245ca379091992a5f08df8982752b31e8bcc0112bd819d88e00dc272e03c31b7

Resubmissions

22/07/2026, 03:49

260722-edmr1aac888

22/07/2026, 03:46

260722-ebp5caac796

22/07/2026, 03:02

260722-djfp7sxfrb5

22/07/2026, 02:46

260722-c9jzwacm514

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
22/07/2026, 03:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
execution.dll
Size 5.0MB
Sample260722-ebp5caac79
SHA256 245ca379091992a5f08df8982752b31e8bcc0112bd819d88e00dc272e03c31b7
MD5 d7531d0a18722476905230b7f4754d15
SHA1 7e6b69e9036dab24c9fd53c3c031024ed201392d
SHA512 5a9c73945d24e5e129a9da32c014dc6a829cd302036c2d4c7ce1ea013b55189fca3a0ed30e89b7fd6a6f5c05cdf6c97cd17c23346f476bc429cddfdcbc0783f0
SSDEEP 49152:yC8trLAufeP658JO/JuVDOaBRV/J66lk9TQ6ZmGmV4djyJ8zBnWH8UF20pae5kQc:ye+2SujW87LN/yKzQ/dBZ41Sh
TLSH
T1D8364BB1B34440AEC417ED7A890FCFABDAF279530E2C46C7B1D0F5A6A9761908724DD2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping724_1349577831\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping724_1949735197\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping724_1949735197\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping724_1934798287\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping724_1934798287\nav_config.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3608	chrome.exe
3868	msedge.exe

Checks processor information in registry 2 TTPs 28 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291655960738156"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{60C3EFCB-B912-4816-8820-3EAFA64CA8B2}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
672	chrome.exe
672	chrome.exe
8184	msedge.exe
8184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeDebugPrivilege	5284	firefox.exe
Token: SeDebugPrivilege	5284	firefox.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe

Suspicious use of FindShellTrayWindow 50 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe
5284	firefox.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5284	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4108 wrote to memory of 2996	4108	chrome.exe	95
PID 4108 wrote to memory of 3140	4108	chrome.exe	96
PID 4108 wrote to memory of 3140	4108	chrome.exe	96
PID 4108 wrote to memory of 3608	4108	chrome.exe	97
PID 4108 wrote to memory of 3192	4108	chrome.exe	98
PID 4108 wrote to memory of 3192	4108	chrome.exe	98
PID 4108 wrote to memory of 2604	4108	chrome.exe	100
PID 4108 wrote to memory of 2604	4108	chrome.exe	100
PID 4108 wrote to memory of 3512	4108	chrome.exe	101
PID 4108 wrote to memory of 3512	4108	chrome.exe	101
PID 4108 wrote to memory of 2820	4108	chrome.exe	102
PID 4108 wrote to memory of 2820	4108	chrome.exe	102
PID 4108 wrote to memory of 1376	4108	chrome.exe	103
PID 4108 wrote to memory of 1376	4108	chrome.exe	103
PID 4108 wrote to memory of 4580	4108	chrome.exe	104
PID 4500 wrote to memory of 724	4500	msedge.exe	108
PID 724 wrote to memory of 1540	724	msedge.exe	109
PID 724 wrote to memory of 3868	724	msedge.exe	111
PID 724 wrote to memory of 4348	724	msedge.exe	112
PID 724 wrote to memory of 4348	724	msedge.exe	112
PID 724 wrote to memory of 4348	724	msedge.exe	112
PID 724 wrote to memory of 2096	724	msedge.exe	113
PID 724 wrote to memory of 2096	724	msedge.exe	113
PID 724 wrote to memory of 3720	724	msedge.exe	114
PID 724 wrote to memory of 3720	724	msedge.exe	114
PID 724 wrote to memory of 3720	724	msedge.exe	114
PID 724 wrote to memory of 2740	724	msedge.exe	115
PID 724 wrote to memory of 2740	724	msedge.exe	115
PID 724 wrote to memory of 2740	724	msedge.exe	115
PID 724 wrote to memory of 4544	724	msedge.exe	116
PID 724 wrote to memory of 4544	724	msedge.exe	116
PID 724 wrote to memory of 4544	724	msedge.exe	116
PID 724 wrote to memory of 1572	724	msedge.exe	117
PID 724 wrote to memory of 1572	724	msedge.exe	117
PID 724 wrote to memory of 1572	724	msedge.exe	117
PID 724 wrote to memory of 5152	724	msedge.exe	120
PID 724 wrote to memory of 5152	724	msedge.exe	120
PID 724 wrote to memory of 5316	724	msedge.exe	122
PID 724 wrote to memory of 5316	724	msedge.exe	122
PID 724 wrote to memory of 5744	724	msedge.exe	123
PID 724 wrote to memory of 5744	724	msedge.exe	123
PID 724 wrote to memory of 5752	724	msedge.exe	124
PID 724 wrote to memory of 5752	724	msedge.exe	124
PID 724 wrote to memory of 5176	724	msedge.exe	126
PID 724 wrote to memory of 5672	724	msedge.exe	127
PID 724 wrote to memory of 5672	724	msedge.exe	127
PID 724 wrote to memory of 5904	724	msedge.exe	128
PID 724 wrote to memory of 5904	724	msedge.exe	128
PID 4560 wrote to memory of 5196	4560	firefox.exe	130
PID 4560 wrote to memory of 5196	4560	firefox.exe	130
PID 5164 wrote to memory of 5284	5164	firefox.exe	132
PID 5164 wrote to memory of 5284	5164	firefox.exe	132
PID 5284 wrote to memory of 5240	5284	firefox.exe	133
PID 5284 wrote to memory of 5240	5284	firefox.exe	133
PID 5284 wrote to memory of 5240	5284	firefox.exe	133
PID 724 wrote to memory of 5144	724	msedge.exe	134
PID 724 wrote to memory of 5256	724	msedge.exe	135
PID 724 wrote to memory of 5144	724	msedge.exe	134
PID 724 wrote to memory of 5256	724	msedge.exe	135
PID 724 wrote to memory of 5824	724	msedge.exe	136
PID 724 wrote to memory of 5824	724	msedge.exe	136
PID 5284 wrote to memory of 6092	5284	firefox.exe	137
PID 5284 wrote to memory of 6092	5284	firefox.exe	137
PID 5284 wrote to memory of 6092	5284	firefox.exe	137

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\execution.dll,#1
1⤵
PID:1316

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff89bb5c728,0x7ff89bb5c734,0x7ff89bb5c740
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,1728429394525046162,3931859363371709231,262144 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,5835598315282910493,8540148259114282016,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,7495444546610138925,16962448581604026234,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,11578867245230311509,17974218006808269501,2097152 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3312,i,15039931768386788037,11705396818413859186,2097152 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,2738619129908350565,10743971722396177742,2097152 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4144 /prefetch:2
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,11630614936060697519,11128015627011029007,2097152 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,2096069061859237226,9510173323659037555,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,10605818969717630309,7407373227567787834,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:6772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5924,i,12866480326325395170,10883775057530531306,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:6780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,652761524966193834,17789289676208813223,524288 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:6792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,11804007321715067158,13991638573558667980,262144 --field-trial-handle=1884,i,11562229526620207976,8648576557508607395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:672

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3460

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x270,0x7ff89635c188,0x7ff89635c194,0x7ff89635c1a0
    3⤵
    PID:1540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,9224616829991455239,7474625132683125809,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17866897765520892019,16481027098357281855,262144 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:2
    3⤵
    PID:4348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,12820843123630676040,5425064665138467577,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:8
    3⤵
    PID:2096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,13293211551315958836,17331201876387562403,2097152 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:3720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,11546748975087086622,1296073294375991077,2097152 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
    3⤵
    PID:2740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,1567322494109152815,5858065228652562848,2097152 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
    3⤵
    PID:4544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,7583334626669700583,12490848540654951550,2097152 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
    3⤵
    PID:1572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4796,i,13239913560740357706,14984652857500344253,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
    3⤵
    PID:5152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,1834750526421580747,7415784533910102753,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,14915378064291182812,2640872803988067927,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
    3⤵
    PID:5744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,13717720437158681693,9488264459833069995,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
    3⤵
    PID:5752
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11271168877727599912,13867455146820881448,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
    3⤵
    PID:5156
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11271168877727599912,13867455146820881448,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
    3⤵
    PID:5176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,18265570250251489782,1447225053621395315,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
    3⤵
    PID:5672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,12310086103632676002,3687962767528120993,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
    3⤵
    PID:5904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,15911899530759128066,16989775411416130237,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
    3⤵
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,5315299272049144788,6616328784406595762,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
    3⤵
    PID:5256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,15973401690648136082,512357704160575615,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,6516300293093657133,9191220999729000493,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
    3⤵
    PID:7360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,4375538040590079902,14160330912688488256,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
    3⤵
    PID:7836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,15171744031102760960,15816323034614242781,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
    3⤵
    PID:7368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,2184121302366167951,14654080247631692344,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
    3⤵
    PID:7300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,15275420615724440087,9331252967223345959,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:8
    3⤵
    PID:5892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2840,i,6106058582270700319,3209057452806221290,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
    3⤵
    PID:6512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,13770288584779834531,17232878804417744985,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
    3⤵
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4940,i,2157728568620085998,15501835515840342185,262144 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:8184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,10338713857901443465,13673527833053444059,524288 --field-trial-handle=2504,i,8209156717402122876,12609702736669321515,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:8
    3⤵
    PID:6752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3372

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  PID:5196

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5164
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1992 -prefsLen 27099 -prefMapHandle 1996 -prefMapSize 270279 -ipcHandle 2092 -initialChannelId {43dd2e11-e088-47d6-850a-9d2c4ac786ef} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5240
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2488 -prefsLen 27135 -prefMapHandle 2492 -prefMapSize 270279 -ipcHandle 2500 -initialChannelId {39f835ba-2672-4b54-804b-127482c3e62b} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:6092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3816 -prefsLen 27276 -prefMapHandle 3820 -prefMapSize 270279 -jsInitHandle 3824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3832 -initialChannelId {a68a0ce1-f22a-4c20-bdcd-0270d38b2e6e} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4584
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3956 -prefsLen 27276 -prefMapHandle 3960 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {6e502c14-eab1-493f-bbd7-402a901cefbd} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4564 -prefsLen 34824 -prefMapHandle 4568 -prefMapSize 270279 -jsInitHandle 4580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4588 -initialChannelId {75e01d0d-5bc5-4fe0-8272-566ae579c83d} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5616
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5028 -prefsLen 34824 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 5036 -initialChannelId {3ce7f66b-63b6-4e1c-bed2-79f1ab029324} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6192
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5068 -prefsLen 32952 -prefMapHandle 5072 -prefMapSize 270279 -jsInitHandle 5328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5336 -initialChannelId {20d37353-49b2-4fa5-b4b5-624f407874c8} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:7456
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 5520 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5436 -initialChannelId {15bd020e-1177-4c30-be02-5d15f3635079} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:7472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5716 -prefsLen 32952 -prefMapHandle 5712 -prefMapSize 270279 -jsInitHandle 5708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5536 -initialChannelId {71d4fd0a-3eb0-4263-82c7-f8abef110599} -parentPid 5284 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5284" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:7512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping724_1349577831\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping724_1934798287\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping724_1949735197\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0b666628d0ccdd51c4d2dc42f1216c979e6a671f5eb2a9c96cdf2f84399cbd4d
MD5 256b54ec16921084917b57e450223dae
SHA1 199648224259fb1804d02d2d7d84ae249c1c6bb5
SHA512 0046bb589f1bcf77001b7dd4491b3090c756960f20e969e4be44d3bcd2c59d9042e3a53239c11a1bd791052d4e408ddc63fc422b434ad83e6d01fa15a595b79e
TLSH
T15DE02BAACA609D3B0DFD071924584B47E75433572B81455F3A3D83098FB86764A86C6C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7f07e5b02eaa4943584d4a0ac9d49da458835125935eb5651b8d4a1156bea185
MD5 6d48050cd66152f05dd679512abff8ec
SHA1 368537277a3a8787ff48598deea1fa1a1226347e
SHA512 049fe55df3629c55838371860b9bc8ba9b3c43382437a612d1d6ff2e8ee1842cf1100d7ddf0eec3b20a97fbeba961a2bbf1b1f65cd2d86ea83d58a85f84d13b4
TLSH
T19B519AF3D3E49A6D851166F49B217E2FCE2D0A14021C3C668CE4AE5B53E2972D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8eb7f5ff7baca35e06d12dbb88e6846a9e8974538c10f7b2932ae6d6e2531072
MD5 372fa3da36d500b75cd32d409b84a4f5
SHA1 259efb2b3539b8b6a3e23ea2cb6a88ff38bde493
SHA512 1fcbb0eafd0e216a394b318d6e1b6ded4ab6e2a4de850a005239665b646e7f3ab764ac5cfa2abb801610129735d68f55304c6e973a3083a3970d17b65beaaf07
SSDEEP 192:BRPd8jsde1so5uv72ympAPRp2/95Hsb+WNniB0czckwUaHVyIsnAUgtaJ:BRPd8I0RKQUXo7wQ010ah8
TLSH
T18D42E72EE910657BACDBC32AFA167753D7F5103565842E44EAFC8B2C18E75CC221B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 bc7793c249319103eb2a8a6a6f7bb44070ee78ad974cf473cfc03762004a1948
MD5 8b08c094450eacb102a6b751380ccc30
SHA1 5dd431ea158404a672fec31f0e97cd93157e4de5
SHA512 f5ca055fe7f70f7e9f37d1d0a728b7278745323c34b4846a717b8cdb0c246f5e98fae94afba9f859fd0cb788bc759cf06d2d9f897039823b5270df470a6e3c1b
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLILc2jW3XODM3+ErU3osH1qkkPlRtV:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pj
TLSH
T13C720967684C9E370F94CACCD817BB4FACB5025B65EDC86492FA5C2503D5ACE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 662715cf077160a505055034b2dae2bab295b9895f10b08787c6d8ed14428e68
MD5 db099edfb5e25555e37edf7947af2974
SHA1 d4bde5793cbe6c7ca781b87e3c988185dc04c3d8
SHA512 bfb68679429f4c3a9edfec5fc4c95ea1e9e10e13a543dc533bcddea24bac2ce888990c76d7575426bb0adb4e3b29bbea2209bd70bbdd3dbc712725a65d842faa
TLSH
T137B0124180015102C04602F411D2148C71149F11960A170153E069368825191C0252A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588122.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588122.TMP
Size 96B
SHA256 5a29e357dcaa1cbf3553eba38a57e7f13f8fc803c3225d749e0d019c63312963
MD5 b1f2fb86cf7f38701914457a0896cd05
SHA1 7cf6abdddd838e9901afabc96af1387d7fa01e92
SHA512 4c8518a3cd2e4e1d13649aa5d7a5efa37b5725e393fd479e4756bf770b276b289aa969124c51a57ef4e8c2990e987133c2eba1cf2c70f0d30b64d34847d465dd
TLSH
T1BEB02200C0032202C08203B02888C0C83320EF23C203022282F00EB2FC203A000A0030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 255f6548c8a8835e205ac058f420a3842deba0921328adc43c575070db6de313
MD5 3de71d59a2a5713b18469e5f05f3ce0f
SHA1 046fda77731a955a389faf543f11c30fe8b5aeb8
SHA512 0ca57104ca9ed5ab50c0a6b057c001c2f4656a40a7d64c402a46ef0e0c995fcd2b2348ccd41e4db9506a3d15c3f42ea4ef6edf712b2c7510230d9db67c3825ef
SSDEEP 6144:fnKK692ILxkFOol2WGMbrMZMJqZ/ZLW3Exk:IEIyFVl2WJbqZ/piQk
TLSH
T1EA3422BF9A975E222C85CE14F5160FE53EB56256C8F49105A6BC36FB3C86480F9029BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 72616e7efc88979e0c3dfc09b6a30afc8f0e9c4b359f7de809af9bd58ed6656b
MD5 b9ffe115251e1f65a4b7345144147247
SHA1 df0f3bce1e08640cfa0cd9bd9bc28906742a25e1
SHA512 d4fb4bc9f27158e65d068c479cf26b813d609ec50fd81f3e6b729791ddd501982bab774afbae106dd880f1332b996e55266454084848bb3289401d3df5733c08
SSDEEP 6144:yNKK692ILxkFOol2WGMbrMZMJqZ/ZLW3Exk:yyEIyFVl2WJbqZ/piQk
TLSH
T14A3422BF8BD75E222D85CE50F5260FE67A75105688F4611597BC36FB3C92480FA029BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 b465febc640dbbacd70ae7e2938af8db2a0bb029d10ab9055722c654585cabb9
MD5 120e7299a6612ae5fbb7c8b9af59fecb
SHA1 e53f4507d9908bd193b7550e6cbe65632ca425fb
SHA512 aa9dad658447808839cfe32edf9a5868bc2e4e891e53ecdf95d87d40176525ef3e3abf712d5ce3e6f0ba81904716620ff11ff62fbbc92ae00d6f2a77484e607a
SSDEEP 6144:/NKK692ILxkFOol2WGMbrMZMJqZ/ZLW3Exk:/yEIyFVl2WJbqZ/piQk
TLSH
T1153422BF8BD75E222D85CE50F5260FE67A75105688F4621597BC36FB3C92480FA029BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1cf09cc3bfc6c3ab7e44b3c0314e3c91b61404c7ee0ed97d15971975ce74f03b
MD5 cb98cc027f261de34dbff24950254f4a
SHA1 8fa4620b97e13936e21d81b7fe98a58b1a7ab69e
SHA512 af260a884658fa3b1cde04cef940422ce80d9be66d9fa0ac65b2de04e2a300611cf7c913c8e2e60371d8bf006d8ec8193c63c6e4695a8b1930a88ef576e9f6ab
SSDEEP 1536:TKQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Lqfd7NtZL8cHQRZEQ6Spsk
TLSH
T171C30237DBC21F339D96CB60B9530FD697B644A99034D301AA7D77AF6C8389168428AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 09e46b4c0e8b1850a95a42fe54164d6847536940a16c15d48806b882b715c243
MD5 7e53f37aae18c2c637bcc2d0c3eb99ff
SHA1 58cbd8ea459419a75d844564849598260c6a11f6
SHA512 f4805a4cdd42132d8a4589754bd17504460ae182497334e4a76c90fba945a4670baf035568bff95afabd6524198d1e7797a91008cac765b020f45216f176a131
SSDEEP 48:nf9SQYX/wAl/Q6O9nmiC7pCAjCpYFy/5oC16ny2fSJn9WN8T3WqFOj8F4Rjrj3Hq:nIIyY6OFpGRSwyRoa6yzlcYFyjrT2N3
TLSH
T1C6C198F1ED992667FB36223FF0D12C5D3124786E84BF5B97336611202C46ACC29E6907
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c927.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c927.TMP
Size 3KB
SHA256 b87342a61a3d1331d42fcce60c48fa8844d8c71e4291fac5de794a41a6d0eddf
MD5 71ca850e6fa14345f4a116fd0f652a83
SHA1 bd2077e8d6125ee6d68f86a602b6937ed3ff4957
SHA512 9494b5a8c3ad2daa6463b54dc76eb303771e614a498e0484d9ef8991370580842755f02ee55513d6a62fdf5b01169466e0344784a45d1576010143bc89fcba4c
TLSH
T170611BF6FA8A4A65F3270333E4C1096AB139B09C09BF9EED339455311E0976070D6D0A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 05963cd685a97e4c35dbda10fc7b683790255d897e025342b1c7af433d536574
MD5 c938b18b710d9365bea0c9cac04fccf6
SHA1 c934f88a7f0c19b92b1e78767869cbb2e63bbbec
SHA512 4e89691e5b1b00c5585dde0308a0dc4bef1686e87c920aa29ab53d3726d3c8f32b29817a40c08967fa66574d699b746f65ea318deedd4d4f2be9552c4241d5a3
TLSH
T1E061AAF7C3E9866DC91191F0AA147F1BDE2D0452436C3D8A88E46F4BA3F2871E151B8E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6635fb236f76eace08c470e168ef5eb9729c8b6e42d3d48e130258f3dc5ebbef
MD5 61d1080e8059f372d44e67592235fd19
SHA1 feeb5e1d50febb96ad211e10fe38d402c6a2f083
SHA512 e69fb2dfd97f9d28c3ba2767f858a66026b9ddd3b6869628f417847778216676d67b2167b56368fd1790cc4b928b44cc789d9c9a6aec571f6605f3ab56812ba0
SSDEEP 192:sxZ1QUnZ/ywFaKOMl8M+C/ftsFgjMfU7bpFupm1/HW6+WNB1ypq/YHWIgXnrdIgc:sxZdnZXGC/ftsFgI0QK/HbDmq/TPBc
TLSH
T177620A06BA24597BDCDBD219FA167B53D6F81422E5944E48A9FCCA0C04E6BDD2307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 050a97832511a687ade0ef5236f963ddf8d0aa96d0f34614b40b9635c06498ba
MD5 e7a780b0d7b18a8632d7e63e97f75949
SHA1 e61956dce2e729b9f6b4fb9405b110fef189ad2e
SHA512 95ecb2ca1c6ba090cc4ce8412108c6478d0173a4321b0abae1c696002dd90ca7f7aea947803d8616383b798ab67dd1a4d2a5bf4e399460f5554cc6ded3de330b
SSDEEP 192:sxZ1QUnZ/ywFaKOMl8UQT+C/ftsNijMfU7bpFup41/HW6+WNBPsXYHdXXRirdIgw:sxZdnZXqSC/ftsNiI0QY/HbeX/Bw
TLSH
T17B721A16AA244977DCDBD219F9427B53E6F81433E6940E48A5FCCB0C04E6BDD230782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 c31349adaa1d7310e58311a9552b66355a684b1633a5bdae574b86ec500558f5
MD5 f4d19e1a9f7609bffaf410c527b55698
SHA1 dccfdc2b76d6f4bdcd2e36b9296ea9f5d7135a8b
SHA512 45e1af0ddf8124e7ae156435469997384fe8bd2f6482a935f8b69fbd2211ae43a43fb4952397b7a5ccf87a128d9a76c66710ec792f38df4893898b4d9c8331b9
SSDEEP 768:Z4UZYSg7pLILxgMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHpCeLlPZ4RSro9:Z4UZYSs2xgMWvg0Pou1ja6pCeLZmRJbJ
TLSH
T106F2FB3B7C0CCB7E4F844E9DED2A6E8A6DE801CB9A98895447F9844C02C76EF11175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0a4d521e-50a4-4bc1-adea-69594d1f8469\index-dir\the-real-index
Size 72B
SHA256 2abbf0e4049c5b17af1fbc2dd68ca41c4d1d75af481f64392512e2f975788111
MD5 2bd3b36780bfa5b92d7c15a07b208abc
SHA1 a26818d16fc7969d2581f67a424270a46a4460ac
SHA512 6d6b379afb2d68eab7dbf1790659aa4bdcac3578df11c146533ed872f2f312083f2a43c547bd2287d7422e44484a20bd792dfc46522e05eab8a5cbaf8211a93f
TLSH
T125A0023C17411886EA10677458D7D3C632214C64050B1E1547D3B7A488569E6A111017
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a812.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0a4d521e-50a4-4bc1-adea-69594d1f8469\index-dir\the-real-index~RFe58a812.TMP
Size 48B
SHA256 848b3418ca0a316273d213692cf03a76cbc4e6ebb23f5f3ae4ec9451f824840d
MD5 59709e6da7a65d191cee0de64fa44b7b
SHA1 e974288482925d64e0970103e281b69c5c18033f
SHA512 32fb45c395def3bce51aaaacf65da1577b758dfecfddc2fda7c8d21d76ed621434422a40654a5958a39e05a96e6f03b4300d2b39987850632e101b47558e2c1b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 96B
SHA256 a87096ad17a2cee97e928dbe7b6241b7dca27ae25096f409674dfae7bfd2297a
MD5 aafdc27c085f49267d18ea7da07a8282
SHA1 18954fb994d6a19ea81cee3222d75bee87fe5def
SHA512 eac8fa09b45082bfcd8531dacc0f93705a6f96003ae329a9ea56c6cafdf6e93dfba60271d66318641ee2798eaa04d65c1ba56af242d937dc051cfc7da0ea06d4
TLSH
T1EFB022220C800003C0038BB002C30A08B3288E88230BE32B30F28BA8CCC02E80C020CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a97a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index~RFe58a97a.TMP
Size 96B
SHA256 34a72740e4b241b622a2eea77e43570cc6f29ff6a346ced3bc9aaea45bfd03c2
MD5 fb50993a0226b61c89eb4e4013f466f3
SHA1 da91e6d36fad6ad900bb39a5581a682c30904a1f
SHA512 b7da560d1f63a71eab31f19d4d77602a9ca8a2757d0a0d5c6a9f0a3bd8862fb0e5f1f120235fc02f5bb2307183ffda0c36b5c4f7628f5882da2761d1d1d63934
TLSH
T110B022220AA00003C03202B0A0F3020033B2CE2033000BEB28C0A0B8CC32A808E8A0EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 2KB
SHA256 d7ec57437ce1928ce9ab22462bd3ce93ef49852ceb6f3c3014a257a1960edc21
MD5 3c4f2d090bbe771fa91c5ed7bfc38aaa
SHA1 768826afadb2a8882a61c00290aa1d5450054091
SHA512 d4fb212965ec6c791c7fce59e66f1212c9366ababc259789b7953ac525a7eb7d143218e616a3dfc9a7c66407a267f77e5ca65db020872a08b42687b352f81e7f
TLSH
T19F51A70F8D876E27C8AC01B228FB58843738B8DD17C49A1BA5ECB17468CB2662D16219
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d23f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe58d23f.TMP
Size 2KB
SHA256 b11d0e8d9bbb0ff03cc6bdd0ebdb16222e6fc242702206f6c3880ced92185df4
MD5 8b8e1ca7b5e2bb217f078ed45ca5b2d6
SHA1 dc7e03e3e0c01ec68df5e749280bd2a7fb9ef907
SHA512 9ca5258b59f7e0aed22b08411ce6130ce42a2105ac5ae1814b566a2f37ed6fda164fe75db6979f128952e22e733d0b67ba970f4fca8f2c37bbae38516dcb2648
TLSH
T19B51849E5D824639E89441770AE3A8B437391900C619BF5374FC9632ACD379E3D1E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8b22c76-83d5-4ba5-a263-0cc9da1f9e0e\index-dir\the-real-index
Size 72B
SHA256 5516199467d0012eca8146a34349f087d6b3bc3918043925e24b93c09f723d3b
MD5 1886517a6e223fe3781a06ab8241a762
SHA1 f0f10b3f5a7ccee924ca412b83deb2a2800c8be8
SHA512 854b53508210a8eb8bfd4b20269418745206901ae3b2b7c5c1b44d0b87e532d853ff191cea5fdc9462aec583d2f58c09b0defd34ef390e07a5949b18033f9ef9
TLSH
T1D6A0022433D4C613C9050675A242C1C832D098194502031D71F215598AB59C7AA45060
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 7b6ea00acc52a6613ebd2f2fa1501ed2cf5fe164447f002186589c860b5f830e
MD5 14a6370b2a60734bdb0e8d410c82be78
SHA1 8d40d7c058a76b5b6377d2ba1ccbbad9cd9a14cb
SHA512 effc68004b2ca308f08457752b6ab4da84e38f39aeee223dfb4e6d11999f8406206bf946880f3cba30598ed656596061aff699c236bbd489c034448fe37f32f9
TLSH
T152F027B37EFB2851FCAFD7E61471A4A016167CA88569AC8E115AA6A340B23042449C62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 79ed571478471a75d9fcba123097053bebfdd1c8ae16b1e4e3fd8665bea95ce1
MD5 afaf4be9eb4f7889144cd5eb987d4de0
SHA1 c068f2c88df32adcc195036d628fccbe767ad884
SHA512 61fe0893d9c90923e89e17c950891cdf5e6ed6fe0f7ee964056b15d0fcee22df12e614311825d1382c5c50238939e6be4fe154e4cfba0d324916a81433223177
TLSH
T1E7F097B37EFB2811FCAFC7E6547160A006127CA8C54DAC8E105AB2A340B23051409C62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e642f22e5a22f9a3191b108592610b8dcedc1719518f1c6bc1966e681628765a
MD5 ba664d811f85ab16584bf1b15376b0fe
SHA1 0d98bffdee3644c218d1bb8249ca885ce416001d
SHA512 66b18c3c8f97240ea76d0d527acc902d869571625bad8b45b1169af76c8b10eaab0ae5f83807199749b34084245a6f79e7c3bb680377386a59827d61ee5e8ee0
TLSH
T148A002918EBAA1DDC53206719CE51184329898DE06073A1158EC425FC89919451F2904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cdda.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cdda.TMP
Size 72B
SHA256 e0c831e3077b44fa44942e4c7aad4f6aac02406f510346d542554425714d4a3c
MD5 84175383ac2120d3e6e0be18dad2d33d
SHA1 e3cf8fdef00ed78600858ec2a5e626dc41269ba8
SHA512 74d87d869035afa0d43e6d590ca38fe7cbc9a9ee8f2062f98427b227dd07b355c64355b9751db3b2cb5d622fbf8912e41410fc0540a8cea9d5857565d0ffdf28
TLSH
T12DA00213828A1519D44105F2140B22653340886D0240120644D095D8ED915C1F9B1109
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 88ae4ac01cc0fd8ce87b7df523bf951e337ece7a05582a493e3bcca1ba7f48ff
MD5 bf89d97dd8a1312271d67fd24b749f2a
SHA1 2460cc266cda0b4f52ea9c05314d471d61e410b6
SHA512 8df92c54d0165c967694377fba0335c9e4fa00cd3afd7ac031bc9539aca63daf2647bbcd8d52844d4f8ceb16a93e79c5f36592499404171e85c3b1bee3381a8b
SSDEEP 96:KA1eK2Acl6Km8CGRaKqMJ8AKdSmeFeKeWG:EwdJNTZt
TLSH
T135D1155270BB42023C7E690982949B7A4742F1A37034F92B7BA805B74E67E245FFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 f325d0d075ee0d5f7da38cb2898daed94e83a3d42b93b670b39ad6c7069bc852
MD5 6267109aa8bf235007877e2609662d86
SHA1 3cea550366f8c64b17666856cd3781470d6ab5f0
SHA512 65ab21b6d14f101fb6ede3f9718002ab10c12e45ab678bce313b13d85dcb1a92379b184f5f029ea728d1a7928b5f1e02862a143cbe5ecb06541623a5f0a9568f
SSDEEP 384:n767FKtNn/s3n9S9UsNp8TUNTUlIl8sTPX3AMgj2Df46X5od+gdMdtuZpScjmwAA:OFKj+9Bswg2g2BiO9WfuZp1jUA
TLSH
T13FC21836E8A4DA6BEDE396C6F6477656CFE011A38AC85EC4C9D86E0C00C76EC030BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 43755c0774fd5162509f651ba9cea2683763a5c477c85bfa871789d06510ce55
MD5 7c6cf3ad8f2807758ad20a9c5b3a59a6
SHA1 3334619d988bf1c68e7274bd4abf8a56b09dc865
SHA512 6e93d9fc17d282ba85ae341f433ef3b251072e4cb1e77c0515b3d2ec041089ec1020c3d415a8f9435ddc7d03afbffae61032db94f01552a8eafb541508176f10
SSDEEP 384:ndtNn/s3n9SwsNXJsTPX3AGOjzX5od+gdMdtuopScjmwAzU:dj+9jegGnO9Wfuop1jUA
TLSH
T17A927D32A8686C7699E7A48AF44737178FA45067DAC92FC4C5EC6F0C00DA6BC531FD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d0f1d17adee63b9ba82c21d19af3ffa1e33121dffe64cafcddad27cf4a6780d9
MD5 e1725726712bdb7d2281c6341ec63d2c
SHA1 8162f89b592c3b84a20439a8ac073ff92de4a514
SHA512 1ded7f99b457d3842d9f6c8081d73eee0a12bb6ec73f789515bc5c5e020eca402db6f762ffc578e05b48e8aec1e137a199b78652079223c06ea1cdbeced36798
SSDEEP 384:notNn/s3n9SwsNX8sTPX3AMgjzX5od+gdMdtulpScjmwAzU:oj+9jRg2nO9Wfulp1jUA
TLSH
T1FE927D32A8686C7699E7A08AF44737178FA45067DAC92F84C5EC9F0C00DA6AC531FD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 23bc02cf5ae29207fcf9f511303b998601b7636a940d146de22dd50afaa3fc6c
MD5 81117def0346d80435fb12df5955bbd0
SHA1 146d8dc8a5a76107b4fddc624c8e779128ed80bb
SHA512 2520710dd4966b09d313d24622fcac3da8b14b7d7bc8ed6842aace86e0451fd7f7bede76d81d56b8410e43ea1b08c950c900e3a284aabf0d278d5477fdd6218c
SSDEEP 384:nHtNn/s3n9SwsNXJsTPX3AMgjzX5od+gdMdtulpScjmwAzU:Hj+9jeg2nO9Wfulp1jUA
TLSH
T103927D32A9686C7699E7A04AF44737178FA45067DAC92F84C5EC5F0C00DA6AC531FD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 22b35b81e8ff64a2fd951ff2c07b48684a062ffeff2ae1288172223a175a829f
MD5 57a035bd8952d7423ed8a8ff164754d7
SHA1 e846d14b4da341e6e60361e62fd426b728bdf20e
SHA512 1fc568fd9e5aa86aa80a5cbf9283244f86a81f0cc3afe3b0d2d9669f7f247ef7d9c24ccfc3267396df6b4e94c6c26b5ce920c149b037de1584f0bfe0bde15989
SSDEEP 192:yONm61VWQmiUyzGgGX5Obd+jP+Fdgzg/ay3dMU6:yONm6WLgGX5od+gduQMU6
TLSH
T12602D73568687CABCEF2BE49F48737135FD82077EA956B84D6E81B1C00D769C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3f7864e46aea2877e49746af25018b78ca9746592349fa12d8ecd1f30aa4c281
MD5 a7fb47945844b5804ad29ad32e2031dd
SHA1 0d918ff1b77d6028f6d728e20404b49374e2367b
SHA512 22c7427b24134c5b301df7189963c37f1a7039b9ad75e319495d8e37e4453e944a21a49b0d7fa9bed3f7e51704c6c345744deea526f1ad2fbaaa5b0f61603614
SSDEEP 192:uONC614WQmiUydGxGX5Obd+jP+FdgzRHdySuZjJnqqU6:uONC69DxGX5od+gdMdtubpU6
TLSH
T1ED12E832A468BC6B9DA2B845F48736535FE55127EB896FC0D2EC2A1C01DA6AC131FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

8bd25536-e16e-4064-833a-11c90e8bcbdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8bd25536-e16e-4064-833a-11c90e8bcbdd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 286e5bf474fb5d576a3531c12cadaa65798910a42b83fe95b7ea90bd84026154
MD5 6e771c913c228b6a07a0c7752b7f0913
SHA1 df539c672afe38066801789cfd1db40edaf72e78
SHA512 591b7c6cc7bfd6b5d9d1322d2ab9576cbd8b261119b3d6209c4fb477a577af9633f9b6e58b0519b18ee532c59e6b82a583c28f4340e2d7a427f370568b9d1eab
TLSH
T17241395CA6ED1108B3B36F1AABF7A86E487A79331E06D45E10010E4F0A22F40C9B173B
MD5 SHA1 SHA512 TLSH

Submit Download

4DDF99D0461C50BB47DC9EC040A8AD4C9355497C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2d5mkwou.default-release\cache2\entries\4DDF99D0461C50BB47DC9EC040A8AD4C9355497C
Size 3.7MB
SHA256 7145eccb12e33171174d502b07ed6785fc960b8d7dbec1119b89d68d89abc18a
MD5 df6fceebc134d11ba32c2df3243445c2
SHA1 047dc771b3acdec4640a2fae5baf44b91735cdf0
SHA512 4356162c8abd04ad507aa930a2066882d8b588602452b16cec6eed900b499aeaa0f69a26be5f153ce9e1e21fae97ce3540c7ff0e4c7ef5a9d97e8b01561d9380
SSDEEP 49152:fwoQyV1AXPC/Tn2HVqo0Ssh3F2Z95OOlo36EiyHK1CgaESlsi/tpcuQtZcOCgLMA:IoQUUHz+f2ZnBQHK1VaEM/rK/LM45Yo
TLSH
T19A06F135D25CD60ACDCF83BA840C2FC2C87C6F66A054A55BFEEA9571DCA32D21F54A81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2d5mkwou.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 15KB
SHA256 781a347a558ed20b952a2468ab42895c0c832cc05c368c38a4bc21248b4c1c26
MD5 97a116f45cc7ef2e905a87c3dd850632
SHA1 5db58437ed245b2852cd4a4155dae6c156462717
SHA512 20973681bdebe988a394af41f1d0fc1a3787ffc536cf747d429e803a2ed2c81a49b56f727a11b6f5c5c3ba24e386b8875a3a74b639cebc7d12880675c8c61fa8
SSDEEP 384:HwCe7iO024YTdcs3hk2nhfdDE2Ba/rIVy8er9b+X9b+s:QqZYTdv3hk2nhfS2sDIVy8O+t+s
TLSH
T195729DBFCF416C5D2957D985C9AD93699C14F9BBCFF690A60820344AC784326B0FA08F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9512A4488B00CC053350DAC32D417B4A35C11513

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2d5mkwou.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
Size 15KB
SHA256 6b88b11da2405418ff28fe4b5d9ca13c2510e02a7230cbf39ac39f58f8aa7def
MD5 fbb14f6dae05fef04ab5455bff6db222
SHA1 817ad0dc9dcba10332d0788ac50b232ac1341ae3
SHA512 f8737fa50b6501ad70a58ae8d152c3005b311952cfdf240ff430faaa6e80b4a06520f8aa46d43a099c052646b44c1ef628c3e0f01ab2594ec8587421d7fd931f
SSDEEP 384:H9XghOiO024YOdcs3hk2nhfdDE2Ba/rIVy8eEytyNU:dX+ZYOdv3hk2nhfS2sDIVy8lwp
TLSH
T1DB729EBBDF106C5E1A67D545C8AD8369DD14F9ABCBF291B608203449C78432AF0FA0CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e716cbdf-7b97-48be-8a79-407049c9fe95.tmp

Path C:\Users\Admin\AppData\Local\Temp\e716cbdf-7b97-48be-8a79-407049c9fe95.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee0c36a2-b97c-4964-8bfd-b94aef284afd.tmp

Path C:\Users\Admin\AppData\Local\Temp\ee0c36a2-b97c-4964-8bfd-b94aef284afd.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir724_697806634\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5781fd9-ed57-431b-a394-5866d305ea3c.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir724_794444890\b5781fd9-ed57-431b-a394-5866d305ea3c.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 d8820fdd3c189f659171cc4834b97a964bb6c9d1c79f0c194693a8be4ca7f469
MD5 e6a6a7529669070db9185e574696ca86
SHA1 af8d79f53d18d05bdcf13122ec06bb3fceea42b0
SHA512 ab165a7455c640778af88afe0065e1ae0b7e67d54de3cb4423f685f6e8019a8faec306e792d809027346c3a768ae819c0800fab02ef95cc3c006427387ec0c57
SSDEEP 192:OOv5zboPWb+fyjq271d66JozGzgCl6mc0dz:Fbo+b+fyjfd66JozGzgC1jd
TLSH
T108E11D68EB28863BC408037BCCA61F414F36395A9C4E3F19759C64182D572DE3A9E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 26KB
SHA256 275fecb9ab39058780782cfec12538f2b4e38ff9d76728fa67c79f9ba6bdcb64
MD5 78141fcdcffaa4feb4cc839f92faf7b8
SHA1 8990c8ce544de5a0ce5476d4f65c6d509d190d8b
SHA512 44a8bb5926730030ee704b3fa29a7d4a435da7d046f7fda6f7726a1bf7f452d72133c84495d5b12f4d5be37d9b1faa3e9789903960fc2b1bbe49541f9108cc58
SSDEEP 384:rVCid+S7pOxj8Gcmhutr85CAKP+QrErbgbGD/d66JozGzgC1jbboL+fyjB:rViSMj8Gcmhux2PKP+QrErbgbe4E5lO
TLSH
T1ADC20084FB6A953FD41452BBDCA50B002F79B88A58192F973A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 26KB
SHA256 86cb54c29dfb9ef602a78d0ae81c106c06cb3e4acb70c5ae8ef37517420a2029
MD5 6ef643267fbcf5c0274a141c03f8a44f
SHA1 c19985266dbbc853829b3a2175d3e44475bd2ed9
SHA512 b8eaea791dcf70e7dc53db52bbb1148c3b54e9adf68a5d199c7551863ec7e39dd7c6c65d93952b70c1a241e509b7c6482295e90c0cceb34a5ba056b826c5c931
SSDEEP 384:jd66JozGzgC1jbboL+fyjEVCid+S7pOxj8Gcmhutr85CAKP+QrErbgbGD:ME5lfViSMj8Gcmhux2PKP+QrErbgbe
TLSH
T1BBC20084FB6A953FD41452BBDCA50B002F79B88A58192F973A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 26KB
SHA256 18d72c51a919bfb5856d72fa29a19a6fe43884edd7fa9c152766abda7440cd98
MD5 0d7eb02bf951aa3becf990dff9461e41
SHA1 383e0b5583db3744bce717b37ae9d6a89d2cb7d6
SHA512 b026f243d71c243ab8037273b4fe168f38be1b1a37ccab64d94cc0fe293a322d2ce21a9b5c89f92416c5bc0015ac476ee987c6fc4201bfb838c4b84132287b82
SSDEEP 384:kboL+fyjEVCid+S7pOxj8Gcmhutr85CAKP+QrErbgbGD/d66JozGzgC1jd:MlfViSMj8Gcmhux2PKP+QrErbgbe4E/
TLSH
T132C20084FB6A953FD41452BBDCA50B002F79B88A58192F973A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 aac32d313d06a4db5b54216896b003dc07fd7ced4de96cbc5f60d575811aec55
MD5 6acbef81bd4ca44aa05736c510be1d0e
SHA1 4635680e70135456832a6dce0f7826fa7c050f19
SHA512 8c5916c93f6b542add0ccec49ce79c3ee0e197a7418c1c2e04436cc08adbd0d6dfb13891929796e2bec0b88ff183958184dfe5d633562e22b82baf395303108e
SSDEEP 192:YOv5zbo/b+fyjmxQ1d66JozGzgCl6mc0dz:jbo/b+fyjnd66JozGzgC1jd
TLSH
T12CD11C28E728563BC408023BCCA61F400F76795B988E3F1972AC741D2D572DE7A9D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\events\events
Size 1KB
SHA256 3e61fc1b4fc40b77f935c3a1e709d1b2f95a208999de234f211eeb944f314da2
MD5 6f05b8e4ded89a98bb54a0cf87e7e97b
SHA1 73d921f524cdbeca8e9e67b575821f23118733b3
SHA512 70cc93bccfd9f9a79b5fe49e6794408f19edeed7e8cf0ae8bf0d15551a94f45c8dbd2b247b4174a32e0f568e71c5b76c8f80bcfd432a0d534cba4040e097a8e8
TLSH
T10221485C79F84DBA6987E69C784522CE93518E0708871D870D12FE8DCE81ED9316E43D
MD5 SHA1 SHA512 TLSH

Submit Download

0ac0f0d4-e7ca-402d-87a7-32c0f8421e01

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\0ac0f0d4-e7ca-402d-87a7-32c0f8421e01
Size 235B
SHA256 6b07ac9747fcc9f301d27e91d74352ced297db747d3e39c5a4725563ef75f3e4
MD5 7d0d6d454c6f89d62f2e53b531cfadbd
SHA1 2f2223917713611256c4372d42615157d389e3aa
SHA512 66eb996ffdf256f5997ecb899f5d1cf7a4c8e84a142ba95755abf6c943cdaa50054205712deb0b621b1e06ce8e470aed2815debe2267c406a0f3b28bed05ff41
TLSH
T17CD09790249823AC08240F17B0E039C272884C3354B9BC10D6600538D9FCDC94112C0B
MD5 SHA1 SHA512 TLSH

Submit Download

277de9aa-c424-4ec8-9b49-05c2d4c06191

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\277de9aa-c424-4ec8-9b49-05c2d4c06191
Size 883B
SHA256 446fcec48b8baf7881bb225a8501577e6fcb6e695a31c7fd57fb6682059e1406
MD5 73c774d2b68c3b28d8706d123f9245ae
SHA1 04c8213bb447ff2eac6c09eeb44e355bbfd469e6
SHA512 c4a02b4d907a3e69dd441ae922adad3b1e07a4d5b53087a1272007ac931dde453cf4eebe302c1adbfb73d1d04ab360c580c94901940effafbd878605abd24f2a
TLSH
T1C3112390D670B5F3CC6CD24B8A9237028BE4762384C654043DB05D280D7A62F776630B
MD5 SHA1 SHA512 TLSH

Submit Download

3c94bd8f-2a3b-4400-bd99-03606ff76054

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\3c94bd8f-2a3b-4400-bd99-03606ff76054
Size 235B
SHA256 f154579dddbd14068c1186bcf6ecbfcc52fa2896bd58339af9b6291159bdee03
MD5 92cba665ef5ee48dd94f1e9a6df60f24
SHA1 66645d4731bad49b33e01c2bd0dcdfaf43905e4a
SHA512 54d2d57a9e008ebd4682be2e9f8c27357e811f3c1300d8565517084f246d17b4fe693a771e0caa7fe99c248b5cf7a78b7ca13b2f3a0e4fdf230100313ec6172f
TLSH
T1B2D097841CA86B9C88184F0BF0F1AEC230984C33156458A086910534DAB8ECA93A1C1A
MD5 SHA1 SHA512 TLSH

Submit Download

506f0d83-be9f-4dcf-bde0-818e2eda2e90

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\506f0d83-be9f-4dcf-bde0-818e2eda2e90
Size 15KB
SHA256 acc26f562346c5a4c65bfa141eafe40a29ac493f2f8a3e8799d0941aa23a28e4
MD5 836f647e4b21b2501e3e97a638ee71f9
SHA1 8475fa2d41bff6048bc2f3bbd2a6ebb3229789ba
SHA512 cd6afb5bd6bf5ac6a9792dbcac951614f01bfdc0b428b3ab5d82a9e3d517285b7c37a5c83ba917d9a4716107b8f071e82e1b23e607e63f75fe126e7d5ea0a714
SSDEEP 192:7NZzxcKn2CSXRIK/KIP0yJg1EBKjFzNNNkYDUMU8eNA48NyyRVUnBZUXKcjZ4yG8:7NZlcK2CSXRIKBJQFZDDUYeNVwamB
TLSH
T1A172D956643044BA8251E3A898ECBFC3E5F528CB4C415FCADBE4BD086DEE06E512794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceb7665b-abea-4987-b082-90d66b35cf36

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\ceb7665b-abea-4987-b082-90d66b35cf36
Size 2KB
SHA256 f0e7cda03c49124642908b88f2f546c5f2e4ae1bda35bdbd2d090cc8d342244b
MD5 b41e518a4feb1a729d9d5352c6b7e4f6
SHA1 bbd5dc639b492b5a31a91ae72cd6747bfb9cb362
SHA512 5c14f6978200975c23e4833437f8aaedcfe0960abc9c1bb577a6af4aa615dd8e2f5385b4f84431dcadda5d9279af26a69c5d8f0f87ec96ff497f4e6df4b0171d
TLSH
T1A041249C75B46CB78DDAF59DD482234E53A8C71300C628437D61DF0D8C9A769336A53B
MD5 SHA1 SHA512 TLSH

Submit Download

cfb812c4-b976-43d7-832f-0ccee74062ba

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\cfb812c4-b976-43d7-832f-0ccee74062ba
Size 886B
SHA256 53bfc13d569ba8b3e337e0463af0a5172984425178a0b8ae5b4a456c8d606dc7
MD5 31f54cd1974da228de7a64a06e36ac10
SHA1 e7a265f7b1330d79fe29d4f520d5e19e79252ba0
SHA512 6a3bfa7cf94302fbe44d771cd445b37c4691b89ec4055e61244681254a06ea0d3bc578127373af2060a97ed462a56a0b39e754b0c5ed55019c22fc5f496b69f9
TLSH
T1C2110054C7A4B4B28C6CD24F89A17782CBE4722380C61814BE615A284EBA51F67B270B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\extensions.json
Size 16KB
SHA256 b55cd073286eccf2bcf640114996319e7f1c827d0ba619b9908d1ecab4613401
MD5 39e8b5f2aa383ebc0a9dfdc6de8c27f0
SHA1 d29f4bc97aa7fe5818cae699678bd0d5fec42a94
SHA512 85be3c4374250a7064f4d992c96cd96f5896079702bec7a83e909e711b275a619294772cc74020bb31a47ff001b27284e427e79933438415ebb56cbf2ae06ab3
SSDEEP 384:HkI4vYUmldvL8dhW894z/96ozL4HHL4P/L4HdL4HsL4HUp4h0:EI4gRfoXV4J684L474d4G4s4G
TLSH
T16572541545048EB8294FA78AAA367E02C37D573B60845C78F4DD8FC842FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs-1.js
Size 6KB
SHA256 f0b94f0dea2b6fd161ca9cadbe275b9ed2f240888ff855065d7054e70cb8c371
MD5 b2fe24edaede92d65c1b4c8021816872
SHA1 bd01e9913367358bba76d308c00258c9a5f80874
SHA512 31acc376f1a1ed5621f1dc59bd53f833c672501b492a8d2c775b113e1ba9d2b1853d7dfbfd442acc88e2b5d6dc905085faa4d4ddd8ba72825f0df7042cd7cd9c
SSDEEP 96:xHrUTUmqGq6fzeCC1zSWSSlfdv9j5npRHNWyS9JODBw88n8L4cnuFNj:1BR6fz1C3SSp9NWBrODBw88Jr
TLSH
T16CE11F789508CF6F74B676ACAC6888716AB2013BBBBF68D710B554C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs-1.js
Size 10KB
SHA256 15c9b8e29091c87563f581d396b0923509fde02438a9088f6a2ac32984eb35f9
MD5 e093a5b97a61bf31c576925fb331c66f
SHA1 4a19d7cba0568f593962f8e2ffe54bd5751c772e
SHA512 0e705ebb76b22821b04fc83449cb6f95286508c1685a1b2b6a0d2146e90d982d1d0154bc3f1d92dc1eefceadcb7f1fe355e9be01f50de636fd46555938a4d307
SSDEEP 96:xHo1TUmqGq6f8eCCObzSWSSlfdv9j5npRWRshWyS9JOt9wOBw88flFhsh38L4cnP:iIR6f81CESSp8RkWBrOAOBw88hshZO
TLSH
T159220F386144CF7F24B6327D6C2549716AA2033BBABF6CDB00B96491055CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 6KB
SHA256 00ce07102aa87f3c4c5fe1e211b159cdd6eb456ec01376ac8decdb326818a665
MD5 e9da5b2d36160e997caceeb0adde40eb
SHA1 ce19db53ee01f3eb69825469d9d685db87161f03
SHA512 b654c94a7acdcfa99e2807d001a45a6e82ad10c3758c4c356c30f7022d971dbffd1c102f664a337fa4ff454e48ecd59e59f134c272d69f4b0a155064eab0aa9e
SSDEEP 96:xHrUTUmqGq6fzeCCObzSWSSlfdv9j5npRHNWyS9JODBw88n8L4cnuFNj:1BR6fz1CESSp9NWBrODBw88Jr
TLSH
T123E11F789508CF7F74B676ACAC6448716AB2013BBABF68D710B594C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 7KB
SHA256 d2add5a86cc258b14613782ddf3d3357416b4d0b5959b18a81aa525e326ebde2
MD5 d1a34aedd6cbc62b95676cf24a9ba331
SHA1 226332e2c3ecd17c398cc919c6d1cf57674c9c4a
SHA512 14a813ab725e96137870ca66e2d6df278273aebf92f7ec52e6785c348a84b816b39d978062b01924d9cb77b79a566818f62b51364c02c8c9df89e3943bcc5f3b
SSDEEP 96:xHr1TUmqGq6fzeCCObzSWSSlfdv9j5npRHNWyS9JODBw88C8L4cnuFGj:1IR6fz1CESSp9NWBrODBw88MO
TLSH
T194F12E789504CF7F74B676ACAC2449316AB2023BBABF6CC610B954C4011CF3442FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 6KB
SHA256 3b213f3bf62544764a56b5b8d2e2bc5dcfd6a5f5ea7ff3fd87754eeaad216387
MD5 461b7cdc7f80792963c86f77a6f7afbc
SHA1 ede1e83315b5fa675dd825f9c4d5749d901ed7c4
SHA512 96811e707f42330328b70430297a79c9b9215ac15eca7063f39c37cded8600ce675ccc68343f6f8455a790e48a124820edd05bd346643c16921114df015245b9
SSDEEP 96:xHrUTUmqGq6fzUL1zSaSSlfdv9jEpnpRHNWyS9JODBw88n8L4cnuFNj:1BR6fzULPSSU9NWBrODBw88Jr
TLSH
T1C5E120789508CB7F74B676ACAC6488716AB2013BBBBF68D750B594C4050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 7KB
SHA256 dd8aca70520caba1d66fb3c46242af1e6ceafed233b9264f4c9fca79807cab78
MD5 213b92c12ea23fc6682ec517a89bad6b
SHA1 f1308b364f80ea0c36194fdff30ed879c09015c0
SHA512 f9b914829d5024d2db886ae98450a2857efe092fda4cfa35854faaac83469a0ce4f6cf7ab8c7777ec97e626f172211bbad7248c484447a2da5f83eeaad68267f
SSDEEP 96:xHr1TUmqGq6f8eCCObzSWSSlfdv9j5npRWRshWyS9JOTBw88UM8L4cnuFGj:1IR6f81CESSp8RkWBrOTBw88RO
TLSH
T199F120789104CF7F74B676ACAC2449316AB2023BBABF6CCB10B55494015CF3446FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 271420e61fe293a7c3cb26f94214593db6153d7007630d54bef076119d18d6b5
MD5 6f2622525c183a9d18d7b130063b1cfd
SHA1 d498a8e2f7a447f41430e1263d490de204d511b9
SHA512 8c972dd8120be7aa1a56d43bc1c22125a03ad4a7abf7d031c36c6cba28b7a8f6f1150f619a39bbbd9438e1d655fe959b297c34e7c5c2d09b3c360569a5f780ed
TLSH
T19921A352842B2DF63DB2912894881FA1C79978264876CCF086DD9E1351DD54EB28A224
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.6MB
SHA256 e3058aa1f6e32d53774df7c1ab0d1cbd476fa7e5d330892d5aa94ab27cf793f3
MD5 583fc3a1799b8bb407ee3496c154ad49
SHA1 cc5db75b14d309448f5ab8613a774f1522a1081a
SHA512 aab26562b71b74a9ed1a5da58288533f4e794e54fce91448efe6b855cb818007f8b0d2f0f9c2d10d57065213f6f309e9f2d4fd0309739d3df867db63dff270be
SSDEEP 49152:BgC2Dc2XYaYDEtnewXZaW3sSl0sPkEwmElAi:KxZewXYW3NljPemEOi
TLSH
T1232639E820D1A257F3814073A64553EB21FFD00C6037DE484BD956E9A4B8CEF9E16B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download