hxxps://inbursa[.]loyaltyrewardslatam[.]com/acceso/inbursa

Resubmissions

27/10/2026, 16:07

261027-tkrrvset5110

27/10/2026, 16:04

261027-th4zeaet4y10

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://inbursa.loyaltyrewardslatam.com/acceso/inbursa
Sample261027-tkrrvset51

Score

3^/10

discovery persistence

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4688	msedge.exe

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{A63AF41A-914A-4844-B3DD-77D454EE02EC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5384	msedge.exe
5384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	436	firefox.exe
Token: SeDebugPrivilege	436	firefox.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
436	firefox.exe
436	firefox.exe
436	firefox.exe
436	firefox.exe
436	firefox.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe
5352	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
436	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5352 wrote to memory of 4984	5352	msedge.exe	87
PID 5352 wrote to memory of 6124	5352	msedge.exe	89
PID 5352 wrote to memory of 4688	5352	msedge.exe	88
PID 5352 wrote to memory of 6124	5352	msedge.exe	89
PID 5352 wrote to memory of 6124	5352	msedge.exe	89
PID 5352 wrote to memory of 1220	5352	msedge.exe	90
PID 5352 wrote to memory of 1220	5352	msedge.exe	90
PID 5352 wrote to memory of 4104	5352	msedge.exe	92
PID 5352 wrote to memory of 4104	5352	msedge.exe	92
PID 5352 wrote to memory of 5300	5352	msedge.exe	93
PID 5352 wrote to memory of 4104	5352	msedge.exe	92
PID 5352 wrote to memory of 5300	5352	msedge.exe	93
PID 5352 wrote to memory of 5300	5352	msedge.exe	93
PID 5352 wrote to memory of 1036	5352	msedge.exe	96
PID 5352 wrote to memory of 1036	5352	msedge.exe	96
PID 5352 wrote to memory of 5252	5352	msedge.exe	97
PID 5352 wrote to memory of 5252	5352	msedge.exe	97
PID 5352 wrote to memory of 3444	5352	msedge.exe	101
PID 5352 wrote to memory of 860	5352	msedge.exe	106
PID 5352 wrote to memory of 860	5352	msedge.exe	106
PID 5352 wrote to memory of 860	5352	msedge.exe	106
PID 5352 wrote to memory of 560	5352	msedge.exe	113
PID 5352 wrote to memory of 4968	5352	msedge.exe	114
PID 5352 wrote to memory of 2768	5352	msedge.exe	115
PID 5352 wrote to memory of 4456	5352	msedge.exe	117
PID 5352 wrote to memory of 4456	5352	msedge.exe	117
PID 5352 wrote to memory of 4456	5352	msedge.exe	117
PID 5352 wrote to memory of 4644	5352	msedge.exe	118
PID 5352 wrote to memory of 4644	5352	msedge.exe	118
PID 5352 wrote to memory of 1680	5352	msedge.exe	119
PID 5352 wrote to memory of 1680	5352	msedge.exe	119
PID 868 wrote to memory of 436	868	firefox.exe	122
PID 868 wrote to memory of 436	868	firefox.exe	122
PID 436 wrote to memory of 1556	436	firefox.exe	123
PID 436 wrote to memory of 1556	436	firefox.exe	123
PID 436 wrote to memory of 1556	436	firefox.exe	123
PID 436 wrote to memory of 5480	436	firefox.exe	124
PID 436 wrote to memory of 5480	436	firefox.exe	124
PID 436 wrote to memory of 5480	436	firefox.exe	124
PID 436 wrote to memory of 5480	436	firefox.exe	124
PID 436 wrote to memory of 4348	436	firefox.exe	125
PID 436 wrote to memory of 4348	436	firefox.exe	125
PID 436 wrote to memory of 4348	436	firefox.exe	125
PID 436 wrote to memory of 4348	436	firefox.exe	125
PID 436 wrote to memory of 2688	436	firefox.exe	126
PID 436 wrote to memory of 2688	436	firefox.exe	126
PID 436 wrote to memory of 2688	436	firefox.exe	126
PID 436 wrote to memory of 6136	436	firefox.exe	128
PID 436 wrote to memory of 6136	436	firefox.exe	128
PID 436 wrote to memory of 6136	436	firefox.exe	128
PID 436 wrote to memory of 6136	436	firefox.exe	128
PID 436 wrote to memory of 6572	436	firefox.exe	129
PID 436 wrote to memory of 6572	436	firefox.exe	129
PID 436 wrote to memory of 6572	436	firefox.exe	129
PID 436 wrote to memory of 6572	436	firefox.exe	129
PID 436 wrote to memory of 6600	436	firefox.exe	130
PID 436 wrote to memory of 6600	436	firefox.exe	130
PID 436 wrote to memory of 6600	436	firefox.exe	130
PID 436 wrote to memory of 6600	436	firefox.exe	130
PID 436 wrote to memory of 6608	436	firefox.exe	131
PID 436 wrote to memory of 6608	436	firefox.exe	131
PID 436 wrote to memory of 6608	436	firefox.exe	131
PID 436 wrote to memory of 6608	436	firefox.exe	131
PID 436 wrote to memory of 6616	436	firefox.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://inbursa.loyaltyrewardslatam.com/acceso/inbursa
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff0942c188,0x7fff0942c194,0x7fff0942c1a0
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,11315517294164688229,18236278558361000891,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,9899209239098463300,10668884577294345059,262144 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,2938652694022370253,155809881182628606,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,2360080919885380330,131442230186793544,2097152 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,8268873868271648037,8904899488250529775,2097152 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,16651437091922667171,1552085950198245152,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,12158425961996325846,1003122328047560560,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:8
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,4804236966296098647,8016600028634600695,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,4804236966296098647,8016600028634600695,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6100,i,8497195235944856508,1678052961535163289,2097152 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,2882078868631441560,18071021357896335187,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,6147634428553215496,9619899480187923278,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,9165666004692002638,3499508658825590899,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4960,i,2247620915012316148,16784565940115504140,2097152 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,13002591877758650948,8921805532445467251,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,281698350136544246,12786488086157607074,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,4452976466518844634,1179594452404691695,524288 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6472,i,11129594356585140466,4544608031120065551,262144 --field-trial-handle=2324,i,3855635788490870591,8109655958292464763,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3812

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:868
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:436
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {f8b7c855-12f4-4c31-a576-b185c66b17fd} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1556
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2468 -prefsLen 27135 -prefMapHandle 2472 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {fe70c3e8-478b-415f-8ba2-6683f31a1c5f} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3624 -prefsLen 27276 -prefMapHandle 3628 -prefMapSize 270279 -jsInitHandle 3632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3640 -initialChannelId {904b8d9c-172a-4d19-a3bf-1945c50b02a8} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4348
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3796 -prefsLen 27276 -prefMapHandle 3800 -prefMapSize 270279 -ipcHandle 3804 -initialChannelId {c5455fd6-f984-4155-9734-3202bb21588d} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2688
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4368 -prefsLen 34775 -prefMapHandle 4372 -prefMapSize 270279 -jsInitHandle 4380 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4388 -initialChannelId {17c8caca-c509-48f4-9c6e-a5535a10445c} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:6136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4884 -prefsLen 35012 -prefMapHandle 4572 -prefMapSize 270279 -ipcHandle 2772 -initialChannelId {53783047-1c3f-435a-9280-cca2a8216140} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6572
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5156 -prefsLen 32952 -prefMapHandle 5160 -prefMapSize 270279 -jsInitHandle 5164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5172 -initialChannelId {2cacdcb6-9bba-4bc8-84b1-fd3a7aa275e1} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5196 -prefsLen 32952 -prefMapHandle 5200 -prefMapSize 270279 -jsInitHandle 5204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5208 -initialChannelId {1fd66ab3-ec14-4063-a53f-3217fd5ede20} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5552 -prefsLen 32952 -prefMapHandle 5556 -prefMapSize 270279 -jsInitHandle 5560 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5568 -initialChannelId {8996d4b8-166c-48eb-9329-cb7e9c094d4a} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6616
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6248 -prefsLen 33031 -prefMapHandle 6076 -prefMapSize 270279 -jsInitHandle 6236 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6224 -initialChannelId {bdf2f053-a09e-410f-bb98-c50eb4307bb9} -parentPid 436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

328f1837-d96c-4bec-bb46-7386174db727.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\328f1837-d96c-4bec-bb46-7386174db727.tmp
Size 32KB
SHA256 be276d99bd87ef8b298df0e63d126619ba39696593d804e0c1f9e25d04903346
MD5 2c402e682d4241cdcc110f36af96adf2
SHA1 01e90687b5fc4e0556f1d1b28f1ce4d16d4d46d3
SHA512 a94fc056ef9396cb97ea7a53d272ed9d90b749cca555ee6585ce3596527ff4ab457949436d0ec145f6407b208a4f8f98d9beba5c95d3c9e952615be369ad6191
SSDEEP 384:ndiFlQkUSvp3sNQ8TUNTUlI4MD5mgpQwKzfMBP0q+Gctb9vaTZc0gL/7IzvIIlT:UF/JJwgWVwBP0Cw9vaTZcoLV
TLSH
T117E2C4F6A8D79977D8AE4B93633D2D0699FCC153B5884A84B7C94C1CCC861BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95c2c8af-509d-43ec-aa6e-32563c47882a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\95c2c8af-509d-43ec-aa6e-32563c47882a.tmp
Size 26KB
SHA256 211936e932cd07a0d24feace7818cebb2bbd9657ec349231013aa66edc28f14f
MD5 d1efbf4ba243dd1cc86ece5a49d30fe5
SHA1 9125b62d35b0481fa46afc4a4c4c9500454ed99f
SHA512 0f16ff6a2a8953d5c480ab91d11f33fbc67c28c0f3c34d608e2163f34b8a7f66ba8b111f6948dd2a0dab99b7e3ccdea1459642cfdb0970d6f945d2b067708e97
SSDEEP 384:nxiFiZcI63sNc8TUNTUlIm25mgvSdKzfMBP0q+Gctp9sa+VY2NgL/7IzToe:YFQ63ZwgSp1BP0Cm9hglN
TLSH
T1D3C25B72E894D9BBECEB8BD5A74A7607DEF44263858C9AC4DAD85D1C00DB19D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

82cc7416-7260-42fe-ba27-61a9557f1cc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82cc7416-7260-42fe-ba27-61a9557f1cc9.tmp
Size 13KB
SHA256 715a4698d356209196479cf093f6ef0453395d02ccffb6249fbf156e1b05c22b
MD5 b06ac171620eedd1cd0c0c86f774005e
SHA1 8ebf3bf6da0939f101d98e40e2a4f93047ce45c6
SHA512 89d0e378b2be8ce1803d81a056a95c30a500e8ee665fddb8e2cc9b3652c77e7af7a25f807ceaf640188c5ba351150689c2a83ecd7c9f466eca625bcf60da1a90
SSDEEP 192:sxZBRykN/fzsBQZZ9qzodpFAcHW6+WNf4ahteKrM/YbIYdrYZh9IIg5URJ:sxZBTN/fzsBOZ9RzHbQBj/FkYZc+b
TLSH
T1D452D716AD389E7B9CDBD119B654BB56E3FD5032A0801E84AAFCCD1C15E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84604194-8c44-44e1-9b34-031e5aecef4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84604194-8c44-44e1-9b34-031e5aecef4a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

91ec9562-4037-4b9f-8a79-4ba4b8734edc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\91ec9562-4037-4b9f-8a79-4ba4b8734edc.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9e015794556016b2775333914bd4b36d973a27cc1e9388c1c5848a82e7157e02
MD5 3a0d6c9fe46b95c5afcc4465848afa0d
SHA1 6d7f2ffa088f271625a03cecf005ecca0a898818
SHA512 ca9dda450a9d7c522ac5978dbce163646710128c016a7e0deb32145b879baaf1e776a8005661fde2844b8cdad47dd74a8884727d9cc9da4c3bfa9b5a105f7dd0
TLSH
T165E086D405CAC32FA20864C7017C635DCBD5271B9AD56E4E1704CA88F68BD49E6926A4
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 27KB
SHA256 54cd0a4462bd6ca995a55fd89138fced9524f26b69cb547023c79e7c3138612e
MD5 d0221c756e6b675257f59878f9618a36
SHA1 3c2ef3c10764486e071a97ce4ddab2db2d09eb48
SHA512 e356bc7849f2fbeeb4969523e3692dd077aa75e6950ebb8575540aa5ce78f2f961cee3404e0f18c30692ded1c2817c75ef58c9fd1064d321758f40e02da13c65
SSDEEP 768:ueWTfgTB8Ng4bulI4HTxqL/5UyVYU55uHKa+Sb3ZcP7:ue2fgTB824bV4HFqL/5UyPLuHKfSLZcT
TLSH
T11BC2F181129DFC65B787C052EAC9D97D29427E9ED48226104C2773ABE633ED9C2F10F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 127KB
SHA256 e5f1dabe89a7a1d0ae94bd8e14a273cb5144a6541c34a54192411677c18c43a2
MD5 f944721bd55cbb39c452593638459aa1
SHA1 085940738cf5737b614a586d0f2005ff0445d6e5
SHA512 33c8c2882fc81062027733dc7f1d52f2194957cf94b34c6d71e393ed90f37a378a5c7122cbfe4dc35f7e63c26f7c4440886e9b3884663aea2a8183087611b3af
SSDEEP 24:5bglATIKl7DCmTpHTyxpEo1HM9kvfkzyfkmoyfkoRfkIRfkwhNfkm7usyfk6sRfn:qlg116z1+ukYkwkAkgkw9kugkxkY
TLSH
T107D3356D2F958FEAF0F12770E684BF4CB3D96E6251EFC35E1BCC1906BAA00D01048A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 100KB
SHA256 27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7
MD5 f134fda98a277b1c8f20ab8fbe2fbd58
SHA1 a922796190a1f5bbb3c410c6ec591502050df04e
SHA512 2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17
SSDEEP 3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo
TLSH
T108A312846579CDBE5EDC1D06AB21ED4CA2BE53F66B5E367483100E054FF4FB49AB0288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 44KB
SHA256 23dbc95b66d07c0bd564b98b1caeb300bdaa53295c8b184990e7d63d4696bc6e
MD5 292cfe2d19227f3cde3cf1ab8016cb6e
SHA1 c99e22f8c52e7c038a28aefe21a8ef7186513c22
SHA512 a5d1055e36cba89cc7b361910cac9b79e8c076d010a6412705070d9a048238ecedfc1a367c98cc2798ad7287e915a7a2bd81a34aa17153bb554303241dc2bd8b
SSDEEP 768:hsN0/mgBgPCBkSAFHiYlZbOQCDndD9UMBAlakmtKR/BKuyVBcLJsA7+X/V6O:hX+eCCBkSAZZZiQmdD9DB3btKe6+v6O
TLSH
T1CB13F2DD2BD462EB5ACC497C10CA10BF53E02265B1CDFFB084112D788DABE5E994B794
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 43KB
SHA256 2f41aa179f1391aab4e032b25860ecd7112ae5d852392f50947acc50ac9c3faa
MD5 b2d4a04ccba323beba28727416ee4b93
SHA1 577cb6b63a1bf66322d690344b57dcfee1502f5f
SHA512 0e2e93ea73ddfb17a416cf00997d17ac0ba72294ce19e746194e4dfdb0a7b64fb17adcc90cdb3e9e10736a1a794657c228f32fffc8a8dd9498c564483447b464
SSDEEP 768:gOG97iOuLT7Bb+hGf4E6j9t/YVMFI3LNs+zSZqSd6NaeXKQFs31GbTfQo:gOKKBb+ofTe9uArqqeaQa1iEo
TLSH
T1F813F10C1E9B50D52D1CFDB839F8753CC310A6F3A79282F36508512A666B68275BE0BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 43KB
SHA256 a8197f339d2130265c86752946159bc2819b1f39f4f2f4595b1b65e44989c505
MD5 7d602750c19f8b0936fe94ad1dfee896
SHA1 85d96e0c0abb25802f305728a89c7ecf406939bd
SHA512 57516aab01c7507d6dec6db75ab392b3e7fb2a1851f60578af446468b037107c2a649e866d2336b81ef31015f6275463a89cca91ca863e79c8617ab6ece6b957
SSDEEP 768:CsQ1I0JWuPH6MsK3LxwaOKxfYBbsYB5qfOcypuKwJQOjB+1r:0cuPaxcLxzlfYBbj5cVKiQOjB+R
TLSH
T13613F0A3B91913F7598714C3FC6198B7FB6C2CAB80B6A4A9CB0CBE6025771D33A07511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6c9f8109b6f9e1aedb803b6b1f2fb6b3501ddd5572bfe48ff6fad39d8298ae44
MD5 39d632ce3272bdc97831800e12233480
SHA1 f680f39222d25068e1b86eda76e42a752bb32bca
SHA512 7be6b7a355d551270f89fddd16e97b08651e56ffd5f3c3310ffef977a75e0f1e59d5846c82368fa4c4ef24b28c51e3ba30b762d641c0678d450701fc8fb71521
TLSH
T166715380B454C8B1FFD93C3967D63A7A7274EAE56A871F0F3FB5C67846267534180284
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7df5473e26a4e3aa02b5ada0354fb30bf60118df956dc5ca3601c2133176d85b
MD5 a1477bae9039f97ab71db10d3e7c57fe
SHA1 9e6535672a98de8e89d0352df2369765092ccffd
SHA512 d4a4f20278cddad2ffee8ec180cb37a53e99b619960e92eae9a2d2f3e6af72d1fb08a542d76aee503832b44db7b70e63496a1d08591eee465e650b67a5f4967b
TLSH
T162615D80B514C8B1FFD83C395799327B76B4E5E5AA8B1F1F3F79CA388A2A7178140184
MD5 SHA1 SHA512 TLSH

Submit Download

62007628-77f7-456d-9c7d-c5feb7e1e336.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\62007628-77f7-456d-9c7d-c5feb7e1e336.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

18e5a1e3-01e7-43b0-bff1-d54d8caf6bec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18e5a1e3-01e7-43b0-bff1-d54d8caf6bec.tmp
Size 8KB
SHA256 19a1860d6032ede3b415e89e7e288fc5864a25406f49729c2f20cb67edf2a5b7
MD5 5da66ca5e2d8b876fa4a03a9100c7fa4
SHA1 5210f719b59f0ceebebde4cf3a5dbf2f586c5a7b
SHA512 9341c7bed09c02904acabfda275a5d8b295bc68bbcb109e3b9e2e5382f4895b7b376276ecf60d2bdf5b477d7a1c126f361f1170e36f687af99b2f10f3dd12622
SSDEEP 192:D1JXOtj1/ZzWvcWvT2VaaIJ1FWJxJpIS26JoGJFJUFkJj0EEJJifaiMiqJ9JhJSs:D1JXOtj1/ZzWkWL2Vaam1FsjpIS5o8PK
TLSH
T16F0270F386E8C66DCA1152F1EB183E2BCE59152853683C67C9D5EE4BE3D20B2E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1bd240fc-3f88-461d-8019-a2b0f6558949.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1bd240fc-3f88-461d-8019-a2b0f6558949.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

2cb91b74-899e-47d4-bb08-50b9c3d92362.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2cb91b74-899e-47d4-bb08-50b9c3d92362.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

6d5180b4-3b32-4bcd-af90-a74c4ef2159c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d5180b4-3b32-4bcd-af90-a74c4ef2159c.tmp
Size 8KB
SHA256 e788df65860e13f1cbc118b1a84dc7643ee83cd4c763044d47f90f73f6894904
MD5 9e7777c5b2148036549d0b3468254bcd
SHA1 699d3653c6c5c3e50964a342f0ea9751f6fce670
SHA512 0b11fb642a4c94055c0c6b370ff6fd4d9b439703deff2c318dcb36af7be4399957d62391770a47c6eb6235327f48292a9a18f791a67dac7d02255fd38af13f21
SSDEEP 192:D1JXOtj1/ZzWvcWvT+aaIJPJNJGFWJxJpIS26JoGJFJUFkJj0EEJJifaiMiqJT+g:D1JXOtj1/ZzWkWL+aamRXGFsjpIS5o8k
TLSH
T1250270F386E8C66DCA1152F1EB183E2BCE591528536C3C67C9D5EE4BE3D20B2E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9794ebd3f1988e803323c3be832cd0746977e2b25a55ae0584a74c21710591db
MD5 52afe207b984f4e7ab19a46aba93811d
SHA1 23a627fd0d5913b3939f8f43bdad95343de8d32f
SHA512 ecbb67952792806b24a4f2290abfb54e057ccc7ced5a556dce25887f03ce68581b272396e587979478dc0102d031262d36b8119b393f924a561deaf47dd5498d
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXorv7:OtfFvpopPxrB4RhfoT7
TLSH
T18CB2351571BA021138FE690881B59B2F464232733259E73B7FBD14A69E6BF085CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b15cb47f-4b02-4480-98bf-0c612ad96d77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b15cb47f-4b02-4480-98bf-0c612ad96d77.tmp
Size 414B
SHA256 ef929099971c505cee6de2b9df9062866cee05e90ab9cd862d1dcab1e4a149f1
MD5 5f2bad976f26f9cdc03388bebebade73
SHA1 8b5285dd064e04ff8de594800d08c04fab281ef9
SHA512 5f7e50a0a2903e731173c4c8d622d48d1fcfba5839130f8015aa7eb6a392d979b7b61ab80915d63eacecb91ed5e368db3869af22c9c60c8dfc67fffe23c56b90
TLSH
T1ACE02BF5CC19EC7709FC0F2950540685EA4123572B80848F7B3CC10D8FF163685CA96C
MD5 SHA1 SHA512 TLSH

Submit Download

c6e69e81-83e3-4119-b3c5-3cd4a6597f3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6e69e81-83e3-4119-b3c5-3cd4a6597f3c.tmp
Size 12KB
SHA256 0508a5f8b4baceae60a3066c8c5a1a37b1a78aa11f1fc0099d12abe8f43b8364
MD5 3f79a49ebeded75c240209689427fc02
SHA1 933a29fa379308e30d1b48e137416709a9f053f8
SHA512 8d3d4dfbccb4ce80d0cd7efa5cd5d8ce8c53ffc355dfa69099f986a105e29f36bd396046c3c0ca44b4ea39ea82e8af0f6d227ec5e3ddbce7f884852e6633ca22
SSDEEP 192:sxZBRykN/fzswQZZ5qzodpFAQHW6+WNf4crQ/YbIeofYZh9IIgjRJ:sxZBTN/fzswOZ5RrHbQ//FZYZcjb
TLSH
T1FB42D816AE38A93B9CC7D209B615BF53E3FD5032A0901E48A6FCC91C15E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca602057-ff4e-40bc-8ac3-6165b1747ba5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ca602057-ff4e-40bc-8ac3-6165b1747ba5.tmp
Size 12KB
SHA256 bd531acc9101462dff2c8520b45d134fccd2674b7bfe145331319c4c52737384
MD5 2022e2c945cb0ae523a3b06b90068b99
SHA1 1f490cdd2909b13514d017bc030f6de379ce210a
SHA512 c88ad2d4c1ad55bf4217dc0c91ae27d7945298ab3bd977d54a9c9b699cff1ac48f4e26542bfad5ef2f1d874d55ca000c502e4c4022d78d11903f2469a3726637
SSDEEP 192:sxZBRykN/fzsBQZZ5qzodpFAQHW6+WNf4crQqfI/YbIWofYZh9IIg5URJ:sxZBTN/fzsBOZ5RrHbQ/L/FhYZc+b
TLSH
T17942D716AD38AE7B9CCBD219B654BB57E3FD5032A0901E48A6FCCE1C15E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1485e58-1bbc-491d-a398-d7a96aac51d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1485e58-1bbc-491d-a398-d7a96aac51d1.tmp
Size 12KB
SHA256 12f2c2989bd2d281d8437d857c652345d3db7607c479108570b3f95cbb0dbbde
MD5 be71d8987b6bba3befa777090ec40419
SHA1 f409a6c7f2a5b3fe9df065a890f57c7019a7e0b1
SHA512 30cb94feb90f83fbb1cb10514832ff5557fef25099d4270a5154f2b3499fa4338ead463a9bf2a22e8a5fbcfb254fd6a52eac8d635b24e2186fd082d421458b53
SSDEEP 192:sxZBRykN/fzsRQZZ5qzodpFAQHW6+WNf4crQ/YbIeofYZh9IIg5URJ:sxZBTN/fzsROZ5RrHbQ//FZYZc+b
TLSH
T1A042D716AE38AE7B9CC7D219B655BF53E3FD5032A0901E48A6FCCA1C05E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 d83febb1ea0a0cf658446bab0be10721009f5aa6ddcd6c29b21c84cb8d87a26c
MD5 5dedb701de71768592a6e29e0a9a47d1
SHA1 0c38f71519f2ed9e0bed7ea5669c76f4c024ae61
SHA512 28edc8c2795badf5f4b782c0238a34322ba12ada46a5b77dbdf76091e42f419e86336be303636955bec3e86c95e2283a23446e2e1d5b79483160deb4206ca703
SSDEEP 384:ntiFiZcI63sN18TUNTUlIm25mg53nKzfMBP0q1Bsa+VY2NgL/7IzToe:kFQ63QwgSovBP02BhglN
TLSH
T158C24936EC94D9BBECEB8FD6AB4A7A07DEF01163819C9AC4DAD85D1D009719D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a25bd73fece780775d054da605dd04f4fe24fdb895a366b811abca8d0186b5a3
MD5 9f8138fc94c02c1a5e2ad72b819499fc
SHA1 afc970a388aff53390acfdf0ed259a016554c231
SHA512 c379736d8d18e81d4cbb0312698a1597052e34c8cafe6fe547cc0e69fb349b128c19950097d96b8a12caa5c64a691bd29836c710a0867d921d74ed208a3de6d7
MD5 SHA1 SHA512

Submit Download

c9e199d7-68bf-482c-a84e-b9816e8ae172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c9e199d7-68bf-482c-a84e-b9816e8ae172.tmp
Size 26KB
SHA256 d389832c9f8030b7099055f42af1b2852f9fdda2ad75d4273d7dd44cba5cbfd6
MD5 36987c9a13e9e6eb53e9a4fce682ea57
SHA1 fadf28e99473ead1054662dc0ed8b1ce0e8768a8
SHA512 c25c683dad6dedfd6c3b8279b751239c01238e6a7d76981cb51de31917b338c49b952f34d2f8ab16d1ca14ef9d236fcf62c473e4a59fa23956daa1d0a043bac5
SSDEEP 384:nKiFzQkUSvm3sNQ8TUNTUlI4wD5mgpewKzfMBP0q+GctW9vaTZc0gL/7IzvIIlT:BFdm3JwgqLwBP0Cn9vaTZcoLV
TLSH
T18EC24B36E894DE6BEDEB8BD5A74E3607DEE04253C59C5AC4DAC95C2C00CB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2ffaf10-4462-4e8d-b508-45d12f73aed7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2ffaf10-4462-4e8d-b508-45d12f73aed7.tmp
Size 392B
SHA256 8c73b6af2da7f9cc8bcdd4364fb960e5a9283753adce16742390035eccc71db5
MD5 89ac5f928fc4ce01e3436e0f86ea1540
SHA1 1f1b9d6e917d37dc66838de1f8a502592379da35
SHA512 bf10158c9b819f3f15ef1b7b2cb4fe097f4c3e58a619d83434fb7e028f5d64bb29b146d3fc6665f2f845d33adee839a7f57ccb9ae734ac761ce28a51361b3bbe
MD5 SHA1 SHA512

Submit Download

ec580405-87bd-424a-a5c1-e32a9fdd3f42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec580405-87bd-424a-a5c1-e32a9fdd3f42.tmp
Size 26KB
SHA256 e023cffc4f436a08bcf3c7b5ef1fc52ad24c0707f1de3a009f26253dd383a3b6
MD5 1b2da6c96a3e45ea1fbb8b42cd90b9b4
SHA1 2164333445e3383651fb7bcff8318081c9b074a0
SHA512 a072112530aeec9ac5397dfd83d269aff48e007c772b0d42ee26c545792512f45e6c7b75eff891abcc2d783ea810e1eab53bafad9cdeb18e1da2d39075422057
SSDEEP 384:noiFzQkUSvm3sNQ8TUNTUlI4wD5mgvewKzfMBP0q+GctW9vaTZc0gL/7IzvIIlT:zFdm3JwgqJwBP0Cn9vaTZcoLV
TLSH
T14BC24B36E894DE6BEDEB8BD5A74E3607DEE04253C59C5AC4DAC95D2C00CB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 943dfdbcbbe8418ba67b4b313c537bd348195875655873e51c3b5dede175bb95
MD5 a18480f2fc51b254b047f374e3564faa
SHA1 4dc4c7f335808b49ad1db8793d5ebea90376d1e5
SHA512 7d51eec89b819e813555f79c18fb4268cdb428e86fbf547dec9bf12dc8fba8dd12618c370397a606858deb8b1e3dcf3b106e4cb7658515087c051c9db8afa182
TLSH
T1C1412658A6EA1108B3B77E5AAFF6A86E487A79772F46905D00110E4F0773A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.contile.json
Size 4KB
SHA256 d754aee238a2f42a736f7fcc1ec484473148a3e626835f0fdb535ccefafb9085
MD5 b8fa382d402282daa5535e68c07b850e
SHA1 67082cf0c5e575bf80ddc76e58a2fd62f7a610cc
SHA512 5cbd060e12988fe54307c97b0c52fba8d14b4b2959b61f2b02a16e029842279d3dc9d78b595afb7a3d20904ae7045472e34ac079a1ec340f8639f290b4b8b9c2
SSDEEP 96:TKchMJGmSmo+ezbT+mRKmHnyJIZR9mslz:BMM1/z+mRKky4R9/F
TLSH
T151A1B78B85F044121B71EAE61C5B369CF007B00BEDE09E6C71AA995584D87BE81DB9DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 0f3d4356a0f5b4c176c5a7c5a2a1ce27f3c58edd939332ba0808e9ed5ba8a028
MD5 7a9a5238d87daa817726676328a3fb17
SHA1 45fd075b27ec30f37506cc8ebea7316e082fb995
SHA512 2f4a1c4dac94201155ee4950205c340cd9ecafe458247d5a881e2eeed06e4f8f4375bfe13cbb8357e4f16ce6cd3b5be3b8015c5ff566626f19908511faa76346
SSDEEP 768:Ny3NqVYQsDSyKn1Gv7pIi+ACuWF9IiB51oWXJbOKxSaGuXN+GPLOOr/n1c:c9qvw1RCu29IMxbOKxSaIGPK
TLSH
T12373F9E3A6B8B1FB0B9037C72C0F796B56B10195E34501C9EDEDCA1C81DD698233A5AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 c75fed004ba7ce65325cca068366eceb815f5bf523824fc3441355a1d863b126
MD5 ced9a68e5e3d5f537cbc55af82fbecfa
SHA1 27f73591750e576ce1f101a143c088655eb97423
SHA512 b1710b7a3cf2ce4dd1228d95d93bd1a50bbf0b0a1d832dd8cbe026f522d999f421a3ef8eed3bb89027f710c9794dee2c2bcd90eb6181e9e62ae1917744ac1c71
SSDEEP 1536:cbUYQh7f/pZwyCy2T/tP2wMq/vblQiate5:cbUdh7f/b6tuwMage5
TLSH
T1F97309E397A8B1BB1BD177CB2C4B795B77E50149E34102C9ECEACA1C80CC754127A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17521

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\doomed\17521
Size 258KB
SHA256 b11fd860fd275ca85dd70b2e0f46e52d51b024346bd8d134c9818541ff53d5a8
MD5 f87523105825294c739411209020ff77
SHA1 ea378b5f061901e6fd8d8123e20c0581d4eba27a
SHA512 1eb7989707e11f7b8bf7beb089ed0cae741f8fa97b3b31f59f46c003d8fb008eca68de54dc5b1a617c77d77836bb538c22269fb3d11b7b3cf8cfaa10c4359c46
SSDEEP 1536:qYCYFsqMt2O+nfzd3SProHdvkcI0SqkBVRRvVc8UE+T5PBMmW6ZJBbeyk9UZK8C4:XMEO+nPH2cNSjBVRR9uPCmWU2U22Zjbd
TLSH
T18144F8F796AC30FB075286DC2C1D72CF73AF413ADB5209DAFC688148D2C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31358

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\doomed\31358
Size 52B
SHA256 30ac1e1cd87ad0279722ae8e6da9be1818cedd654c070022d248717d3fa50064
MD5 3aad869974d54a29dd4a4137d2ba2198
SHA1 0a04e0b777a006a0b43eef071cf8124f919a1511
SHA512 3e5eed6a628951175326880426e50b318b63025c7eee205ce1b0e94839a033ba53fac84b5cfcd6035f97b0df92bb30fa9cc3e2a010de3a03af1bfd0155e67d6c
TLSH
T12C90021852618520E91480310A80C5B496153D5084C50662359507DA54534FE4000210
MD5 SHA1 SHA512 TLSH

Submit Download

8311

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\doomed\8311
Size 258KB
SHA256 aaabbd3d1246293d1c88ae6c15c72f87dba4451a5deb754ad6757218ee52e73c
MD5 cf7874f479b14c8aa41c8aca75bae9cc
SHA1 6f3022fcb32ab34e46d1ab6a4234e468522e0a79
SHA512 5ceff855c26ccf249a484a4ecb8837b5c79fd06524025bc6e4c302d50a562f2cb36634c2e93ad59086394a9f610ce2ec1cbe3b76a26e1f601ede4c33b61c432a
SSDEEP 1536:kYCYPsqMt2O+nfzd3SProMAvkcI0SqkBVRRvVc8UE+T5PBMmW6ZJBbeyk9UZK8Cq:3MEO+nPM1cNSjBVRR9uPCmWU2U22Zj3h
TLSH
T1E944F7F796AC30FB075286DC2C1D72CF73AF4139DB5209DAFC688148D2C9A6510B679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 7250fc076b7a906c299b1d6ff9a379d084fcdd01adb5edc7d3495bbddec4540a
MD5 38081f60f653fd6a41a07dbdaff1d5b8
SHA1 a23dde0fb7d782b0b3bcc75d9ecd96d6db5960d0
SHA512 ab53d087b2ec7b7f4421e0f82dec7eddfea57803051cb7000fe2fdabe8cef503f03450671b9a324b5ef79aa717b4da7d82f1b957316c81b012313a54458e7be5
SSDEEP 384:HXwIiO024YTWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA7Xcge:36ZYTWTToXJWTTogB7S/AmVAf+hRM2s1
TLSH
T1C1727D7D9F413CAC275790E4C8B983558D18B2A7DFF5C02D269C3E09CA88A5A70F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 1f3590190d9c9d6cb7d491cb59d90149f06ee550f7d264113de3f546e44da010
MD5 741e32cc079bd7ff6b38f8ac175f883c
SHA1 3e52cbf3d67cff30943d0ef80fdd91e1ffae4298
SHA512 e73222b07f495ee0476a9285fab991f7deaed61ac21c79b78bc4ebdf73374b255981b3ebb6b88e6c4de9bfe3da585badcf16720590b698ede55d8b84f3762caa
SSDEEP 384:HGNQiO024YZWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAl:mDZYZWTToXJWTTogB7S/AmVAf+hRMU
TLSH
T11B728E7D8F013CAD2B5790E4C8B583598D18B6E7DFF6C06D26883D09C988A6A71F944F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 56e5de66d60ac77cf4913c896c5b56d70c07a0d630974c67a3d3816089594482
MD5 99d538524d9fe52de62c17beaa3eaf26
SHA1 71e64ec8240719e2237ed31ede564a5d227f495c
SHA512 5c567d9d77d634215c10bdeae2ff0a9fef7f56121e8395aa43b9285c61ae9fa098c9463f9ef5604b6421e5a9743fa2780b21f0388a8a2b8aef17dbdc4de9caf2
SSDEEP 3072:X3lJgyMz0v8Gsf0ADLzt05N5FXgan2awUi8l:FJO0lsfHh0DXga2awS
TLSH
T106B3AFF7CFA2893D69FFD42CA6C2893EFD222444B3A73019C9136B1452C6BB46675748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 de35e655ea047b50a4655de8dac8ed3c3727a2f42c40c73c2c0d91b7d8480e87
MD5 13a9b47aefdbff312cf0cf79bdb9843c
SHA1 eb2d7af31796442d4d8d86e54d4ba5e824dcac04
SHA512 11a55ff172f67b4858d09c153ac18b4435487927ce8692a153e202e5a093ecee5a08b4f9472d92c04c7484601097e0fc5c611bf28b6fe9cf3658103604111db6
SSDEEP 3072:j3lJgyMzxwKSf0ADLzt05N5FXgan2awUi8B:pJOx9SfHh0DXga2awU
TLSH
T1CAA3AEF6DFA2893D65FFD02CA7D2893EFD222440B3A73019C9236B1452C6BB46675748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5065889-51fe-4eb9-ac8a-fabc644c212e.zip

Path C:\Users\Admin\AppData\Local\Temp\e5065889-51fe-4eb9-ac8a-fabc644c212e.zip
Size 3.8MB
SHA256 ab91a4abb6c9aaf116346f6b7d0cc2f5e396829d877aaea18ac218e678d347de
MD5 5a4c6bffc7848097c121031a375014fc
SHA1 2d0f08e751b9c5fa8ebdc8f5d297d61ec16fc67d
SHA512 becd09ca873dee5460a71db77b8b191436975ff76393a22d4a27f0fbba80701b174e13795427ff0be778c6dcb1ae5e9ce04eec54551bf6c908277dafabd8efa3
SSDEEP 49152:YpNmO8eOBBPxPBBagRaMbEallFr9oADy7nlaT9Ofqt+h+0dQqXu1Oyk99MSiQzEK:YnmOCa/Tur9Q8UfqtW+07X8K/zE8p7
TLSH
T19006F17DD65C1A0BCDCF83BA850C2FC28C4C4FA68054A96B7A6B99715CA31E6FF74844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon-1

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\addonStartup.json.lz4
Size 4KB
SHA256 f5eb4ed92dfd9f47a84b70b282cde6e82867c512942ee8a8e7cc5848d3ebce3e
MD5 2e0d3bb6d95e93d3039ccc0d4ba9ce7a
SHA1 ba2a4fd19e9e247885569ea917286679fc187e9d
SHA512 32c7890f499fc7fbbc214f7ad176e594f1394d47198bd52480af2ba846241bc0346bf81beaa0ab84e005e84b4819d9789934327b12019417b50e04ef35fe2b21
SSDEEP 96:NMi4sHNw6M2xWGhD41McGvmHhF+rUpO1LnOYvhQhIRhN:Nq52xxhD8lGvm6ApwnHUuhN
TLSH
T148A16D7AD541EFA2FE32C04758D93FB2E6959B7410A9C4D4F17A71194C64AB35705380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\broadcast-listeners.json
Size 209B
SHA256 63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24
MD5 97c3738563a9448365a735f5f29ed3d5
SHA1 15a81433236ca6e6ecc4e1c8d0fdb8523b265c57
SHA512 ed98f42d5d02ab53a9e50f80b312bed4b5d05d053bec582cf9d619ef91251e86cf4f4d1123c645500fc1dc4673b49a8b7badd3f3a39f565ac643ca4fd0157ae6
TLSH
T159D0220E14177C7F4B486229F00827800B9A10093270A03DC3AEA0540A2AAFC4008190
MD5 SHA1 SHA512 TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\broadcast-listeners.json
Size 221B
SHA256 52ab298d0e6f477ecb5171743c01d8e139bf9cfffaabd340cec8df1463bb11b4
MD5 d14ab224b618e5d902c0a6e1c233ddd2
SHA1 b65a76e2d76f54ef3ff63b61857416e5e2d77852
SHA512 5a24619d35364bb700fd7318775a41b84b2f3ed15d62895d69e8aa0fd4470de8df0e98135090522faa79732064c36a5bc00331cfd2b28c674f724851930911c6
TLSH
T174D0221E18173C7F8B88A63AF4052B924B9A200E3270E03EC3AE25540A2EAEC8009190
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 8de9ff9a3d272b59ce1c968b8cedf2dcce93176473d56d98bfd408d0e26edda7
MD5 a95a11bdd43ce3e7f288fa9cc9eddab4
SHA1 bd7b213ec654e5421be0654cab5af5cefc7d6441
SHA512 3ad6bd4327878b2209c7a874991301086f668a6980921877e6dc489864a7287672a4b3374491214e428476e943c2daf2146d016c19da8a146c3d74e2121e9e23
SSDEEP 192:K1d66JozGzgCl6mc0d4oPOv5zbosZGv8yjvBO+:0d66JozGzgC1jmogbosZGv8yjvF
TLSH
T181E123A4EA29953FC408027BCCA61F414F393856988F3F1971DD651C2C972DD7A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9868defe4608e14a22edbcf73823072147dbe6755775ce79442206af4675b84d
MD5 1121dbb796bb0ea26b2f03c0e1976fa3
SHA1 921bbfd9fe50e4d02e0279e8cfbaba8a03cf2399
SHA512 2d1cb98551b42bf6458c866bde91e2aa8899bdeffc5a72e7155e5276e7c51dd43a6e628c6fb07a33f91c1e12316abd1d9decd23538e5c6b9ebaaf280a105dd63
SSDEEP 192:RoPOv5zbowbGv8yjvBOx1d66JozGzgCl6mc0d:RogbowbGv8yjvyd66JozGzgC1j
TLSH
T19AD120A4EA29563FC408027BCCA51F414E3A3856988F7F1931DD65082D9B2DE7A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 5b9b04ae1c9930bad85f7cfd1bf321f67a61d584ef22ddccec941e65d1e5aa02
MD5 9168041b7bfff084521faec451a4c6d6
SHA1 e3d3372d0eecd0675f31738cc7d4755fe0aa4145
SHA512 b9298e30cfccf4a88947288bc6885903a356b7f39cd3b690706d71642b924b55270a91100587038589f3df5840d219605b932423d9dd8dc1ecba97204112b862
SSDEEP 768:hZkE/TmizUGcmhuuBKiHEFmFyZ8Fqubtbwb9bBb9bAbIbvbmvHYpa:xTmUBtvHH
TLSH
T1BAF20E44EB1E953FD42812BBDCA50B102F39F88959192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 ecf44adea765fb6fe1cbec7f25a08e2ac1f94e0ccfbcc779b316431e3dc8ba49
MD5 dc0f47823179aef255d5af76034b1ed1
SHA1 c61a11d45cedcb4202a24485140d9e6cba855e38
SHA512 794f85bc3af2b699a38dfff4c4d4bd87197a2cdecf8c5ce6d171756d48196e57eb0bd44b4d7941e9adcfad17c86998e72358b38aee3cfab8c3b761899807c176
SSDEEP 768:hQWTmizUGcmhuuBKiHEFmFyZ8Fqubtbwb9bBb9bAbIbvbmvHYpEE/:nTmUBtvHo
TLSH
T19EF20E44EB1E953FD42812BBDCA50B102F39F88959192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 e73247c4de4dcde1636e41294a5ec1d11897d157ef3b75d82fb75a6619b603a3
MD5 a3a703bd31ae237be104cef82ab88fe8
SHA1 a00f35d35a6c9196fc03ce71be1844e1b909ac9f
SHA512 43c95a7e1e5dc7c23b210582fd07376d1a9bf64c0df187ac41258a7f5685edb233ad88c4a06f72dfcc0e3354df06e6700c14d57d7d10c39165504e7a7248d8c3
SSDEEP 768:OTmizUGcmhuuBKiHEFmFyZ8Fqubtbwb9bBb9bAbIbvbmvHYppQkE/:OTmUBtvHt
TLSH
T1E8F20E44EB1E953FD42812BBDCA50B102F39F88959192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 7cbc343a1d1c387850965989eb89753e05012505606a2ce21a5fcb7798948571
MD5 ec2287472030395c69c211a67afdf7e0
SHA1 d5f94934ff527fec02ab1530ade0f21422c8d237
SHA512 42051d2b9769ff315267454e68c4d6b9076478cfda834e3fd5d6f3fc2ded8da3931f19d7c26527de505333bc6962e262322ee80b169a6837efb8c36d84b0a945
SSDEEP 768:MEoQWTmizUGcmhuuBKiHEFmFyZ8Fqubtbwb9bBb9bAbIbvbmvHYpa:cTmUBtvHH
TLSH
T1AAF20E44EB1E953FD42812BBDCA50B102F39F88959192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 8233c5997bd8accf10b31c3b3d2e240c16c574c1e7bdccb5b30805027cf06fb3
MD5 9c7c460428f74b533d4483138d8625d0
SHA1 cdb1f0391d7e86e9c9f85b603b5cbfa8ab006610
SHA512 7a5b82fdd5fd3923146f5e8f40f6c19826010762614998b2d6b2b9e84ee777a2ee799050e3cd7d26a81f21e824034c1b83eb1068bccb5ca363f6f8853d0bf22e
SSDEEP 768:ME/TmizUGcmhuuBKiHEFmFyZ8Fqubtbwb9bBb9bAbIbvbmvHYppQ6:1TmUBtvHi
TLSH
T130F20E44EB1E953FD42812BBDCA50B102F39F88959192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\events\events
Size 1KB
SHA256 1485d0d3207d355fd302f0af67bc234f8c4623d230b308822f27e23ff7c3ce7f
MD5 2713836881c063e2213d7ae0a32e0f9d
SHA1 8d8561a5e7c06d98a50a4eb0c3ef8744c4521439
SHA512 60a4226062836358590aa65fd539d0cc90d8560d4e8a30405c285c453b49b5844bdc6aaf3dd5eac1a165d33159b94d076119a70dfb346ddc8267c6aa246d8aad
TLSH
T128116ADC3EBD4D6BA8C7E2FC7441068EA3664A8605471C434D12DF8DDD91AD932AE42D
MD5 SHA1 SHA512 TLSH

Submit Download

20622df6-e422-4a1a-bc63-770eb3729f41

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\20622df6-e422-4a1a-bc63-770eb3729f41
Size 2KB
SHA256 0692c9066a63c142e767536ed771cadebd17412e3b2f2f8b903541963f8ee4ba
MD5 abf7ebf31a43f3f6208d4baf8f61bbef
SHA1 cf192de71ff00cc110ca3d87e69d2aeef828c287
SHA512 18dfa2486c324037a762a0785d4a0f7214c5b2522936f2bcbfb32c43f8f00d21a3820efca6ecf17f0504711f40aad515c92a0f257b373d0148f3b7348390a1b5
TLSH
T1C141439C79B85C76AC9AF15E90C1238A47744E4350C26C836E41DF0CCCE665E237A02B
MD5 SHA1 SHA512 TLSH

Submit Download

3e3a18af-9c42-4e70-8bc7-51dd641032e8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\3e3a18af-9c42-4e70-8bc7-51dd641032e8
Size 15KB
SHA256 4f1ed8bf6425ff12ca1e6ffe032ddbcd6be7c9badcde2ab4c058aabdb9ba7433
MD5 a3a82770a4546e079353a625e9f1e313
SHA1 2870a0124bd44a922db91416597c27eae86e3881
SHA512 769d81851b8638a913312047bb86f19fd371df173a9d55499691001b9ce4313aa28f344daf4cad6497ab7e2f4a85a35f404ec59b01c390fee65190e26c058c6d
SSDEEP 192:rRmPyNBHm1YnbsxyoUN3bJWoG49GLCfWtzI7PbSUUdmBrTNEOmfGNEAje:rRmKNGWuC+t87PbSUUdYB/m+Nje
TLSH
T1CD72E8162820597A8651E39994FCBFC3E2F528CF4C419FCE9BE47D085DEE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66c96215-2a61-4f2b-b3f0-862b1cbddfbd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\66c96215-2a61-4f2b-b3f0-862b1cbddfbd
Size 235B
SHA256 e4dc83b89390a3a8aa67c377ed2a3016bfa538a5d07db75bea71e5e2a0c57b14
MD5 b2948d32c1c5507014466d28431db99c
SHA1 4e50d88a0d171ba92673dadd5797655ef6ab5bb3
SHA512 d2cf8dc3192580a570a8a05a13d703bbb8be5e625355767cd33833f56ea276e798ba206b46fc378ea9b58cd5f57087a9f81abad55e475c08d208256a24b3e9da
TLSH
T1F3D097E558F8272C08005F03B0E0A9DA30854C3314B86820A96146788DFEAC4016282A
MD5 SHA1 SHA512 TLSH

Submit Download

94e2db3a-3515-44c7-8fac-01d450eaf066

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\94e2db3a-3515-44c7-8fac-01d450eaf066
Size 886B
SHA256 99bda7cc5da7bfd8bb4116918f3d42895e01794f09467cb8d833266f19fe8cb0
MD5 53ab027028f58b3441421a7a6649493e
SHA1 3282cadce8edef1a9799b43180bbc4bb480c5df9
SHA512 247963501ec7a93a59ef7f14ffa7ad96d16477423ebb0f4d5c666d9176fe0200226adb403b2e6ace29e54d718f9b8d57eabc34d20c2a807c9359cd56d8e308df
TLSH
T1EE1100909636BC72CC38928B84E47B4286B47023C0C769187D914F284CFF10E979B207
MD5 SHA1 SHA512 TLSH

Submit Download

b5df9cc3-491a-42cb-af07-e056652a2c03

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\b5df9cc3-491a-42cb-af07-e056652a2c03
Size 883B
SHA256 f1d2074b7e76aec3779679c30ffb81c28de5412ff9f5b82e4b0a83dc5d633c10
MD5 ac9a09744ab03391fc1f131a9f2b7802
SHA1 15847aac141f714aaa7db877a54bf9e103265ea7
SHA512 4f96c24f8652cda5d98d7d89bdf07cd5679ca3b3c69595fc436268b427223079d38bd7145d76ff605790d5fad222db4908964a1fbe21861481717798f54eebac
TLSH
T1BF11009096327872CC7CA14BC5A5374287B87523C0C6A5083DA55E180CFF50E97AB14B
MD5 SHA1 SHA512 TLSH

Submit Download

d56c3789-b706-454f-9edc-f8dbb81143df

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\d56c3789-b706-454f-9edc-f8dbb81143df
Size 235B
SHA256 666349b1be4cd768051e7f7839bf4e7592827f2a4e3f5efef6cab4f5e10d7c7a
MD5 b71b6eb9a943b555b6eed509cad6f24a
SHA1 34ae05172d25fdd143b3827991bef0ba9dd696f5
SHA512 65c5122607a4526228b372fd314ff99b626b879709b9bcd76b9c11ddf05c3b58ed3607bdd57ffd60db95fff6d67cc3d11052c713ab6955af7538178e0bbd5816
TLSH
T161D097E43489276E08040F03B0E0A9C73088CC3360785850869100749EF9DC8122180A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\extensions.json
Size 14KB
SHA256 0acc10790033cd2500356283104aec1f6fb9d136f03b3a28188ff08122d976c9
MD5 fefa1934a6bc305995a5c0bfeea10c4f
SHA1 7151986a3dd03d2c7a7f79ea6b8d2ab899a21462
SHA512 365ed8a2fb345ed081b5cceda94b1893680cde1be29d42ddd1266739bc4bb848e71a4de42e58de63595ae9d9a914b3ca8ea5839eaba56dd68f54452380f261ab
SSDEEP 384:xkI4vDUmldvmC8dhW294zK96oSL4HgL4PYL4HtL4H7L4HC:CI4bRfuXP4C6v4i4i4N4H4i
TLSH
T13362421545049EB8298EA79BAA36BD01C37D473B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 7KB
SHA256 bfaa90d9719e580168ee06bed8331e9cf7d0d9bc0cfae6580450085839dcef35
MD5 745c1f9e2c4d96987cc2808a06468484
SHA1 54999001218142e92dc6e261423eda1615cd67ac
SHA512 9f59bfea9cb7e2c177260f646342307f0ec36f2a1ac042a673eee0d585b1d11543c83ea7042c118fc3979f08f304399f045d789652a0a058be1d8711c5c49329
SSDEEP 96:xHrJ9TUdGLqGq8ffLnFObzScMSSlSdv9jaenWHbQWOBw8838L4cnuVCL5GS:RJmGGR8ffLFWMSSVhbQTBw88zU/
TLSH
T1EEF11E789508CB7F64B677BC6C6489305AB2013BBBBF68C350B954C5011CF3442E96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 7KB
SHA256 25505f729ea4e4251b38a7ae8aa82ad04806199b8e67f1fe0a933cd906a564e0
MD5 87614e759cc7cd0dd5e3fa3a19b49be7
SHA1 319bbdfbaf890761d2cb81680cf6455ce8ba961b
SHA512 e18c688bafd3448429f100d3699d1e82c4a3c8183d1f89f0016b7bb63b4c9c99d1111f3b6b3b84e989c03d8e5d626cbdc268388fa44fa2857a3e96616fd8f5e4
SSDEEP 96:xHrJUTUdGLqGq8f3LnFObzScMSSlSdv9jaenWHbQW/Bw88n8L4cnuVCL5GS:RJNGGR8f3LFWMSSVhbQuBw88jU/
TLSH
T15FE12F7895088F6F64B6777C6C6888719AB2013B7BBF68C750BA94C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 11KB
SHA256 00a3e6bf3b515521b76852723784692aab650bc57a16ac7717a38660691ac0c8
MD5 e4bfd4ceeb08e1825f0577f5012b871b
SHA1 744d6c5b0e8e7068473137dedeb0d8c2ce623943
SHA512 c8abfc421baddc3e4394e291c76fd2f98c40f2e8a47c9ea7ee3d220162927cc7933d9c0a7f3f6aefd62fe42fbc1aa9e89afda7565a3f02dc9aa93b883248165e
SSDEEP 192:7JmGGR8ffLFWMSSVoRQQwhaOBw88qEO41m/LX/:7cGxsRQQawh2j/
TLSH
T1B132EE7C56098B3F25B672BD6C244DB05A6101377BBFBCD345B988C2141CF2441EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 6KB
SHA256 6252df609601488977ebae87d55b4a0e1c198f1c3719721af0a21ce686669f16
MD5 72f6868cab4b2e3001aa7b4dce7aa01b
SHA1 afffcd01c8e68f8cdd8a5b1171227a806596cae2
SHA512 08b0119bf062c83a216a634f3d5387d23dcaf3e56fafc6b12f394f294cd1400c8f296710c693b2fce80b018763ae7c39a10c5d128a663f735cd9a372d31093ca
SSDEEP 96:xHrJUTUdGLqGq8f3LnF1zScMSSlSdv9jaenWHbQW/Bw88n8L4cnuVCLM:RJNGGR8f3LFxMSSVhbQuBw88jUo
TLSH
T1BCE12E7895088F6F64B6777C6C6888719AB2013B77BF68C750BA94C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 6KB
SHA256 8b05410a8a30ccd5029e447e514ac5f2bf38501f65a52a95bd38d60e059c6588
MD5 6bfa9e8e5d66072f46dc604b9fa60ebf
SHA1 53e46b297aa6d0a9cf0c83236a2bf75e6c84aaa3
SHA512 d9a48414e53938091475cfce1cd0d96a86047a181d1fab0c7c78eff49d6783e21b284808d6117db6538ef698f06dee00ddc2f5d435d79b0c1b6f05fa73c1be6d
SSDEEP 96:xHrJUTUdGLqGq8f3G51zSeGSSlSdv9jDInWHbQW/Bw88n8L4cnuVCLM:RJNGGR8f3G5LGSScbQuBw88jUo
TLSH
T184E13F7894488B7F74B6776C6C6888715AB2013BB7BF68C750BA54C4011CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\security_state\data.safe.tmp
Size 3.2MB
SHA256 6da263a964cd0c5f2d34c85133fc01db2bfc468a7441241ce3a58e561b5b4cb1
MD5 cd7fbc5167d8895fc2446562265b93db
SHA1 c8efd4d01d23436f7f1468708e8b226483a992c7
SHA512 96b7e65bb1f17c34477ec80f17db518bec80db8d0893276936c62602a587e22ae09f1ea90a407aca8063a32a8fda0fbf8d44ecd0876c60d59742f117f4dc07c4
SSDEEP 49152:59/0pgI2m1sJym1+m1Rm1ZnPyFiikm1vAaK7gQ7PwaZmc6De0m:vqgIoqPyFiilCN/Z+Def
TLSH
T177F54BC65F147982DFC6AF75B1D4C433ADB122C07A9AA8829449C4A27EC73E97F8405F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 33225040b7bb3e28183a7a8968119de9df0468325d6ee5cf5825297a3e212a22
MD5 4e84146a0d1b55a7d65867aba9f6ad3c
SHA1 73411eb7228dfed68250dd5ed87f9073183be792
SHA512 b09bf88af56420cdff87a531e46799cfde718c32b0646c2ea1265c8f83bd394f957e00f0407211dbf36858266467573919deb1f2c3b3f1c47f653b05e79702d7
TLSH
T1A221A782FEAA9DF9356DE2E690C50FE9C718A012414458E0D88DE501189C61ABBAF76E
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 5f7278a9eba3776fae3bb9800bb2e45fbe8140cbc1e0ec0da5699e37a141e277
MD5 0dcb8210b5eb4d73b6a2a7424c40dc40
SHA1 7360b0092eb81f2e25dd099ab13c12c2b14707dd
SHA512 7c2bb86fb5ff01e2f1a26f6d7ba4c1f1451c8d486c2b152a17ca9bd2963dc3d5ea4b146ad97495567b0b0585796bf198e82e5d3363649cf5ce4a19b36979e23f
TLSH
T19E1175C67D0966B62AD0E5C892862F79C7D93122076A15D4F25951030508BAFDACE2D7
MD5 SHA1 SHA512 TLSH

Submit Download

1288

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\1288
Size 2KB
SHA256 e60727aa060f593431e5109643c15041e3f2c9d66b7865b3f7c3308742c86eb8
MD5 eb6e730d990d4e1c09254112d30a4b1d
SHA1 6ebf8ee4552fdf778f4ec8aa98cf6b074d8c3602
SHA512 99aaac9193d9f8da09cf58058cc7e1585c721c65cb5a3f040bfd1edccfe9f5fa3882f90f759b8c1e7ca29a0586cbce912405be4f589fadf02460a84d3cfbb8ce
TLSH
T14E411A3B4C667C087BBDE113A9447E51A63EC1C62FD1D0D21743B9C3DA50A1AAAF809A
MD5 SHA1 SHA512 TLSH

Submit Download

2030

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\2030
Size 1KB
SHA256 bc8f805618c0b0c6ad55c006add9b74a59d4c706f5cfeba7cc60a9d08e43347c
MD5 0734a1eb65a68f3cdaba72ff2a893ac3
SHA1 1ed3e099b225e96e6fc424563a61914042a111ef
SHA512 c18b44714f62379e84ff9a5d8cf8d31171bc83dfd9f7c0897ef03a0192024fef3da1d5e7da00cb4b75e43b346739f967bb79f8b0bb5d068a702ce7e1c289b59a
TLSH
T1432167C69F855D9A3563E011EF3E0122C130558BDE9195AEBD14F987AB15D14904A88A
MD5 SHA1 SHA512 TLSH

Submit Download