Overview

overview

7

Static

static

3

nokia c1 0....0.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    865s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    05/09/2026, 13:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    nokia c1 01 unlocker v1.0.exe
  • Size 875.5MB
  • Sample260905-q75epadm3s
  • SHA256 d3b50dd18f79868a2966780a7b53ec50db4e4dfe84d2046fa81a8b8e20d4f8d1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoverypersistencespyware

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 1 IoCs
  • Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
    spyware
  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 3 IoCs
  • Suspicious use of SetThreadContext 24 IoCs
  • Drops file in Program Files directory 15 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 30 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 7 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 53 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 30 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
    • Suspicious use of SetThreadContext
    • Drops file in Program Files directory
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3136
    • C:\Users\Admin\AppData\Local\Temp\nokia c1 01 unlocker v1.0.exe
      "C:\Users\Admin\AppData\Local\Temp\nokia c1 01 unlocker v1.0.exe"
      2⤵
      • Drops file in Program Files directory
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2540
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
      2⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1056
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x370,0x7ffe1f85c188,0x7ffe1f85c194,0x7ffe1f85c1a0
        3⤵
          PID:4520
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,355866050928735568,5777263289290381350,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:11
          3⤵
          • System Time Discovery
          PID:5280
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1496,i,13795779855751272853,8994297255103747858,262144 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
          3⤵
            PID:5724
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,10976102424372937737,12209321569563937733,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:13
            3⤵
              PID:5736
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,5285612081543254495,3568056627964803925,2097152 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
              3⤵
                PID:5096
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,7505850341311823799,10074050684021831114,2097152 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                3⤵
                  PID:3604
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,15811054436310374369,8052180443509606200,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
                  3⤵
                    PID:4620
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,11436981706393249403,18186398371118729877,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
                    3⤵
                      PID:5572
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,14836859842382580555,3639100068649924246,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
                      3⤵
                      • Suspicious use of WriteProcessMemory
                      PID:4884
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                        cookie_exporter.exe --cookie-json=1128
                        4⤵
                          PID:1776
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,11682913161568982021,9366303707516669289,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
                        3⤵
                          PID:5172
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,11682913161568982021,9366303707516669289,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
                          3⤵
                            PID:4788
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,1141246451825098234,2133554359161999093,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
                            3⤵
                            • Suspicious use of WriteProcessMemory
                            PID:5544
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                              cookie_exporter.exe --cookie-json=592
                              4⤵
                                PID:5968
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,12351465580692204094,7503901180363068145,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:14
                              3⤵
                                PID:3200
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,13125299141071811767,1848841796252600847,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
                                3⤵
                                  PID:3816
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,317757752592826217,7271463870546052337,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:14
                                  3⤵
                                    PID:5812
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,6076359041154228827,16227042702680876189,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
                                    3⤵
                                      PID:4776
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,726115583565274947,15078739447531387085,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
                                      3⤵
                                        PID:484
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,6943260988265111948,7630242525961727640,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
                                        3⤵
                                          PID:3024
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,5738977985568855309,16468130615842068993,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
                                          3⤵
                                            PID:2952
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,6827127125917685668,18441641635584292983,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
                                            3⤵
                                              PID:5976
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,7252786686852747373,2461741110471211947,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
                                              3⤵
                                                PID:6592
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,13510214690953055875,12566821989199790768,262144 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:10
                                                3⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:6888
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,2028898018032728846,15055854553485152880,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
                                                3⤵
                                                  PID:7024
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,2260107791378051632,535473105268417082,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
                                                  3⤵
                                                    PID:7004
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,8969343354229496636,4588641570505244404,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:14
                                                    3⤵
                                                      PID:6460
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,16461300667941341337,3942240002985256435,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
                                                      3⤵
                                                        PID:6492
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,17356679954209144630,9248068163366814245,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
                                                        3⤵
                                                          PID:920
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,8486235746978177278,5019767717111703269,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
                                                          3⤵
                                                            PID:4708
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,15931706393836075056,11531885359255999037,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:14
                                                            3⤵
                                                              PID:4732
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6980,i,9763387868275958547,15227252941726146547,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
                                                              3⤵
                                                                PID:5968
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,8215965147951869220,3533847858354133996,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
                                                                3⤵
                                                                  PID:2904
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,7599836856082715496,1024130701416285502,524288 --field-trial-handle=2116,i,8013286642025058983,8856814276505303397,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
                                                                  3⤵
                                                                    PID:6148
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                  2⤵
                                                                  • Enumerates system info in registry
                                                                  • Modifies data under HKEY_USERS
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:668
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ffe1fcbc728,0x7ffe1fcbc734,0x7ffe1fcbc740
                                                                    3⤵
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    PID:5588
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,5843343367047522586,14401899226250425970,262144 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1920 /prefetch:2
                                                                    3⤵
                                                                      PID:4504
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2144,i,6089700084444603535,11248999375700428867,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2204 /prefetch:11
                                                                      3⤵
                                                                      • System Time Discovery
                                                                      PID:6124
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2284,i,846242387320096772,571040466813578774,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2452 /prefetch:13
                                                                      3⤵
                                                                        PID:5088
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3100,i,8737360135083690462,1959701061726126696,2097152 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3152 /prefetch:1
                                                                        3⤵
                                                                          PID:1480
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3104,i,14889816418960842272,16048887076601908824,2097152 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3172 /prefetch:1
                                                                          3⤵
                                                                            PID:4904
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4204,i,15963542762489397634,11052132990632866587,2097152 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4208 /prefetch:9
                                                                            3⤵
                                                                              PID:1392
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4636,i,10320393471367138569,14370193234146747361,2097152 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4624 /prefetch:1
                                                                              3⤵
                                                                                PID:400
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,4616388896234455006,7920782812106134730,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:14
                                                                                3⤵
                                                                                  PID:3792
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,16526625490532211964,9688970087663860909,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:14
                                                                                  3⤵
                                                                                    PID:1868
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,6732512471289867821,6627951481215947548,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:14
                                                                                    3⤵
                                                                                      PID:3236
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,836694688049339682,2888625823244113179,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:14
                                                                                      3⤵
                                                                                        PID:5492
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5156,i,15788308282234981347,16333168745653419557,262144 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4220 /prefetch:10
                                                                                        3⤵
                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                        PID:6928
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,1002569232900609395,9289946763807343851,524288 --field-trial-handle=1924,i,15784339220951775340,7846608074763859805,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5280 /prefetch:14
                                                                                        3⤵
                                                                                          PID:3940
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                        2⤵
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:4032
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                          3⤵
                                                                                          • Drops desktop.ini file(s)
                                                                                          • Checks processor information in registry
                                                                                          • Modifies registry class
                                                                                          • NTFS ADS
                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                          • Suspicious use of WriteProcessMemory
                                                                                          PID:2884
                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1992 -prefsLen 27097 -prefMapHandle 1996 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {2d887a9a-9f02-4b7f-801b-3cf416db8bb8} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                                                                            4⤵
                                                                                              PID:1320
                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {3c960380-5636-4ff3-a040-36ff754bac2d} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                                                                              4⤵
                                                                                                PID:3216
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3892 -prefsLen 27274 -prefMapHandle 3896 -prefMapSize 270279 -jsInitHandle 3900 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3908 -initialChannelId {9f7caef1-21e7-47fb-8b17-f5d945d375d5} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                                                                                4⤵
                                                                                                • Checks processor information in registry
                                                                                                PID:4384
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4072 -prefsLen 27274 -prefMapHandle 4076 -prefMapSize 270279 -ipcHandle 4092 -initialChannelId {5ce01f1c-2361-4b49-b85d-8ef966b8c7d4} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                                                                                4⤵
                                                                                                  PID:1768
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2864 -prefsLen 34773 -prefMapHandle 2984 -prefMapSize 270279 -jsInitHandle 1536 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2840 -initialChannelId {bb0ea011-676d-4dd0-bdfa-88b9bc4a389f} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:4832
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4868 -prefsLen 34822 -prefMapHandle 4864 -prefMapSize 270279 -ipcHandle 4880 -initialChannelId {a97a4064-d4d2-45c4-953e-97c5e865b92b} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6824
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5424 -prefsLen 32952 -prefMapHandle 5428 -prefMapSize 270279 -jsInitHandle 5432 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4876 -initialChannelId {00785f5e-0758-44bd-b548-c98850e32164} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:4288
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5592 -prefsLen 32952 -prefMapHandle 5596 -prefMapSize 270279 -jsInitHandle 5600 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2868 -initialChannelId {f4525f97-eac1-46df-a0f2-2aae63dba7db} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:3968
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5756 -prefsLen 32952 -prefMapHandle 5760 -prefMapSize 270279 -jsInitHandle 5764 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5412 -initialChannelId {23f75d00-418e-418a-94ac-ce9ff65d3226} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6036
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6468 -prefsLen 33071 -prefMapHandle 5764 -prefMapSize 270279 -jsInitHandle 6456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6452 -initialChannelId {afb61693-8e69-4fbb-9299-f427a2052d1f} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6424
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6724 -prefsLen 34179 -prefMapHandle 4708 -prefMapSize 270279 -jsInitHandle 4748 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1672 -initialChannelId {e9a31c42-446a-468c-949d-5d8ea1d6d9b7} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6668
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6940 -prefsLen 36758 -prefMapHandle 6996 -prefMapSize 270279 -jsInitHandle 7000 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4836 -initialChannelId {7147f164-4ad9-439d-9170-ddd58c31065f} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:7072
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5772 -prefsLen 36758 -prefMapHandle 5584 -prefMapSize 270279 -jsInitHandle 5740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5848 -initialChannelId {45afac99-d543-4236-9909-4a6fcbed9da5} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:1488
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7600 -prefsLen 36798 -prefMapHandle 7632 -prefMapSize 270279 -jsInitHandle 7544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7796 -initialChannelId {f4265567-c305-4aec-a487-eca2960cbfd9} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6872
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7632 -prefsLen 36798 -prefMapHandle 7544 -prefMapSize 270279 -jsInitHandle 7768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7844 -initialChannelId {30d1a518-44e6-4bd3-b45f-399abdaa02be} -parentPid 2884 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2884" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                                                                                                  4⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:5016
                                                                                            • C:\Program Files\7-Zip\7zG.exe
                                                                                              "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\" -spe -an -ai#7zMap17880:110:7zEvent2112
                                                                                              2⤵
                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                              PID:6452
                                                                                            • C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe
                                                                                              "C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe"
                                                                                              2⤵
                                                                                              • Executes dropped EXE
                                                                                              • Drops file in Program Files directory
                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                              PID:6968
                                                                                            • C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe
                                                                                              "C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe"
                                                                                              2⤵
                                                                                              • Executes dropped EXE
                                                                                              • Drops file in Program Files directory
                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                              PID:6156
                                                                                            • C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe
                                                                                              "C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.0\nokia_c1_01_unlocker_v1.0.exe"
                                                                                              2⤵
                                                                                              • Executes dropped EXE
                                                                                              • Drops file in Program Files directory
                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                              PID:2788
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                            1⤵
                                                                                              PID:4116
                                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                              1⤵
                                                                                                PID:5912
                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                1⤵
                                                                                                  PID:5196
                                                                                                • C:\Windows\System32\rundll32.exe
                                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                  1⤵
                                                                                                    PID:5232
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                    1⤵
                                                                                                      PID:5704

                                                                                                    Network

                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                          Replay Monitor

                                                                                                          Loading Replay Monitor...

                                                                                                          Downloads

                                                                                                          metadata
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\metadata
                                                                                                          • Size 114B
                                                                                                          • SHA256 abdb29404339f6a862e7a125ba6097dbeeda77eccec6ec64a0a3dd4f8a9a8010
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          10608ac5-f301-4ded-9aa2-d98da1d27bd4.dmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\10608ac5-f301-4ded-9aa2-d98da1d27bd4.dmp
                                                                                                          • Size 104KB
                                                                                                          • SHA256 ad00515f8f29b123e3790f7bee008ea56052bb7aaf83706ddb3d164e919db193
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                          • Size 40B
                                                                                                          • SHA256 0569bc417c2bbfe2b60b6425511f91b324e5ec70f02de579bb3a3681769632e8
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          BookmarkMergedSurfaceOrdering
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                          • Size 6B
                                                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          BrowsingTopicsState
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                          • Size 414B
                                                                                                          • SHA256 806ce5e0a024d18987973582ce26c9929afccee5d57c677531ae19ae77e95efd
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 2KB
                                                                                                          • SHA256 9dbb7629c0044183d71a1dd866165eb276053059ec1037222c16f704441efa13
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 2KB
                                                                                                          • SHA256 7e71b0e1539e9f1dd455bc0dcb53328ee391dc50e307c33e812ed7baca720ac9
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 2KB
                                                                                                          • SHA256 b8026fa5a5a79421e76e6f9d8fe56c28ab0fd83bc3551afccb0ffa92a9d8697f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 2KB
                                                                                                          • SHA256 b9b5c329ef076f757fbb69507cd79bc27e6e9f01c373b62f64d3c1bf084a78d6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 2KB
                                                                                                          • SHA256 deba7043be14ade42b2da9212c012e5305367d0b9e6beabb464ee463b3587416
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          TransportSecurity
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                          • Size 523B
                                                                                                          • SHA256 a8d43b0cdbe296271fda54f78d7b30910dc772c4a95ca064a009f68d3daf2725
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          da43a908-0f50-4beb-8216-dc923bb0728b.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\da43a908-0f50-4beb-8216-dc923bb0728b.tmp
                                                                                                          • Size 2KB
                                                                                                          • SHA256 2a58a6369a709e6a027749d9ec12c95aa3582115cc18541110b71164a47b747b
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                          • Size 12KB
                                                                                                          • SHA256 5c512b8f67ab49ce0d8d51730087e0a2379d06647c458bb0f28b2364fd06afe3
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                          • Size 13KB
                                                                                                          • SHA256 e73670b6f8fd23241e9cdc561cb04246432ecedeae871d40f13245693e9cd46b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                          • Size 13KB
                                                                                                          • SHA256 a319ff00dd496c2cf9600ebbf232e877654a3e58b487d15637d98b28419829a0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                          • Size 12KB
                                                                                                          • SHA256 038686f24690445453cabd74835fec3b7af827b1ef9ff7a9a0be56d92efdd050
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                          • Size 12KB
                                                                                                          • SHA256 6439bf168e92bbf0d0fac6cb7c65bed5cd4ccd7ad7a2d8984a4b93d04c463166
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Secure Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                          • Size 16KB
                                                                                                          • SHA256 9bd10dfe1eecc6255ff455747e3f7e7a3a200ede6d6207ab2ca34d8c4e8512b0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                          • Size 120B
                                                                                                          • SHA256 c1a2890fb96739460def18d6b70af816dc58f1e6a12d86a4bf43f5db77374689
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index~RFe5971db.TMP
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5971db.TMP
                                                                                                          • Size 96B
                                                                                                          • SHA256 3691d593519c306b9e059b06412737b2612ddd160cf205e2e04d3a9b1ee8e6bf
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Last Browser
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Browser
                                                                                                          • Size 106B
                                                                                                          • SHA256 3615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 241KB
                                                                                                          • SHA256 b80b20c69ebce1721df248991ced68287f1309104bc05b605531b7bc3776d3f6
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 240KB
                                                                                                          • SHA256 e06a9c56978e6d2624ac3cd1e697ad2a85a34a2b68c56cac9c963091df4f35fe
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 241KB
                                                                                                          • SHA256 4b6cd9f372f712f608ded7883eb03b73ba94de90cfa4ebfe788c433573c5b849
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 116KB
                                                                                                          • SHA256 5519ad27f861bc537b65236db684f3287481c2772d35c6d73df5941b9906b99a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 115KB
                                                                                                          • SHA256 eaeab20c5847414c79c48d40e472f3fc529fe7aedd7a27c46ac43400a650b41c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                          • Size 242KB
                                                                                                          • SHA256 59acc1de5250433cb73b7dbd0e9090ed28549eb2f8f895f5ba1c0508fd3374d4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                                                                          • Size 135B
                                                                                                          • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          protocols.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                          • Size 3KB
                                                                                                          • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 b24846f4bb01e57dd47994ee8ca33e14a6a356938971c33205ed76a4fe3c7b61
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 90371bf7f2d9f3b60c0aa66ed89740cd725604cc541112971bd392e8746018f0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LOG.old
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                          • Size 331B
                                                                                                          • SHA256 082de17b35997a64c0573b2a3c767669f2d739ca90f0750a5d0026c5e5504bc4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LOG.old
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                          • Size 334B
                                                                                                          • SHA256 8b560b9797f1ff852a1f6e3726e131df809e6bd40928f0195774e666f123a074
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LOG.old
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                          • Size 331B
                                                                                                          • SHA256 534c86f02e6651574054c0c0e59332c17c2c9281aa569ee365654d3dbf442470
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          BrowsingTopicsState
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                                                          • Size 414B
                                                                                                          • SHA256 ccc6200160381849efc79eb2a80ff1ae2b043cc1d2aead9ce989285d48ba50cd
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                          • Size 4KB
                                                                                                          • SHA256 f885024e187a468a665c939dcb8d50bc5288de6d2e18ab69398566a423128cea
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index~RFe5991b7.TMP
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5991b7.TMP
                                                                                                          • Size 2KB
                                                                                                          • SHA256 80bcc5f73397297bcb02b52d4ca8940de62b6c3dfbf6bead0d4b0e438bbe2ca5
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          SiteList-Enterprise.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                          • Size 2B
                                                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 3KB
                                                                                                          • SHA256 a68b27df45222e9a1c4ea37ecd1b382b6ad47ed59284f6a439a11ab229a04eb6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Network Persistent State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                          • Size 3KB
                                                                                                          • SHA256 244f65029cae218f46f57db1c9951bb636bbf27990f45ab0a4540c4919289f2f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          SCT Auditing Pending Reports
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                          • Size 2B
                                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          Sdch Dictionaries
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                          • Size 40B
                                                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          TransportSecurity
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                                                          • Size 519B
                                                                                                          • SHA256 f386c497bf7657b28a64792a769131843d093c08b7f22d8e3f591281bc920c4c
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                          • Size 17KB
                                                                                                          • SHA256 46bb5e41306c3eeeaaa946823fef445af6a13739b443ce77b34be1ab81984127
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                          • Size 18KB
                                                                                                          • SHA256 921fe3e8e463d00ad7c7308b484af2686fc010664f3938545b745a3e1212c1a0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                          • Size 15KB
                                                                                                          • SHA256 f40fe09c072eceab3e0362a9f55db93ae61a1f73ba2b2807ace3e7e404ecabfe
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                          • Size 17KB
                                                                                                          • SHA256 123f81a98decc007d4f5b1924275ae186de9a155a260e705b452f7c226735966
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                          • Size 14KB
                                                                                                          • SHA256 defe62db22e6a1360c75d2c54a3d3f4bf0d85882188d29f70d55b48f8616c210
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Secure Preferences
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                          • Size 36KB
                                                                                                          • SHA256 eaa746be908afb17591ce1d6a7726a6ec3792547b305038ed6a9cdd92cfc44bc
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c2350ed-43be-4160-9475-f2d7cc98fd47\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 6d1c2a91aa115fc05337b547e085edeb1abf1455157e3e9d1f10542f0175a001
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index~RFe595ac8.TMP
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c2350ed-43be-4160-9475-f2d7cc98fd47\index-dir\the-real-index~RFe595ac8.TMP
                                                                                                          • Size 72B
                                                                                                          • SHA256 05917f1f1f380ee2346efaa1c609aa88423235a631430604715de5024a97c5be
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2261811e-db42-4052-9775-ba1c4bcc9e08\index-dir\the-real-index
                                                                                                          • Size 3KB
                                                                                                          • SHA256 0a9c33635f40ac488f03246aea9d0f84a32597abc4f7ae1ded758f6b9dcb9a05
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8c8d9706-d147-4773-84f7-c6f620552bef\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 231277ab449ac40af52f33f69bc7034df3bf794a0f0913cd09db2b5e38fc5747
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index~RFe5969bc.TMP
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8c8d9706-d147-4773-84f7-c6f620552bef\index-dir\the-real-index~RFe5969bc.TMP
                                                                                                          • Size 72B
                                                                                                          • SHA256 c3ae9e523a7e64f5d4d123c22c02d9a0070e6e2e6cdc070517334ac7ea8a568c
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cadbb240-f90d-48ad-bacd-c802ed4ebc33\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 11b1b88cf3a6eb5c6cc5d48d262227be0c623a6d433f35496ba8575c8dfc52f4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index~RFe596826.TMP
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cadbb240-f90d-48ad-bacd-c802ed4ebc33\index-dir\the-real-index~RFe596826.TMP
                                                                                                          • Size 72B
                                                                                                          • SHA256 07ca6cb13c35e2b1668f1ed3dfed139ca05c996f728fe28c95f812b29f2f035b
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          index.txt.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                          • Size 476B
                                                                                                          • SHA256 3e998c984c8c0925a745268ce82c070b10b275195e86d944957600c296fdfb88
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 1e425f85a797fec33c4176bdcf6c707576d7bb08c08294446523fc5527cdd3af
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          sync_diagnostic.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                          • Size 23KB
                                                                                                          • SHA256 38aa4a365e2618a8322396b066cdaa895864deb490af918c59aab218c10b21a2
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          domain_actions.dll
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
                                                                                                          • Size 82KB
                                                                                                          • SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.txt
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.23\data.txt
                                                                                                          • Size 151KB
                                                                                                          • SHA256 b6747e65ee34358447bd4fd700a40cd688d301b1b86ad961a62d1faec83bbde0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          office_endpoints_list.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                          • Size 9KB
                                                                                                          • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Last Browser
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
                                                                                                          • Size 120B
                                                                                                          • SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 27KB
                                                                                                          • SHA256 36f83e0f1c4405c1a997fb5a5295f005e8a88d36c75b58af1262bf259503a039
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 27KB
                                                                                                          • SHA256 b687f818e43fcf2e38ebf0d5eaefa4b47254cdb138e9f8d38396fdf76a3ee7fd
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 25KB
                                                                                                          • SHA256 9e07b1a54de0f1b9a9ea2def901ab03f33fa4e4b19c29ac6ae3a760396804325
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 27KB
                                                                                                          • SHA256 ee3ed10d42fbf8e0b7005575fd9a2cff08209cb8cd91cb7ff68e2d906df8e99b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 27KB
                                                                                                          • SHA256 317248bb22c1ba76e4424f1e8634d572a718383ceb5c94602475aaef91374f2a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 24KB
                                                                                                          • SHA256 f7da3225e1d7aa33119ee8a705bcc6238393526532b4fb957aeaf30a62ea0e83
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Local State
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                          • Size 25KB
                                                                                                          • SHA256 ca53de122093a1adfce097a2868ef499a38d87efe116c12c5779c000df92e0d0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Advertising
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Advertising
                                                                                                          • Size 19KB
                                                                                                          • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Analytics
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Analytics
                                                                                                          • Size 3KB
                                                                                                          • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          CompatExceptions
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
                                                                                                          • Size 689B
                                                                                                          • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Content
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Content
                                                                                                          • Size 4KB
                                                                                                          • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Cryptomining
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
                                                                                                          • Size 552B
                                                                                                          • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Entities
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Entities
                                                                                                          • Size 68KB
                                                                                                          • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Fingerprinting
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
                                                                                                          • Size 1KB
                                                                                                          • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LICENSE
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\LICENSE
                                                                                                          • Size 34KB
                                                                                                          • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Social
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Social
                                                                                                          • Size 754B
                                                                                                          • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Staging
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Staging
                                                                                                          • Size 36B
                                                                                                          • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          TransparentAdvertisers
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
                                                                                                          • Size 105B
                                                                                                          • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Advertising
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Advertising
                                                                                                          • Size 21KB
                                                                                                          • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Analytics
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Analytics
                                                                                                          • Size 3KB
                                                                                                          • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Content
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Content
                                                                                                          • Size 5KB
                                                                                                          • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Cryptomining
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
                                                                                                          • Size 32B
                                                                                                          • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          Entities
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Entities
                                                                                                          • Size 128KB
                                                                                                          • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          Fingerprinting
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
                                                                                                          • Size 2KB
                                                                                                          • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LICENSE
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
                                                                                                          • Size 66B
                                                                                                          • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Social
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Social
                                                                                                          • Size 3KB
                                                                                                          • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Staging
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Staging
                                                                                                          • Size 1KB
                                                                                                          • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          keys.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                          • Size 8KB
                                                                                                          • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          typosquatting_list.pb
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.9.5.1\typosquatting_list.pb
                                                                                                          • Size 1.1MB
                                                                                                          • SHA256 1c2e2abdf9d8868af94fd4be5322610c44cb08aafae83d080a3198ba44b81db0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 465b085b984f3f3e8a8622b7e59aeae0f4af93a81c06a6200b4cac9e527294b3
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 331df1aaee211d2bf352191a7b07816ff8cf50b26355e453bca135a0bcf4c8ee
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 46386edf89c84883c32311beee9e65cbca0d45050d3a86dc63ce98090974defa
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 f7eec3815a7e60024403df69d4f6927040805841a0a2eeb1b24171b0ef2ec295
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 40bdfab9ebf4d69725de00955872c90fe06189344f6d691e18d2e37b6e9307b0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 4709ef9c1f99348c706de8bf917f3df1357ec972c829b335864d116dcd2eac8f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 69027dad9a7ca2814558cf7ff5c0b019507999e0a0d2e275dafc396064fea835
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 3f47401170e5b54e280c033aec0b09924ced2b36bf60380237b2b32c852469ab
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 312d58b2cce20efcac2193055c843ac92fa022a8af075dbcd8819ca7ce62ae3a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                          • Size 2KB
                                                                                                          • SHA256 e4ac9c17cc326497c1ce557f5a78c69e2d02fe4554252883c215ba132e40850d
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                                                          • Size 154KB
                                                                                                          • SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          metadata.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                          • Size 132B
                                                                                                          • SHA256 a0b1a35a86cbd2e671521525fc6903162d450e3b301948d913d05ef458794c20
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          activity-stream.discovery_stream.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\activity-stream.discovery_stream.json
                                                                                                          • Size 75KB
                                                                                                          • SHA256 5e617f55ac507608e3dfe319eaa572052e22cea50663826f3b7351f9ca79a6cf
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                                                                                                          • Size 16KB
                                                                                                          • SHA256 9c55aed479a8293af81f7b0950105048333c7484b3d20d25106479038b091761
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_arts_and_entertainment.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_autos_and_vehicles.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                                                                                                          • Size 44KB
                                                                                                          • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_beauty_and_fitness.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_blogging_resources_and_services.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_books_and_literature.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_business_and_industrial.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                                                                                                          • Size 45KB
                                                                                                          • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_computers_and_electronics.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                                                                                                          • Size 45KB
                                                                                                          • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_finance.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_finance.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_food_and_drink.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_games.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_games.json
                                                                                                          • Size 44KB
                                                                                                          • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_health.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_health.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_hobbies_and_leisure.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_home_and_garden.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_internet_and_telecom.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_jobs_and_education.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                                                                                                          • Size 33KB
                                                                                                          • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_law_and_government.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                                                                                                          • Size 68KB
                                                                                                          • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_online_communities.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_people_and_society.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                                                                                                          • Size 45KB
                                                                                                          • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_pets_and_animals.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                                                                                                          • Size 44KB
                                                                                                          • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_real_estate.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_reference.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_reference.json
                                                                                                          • Size 56KB
                                                                                                          • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_science.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_science.json
                                                                                                          • Size 56KB
                                                                                                          • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_shopping.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_shopping.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_sports.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_sports.json
                                                                                                          • Size 56KB
                                                                                                          • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          nb_model_build_attachment_travel.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_travel.json
                                                                                                          • Size 67KB
                                                                                                          • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          recipe_attachment.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\recipe_attachment.json
                                                                                                          • Size 1KB
                                                                                                          • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          remote-settings-startup-bundle-
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                                                                                                          • Size 576KB
                                                                                                          • SHA256 59ec4af1f59cfb3da27519c1e2ba477c120bf573044e884baee25f9d37b7322b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          tmpaddon
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                          • Size 11KB
                                                                                                          • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          tmpaddon
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                          • Size 502KB
                                                                                                          • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                          • Size 7KB
                                                                                                          • SHA256 e7b2b6d7f95ca70897048435ca6526eba335449d8fdf2efb08187750bb630d66
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          GBUJ45PPX87C5RBPODD4.temp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\GBUJ45PPX87C5RBPODD4.temp
                                                                                                          • Size 20KB
                                                                                                          • SHA256 265294beda3ec59434363340105ebee4138ee5c38ea143f783abc9b3f6aa4d22
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          AlternateServices.bin
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                                                                                                          • Size 10KB
                                                                                                          • SHA256 23096120d16830664f1ca5668fb473152eaa400c66f4bf027233277704d60bd4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          AlternateServices.bin
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                                                                                                          • Size 16KB
                                                                                                          • SHA256 2caa66c612725fb0722c68d324e95113eed6bc88196da75e80fb069102d4f95b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          AlternateServices.bin
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                                                                                                          • Size 22KB
                                                                                                          • SHA256 0a16cf898108d0348edacb640974b59235355e25694513f47c04917467153bae
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          AlternateServices.bin
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                                                                                                          • Size 23KB
                                                                                                          • SHA256 4a8b4679f6c48612dc2b33c338b6349a47a65b9693816b67fdfe2393763a5d5e
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          addonStartup.json.lz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\addonStartup.json.lz4
                                                                                                          • Size 4KB
                                                                                                          • SHA256 b57e803f998201777a25bb9e35bb4e0cda185a9956b4a1f145b01274ed8fe8d2
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          bookmarks-2026-09-05_10_YImQPl3V1nWHWBvoCoefRRfRO0nOwB8ZwB_2y7CplJI=.jsonlz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\bookmarkbackups\bookmarks-2026-09-05_10_YImQPl3V1nWHWBvoCoefRRfRO0nOwB8ZwB_2y7CplJI=.jsonlz4
                                                                                                          • Size 860B
                                                                                                          • SHA256 a98a98ee12a1f1e2ae6c0e0b5c4658d7bad90321eacaf66a639fd186044a0152
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          cookies.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cookies.sqlite
                                                                                                          • Size 512KB
                                                                                                          • SHA256 56735cd1013739a062cef719b6374ed26636924938e99134ddc52bf458e5d33c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.safe.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                          • Size 7KB
                                                                                                          • SHA256 c810b82021447b89db9015c05251e5fba3d401c601fc74ce3e076c30d3e87cc5
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.safe.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                          • Size 7KB
                                                                                                          • SHA256 dbd1d668055b0b03b4e0053a571ef733766f6ab6edd2f8b975ff222091e82dce
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.safe.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                          • Size 112KB
                                                                                                          • SHA256 212fc1392fb595dd24ca15b21ba54239d8fedda6c3d480b843e3465b9ec84746
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.safe.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                          • Size 119KB
                                                                                                          • SHA256 d837eb3a6b8e2afc6779917762d0f605f1fa2541e4de78b061c3127125e63358
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          events
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\events
                                                                                                          • Size 1KB
                                                                                                          • SHA256 636dfa36c91de11d790878239a2aa98ba2f980b6c2bc29cd776064042ae4bc49
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          events
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\events
                                                                                                          • Size 4KB
                                                                                                          • SHA256 cd11d84c33788b8e2a89ea6dd1456abf821182b34c9ce9fcef62f67977ddcf3f
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          1d4298d7-cbaa-47a9-b6e8-96ecfec2435e
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\1d4298d7-cbaa-47a9-b6e8-96ecfec2435e
                                                                                                          • Size 235B
                                                                                                          • SHA256 ed5e5d4c869b7cca2750076e18bf3ecf8cc448a1957ee8fafbc3f2c0bb3334fe
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          260ee169-7cd8-4a14-8cde-00745bce2550
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\260ee169-7cd8-4a14-8cde-00745bce2550
                                                                                                          • Size 2KB
                                                                                                          • SHA256 73219412c81fd5520bbe6b91aaa0bdb39a521bba3d712afbdf8ed7d9ce4a86c8
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          6b50a94b-f5e8-43d6-8a63-ed990a81d6ad
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\6b50a94b-f5e8-43d6-8a63-ed990a81d6ad
                                                                                                          • Size 886B
                                                                                                          • SHA256 103176972e5edf7cde827233e59eaaea4bdaf7a81d6168a34c8a1a1ad5475451
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          769eaf48-3844-4787-9e9f-aec63b0dd2a1
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\769eaf48-3844-4787-9e9f-aec63b0dd2a1
                                                                                                          • Size 2KB
                                                                                                          • SHA256 469df02ab94899773eca0ce7eccc8d41cb85b7d233f88a5529b76221eb9f4fa6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          8c25bc76-6e6e-40d5-978b-05ce79c77442
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\8c25bc76-6e6e-40d5-978b-05ce79c77442
                                                                                                          • Size 235B
                                                                                                          • SHA256 b715de895b0787f556a0083292f5de050f8fefa2ae20ad37abe973ba35e43db6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          b1c3a1c5-df8d-4bd7-b45c-67d37f539c1c
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\b1c3a1c5-df8d-4bd7-b45c-67d37f539c1c
                                                                                                          • Size 883B
                                                                                                          • SHA256 ef107d7f3e963b2ef6889c03d84b9bed530029ad08bb307e6e2d97869c175d7d
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          extension-preferences.json
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\extension-preferences.json
                                                                                                          • Size 942B
                                                                                                          • SHA256 00dc2290dbbdce30a85e06ded26d7ee786412fa45c1348a801bfe2c13b9c63d0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          extensions.json
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\extensions.json
                                                                                                          • Size 16KB
                                                                                                          • SHA256 3d5a79c6e72e7094ec0e58cac6853913cbe778d5538fff03b024a63a5cc3ac0c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          formhistory.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\formhistory.sqlite
                                                                                                          • Size 256KB
                                                                                                          • SHA256 183f1b17fc4d68efa8d7ecae5acc9e3c9b847245b38b587604b7b2e1287d1b98
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          gmpopenh264.dll
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                                                          • Size 1.1MB
                                                                                                          • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          gmpopenh264.info
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                                                          • Size 116B
                                                                                                          • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                                                          • Size 1002B
                                                                                                          • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          widevinecdm.dll
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                                                          • Size 21.6MB
                                                                                                          • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs-1.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                                                                                                          • Size 7KB
                                                                                                          • SHA256 e27cd1c63c5211e964fab8b529cc84c3099e46c05477aff83171a541e7d2ac81
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs-1.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                                                                                                          • Size 8KB
                                                                                                          • SHA256 bcfbaca79fc6ff4e755379d67df1b159c4901ac4fa69b3d1ac3ebaacba3819d2
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs-1.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                                                                                                          • Size 12KB
                                                                                                          • SHA256 7ba99754163f3b5291c8605b896fa5540384a244b59c5f733071da359cf93ecb
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs-1.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                                                                                                          • Size 12KB
                                                                                                          • SHA256 adcde9cd36391cf99e98d784c34d29f589a3a82f3f61bddabb680ab0420c1b53
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                                                                                                          • Size 6KB
                                                                                                          • SHA256 3cb8ad237d75b97cdda2d94ede56a750f5246a2228d5dd4e8de9678b0e9a3d72
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                                                                                                          • Size 7KB
                                                                                                          • SHA256 d7d1253dbbf0cd6bbc43d97dc97eb6538b7540a960258a4ac6a158bb42dd2571
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                                                                                                          • Size 7KB
                                                                                                          • SHA256 a3a5a6b5340e62226430368b3f2b9c1ac280f800e138498a08348f5e21f7a136
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                                                                                                          • Size 6KB
                                                                                                          • SHA256 dcbf4d28a0b847a5c5c44141ba05175d56724d494e1bb17982887e17a2c24aaa
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          prefs.js
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                                                                                                          • Size 12KB
                                                                                                          • SHA256 a23ef6860cd3951e788e136c1449d937e4c285def37680bf9c55446511ec48cb
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 1KB
                                                                                                          • SHA256 420db632e3b188161fe3f416abb3035ec262f4bd70688c4a0fb9bfba76c4405d
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 2KB
                                                                                                          • SHA256 9e4ff0cbb2910c6cab907bba6d27f499b5399613242735e554029ca9dbfabc5a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 3KB
                                                                                                          • SHA256 a21cbbe4068948c01ba818632bfcc10d9336b8ec48bdc902fade5652a9df918a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 6KB
                                                                                                          • SHA256 572dd1262d35b681792109d6a0d550c00a57fd2aee3f6c8b9385e5d648cb1e12
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 6KB
                                                                                                          • SHA256 b07aad3c50b515e4782aaffa0b2ec2c20eb66956c7454e35e591f71bd31feef1
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          recovery.baklz4
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                                                                                                          • Size 6KB
                                                                                                          • SHA256 83d952dde689c5756123c3c93b9c7cfad4fb12752b3f864081880ce443e819ec
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\default\https+++www.google.com\ls\data.sqlite
                                                                                                          • Size 8KB
                                                                                                          • SHA256 7d91f120bdcb35e043bab08454ed0c957c85a9a0cf4c69e1091f0e5c8be2265d
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          usage
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\default\https+++www.google.com\ls\usage
                                                                                                          • Size 12B
                                                                                                          • SHA256 a7c59e4342ccd342aec5874b982970acec92e28fb7c567ab221670de422327fb
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          3870112724rsegmnoittet-es.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                          • Size 4.2MB
                                                                                                          • SHA256 58473051b671be84f1e326383ef2454a65199535eb5f16ee16557f836408a157
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          3870112724rsegmnoittet-es.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                          • Size 4.2MB
                                                                                                          • SHA256 a6d7c8e91f1dbeb65f0a783023a3b4dedaa4259ea1cf259e724403b1ba6aab32
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          3870112724rsegmnoittet-es.sqlite
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                          • Size 6.7MB
                                                                                                          • SHA256 e7cd65c7673232c5b6b5a546a7a9258a18b8cc875858bb7e1d660e0b88af672a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          xulstore.json
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\xulstore.json
                                                                                                          • Size 167B
                                                                                                          • SHA256 a261f6c4c1f49fbaac01d6d7437da1149f9b03588d54b2fd860fdfe969596115
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          nokia_c1_01_unlocker_v1.xaNuufWJ.0.7z.part
                                                                                                          • Path C:\Users\Admin\Downloads\nokia_c1_01_unlocker_v1.xaNuufWJ.0.7z.part
                                                                                                          • Size 16.7MB
                                                                                                          • SHA256 32764bfe569fdde8a5e23dc305eec841b0043d3f18bb1e440f378a869d320a7d
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1143339898\manifest.json
                                                                                                          • Size 78B
                                                                                                          • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          edge_checkout_page_validator.js
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1456039755\edge_checkout_page_validator.js
                                                                                                          • Size 1021KB
                                                                                                          • SHA256 4bd84a271e6aeee39cc614bb6fa9e60ad465f61b6a305f9f69b995f9af910219
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1456039755\manifest.json
                                                                                                          • Size 146B
                                                                                                          • SHA256 7e765ccd9f7f89bc111ef17d12194e83940dace4320e67bd582211969f117da1
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1463952388\manifest.json
                                                                                                          • Size 165B
                                                                                                          • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_175635909\manifest.json
                                                                                                          • Size 165B
                                                                                                          • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          LICENSE
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1851639882\LICENSE
                                                                                                          • Size 473B
                                                                                                          • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_1851639882\manifest.json
                                                                                                          • Size 1002B
                                                                                                          • SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_185304889\manifest.json
                                                                                                          • Size 177B
                                                                                                          • SHA256 45365e90d3acff2e5fb10c9b757b61c676642330dc7017716633d829d8ef60d3
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Other
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_2134963630\Sigma\Other
                                                                                                          • Size 34B
                                                                                                          • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_2134963630\manifest.json
                                                                                                          • Size 132B
                                                                                                          • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_637675727\manifest.json
                                                                                                          • Size 53B
                                                                                                          • SHA256 f0260f934a0fac5b1f84be39d82e7a99aaee526b80614abd04bb6973b53b24e8
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1056_794476431\manifest.json
                                                                                                          • Size 117B
                                                                                                          • SHA256 987471de6dbb76e97fcb8f0f05008306dc7084d992e235a6db22b808e85e4bba
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          memory/3136-2567-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2649-0x0000000010550000-0x00000000105B9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-8-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-21-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2579-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2573-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2577-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2550-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2551-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-12-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-16-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2647-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2552-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2553-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2554-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2555-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2556-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2558-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2559-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2560-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2565-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2651-0x0000000010550000-0x00000000105B9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2572-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-14-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2570-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2548-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2547-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2578-0x0000000011370000-0x00000000113D9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-11-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-10-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-1-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2652-0x0000000010550000-0x00000000105B9000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-9-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-5-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2662-0x00000000105C0000-0x0000000010629000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-22-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2663-0x00000000105C0000-0x0000000010629000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-26-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-27-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-24-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-23-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-28-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-39-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2665-0x00000000105C0000-0x0000000010629000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-503-0x000000000E910000-0x000000000E911000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-13-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-2-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-19-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-17-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-7-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-6-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-4-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-0-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/3136-3-0x00000000032A0000-0x0000000003309000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4788-1107-0x000001A3CE2E0000-0x000001A3CF2E0000-memory.dmp
                                                                                                          Download