hxxps://cyberpunk2077[.]lol/game?ioShared=1&ioSharedMB=128&ioInflight=4&ioPersist=1&ioPersistMB=6144&binkRecycle=1&psoWarm=0&skipIntro=1&ioLookahead=16&behindLoad=0&floodKeep=1

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 23:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cyberpunk2077.lol/game?ioShared=1&ioSharedMB=128&ioInflight=4&ioPersist=1&ioPersistMB=6144&binkRecycle=1&psoWarm=0&skipIntro=1&ioLookahead=16&behindLoad=0&floodKeep=1
Sample261026-31hcssxt5k

Score

3^/10

discovery persistence

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2484	msedge.exe
6820	chrome.exe

Checks processor information in registry 2 TTPs 36 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{7B6440E3-1747-4D98-871B-249CCD19EE4C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
6584	chrome.exe
6584	chrome.exe
1156	msedge.exe
1156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3444	firefox.exe
Token: SeDebugPrivilege	3444	firefox.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeShutdownPrivilege	6584	chrome.exe
Token: SeCreatePagefilePrivilege	6584	chrome.exe
Token: SeDebugPrivilege	3444	firefox.exe
Token: SeDebugPrivilege	3444	firefox.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe
6584	chrome.exe

Suspicious use of SetWindowsHookEx 13 IoCs

pid	Process
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe
3444	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 1288	4460	msedge.exe	83
PID 4460 wrote to memory of 2484	4460	msedge.exe	84
PID 4460 wrote to memory of 3480	4460	msedge.exe	85
PID 4460 wrote to memory of 3480	4460	msedge.exe	85
PID 4460 wrote to memory of 3480	4460	msedge.exe	85
PID 4460 wrote to memory of 1856	4460	msedge.exe	86
PID 4460 wrote to memory of 1856	4460	msedge.exe	86
PID 4460 wrote to memory of 3312	4460	msedge.exe	88
PID 4460 wrote to memory of 3312	4460	msedge.exe	88
PID 4460 wrote to memory of 3312	4460	msedge.exe	88
PID 4460 wrote to memory of 3216	4460	msedge.exe	89
PID 4460 wrote to memory of 3216	4460	msedge.exe	89
PID 4460 wrote to memory of 3216	4460	msedge.exe	89
PID 4460 wrote to memory of 1920	4460	msedge.exe	90
PID 4460 wrote to memory of 1920	4460	msedge.exe	90
PID 4460 wrote to memory of 1920	4460	msedge.exe	90
PID 4460 wrote to memory of 3356	4460	msedge.exe	91
PID 4460 wrote to memory of 3356	4460	msedge.exe	91
PID 4460 wrote to memory of 3356	4460	msedge.exe	91
PID 4460 wrote to memory of 2924	4460	msedge.exe	94
PID 4460 wrote to memory of 2924	4460	msedge.exe	94
PID 4460 wrote to memory of 2924	4460	msedge.exe	94
PID 4460 wrote to memory of 3972	4460	msedge.exe	96
PID 4460 wrote to memory of 1768	4460	msedge.exe	97
PID 4460 wrote to memory of 3972	4460	msedge.exe	96
PID 4460 wrote to memory of 1768	4460	msedge.exe	97
PID 4784 wrote to memory of 3444	4784	firefox.exe	100
PID 4784 wrote to memory of 3444	4784	firefox.exe	100
PID 3444 wrote to memory of 3344	3444	firefox.exe	101
PID 3444 wrote to memory of 3344	3444	firefox.exe	101
PID 3444 wrote to memory of 3344	3444	firefox.exe	101
PID 3444 wrote to memory of 4352	3444	firefox.exe	102
PID 3444 wrote to memory of 4352	3444	firefox.exe	102
PID 3444 wrote to memory of 4352	3444	firefox.exe	102
PID 3444 wrote to memory of 4352	3444	firefox.exe	102
PID 3444 wrote to memory of 2188	3444	firefox.exe	103
PID 3444 wrote to memory of 2188	3444	firefox.exe	103
PID 3444 wrote to memory of 2188	3444	firefox.exe	103
PID 3444 wrote to memory of 2188	3444	firefox.exe	103
PID 3444 wrote to memory of 4160	3444	firefox.exe	104
PID 3444 wrote to memory of 4160	3444	firefox.exe	104
PID 3444 wrote to memory of 4160	3444	firefox.exe	104
PID 3444 wrote to memory of 1312	3444	firefox.exe	105
PID 3444 wrote to memory of 1312	3444	firefox.exe	105
PID 3444 wrote to memory of 1312	3444	firefox.exe	105
PID 3444 wrote to memory of 1312	3444	firefox.exe	105
PID 3444 wrote to memory of 5884	3444	firefox.exe	106
PID 3444 wrote to memory of 5884	3444	firefox.exe	106
PID 3444 wrote to memory of 5884	3444	firefox.exe	106
PID 3444 wrote to memory of 5884	3444	firefox.exe	106
PID 4460 wrote to memory of 1800	4460	msedge.exe	109
PID 4460 wrote to memory of 5304	4460	msedge.exe	111
PID 4460 wrote to memory of 5316	4460	msedge.exe	125
PID 4460 wrote to memory of 5320	4460	msedge.exe	113
PID 3444 wrote to memory of 2040	3444	firefox.exe	115
PID 3444 wrote to memory of 2040	3444	firefox.exe	115
PID 3444 wrote to memory of 2040	3444	firefox.exe	115
PID 3444 wrote to memory of 2040	3444	firefox.exe	115
PID 3444 wrote to memory of 4172	3444	firefox.exe	116
PID 3444 wrote to memory of 4172	3444	firefox.exe	116
PID 3444 wrote to memory of 4172	3444	firefox.exe	116
PID 3444 wrote to memory of 4172	3444	firefox.exe	116
PID 3444 wrote to memory of 4796	3444	firefox.exe	117
PID 3444 wrote to memory of 4796	3444	firefox.exe	117

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cyberpunk2077.lol/game?ioShared=1&ioSharedMB=128&ioInflight=4&ioPersist=1&ioPersistMB=6144&binkRecycle=1&psoWarm=0&skipIntro=1&ioLookahead=16&behindLoad=0&floodKeep=1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa21d7c188,0x7ffa21d7c194,0x7ffa21d7c1a0
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,6827883810873693221,5458928028838731436,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,14505081820953345825,9544583666166594801,262144 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,16319914987882883267,8898865763021352291,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13176873027646114969,18129883852634724488,2097152 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,4688385150731779493,8882207397260769180,2097152 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,6547779557178005946,700967455076999596,2097152 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,7984068903322533763,7909436157890226335,2097152 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,8722890600603921491,235530743674383561,2097152 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,17945797605581775289,9995847554723858642,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,18094793875256804767,13539613112223872457,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,4142439493866739208,16761877490426672290,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,4142439493866739208,16761877490426672290,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,3333680377078880770,17061641144385506813,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,15330692025719917070,11589458143850210717,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,10086933077316087390,207018937164332523,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,5660272338151002639,13881618007579034792,524288 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5572,i,14657386015418029821,1898760594503662446,262144 --field-trial-handle=2180,i,7436582819323162211,1090188121165772639,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4372

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4784
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2044 -prefsLen 27099 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 2104 -initialChannelId {b17d0a84-28bd-4fb3-a3ab-1ebd784775b4} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {8d79668a-0d42-4ab9-90c4-ff17cc3b1073} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4352
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3812 -prefsLen 27325 -prefMapHandle 3816 -prefMapSize 270279 -jsInitHandle 3820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3828 -initialChannelId {e7fe0608-746f-448a-8caf-51d68d59992b} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27325 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4120 -initialChannelId {4c9addf6-24f4-4b44-9f8d-53e221e86945} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3160 -prefsLen 34824 -prefMapHandle 3164 -prefMapSize 270279 -jsInitHandle 2716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4416 -initialChannelId {807327da-1d6c-448b-889d-1630012a4a74} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4888 -prefsLen 35012 -prefMapHandle 4892 -prefMapSize 270279 -ipcHandle 4324 -initialChannelId {e7718149-30b3-4e12-b46d-f399cdfd9007} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5124 -prefsLen 33031 -prefMapHandle 2948 -prefMapSize 270279 -jsInitHandle 2956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4836 -initialChannelId {2c99dd6d-00c0-4212-a887-cf5f9aa70c51} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5352 -prefsLen 33031 -prefMapHandle 4924 -prefMapSize 270279 -jsInitHandle 2996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5680 -initialChannelId {e36b071a-7af2-4852-86fd-d43d83e62ff4} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5764 -prefsLen 33031 -prefMapHandle 5768 -prefMapSize 270279 -jsInitHandle 5772 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5780 -initialChannelId {f0c4c2c6-22e5-4588-88ac-cf710b8e0e3a} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6412 -prefsLen 33367 -prefMapHandle 6416 -prefMapSize 270279 -jsInitHandle 6420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6380 -initialChannelId {9adfb628-cc5b-4658-aaea-c4eb1e3ae37e} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3248 -prefsLen 36712 -prefMapHandle 2736 -prefMapSize 270279 -jsInitHandle 6248 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6940 -initialChannelId {00c95ff8-c562-406e-b8c0-dd39f2053232} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:5316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5716 -prefsLen 36885 -prefMapHandle 5548 -prefMapSize 270279 -jsInitHandle 5724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5732 -initialChannelId {2933ebb9-3f54-40d5-8799-d4da43b7f186} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:5512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5836 -prefsLen 36885 -prefMapHandle 5840 -prefMapSize 270279 -jsInitHandle 5824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7164 -initialChannelId {5f480e24-e984-4fdf-ae8f-1826b0c1bcb8} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5300
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7132 -prefsLen 40024 -prefMapHandle 7124 -prefMapSize 270279 -ipcHandle 6164 -initialChannelId {d0203053-b897-45c4-b3c9-62da7fba5ddb} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 utility
    3⤵
    - Checks processor information in registry
    PID:4912
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6164 -prefsLen 36885 -prefMapHandle 7036 -prefMapSize 270279 -jsInitHandle 6976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4556 -initialChannelId {a66e39b9-d57c-40aa-9eec-1b259d2088b0} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:3624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6268 -prefsLen 36885 -prefMapHandle 6828 -prefMapSize 270279 -jsInitHandle 6852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6640 -initialChannelId {f234e76b-ee7d-434d-8e6f-fd8711679c64} -parentPid 3444 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3444" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:6356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa120ec728,0x7ffa120ec734,0x7ffa120ec740
  2⤵
  PID:6608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2132,i,13792987764531128834,6244797913993196491,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,16219167875189525710,5070950713329025426,262144 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:6832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2464,i,13358987622043564438,8716579434209071684,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:6908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,18229327429190854798,18121214304560349672,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3456,i,432311080449082568,12978231210313437038,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,3575800579548243955,2609048390752977452,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:7136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,16953943253243571180,8268073857931365614,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:6204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,659210272900961849,13848505705272206444,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:6328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5784,i,3355881826317619952,6669577186743334450,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:6804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4876,i,10233993113724750233,10967577477494772765,2097152 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6100,i,3621763592993533159,16493102675734940661,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:7152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,13486856704780671752,8817915437174601055,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  PID:6156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6084,i,10116804734875216739,5191726210849951918,524288 --field-trial-handle=2056,i,16598065648531557502,8423062411972970459,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:1188

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:7040

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

399aae44-8f7d-4b31-a9e3-9ff4755b67f9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\399aae44-8f7d-4b31-a9e3-9ff4755b67f9.tmp
Size 269KB
SHA256 7a71e28577cd2dfdb7d732637445016580222b68151bc4be51aa94cc62618fc2
MD5 2bbbf138781c5c5220bbcafbf4f9b6d9
SHA1 d7cc8dc3cb357281907cf78aa43101a3b4189882
SHA512 d31863442b6337da2d8a7402e05d7a138f6843c9326ebb23955ce5cc326a82f0d20e9e3c30824422f922e3ebfcb3090c285e440dc9d764d4633b01228c1b5130
SSDEEP 6144:kHhYbFusKYrxbyvK3uWEPc+hFD+7t56OD9ZfSAppr3:kbsKcbyvyIcyFSXD9ZfS4d
TLSH
T1714423267250BC77C7FA9701E0077B06CE7A99D841CA40654249AECBA09F95E0BF3D73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

886d8c10-567e-481c-b2b0-a36a62f1bd74.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\886d8c10-567e-481c-b2b0-a36a62f1bd74.tmp
Size 130KB
SHA256 369fdb5bb05185228a05fcd57e1d563012bdad066fc3e0e5add64b18fdb5c313
MD5 5e78a76c5c854a9a59c1ebcfaa419b12
SHA1 8403bbf2a007f19d076f04fbc7796b904558bc2a
SHA512 68204ffb81467a3e1edb7bba73133e4afbd6a139794250ddde5536a6b0d9e5cf8330d5db744d34d618693d6c001ab784d0e5d3d9972ac6d2a1f990b7a809dee8
SSDEEP 3072:K+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:K+hFD+7t56OD9ZfSApprU
TLSH
T15DD31232AA91D8BBC9FD6541B187A300DD666CED41EE2B09444A5F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d219987-a411-4131-95b5-c206b26ab0d7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2d219987-a411-4131-95b5-c206b26ab0d7.tmp
Size 12KB
SHA256 116a4cccddbf61274f1683915de71bc21af30430f3aa878a2df73cfbd7dfc12c
MD5 cb1ec256890945ba43b781fe0051fc52
SHA1 359658f7dedb2ed8468c45e379c454ad6e3f2393
SHA512 a1755ac05319552dc40b9529b4b4936e29cf907a917c0b29fb54b8aaefde6eb794928911d6c90e4963b53723313e7ca38a2b542b93e9ebe164f02d7e0c82d0da
SSDEEP 192:CR8wzvCez23Mv7TpAPRp2zv9WHsb+WNnS5TNLI2lkpBeUkwfiGVyIsnAUgtaJ:CR8wA3YvUXMUw4Tq2apBeUb8
TLSH
T1A042B62EEE14B57B5CDBD22AF9527B57E7F5102220A41E84EAFC893C25D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b744e59-2892-42fd-b825-01d4bafbe093.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5b744e59-2892-42fd-b825-01d4bafbe093.tmp
Size 414B
SHA256 6f62519d35fa6cb1a9bbf9b6b88357244948dd7b5af11ec0d86116fea3584dd8
MD5 b4e6fbfab9bc3790154109cd6454d49c
SHA1 427de5b0b0b2d0af02d591a4821e59c49acb8b1e
SHA512 30c85783c8ab443fcc173a34774a22ee3d33512db3f96cff599fe03128e5395012db6af7c3c3aa4f12f2d2e54659dfcc053827d594f44d01c9d8203d5a82218e
TLSH
T149E02BA6C925EC2719FD571954449685EB5413173B90848F3B3CC10C8FB163A4A87C1C
MD5 SHA1 SHA512 TLSH

Submit Download

8887fbac-e6e5-48da-8018-1d4c15101437.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8887fbac-e6e5-48da-8018-1d4c15101437.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 48KB
SHA256 e7bc60367ff88a70d72ba78c3c4faaab9c1e5e753cdb7f893fc318e5b5b4eb4d
MD5 c88c8ac368696017fd336313f8524304
SHA1 248814b72ed95172676d49b5f5a5435083288509
SHA512 443c05e27f5e51124d2fedece6566356347b4109a4ea8ddb94193bcabd966530480ab64d74733eabd92dcc53df355464764b8295d45c1ad2d2a1645fec02cbc5
SSDEEP 1536:rIR8RyUrKx7nsNw5C0jZTM8d/jP8PzuwRr:UmzGTsixr90ruwRr
TLSH
T10823F154A437326D481D5092AE31E40579A0D4C7033AD13F2DBDD70ECA68FBA630EEAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 30KB
SHA256 83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be
MD5 b636a65da4f00129f08c7df6e5dd75ac
SHA1 4f27206c4b1caf8b7805597fcbc6922ff5805daa
SHA512 77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859
SSDEEP 768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x
TLSH
T152E2F274EA41CA57676335ED4203E99D015FA318EBF6FD40869CCAD2A506BCB7C4033A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 775KB
SHA256 8d20db546968a17bc2c68c764763078547b46cbec16e568edd3572550d722c7b
MD5 cbb462d2f64b1bc9dabb5fcf81583655
SHA1 5639bff00486d41376d52510f69602585effe96e
SHA512 6d62d41e2d90241d1b2ed9cc67c8b65795fdc8d5b2c0cc950aee073373e669957256837cc482367012f3f8b31e15b0bb0a899104c7c89c47574b876b56ca1e02
SSDEEP 24576:nen20XG47Fk49vVCsy5hyIbKjbeqv60Esn2mVWR:nen2Bc59CsqhyFjblv6fs2mVM
TLSH
T1E2F433818EA920B2E2F5B139E3914ECFDB784E313D0293258D586C59DB1660BF44D9F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 192B
SHA256 8a572810d1fd98277154614419985f0e84d775f07dc8eff7184b0fcb0b06f81b
MD5 88d43f483567eb9ffc9300561c46d311
SHA1 e160becc672d6c5d8d426965b538d63b8b99a95d
SHA512 18c6423d6acceddc3de51eced965f62255fad12f91e8e85768c0e816eee3bd76bbffabb82290dcceda27cf80293201ee8f3580259c0791a80fba673ad92f249e
TLSH
T138C04C4106666511DBD93BB2A5D58942327119509213EF51F394EEF7C8253A7C602A4E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 9fa817d8f081d62a5b8e7a4995af5cb6eb7d4c6203fb55a4e97385982772110a
MD5 d9ef8e4cebdb4fd73b08711c3ba89b71
SHA1 0a45aee5d0ea0d774b4713292eb2b379e5ca6fd6
SHA512 b801c3d3884bfcd90eb87606a2db1cb3bdce627ce1220cb48fa880d23e3e395023d9a638bccd5b3af831f08f7160ffe93a314c7cdbcdc1c38aed5bfa8bbb15ec
TLSH
T137B0124480426B01C09703F41550188C7168EF10AB05130391F00E62E836161801B0D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 0714f5b40e5ba9db1d1e942af2ccd737452bf8d63e548eeb0a81bde2e4e253b0
MD5 c5edcc924a30f89a2dbbb0d7f8767f98
SHA1 4976d6a2967ea5c5bdad4cdd141425e63ea9dee1
SHA512 cd813186ca867054d357ea3200eee8cf5ad46d87fca1dec70a1fc5620612998351497013a9b2ed3b950d5353090dcaf0a7f5edb81b4f6d3e14fefafd924ede20
TLSH
T198B00256C143A213C04347B025A595D9B160EF2DC643171AA6F01A76FC256728625964
MD5 SHA1 SHA512 TLSH

Submit Download

fa234b77-3e80-4b55-aa43-cac1b779b2c0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fa234b77-3e80-4b55-aa43-cac1b779b2c0.tmp
Size 17KB
SHA256 523761bc1813672aed3255e4becb28be826b1abc952b1618d2bcfadebfe5e21c
MD5 472d61bcf21443a047dac261aad552e8
SHA1 608e068876727f4f676b88d75ee81c5361cbab00
SHA512 c732c8cc57effcc49d70faf34528b26e9138b9a4c90bc7197c1b7efc3bd7d6aa9914d2b1dd802f59451918a42148b21a62cf31325f4ca0e95e28d8b96bbf35b5
SSDEEP 384:TNj/O7KxkXqKf/pUZNCgVLH2Hfgsl5S7pLuLceSZkXOD/q+ErU3v7HGISxpQ8:TN/O7KxkXqKf/pUZNCgVLH2HfgsvS7pC
TLSH
T11472F867BC489A3B0F94C6CCD8167B4FEDB9024B65E9886446FB983503D4ADF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3519d43f-76ca-47ff-bd30-c199a35b67dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3519d43f-76ca-47ff-bd30-c199a35b67dc.tmp
Size 18KB
SHA256 c3745d4dfbae0682fd6f89aafc9a8b8174363167a07de5c69a502b106d43040d
MD5 997e539310d2de28ae717987ccaccf7f
SHA1 bf9f54e7b5bb4862cd93c5eeb01287a44fdc0638
SHA512 f375bab18ad8b10a6f7be651cb8a48f83bb4ee5571f54254ec679d2a5cb435546ecb62993b702f0b86c3b8853f85272e182a999007a268278539bd5e0181b1f1
SSDEEP 384:8QkUSvusNqBeD1R7Sp5u8i2ppYouPvaTZc4VuIIlm:8uA/Qk2b2PvaTZctLw
TLSH
T102828C3668696C3B6DE7E560F14A3643DFB0806BCBC85FC4D5DD9B2C02DA2D8230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4250b1e8-898f-4d23-886b-003a70bbf090.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4250b1e8-898f-4d23-886b-003a70bbf090.tmp
Size 8KB
SHA256 7c16557521f58cb6f9114fcba1e88dabe034997d06f5f91d8701079eac754078
MD5 8c48cb9478e83804b3f796abb3733327
SHA1 3b3cf5b6a4c6187ec4c1dc857ac4f86c6509be30
SHA512 4939dde6e706582ca0bd6fed9583fe9428f29d3b49b92dedbe826b135bd39e3f2e5a7450091af62c4c611b476dd260cc35cbc37d7f0af5f21eb6c8ae3fea6d65
SSDEEP 192:kONr6iDIQmiUykDOq5u88P/uhgKpPwojsuZHqkU6:kONr65TOq5u8i2ppYovPU6
TLSH
T16C121C3578686C3B6DD3A865F48736139EB4412BDB886F84D9EC2A1C06EF6DC5307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b042565-5499-4a13-a292-29906947b5a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4b042565-5499-4a13-a292-29906947b5a9.tmp
Size 12KB
SHA256 1792f3bf0d4dde0427b5932e73f8d85e12bfda23652a89581ea6433cda9c4487
MD5 6eba9a1c45c404706088290c1a30ab30
SHA1 0a3d54ca9855d2aa546806341d6be849b2cf8388
SHA512 4379f0d219f2701292b85dfa7a28a5f219f7af1fcd961ca105106f5d1d0f9e194650b7ce691f89678ddb9b40310a3e2ec5e5fb13926d61d318637258d803fc80
SSDEEP 192:q7sNqOQzDxDPCoQmiU1x194p5u88P/uhgKpPwojMlAHqkzOwKu:GsNqOeD1RRSp5u8i2ppYonPzN
TLSH
T1B5423A356869AC366CE7A555F84732439FB8806BD7886F84D9EC6B1C02EB2DC5307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58ed2405-fb2f-4b0f-b7ad-12dba4bb714c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58ed2405-fb2f-4b0f-b7ad-12dba4bb714c.tmp
Size 12KB
SHA256 2f42bb40d79e5def2c68554dc416b196d64b0070b7dd45a7d7a3c005ef702aae
MD5 f8aa2955b270ba2f3bbf26d916d6b128
SHA1 95b3beb11feb6a0f7ecad905af31dece3f670eac
SHA512 37459ec981f6860e577e14294d057baf70f578e7d9242770d9bb408fc39655c4673dda795be9fb1c31b1acd5233d5593235b9df7c57aab50706db1513eb9b947
SSDEEP 192:uJ7sNqNQzDxDPCoQmiU1x194p5u88P/uhgKpPwojMlAHqkzOwKu:8sNqNeD1RRSp5u8i2ppYonPzN
TLSH
T1EA4239356869AC36ACE7A555F84732439EB4806BC7886F84D9EC6B1C02EB2DC5307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e387f06-1858-488d-815e-b7bdd246f4ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e387f06-1858-488d-815e-b7bdd246f4ff.tmp
Size 12KB
SHA256 83d9d27253c2a03f2affcd0aeae52c04f3f8928b8f9947896d20a936888c5171
MD5 6c363b5747cc949bc1050b9c92434e2f
SHA1 12e5581ec63b3c058402cf7fd12b91fca2464df8
SHA512 3c41236f827d545679901f52729e033b56ffbb3408e2148774e8155e8fc5c42b2daa1a32d1f8ab6cd29d96b441708d2392ec48ad6ed1e3bb8945c3a7ef2051ac
SSDEEP 192:qLsNqOQzDxDPCoQmiU1r19Zp5u88P/uhgKpPwojbuAHqkzOwKu:IsNqOeD1RXjp5u8i2ppYobPzN
TLSH
T11D422A356868AC37ACE7A555F88736139EB8806BD7886F84D9DC6B1C02EB2DC5307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

1fec6b04-bee1-4118-a1ba-6781dcb3d3e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1fec6b04-bee1-4118-a1ba-6781dcb3d3e5.tmp
Size 27KB
SHA256 b0d73b8f8b84e65d4ae452f5243a19ac56534c155b217b0a1ef04c816dc32a0d
MD5 214ab8e07c02f3677f3b6e42fbf98d0c
SHA1 fad120defafb66eba14a2555f08373ab26127760
SHA512 c58c5db330ba67f0c888c744e2d404f7dbd07f5f6dd3d7b1705fd735880097df5511f7005b43100bf827c3b3b7b3e008521aaab772ed8e9f4d20a4fb8df149c7
SSDEEP 768:4RyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3DrolEZmRX:4RyQRbrWvvlpZu1jaXKLf33wmZyX
TLSH
T1D6C2FA2F640CCB7E5FC01E9DDC666F976EA802C766688D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

631b7d8b-d254-4cd4-b0bf-9cb866c76e74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\631b7d8b-d254-4cd4-b0bf-9cb866c76e74.tmp
Size 10KB
SHA256 d557e27c8f3561d6ad3fd9a5c917799360f92e30f22468929a64ef3b10107972
MD5 e4ef7e88a1cf842f8fffb86e257c8ff1
SHA1 3ba30944533a65d2fe93e575c6f801a1101c1331
SHA512 1f95b642eea4020f3d8b9d27730d09004f7c0c9c76addce4cd0fff1a64c81e06d879eb0daccd7177c1503c99586a6fc563d21de3c1ed88407392d7fc5b3b08bd
SSDEEP 192:sxZPRuWc/fnsR79IdpnJHW6+WNyNxH/YagVKHIg5SJ:sxZPPc/fnsR7+JHbyn/zI
TLSH
T17222DA567E2CA93B5CCBD20DBA15BF53E6F9503291941E48AAFC8A1C05E77DE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91efa019-1846-4c77-bc8a-becc90cb70af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\91efa019-1846-4c77-bc8a-becc90cb70af.tmp
Size 10KB
SHA256 c27cb25c5b9b31e636f9f6edc4993d33f5546def1f3c95134296f1c22b3da273
MD5 4526513c9dd7879e7cadcedecd02ea84
SHA1 02cb81dcd1c2b918c7ac30c617b5b321225fb9cc
SHA512 24e0e6225954eb7eaab007901aa63165fa902e3ad84893c34ac5fcc0aae2f3c383ec9dd5efbc58bf1b2050f13ebbfb912a02a746d3bdbfe1e143f0f054f44a49
SSDEEP 192:sxZPRuWc/fnsR79IdpVJHW6+WNyNxH/YadiKHIg5SJ:sxZPPc/fnsR7+jHbyn/BI
TLSH
T1DB32DA567D2C693B9CCBD20DBA15BF53E6F9503291941E48AAFC8A1C05E7BDE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 685f7ef6c91299b7dc1ffaa7bb21b219f2c1cadacbab8961c6df24c82b06fb17
MD5 6d94ceb3cd98a4cd7d0faa792a6bd9ad
SHA1 8e7517c41383a1d07210b35a880004bbf306be7c
SHA512 56e3d7c573d9bd9057a81608ef3e4fa46d8c4dc5425016cd94a17c92af3ceed8913c459e804b740b6f151977bfa7bd3a42f485f6f3efb277869ea93dde1f8c02
TLSH
T12A613B8CDE818577F744D4B183D131BB3ABB48B958833E31A3ACE8FA9B467823310050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 160d27f51e08df256e004e907ac8127f3541f4ff6eabdb8131bcc511b4cc4ca8
MD5 609b2e4dd04aca88efc6fe808fb6d128
SHA1 2fc951d578a8f8ed6866dfff78e328be91d84573
SHA512 226ec8bf3114a462ccb3caf49fdbba686c3367680e81ce24aece75b014ed80d0d3cc02847bd94868045d9cc9122d3ee19ce6964373214f9bf06cfb3acee90484
TLSH
T1F261728CDE808577F794D4B187D131B77AFB44B958833D32A3ACE4E99B467423350044
MD5 SHA1 SHA512 TLSH

Submit Download

daf045d5-5c48-4d96-95bb-1ddca783bebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\daf045d5-5c48-4d96-95bb-1ddca783bebe.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0b97207e-10ec-46cb-af5f-cc3a86a0453d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0b97207e-10ec-46cb-af5f-cc3a86a0453d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

15f98e49-fedf-407e-91cf-80f51d005ec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\15f98e49-fedf-407e-91cf-80f51d005ec5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

3be82308-24bb-4714-bac8-c0a0897ffec2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3be82308-24bb-4714-bac8-c0a0897ffec2.tmp
Size 1KB
SHA256 53ddc8dc91b146db31fde94ca267194772e95d0648766b1c8c2b83bb1f5f7f93
MD5 ece64b485d1c40ab467ab51aac75cdde
SHA1 029da74f0aefb54971104512eef18290e44468fe
SHA512 7ca910709ebc285216c8c93de1839522e94a28b3e15f4f53d7567520cb1b0130cc4beec4a5cfae3dbfaafc20a9124a37a6f2381e372c21e7693d30c6b093f3ca
TLSH
T113419FB383E5856E8E1166F1AB186E27DE2E0515435C3C5AC5D89F5BD3F2470D102A4F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 655b80094c7d0bc65bd0e7a7045c188a39e2f9d47c5fbc74f9aff1bf0823453b
MD5 c12544f04eadc9fa6b1799f638e35783
SHA1 1ac01ab47fa57da4f58cbb61db2805c798cd39b1
SHA512 6ed109b22cd9b64ee31bcabd90d2278ad51b63bae3c28b6ef8dd3cb3ee7eac7278bad4075e5ccfd18a297a37c1dd548c9d55ec2b5b8049b6424d4c4907dcc83e
TLSH
T16481E11131BB0201787F354D4465965A1242B2B330A5BA2BBBBC41B78E6FE196CFF8D9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ef68833e9d40ba0eed8c3a97c62664267890f5958c7cac0d16d2927d3ce0cb4b
MD5 3603740e347a0b91c70cb65944f94c1f
SHA1 da610c3af103413c53d779a9a249b5bcdfd9148d
SHA512 5b20eaa1058b233dba2de0630708bb66877f68ff0af8b7dcdab1bbd5d9d707f80044a766b48fdfa1b20a45cd1ca50c12e275f4f1a9612ed920525d961feb5cad
SSDEEP 96:Ko5aKiwyMnur351JgV9Iz//gK31/RgbP/4x1nyTnpJpKzhc5d3KKF/ddKpHv0FXt:YRMnur351Js9Ir/z1/REP/4xcLfZ
TLSH
T14BB16500317B0301787E264C4465965A5292B2B33099FA2F7BAC41F78E6FE15ACFF9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab14b247-abad-41bc-9719-004d64c7fb17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab14b247-abad-41bc-9719-004d64c7fb17.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6569b0e-d6d7-493e-bd0d-44597f632f8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6569b0e-d6d7-493e-bd0d-44597f632f8a.tmp
Size 10KB
SHA256 9f1a13cceb301d435f55174780ea4752aaf6caf10bb23d7a58ab21fe34c23a9c
MD5 34b241b222d1f3ecb55bcef2a82f313e
SHA1 0f6821d3ac70c22d297350a318405796bc0979d7
SHA512 18f6ab6808a9fb54f6bcd43d52a4cb442017be4245b7e6a240ca27b0d31a141a002bf5dd614a2270e61842dee163478eae378bfa66b40b8a6fa611d376f8c8ee
SSDEEP 192:sxZPRuWc/fnsR79EdpnJHW6+WNyNxH/YaVKHIg5qJ:sxZPPc/fnsR7WJHbyn/m8
TLSH
T1A922C9566E2C693B5CCBD21DBA257F53E2F9503291941E48ABFC8A1C05E7BDD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d567e01d-4515-4b15-a532-cd2c49dd8a2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d567e01d-4515-4b15-a532-cd2c49dd8a2a.tmp
Size 9KB
SHA256 5517520e3556130bd406127e7cf01297ca19e73d6efe27fc7f0b182f293e251a
MD5 77acbd7320fe3d7f29f2741842ed3c4c
SHA1 2fa4cb23e59a3ea8c726fbba571b1123c5402137
SHA512 026a58d8a0daa81dc9946c791b56ab24b92c3c858e57aeaa5174d33bfdb482a33b7775bd9dd4651496475ee94a423e5747bfde179d80261ef1f5b25f0c80b597
SSDEEP 192:sxZPRuWc/fnsH79EdpnJHW6+WNyNxH/YavKHIgrJ:sxZPPc/fnsH7WJHbyn/U9
TLSH
T11222B8566E2C693B5CCBD21DBA25BF53D2F9503291D41E48EAFC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfe84f8d-0ecc-45e2-896c-77d06c7dcc0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dfe84f8d-0ecc-45e2-896c-77d06c7dcc0a.tmp
Size 10KB
SHA256 f02932134094e0d0d87a47611a7f0c993f0fe9b38b2d16a2949d1ef0b74c217a
MD5 f8f78009f2aaa6c175e7d3293fdb933f
SHA1 73c477aaee2a029cdd3e6ac4ca0b4ee9c8f30f6f
SHA512 351607b3ff58ae6e980e172b696790b3997cad53dfeb7b512a0905c8bdf7a450b417cbad2115594750ce3754bb1bce78bec270e614fcea3016c0a0ba0aaa5193
SSDEEP 192:sxZPRuWc/fnsx79EdpnJHW6+WNyNxH/Ya7KHIg5qJ:sxZPPc/fnsx7WJHbyn/Q8
TLSH
T18822C756AE2C693B5CCBD21DBA25BF53E2F9403291941E48EAFC9A1C05E77DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 3b22cc3fc115aef73979fb848b0f2068c8584fd146fbeb230cd66c6423a9a90e
MD5 73508359e2a8b1896a7d5ae92c16f242
SHA1 388daa5f337645be844df1a32b9efef9d13dfd31
SHA512 d90ba9aa4aacf3fbbfb334ba19ec0aeecceee075ce5ace6fc31a7e1cc10cf4d8315c9b15ca5cfaf8d22c9632d9c0fc51ee1abebff22ac7375f7408ef4b7616a2
TLSH
T139214480A3B95244BE89AA81811DA503A0B37FB7254D5DB5332D82F48F4DC154E2FAB2
MD5 SHA1 SHA512 TLSH

Submit Download

c8fc0b4f-abd0-4208-aac8-d259e974bf5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c8fc0b4f-abd0-4208-aac8-d259e974bf5f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be215e96-25bd-498a-a039-85969f9769ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\be215e96-25bd-498a-a039-85969f9769ed.tmp
Size 8KB
SHA256 2f02daa6ccf37f14727a033c4992a10df358d9b50af98cbfd8d31838acf4aa54
MD5 532f99f971394da440c7d961de7ee332
SHA1 1ba0c3d7fd7f1b1293df4aa63b8711d53abcfae0
SHA512 4325d966a0ff6828df6cfb1f11a1644f845799c82186f6f0fc04552f10978a4a0a0c9f9b3ce6e7ffc3bc87b19a896c771efdb0cd1441933d5147a0719a22b3d6
SSDEEP 192:SONtB6iDCQmiUy5DHq5u88P/uhgVSqPoiU6:SONtB6/UHq5u8i2AHU6
TLSH
T1AD02E9396C687C7BADE3AD15B54777279FA4013FE6941F84DAE81A2C01D769C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1d7439b-77c1-497b-b703-650a2d379880.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1d7439b-77c1-497b-b703-650a2d379880.tmp
Size 21KB
SHA256 dbda85bd7e74b1df1c67914ad4c150c700c1b50b7a771811b5d9203f2c0b5902
MD5 2d36b14cc5e16ec00a7ba0954d4d1f6c
SHA1 eba24860ff2b0147434b5a5a0498290aa1add287
SHA512 6e63225c95a8fc77e2ed9a1dacd6567a88a9a49646cf4c848de0f66cbb0d7446839a6ccf39664432da8d49971aa4454cbe710c51cbba645bb845ff86ee1d33cf
SSDEEP 384:fiFVQkUSvtxsNy8TUNTUlIlBeD1R7Sp5u8i2ppYo/PvaTZc4VuIIlm:qFvvvwgw/Qk2b3PvaTZctLw
TLSH
T1D4A26C3358989D3BADF79A61F54A3243DEB08167CAD89F94E6CD9A2C01DA1DC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

485364e2-7c5c-4a22-8e0d-bf3488b0c01c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\485364e2-7c5c-4a22-8e0d-bf3488b0c01c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 74c32e78cd3ec48d3aec30672b7c39c7e6c02f62b507f13c24a8dc097f131280
MD5 078948c6fc7bd08e18a78de51ac96748
SHA1 a8a02582ecb5d98c73c16178fb76b1c5160c9a5f
SHA512 1a37b34d9f627650e208daa59275e8df31116051192c1a41d98533784b1a8e492851363be564b66723b4c096d091dad522b04e5f585b62079020892a1f6b5a90
TLSH
T15C412658B6EA1148F3B77E5AABF6A86E487E7D372E0BD45D00110E4E0623B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\activity-stream.contile.json
Size 4KB
SHA256 328381a60b33029d70741197afb1c62d70105cd0c0e34db521893b56028d2b31
MD5 2678425b62cbd044d3ae4b9218b16e70
SHA1 5ce3ae2636602e13f0d64e89114734e668917584
SHA512 d723a16bc2d739fa7e15d583bd322ac0cf854da8852a31de8d2ced29710f931ce6d099398060960b929802fd41aa4e844d91e770bf6c2c57ff9b0b36b954acd4
SSDEEP 96:ThbCVM8TPdnmvJCgGnT+mRBGnyoELCTAaIplz:CMAdnaGamRBGy4AaMF
TLSH
T1BDA1D86F887488131B72A6F65C0B23ACF043F007DEE48F6C75A94DA186A87ED91D7685
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 92e425a148f9b1b48a8acb922286ab7759a01e1751f16819bbbcfded690c4b66
MD5 6118c6c29fbf6b32c7beecb632eca326
SHA1 d06561025a47feb4e86e862dab5db835eec5f8ae
SHA512 8371f32164e2987e360dd44a81aeba21ffb6c784c250ce0460b435a4a817b5e77b7f9d4f30b39d3c487a2e2158d57a734fad8ffa5e08eee452ec392fc95368cd
SSDEEP 768:SyK9rQsDgk5yVb4AUSA9i+Ziy5i8j+f51maVommrM4nQ+GZOOrBO:pK96py/zdj+BkaabM4nxGzO
TLSH
T1597309A3E6E9B1BB0B9537C72C0B795B62E20199E34602C8FCE9C91C81DD754613A5AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11229

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\11229
Size 6KB
SHA256 676e823618cdcfe79ed996f939ded6d5e38cd4067673ff41fce3e778fc3630c2
MD5 b09b69b057baf11f6da14c9ab8641e55
SHA1 93e4bb82ba4570c56210fd5e02dce83261dd2725
SHA512 42458ee8193ebc425f35ed39e1affbc6def693d9fde18746967026d116d2c06b4ef00fb41cd25bab4eebfb8c3e8d13d712b7cdfb305cb0eb227b8bb6ca9b0520
SSDEEP 96:bmtoRgbxV3pkYctoRgbxV3SivjCfgp+fY3GDGn8YGn822:FRg7C0Rg7CWXp+fY3aK8YK8t
TLSH
T13AD14C3F8E0534250FC696D2C14B569F7C14B847ED874D9AE1882342ECC85B45BA90DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17922

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\17922
Size 6.2MB
SHA256 0a243808cf7f9317d684e4139a79cae725f1674634b9139e419357380dd9fce5
MD5 454e369ca496fa9bd6da31d324a23aaf
SHA1 9b6a9be02e1f4a70cb4c02ec57d66b99a08d3162
SHA512 2ac8da44114318c499ad3eb9e9da3385eea18d30641885471dd2a2e6bb54e45aa0678102201f6793e2ccebdff2c22dfeb43d1318a50f42ca0efa63652b8cfa50
SSDEEP 98304:EdecAR+/zEJxliG41pDtf4FLbR/JYdE0TW5aZfp8Kow34hLV:EqR+/zE01LgV/6j65e3Mx
TLSH
T1896633619711AC16D5BACB30ADC4A2917AB7DAB2BA3B371715C1293D2CD33B31C3449E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18445

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\18445
Size 134B
SHA256 b0dac891352157447b3ff56dd0901dd6ecc71eb2066d3aed6724fb5c427a4f64
MD5 998180984b788b6515a26c534a0c7484
SHA1 287b79030880077e7bfa25e572653e6b02fe3df0
SHA512 1534a8c76359ce1bb4b35783b83406d0e3294c37f9ace110a9aa2d5370076309e1119bfceb293a85639a6772e0a3e5481d2c51a53145663df6c2d42c397e1f03
TLSH
T1AEC02BD30A809013D0904C7680A4F0CC687031008D6446C0F221037200B4F5410053A0
MD5 SHA1 SHA512 TLSH

Submit Download

2093

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\2093
Size 215B
SHA256 85465c638770fc314216235a8c1387ce44bc81fa54cea8353b9f7195ddd8f1bf
MD5 ff36a9536c6669f537181f2953da2e83
SHA1 d86f96060d3b7156a4eaeedf9cb0de41faf360db
SHA512 b657e753f1b951ea57ce46437615cad0a6a8b772305a0ff5202e514dfb4c38ca5cfb1b5a36056abd1a33df2c7df0f971fb6efa00a0e6bc688c3fe445a56447e4
TLSH
T151D023D7EA47E473F0BF85349428609D0E0D08419EC211C5DF72131740F0699406C7D0
MD5 SHA1 SHA512 TLSH

Submit Download

21710

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\21710
Size 208B
SHA256 bde938e4793972bef73000766d1168e0d88ce609ca8b44312bade97c16507399
MD5 6e212dccb3f49467e369bfc45ed2f195
SHA1 e98c62552419e8570f5db05fdf5f4dc8b75f883f
SHA512 df51ad0f6a8ea2f7823a8bb0c27173e4209b69db5def4228b9f319f98430590b56e0c001e0e5f94ed8e7e96bae0792ffe720307d77cec0943820e994c85575d4
TLSH
T14BD022DBAE03E4A3F07B8A30A424A0AE0E160886AE860288D832132B05F06AB441D7D0
MD5 SHA1 SHA512 TLSH

Submit Download

22148

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\22148
Size 1KB
SHA256 5e569dac63155963913ec3d006ccbe840c1ae5bff48a5c5bc1c012b04bb4a4f3
MD5 43684aab50e97758a04c4e1c7d82da12
SHA1 b7204207aadd551ad7d89b8bd1bf97ff31e40cb4
SHA512 d8c2cf5cc79e4e05d03e077ff41c17181c749ae7585e3860e12a2ff1b751859f24b157bd02146b6d14edb8b2bfbc8c9a3bb04658e6a88c926c43ea28d6b3af6c
TLSH
T1D821D896E2D3B1017120269AB5F7925C09BF23C2770B8911C64E80E904384946035BDB
MD5 SHA1 SHA512 TLSH

Submit Download

23233

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\23233
Size 52B
SHA256 236deaf69d116514fbab0043abc010f5e4ec3d6193dc5b35fb46569ebe595163
MD5 5a8a652a4e8292d04ddf6821016d48aa
SHA1 e13b253b3785d701151abd3fbe8545e4b037dc5b
SHA512 807100d291ab033ec3ad769e353f06902170197f0761d73fd76ab2eaab1f4311d7e7b92f93beeef3fdef678b91a240767cc5f0345832e81530392b0f28a5e9f2
TLSH
T16D90028842918902E0548334684498BA181039145980465F7992175249110D20500041
MD5 SHA1 SHA512 TLSH

Submit Download

30083

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\30083
Size 6KB
SHA256 a45d05ff1f5ae049b8546d6ba601cd1d13db42736e8a4bf9984525e1b4e4ea58
MD5 ee80ad431b4c83e7d0e05d6f80b08c36
SHA1 376a608378f110dcd008adaf7b824b921f0ee75c
SHA512 b046cb8e000774e5d21c20f9f65189c8c52c6055979eff8b969193c15da0c072e17cf1f35e6a7ddb1efd1a917b1da8f5e5060085f8b32db0203b32177c39a47f
SSDEEP 96:LmtoRgbxV3pkYctoRgbxV3SivjCfgp+fY3GeGn8NGn88rdP:VRg7C0Rg7CWXp+fY3HK8NK885
TLSH
T1E3D13D7F8E0530251BC796E2C0475A9F6C14F847E9C749A9E2C82346EDC95B0ABB90DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5156

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\doomed\5156
Size 258KB
SHA256 434729deead1cf32c92ae9b38092044b35d976a1d35a90600dd27dff5a0d97cf
MD5 d2bbf2d1826f5b1750f79762f2dddbb7
SHA1 9cfe4a28706c3ba145e5be76bbd6bec1d8cdc89b
SHA512 78b790c77a3d232513149deecd9f2d9f7f124234a801ec946f2d4fb8918a937d2c7d2dabec9b7798167fe7a531ddc35632e0a667ac5856be4968869e85c47113
SSDEEP 1536:VYCYPsknI9VSkISPrufUvkcI+DcmWfWbyBs65r/ZaAr91el5QRrBqGaXK8Ct92Zz:O5kIfxc5gmWfWbb65r4yA2rs42Zj3X
TLSH
T1AF44F7F7D6AC70FB075286DC6C0D72CF72AF4139DB5209DAF8688148C3C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E63B0C307837575E10B8012EFFA7F79FCBABBF68

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\entries\E63B0C307837575E10B8012EFFA7F79FCBABBF68
Size 159KB
SHA256 709565751a811896fdd9188078b62f1e7ae85c0ebf2f7d5be645f4152d6b166f
MD5 967211c851c48f6fc5e378a1f9796a50
SHA1 1603604cc6fa823c36ffc60acf0ae9e9fb65a6e3
SHA512 936d0d13b09c80e6a68af873595e9e06a7f1626383b8b6588e0a939f1b0d2efac87ef905a62b8dcf7680fbdf4594c99bb2ae8ae39d505388ebb3024cf1e39595
SSDEEP 3072:1IKtEOSRK0eL58UrxN8OC5z45c6fndye7o5ooP1nNU3binuKLIO/jo:1TEOj0Y8Aaz4Vdye85t1n2rsu1
TLSH
T109F312F7EB79E418566246A3F00516439D59936F425FDE8B6A1007AAEEC0FF0EF12807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 f95c6121cb8b7fd4c1149bacd8d599e73a593de9367bd8a0b3d6c32eae5db12b
MD5 61090e5099df3669c0735b97dc0433a5
SHA1 aaae544ca678ccf395cf1f7ed6d5583f4e75188d
SHA512 7bb9ead8389ae14752e6603501700a6400d17c368ab81772b1c89668c7b8bc4ece255cd1660716fabbd465a7db1092026c0dec2e606fafc607856c44d3518e0d
SSDEEP 384:HGNQiO024YCWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAV:mDZYCWTToXJWTTogB7S/AmVAf+hRMw
TLSH
T153728E7D8F013CAD171780E8C8B583598D18B7E7DFF6C06D16983D09CA84A6A71F985E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 d73fd04c97756a09a96c922c846b446914b08bb6a40414678f3685ba35ae9145
MD5 dc51f836d36e89b4c4524fe415e2da21
SHA1 4d9ea0501345b83184588f62f006fc77b23d2e81
SHA512 4539b0b04d875089bfabd08630571540fa3c1b50d0c97a363f6c575c14429dd19b9e02627eca75cf6bd90c0c33f878059d4db7530e984bb6351d8556ed69e591
SSDEEP 3072:X3lC76ee2CYyqMq08npGfQWFY//MTV94RY:FCv9Yq3pGfJK/Ez
TLSH
T10CB3AFF6DFA2C96D99FFD4286A82C53EFD221400B3E72009C927275492C6F787675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 4f2e099e9ff40315ed48b1354149bdd4bbcffa9aa5852a5572c608b22259e4c0
MD5 4d3772a0ea27e08aa8238849fdfd83df
SHA1 751dbed7982176537187831dcdc5ad105cfa601e
SHA512 383b26b53464ba9a2ec1b054104a04ea7aea7953da17b86b08e3624169163cbda2ca2534aae9bc6e93d1a6e99deed2caf581c22936c9b6c1c6f74507a35b8f8a
SSDEEP 1536:jTrlioEHSDM93r6el1AbQsg70QVayjol8+9njbHICOnDKrbdK3GFYAC/5o9jQMED:j3lC76erl9VLkl8gcGfQWFY//MTV94Rp
TLSH
T184A3AFF6DFA2C97D99FFD4186AC2C93EFD221400B3E72009C927675492C6B787276648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\AlternateServices.bin
Size 27KB
SHA256 fb851f33364a3da9a21d4f4ab6e75341d5e5b0f598b7606ec381f4d7412649d6
MD5 379b78003d27f9f239840a258ffe6b8a
SHA1 4be570e1a80ca2df8a608000a3c2c1997e0a383d
SHA512 bb9089f561679cee5e4e3936f6917c65e18c83dcdeb437e3b0279bbd194205262eb6576f74273350c83867edf31cd73cc4b340fb52f822b797bb4023b57beb32
SSDEEP 96:AN84gcqlothDU6hZBg6h8I56l6h1q6hcWhFhhhxM/puh75hByx2/h/jyuZ1hzy8R:UQg22RZZHFtRosrIgV
TLSH
T181C297F76FB164A3F0A28FF540A8708C9C33132A585C91C4EA4580E742D5BB5917FFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\AlternateServices.bin
Size 28KB
SHA256 73d86b8e6ca5216618738089a6d4aebfaf60b30e6fddf2d6a76dac1f99903f59
MD5 6de6bb54177f2b203d76cfd72aea5f8b
SHA1 59927a4dbbb9f8c79acd7cce8855cc72ea22f559
SHA512 5288d3c0915cdae77b2847f60d4c1a8c7789509a3194aa082b6089f3773bfb6306312c7fcaa3d26654ef4f7103bc6052aa2e9f9a9a579c8c23902ab925686f87
SSDEEP 96:ANPjzrQ4gcqlothDU6hZBg6h8I56l6h1q6hjANGLvh9kAhJM/pgxh8Uxhiyx2rqb:sfQ322utZZfFt/osrIgV
TLSH
T1FFD2C9F77BB564A3F0A28FF540A8748C9C33132A5858D1C4EA0580E712D2BA5D17FFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\AlternateServices.bin
Size 10KB
SHA256 023656bd292efd011e30a823a983d8518cf6769114e98ef879fb42daec5616c8
MD5 24148f9081c64aa0d1ae7ac221dc42f1
SHA1 cd5843276b295fd12266eb07a0eb788c9ad546c5
SHA512 7451f0269840d9a868fbf341889d386962cab366913e859ca2996c4fa011b5b76d0878ec3d83d3e8460ca30395efdceb52052f99a102859c48e164ab03457cae
SSDEEP 24:U0RuhMZjOF91vhvs+lzTQ9xdOht9BrhD9VvBhLW5q9F55A50hVB9Fdh:POvNhvs4Ta7OhnFhxBBhL8I560hJ7h
TLSH
T12E2280F36B72A463F0E28FF55059718C9C33172705AC9184EA4580E652C2BFAD07EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\AlternateServices.bin
Size 13KB
SHA256 73ef4f6135d1b02da9fcf78acb2a104fc4d28b6c470328e83f8ab86d0342eefe
MD5 13932bd9375cc6b186d5ba181bad21f7
SHA1 c043a40085cfdf5cd0251613bc7fea5917f51aec
SHA512 966565421a728ba6a02674243a6634677a3b21e36aba75f1e211ebc9c29f6c151b734e5e6ba7d3f9a578ee1829c158c7381281a7a07c2c46a632aadf671c3887
SSDEEP 96:ANvNhvs4Ta7OhnFhxBBhQI560hJ7hcWhFhhhxM/puh:utQ
TLSH
T1A85242F76B726463F0A28FF58058708C9C331327556CA184EA4580E652C2BBA907EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\addonStartup.json.lz4
Size 4KB
SHA256 c790071e6de4d67ea66d87518e1d359be158816f040cc3b46b57045d0fae3d68
MD5 d95369534670635054d53a0e7a5ecf85
SHA1 42f27506450a5cb2438b7c04850a6ef3f315a259
SHA512 ca951c3250737c2b54fc18010f71e8507d11af5230a1fc7e5bf0cf046a9f15f4cf31c54e776e2207ffff12b3527b82aab53ca1fab0aa0f09465722e7ef0bcf67
SSDEEP 96:NEUeZ4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N352xxhD8rGvm6ApwnHUuhN
TLSH
T10DA17D66D541EFB2FE32C0438CD53FB2EAA6AB7410A9C4D4F1AF71154C64AB35704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 db1c0f5697997d731fe246888dbe8141b44388e0da1071868bb9252430dca4da
MD5 2b9657442a10d479ff231baeb943490f
SHA1 e978f4d4da048195862798da934d9ed0731c80d7
SHA512 44b38e500eff8012aa6698c741cc9b49c288f72c08416b5f3d2d6561da725a6645f841614a9c0df47d3e4b07f17fed3f39d62015fcc7abe4b872beb05e1168bf
SSDEEP 768:0GJEq6FaDZ/zffGcmhuJ3OOPKnROqCEpubGbdbi2bX:V6FaDZ/LlJKnn
TLSH
T156D20144EB2E953FD41812BBDCA50B002F79B88959192F673A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 3a3d2e78118581807e8e568464b3743b532824b3703a22fee0c14081ebd4d9f8
MD5 66654ac70a5bb23af8c28ef2c71007c8
SHA1 7b5883719220aa9248465e7f268c901cef8bb224
SHA512 b639d066cd8188ed96465c5251250d9194c3d0e0875919732c826a43b4e056590a4546cdc20cdffa8e16168a3c62eb25e4c747a8b8eefe9c7d8efa83552efa68
SSDEEP 768:iEKEG6FaDZ/zffGcmhuJ3OOPKnROqCEpubGbdbi2bX:U6FaDZ/LlJKnn
TLSH
T19CD2F044EB2E953FD41812BBDCA50B002F79BC8999092F673A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\db\data.safe.tmp
Size 31KB
SHA256 37a064b94086b3fd259bfe574816206f44df51b5da652903484b58fd1841d2ea
MD5 dd785916b85558ed3529ace3f4960eac
SHA1 b69a672c7a8425d92c9b5a44c5ff16d2abd0c9fb
SHA512 fe278859cba40dc916d053f92da7ca1376ec357d507a8e236fef8ad2924ad3a383142465f81c172ccc55177c22e6a697a4ff483cb1fd3efb984b9f6ae0d71f81
SSDEEP 768:iE0KP0TTjIeH1GUGGcmhuuKIKP8qpCE2vbUbJb5bi2bW5:d0TTjIeH1LbKIt
TLSH
T106E21244EB2E953FD41812BBDCA50B002F79BC8A59192F673A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\db\data.safe.tmp
Size 31KB
SHA256 d8032f0bccb44edbb286ec4576c953bb972ce61e817308b3045c15f22c9eaff9
MD5 39042559e418b991f9b368e179774525
SHA1 4e6fc0ef74b277d09bbc7f5482e127a5533b390d
SHA512 a69676e6b9bb9b734d0a38b5600a90a7c234a34444a38b2918a18e488c84b5b36a74d283eada6c65c812f7a98c0c5db447785e598cd368c4116f2f6c858ed155
SSDEEP 768:40TTjIeH1GUGGcmhuuKIKP8qpCE2vbUbJb5bi2bW579fJE/:40TTjIeH1LbKItRY
TLSH
T1F6E21244EB2E953FD41812BBDCA50B002F79BC8A59192F673A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\db\data.safe.tmp
Size 31KB
SHA256 6b93a8c23a55b9aaa52a155fe8e96e4a32f4c4cc05653ec7c77fa0907e881377
MD5 73e9388aa91d08d5ffdc7f0eb77038c4
SHA1 b44de64f429eeff72c28e3c54ff7dd820a03a001
SHA512 70fbdd24cf42507daed6c5acec24c1397caef57dcb603e504989dd0379f90d84cea021766940eab840de7a3e819472c080a6917e64a9b80d80beac757606849b
SSDEEP 768:iED0TTjIeH1GUGGcmhuuKIKP8qpCE2vbUbJb5bi2bW579fT:L0TTjIeH1LbKItRb
TLSH
T1CFE21244EB2E953FD41812BBDCA50B002F79BC8A59192F673A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\events\events
Size 1KB
SHA256 157c3280ad5f4ca5ea0f57e86e7b090626a1ecaf0d292f70993404acf15bffcb
MD5 5e3fcb157edfc52e1733bfeb9d21f594
SHA1 9266d692c5fb4c159fccc42b9185808c777700e5
SHA512 6145a9d2743a6d99f3c0701af58f52011c17502028fc255746afbb539045404f79079391abb4e5cb6f6b75ed8174cbfcdb8314fb0ce7cd6f1d1f432886474b85
TLSH
T1A8217C6C39B84D6A9CCBE6AC744101CE93764E0A04872D431D12DFCDDD82AD932AE43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\events\events
Size 3KB
SHA256 7bd5ad7bb6886a8149904d56a0e85cda9b0b22ebb66159eddc9adad73e7225c9
MD5 384d9079ae19bdfbfe59e8276936b97c
SHA1 1678a1a21510820452e352a2edf3b5347f6d50af
SHA512 0a3a9da49c4c8ca9bbab0d1a67994222eeb1b38dfc2a7fc8e6dffa7f582284b1f0786b276826d8a19bfbe002dcb63c4a0dfdab21d9edc4c899719c0f907398b4
TLSH
T15161F11D25AA0C7E69DBE7AEB44102CD87B94B0294C72C435DC6CE49CC86A99329F53D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\events\events
Size 4KB
SHA256 c580f173a6733465d715df645dbce88903348955720d9e613fbbe7a6a9bea768
MD5 077061599ad374275a1a02d9428da2f9
SHA1 5f8850baeb8f1861d39c648d1720a2a367b0d0d1
SHA512 f484c98dd4702fd09986d6599ff334d0ccf8a9dee03126982c0a554885c36ba602f68ec46281f9fca3b1ee463ec0a129a9e995c872fb6e6a51ec275d516bb93f
SSDEEP 48:Y6rNoWhYAsZ3LV0Bp3pKyF2RM0NsXQyHi/L+iJiJO0/UesRkCi+HzrK7F5Ovd7ps:Yu0NL/JVvH3eqiikn4godk9dP
TLSH
T101A1101C35AA0C7E68DBD7ADB84002CD87FD4B0295871C475DCBDE49CC86A8E329F529
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f5ea645-7610-4227-891a-043ec21b64ac

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\pending_pings\3f5ea645-7610-4227-891a-043ec21b64ac
Size 2KB
SHA256 798d12a4c794a9de1b25fd80bfac2fdb5edfccd21f3d3a565d2573421f354c1c
MD5 e64c4466214e4d2fc2529e880d59c1b6
SHA1 4faf2f6770c4c0575276e1274537e6b1b812c7cb
SHA512 89ed3a60522f015a350c545260b9a0b5e0c6e1b72f1ca60b225d68d9577f60573f451ee69a9702915064eb4c0e1eacf4f721b726863da9f1547707fec0378b9c
TLSH
T12D41315C79F85CB79CCAF29C9442279D53348E4380C65893AD51EE0CCDA679D332A92B
MD5 SHA1 SHA512 TLSH

Submit Download

4679885e-abc1-4a0f-ade7-4722a9e8456e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\pending_pings\4679885e-abc1-4a0f-ade7-4722a9e8456e
Size 886B
SHA256 5feadca3ee27954a7eaa2133d9ee75ea0672cd7b2c2d80deb18115d97f27f8bb
MD5 61c194351edd466ee9fc1514d2f7171d
SHA1 25e09038cdeb96076118bb9e7c64a88ee6eb35bf
SHA512 0596c984639ed932c6cbda4323a4a7bcb068a60d3177e933dc09a3be5f7603ef59ac083f59d79d7a7800ed91aa4fad1df12c273c76e0ff56502da4b138342e6e
TLSH
T159110040963879F2CD68E39784A577829BE4692380C94C68BCA14F280CFE11EA76621B
MD5 SHA1 SHA512 TLSH

Submit Download

5fe75fbe-f975-4d7c-adea-c14f263ada6e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\pending_pings\5fe75fbe-f975-4d7c-adea-c14f263ada6e
Size 235B
SHA256 860e7d3bfda2126bb87b807194c3f8c8c356a2a74f5077214fdca8ff6d0cb9a2
MD5 2e07896da966861de42d867cb0ebeecc
SHA1 d705f807e38fffa3e2339754761e09af0a078f59
SHA512 1f23c0961d2e853a5dcec3eaf5a8cba91fcb226fc7ba5436ec566efea7c714990664347f9da392022cbd8eb536c930d0905acad2b43a0b2469394e3c9bdca152
TLSH
T1C0D0A7C4699C775D08240F0AF0F0AAD631454D332474A860E9A189789AFAAC852A196A
MD5 SHA1 SHA512 TLSH

Submit Download

947ee3b7-f5ef-48d8-8166-8d5fed8b218a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\pending_pings\947ee3b7-f5ef-48d8-8166-8d5fed8b218a
Size 235B
SHA256 69fd7914bad3f8aae3ae8c47dbb615bcf28bc125840e1ef8e3106a32aea2b18a
MD5 1147748dfc73d5abd39577f671eae0ed
SHA1 1ca3368e8dac3c29d0c807fd9744af811a7bc545
SHA512 6a1b172fe3c2205ef66235b4593ff7a79f90832008b6f84b3b029aecd1345caa28d5f454799bc946b658a50f0e63d2df6a700adb4ef8a784030b147083124f4f
TLSH
T158D0238018AC2F2C09100F17F0E47AD330474C33D0B0B810DE6219749DFEECD415290B
MD5 SHA1 SHA512 TLSH

Submit Download

94fabd9f-2556-40de-b1ee-42b4899cbd30

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\datareporting\glean\pending_pings\94fabd9f-2556-40de-b1ee-42b4899cbd30
Size 871B
SHA256 8595d3b5ef6c76128112d91cd280155b82cd9e6e0deb7fc853359eb21033f194
MD5 e8c2b1afd2285d2a449f948eeef09413
SHA1 5824657ed4738ec791711fb9c66ee1abed296f23
SHA512 2ca912097c3548ac3326b27974401539cf5757a3b6b56465a2a7f8a28058b41e17c51951b4d65d53e60154e5e490623f22ab6bdf02df20b2c91f52f0fa9073ba
TLSH
T1DE11E3409779B9F2DC68A38B8555375157E46923C0C984187D754E190C6E51EA36720B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\extension-preferences.json
Size 942B
SHA256 56d9dfe54a41438ec90ae6cdeacdbfadb3e3b04f5403a220e844a1775e1ba21f
MD5 f7cfb3ac426cfb2cc708ae6cc3faaafa
SHA1 2d612ef73543a5018e08bc1760d7931ed03feb4f
SHA512 31095c5be304f0cedf7eaaa2efde632f3f6a67bb26b8ae31a6069af8a60b0c659edebaab99a7719d09aa1640d2d9e080555f4f79253c13f4050840649c968534
TLSH
T15A11F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\extensions.json
Size 14KB
SHA256 70ed936a9e4c2275d7ada6e5fdbbc08595cc162c8e4a54f5ea40fccae590acde
MD5 bb333c03c39258a5b1afb64789dc1ed5
SHA1 53f8ce71439deced5cce51ff2ee259a29ab79a91
SHA512 6f2ac6623df5e32e6fb56c11cd12e22b7c2374c4719d7dcd0efc776925a29855f3c64764ad648e74bfb681523a359491dc43d8e51d9aeeae8a3f707cc22a6994
SSDEEP 384:EkI4vgXUmldvc8dhW+94zh96oOL4H3AL4PZ5L4HiiL4H8iL4HC:LI4aRfVXj4D6/4Xi4hx4CQ4cQ4i
TLSH
T18962521545049EB8298FA78BAA367E01C37D473B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\prefs-1.js
Size 6KB
SHA256 46d866cec8b9d2e7e932566b21bebaecb0f59ab798d810f2232dc267452d405e
MD5 09c45eeea9737251ce59ac88992d37f0
SHA1 19e1422c67d17d920cffae87b73026d69d464748
SHA512 bd59e0ac11454304a1b4506c895580daf60935ca02f0e98628bf4bf051e17ec602fec8cc7cfc824691dfd6c56831f8e612ccb4566d9fc709ca1082c53191f269
SSDEEP 96:xH3UTUJqGq4LfijG1zS2hSSlSdv9j9nnH5mrUBw88n8L4cnG5Et:NkR4LfijG9hSSy5vBw88q
TLSH
T168E12E7890088B7F65B6776CAC688C316AB2013BB7BF68C750B554C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\prefs-1.js
Size 6KB
SHA256 df0acade5bfe95ba8b4153632cf3e205563f88a7727ec5cd88a6757219b14601
MD5 6ad2d2d225a3c23be1d81e6489536b53
SHA1 28f3a9b6152dd5994f452e6128445f3a88b411c9
SHA512 59c9f62ebdd331bb70e7fc98b1c3b167fc5afb681c8de63ca133a7c374fa8ccf9a47d0f40e9fb5f91093ff0cafd81de46224681dd66e8ddecc838a91a26e6eee
SSDEEP 96:xH3UTUJqGq4LfijGObzS2hSSlSdv9j9nnH5mrUBw88n8L4cnG5Et:NkR4LfijGYhSSy5vBw88q
TLSH
T11CE12F7891088B7F65B6776CAC6888316AB2013BBBBF68C750B554C4055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\prefs-1.js
Size 7KB
SHA256 f4421f1531b53bd80434cbb7651e16b18842e81acd8af0b6266ce1ca0f732735
MD5 4fc6092da9e4f87d773a019b29672dfd
SHA1 9c8db0a5fc4c70c351f69864a04101991ab8d7a5
SHA512 281b15b1f6576eb20fbfdf3b4dcfe37f15c5a64fbffc575f0b95812574893e5a5ec09a2b93f399a78efa1378707e3810431aedacfbb89f24fe37e22574f4ab6d
SSDEEP 96:xH3lTUJqGq4Lf4VjGNbzS2hSSlSdv9j9nnHNb9mrR3Bw88xb8L4cnG5EoGS:NFR4Lf4VjGhhSSyro3Bw88D
TLSH
T163F1FB389004CB7F65B6767DAC2889715AB2013BBBBF68C760B954C40548F3846F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\prefs-1.js
Size 7KB
SHA256 c77cccdd6efe37afc532efc8d02630d4e1b7dc7fd892aa51fbb1013c44d02174
MD5 2baabf8f6ad6d43db01d0b3da3664d74
SHA1 20e98d96afffcf65c8ca43c584c70c8c824c68a9
SHA512 da6947371f23e937bddeec45c490675658c58f5816c2c52803e3ae4607ab722a119153c38dda2414e9afba8e5ffda9f413ac476acba2b7ebf10614bc29ef9b98
SSDEEP 96:xH3lTUJqGq4LfijGNbzS2hSSlSdv9j9nnH5mrUBw8838L4cnG5EoGS:NFR4LfijGhhSSy5vBw88p
TLSH
T1D7F10C789008CB7F65B6767CAC6848715A72013BBBBF68C650B954C8051CF3846F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\prefs.js
Size 6KB
SHA256 9d3cb54be15bc821b023643003b489ad075e399d47658613d0861e7844387f8e
MD5 188c0bb297ccbdd0d0990624908bbd11
SHA1 2a2fe14f10001861890423f5e1e1ff9da8791248
SHA512 45ce145e21f3efd5fa49ff9a5a99e75c251a5a3ddedbff21c9ef367a056bc90156f2c65338e370d1adafcfce17615586dcbaebcb973826eef0d2e6355dddfd61
SSDEEP 96:xH3UTUJqGq4Lfiy51zSSFSSlSdv9jKnnH5mrUBw88n8L4cnG5Et:NkR4Lfiy5TSSl5vBw88q
TLSH
T1FBE13F7890488B7F64B6776CAC688C316AB2013BB7BF68C750B554C4055CF3846F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 9KB
SHA256 07273fba5d5dd560e8f6844cb0f47112cb7dbeb94b4232b116638a74763558be
MD5 68b441b3ff8ff0147d9ccc262a22d8a9
SHA1 40ca78ea8aed5f3f2b936318a3d94dd642767949
SHA512 223362eaa1bdb7821a4a97f06f4e62082f0d817cae1b7fdf6823e5aee5d04aeda5f2c550e32594622c8c0c0298cc71da7aa2149a5a144d05849651aa019b795b
SSDEEP 192:J0Q9qcwj+wbw+8Rz/3JhfvyTaWOq0XdswrDRxQEOTi0v/4hnLAFgX:J0QUdZbhizDfvyYdswrVxQEkpgtAFgX
TLSH
T1EC22AE6F70243EDF58B4E834689B1F8D16D23141D6E34219AF09DAF701EDA0665386B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 579c7deecc05ca4c392df2388275ac30d8570334bfe333e05acaaeb4dfdb6def
MD5 b3457084b924f7477bd2a9c97c787bf0
SHA1 ebb0b0834589cc24081e37c8fd31ff23be24e030
SHA512 b0e57a6e205b67a021611db2cc4f57dfa9f9d7234479db270c85b3e63801e5448e775f5def5d1942a986e9ce49c7b0d092f97dec00bc4d22cca10317f8c536e2
SSDEEP 96:pCd0jkn9qcmG4xj+Xn98a0Cd01VrqM4EcZZi6rLKJyIlmVpGmvOV+g30:Y0Q9qcwj+Nei0v/4aU4VpE
TLSH
T194A19F7B2C1E3DFF54B1E8E88DEF0FC907E21540D5F20115EE345AB602AC746A4A4A6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 9KB
SHA256 b2e1e731c5f72d94d805395e079c4cd16d36be117b9f703e317292553a15cd98
MD5 c44a84bcca0d0ee8930109067e620f98
SHA1 4776ca2e0d59e603a149fa9ed3ac9abea1f649bc
SHA512 873bea24a6c5c2be0b29470847455003eacf70f3d4fdedcafca27ee8db3480176db3748db0ca987c7da5d18d7c1b8942a97250305f3dc056240f614c9b0124d6
SSDEEP 192:H0Q9qcwj+wbw+8Rz/3JhfvyTaWOq0XdswrDRxQEO3i0v/42QDlF9Z:H0QUdZbhizDfvyYdswrVxQEIpg2mFT
TLSH
T12622AF6F70253EEE5C70DC2468AF2F8D06D13540EAF34505DE199AF601EDA4975246B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 428KB
SHA256 4a70717e70c84b9dee6e5ede56f3f708be71ab3c1e9c442dff8938aeb8fb562f
MD5 2fed87ab659ddeebba30548670fd9758
SHA1 1361d83d401810fc97cbf0328b6c38c8371d69bf
SHA512 f73c272b7c55638d60ca014167796715f3a5bb526197f1a12b9f001e4c2b9e978f268c3f681416d362b9894bb992d906f3d92949cf673b0ec2929d75f2dc0d76
SSDEEP 6144:egJCThm65M4xcp1aHb3ozRYRBL5GlJWtYr2PG2z36JXWc84wYxMgE+/elBNY0rfL:1ShzZG1sYaRietYr2PXzQcxnYu9QlyUU
TLSH
T17594232A9C142AB9A75D04E4B1B30F202D753F83CBC7BB956D82F4329771B43CE12666
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 f1bfeff08efb9935c53400da07fd113535766d804f3558b04a4fab1ca425e5da
MD5 351a2e98bb8d34b4eec143dedac99b5a
SHA1 d604415a3d2e2479bbd2b8d848f6f866e57831ac
SHA512 08eeacf0425fd3e7d06ba93cb371800151f56357ec3f413c505e964d94e973b651fa8e4c6cd534b3ec2d9595fb0256be23632a312d389efaeb110cb6d9c8a8aa
TLSH
T1B221A792A8671EE53D92852AC0C88FE595593031886558B0819D9B5262ED14D7789229
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqbw6bhi.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 93666478e6a1b5bdc2b103d430bdbcf70d1c10a198d929a07faa965f4901e160
MD5 a867f2ebd6700bf653887559dbd194c2
SHA1 a38795957e335298c176eadb32be17fd96a8b411
SHA512 d09ab09a641d1c8c18c09b48273199ad0704e23b35105ed2f985f443468e3ac4259e3d5a8b00854c1a12bfb5997a8358f65325845c6d5db62c0d9b4ec479fd2e
TLSH
T1D221C898FAAB28B73683C55F51C95BC4EDA13022825CA9A0EEEC561113DC64CB349A54
MD5 SHA1 SHA512 TLSH

Submit Download