B3DC1088FB4A3B4696CAC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 cbb7dc1456343b343fcb4edd46f0fbc8400cdab55b8431073b8c264f93a8cf84
MD5 cead17c3d3b55a5258ed00547805806f
SHA1 f6a367305e48cdb490f756d756f6a475a46aaf1c
SHA512 887f4c727a691bc28b4fb3f6cd01734a8142e063e1bf7b31354eb329b6460b1a405fed551313698271a4df530dc708fa0412efc6e7de2c26da519c1e8c0343fa
SSDEEP 48:N3chqGTyHQwildb6myugYsSaZO/uwrCDR/TGiMSpraMXM4uOI62prfKB69xREtBN:NGdheqihpD/ds2TyO6H8AlmR7S6
TLSH
T1A1912D14C3958075DBE008BC3A9268D27172C76AD44B0F6A3FB015BC1ABEF954396E27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 d6a6cfe8d57b096888fac4fa42ec4a7276b10a02c320fd8505543d51dbf8b41f
MD5 863d6f446b58128f90f62c7e1ae15eed
SHA1 c95e83667dec2e1e9ee2e5a22a1392215c052ecf
SHA512 a909e453f61b246da004075954ac86ed229e5aee9ede85b597ab9836263e5df1f0615bfc75b4af5f6d747391881d83776dfedf5a57f0a15a84d01a390b7d1651
SSDEEP 96:hxxNdChnXQzo3dyji3ydLSgD/B2BSK2QPy6UH8EmdYV47ibnz:Xx3EQz4dyjOWugdhQP0cEt47Gz
TLSH
T1EED11D14DAA6A423DBE804BC35D17C93317AEB56D0870F963FF014BC15AEBA582C2997
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c71a843b2ba323d0e877e4e23e954f4d91898b1e7480188c6815c71366fe2a3
MD5 25f55af6157f1e6204bcfbd8df6b66c1
SHA1 aa04fdc33e52a64c939ddd198f7d666700dd2835
SHA512 13ba4393ec773efc93273fbe361e057718231c23064cdcc676360d84faaaa83c21fa6aa301f2778c056c9d4b5e41797a4995e5f24737f2c56585e7f15f03f638
TLSH
T1BE71F664C3908075D7E110BC3AA220D272B2C7A8C94B0F5A3BF054FC5ABEF658385D27
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 84d21e404361751c4b07f3c18372e1ece5b91da07372b1010a1ed84671105be8
MD5 8ef00b339afbce8f5b7ca23dfea0dce3
SHA1 183ecddf10b71c7b11b5935dd8af32b0214ae06c
SHA512 8806aecb678e9b6ae2172cda2a3fa3badbf38d060250397e30c1e610282e294ef08914103cd1bc272a687d1c72eca673e23b6f56be7ffe592e53505a62f52d46
TLSH
T1FC310EF7C3E8953D8A0095F0BA183F2BCE6D0941931C3D5AD4E4AE0B93E28B5E24084F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 2e07fc32fc371b6f05efcdb54ccd2e86f8c16b1fd24dd266aad1b0c0c3f3f62f
MD5 3da4c757acd0665242215da54a479616
SHA1 d6c6bd2abcfcbb67cefec37bb11fdd4dbec7e8b9
SHA512 5ca8a88d2107c9ece0a7655c7f367f1247cc1ff52e2b6da8dacf7c600fbc1092c2bf440d7866072719bb883a572a6c63c43b1e9fcb47870ab3f09d72bd8b1fc2
SSDEEP 192:Dhj9joJjnjKijAJBek4JPMAJZJvejDz+jwijhgjgVbajhMjtPZGjhzNtjBjB1jEV:Dhj9jUjnjKijAJBekkPMMZJvejDz+jwo
TLSH
T134129EF7C3E8456DC91156F16A242F2BDE2E095A43683C0A89E8EF4BD3F14B1E34594E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 ea54b6c9d881a872708740593e58c0aafafc960ad07e618aab960150ceb14795
MD5 cad2825b0555839b8d97e5455de7774a
SHA1 9974fc37abde1e311fd47d987569b4ff2dc975a8
SHA512 c780453c067af4f88175e021927e807c9cd09a9266e88946ff39bec0ff8818dc7f3aadcdcd8c8c8bf9732ab9c1ec178399e19f697a8040bb7cf42ab4c9da67a7
SSDEEP 192:DWjrjoJjnjKijAJBek4JPMAJZJvejfyNVa+jwijhgjgVbajhMjtPZGjhtjBjBKja:DWjrjUjnjKijAJBekkPMMZJvejfyNVar
TLSH
T10F229FF7C3E8426DC91156F1AA242F2BDE2E055A436C3C4A89D8EF4BD3F1471E28594E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f0ccb0a88d2d657cb13247abbe84fb9119a8c7c80e5aa61178fcabde2d105a60
MD5 ffd84f21a2285cd83bda73f1150718cb
SHA1 042c8a5f7be236ec11889a9713187a7b7ab221fc
SHA512 5a90e0dc4398409f4902c9da7d0178f89e8ce2db4ca856562e84475fd148e73dd36cb56d04137b7956fe30d8a66cb56a142a93f25a7d0b939e882b11d3ca9d23
SSDEEP 96:DiOj9joJj00jKazzSjljFcGj6Vjrijhijhdj9bzsjBZj6jujKwvVbvT:Dhj9joJjnjKaz+jljeGj6VjrijhijhdC
TLSH
T16BA1C0F7C3E8456DC91196F1AA152F2BDE2D0555436C3C4E88E4AF4BD3E68B1E24094E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 819e105fc82dd3d2c6b598ee742d84c51f5ffa171a4d1fcbe630d3a5bb6563f8
MD5 4f43fc01674fef34fdc9b8882772f2a6
SHA1 f7f8fcb9c9f1734e9e9fa38ee3dfba1951061e6c
SHA512 a4cbcd09d68144442782c183340c386a0f56b0436900e5e7984c215bd44e647b6255ea4af77fff791c63ae1c6e7a82e40e199d7492156f807e7ebbc5ad68c507
TLSH
T1C0D02353570570B6659D5E81C06EFC8FC33710244442DDD450E05859053945D0907154
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 d66d7a50db15b885d783a5ab292f374eb85078ffc9cfcbeee3c006248638c6e6
MD5 a6da4326630ec4514022bda4a73e7487
SHA1 eb5521c178be190cad7e037468e8353fefcf850c
SHA512 b436d9a807b0a900c066e01a3556705399b27d921be943dded51555098b944de221f15b9e4a6e8c987cb587b3770fec7de15c68573376511a6cf4fa3ab209b0b
SSDEEP 192:sxZ0ROyMqZ/K1Ml8UQs97/fMs4rYN+Rv0zodpjlhHW6+WNhd6XSNFit4uKSSNNSP:sxZ0fqq7/fMs484RvHHHbGXoNSb5N
TLSH
T18A72D8166A345D778CD7D219F985BB53D6F5056392905E44AAFCCA0C04EABED220383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 527bc0f56f60fb24474cee87b51cd16f90471630dcc49682d62977041ae47ad9
MD5 4490f6aeefa156481d8132a2ac1a91a6
SHA1 82f23e65a036003a406aa3dc60b61e2eec674e29
SHA512 96b705d0c86f9ea774f4cc4f820e37ca2f71371375fb80ff2dcfdd244de2ff708e71c17bb090b8eb5869a5a33c2d3c183f9edb711df2208f049cd4e6b3101530
SSDEEP 192:sxZ0ROyMqZ/K1Ml8M97/fMs4zpN+Rv0zodpjlhHW6+WNhd6XSNJt4uKuSMNSCmIM:sxZ0f17/fMs4t4RvHHHbGX0NSbgi
TLSH
T1ED72D7166A345D7B8CDBD219F945BF63D6F5056392905E44AAFCCA0C04EABED220383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2e88491685ce59eb830df3bc8efda689ee5aa69d8de06e9bbbc82537641b4306
MD5 a736729ab34e8484c999f2f0e47b7b4f
SHA1 425fc1039aacad2d37cd967a576535e6d4a2e884
SHA512 05b7a7a7d4967ef623f00c00e287829b1ddc06bf4e70d6344a6f573da28ed334709b39ba62c90068f22ed96080b950893182a4042e0ea1ef63a8d288cc1b13dc
SSDEEP 192:sxZ0ROyMqZ/K1Ml8Mk7/fMswzpZZELgv0zodpjlhHW6+WNhuk/PuKj7NSCmIgjWJ:sxZ0dM7/fMswt3hvHHHbH/tNSbji
TLSH
T1FA62E7156A38997BCDDBD219FA457F53D6F9152392805E44AAFCCB0C04E6AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 57b64aff0e310b113729e2fae167d74c85d4097071d1a2b3d03461ddf2c899be
MD5 ac4a95cac39e044236b78e990ab3d697
SHA1 1bc52bdea6e30133ccb494aaadabc5e03a07f79a
SHA512 ff41f442ffa219135743e869f1d1db9c816bb7f6caa0221a5f966f7a8f351486604c64abf793b360e688d9519e76f139ae8e40c687b2d2f5119ef375072a61b1
SSDEEP 768:AasqZl+7pLuL/BlWvBDeT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpEx4Llhf51Yroa:AasqZl+E/BlWvBDeTu1jaUEx4LXB1jAr
TLSH
T1C3F2F93B2C0CCB7E4F804E9CDC2A7E9E6EE8028B96D8895447F9841C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\the-real-index
Size 1KB
SHA256 ebf1abea2111cd041950f98e64b12e2efa554123748bfe9239c2bb4e393def23
MD5 81b31939242fa3aa2f2475c30de8af3a
SHA1 7c2e9281ad84ea8b79ad682e842e07cef5f46ffc
SHA512 0f882a4e30ce312c1778009ac15692ecd237e7094f92c823641b8128cc1e126db4061eadc0fbcdbf4e969bdcb690832dc97df7856ca32fa398d4367153159f7e
TLSH
T16431840DEC898D27C92540B819FA153D3338C4EE2A4A530B69BDA53AAC4BA61599322C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cc0d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\the-real-index~RFe5cc0d7.TMP
Size 1KB
SHA256 478ae23deb5e84ffe7650b1383a859fe9ff6cdb0980aaafab5a6ae63dac5394a
MD5 2edab461749c0a727a0ac8927a2a071f
SHA1 c644af558b4c231a68f17a4ddda417147499793c
SHA512 72ce55f7f5c904958a392bb2e5f6b559252f63e04689bcc2acf36ce07237d76c7efd14c3f63debce778f14a6b3e267f2c3490ab052f49ced40d13a5442625354
TLSH
T18431C65AAC991E13CC70907195CE652D333ED8D91A01E30B56B88633FCABBB51D93018
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 474B
SHA256 f197066af7d014fa2dc435ef8c2cbd75fb1215c77923bcb3ee8cb9a6608043df
MD5 a98b9b22e87e08738ea09aba303dc576
SHA1 df8c840493b01e6d144f23e995d73da8293314b5
SHA512 8d7c5734bd053a71a43905382e30ecfb68e598b602b40bf5344286aabf7431402e8880e227a46a10543b5413d53625476549af84a285d567fcff68eb06b9c224
TLSH
T1D8F027B73EF71804BE9F93D92471106600013C249955ECAF6526A39750F1319348AD63
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 64a6f4dbd4e932d621fe78ff94df09a4028ea126f9cd81ed1fab0637d5c08c20
MD5 31d04ad94269c263e4704400a56bc328
SHA1 75f20d6498cbbd4646243c527536e2c4d48e33cb
SHA512 fc94529bd12dd213860d88d82f0f35e72d1a295a3dc2f93dcd504e0b74aaa6be578389c6664ae8cc4c75ddef962ff2ccdbee34321e7015c2d3faf1cc0fc77435
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qnn:+BOVglYXrbtZqRvJtBH
TLSH
T158B23B11753A03803A3E259E9194B46F66C270A37098B43B7BB945A64F6BF20CDFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d9adcbf8-f337-44c9-998c-c265da2fa7fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9adcbf8-f337-44c9-998c-c265da2fa7fd.tmp
Size 35KB
SHA256 ee0a96324d42a88b7288b50a9091c5538dd69760d5c8d44531494fe7770f3247
MD5 f5f5e81c29eee7be7aeda3c7f2c17d1d
SHA1 1b76dee50646f8fcd6b0c231f7e4bfa582258ee8
SHA512 135c9d72f297e571531a6dde23a3d67aaec09dac137f4447f3d468d36d92f29f6aa14c8c4cb229af479afc64061b967380431fc4d54ebaff3de791b05293b337
SSDEEP 768:A9sqZl+7pLuL/BlWvBDeT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpEx4Llhf51YroK:A9sqZl+E/BlWvBDeTu1jaUEx4LXB1jyh
TLSH
T10AF2F93B6C0CCB7E4F804E9CDC2A7E8A6EE8018B9698895447F9841C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
Size 145KB
SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
MD5 370210ebc9e63f6f39a4185846435533
SHA1 17b63f65390d236465b6952953a7df4cbc6fce1e
SHA512 e594ebf58d19f6d9e7024f98107c738142c6cc2504a0ba89e13f8f771c6a600427e75951ccbfe105983c21b735dcde6e6e173f4da37745c4de51bb9f5e86b989
SSDEEP 3072:7PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEI/tLZjUd6mG:LX1aI5aZoKzMJ07NI/leBG
TLSH
T105E3F1108EC41FACDFA8291C70BE0B1D63E1C79D84676585E773FE0AAFAB90462275C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-checkout-eligible-sites.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
Size 23KB
SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
MD5 ed22bc3ded6df0109b9e594867473559
SHA1 ee39eb80dc23f7fd764199cbe4a153c4edc2e768
SHA512 fb337c0a0107dc37a3067bcd6f60ffb8f63ee892a0ff729dcdf67c7a21fec95a742a274853e8947489108d7543c13b9479e02574f490bc217e8a182f08543aa3
SSDEEP 384:rQR5dkrKzmQWgFlhpyZv8CTi8I6kxAvh0mD:reKrMP8d5JIVAvhV
TLSH
T18CB21064C9210DE11FE4412B6878224B1A3C951B8F90FAFE3B6D928C1F5E06F61B95FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-notification-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
Size 804B
SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
MD5 4cdefd9eb040c2755db20aa8ea5ee8f7
SHA1 f649fcd1c12c26fb90906c4c2ec0a9127af275f4
SHA512 7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209
TLSH
T1AB0189EEC8800EB216C24A3A163985C31A3756576C953D147FC9741C2F5D62F22FB98D
MD5 SHA1 SHA512 TLSH

Submit Download

wallet-stable.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
Size 81KB
SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
MD5 46ca0b1726448d9c7ed48735c246336f
SHA1 8e26f1f1c6f909f2f3d34c17e042e579f3b2b449
SHA512 c9ec0465c2c0eb0bc0316163f9a2dab9332c372dfc4ebedb0ef4139fe1195efdd8aa34367155c29e659d97d5a27e2395ce2f6012c115ef5791bad270de26bb28
SSDEEP 768:r7PEXSl9cv2tlNnqSBBoCJkQgXzwb7XARjMLVF2CYgYHFkJ/Eqajvapznp+9l:08W27jLgX2ZLSgYHFkJ/EqajvWnAf
TLSH
T1F283DB29C9120DB11FA4001A28BA290B297C960B4F55FAFD7B6C938D1F0E45F61F59FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-tokenization-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
Size 34KB
SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
MD5 ae3bd0f89f8a8cdeb1ea6eea1636cbdd
SHA1 1801bc211e260ba8f8099727ea820ecf636c684a
SHA512 69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa
SSDEEP 192:0NOKnK+QXzpTYaDEqIyVZ5mxzrIAfrXKoNKExGI+MmsMR6Q9GMKPrZnfB4FXZ8N:SOKK+QXzpTYaDEq/e5EAfrRoRI+B9wC0
TLSH
T1A3F2FCB1D9009C932F58850A20BA9505376C52237F86F9FA736D424E9F9F58F2530EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 c2c882bf8d0a3517cc5f72d29fe14501233fcf40299e96befd327114343c0137
MD5 761c3543378638faa184db9daf933d15
SHA1 31b571b70cf81cf1015f04405641c702d8b6597e
SHA512 8ccb31a8df4fe4f7d3df02f7560b2dc7bc00c560d46f07540d3957f364a9a637e3563aa7f04c76c904865dd4daaa4564dffa77c6540fd69f21b9e37dc7bd1a6f
SSDEEP 384:nuriFavqMg3sN58TUNTUlIm2RihYhBrmvfDY0euVNa4KcQQe7S7o1dKuiNuXurNu:uGFayv3qwgTiW2YJuAcJe7mo1tioXiw
TLSH
T14DC24A31E898D9ABEDEA9FC9E7097A07DEE00197C58C4AD4DAE85D0D00D71DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a905e99736a78bafae97058003b70561c06d8cae4690f2facabf47aa2fe5d762
MD5 04bc333e4c3b94d679687fb5ab6de2ad
SHA1 4352c6fd585bfbae537f49f45e817f24da7ea36c
SHA512 6450e586b95e857bf612ad7c71083056e583c2199d948b9284403703df50d138cc98b68b37260d11b79945a147e0b7abf9c4855325d2c0aa661fdbdc2931b82c
SSDEEP 384:n0iFrcXqnssNm8TUNTUlI4ARih9tsiVmvfDY0euVNa4Kcqy+U98ne/4DKLQrN1kP:PFzs1wg5iP1QYJuAcPrwe/TL0o
TLSH
T1DAC22876E864DD6BADEA4FC9B34A3A43DEE001A785CC5AD4EAD85E4C00875DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c48ba95b4cd28f881f6737694e21ea768f9684a5b06b08b93562717c89ca00c3
MD5 67fcba25a518c519c36ecf6162b3d7be
SHA1 4552db18796baecd2742d1c25d6dea65ff95b1e0
SHA512 5bc7def987719d3cfb6ac65d48f15740bd38f6c6e3fb65037cc9736e743adc88fb1c0172f659e6c712bbbfc7291489bb3ffed39a32a34ea0c507e2f97fc3fe39
SSDEEP 384:ndiFavqMg3sNy8TUNTUlIm2RihNLAWmvfDY0euVNa4Kcqy+U9Kne/S7o1dKuiNuT:UFayv3FwgTiohYJuAcPrKe/mo1tioXiw
TLSH
T116C24A31E898D9ABADE69FD9E70A7A07DEE00297C5CC4AD4D9E84D0D00D71DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1794f6d84f3fc5e4e02ff994001e059f2540a0aa902cda56f6fdd47d643ac68c
MD5 6dd61d33624b419de7c9ef4dbef48940
SHA1 a75cfc5659b7d4e11a640713802fcf42a76f5ff6
SHA512 295f6a28fe886e1ab0c66fae1fc715ae6fd875e95516ec4886a0ab0e8991be1ef0a3f3daa83d8eb2cb48ec2376d2d247af6fb9ac2e20342194a577468942c6f1
SSDEEP 384:nXiFrcXqnA3sNm8TUNTUlI4ARih9LsiVmvfDY0euVNa4Kcqy+U98ne/4DKLQrN1o:SFzA31wg5iPPQYJuAcPrwe/TL0o
TLSH
T1F1C22976E864DD6BADEA4FC9B34A3A43DEE001A785CC5AD4EAD85E4C00875DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 9e1e3788a96521c9e5808246fa2466413337642e530fb3e3097b3c4617a5fcb0
MD5 af9eefbf6fff79912ae857c894acd11b
SHA1 0586de4997f3f8972532f6b8cbb7fbd91df85ee6
SHA512 6e837a4b46151948f858e7e91410bb7bc641354129476a8c0f0141fd92b41ce8171b34debdd1691257de83e927de28ab8be007a1ed127047bd94ee7f921a975a
SSDEEP 384:nPiFmcXqnN3sNLp8TUNTUlI4MRih9BCOVmtfi220euVNa4Kcqy+U91re/4DKLQro:aF09gpwgViPHE2JuAcPrHe/TL0o
TLSH
T1B5E281F598D79976E99E4B87A33E2E029EFCC157B1884994F7940D0CCC861BFD306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8e38027b0efb63cf2b9f49ea48e55505b4f67a2351142bb04bb2054eb351b068
MD5 419b68dbd87dc33256211a2ae3bb6336
SHA1 6702e95e8c50719cbb9e728bfa971158977b108b
SHA512 2ae612e4f69797200f30ca681a52b7920fff86e0ae2a729c692495920f6d38621f45f2203a901c36a50b132f3221a62e68dae08a85392ebf3ea44166d7e09fec
SSDEEP 384:nPiFrcXqnNNsNm8TUNTUlI4ARih9tsiVmvfDY0euVNa4Kcqy+U91re/4DKLQrN1o:aFzb1wg5iP1QYJuAcPrHe/TL0o
TLSH
T1BEC23976E864DD6BADEA4FC9B34A7A43DEF001A785CC5AD4EAD84E4C00875DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 572afcb646628669915e09b02c4c599c240997c193a3eb65801cdcd46ab49f35
MD5 c82d1f2c24b7d377d7d20c6bfd1bdbbb
SHA1 48d7d0592499577875ccb068504afdd0a7cf7e73
SHA512 8fc114f75969a9127c6146f52f18c6611776b9ec6289cd4e1b04cee283a4a39f4ad7b94444f8cf7b7bf2d54ed82cf04af60e8f282e652affd70d074de413aee8
SSDEEP 384:nXiFavqMg3sNm8TUNTUlI4zRih9LsiVmvfDY0euVNa4Kcqy+U98ne/BrN1k+rvIc:SFayv31wgIiPPQYJuAcPrwe/1p
TLSH
T14CB21875E8A8DAA7EDE68FC5E74A7A03DEE0019785CC4AD4DAD91E0D00D71DE130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 00c2a807fb2b0357ddc69c83102320449c3acdbd776d7e636996adf4b0e1efbd
MD5 bc7f96986679bb5991acf659651677cd
SHA1 ec6d2dde8c50436352a60a497d0d05257031f2a9
SHA512 803bd87aa946c57b720a1d8abb9e980d5b82b1ba0798a8a0cc1d50488dd0d5407ef4abb8e2edb77fd2c8872087db5746d70ec11a1a333418265a7c6297e4d2de
TLSH
T1CEE0044153000175D01C13710107171017D1C51011D003C7771003543C533101C34F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5c435a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c435a.TMP
Size 392B
SHA256 faf4fdc7a8844d49184cc9b0fcda9e93fc17ca8c9dc24c9425b03535ef4165d9
MD5 fd17effeaa88a9e8789ce63bae462896
SHA1 71d69af5443ed847149fc3181a4d5f03cce0902e
SHA512 68bf94bbca270380d701f94c8a62d81e073770706a07de43b002358123a24d9107e12765f9effb7c38c0f8b3032f1a950a51c0c67feaccd8b2a1cbdac609ec7e
MD5 SHA1 SHA512

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 3f0f1cb5eb3be23c424bbf1a3af1f661a7725103db1cba7fb4146de106bbe2d6
MD5 d8bbb26a89c49335191da2076710d8e6
SHA1 5212b5b10fdddd8c3f9801151ec85011f8cf0e40
SHA512 86b7534afc0c08717ef4586ad7a61bdf46b7b910bd774766fd787efea9d1f2440554e2be4693d64b4b00cd319bcd304acad3c97ec71a67094d0f69ee8707055a
TLSH
T1CF311FE1483D26E1D4FD0E6EA05B78FC84D8D32AF5B8717D5824EE98063A91EA00143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 a59453b91a520192d05450610d50415b2b3a99bd474b3d48b715989c791e2274
MD5 27bb9a93ae73ac14c918be6d08d2860c
SHA1 da12de730f9442fe8896bfdae76b20528911e3ad
SHA512 7211548863d7e6a5a8a4736755e35545c0cd557c2b540cca5328fa39546a92b9af6ab7643e976aac47d677a632b4894196ddd391cb85e66273769814c1895beb
TLSH
T134312DE15C3D2AD1D0BE096EB45B38FC94D8C32AF9A8713D6814EE98473A60E654043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 3bca9518fcfa55195a7ce002b3b39acf4fbe4591332da58d6795fbcc539b7795
MD5 06368522886ed9833dde7f7e293ee13b
SHA1 87ec3973bf1170d79e6eb8e7630318a3402b9f0b
SHA512 14683296373be050c8018b2943de7914d93b7a9aa186d4e73196b543d9b2b2098bfe8fd4b70ec7181c3732a83cdf799cbadaed1b2a5c8e08ee04f81c7b6b15b7
TLSH
T142312FE1583D2AD1D4FE0A6E645B3CFC85D8D32AF5B8713D6824EE98073A60E654043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 da2b1400b8ea974b146515c8a918fe6bb899e3b4e895edb641c43e8bdb78688b
MD5 56436efb59f559cc027e2a46256452ff
SHA1 1581bb2b38fb78d03161d27d6d17768e049bb0a1
SHA512 983a251bea032f44d4d2fef2fdab1ef82703a0f71f46164f426c1bf20c0187b52dabfbcee6b70d94334bc5191c2bbf73c10fabba750bd33a5bf77ec853b3b27e
TLSH
T18C3121E1583D2AD1D4BD09AF645B38FC95ECD32AF9A8303D6814EE98077A64E654043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 ba226a9354a2ddb51f7d83bca034b6c9b5f8429f2ec704da61b9b60410b04ba1
MD5 802f207957b5692ea5ddc072d6b11ea1
SHA1 6be27f2355ec7ab0edf55ef753393940f6d14fdd
SHA512 b612964d7d9cc96c352eb354cb2bee5812f9e39bde0eb51bd2989e522fbf0a418f5b2d7de06321c2734b1aeb83f5752a7723ff9fa1dc4a1a2f98767600d43c69
TLSH
T1743121E1483C2AD1D4BD09AE684B38FC94E8D326F5A8743D6854EE98077A60E654143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 8cd0259cadcbb7269a3b1e14ffb07d551b0e40511c977432904819a82b013647
MD5 ffda3da8ca39a42df6c818ea757e170f
SHA1 862c26d79e356eccd46d8a77efcfc42a7d1e2a8b
SHA512 28e76096d7a79d29dc4126c35cf6ce6e8e3f57b6dee6d0afd379b9a01de4aad061a34cdab26b367893f323c5d73e25eb3e580e0289dac9f9c6df4bd3ba344db7
TLSH
T18B5160E15C3C1AC1D5BD0E7EA44B38FC82E8C325F560353D6824EE880A3961E748483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 a0e07faf44cebf3126225d1ec85e41b9d2dbd82933313ff09d46a82ec4b73d5a
MD5 a979afcc5c513877956fb7712e447f3f
SHA1 f18e3b6fee936c0f2aa5a9e845609a3fa874b648
SHA512 2ea4a4e78f4dda42450e91564106113f8dab3dafb42b5e95fc000624a4a0be4b9933c8b9f908e51b91af8d9b8b3d18dc2056f459ed5c9970f57970312e9d3d31
TLSH
T1573141E14C3C1AD1D4BE09AF644B38FC84E8C32AF5A8703D6854EE98073A64E668543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 fbe94bb033e1742183f5c5110a5c8bd60797f27aa64f7b15b39cc33c81534d8a
MD5 7d6e9eea8671ab555e0a9f7fb9785ffb
SHA1 1c7a0582b76b18edf436d5dfd46fe192d30dc2f5
SHA512 171f2a2a40212bd8c3284ea05a8107d48648254ed4de7e0232ca78f41c5c4a9c91516cc6784f2c581a476daad8fa22b256792324bab66f8fe4ec5260ec6d3e86
TLSH
T115413EE15D3C2AD1D4BD0EAF645B38FC85E8C326F5A871396854EE98063914E658143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 ece2aa43bae7c8b0adf034c013e0985b983d15906b17d04ace828e3eebd3ccce
MD5 9f8d683666f5f12fd274918e825f81e2
SHA1 6a97d0193d9aa620be8f72400f2ff4b66db60bfc
SHA512 ba2af76898d890423cebbab52abf123ce52ebff80ee56f2745608d62a07b58ddcdb1cc0173d2f404137acfdc4ce809cecff7e631b0591adb22d15057baceb22a
TLSH
T1804161E15C3D2AD1D4BE0EAF745B38FC81E8C32AF5A4703D6858EE98063950E658543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7fdb2b8b4d735d0706f19c24878d8aa646271071eda7014c8a86c3f68411d67c
MD5 7933ad6b30bee6791370909c88b2e828
SHA1 fa8863fe50b8df4b576e860bd68051b5c15b7e9b
SHA512 4ea07ea8103909a4ca6dddffd1adbf001df7eeab2c0faf3c1aa69a6f4f028eaa4d4c3b0b93e6b2c982600eb2f2db52a7178d20626adfed0cc95306c8bcd4edb2
TLSH
T1BD413FE15C3C1AD1D5BD0E6E748B38FCC2E8C725F5A4353D6814EA880A3A64E658583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 166fa138c4942117d79caa5148022a99bba33d0b8327254ce51847cc1d777fe8
MD5 984c6fd82fe11e4db674ac6fcd6de356
SHA1 b328c201b3eb860d656f7f811ed8aece70877474
SHA512 bbd7d2c1ecd60a77796a95fb4033d3333d5e6369f0579362bc87770da280989a607dc989ef5a3e225a5a353c1e4212d776b6112b52f1fb91d82bb0abfb73274c
TLSH
T1C34150E15C3C16C1D5BD0E6E608B78FC81E8C329F560353D6814EE980A3924E758443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 562b4721624e848c5189422623fdc3d4311acad2abef01762cc3651c4040be7b
MD5 7b9fe8cfd5fed483f755dcef3bf6e865
SHA1 e803b032eea7d37bcb2031490ed6dffa6a689af6
SHA512 3b58b1176a344d743b3d005d8db53d046a7d64e6b3fdf8e1e27470a93886cd4481522552254857bcf34335efd2488393f24c3ef4fd247f08c17d29ac776cd300
TLSH
T1A45161E15C7C1AC1D5BD0E6E644778FC82E8C315F5A4753D6814EE880A7961E748583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 183e3c01b39a6ace48589db3bf91e343a18b09716eb214d73122270d6712b486
MD5 dcdff7e90a10bf833a82752ba4c70acd
SHA1 246bbed0fb2510e52c9e7b7db1273893c41975a5
SHA512 2be3d41f6db1a1916c92424a179a39ffba814ab19a11f43757a443720abdf9851c29573b3946011bd5a02ca0befa24a30ee9e344c55553eefa6c42850a78d4ee
TLSH
T13C516EE18C7C1AC0D5BD0E6E645B38FC82E8C325F9A4313D6854EA880A7961EB48483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 800ebef25831b5daa1edb6f04c9890d9932a7c86ab64a0d415894dc83ff2779b
MD5 e360b5b205100c9ea0e6f5f8ddfdcc09
SHA1 201b2caafb833e0328540e7b53e19d33dc1ad2da
SHA512 0f35979024a847577da9041b304f91854ceddfe1d0ad5d53ec3cc873b47a439528fd1716d94fc4a374548743dcc63e3c1219d953d627359bc6cecdfaac68db72
TLSH
T196414FE14C3C2AD1D4BD0E6EB45B38FC81E8C325F5A4703D6858EE880A3A14E658583F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d16e5f597efd15c18e96a3d9b77604368696548fd6afa01c6142011ce3f009da
MD5 77e339008221fdb472a092ffe7b212ec
SHA1 d318edf8c3789b6a442172dcd046f15dc0f8b446
SHA512 40d036add6262b9cc260a5c8f81b48d79c77dc1aeb70aa2cd8583c4222a0218af12b52926a9570b109c3f391e7273f2fa32c55e095d80e72c272858216a172d2
TLSH
T1CC413D58B6F91108B3B76E1A9BF7B87D447FB9772E06D55E50120E4F0A23A40C862737
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\activity-stream.contile.json
Size 2KB
SHA256 15554078d9dcc80bae13aac8c753b4ae958c882419f429ec48910b62611dcef5
MD5 42c1e09cc74ccb4be9b3d48d15a50d8c
SHA1 a51840c0f3bbdfb8980745903d8cc9b28e7b14e0
SHA512 36dceff4f3181e3401c27542dbc24bc9e105c8a4dc02d484b0075318240047394736f3bfea0c98df8cdcadcde20d4f2dfc197a00d8b12493d2275be73df22f8a
TLSH
T15651B6D7F9B9CC832725F6D02D5F2BACE01BA057CBECAD187712DD0694B6A0A414A504
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\activity-stream.discovery_stream.json
Size 76KB
SHA256 ef2050995bad3feec97ee483cc8af5a51be8ecb22d2d301051893d92622ef59f
MD5 4a3c3c45e45821ee7cf8436b93663c56
SHA1 6b5594bf075c95cd6b53c89ab1a85ef7b1a5ac67
SHA512 f5f9a415bd03ee04134295169457bc4bcee996fa6575f9d6e4afc45fd9fd9f4fcf35db815d6678d5a6e9adfcc792dc0c7e5776fd7007f56ce31c64e006209fe1
SSDEEP 768:6By952psPpsKhwSqoTpXF1CqcXpT2ftuIf6JrYY41/CiuuCyzOC:6w/AsPpsxSqodt+pT2lzf6JqCiuu9
TLSH
T1987309A397A9B2BB0B9177D72C0F755B52E24149E78901CDECEECA1C80CC691123B5BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 ee0fe782a7f50d988ca3895388211341c715b47e3cf70a5ff93a7c68326b38cd
MD5 4e7ad0f9c4d367aa2fa05bb1bd3d5a81
SHA1 800ec8fa7926bebd8cc2182ac105d7d618d23c05
SHA512 b9fc64d9f10e996003324f86ee55bd9cbc2da6dd4c0414744835d5cba02c3ef75e9b2438fb57f6d1d0a4b74619db64c30c7223b9eb6dfe17576a744913a3d967
SSDEEP 384:HHMO0iO024YiFuhw+5EL1pPsac4j0lpDII+28N80:nrZYiFuK+5EB9sac4ID8LB
TLSH
T1C4527E7E6F1138A90A27D2D4DDAE6218CE04E5BBEFD2D05605443845C684778B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

59fe0859-f2c5-477a-bba2-e60a40f76c52.zip

Path C:\Users\Admin\AppData\Local\Temp\59fe0859-f2c5-477a-bba2-e60a40f76c52.zip
Size 3.8MB
SHA256 6ae235b8ff5729383d3cf219320341b1456ad9c47696a519535abde34bc06004
MD5 22d280b2b7cf41f372676e1ad87a2788
SHA1 c191fa824f41a7785a4e4423e3bb19debeb9fe76
SHA512 0dcee546cd38ec992b9d4b722c96e5c20d42ec3efdf4c48b865ef1002662e6ddd274fcf259649fda5d9516e567c041e36b8bda2723a9eec852738708ec15043c
SSDEEP 49152:5trtdv2tUMTenCTqL2NQTpkMXjumT8XwQzqiUlUsPPMLvzhOF3myTIvIeOX2hxNr:5tr1C4FtkMp89JUlUEPMZOPTLmhxNsK
TLSH
T19A06E135F67C9708CDCF83BA810E2FD29C4C5F6680D8A57B6A6AA5715CA31E21F448CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 401KB
SHA256 48b69235b3dc000767ac2e714b4899ca4c9b5561d4fabd6099bb891206715cbe
MD5 681dd40ef8d637d107f3077e5d6c2fd1
SHA1 c2d87c4028be83577a7097c35c24bc46e6cdba72
SHA512 36e547c5f1f958013ef91761a6fe5e554d2d3bcbc256a1ad9c75b1745d0c62ad068e2731627e7dc8932c637573de7d52080c434762e53d209b8f63b54caf4bd7
SSDEEP 12288:ighNNVV0q0yQb8Jm11XexgR0r7eLpAw56n7C:iENHePyQImnPurSZ56m
TLSH
T1799412F5F3A038D76BBE420BDE196E9E4752CD12C78EA0EC547B778104BBB285E99104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 479KB
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1
SSDEEP 12288:u8fhrUPE5+8TK1g9M6y5JJtuiA50eHgB2rAnavTQu:fZrUPE5I1g9M6yyZ0AgYra4Z
TLSH
T189A42315F4A41CDCE8B5200CCADED74501995084F126FE2A5D32EEEADDDF683E26C8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 9KB
SHA256 d8b02e14ee6f52ed6adf40ed0d4dcbd65499b88998e957656d3fa6fca3505f44
MD5 a615e7d51f8d61444b70629932dc0941
SHA1 1305113c7e25a3b5859abb9501a55e8198ba6f04
SHA512 35590a6f0b6346c8a68c0b959d5e3933e1cd08da756907cd2f100a8ec9c085e5d496430d4bc71a373dcd871fdd851f051a59fad3456eba62a9b0ab6a4bd820c3
SSDEEP 96:XmIH/7I1t/LIOasnFo4rZI1fkHwl4XdoYfIW:XZ8/9asO3ZA
TLSH
T1A42230120BF609A6F9F396317A717753AB73FE015B070A1E818157480EB276085AEFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 9KB
SHA256 e5cde10647b3fb2f0d34bf1ffa0a1f94bea76f7a4b1b6201d5eb7a9c7af8b097
MD5 4a52b7b0e571c27a08bc5ebac89eefc9
SHA1 301ed1838a4d8c02734453b25539b840526d58f3
SHA512 6f4ae817e0e7ea61dff1af70c3292e975d9d44067171f7c91b8c875a79c50b5c27fd71007edcbf4b6354e0acb593a865206a20d8436fd0dc62bc35e189141644
SSDEEP 96:UmIz/7I1x/LICasnFo4rZI17kHwl4XdoYfIW:UN4/hasODZA
TLSH
T1702241121BF609A6F9F396317A717753BB73FE016B070A1E818153480E7275085AEFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 9KB
SHA256 166a5902c3774d3cf1b81d046302d919a4829f33f137679b7036a9c0c26e8986
MD5 2f5dd4acd3be8d45b8b2c0adcbca3a99
SHA1 b3e85f9848c9fa28f820902a014a45f213149626
SHA512 04b507e8a722dfe9d2268d2bd6430dbe69472b0e773065f809021b6744acc97fe59a2393ce49b6487c59258e4708fc40844889d9ef9fb1fc783dc596e74a778a
SSDEEP 96:s1mIb1/7I1N1/LIC1asnFo4rZI1f1kHwl4XdoYfIW:s1p1E1/F1asOn1ZA
TLSH
T1552220120BF60996F9F396317A7177537B73FE019B070A1E818153480A72760C5AEFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\AlternateServices.bin
Size 10KB
SHA256 9539c3dc9e3c44fb9fe3a399435da8648bb98fcf169d3f0e76b3e9f21dc358da
MD5 9d40ce68113974ea4595fd38cb4cfd11
SHA1 7d2d4e0d6d39f5a08ff924b6b5d6e26e06de54e5
SHA512 19e5c202e514c6aa04e22d4bce35de81799cadde1e798a9cc1ea8e23e8abe162b54f565ee31a29268fcc3947e4276b259a669f0b59b15e35993b621a76b90606
SSDEEP 24:p3RuhMZpWqhezyeUBBTvF5sJGqheGbG9i4R4lf4RzRHXTsF2TvhTx9GsF/G63Gho:p3lWXzyCJGPGbGoy0yt3f93Nv3
TLSH
T14C2200F757712191F0E28FB3909A72CCCC73026D58B840DA8E38C09602D56E0E8AF76C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\AlternateServices.bin
Size 11KB
SHA256 fdef0a6ddd52ea835c03a412a459d33af3f17fa60941b944963ee6f68908d55d
MD5 c37e5a65d260e44b96ef97203bd5d085
SHA1 4c31c888531ac9be20525f89b43d0c31d65b4d79
SHA512 d189ba7ed4568072a2b443eed7103abedd80951cb04e10ea6d89a7173b3573b40c1a85feac99253b5a1191030e874617fd6650d6eaece0810728eb5893fb69ec
SSDEEP 24:7uhMZpqhezjXBxlFrAGqheGbGV+oFA4R4lf4RzR3QTsF2TvhT/o9GsF/G63GhoQ4:vXzkGPGbGyy0ytAf9cNv3U4
TLSH
T1DA328FF757716191F0E18FB2945D71CCC933065D98BC51DA8E39C09A12D16E0E8AFB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\addonStartup.json.lz4
Size 4KB
SHA256 b8e7682a5f9e0c3d4c69d09cf28b04816e62005ef5aa9f5ecbbfb4773535a144
MD5 08a1e63a808ebfb18536eb2dc8b8e29b
SHA1 bc0655862bf8b08b854c21e7d6ad86f132cd2872
SHA512 f582a9d5493a44d2f8f0a4695bae7f4bfeadf6596e54dc002edc3a84fd6da601de0dc807c8e9a8d191cc03def086e1b376f3734b4ad4c57fc069a30b2486fde9
SSDEEP 96:NPjL4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nrm52xxhD8rGvm6ApwnHUuhN
TLSH
T172A16CAAD581EFA5FE22C04248E97FB2E6A5AB7410B9C4D4F16A71164C64A731704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-05-03_10_zLulz9mdrbVnDbnlvA9rLlO1N8P_IEUO0PH2luEqbdU=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\bookmarkbackups\bookmarks-2026-05-03_10_zLulz9mdrbVnDbnlvA9rLlO1N8P_IEUO0PH2luEqbdU=.jsonlz4
Size 856B
SHA256 55bfdbed4c05402e866cb0f387ee04206ee78a910a21c7678bd07ceefa58ba9b
MD5 4734b80f969b1e33aaf73a96dce8b022
SHA1 f703dc36f7d0e309fc1723e4409745ac51bb682c
SHA512 c693ae527a61eec5cecfc2a7594f9c974f2557aa3a98d6ec5e2d905a048cf6526bd4a63450bb9e3fd6521521b6c0f65c6b804fdda782af22cdcb7f988b7f5c8d
TLSH
T1B311868DEAF105D11DC5407F50055AE9B9A77E02DFC85CFCFFC90C5850989D463DA68A
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.bin
Size 59KB
SHA256 cba1cf5f47e2f610ebb33b83d6798aa441faa61fc985938edaecb2bc852d5411
MD5 dbd49e2a92df00b19e56ac3982c4ab0a
SHA1 5e08e082fbbd3d0dc9c11e178939a771ae6563d2
SHA512 ee58708dd1d6c51f00fd0a4eb690c3ebf315cc42929e4b35a036621b6ea3fe6e0fee4814c4760790625b5f956fd1a44d6314e3b839d34890da163dacf83c646d
SSDEEP 768:UH4dZeJQHyRIOm/Gz6Gcmhu0MoKh3TIl6vmZAtYbybTb8bfbUbhbhb3bJQEvWEcA:UH4dZeJQHyRpm8MoeQEvRc6M3UtHMov
TLSH
T13E43EF44EB1E953FD82802BADCA61B003F79F889591A2F67375C55782C872DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 7c372e616dabd2a12def80116cef76b72bbac28d8fcbb516b3e6d2a4904181b1
MD5 6774ef4fc6197f425997188149ef0ca2
SHA1 3fe0a52b9996d65da4ed9d0a82e0aaa97c1cc8df
SHA512 1e3b4e582e324638cbb9583a27f03470475a5f8b573180d46078fbc2d1d1e933a1b2944c4f6dcad5418d7f800d7a2f61d113e379ebc407d4130ff3d2e3a263ed
SSDEEP 96:XFM2FaFMFEFQ/dd66JozGzgClKtmc0d/URoBwSdF95/7bkW60rcEc+4yUR6HlWI:b1d66JozGzgCl6mc0dsOv5zbowbR4yjL
TLSH
T13AC10129E629463BC448423BDDB60B400F763956E89E3F1931DC644D2D572CEBB8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 61KB
SHA256 38dbd72130da3a7be417814827de084b41de35b9b5481de553e46364918b9fb9
MD5 07f8af1e975e146c0e5cf71d4f4afe93
SHA1 787c8b9d4650826b9be9f8659afea5f4fc37aecf
SHA512 c6ff3648f77d6a2b137ec21e57aa1a5707f6925e83bccd723d1c1841bb8618bd171243dbaf893c21eaf37bc3a59a609656a065e2aa366733875886134166126e
SSDEEP 768:r6/ETgctHK18n1Bt3G/EVaGz6GcmhucJ9KwHE9HK0mZxj+bRbab0bsb+bbbhb3b1:9gctHK18n1BtWsVDJ9apNZ0yETnIJ3vL
TLSH
T17553EE44EB1E953FD82802BA9CD21B003F79F8895A1A2F6B375C55786C872DC3D4E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 61KB
SHA256 9c17994dee9a4eda758cea6ac106f1e0fe2df939f84c45ca6a3a5528afd480e7
MD5 90545cdd60833febf3f868351d9e9e89
SHA1 176e7e6b3c365fe634d7d83818d9ff32dbd648ad
SHA512 c36336e6c8b658df09a059c84fa94bca82cc3d09445a4fd4f8188837c72f26db7110e819aff551dd68daf9dcf03d1f5d87192890b837de81a42def22f02173cf
SSDEEP 768:WEe6JgctHK18n1Bt3G/EVaGz6GcmhucJ9KwHE9HK0mZxj+bRbab0bsb+bbbhb3b1:VgctHK18n1BtWsVDJ9apNZ0yETnIJ3vL
TLSH
T12653EE44EB1E953FD82802BA9CD21B003F79F8895A1A2F6B375C55786C872DC3D4E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 61ff0ae130e757fa10348358005e9f417de5390f7b08417d2299869ac1c112bc
MD5 4c8bbcc08326c144c78e044d6f99c18f
SHA1 806f6fe990eb6497812a1093c3aab04352662ece
SHA512 278d1a26fe137e0945c46caf6164bb939bd3c1fd39f23c6d8c881d85d94548ad4c8e859b81944b241ae839cefc3fd6335080cd21e68bcaa03f327f7dde62699d
SSDEEP 192:ROv5zboPUZR4yjsJ1d66JozGzgCl6mc0d:ObocZR4yj0d66JozGzgC1j
TLSH
T1D1D10029E62D463BC818023BDDB60B400F75395AD89E3F2931DC645D2D572CEBA8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\events\events
Size 1KB
SHA256 1c432976676093b3aa11b6e2b4a5d1a2d3364d7bd1e42bbabead5c2e5a672485
MD5 8f1c1dac6a4a0cdceddfc685f69970da
SHA1 38d5b7654e9867849a4d3afa79fe528909c3e900
SHA512 52f1ce4732183cc89ece90f658ca8fd76ee15a46436a347702fe49e3457fb0535db4be0b31d592f55804eac31c451f1a127c652a8a59c8617572b0d0b29e507f
TLSH
T16921799C7EB84D2A58CBF2ACB485028E57658E03448B1CC34E43DE8DCDD5AD9326E439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\events\events
Size 5KB
SHA256 9ee2660df717bf3305aa38922ebd3b63508d96c53fc3daf97b7368b69f0da175
MD5 de30a530509c2f24555de688774dc3ff
SHA1 656d05c75d18bc426f45d0e20482fbd91da6f1c2
SHA512 cdd3a4d6c686573489d931504375aa8bdcac287babc433c39db23cfb3a720248bd6c5741efda74ab0df39abd953ef6a1e4e2325ad3175c8c38524b01b57a0290
SSDEEP 48:YpSRN3AqN6RDyq0Jidei/IyWUd6/Ii/WqMkCtBp1Ct9XVC8jDpiZaeXewJGNEzWG:2RTxWL/g1jfpIXXFPeIC6O5/HD39
TLSH
T16EB1DE0CB6BA5CBF6CD792A9F44A028D46D4474384CA1DC78CD7CD4C8D9A69A321F43A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0dfa29ea-4e74-46a3-b166-40a60988ab8b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\0dfa29ea-4e74-46a3-b166-40a60988ab8b
Size 886B
SHA256 46d4db8d642e2a1e325ba1965ba7ebeec2ff3499422203514bf6ed628946b4cf
MD5 9e9146bcf6ab3630a77360c4a69686bb
SHA1 67f04264c6b4949c721d78fb6c7159ef21a5e2bf
SHA512 a17add793051b7b03823647eb9c7dd71ee672fcf89c10b6b0d99912c8739039f9ab6ecff52c44f09c8b3903ef146b523181648ca86824006140333b2f2de9fd8
TLSH
T19F116392853978738C68C34B99E077524BE47223D0C617183DE44B180DBB11EF397307
MD5 SHA1 SHA512 TLSH

Submit Download

286b126e-6224-4b14-98c0-e6166037310d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\286b126e-6224-4b14-98c0-e6166037310d
Size 235B
SHA256 2b7a70865aeb1389587c7f02fb4308850722083cafb6ab05bce997d828bd9f21
MD5 824a0b97f5ec976e96cb1777253282a9
SHA1 69de42c66c520ca0be5e33338bac5bc292aafd52
SHA512 003cf0ae48d78fb9498dda3924cc1329d04af37fc40a91c66c1e99859a962ffe8f5d41fb7bb086c361db3025ac51e327cc7e5adae291be0af48906e155fb08c4
TLSH
T18BD0978895882B9D08141F03F0E06CC230548C3311B85820DA5146788ABD9C5022294B
MD5 SHA1 SHA512 TLSH

Submit Download

31955a2d-69bb-41e9-b22a-e7a3771a7ca9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\31955a2d-69bb-41e9-b22a-e7a3771a7ca9
Size 16KB
SHA256 8a458a39f3a33b79cee57f62b22949cd0bd6658416745910cd920ed7b54a98a8
MD5 510c901a139985c4525f72a94b749afd
SHA1 da3c2b5fb23b9069345f781af68bd798bebc8aae
SHA512 40a6b70b07a79391642288d1bd23ff7547a71273f98009ee2880ffb049432186ac335a5ef4736ebb341914e60aa92fc2257fdcd490de37826600147554bf1298
SSDEEP 192:CD3sGiOKnGXpfiS9SHYs96MyW2KALLsfCizmcLOJGXNvbP7SIozxeXT5t4YFU1QP:CDLVlsaizJLhvbP7SIoleNSY1B5AY
TLSH
T1A472C8561830497B8291E36995FC7FC3E6F528CB4C419FC99BE0BE486DEA06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61e009cc-0f53-48c6-9cbd-0725ddb04c26

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\61e009cc-0f53-48c6-9cbd-0725ddb04c26
Size 235B
SHA256 3af13d766bf92d8a27cbe164f6f0a500feb9e3ddbd2be91b4398f21310bc3291
MD5 2f9e5372e6e14e61e4a362a1693adc25
SHA1 99b6eb728f0b8d860e1869b0fafe97f67ae69e8c
SHA512 56fd6b941058aab9cd9489aaaf7befa96fff5d39dc23d7719cc3b1e236b7a4f9dc0244db312a91c673113a68c381515841deecb9e59e66b291f5838761d1c37c
TLSH
T139D097C234A8A3AC8D200F02B0E0AAC2314C4C33A470D860CA614E78AAF8FC402A1827
MD5 SHA1 SHA512 TLSH

Submit Download

cde53cdd-f4e7-442f-aab1-bc1fb3bc9659

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\cde53cdd-f4e7-442f-aab1-bc1fb3bc9659
Size 883B
SHA256 393cbef6793a3f424c3c1af72d9c106fbc3edc06959e6ea20036b7f0956de805
MD5 a4e5651048eb0f0e383b59ce4711ad4e
SHA1 e7b2ec265f070fb348d41d236421c8d257995b4a
SHA512 49d9deebef45bc2b1468d2f2b4b717fb9e3d705a07aad84ce69f9b6245c0dade366d7438903c4f98a661ce6073e6cb426da4a9ecb2320bccdbd879d7779ca75d
TLSH
T16B110081952979A38C68D24BC599374147E47533C0C951183EE55E18093A11EE36B307
MD5 SHA1 SHA512 TLSH

Submit Download

d311ce7f-ab79-489a-aade-fe03c731f74d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\d311ce7f-ab79-489a-aade-fe03c731f74d
Size 2KB
SHA256 6474f2897aecc805a97e665c01148d0717ace8aa203457e133f0e927a4a6db87
MD5 6d75dc110b023af48002ee52fc256ca5
SHA1 5828b48ba67126a25cf720f86e9385ed2ffc4fed
SHA512 004268bbef3a12bc4fcebcdf34fd7eb8116461c8c220b867f4acbb35417c4be10a6aadab35b00aa1dc2d6957ab71357a8b7aa5769c324c39953a2b311b92af87
TLSH
T1BD412E5C357C4CBB8CDAF54DD482328A53A08A1700C629836E91DE0C8CD6AEE736B52B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\extensions.json
Size 16KB
SHA256 b4e90eef2913f7f10ac17fedecb5ce3458af62d938300fc72858ecd3c587f9bf
MD5 777819a865de31423e92c123129728f2
SHA1 72a636d0098e979ec38b1661f138ce62585a0bf2
SHA512 c916f641ab4a493c88ae9f97d371cd051103e321d4611a04136f9e187425c7333780f80d3825575584bb13bf3c5bda67a6449cd7c82b229ffa07bb88142892db
SSDEEP 384:L+kI4vmUmldvV8dhWHW94zc96oML4HLL4PSL4HSL4HlL4HZsJ4hR:LxI4ORfGXK04k6x434o4A4l4M4P
TLSH
T1C172421545049EB8294FA79BAA367E02C37D473B60845C78F4DD8FC802FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll
Size 1.1MB
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157
SSDEEP 24576:bif6DS+hWYEwTkhPcB64VjVEj3cYemypfYIC:bTDSNwToPcfjBmypf6
TLSH
T1D9358D0AF1A311E9E41BC074867EA622F639344D572568FF169587203F77BC0AB3AF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info
Size 116B
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3
TLSH
T176B022002803B0B0082282030C380AA02A3A3382E020082CAE2F03E0838832303AC0E0
MD5 SHA1 SHA512 TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2830.0\LICENSE
Size 473B
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56
TLSH
T1CBF0DC7ABA23532345DA03C7011540D53B270BF4F25422D0E3A880E9336B178C1FE484
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2830.0\manifest.json
Size 1001B
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542
TLSH
T111115B00DD388D9326E4BAA21CC6580957661DAF4CC27E98379E161D8F1C8AFA37376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2830.0\widevinecdm.dll
Size 18.3MB
SHA256 eb98fa2cfe142976b33fc3e15cf38a391f079e01cf61a82577b15107a98dea02
MD5 9d76604a452d6fdad3cdad64dbdd68a1
SHA1 dc7e98ad3cf8d7be84f6b3074158b7196356675b
SHA512 edd0c26c0b1323344eb89f315876e9deb460817fc7c52faedadad34732797dad0d73906f63f832e7c877a37db4b2907c071748edfad81ea4009685385e9e9137
SSDEEP 393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
TLSH
T1D817E04AE26310A4E85EDCF4827AD972D0743C4E0376A7EF16D876356E727C06B29F09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2830.0\widevinecdm.dll.sig
Size 1KB
SHA256 d363751b0ee48517da1b56c17ffcd78dd57f25b092b09879667db10338077621
MD5 a19ec48b4b28f3aa9c32150dca8c0e39
SHA1 02981e40b643c2a987d47bf58f42b7f3ca5aaf07
SHA512 718a24e1fb45ab0fd3db5a5c45b0e0061d9061d8615e2a8d6db2150bf72267e96774094a6fc07a250d5bbbc5133a1cb635d8f7adc5b1751fa99327fce9555941
TLSH
T1F52196EDBE6421545984963E1FECE022DE3131C2B93018BB466BA3C3789336025C437D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs-1.js
Size 7KB
SHA256 a6623a59d9084802be819db22640a7ed422e75580fe304486758be9efb47364b
MD5 36da160ababe968a47dcbd41b7c6965f
SHA1 f4ab6003045bfbe7b8503ff51d4ec3a4dfbf9ffb
SHA512 5b46fb9d9fd02d6f09bdb3683faadfbea4dca691185fca2a9f2843f31e81f507b8c8ac32f77afa18285cd1ab791c54ea6a8a8154bf94349f9906c4e61cd658dd
SSDEEP 96:xHSrlTU5bPqGq0f39aHqObzSySSl8pdv9jbwn1HaceMBw88H78L4cn4pmdGS:4rEbCR0f39aHqoSSGgaceMBw88Q
TLSH
T1F6F1FD789404CB6F78B6377CAC6889715AB2013BB7BF68C750BA54840158F3441FEAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs-1.js
Size 12KB
SHA256 4c6ea901d0dd77f78fd0895a7b4b584e0511d6d769954e3204941def2afbb385
MD5 740081d75998abdcba0835d7f21a7cfb
SHA1 ab7950a63c40a37a2e5af84116e3743b7bcda496
SHA512 b6ccb17d010848c9011578a6f7008757b2615b7e5710df2633c5e81ac06574b5da8e458bd241d1d663965638d3aed34f2dcbb9cc11ea50e58d388a78d25f14d6
SSDEEP 192:SrEbCR0f39aHqoSSGRLRa2ceAl1Bw88ha0dKz4:BRFRaThw4hs
TLSH
T11E42DE7C94008B2F38F3327DAC2949A159614177B6BFBCD749FA9885045CF2441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs-1.js
Size 7KB
SHA256 c175161cc0812a17ae66129a01c5fb0ec61b75cb47e2380e9503c92b0e52646c
MD5 a4e52a9bb75c23401783c8fbf1b354b5
SHA1 c537eab4a8ff3a8b30fc8bcd8949dc02c4dcf709
SHA512 1cc40b845baa6f22e394bbb93cec3a5d8fcce8516f77ee09ba0c2fdbd62cc01c4b6b04b3a5226fdad33f44c9c31f07201bb7274fa194681b5ec951172e46cb17
SSDEEP 96:xHSrlTU5bPqGq0fCkHqObzSySSl8pdv9jbwn1HacetBw88E8L4cn4pmdGS:4rEbCR0fCkHqoSSGgacetBw88H
TLSH
T11DF1FD7894088B6F78B6777CAC6848715AB2013BB7BF68C750BA5484055CF3441FE6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs-1.js
Size 6KB
SHA256 d9a540e104d94b0511882d2d985c314d6eca9fd7c0dc0e6b4c07adc70af3c511
MD5 ac8a03d195c37ceec4b32399c86c3d49
SHA1 19c90deb2c33cba6bca045a4c62872f4d9c51b1d
SHA512 226ed144b0533478e86acd51b5d8928a823fc474c0a36216e0da51960529b19b5c4cba3fc453a66840c4f1a885aac34da8e16392cf2cc3f0a8c6d419c5658bda
SSDEEP 96:xHSrUTU5QqGq0fCkHq1zSySSl8pdv9jbwn1HacetBw88n8L4cn48gmg:4rJbR0fCkHq7SSGgacetBw88yi
TLSH
T1A5E12F7894088F6F74B6777CAC6888706AB2413BB7BF68C750B65484051CF7442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs.js
Size 6KB
SHA256 6750fb144bc181d01202481f9ac1865b98db78112222b0d58b1db7519398a52e
MD5 bf4c3655adad4fd6dce5bdca0d0b4b16
SHA1 836f232090c3773aa94e1041527e828d03b6870a
SHA512 96918156bd71b943130c3520babd22914076fad4da193e9609b1c9f3ac0f1604431b36a3bd6c25ec6d7a69412c6b6d10de476bbcf1654f0f5a7a6672f3f06a61
SSDEEP 96:xHSrUTU5QqGq0fCkKjanjLM1zSpr4SSl8pdv9jwn1HacetBw88n8L4cn48gmg:4rJbR0fCk13Mor4SSG8acetBw88yi
TLSH
T17BE13F7890188F6F74B6776CAC688C716AB2413BB7BF68C750B65484051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs.js
Size 13KB
SHA256 ac3508e0b427a166f350adf4f004823edd8736097adcbcc15e692eab82a66474
MD5 0ecd92b7c59109c1544500b1d610261c
SHA1 b80c800ff97bd72718ac982d24d039f9e4860955
SHA512 cc6809dbf99fbc415d8983b68cb8893c53642fd6121c0a2d1619df48a6b77c5a436660e87e999f01f611596067bae1cb109fb48e47723000b4775817f8361a23
SSDEEP 192:SrEbCR0f39aHqwSSG4LRa2ceCemBw8/kA0D5fEJCb6g:BZwRaDNwML0Z9d
TLSH
T10C52BD3C6440CB7F24F2727DBC2949A019614137BBBFBCDA45B99891089CF2541FAAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs.js
Size 6KB
SHA256 a9d6c2fd24611519015149b7ad7814b6da05072cf9337306a5d002bb57a2ea4a
MD5 01ff09a0b2cfbb05fd69fa68df7a0f48
SHA1 64905c455d75aecc253b6345b3952b759ef8f363
SHA512 f7969308b809effb7c45438834a8e63a13951896e1a92ba79124efb91ca721027bb35179bc3097e89cbfe1c1dfd6e7f96d63ef773a6dc0d552ae94130165f1dc
SSDEEP 96:xHSrUTU5QqGq0fCkHq1zSD4SSl8pdv9jwn1HacetBw88n8L4cn48gmg:4rJbR0fCkHqY4SSG8acetBw88yi
TLSH
T17DE12E7894188F6F74B6777CAC6888706AB2413BB7BF68C750B65484051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 b9324cacd5b6af11ea5b5002c574aa066c5f799541b4bc6158c6eed19c39ff19
MD5 f81297b12f10ae7deb0746d94854dbca
SHA1 74e2e6c1be0ecf06f156d1bbce05faa0d6f152a3
SHA512 d7ed7aec0dee58c49bbe3009d89b60d3c53e284db0913c1a1f5c80561355fce8af5dc8a79588826e91a020e25a776b3c3e9b4a40a9b78562f22957393f778542
TLSH
T1C021CA86DE8D24F71951500E6487DFBF4FD4607512B95560F4C8B7004618A8F71DF58E
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 39a7fab80f0c0a4ac015b05f8918741b28c84a30913c54e6b914a92415ff5f62
MD5 2d6f52e9a2a62a6a0cb7809404fb1c78
SHA1 5d63f612948687281a338bc9245e146fb81ba2d1
SHA512 f9fe68bbcef74782bb4516406af9ce5ea883880f1b0857469e4c6659b9713688c1d3f5e068f61bf0e0839155c4547ed40d111530ac5b39b197ea122882d4f9b2
TLSH
T1E3715CD4B5AC14B3059C698304C069EF66D8187F01DD0AE053649A441A6932FF2DE5CD
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.6MB
SHA256 116f88d3f823e774de2667a27406936045fd820609ab191a8b6303d158855e2d
MD5 5ba7899e05e050fbe8ca9fa09980a9fa
SHA1 096eb8e07d2f2c9780a6e8cebc4e8cacf758b4b8
SHA512 906e3d4ac189b57ea9f4867bc64a65653fda737898da955a8d7545aa92ec74a4dd7c3b256ecc61a55f6130ea2c510ec5b06cbaa4df00e3366325c3632a074f40
SSDEEP 24576:paReO/IgBdhPWoi6jBfXmr1Op5VZGs+JS0lp618wPiNR:pEXzhPa6NXmr1K5VZV+JSSguwG
TLSH
T138062AF860D1A243F3424073B64593EB21EFD00CA027DE0447A956E9A479CEF9E56B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bff1228d-a3d2-428e-bd82-6911c86d56f4.tmp

Path C:\Users\Admin\Downloads\bff1228d-a3d2-428e-bd82-6911c86d56f4.tmp
Size 10KB
SHA256 cbdb06004bcbf060ecf4f91cfbc3613ad7e39063a05e5cc41b631a33cd60c198
MD5 b21b9c2abd063172b0b173c414aa3b65
SHA1 8c6168f5985b13b8a076aac093b62db04584ed1e
SHA512 1302ff137642f8bc626d1f0a9287aa3eb6970e8748d8edcc1f35c12e96872e74e814f4c084c9f5381fd4df377a86158e9130ce938da5b7aa197718249e7bccd4
SSDEEP 192:kLcKrlKlqtjOUACIctVT4N5krcb42kdkmQoqKI7QuYbzYEfZ0Qd8S:W4ErBLbzYEh0QdL
TLSH
T1002267B54D5F6CA7F0785332E67188428428A34F4F88DB1A296273DDF54BAD220972ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download