hxxp://duckduckgo[.]com

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
108s
max time network
109s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/11/2026, 18:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://duckduckgo.com
Sample261104-xdncmscw4y

Score

5^/10

microsoft discovery persistence phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT. 2 IoCs

phishing microsoft

flow	pid	Process
66	5080	msedge.exe
66	5080	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5080	msedge.exe
3208	chrome.exe
4164	msedge.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3562044790-535044693-348086427-1000\{D0666350-679B-473F-B015-88927E754A6A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3562044790-535044693-348086427-1000\{44741B0E-E292-43B1-9B12-C08CA3797645}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4700	chrome.exe
4700	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of AdjustPrivilegeToken 42 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeDebugPrivilege	4420	firefox.exe
Token: SeDebugPrivilege	4420	firefox.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4420	firefox.exe
4420	firefox.exe
4420	firefox.exe
4420	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5376 wrote to memory of 1536	5376	msedge.exe	80
PID 5376 wrote to memory of 5080	5376	msedge.exe	81
PID 5376 wrote to memory of 3904	5376	msedge.exe	82
PID 5376 wrote to memory of 3904	5376	msedge.exe	82
PID 5376 wrote to memory of 3904	5376	msedge.exe	82
PID 5376 wrote to memory of 4124	5376	msedge.exe	83
PID 5376 wrote to memory of 4124	5376	msedge.exe	83
PID 5376 wrote to memory of 4856	5376	msedge.exe	85
PID 5376 wrote to memory of 4856	5376	msedge.exe	85
PID 5376 wrote to memory of 4856	5376	msedge.exe	85
PID 5376 wrote to memory of 2568	5376	msedge.exe	86
PID 5376 wrote to memory of 2568	5376	msedge.exe	86
PID 5376 wrote to memory of 2568	5376	msedge.exe	86
PID 5376 wrote to memory of 4372	5376	msedge.exe	87
PID 5376 wrote to memory of 3896	5376	msedge.exe	88
PID 5376 wrote to memory of 4372	5376	msedge.exe	87
PID 5376 wrote to memory of 4372	5376	msedge.exe	87
PID 5376 wrote to memory of 3896	5376	msedge.exe	88
PID 5376 wrote to memory of 3896	5376	msedge.exe	88
PID 5376 wrote to memory of 3276	5376	msedge.exe	89
PID 5376 wrote to memory of 4980	5376	msedge.exe	90
PID 5376 wrote to memory of 3276	5376	msedge.exe	89
PID 5376 wrote to memory of 3276	5376	msedge.exe	89
PID 5376 wrote to memory of 4980	5376	msedge.exe	90
PID 5376 wrote to memory of 4980	5376	msedge.exe	90
PID 5376 wrote to memory of 3268	5376	msedge.exe	93
PID 5376 wrote to memory of 3268	5376	msedge.exe	93
PID 5376 wrote to memory of 3268	5376	msedge.exe	93
PID 5376 wrote to memory of 1088	5376	msedge.exe	94
PID 5376 wrote to memory of 5796	5376	msedge.exe	95
PID 5376 wrote to memory of 1088	5376	msedge.exe	94
PID 5376 wrote to memory of 5796	5376	msedge.exe	95
PID 5376 wrote to memory of 276	5376	msedge.exe	97
PID 5376 wrote to memory of 2716	5376	msedge.exe	98
PID 2716 wrote to memory of 1112	2716	msedge.exe	99
PID 5376 wrote to memory of 1624	5376	msedge.exe	100
PID 5376 wrote to memory of 1624	5376	msedge.exe	100
PID 5376 wrote to memory of 5200	5376	msedge.exe	101
PID 5376 wrote to memory of 5200	5376	msedge.exe	101
PID 5376 wrote to memory of 5200	5376	msedge.exe	101
PID 5376 wrote to memory of 6016	5376	msedge.exe	102
PID 5376 wrote to memory of 6016	5376	msedge.exe	102
PID 5376 wrote to memory of 5764	5376	msedge.exe	103
PID 5376 wrote to memory of 4708	5376	msedge.exe	104
PID 5376 wrote to memory of 5144	5376	msedge.exe	105
PID 4700 wrote to memory of 4976	4700	chrome.exe	107
PID 4700 wrote to memory of 1340	4700	chrome.exe	108
PID 4700 wrote to memory of 1340	4700	chrome.exe	108
PID 4700 wrote to memory of 3208	4700	chrome.exe	109
PID 4700 wrote to memory of 4712	4700	chrome.exe	111
PID 4700 wrote to memory of 4712	4700	chrome.exe	111
PID 4700 wrote to memory of 3136	4700	chrome.exe	112
PID 4700 wrote to memory of 3136	4700	chrome.exe	112
PID 4700 wrote to memory of 2724	4700	chrome.exe	113
PID 4700 wrote to memory of 2724	4700	chrome.exe	113
PID 4700 wrote to memory of 3052	4700	chrome.exe	114
PID 4700 wrote to memory of 3052	4700	chrome.exe	114
PID 4700 wrote to memory of 6108	4700	chrome.exe	115
PID 4700 wrote to memory of 6108	4700	chrome.exe	115
PID 4700 wrote to memory of 5448	4700	chrome.exe	116
PID 4700 wrote to memory of 5448	4700	chrome.exe	116
PID 4332 wrote to memory of 4420	4332	firefox.exe	118
PID 4332 wrote to memory of 4420	4332	firefox.exe	118
PID 4420 wrote to memory of 5248	4420	firefox.exe	119

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://duckduckgo.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x210,0x2b4,0x7ffaeed7c188,0x7ffaeed7c194,0x7ffaeed7c1a0
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,10744443782892070353,7103557045848069133,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:11
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,6178361249585714274,14863984850803647118,262144 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,3660394046762120647,4387771157280776091,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:13
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,11893277904239495389,10794062281677075114,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,6956552011086124761,17146306680426928784,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,10633060853946484473,1782463387862012901,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,10720287928221763903,10954434607396912987,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:9
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4380,i,16461193172763682662,11934915395822182551,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4460,i,17780842236957012653,12070134094347120168,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:9
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4340,i,9004108841379964505,3973812591926236534,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,7871692615988535631,15205590585873283350,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3904,i,15376623703925764260,5510077744688769391,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,7111450733965667363,10238713813919080339,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,7111450733965667363,10238713813919080339,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,8943748881801718440,16099036893186994051,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,11051258481261400033,6896274940164083236,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:14
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6120,i,11798050279253083164,16419431107898019175,2097152 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,14856266255585297286,11983434259457198439,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:14
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,12651412464747977276,16640132620921321743,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,16527745475032405933,7473164446696640600,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,6223949766072996095,10532664726682544796,524288 --field-trial-handle=2244,i,13232236244270352964,13112630765307238351,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
  2⤵
  PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2160

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaee98c728,0x7ffaee98c734,0x7ffaee98c740
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,18396725127130724874,976289762528518344,262144 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:1340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1512,i,727879269462647153,9883041827525775676,524288 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,10018524664882405863,5386602743063205295,524288 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2388 /prefetch:13
  2⤵
  PID:4712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2656673182831010743,5057003418542009584,2097152 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,18169560821576624672,17300160974281790400,2097152 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,12201300249093173293,7206333779170921024,2097152 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,4599130032964158455,15738207475458604862,2097152 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4948,i,7765568674067448540,2805473104979000379,2097152 --field-trial-handle=1968,i,6100006199211506460,2360145275568608783,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:5448

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4372

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4332
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1984 -prefsLen 27097 -prefMapHandle 1988 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {252878b7-e2da-456f-befa-aef6413c9407} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5248
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {82ee305e-8b0c-4c9d-9f5a-e7b1c55d49f8} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3920
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3704 -prefsLen 27274 -prefMapHandle 3708 -prefMapSize 270279 -jsInitHandle 3712 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3720 -initialChannelId {f6fd7648-6698-42d5-bb96-00c95691328b} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3896 -prefsLen 27274 -prefMapHandle 3900 -prefMapSize 270279 -ipcHandle 4012 -initialChannelId {1d3de0e0-4c7c-4aa0-a2a9-323b995e9ccc} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1116
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3240 -prefsLen 34773 -prefMapHandle 2736 -prefMapSize 270279 -jsInitHandle 4464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4472 -initialChannelId {ca766491-f1eb-4029-b5b2-8731f682691c} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5516
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4912 -prefsLen 34822 -prefMapHandle 4936 -prefMapSize 270279 -ipcHandle 4940 -initialChannelId {5ff08949-8d86-4cd9-8ad3-f1f7c896a645} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5476 -prefsLen 32952 -prefMapHandle 5480 -prefMapSize 270279 -jsInitHandle 5484 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2972 -initialChannelId {05377b9b-b843-4e26-868d-23cc0169953b} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5632 -prefsLen 32952 -prefMapHandle 5636 -prefMapSize 270279 -jsInitHandle 5640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5648 -initialChannelId {ef8d6704-ec19-43a8-a8c6-f72184179718} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5820 -prefsLen 32952 -prefMapHandle 5824 -prefMapSize 270279 -jsInitHandle 5828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5836 -initialChannelId {777b6930-def5-48f9-ae02-9a0215865d1b} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:232
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7188 -prefsLen 33031 -prefMapHandle 7192 -prefMapSize 270279 -jsInitHandle 7196 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4296 -initialChannelId {f92e1b5c-bdf9-45ce-83ee-85e0f4082b61} -parentPid 4420 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4420" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of SendNotifyMessage
PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f4,0x7ffaeed7c188,0x7ffaeed7c194,0x7ffaeed7c1a0
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,15676568434102155017,11022560606691135767,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,10984772763880073338,3371374243321660601,262144 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,1658040223408456898,259636457629032881,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,2074877493719432791,7505013992877436759,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,13819253062896428196,1485393228630152370,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,10502598579521744300,163711663033939890,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,13351939307910691512,7694113171763186555,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4988,i,11573785372888958968,255802221212510235,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5376,i,12887888013370828106,1800403797485635249,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5532,i,9111064438824665590,7869078645266993392,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5732,i,1499075945081716514,10958720967831908696,2097152 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,6052456548145207011,2649206506031164290,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,15112634286491637302,6646471988954600970,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,10029842512108024478,11734329031904539024,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,10029842512108024478,11734329031904539024,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,12919510389458605373,3241765485060611636,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7000,i,4144687974882713277,12897311069929835714,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:14
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,4090868362539114588,34704201561124199,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,309436494453663880,9763809490102065947,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:14
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,12963076570405947064,14154048809795274433,524288 --field-trial-handle=2120,i,6887094467559407761,14775789902109101378,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:5484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3e56e9a8-4ea7-4fce-92b3-f47539a1ee97.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\3e56e9a8-4ea7-4fce-92b3-f47539a1ee97.tmp
Size 130KB
SHA256 02f7dbbba4341a76dc960dde1e4ab04f8ef2c29e127c0b753e7cf883edcbd711
MD5 70577451c188219fd85df60f8a35b80c
SHA1 86384ed48611c7580a5b2f24dee6f11f55d4e00d
SHA512 8db1726889a8aae6625a0a7f0c60c1947bed9ab0c68a62c3c76a7e81dfad3695f049b8b9a75a79c59ab1d5b6e7a9b99bf1520c2d71b3620583dabb2149e39590
SSDEEP 3072:N1H2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjP:Nbt4fLJ0L6nGJxi3bzqapJjP
TLSH
T15AD312F1D2E06C7ACBB7EE4155B55E948E71D5C289CDBE2408ED8C1816CEA344E13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 552e42bbd588f80b13dcd54fa12063d4f5f289a0800d3752af3913e0a92581f4
MD5 80c2b76ab4cc18f0fb52b1c738bcfc04
SHA1 31ddb07b81b8930c21511ee885eddcbbe9126299
SHA512 148c85abd0d653a8c6cc7c3c1584bc419605a23e4ca3bb572da19e3e9409e3696373e2ee73825c4fa3272bdb9992bf469f3e6d7587074723be00eff2db9fd088
MD5 SHA1 SHA512

Submit Download

9c65d5ae-5113-421f-9a24-95258ce68f01.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9c65d5ae-5113-421f-9a24-95258ce68f01.tmp
Size 17KB
SHA256 00b1f5e3f2ee15e41635cc5776beecab26489b83cc8da1b01e578cec0f125545
MD5 4c845b2618eefdd47280df258df1e5fa
SHA1 90d6142c1453e2f700bea476669cfb9e36befbb6
SHA512 4f4b1bf9d6b776e477d3ad3578fd52d3bab53a83694fa9eecdba8eabeff22ee1e9679f0c42ddd6998d0b7c0b64c1dbe2a8235c40f3d2f87323a4df5053bd2ddf
SSDEEP 384:wGjUD7KxkXqKf/pUZNCgVLH2HfgslMl7pLuLceSOPXODU/+ErU36GHGiGTE9t:wmUD7KxkXqKf/pUZNCgVLH2Hfgsml7pT
TLSH
T11872FA67AC4C9E3B0F94CACDDC167A4FACB5024B65E9886443FA5C2903D5ADF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 47KB
SHA256 3f1cdee7d169c5c20ecce7f773c2e245492dcb6a056f97be60ad9e7b468827c8
MD5 eebb348f66d73bda4913d3c00dc5e4ef
SHA1 4c60238dee6222c9913ad925ad9767d80dea7796
SHA512 13d6b3d47400e19be16919fe31d75d3736d0929c1058488a4cb2d3eac5be01ebb910c9a4c5c850661dbbfa023ce8588e298a47b9b05248fc07cda1dec3e64998
SSDEEP 768:+/JgJqRPs7nPHbYKFfn3wsUEjEqNabq3g8eBxg2izIxUsEbjvXkKF:+hYY07nkKFIsUs1aeQ8eBBeQUsEv1F
TLSH
T1682301E0CC57BC3799802AD2B672B630068DD4226B72C77E13B9C70E56D89E15CCD9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 29KB
SHA256 1232bbdbc5d205f3c5a40efa5ed92839c79e7879d5168445cc47645bb93f7d1b
MD5 4c38c2a78502af8dfbfe0f71cc49a1ae
SHA1 4b8c845263b3696e28cf3f313e0214e22688a750
SHA512 e60ffea855bba4241daf68af6bd3c1967211a215ef281c7dac8311756a0781d00f529ff0ac5ce789238a4215eb1540c6c61c69d650cb2027c3c72cd475dd7b9b
SSDEEP 768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V
TLSH
T1F2D2E03106E377E194D8360ED63DFC17CEB08166ACA3B0E822B741A32F35F585E4A049
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 26KB
SHA256 fe8a1047376498c80a157d13555e42a92ad480fcb0bcc9de51ad1930fbeb7f91
MD5 b7640425501065524cec27d4a55a85ed
SHA1 f254c388a65efb4b271c56deb5685a77ebe09d9d
SHA512 9795975f44bcae6b73979b221b1c544ac943bce0ed485b266749559ae95d39641e09c458f2ed20f4667efc80ca2c47dc6300ad4a3e5ce1d38aa94e014d61322a
SSDEEP 768:5t+z+kiMy2C4rU03JPhE4lbMTAPZE6OekA:5t+Vyi3JXqTABEg
TLSH
T1D9C2F1D3F7199D406583D2B4B6A521FD23AC9EE446F01BA70C76BD1387AAE011881DCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 33KB
SHA256 4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
MD5 36397a3bc139c6e9f81d383f060f080a
SHA1 3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
SHA512 7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9
SSDEEP 768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe
TLSH
T19AE2E155279C3669BC505E7F05BC2586072CA2D6FA7BE0E90BB9D05333AC69F24CDE04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 28KB
SHA256 6ba0d1a726f1887bd61727b308ed0be0e73edba17d4ad11b91ab19b632e078f6
MD5 72095568168d6a31e051e4d531759151
SHA1 8ebe72ef4631721d800aac28d854c1d1b952fe24
SHA512 17f1417d99d76e46601d483f8516731e18ca028221a57c53d557e00f9627234576d62eb3ab5eb5faa13ebc1d8bff047ac86b1499756bee22ffb76b998b7b19a4
SSDEEP 768:ncxMT2KlhUWbYQhHETORZaoTMJYfWHwRytVfQwg:nBaXgYQ9EyaoYOfSfo
TLSH
T151D2E12449B4A91CD1932728FE61F420457F8333DF6DA80A7F49B23D2E657B484D1BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 28KB
SHA256 d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f
MD5 6e75a94d5f7170a1ab532d32c2a35755
SHA1 9c1b6fff544089941bbeddbcf529c3f0b46d853a
SHA512 27cdbf98a3f42510eaeb28437e3c4661734b685d63eff5e47364ac46b73de617894edcb19ddd9afd955de192cfd8bb755998ed609ec2c279e9afab3db2583175
SSDEEP 768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e
TLSH
T1F0D2E1CEB288A6B2CF6F2234D60344D63A3BE647565D38B4ADC49D918B20D0FE4DD04B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 225KB
SHA256 72c934e5a7bd0dfa74e29ded13346756e548ac313f11c8a7ebb1a1c1169be89a
MD5 6f85ab587a9d602dcfc2cde27a5e76ee
SHA1 d68cba922ac96e06c444a663f931c60988a17cde
SHA512 12ea71a33b1e3e1c7a888ae4084dc649885081b3098c6239812665ac4b8df49639fec1763b8029543b32cd0722100ae847a17e4a0ed5074002cab009a932625b
SSDEEP 6144:ZHKH/1NIg0N/Fx5hXHR6RSyWX87j39H86qqM8:Zy/DIgQ1hXx6RXWs7jidQ
TLSH
T18A3423A08E6AE1D738C960709173250895CA7E1EF9F93A76803D23099856F9B7D13CBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 b2243e0179355756806215d3139969d92da580484edb5a5e91a828419c27f94d
MD5 143d2f3cbdf366030c4f40201b73e92d
SHA1 976a56ce78a33f4213f464a24b728458d152308e
SHA512 83e3a34bf815b7deb568e8cc6e8451696b01913ee52d4d20ae1200b0557176a332210272668b40e11f467308e72b9c148ead2abfb5e06bf34567a1811db68ac0
TLSH
T171B011C0A3C00882CFE8033B28830A002A208B200200A303A2A0A0BB88232E28080082
MD5 SHA1 SHA512 TLSH

Submit Download

66555e35-1ede-43aa-9227-d4beb4c7ee43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\66555e35-1ede-43aa-9227-d4beb4c7ee43.tmp
Size 2KB
SHA256 437b645d526177176d1ff476ad3363e282069ce728a6bb0cfa2c5efb0c611a58
MD5 06a6f259d35b93b0c2d57b95375c92af
SHA1 83bb97991d03eba6b2b01a46c2a285718836fe3f
SHA512 a82f5142a9223d4261ed94514147b8d1ffaa002c5b6b2ee1ec5511365def41a0c03578d2795d901daf50f7166913a835f0b4b1b494fcc8cbfc4048961e04828f
TLSH
T18A417DF783B4897D8A1196E4EB146F1FCE6D0515431C3CA685D4AE1783F38B2D10029F
MD5 SHA1 SHA512 TLSH

Submit Download

d4c0b401-1e0e-46de-adb3-ec1406cb67ad.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d4c0b401-1e0e-46de-adb3-ec1406cb67ad.tmp
Size 690B
SHA256 5e1e9e20d4c5f7b106db4ac1f84900ea7abe040258a68db3ec1bb959ab262c3b
MD5 b75d765748901795bdedae0e72b1c4a5
SHA1 41648932608275a4b4c84bca952cd7e127a0f51f
SHA512 120881d6be10e964683e397eae021a9b670c1ea86ca5d272e34dda5bbba4a2a4b58d428340761d0bdf16a150ecd622a9fc8a63db867fe3b5e7d863cce88250d5
TLSH
T1A401CB97A6BEB433407A8ABA0D14B84539BA6831024178E8CA9A836D90940F71B07023
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 f3513d8d4b3ec7096dcae8a740fde2e5423d85481542bc97f85105908c6e2474
MD5 965ca2e6ac3af9f638732b9588993510
SHA1 24a4b4edf2faa9fa87f3ee73a883bff5c7abed77
SHA512 40b43109381ca7dfbbb0e6714b9f1bd156e320a228d17edf1eb79ead1cf37a62e8c14ac29b466b0370162f1b9914a8b66d25847af86eb8ac1a84caa507c94141
TLSH
T18AB01205D0422720C00503701110905436509F35E11113C592E00D41D8310B05027198
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 3e38ba82a87347eff70999f7bbb0b430f702d8fc5f2f0f2a67e90ca89d064072
MD5 7fe7de90ddfe73b941bf1efd72564652
SHA1 d7fbca030992dca0c13d8ce1691f057bde67cc7f
SHA512 5b7f84100c657c4dad1ad2e0dec0d601ac5fea06592ace4070535a47b419538dd74fbd0fd11ed9b9fa98a66de6d9845a639a7ea71bc27a8364611bfaaf94e583
TLSH
T1D7B022AAC0032303C00203B02880E2C8B020EF22C3030332A2E00BBACE20BA003200A0
MD5 SHA1 SHA512 TLSH

Submit Download

f6d65b04-70c3-47fa-b736-638ea0637c3a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f6d65b04-70c3-47fa-b736-638ea0637c3a.tmp
Size 12KB
SHA256 4f85e81e45700fd91eaa8e782c01813466111620b15eeef7c8279266c5dd39c0
MD5 85c3dfb4ef87f493e0da5d4ce09e0695
SHA1 39b011ca861bc665df92740c26fcd3551e514988
SHA512 c633f3a121344b0544918252686bacd21a50c6a24139a44922986c2fcd8d2a5546e7e31b8d696b44aeca71eac1fa7d5aeceec95a5d9b11107ca43559a9521980
SSDEEP 192:JRuc9LEdpqvuh9v7fpAPRp2yf49UHsb+WNnouH3d2oomLa468kVyIsnAUge:JRuc5Edd9jUXqWw5N2o5aPe
TLSH
T13342A61EE950393F5DDBD22AF9627B67E6F5103260A42E84E6FC892C14E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5351464-7a14-4d24-a356-e639f8dde7cf.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d5351464-7a14-4d24-a356-e639f8dde7cf.tmp
Size 131KB
SHA256 9218281505ddbb6df5dada279741c8eeb3b443f71d58a1ec91dcbe255f07416c
MD5 0f1dcd65492b9754cdfefe735c634ec4
SHA1 d78fe95ebddfb2c7182aad39fb477fe1c6bc7655
SHA512 415920d8ff8bea751e071f25676dc5f2545aba7840bed5700f404d6ba79456a25acc8e3590866e6e7b69e1433e038d11acb5f3fc3e6324add59fbced4f50c24d
SSDEEP 3072:pkPH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJj+:pkdt4fLJ0L6nGJxi3bzqapJj+
TLSH
T150D302F0D5E06C7ACBF7EE4145756E908E71D5C289CDBE2409E98D1806CAA384E17EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1794ef0-8041-4945-99e4-64069c73a8c1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f1794ef0-8041-4945-99e4-64069c73a8c1.tmp
Size 131KB
SHA256 58d66d4a904a4a7f3d5432b49a882ea3c4aedc26d2b819687d228817938b04bc
MD5 d91d39a24c0804f2a57e6c7a9a12511b
SHA1 ad7a6e684739c26b887dd0d1cfc481c4e8efca3a
SHA512 0eaca4b18dc952c6df23f3f2733e343a08134b1a986284e0666d4a1055b795c7f13e20426262fdb4cc780743f967210fe225ee7e9d9c8956352c823856c2c511
SSDEEP 3072:4kcH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJj+:4kkt4fLJ0L6nGJxi3bzqapJj+
TLSH
T175D302F0D5E06C7ACBF7EE4145756E908E71D5C289CDBE2409E98D1806CAA384E17EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17da09f0-fe21-48c1-8412-1cc9e273beb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\17da09f0-fe21-48c1-8412-1cc9e273beb2.tmp
Size 23KB
SHA256 3f7a3b8fb9e64f0c28f64229fbfce9315a4aca08a17d8323f9dfc34520483462
MD5 93005d272c1a22739f9d6474398ea683
SHA1 17191dfe6295e9c2bf9107ac8a332473dbd2001e
SHA512 0f22d88da89f3cbbdcb53efc3154f22808053d6cf8cf8dfca3815a2764617fb89f780b9c87358fdfabc4872ede43434f0420d478bc8659d45cd032da8c940b50
SSDEEP 384:WvFwPasu98NzElt73Cjs8PBcbENvad2d6KSOw+mK4DnS95NYcXb:W54Y8CbCa3KSOw7nDm5NYEb
TLSH
T1F4B25B7D9CA06C3E589FB704B50E39279E64423BE6F81A98C3E9AB0DC17A58CF343515
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34ecdc79-afd0-4045-bc30-22cdd624ba37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\34ecdc79-afd0-4045-bc30-22cdd624ba37.tmp
Size 18KB
SHA256 a653a85b9267365393b7a602c544a9d18c6e00b0420b1e1e29a28432c3fe9a37
MD5 8db5f1c81fc97220c30fcef36a369e9a
SHA1 5b0bf1fa531c85fe2d75149276ca1274bc729117
SHA512 017a28482dd24b39f4a4e258b1041dbd180cbc30772d5655c551893ebfcca7261ff413721c84a80ddcbca85abe9d68235fec4b9e42bc0c8351e8cc4c792ec7c1
SSDEEP 384:BvFwPasu98NGElt73yjs8PBcbqDnS95NYcXb:B5ZY8CbqDm5NYEb
TLSH
T19A828D31ACB46C7A6D939A40F45A3607DFB085ABE7C82F54C6EDAB0C01DE2DC1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c3faa55-711f-4fc2-9f3f-09b75c2ba91b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\5c3faa55-711f-4fc2-9f3f-09b75c2ba91b.tmp
Size 105KB
SHA256 88454a5c6327fade9b0bf4bdc67565f50fd930d7c36004850663dccc2fad9caf
MD5 19f7118b9cca8e6dbc3c9252264e9c01
SHA1 d968b4820c99b7317f4015a8fe24cbca35af18c4
SHA512 83fb45a4564f997f2a9cca57897ade5225365db5b3358300f596594b7e6db8f8598d96135ebcf1adcc9f395375426023c0f7964422a7b43e657c513f34fc8793
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7w:fwUQC5VwBIiElEd2K57P7w
TLSH
T1F1B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8398e665f1c2d5e0d5854b41fddb75a123064b9bf4752ddcd0cf49180602cdcb
MD5 0cfb2aa149330ba2a84871ec97150d09
SHA1 fed51038fc02c3c70c602ee52247905811951c67
SHA512 850673df6c89a885cce078d7b5ad29b489727a58fd4d5c43b18c92cad33a5fbff3794b342c2bd04ee23ad64e07658dbb49c078e52ae3bdda24e444488db9e5c7
TLSH
T17AD08014D1F6F457C416E7731D108787A75DD45231434F94905304451DC957D45D35D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27b665b1d9624d43b725c244ab9b17d479c89834023728faf15774c5a98ae538
MD5 a2e1de0e48610fcb086e61dc1f6f7b12
SHA1 8d5b00b5abc1c637d5a2464fde4a486435e10f4e
SHA512 16566e92bbd77344a564143d1878ca04c6d9dae021fd576c11eedf35f7297f5f0b9013143332e4ce22ca91c23fc19f642e85fc8a185b916eb66f466d0a0088ad
TLSH
T18AD0C014D0F6F447C402E7730D208787B31DC48230030F94900300050DC943D05D35D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f03ecd3ece98ae7c02c56807236cba972a913fbc4f1f463843e7e76a213a3b58
MD5 5b2770fb705fb9354d56e7d4924fb963
SHA1 afdc0e48033c22fbe5ec8f6a29aa8902fa61fffc
SHA512 777e7259c18bc9b92f1e9b9c8f134aa7ed24e29741601440ad38833e0b30ed2c5d6b5ece22a8be103d4847ae1884d7294147a081993a150bf5cc2ab67a045353
TLSH
T128D02228E3F3B0A3C03F2BB220AE8B0C8228C02320C30B00E0020C802C8322E02C32E0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 69b9be3038d31cc05ddb5cc15fd12662ac61da03c3c565072f834b6bf6b17ce3
MD5 28e76c95a0cceb6357ec3c375dcfe534
SHA1 3ba5e37074e1d7f34d7601c04e7904e1a43221c7
SHA512 2f8f1d4f670d66fe9c731ba9d9c26a9ae78e70468b08912f957b2f38020b7a951b6b75dd3a5201f8cc072715c8e540dc1890687ac8f3bee837184b2768c63272
TLSH
T1FDD02414D3F37453C43F1771105C470C4114C01310C34700D0010C400C4315D01C31D0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9008ee492e858d6a6d653063f66da2245e5cab3bca11f72de3f11fb3c6580329
MD5 eb3ab300b19b1ce3aa7e289aab1f9d08
SHA1 cdae9d4b450aa362705f7b421fca56ef563d9326
SHA512 69b9456579d91c128372976e8456516e287aae62e9a3da4871efd494e2e38bb2852ae32a587932b0f948e6b3006ca0ca8bc724110e3cebd9f100f725f50c4331
TLSH
T111D08028D1F7F457E529D2B6191547497758C49336838794C01708060B4E57E05D36C1
MD5 SHA1 SHA512 TLSH

Submit Download

0e99dd49-6a6d-4388-8764-e69e6a6f1ae5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e99dd49-6a6d-4388-8764-e69e6a6f1ae5.tmp
Size 10KB
SHA256 4f9059f66b28cc9d698b8241f606cf9bc009d8b7cf0eee0a73e83fd4bc31322a
MD5 4e6e61aa6f196841126f6c772f74d87a
SHA1 af824b03fe12a15f00ef5de83577654a6d4bffc1
SHA512 899a7bdd070e4a60630b84a0179c01e3f3b2852a19772ca651349ff8762be2a51314c359ec3e6b6104bc6f4b98b4610d7e481e50312c28df4b33b6bd970fe9d8
SSDEEP 192:sxZfRebX/f+sjhIdpfm/W6+WNtTIx/Y0tRY3itIgrJ:sxZfuX/f+sjK+/bt8/5II9
TLSH
T18A22C7526E34A97B9CCBD219FA25BF13D2F91072A1911E48AAFCD91C04E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35af550c-160d-4244-a956-b400b6bb2fd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35af550c-160d-4244-a956-b400b6bb2fd7.tmp
Size 28KB
SHA256 064cf9b8bb42d5ece085dc3e67db8a68606a8d1ffb211a44d0b0118b5903ddb0
MD5 9ae79714018cc287354bbe86ba0909c0
SHA1 251af8dc5f2eec6ac71d40c244b45140fa87b56f
SHA512 321181c79b25a1d6289146f4bf7e65478315096be52c2a719c4d33bc7dbc5f5e98d28683533ff03622424cadf9a9710a3426a33f0a2efff81acf992253560e4c
SSDEEP 768:qdWwy89q2pdWRm1rQ/78F1+UoAYDCx9Tuqh0VfUC9xbog/OV3nQLl/CE0MgJron/:qdWwy89q2pdWRm1rQ/7u1jaKnQLpClM5
TLSH
T124D20B3B240CCB7E4FC05A6DDC566F976E9802C7A6588D4087FE894C02D77EA91164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61126c9f-5615-4980-8b7a-702f1dcf6b4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61126c9f-5615-4980-8b7a-702f1dcf6b4d.tmp
Size 10KB
SHA256 d519b2954cc3fcc5620ce6b0a7ae44fbedd40153aa3d6b9be7045e9ef048aeed
MD5 e97e2056bc148f0db54516b67c4d2422
SHA1 60f34ee76ca8b296666f99c03add1c3c74901808
SHA512 b98f1ffd8f5f2c88ee94c8f2d5a30083d66d16a81e102f3e4f4841ef522a62476bc1433a2da7309c6d18c33f9ea6c058c939993a69affa32f11b758587a5b3ba
SSDEEP 192:sxZfRebX/f+stlIdp4HRW/W6+WNteKTIx/Y0tRY3itIg5aJ:sxZfuX/f+stWd/btr8/5IIk
TLSH
T19832D7526A74A97B9CCBD219FA15BF13E2F9107291D01E48AAFCD91C04E77DE620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68663041-d87f-4b75-90d9-eea45f2e0b80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68663041-d87f-4b75-90d9-eea45f2e0b80.tmp
Size 414B
SHA256 9ee11c759affe3a8902e0fb003c730fad4475ed86e8f3c5c86df9bff99d4e90a
MD5 737eb0cf03995f5164a613fff85f80bc
SHA1 c53f78df7baee6b180e602088f114b4398e9e6d3
SHA512 326df68623088f63a26c988411435a9c62c4eec5950ea654960024f586c4f0f76befaf56c9eeb41d5131fa36a2d9862c0b605c0f807d8dac0b1ebb02fc65387c
TLSH
T136E02BE9CA60E82708FE0B5991548A4AFE10135726418A0F3A3DC10C4FB153BC18AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

68829b31-674b-4d48-87fd-98256ce8a748.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68829b31-674b-4d48-87fd-98256ce8a748.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d52b54c-4647-400b-ae2f-a5351fad3b99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d52b54c-4647-400b-ae2f-a5351fad3b99.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8feb8989-4379-46f7-b100-2876037e5594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8feb8989-4379-46f7-b100-2876037e5594.tmp
Size 12KB
SHA256 09d273e192d137a27f8f67e18aef70ba8be746f4e841840e3a6432f5a7ffb449
MD5 33775d102d762da072551c7239c1752a
SHA1 fea0ff8ad45c35f3940acba2cd1b128357d21f52
SHA512 ce24d37ca17c774d29ba47e8522233062e3def1898c5cb83576e6e3b4b53aa577222eae35e6d85811fbc505696fd906e9b13b63d895db018d04f2672c1821375
SSDEEP 192:sxZfR2OX/f+sVWpVcDIdp4HRW/W6+WNteyeTIx5Dw/Y0RFi3WPIgbwJ:sxZf7X/f+sVWvccd/bto8u/5K6Q
TLSH
T1D942C8526974697B9CCBD21AFA25BF13E2F9107291D15E48AAFCCA1C00E77DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 106KB
SHA256 9df7662239260105ddc9cba7d18d2d8dbba6dd8da86d3c6cd6205e517248bb91
MD5 cf7dd357d61db9d32f2619b672df8482
SHA1 18b127731345fa358d5280cc6d12dd897555b719
SHA512 0cffcef769dd5e7526ac2883b99635459259099dca3988869ce38666af19c5b552d47d56837382f81d42a4a4ebba5bc8378bba99bea439bbde7b9a7961bd3804
SSDEEP 3072:32jXC//L2qjOKHjPLRmxGdi4QyqgR9ah/XyqUP1sZZ8:Z2qCKzL4wdimqQsfByqq
TLSH
T10BB3122FE70B64D6EB791DC5D285AEF4CF9C229970333425730EB05D138ABE62A1A453
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
Size 107KB
SHA256 70cccb38c5a27a902aa9fd4a2a99eeeb36d704f5a44ab5251de7725338c51235
MD5 3e0b4809f7fad4af7cd5fc284b29b168
SHA1 b1fc7c449f42642b4db368db6fe239119bc7da78
SHA512 a5a9b7b44f10f406dee01fc862b708a656602294582b763d16c182972e442f1070444344b355e3aef57b947959701bf10806dd14e29c82feacd28fba76c0e392
SSDEEP 1536:O9jE2aZMU2O90e2DJdMZ2Is52XoG8eVpKtLhzYyPQkc3bKJK1X8N4H0RXvVPLUxQ:cp4MNpHZ5eVpKt1cyPQVbKJK1MXVzpj
TLSH
T1ABB3121FA5E1ACD0AEB6CD0ADA9537B65C71D95D6F5A40187290C3F1F26C8802C8EECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
Size 107KB
SHA256 0006c58d7bab8cace30e34c7c425a4d6c462b32d0c1739634403ca44fe9c2069
MD5 0d3cd53fa821928b82e1b92cd86fcc7e
SHA1 70980eeb73b7609f4f6ee32e1ce8b446b1fcfe7c
SHA512 f0b087c9463dd51083e3f22215048b9c9829a137cbdabfb295c129d98b9fe998abb6484a7fc01db27681ff276028413b58d3e6032879ff9bc4d2f97b61acd0fd
SSDEEP 1536:x9V7g68EwI9Ffy7FlzC8Q++nLvGnqY4TLtBl8n3ha8DBz2PX8VOCAQairIz5+Aeg:TVc68EwIHbroqY4VBr8jsQRUz5+ZMWGR
TLSH
T190B312FBDE3198A0BA0480F15DE2912347C57169B584A782F16A90E8D0F42927EEDF8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 97KB
SHA256 da46ca72573b92764c76d5e82b3b679cccec09de3ac2b9730b2fe66bbc2055a9
MD5 47faff78740b7409d281e5a424227505
SHA1 675a520027e8ce9492f8e4c0fcf7e944b300cf81
SHA512 0678acdafdf69fff7f8d9a06f430ab311ca61a76655886d0e32f0ee4eb641b64e762496d726f5c2a53895f1021805a0963b12a07eac4840a1a48af3ade748f00
SSDEEP 3072:Dp3NFNOz2QD0stCOvtBmtsXf3XNN28alvh0NgYnv:Dl/Ny0YvEsPXfathqgYnv
TLSH
T1FDA3125C737E40696FB8295C44ABD848ECCBD7FD04196D88894FAC81BB7112CC3F6262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 97KB
SHA256 781aaeaebb5f5d852b5ab9c49d51222ae85386d787a32a62ba5e027f5aff5f50
MD5 d597a3bde135a6de1578ba168b477409
SHA1 06c16ea5d8510a184114dee2e147364423ade0b4
SHA512 5e6ef0338c9c3c5f7c4457994f60a057786936fed0f6ca5ea804d484e088cca237defbb879c7f5363905653419639a0a2068fe03933d21988000c5650714a762
SSDEEP 3072:+geI2ECnFeJG7AcfCyZHkZhRV6AvgM4bEkMhKbg6NrCwF:JeNNe2fhEZrr4M4AkftRF
TLSH
T11CA3121173D29DC5D90F607504B834FFD3B82B420137E6EA905A9DACB03A7E097A75BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 16KB
SHA256 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
MD5 12e3dac858061d088023b2bd48e2fa96
SHA1 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
SHA512 c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01
SSDEEP 24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
TLSH
T1B772E35B1F5F4981EC4B0DB80B125E80C5E49C973854DFFBDB76B62888B0364AB845EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 24KB
SHA256 7e170ea7f2ac873c595b9f72cf35b8c15af17b5bfd3488b101bb5aca034d07cf
MD5 85cec2f36640165630285fcfde07831a
SHA1 680a959b7128688ec8201e5af72ab129474f7b4d
SHA512 74167696ce9516f43be0bc2a75524910e3193ae47ff75ffc339c33eb68594c09873099966a22701ec66978b5e7cfc372e257065387c0619860acfaab0da53170
SSDEEP 768:n/FWnQ1G+lImP9UJSz5TeKFMI6Nc+n820:qQ13IuSJSzFeKtU820
TLSH
T1F0B2E1346D581B27F1D251B57AE48EE8E1A31A05B4521E653F8E02002EC13EFE2E64DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 102KB
SHA256 68507cd63ba31b475df24e72126efa6f876ed08070edf9bc061370fa6d6236a1
MD5 9508051a8da5e63b0edf77fed708dbe7
SHA1 10b32bfae836baa1864152846e198fdd31e55001
SHA512 b8401dcb41ef9b0f70d9d00342349dfbe6a2218c5cc88335abac5a62360d0f0d44fa2381d82042dd0718036312903e605429ca8b57012aa74a04b02ee724f5a6
SSDEEP 3072:AC7MlsaVxw3ki4EEx1cWGSiAvi1ItUkzYdJ+oTK:j4Wa8Uzhx1/PiAvi1ouW
TLSH
T1CAA312330FAE5186C5E66D5C5F47ACBAA0C23C35254A655E2818CE39BE56728EF41C33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 250KB
SHA256 eb8e9f924c56299e33f3a0decae00c047a51d1ec3473cbf287aefe2ba146802a
MD5 f3fd1f36a841ad29b1659c2346165693
SHA1 85ed2c256a78fef0132f5bafe3f170cdfa8f048c
SHA512 fa79951e1de64d8933aeef93e8d8bcd5060ae23ba57d53bfb8d86c7b3b7011b860dbb8ab0c9a79b0c1e6f0cb98fbb73674b633a2334e9758fbd8f51e90336329
SSDEEP 6144:Y5IbGBIctOxNJJVFp4k3APJJJoaz0JW0dDYYoG5NusiJqxkY:QoGe7j3yVzb0dDZ+siUOY
TLSH
T13F44236FBCEB5E0D07714122C18C47419CCB263C70BC9DE861E80A65A7ADF7C96896D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 20KB
SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
MD5 2af2be0651a488d15f87aadbee775f4b
SHA1 6da37d1d9fd929a8c79ce771dc565d2f554e9d9d
SHA512 d532f7200f9655de22309bff4d2676a1c72c7d04ef5e50e66c4c9de71f4ff835bb8ff82066014fcdb21d88ce04a43f96e7e4260fd651f47736cb7e365ad25651
SSDEEP 384:R+ouqO6S2dxUPYYchyHCYfJFLI4+i+Qzrao5atCv5+JQ9TU2M:RtuedxXDfIFLI4xlz2catCvMJQy2M
TLSH
T14A92D06ECFAED5241F5B1ADD5ECC2AD9066AE5DD6CBE53C7AB723270D9C0D408809230
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 36KB
SHA256 e5c9743c3fe42aa2f7c154dd2255c37eaf19f4c6bd5de6879b4d865b000ea3b7
MD5 f3164393c3e60030e464e88ae4cac99a
SHA1 d8084b835a61eda914b14c01ce67f5f759272cf9
SHA512 8d5c78e33414f4dca09a65073a00174df3c6b4462a2b2b0fe00fed8fece6aae7e775b7296fe44f8b70e532954d6ef9dee1a5e1fa9f3a35849a0da5ddb67968cb
SSDEEP 768:+gO/maSY3ofhUfgHHuJd0UG8oju5Pt2BELNoZJI4tLjyULVdBJKGcwF:+Wad3kqmP8oq5PtS2KH5TJ7MMF
TLSH
T1FDF2F1C6F1F74871533C60133893F7DD2B9865E6B3B69C7A60A6858D75C8CE22E69C08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 39KB
SHA256 9bac2d0c95117c1e92351897b0548cc184941c6b9edffce4510542d443e87ebe
MD5 1b209d91d43bfd6f0ecfa323b8e60d94
SHA1 b655acfb6b7cf3be4c131db396b37d85b6753170
SHA512 c986f8a844e6b60db3a8f124799c19b9e5c76362066742ccd8710da4ac6ba6dfe445b0e092524f165f5bdeca75e725a3564868d3f95ee03b2e63178963e5838f
SSDEEP 768:hUiw8NR6+YM+0eMTIXRPbDujqLq+i/UzvnIK0BjBP7KfgQn5hZ3ek4Uz:qV8NR6BMVes8RWj9xgvnIQ56k4Uz
TLSH
T13003F1F1AEA68E0A043A97239C6E20D46EF2FDC5E05FBA2F57895CD1098F3D0524D132
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 68KB
SHA256 2033d4c0dcdab8b765e78c9c1845742d2589b0f1c56a06b701e91f536035f85c
MD5 047bb9fd0930eca58ce326cdca8634c0
SHA1 b9fa0a8cc2fe5e274bb20d28ba8581139949cec1
SHA512 c4e022dcfd4e98313189200eba4b545a65163a7365107d082085b4c49a2f57402fc1480c95984acbfbaef179dbdcc11895dc7fea875d3783a7c5d2a99743b07d
SSDEEP 1536:7WiFK/+t3/ZhLVxdengIiVyWT2tiuwqVMfNidV/yd2db:7MMZhLVxQnqVyWTVfNid5pdb
TLSH
T1C8630262AF4CAB7E25CC41839FD2A335D0E8DD19481B407C36549BCFBA549712B39E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 45KB
SHA256 44c44c5e9cca81e4e3a8b88e6c45ef531d9ec84d198955739a4e3ca82e76f0f3
MD5 afc7d5b0c3d21def3418a9fc43858f83
SHA1 bf9c629cc33dd8475f36005870ea625624acc7b0
SHA512 04cd55b52af530e7c411b4cddb385a34304cdcaeb84b8b2e9e912f7089a125c61cb52b7966707d9fe74c986034fa6f53b1626eb0caf1f163d6ec9044462fb3f2
SSDEEP 768:zAr5A78yAtyYOzjMPHwIVoveCDn4mSE1NNJi8AlLaTmPXrnr/WPY165c3KfHJqma:8FAZAjOzjMoOy5T13Ji8EaSPjrcMgfW
TLSH
T16123E1975618B5E2D5A97B351AC3718F5F9BC0D884EB22CA258B604BE0D0CF791860EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 538f9c1b6792b347dcfe12b1c14479e7969b934ba0bff130eccbce31764044e0
MD5 6cbddff0c42a8a6df8496aae6bf800d7
SHA1 f93ef744b76dc3b7f731fe6f4bda4ce370a21777
SHA512 8ec857fa38eea171be2b1045c235e29eeadb6ff5e07b10c24d6ba401abfa760e9a18edbab66c72dc9f3069191008fa4cdcf5de5fae5e97bf04fee44daeecfe3b
TLSH
T16671716A65BB1782E77913BBA0C134473F38E59430932F2B8698F775DE42797C228240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 52be3c2fef777e29d8c7c47dba6145b6a4f67c246fb8b0fe9ba7d246e4f8657a
MD5 9ab1fad8d889955d0227e6aa72ea4618
SHA1 15230fd030af8b637288ee1406adf29c5db64061
SHA512 cff95ee65ef25ab90dd68d06ade56d7f193ef58b920ccfc909851b00d6365d89c3b3d112befc3c99c15d283ee1811d3b2f56341c4d5fe9ec44d9abc5ca9ea01e
TLSH
T1B6512CBA75335386E3B9233B918130833B7CE68830832E3F80A4D7B9DD46747C268154
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 9d6794008d6c0cefb26dd3c2cb84f2689f606910ea8bd20d9b74ff5cfaf8d71a
MD5 406d269465dd4e131e6205d4ec8bec4a
SHA1 bbd0958935fdf8962f12569ebb5b1a22c59e25a1
SHA512 f15f3a7199da8786e248fc124a8fa3db883e927cac0e42823673e218fcf1d68b8d9fe888dfa5ce562e35a95af604b0fba7f4762d5f15513e9f2c2a11da99ccf8
SSDEEP 3:MsEllllkEthXllkl2zEklkSl:/M/xT02znV
TLSH
T1C84404047FD40405CD151070C015C3D003F0DC5005515747355114177CC55C01C00104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 d16fa1648c935d518f493bcd05f48a10f812a0b4efc23ec561adb3e6451a37ff
MD5 32d798e46fdc762bd1fba8021b37c225
SHA1 6451eee3104e436934e876694d5776b9ae8a5e4f
SHA512 8a5bda95d6726ab5a68c6fc7b7bc390736acd9df1a5e85dffa0013bae1ee9bb9ef826320d75304e7a415f9b20214c23e8dd5d6d3e2b4e5ca7e5b0f5392831db2
SSDEEP 3:MsEllllkEthXllkl2zEklbuXl:/M/xT02znbK
TLSH
T1C74404047FD40445C50010304015C35407F4D45005117747345354377CD5D400C00101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f4b30b8-dff2-422d-9363-6f781338bed7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7f4b30b8-dff2-422d-9363-6f781338bed7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 912B
SHA256 5b8b95bcfc5166dae664a63a04cce2c7181632bb2aa16ee3eceb52dbc24ab359
MD5 31f2fda68069960fc373111b3b077fe8
SHA1 261eee6c07a38136aecdf18edd8561fe6e770935
SHA512 9ba0c6d6e5bc149a052565c05fd051088a61e04012f246975055fb716b43b519f150543f1b20df171407eb43bbed922668b3d0e510348abb0f2bd93ef6ea3ab9
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 058e7725a1596a1d3dae67a161e9758bcf721c5c15622d6d54ec18735fa572b3
MD5 c30c11d7b939b9869129e9d371b6d3f1
SHA1 1b3709e8d847d201bc63e2dbb57b0fcdd1b59b46
SHA512 c99d09baa0b6a195063a15c65ae5010d8f39f3c2ae84e6788ecee535e29ba82509863e3748a9883f3bd7ff7552c63919da9d267da482a1b432157b92baab9a68
TLSH
T150E0869444E9CA3DA029789782B8672886D13457A7947A2A2B8AC8847542785E2EA290
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 dd18dc6cf9151da9dd651b31848154ecd0b0493dcde22315cecd6bb132ff9ee5
MD5 cb40c9fef89e333e7c7a1de7de30cda0
SHA1 857014e478f56101e4bc0da2bd7dbcd8c7643e8e
SHA512 34b33a1827f95117b97d6da7e009488526b1a00f37e607294cedfe1cc7b94f05438ef6ff4434bfd611bfcf551b39e364433ca6b14857db9233c3fc6ca422b4c8
SSDEEP 384:jT2ipjBLB+aadhqF07YAYm4hqZ07YAYmq:U/cUSrcUq
TLSH
T1BDD24BE70E367836FB562BBB650D14A9FE63FB4D5E91CE99A6505C080EB4853807108F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 a7fd2bc8f489d94dbfc3cbe141092a0031f5a68f70207b02a8519800c1de111d
MD5 f18eeda8d7aa0e4481125050a962af5e
SHA1 88a8ee5be0ed629c7e8519dd98304df9ad827713
SHA512 bb624610df59e27e7a98b6a4aa76089de815ed023d26bdfb067dd0d763c62d648847a9f1c38413d4600fadadb65a36700ad6bfb99bf6be7f0600605c4d6b8f90
SSDEEP 384:21qUna83uFBBQ1GkSC8Oy67u3w32Rk0x3s3iRt0w7DNspUC:ikFBBlUUC
TLSH
T1C114B65F1B312712CE7D923629A754935CBEF43F8B53B9CA68600464CEE2A53602D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 1c2b9415cdb789240d0e3f12663ba3a8753357294efe96657ff639c1a4b7d479
MD5 8860f8f5a691beaa813b623bcf2d1404
SHA1 5efc18821b42fa5063c0eaa89224dc7172e4047e
SHA512 6c5dfdd415a9cdf9ce9ca37377303a2633d294a95b3a213f34f1b1f2b6cc5f32f625fdc091dd79a21651af0bd94fd0fd75216e2f32aaa4f3158914e8bbcd3c1d
TLSH
T1E6E0DFA444EDCA2E6218304F12A87B08C7A13617E784AE0A1F84DDC9B883004E2862D2
MD5 SHA1 SHA512 TLSH

Submit Download

214359d5-c65b-4205-9828-4c663d03a76f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\214359d5-c65b-4205-9828-4c663d03a76f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

5e786d43-6258-43fc-95db-92e6e398625a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5e786d43-6258-43fc-95db-92e6e398625a.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

66df606f-89ef-48e0-8b96-132a0d882b66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66df606f-89ef-48e0-8b96-132a0d882b66.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f19d4082-efa9-4507-acd8-446249687d8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f19d4082-efa9-4507-acd8-446249687d8e.tmp
Size 2KB
SHA256 fa6c713b0454c29adf73e335f8c05197440787b98f83362338b4fa8584bf3f10
MD5 4cc7aa4db3fac31b498b140b8debf0e5
SHA1 e114379bb29f8a20b51e96b45480b926ee60fc00
SHA512 2bc820f19e3f7acc9bd85e81408577fc080e24881bcb787998f04738c7981e64d9857bec4f34333ef161fe698c48a03e7fc68bd626b2566925c1ed2b779372c5
TLSH
T1CA516BF747B1896ECB11A6F09A14DE1FCF2D0226435C78658AD4EE27D3E34A2E00275B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 488B
SHA256 67787dc1a4193b9a63b9f33101fa775553d7685e209e3d90c20413dda97580dc
MD5 aec3e3c7c593f818352d42cd89864ec5
SHA1 603cb3c96a2f0acccb1f03e32051075e3da68c7a
SHA512 9dc6216d7a1102f7d13581b4310ffc4205c0b65ac5aef733ff1ed97405257942c57ae160d4755cdc7287feaea43f7fe8036454cb8586ed7317b8890586107f50
TLSH
T12BF097BA3DFB2800EA9BD3DA083000A900553C1DCB01EE4F811AF6D3A4B1224608ACA5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 bc74a4087ee332c03ef6861512a4391a4fb2b7cc60c8b930ac348d4a14a3b0f3
MD5 23ad6e0aa5465a51ecfe5b41843be608
SHA1 4291197f5953786cedf6f5b0999825c3f4046ef7
SHA512 8eb2beb737be12e7bd741c52f5af7df299978e8fa370b39c6083172274a76a5967dabe63977cc543d527b610a9bcbe0f9ef57385c5d6191c7a500ad9173f1f76
TLSH
T130E0869006EDC57D703A304722B4971C9AF4B827DBD87D1A3FC4CA44B543545F5D7191
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13438291513446580

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13438291513446580
Size 5KB
SHA256 e5fe5b4a81ae46e7e61627150abc9e380a44e734d501ec16100eabf5b93244dc
MD5 ac5145c8d72c8e856f53140595ad9e3d
SHA1 2dec24fcd5c8a14fa5a15123189c191de316a606
SHA512 1d2cf1d80bdd1d45e008b4769af6df51a8956ad3eac3163391a1a9c65fda35678d013fd9ffbdead3a34b61c8eed81d68ef9d3ac756ca81dce2d5dd15b622231a
SSDEEP 96:361L0alP5L77c2CuaTUQ25lIkTEd1jw9rRRkrYnb:3cYalP5L3c1rn25BTEmRRFb
TLSH
T1A5C1026A4AA1453CE6BE4A3559F711F19F26FE0618E0CA8F0181414C1CE2A52EF72FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 172B
SHA256 55ff0042d99ce85e511e939122bbdb4cd4ec7d9f46819635204ca5c9080ac8ff
MD5 9bbbe207f2cd8f1cec709af3badc23ed
SHA1 cffba8ec461e30ec042d00542d9cb2074f034e87
SHA512 afac45713d158eec88594195c5553b0554c1658ae6e11b9b6939391c077736ca099ea8a300d59c1aa9d55cab12c14fdb6c2b133d5b937b84ad5613144f3a0238
TLSH
T1FAC08C29BFD480E2E8C60E3202B857116712F93349024C43C940AF20ED07269AF8CCF1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 daa2f11cde438db7919b8f9895ccbe08bbc371c75c7c98259968bb7b565d651a
MD5 400e07ef97bd7c2a38371c40396440fa
SHA1 e9ebcd1a82b1d94da42af48b1202694b34b174b8
SHA512 e05f96a32fd3da27fc3e5bf30d2d8335f1d3c7af87f8ec7580ed0f672d5f137c5c4afe453538f61b5815869a2aa6315ec5c0586e98059fa1783ecae4344b06cd
TLSH
T119E0487019DAC63F7159309F1279E31CC5A2F417D7C979292F48D68872072447297551
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 9aef350f37c1be217deab798dcd262a8b7b0c2ff18001732083af45c09825791
MD5 bfa557d30e7d011167a1f5578e8d18a9
SHA1 71460e16398a22a333567768039f2b64f634ca4b
SHA512 6fd22ad35da9d573d976e35b555f9b84fc902b11602057672fba6ad5d2bfa1111a166c25dc048966324bf866fda65765168833225262d30bad4b5d9cd621e60d
TLSH
T1B1E086B085E9C63D612870C302B5AB2D8AF0BD1797C87A5E5B4CC584B102948B2FB590
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 5a2929cf79392007538fa1f2e04fa47b24fb77807c361ea1f1a882caf7f0d7ac
MD5 3ea3ba261ab76ee1d885aec4f5af40a9
SHA1 1561961aa9f3e5d6c2114998aeaff767082f57c5
SHA512 300e11395931dbb4c49724e2d9b15b7268e117a53ca17c3f14e6e5f8bbb5a97bf4a3d4b45b7a187ec869388ec1074fa66abf0efa436a27c329805c63aa16617f
SSDEEP 96:KMeoKDyeWHiKYULLaKA4SwIReqIuOxnKXsJSxKh4JoxlQ4/SZ:GzBlpNp
TLSH
T1D3B10E9171BA024678BD240895F8975F064671BB306DE67B3FBC50B58B76E080CFC9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad902632-6188-4182-8f38-965c601072be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad902632-6188-4182-8f38-965c601072be.tmp
Size 16KB
SHA256 bc3bd98366c94ec3e5ff1c79e128a998e5f0387a3ec219b889ba3597e7895da9
MD5 4dbde72b13e34072664c6af8c8a1ed4b
SHA1 9c469e3e893b08e3fff9fc2066ff9840804b26dc
SHA512 8d807a3864b5bb01e5f02e0e20e44a18a34756dde3a3210f85d302e921170b66ffd7d77b3b6a9ddc260220657bc037263af49ac5d470b2fc4ec6eead99104b9c
SSDEEP 384:sxZfamWX/f+s6WvXt+V/btq8M9u/oxpxk3DE1:sXamWX/fYYXU/bhQpiA
TLSH
T1B372FB526534997B9CDBD61AFE35BF16E3F9002298915E4CA6FCCD1C04EA6ED230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5181611-3b47-4378-8aa6-4fa39ca3e3a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5181611-3b47-4378-8aa6-4fa39ca3e3a4.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 80KB
SHA256 1278c454f13433611dba103bc7fd5d56688e9e3524cb0f9e863f501bef40f399
MD5 ccd8f0638921825bed1882cf4366d308
SHA1 72c87ca0c0a7fb11f0f93c1f9d2ab5cacb9a5e77
SHA512 b8b8aa6a70fbd3b5fb51a41a0033e50d7c8c5eb536d69faa2ed23fdc4195a234d5b706777907c584b9cb87f84271c535c3a4308c0429442b084b12c5eab08ba6
SSDEEP 768:wbn3prnNh4LgqdFS+GSPTv0SF0G7K6xrFAZp+iOQE+VcDjHBLnZCx3:uEbJFtQ/rx
TLSH
T14483BAF7BC0AA1A7DECC91789407FF00597346628628D8D4EE7D48D33B79A063CB9685
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 d5699cb71e3566f9390db43115d08e6c7323bf3776ab3bd9429115b17e7eacc5
MD5 7a6d3eed9c55cc9b7c9f5067384a271c
SHA1 49439ccc0352051b820c3ab1641b82628c7bd42e
SHA512 b3a67893a2dcfdce47674481456e7e56b5e9f30e1fa15b417f3b818fa775ec4e90308fa83679385b99af308e87a2c5527c21afd8e25c03ed414caa81bdb5c7ef
SSDEEP 192:m95QkIIIbbLMIMNsYcY3NOgupAsielrNTssipE:m95QkIIIbbLMIM2B1gtsJms
TLSH
T150425E2E26051B37C09F5B7B136E87555AC9C8828162616D3162380FDDF3E9B86DA2F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 acdd9a2bc23c047361548bb0f78b04f3fd52f773fa483acb745f18d6eda6554c
MD5 d11eb561ec206d46d9662aadef746867
SHA1 6c3dce4fbfc5bd6bd66340351c80089023b7ad08
SHA512 5652b9ef1e0ac3e8cc662b8af1bc83483d8f7112d34727449f4322f3a01f3b664af51bbff5df7de5f256ab0a2e2b70427ef0e576005dd5a0466645424f00a6c6
TLSH
T107E0CD90A9E9C77FB03D308B11B4576897923A17FBC46E5E3F45C488B583184F2DA1A1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a4f8f0cc1d00560ac6b6714dc478b3636710392ec20a9cd799611da6ebf1b105
MD5 7065f0010fb87219eb54cfde1ae57bcd
SHA1 4e7281367a4cfad97b13be2432d82c7ae27d3134
SHA512 7f523bfc78e4345d827405e8854698df11c874d8f5ec99f058cc64bfc6324d85ac1d4e5c0a817710cc9f87a2b29710c49904aaa71bca3485cc368c7b65049f5d
TLSH
T109212892F330C105D2498B3A607EAB260734D8129FFCEC0F457620692E72F151D4B6E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 b4f5e001a2e8175b811ac10bedbb8dea103e594a6a17e82b5ea7a3a3fc978c6a
MD5 cad744798aba8128066b671b5965702c
SHA1 a3acc12d79ef1cccd2cf1098ea0ea795b17a91ea
SHA512 6247638fd393bf717ac269a879175bb1f1ed383c6452f02621eeda798ef0152ddb9995bb44bafa4fc0c1f4893aa2f2c13be8312ab19099fd22481d924bf4a7d4
TLSH
T14EE020506ED4C27F6065308701B5975882953823EB802F0D6F41CD887542181F3CE1D1
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 3906548f1dd2d0a1f0cc2b8a75746036c7a9390d59112c763e161731385577f9
MD5 0540cd222ff79e5903872645b61b09cc
SHA1 ee0a466eb580a89602341ca1655e2493b77db084
SHA512 06270fc358d4173e76c44e12b054bac969cb589a652b668d800da185f9de3c5e8068aea293c02b968a9089a0fb648502718b02c681c43eb62b8bdf82e537fffc
SSDEEP 384:WvFwPasu98NzElt73Pjs8PBcbENvad2d6KSOw+mK4DnS95NYcXb:W5JY8CbCa3KSOw7nDm5NYEb
TLSH
T1ABB24A7D9CA06C3E589FB704B50E35279E64423BE6F81A98C3E86B0DC17A58CF343515
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 924b58f504c5e2e8c2c392c20704fbb871be3942d503dbc4e9f880ff6f9391a1
MD5 d1b09af25cb897ae5e62c6aaa23216a8
SHA1 7f16b511c9d2682d3a674946b1575a9d9708b044
SHA512 53174260cde83d3ebc4f6227e3dbbf261b653955ae466e023548410182198bf510922ddbc4deb82cfd70f5746830e2ae5ffc57855f4d07143a97c641a42931af
SSDEEP 24:TLc5UOl0afDdWec9sJ3MkXZfsJq7QB5fc:TA5UUDbg3MXXZfsJq7Oc
TLSH
T1DF92CE22B9202023EC9B4B76FC4749D10DFC12AFC9A7B9459E904D611DA2BC1A6541FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 33624ee2c838dd7306e33b53b3942beb63aad8c6a427c9d71d27ceed5b945633
MD5 50748de41f1f7e45ad5f1de6f9ff6618
SHA1 e57ee9a4ddaa7f6fd05e3af329f377e054e2c8d0
SHA512 bf60cbbbcc2e406bd775594413b2518dc6e7624f7c48406634bafb936c125d158b03320c06a887fc5428b59ef446eacabd989bfdaac90fde21915345d43aa97d
SSDEEP 3:MsEllllkEthXllkl2zEkl5rOl:/M/xT02zn5W
TLSH
T12B4404147FD51445C7401070C017C3500370D41445135743755134177CC57401C40100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

ae6f52fc-31fb-4cff-bdee-ced80a0fe9e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ae6f52fc-31fb-4cff-bdee-ced80a0fe9e9.tmp
Size 8KB
SHA256 427b236357abc048fc54368322bad37018bc623468d3597d7ea7a44af30dc16b
MD5 68533113841051bd839ee99552842275
SHA1 108551a87bc65e753b7bc5f6169246da8b9ede04
SHA512 f0495b93b4555f50fbcdd9b28a76ca6ce71b774f85d7a6926135f235264345551eeca40b55d40b33d1ed93fe97c0e875bc5cb1b2d6b11a5e233a48e5937add06
SSDEEP 96:DqGNkKQsjpf4eEE325ih/cIPURHl8h4otop5T1iDrmB3PnvQixdZuP7inyib3dx2:GGN+6GeLQmiUyhEK/9e70aV0/OmKU6
TLSH
T1D402DA34A8B87CBB9EE79E45B48737139FA1112BEAD52F44D6F81B1D40DB29C2303426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d695319e-0dd6-499b-95cb-de7e7253dd63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d695319e-0dd6-499b-95cb-de7e7253dd63.tmp
Size 8KB
SHA256 5de724e917b4e58bdf8b7d9a389ef8958fde92babf8ad83ee39f54446f932dea
MD5 0411293797cee4bbfa87366dcc9a71bb
SHA1 fbfec1631837db4fb67f69dabf4d37b490a1ba62
SHA512 cff9c68267f63d56af43229d0ae85c1ec4f902ff6bb5d7ef0c1b6b0a3167f6410c8036b84c8ff59a8ba4518a4d0990a3e17a42042ff6af395b33170af20f7dda
SSDEEP 192:vGNn6GeiQmiUyhKx9e70aPHhcJwEO9qyU6:vGNn65e1x98PBcDqU6
TLSH
T10912FA31A8F8687B5DE39991B08736179FA58217E7C87F84D5ED2A0D01EF6AC130B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f1c2ae9-dcaf-4d8a-8318-5883b28a8c3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f1c2ae9-dcaf-4d8a-8318-5883b28a8c3b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f4dd8c2b-7341-4525-802e-a481957825d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f4dd8c2b-7341-4525-802e-a481957825d2.tmp
Size 19KB
SHA256 15fb8a58a270e11923f32c5fabffafe585063a5f77938ac95ae5f1fd40b4f86d
MD5 7dce9a1c6e3938ebd6dbc94bfa92b855
SHA1 df0941b9cce5e734a26a1e1bd0ac95ecb60376ce
SHA512 8746178f61c9ec48731714d2af9e90977a0e1147ba30203215c88a5700a80d0293f6d4ae971d803f183d5dba325a7b45b6c0f5583ebcb7270097aa6223c5b5fa
SSDEEP 384:nYvFwPasub8NetTIt7OgE2s8PBcB/7DnS95NYcw8RIzv4:YXOEB8CB/7Dm5NYn4
TLSH
T150927D746CA87CB6ADA79E45F56E3707EFB0116BD6C41E54C6E99B0D008B2CC1347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\activity-stream.contile.json
Size 4KB
SHA256 9d7ae0dbb6b0d0f47bd15e900c46242ac1de9b7554530565eebe358ba302c547
MD5 f002ef75ad82e837b9c1c8a000497bf9
SHA1 cca6d97664c4cf63f469aa276d1618e85f1ce2c0
SHA512 38093420a16795b6df9158d20cb8efcb6574130e208b4c0a430100d30b731883dc8187e9cc0614c6724497170d3069ce1ba45a4059166be4cec8480985905a0b
SSDEEP 48:YdfEreDZX/WyQgwpN608sim3dSLvdIXn1reDZX/PyQE2vUdGmpK2PQO/wnqVKYBK:TwSNrR3sdEgU2S2dn4KYcy5X6DNmolz
TLSH
T15F91C6AB817480171B31BEE16C5B25A8F11770156AC8CCA8E356EC67D27DBFC40ABA80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 ca501e7b61b7200764e63019d4977cd9cbc11067ef1ce28c7de6daa6cec94bc7
MD5 02c02d7443c4ab5cf6726e20846b6f48
SHA1 44e2c9546b207ceb5208cd4f22b7ed391fac10b5
SHA512 5adde2d5a2d77b4aac964ba43eaa27f7820b2c6505460a9ee845791fbe5c2ca2f6809add9da459dd9f0497c98f30a45d496704777247aa90259d68011f7e7b3f
SSDEEP 768:bByf4qzZn9aIl1r9C3Tigyqwn51MlOOr9bh0gO/LszQiN:bwfLhll1r9CDFybuvbigO/qQiN
TLSH
T15073F8A3A6E8B5FB1BD037DB2C4FB95766A20145E34609D8FCE9CD1CC1CC654023A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 41a76a4354b5f22cc5040b509f21ef634c5dcf042c31eb6933bff124aee41d4d
MD5 a50ad26654ec12666b2c30c27125cd8a
SHA1 be4bb1ab8e0aff8c94aaba315802b2e296c3ca8b
SHA512 733ebea542809413bbfe2f5350cdb36bf5960d54fc008c260e555e76344269716b99d8122afe10e88e8429a010bced5520608def01b5b5a3b7b026925b6a4655
SSDEEP 1536:bw4bGy4mawuk08Mz2MgfY56Y8nxMlWL98:0AGyV5xMzN5G+lu8
TLSH
T1DF7308B3A7A875FB0B9177CB2C0BB54B6AE50195E34506C8FDEECA1C81CC694017A5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

10606

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\10606
Size 240B
SHA256 39c78751f75b68b2fe97083e0bdbdabcb6c36a489a26ec959691e8807ec0f2f2
MD5 4521afe2e7adbee8910f713f59b7b885
SHA1 f10c0f6c66d99939f0167e04522f191ff04a4452
SHA512 94cddf8cb0e8266c8cd27ac58ccaf12c2cd6736b9507f9440c087db2a6c3c1d94e7c73d781209acb32783369f703a3d80834161a6d6b710583c9e0abc75bda7b
TLSH
T13FD095408764832EF3D035B5E224D000741736478906D1517655571C24373CC82817B0
MD5 SHA1 SHA512 TLSH

Submit Download

13306

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\13306
Size 125B
SHA256 86a735ac21321794066f702e30373aa402b65c6d481a9bf517e59711e836584e
MD5 1d76516318953a9eabf1a55dad18d7ff
SHA1 376c03273ebae77a0c7070e298cf55243b85d56d
SHA512 57b7a9d05f54779e7061a1114bc15fc39372beea9227082f597e595c9850f5bd9e37843c401ba81c3a4363799bb08241fc9b1de0e830c1448ca9520da609f9eb
TLSH
T181B09B5559559405D7557C7D0578E048DC0576079D40824174DD5E04013739460177A0
MD5 SHA1 SHA512 TLSH

Submit Download

15235

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\15235
Size 253B
SHA256 6c52dc833f7f2397f1a5bb06fdbf90f4a5c133656b1a364100df01ce05676690
MD5 ffe95ef90f4378d2ae814661b8d517d0
SHA1 ff724ce98f62a4f28acf2256315d250a926730ae
SHA512 103bb087d7791c422938faee4f1c097ea23a4b365eedf1361c7b75396e67b992ef74a22a6a7cfca6f882cb340d4d58c5cfec5f13684d2a01c37d7bd5a44c38ed
TLSH
T11AD095E0C2CD447BF30134B79930D000B4563106A843C0A37344D34C05F33C46547750
MD5 SHA1 SHA512 TLSH

Submit Download

15687

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\15687
Size 222B
SHA256 7ba50ee9938f926e1a1832fe08d86ce6d6324f3cd0af93d8fe3a998130f4472e
MD5 672bf930b2750ca33cff2faa332a29e5
SHA1 38c252f9172ebfcbae4715e483fcf6bc6b5fa6a0
SHA512 44410a66c1411884379b4058594f69566cc5a0f53036155b59fb579d5023bfaad444b24d2408eba62dbd0deea6fe98def7a9ccab43ba89330ea3d0c08a001b4b
TLSH
T1B7D0A780814D963AF2803E76E964D004AA3636168847919271655B4C1537388625F7A1
MD5 SHA1 SHA512 TLSH

Submit Download

17699

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\17699
Size 240B
SHA256 8cc0ee72340f1b3f9543d60a7b000e35c042be2673abe3ff73c5121f5abc62d9
MD5 565ea3a64b71ee67cd21eebdc644a1c6
SHA1 4f0e61694646a9e326beef3ca2331ff0c6c2b071
SHA512 0a2bb19851fcdfdf893ec2127e4e7861713988941d11c4004c77816330f82725ceac47515509b73aecd274cd9dbedb91de5006e9f2e174e8aab2847eb6645899
TLSH
T175D0971083AA407BF3C0387BB778E002FEA73203E842C22270C4828814BB380027BBB0
MD5 SHA1 SHA512 TLSH

Submit Download

205

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\205
Size 244B
SHA256 f66ecdbae6351ae584f3c3498b41e3a8dcf9834b45a8c041b679e7e93405665d
MD5 9901a3191fc59482ca24794676fc9db4
SHA1 638df29e3f95bf3c583de739a4b805137dc3e5f3
SHA512 aea68e111ed3ea4a4be72de39c143385bf4094218a7825c5490cf0fc06b574fea1a57de683694fcd07ac0189819343cbb6134f2f404a965ffb42fb6198ccc15b
TLSH
T102D095D0A654C55FF3507D76F5B0F4047D2E31539D0BD15271484399002738C91477F0
MD5 SHA1 SHA512 TLSH

Submit Download

2199

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\2199
Size 249B
SHA256 a7b44127459bfce41d61ce0b30361271964a6336db083ba268df1f803178aa13
MD5 903350aaa6e2979fa74c131fbdb448b4
SHA1 fc9ead2b16005036f42cd7a662c882b53cc31bb0
SHA512 7a53da375546c2a909ee2cfc812d41f8feccc15a78652fa35b37596cb799aa30a83d5a9b6007d56d3046db17bb6ca7aa5c45d590599b53318146aa8ab5a4cf6e
TLSH
T1AAD09550914C012AF2407F7F863CD40D5C353507D445E11175D5730C6363340969F750
MD5 SHA1 SHA512 TLSH

Submit Download

23167

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\23167
Size 248B
SHA256 ea572b2bdabf0bdb5064c12878c2a47adad8d9ff1994a2f3cd18443b4a5238be
MD5 b8db9247424b5c6cd0dfde1158069fe9
SHA1 a4d8bb4dd8c8eecfe9125d09d63787479b79d8d2
SHA512 94c914af6fac9e915ce9f2a58b96585e5c4209f790e4e9d573cf2855e481e95ae56a121c8570f222cd7d7d06ab9bc48f045e67453135bb05a7a794afad30d885
TLSH
T1B1D02B50920D402AE6406E7A8734ED0529293207D44691517298434812B334419DA6A0
MD5 SHA1 SHA512 TLSH

Submit Download

24050

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\24050
Size 52B
SHA256 349641a7d8ec6fb9f0527300ae8e46e0171f808e71bd73eb95507597d472a463
MD5 4b00a0a4ad746587d6f906e35c954b81
SHA1 37bef13dff01abb3cefa855a93736c8f58665229
SHA512 22dab65ef957404d0f5e2edc90da5e9c4dd44da42986b98e5e2a1097400d54cca2c68dcc18aa200c46dd0bb1949fa4ec0787baa00954957da666519a1ef4434a
TLSH
T10C90020452758D08D128907E090080B448103F005CC4022335A2176114132D61004150
MD5 SHA1 SHA512 TLSH

Submit Download

24563

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\24563
Size 242B
SHA256 a98dccd028a80783d8ebee418e6d1aafec6a398cc9e45d0462c89fdaeeba37b6
MD5 95c6bc5bae91d07d9ce51f0681c8e43c
SHA1 07e061817045832b540da38ed3f07a3be39d80b1
SHA512 e2ef31dcfbe66c8566067586811b504ddf8daec7939192417cb8acd820bd02e539a1814890c5e8e92345cda6d80376c21f03639c8ec8f9abdeb81fbec113e0c7
TLSH
T1F0D09554C1544579F35037B667F8D04C7D393243E942C1737048574804B73C45117361
MD5 SHA1 SHA512 TLSH

Submit Download

25369

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\25369
Size 260B
SHA256 514932025b25053fa7f3dc97d2c876f850fd413cfe74d02f571a95b311143ec2
MD5 dbe80a0b0c1376dc15cae233f140fd8a
SHA1 e3bb7467e7a536d931f6157f295b1220116309ed
SHA512 7af5b55912b7ade99024b767aad74761ae5ca50437823950cc77fb2a8882fa98b035216c709fc393c73ccb10d996304bae514b49c1747d4558f2104241d4f2ee
TLSH
T140D02B40CB56193BF64074679539F505BA2A3307ED479112F085426C04AF34492417A4
MD5 SHA1 SHA512 TLSH

Submit Download

27407

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\27407
Size 239B
SHA256 d06bfd3e3b85e1ddbc3f9f741c1bb6041401278eda546cb31560df3c2e14bd70
MD5 c4a734c3f3c18e6bc65b7e8fd76e2b1e
SHA1 61834732b98afa415cdfd0816f076989790c12f1
SHA512 ff1308a6ff9cd49efac2eb5443737dd405ce65092cbca72cee60bdcae142a738bb9c14df92a3ecfca124ba73f4f124a945c3050fff0de5bdba2ea2196f5f7b7a
TLSH
T103D09790837C013EF3403B369138F8148C35381ACAC38122BAD82348547B3C2A03B790
MD5 SHA1 SHA512 TLSH

Submit Download

30121

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\30121
Size 227B
SHA256 79e34829267d02045389c676863626b53ee96ec1e98a0e0f22329268b0ec3fc7
MD5 6a2d96e4b9dda1218e8e47cdb1b9b222
SHA1 9814f2cd721cf5bbe6040bc14456f35e6096c2f6
SHA512 d7d4690ade11ef210c2488a0a020a3c2c02b5135fc6fc60d0987f0ffa2d381f370aa606dc38f886170a07eb4e445082a136544687250c58ef49535cc713030c7
TLSH
T1F9D02300C30C443EF3513779B560E00CB9273A078903C2137164430C0C373D88207372
MD5 SHA1 SHA512 TLSH

Submit Download

30479

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\30479
Size 252B
SHA256 977ad95f89bde7044b3874830c17e20578461227e535e76d3496356dc62e87e5
MD5 c8cdc59d50f57f0caa519ffbb4b1df8a
SHA1 567d1f2f2e938a96956efd6a0475ac8301610f24
SHA512 e3a6a447bee83c843812431f256e77d9bc25ab8461856ba6372cdcaa9d8b6ae9731130a4c2b9d0fc662cc92913d09c170f555e54393054b6bdcf5c36cc612c56
TLSH
T15CD095D4C14D0D76F34079775534D40434593207D507C153714CD34C14F334441D3761
MD5 SHA1 SHA512 TLSH

Submit Download

30582

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\30582
Size 230B
SHA256 3fb2e4141230919bc46d8ac9f51f14ddbe6a5f20b0e6f4f08006ffe86c0bd966
MD5 22fa6244aa99e1d8dd0ada9d0cd269f4
SHA1 378e73bc831731c945d93f52f86271f29274e568
SHA512 54a91a8dc164ca8cb9d8d308fe6a26288f10c830c3409b65e58411a61e7d85ef6943cb9a8357f9cfac16ade5da3f1cadb149366b4ebbb7299958db0995460b7f
TLSH
T11CD097808258413FF200BE7AF431E00C2639310A2C079262B064174820333D84187B20
MD5 SHA1 SHA512 TLSH

Submit Download

7719

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\7719
Size 238B
SHA256 885ec5ff8284dde0fa26b4073c691ed729eaed4b8448490a2d14e03020ae2ef3
MD5 ff041c1a742a9c23e524ad999c66f0e3
SHA1 36441fc077237aff0230b80d9ac7787c9cce89e6
SHA512 b7eb7311f980ebc0635ce5e428b823e54fca0c6799661d58aeb4a237f00c4f453e49436800454f68ffa7804d3b70b454e0825e211f00bb9cda61b11d5fe41be9
TLSH
T175D097108348012FF3402A3A8038F0100E3A2401EBC392B2BA8C124C507328090A7792
MD5 SHA1 SHA512 TLSH

Submit Download

992

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\doomed\992
Size 234B
SHA256 e3918c7821ef7850ab5e27accd3305d5ee148bc50b9078f4e523f9a31ed47daf
MD5 896c517b47ee141896885f30fb962875
SHA1 f1bf151f33d5efa3dc939be97e21a879c60e1315
SHA512 c6fee4dec1e56e7085a02c27490c4159700dbf9466012857b7b9761eb800067286b9b493f4949df904e95cd8fcf14d74c725d3eca313dec17a0b0245c48528e2
TLSH
T105D09780C28D903DF383296AE038F4448D26340E4887A192B0C4174837772D5210BBC4
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 355b43040cb989becc963a02fab647697bb1a3f11cc2923cd38353ea617ace67
MD5 da4aa00ce7f044ca42b4a1f74645689a
SHA1 9f7cb22474525759e4409619bb14d398c3dfb842
SHA512 f6ff84b070cf0fa992b25e857036529c899d8ec1c505850c6047db9f90eae343db59217889ea1ef2acb948a013dc997664103f42a813b0bee9d31895df235812
SSDEEP 384:HXwIiO024Y8WTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAs8v:36ZY8WTToXJWTTogB7S/AmVAf+hRMb8v
TLSH
T126728E7DDF013CAC265790E8C8B983598D1CB6ABDFB5C02D159C3D09CA8861A71F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 64d0f1e80d3050cbc94779f331481f846f9a3d96b68a8ffb7dd52559541f5d0a
MD5 893a8cdd1543a815e56a2e9db4e67868
SHA1 da1c38f11717bade1eae88342fd4b6c5d772636a
SHA512 a6737b410ddf8937dcf5ef12fb14489817b7454965a8c45f5dfb9f90dac033ce4d0661e2b302b1794d255e908c696ba1256a5cb90e7a81175c980f2d54ffbeb4
SSDEEP 3072:j3lIf60JATFXr0DfsWiD+V7vxv1Gl4fhyiAaqf:pI1AZ7qRiD+5vx04cEC
TLSH
T135B3AFF6DFA28D7C55FFD42D5682893EFD272404B3A73009C963331462C6BB86679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\axxisef0.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 3bab924e3f13a9bfe0f0b575f8bbc874e1af635456b61e5ab761ba9df04573b6
MD5 8a633750ae5342cad74d990c5ec48aa9
SHA1 1cb3bbc9ab12d269e38a5f127ff2e4e219260ff9
SHA512 c03246999e0a755aca76e7c85613bc719db158925fb148c496c41573883934d4a8cbf1128833f0d96e4a1e81f612c0caf7afab707b438aa209341fae65e00048
SSDEEP 3072:r3lIf60JATFXr0DfsWiD+V7vxv1Gl4fhyiAaqa:BI1AZ7qRiD+5vx04cEJ
TLSH
T173B3AFF6DFA28D7C55FFD42D5682893EFD272404B3A73009C963331462C6BB86679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1f759bd-78fa-42cb-8c50-c0a01be5168c.tmp

Path C:\Users\Admin\AppData\Local\Temp\c1f759bd-78fa-42cb-8c50-c0a01be5168c.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

403e1fe9-75e7-4dd8-b15d-26e6c9821160.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5004_1471633191\403e1fe9-75e7-4dd8-b15d-26e6c9821160.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5004_1471633191\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5004_64023133\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon-1

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\broadcast-listeners.json
Size 209B
SHA256 63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24
MD5 97c3738563a9448365a735f5f29ed3d5
SHA1 15a81433236ca6e6ecc4e1c8d0fdb8523b265c57
SHA512 ed98f42d5d02ab53a9e50f80b312bed4b5d05d053bec582cf9d619ef91251e86cf4f4d1123c645500fc1dc4673b49a8b7badd3f3a39f565ac643ca4fd0157ae6
TLSH
T159D0220E14177C7F4B486229F00827800B9A10093270A03DC3AEA0540A2AAFC4008190
MD5 SHA1 SHA512 TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 a5f2176fdfeca65e5b502e5c8ce5c848f03e337a6cb5b9df2234fc1f10f36438
MD5 3af9d2593016ece613a0aac2a7ea6912
SHA1 ead1208cf1cfaa9f24b06f7be9fd180e1b82e94d
SHA512 34a5e7672185e97541742203010e3b686923953991e9c5225b1813330dc522fb50fd54757e5a859b546302ae51b7b3d89b91abd77bf95dd5e929ed077f0a0c4b
SSDEEP 192:tOv5zboHCAZj+yjI41d66Joz0dzgCl6mc0dz:CboPZj+yjhd66JozQzgC1jd
TLSH
T116D1EE59FB29463FD408023BDCB61B500F35389A985E3F19329C601D2D972EE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 f05be9e6392f5fe146a01ece53ba29723c8c5ee548f8954e21a4599d4eb5b33d
MD5 ffa633227fd7f153dd9bc71a16fb1eb6
SHA1 6c8f4efd7e6554024eb6aa0de1bf22d68acdcf8a
SHA512 5f73f167398a972b28eb066940b247711938a907740f29498126f57f431059fdc3aed0dd53af42c0d67c694306302cc332e8d78a22de20afe7f2a9abb1bb15f0
SSDEEP 192:p1d66Joz0dzgCl6mc0dqOv5zboHCAZj+yjq3P:nd66JozQzgC1j3boPZj+yj0
TLSH
T187E112A4EA28467FD408437BDCA51B410F35389A9C4E3F19369D601C2D472EE7B8E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 891f45d91c8317365ee9a9e785ce7bc6b61cddb8989b791a61404bea7bee0e8f
MD5 9606a0e7017113a73a754fe5a8f067f3
SHA1 4f86223a80c1befc8fcaffe0373dbf93b00750cd
SHA512 7cb0b4b287e35f6a50358fd3063783b060f939132cf9e38f2a5a9dd10a908298a22b9d9e69666207a44b1da03cb8dd62398d3f404552f21afa5428224d7aa299
SSDEEP 384:mhCIc5bbkXmaVeqIGcmhuKeYMyKDhmFVbxbAHzHud66JozQzgC1j4boKj+yj0z:mhKbk7DIGcmhuNKKDhmFVbxb6H/mi2X
TLSH
T1E8E2FD44FB2A953FD41452BBDCA51B002F79B88658192F9B3A4CA46C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\db\data.safe.tmp
Size 78KB
SHA256 4047ccedc7cef208a6a799dc6f2192c2bcf473827a3c2a3ffebd0700302f13a7
MD5 8277b0b9783874fb0633f9db3b227e73
SHA1 3e000b8c0a16ef56eff57e1ff8d3a15c8e433849
SHA512 892f026dc8a825b48a63f2acd88d810a5675609dd8cc1f501dcde504c631d62b4c7e8313459fa21a5267287df609dc0e3a9e621b6fdf66ffef9f81f5b4c0fd74
SSDEEP 1536:O/8ddyYywSVWACHuNyLMVjf++f9jHht73V5:O/8bBNACQx+O9jHht73V5
TLSH
T14C73BF90EB1B407FEC2485BFB495572C2625F46149589B0B3AAC04752DCB3FF2D0EA6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\events\events
Size 1KB
SHA256 fa4a537e18a0d17a8e044967d7ad6716ab8605ca71ac9c8be6a28a67819cc9a3
MD5 14681875fdbe20e3a84b2a4f48f3f2b2
SHA1 555ca03d7cdc0445408e05514b9d8a73a9725595
SHA512 7f0cba96df21c8e7157c14ba9c762cc71832656ed905969d1e3be2aa6f5557bdcacc43e7478630dac702e5213cff7045428f3aeb4588ce48481f35620c649c55
TLSH
T19221495C3DB84D6AE88BEAFC7440528E93954E0B18871C438E52DECDCD91ADD32EE439
MD5 SHA1 SHA512 TLSH

Submit Download

2e52dec9-6864-4f87-8e07-dac6184e9a97

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\2e52dec9-6864-4f87-8e07-dac6184e9a97
Size 235B
SHA256 ccf48ef9b67aeae0272190e4d8b15518c36b2eedba6553285ecf22fbc1204ea1
MD5 06a6d063aade7ff049123c47c3f90240
SHA1 dc36235bbc787ec14c25377808da0235888e8057
SHA512 e914e3f896284d919ae1d50b68111f802e3b7845518604c6510972a2cce73666336b76ede0b8dc68211d136b3a8b2d06fe954ed1711d9520de8a8e6b1bc9175f
TLSH
T146D097C4188CAB6C08005F03F0E029C2B0948C3324B4AC20EA91007899FDED8025682F
MD5 SHA1 SHA512 TLSH

Submit Download

33222119-aa7d-470a-8d4b-a19855e0a166

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\33222119-aa7d-470a-8d4b-a19855e0a166
Size 886B
SHA256 eaba77fdce81e22ecd15692d32d922fa7fd72abbe349b2c15e86f8ca72915eb6
MD5 0b4064a9ccbbd8cc7315a5ff65797ea6
SHA1 063f438a690f212f5dc1c7813711e2847c0055e9
SHA512 bac9ddca115e7ab6f22c03c03ae2d1f21a33f6931522ca091a943b5973cd435fdbcbe580d822ad5f8080cfeadfdad1017289287b6162710825676a41526ec6a2
TLSH
T15C1123419A74B5F2ED28C35B48E6BB424BB47033C0C959187E598A1C0DEE57FA35A21B
MD5 SHA1 SHA512 TLSH

Submit Download

47d666de-002d-4100-915b-96b77769a059

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\47d666de-002d-4100-915b-96b77769a059
Size 883B
SHA256 6da4b7a9eef198c2ed2f5d5beb7ea808e2c7d4f1c2e822630ff885683de76012
MD5 89ed14dcd3b8e71cb411dc28837399ae
SHA1 13653a1d8e3b7967dfb066471158d8d9c47c2876
SHA512 b69864ecd775e9c1f73b624213f74985c5273e92d5fe1b2b420242a1d6dfcb07dbf41b7989c004881ff5633ae9e9907594067bd0c90ebb58a775ba7eb5cdb982
TLSH
T18F112741D77175B7DC68C34B8465370297F4752380C994043EA48D180DBEA2F5726647
MD5 SHA1 SHA512 TLSH

Submit Download

4869d7fa-ebad-4704-b814-3ceecf360732

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\4869d7fa-ebad-4704-b814-3ceecf360732
Size 235B
SHA256 32a457772efd3ed6831ebe88d26bdb1af2d0d0c148a39e8d0a744da0648eb9b0
MD5 93a23d673e520bd2019689b88b478e5b
SHA1 31fc8fa2484c4df7005e92f990f098d4551adb40
SHA512 e7e496a9f7c8b945886ac7795edff7d73c3be60e99b333ca5f98aa62f3a049cbe2f99a1a316501586efc857b2a77fb90b7a81f2dd6d8362f7aaab9f50b822a75
TLSH
T18FD0979418EC271E0C040F13F0F139C230484C3310B45850CAA104749EFEEC882A2817
MD5 SHA1 SHA512 TLSH

Submit Download

4b17d47a-7cb2-4bd1-a281-3fb17ed8762f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\4b17d47a-7cb2-4bd1-a281-3fb17ed8762f
Size 16KB
SHA256 921bf183bef35c65dfe2b097b2e70711174ce5330f785d187a8a705a5e73d973
MD5 fa17ec13cc04279c8792eb969fecdaf9
SHA1 d31a6786766b10f2999f040cc7e86ba018fab12f
SHA512 14704947b2d7402630ec2af9f80e7ae231a1133bb060a18a58dc6abcdae4dffb6a2c6f1402f473b60d9e4fe5c879fb861c60dddc5c6b42cfed02c27c3f5aa1bd
SSDEEP 192:ZX7zT19BMJOoXeTua/U0JUyGQt7fCGqWtNAuKjHdCgK6Xvcz8RR+87ap0keQYhey:BiJPU9tXSkgKKvcIRR+87apMdheQ5
TLSH
T1A172C756682056BA8291E368D4FCBFC3E5F538CF4C419FCA97E4BD0869DE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f4fc283-ac85-43dd-8f9a-4f0a58d1b24e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\4f4fc283-ac85-43dd-8f9a-4f0a58d1b24e
Size 867B
SHA256 a3c77303b14f5ad8eb1bedf5d8c8d5fdea5784b4a9c9d23811a785356309fd7f
MD5 0ed1588536368fd84dd0de2536a80f53
SHA1 d58bc88da44ae9e9e5c4b49ce18e9ca11919d6b3
SHA512 4a10e1157e4c70563504871e7ef2633d13368829c216ba21021400bf1aabcb940ce0a79606469fe788748d479c6b134f949da75d7408f6b57e9a9c89a6f90390
TLSH
T18F11C0D687217467BC38D20ED565B31B6195A03284CD82097EFC84294DFB43F112670A
MD5 SHA1 SHA512 TLSH

Submit Download

a0668898-9e3a-4878-b414-2c7066bccadd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\datareporting\glean\pending_pings\a0668898-9e3a-4878-b414-2c7066bccadd
Size 2KB
SHA256 994184ab2ef2be26dacbc12e1a3d78c968337d9744c70cd17b1add0acc31098f
MD5 1d1d314d7fa70f3ae1a004874d3fff87
SHA1 f620931ceac4cbc07946efca91e176f1374205f1
SHA512 08dd4fb9ab3d5bc087aebad09fbd218ab14f2cd8549ca2af7089dbc55dd156757ce182277bf2175573fa3c5dc33f3880b5c7b70e1608cafbf06a47dd347d5f6e
TLSH
T1AF41349C7AF85D77AC8AF15D84D2338E53644A0300C638436D51EE0CCDDA7AE236E52B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\extensions.json
Size 14KB
SHA256 33420010ef5e4125879687170141fc97ce3025fd67a6783303297498e6536812
MD5 be6a318cda34c3c7ee7f0c670ca4fd0c
SHA1 7b3a02aad36496db8a4aa0bf116577a022137e0d
SHA512 1b978f166877a6d5188e6ea89936514fcc6fa41928dcd1ea8ce30d404effadad1cedf259b825453fe8b8591696c4705256533376e436c02c16379d4b37c1857d
SSDEEP 384:0kI4vXUmldv4lT8dhWa94zE96ouL4HeL4PvL4HIL4HpL4H7:bI4vRfUIXj4E6f4E4b4q4h4b
TLSH
T12162531545148EB8298FA78AAA367E02C37D473B70445C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs-1.js
Size 8KB
SHA256 30559e2ca232f63b6ada44e7903e5720f10df344d98fe02af3c808c9198fcdc3
MD5 cd6d596e4f9b6ee7713629021653c281
SHA1 1e437fbbba5dae2b3de7d473ea7ce5a5582f715b
SHA512 0a286d0753e2d9811967ec3c4708e1b82b2fec99255bd4afc8a9870c7ae1aa03258723b21a472eb5f0accae36724cf05dd4abf5e62ee1bbfbbe29742ebd28ab1
SSDEEP 192:b5luNHfcRLFfN9IP/aSSZPLVCYzYaiBw88+ZYyyF1:rFh5MwD
TLSH
T144021E3C54058B7F74B676BCAC2488315AA2013BBBBF68D751B954C4010CF7842FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs-1.js
Size 6KB
SHA256 d6478e69bcf788fa94e5e51537e17f77a01a5f0b4383dd5d46118becb252892d
MD5 a1d3b55489e921c059d1425aebd1a7b7
SHA1 005bfd282a5f0b158ab90e190706612884e55a7d
SHA512 11b3fdf9f0b05e4415a2c2dd0f1c5c08dcfc0367c298ec39523d7fd1de57e7848c7df620fab96854b0e874b9941ad2637a7af2e81a1d1bc66cdfe2c1c7899e4e
SSDEEP 96:xHQSUTUakqGqLFrfN9I1zS5/aSSlcdv9jrnyHgmnLVZ4Bw88H8L4cn6Va:tERLFfN9I4/aSSdPLVmBw88Y
TLSH
T148E12E7894088B7F64B677BC6C6888316AB2013B77BF68D750B954C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs.js
Size 6KB
SHA256 6eeea97261459d1b5f1c2a48e55de93dad663ca876c77f6b05c62f620720b7ce
MD5 3d89ccfd2adc4a3effe06515413195c9
SHA1 4d03b718ddef56cc53a1847887533f842dcd56ba
SHA512 51e2aa4f08545f8bcbbe7c667fd3026b188f6494aa72fd37dbef904e90d72078138ddb1edd57026686aca2091234cad348107fd56c6c7e57a7902e42f5b17d8f
SSDEEP 96:xHQSUTUakqGqLFrfNaq1zSpHSSlcdv9jrnyHgmnLVZ4Bw88H8L4cn6Va:tERLFfNaq8HSSdPLVmBw88Y
TLSH
T1DBE12F7894488B7F74B677BC6C6888316AB2013B77BF68D750B95484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs.js
Size 7KB
SHA256 728a2fdb2ec3445d5e155ebc04f631124c981850ee9f37c6cec9eb3da2cb3926
MD5 4351469a64560387935a1ffb0ca24de0
SHA1 be44ded61a7c87e60c7c2a1427bf8e1c198d6ff0
SHA512 3a98ee6a3c0fa418a6517e59ed201421289a53a9b812b228a2a5a3f0207f71c4b8612851c8acb661acc44bd4a91bfb5e805640f0f81caa999a01ba33bb6ff666
SSDEEP 96:xHQSUTUakqGqLFrfN9IObzS5/aSSlcdv9jPnyHgmnLVZ4Bw88H8L4cn6VzGS:tERLFfN9IP/aSSZPLVmBw88v
TLSH
T1AAE13E7894088B7F68B677BC6C6888305AB2413B7BBF68D750B954C4014CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs.js
Size 8KB
SHA256 98ef14abb918e22c7091da46ad20a965bbaa52ea02fec6aad9729d4e7946ddcc
MD5 78e925e235fe698cfdcf81d736ad05fa
SHA1 338b4e1ae3747c8409de745b66bb3b8ddcd2d19c
SHA512 4ece336833e6ac471a986f2dbbdc5612ae0eb3b2d8f28aebe70acf07a7662821c3d29067707d16dca6cd6fb473e1711fb4d0852bcef897fe8449132cf5ea4a08
SSDEEP 192:b5luNHfcRLFfTc6iw9IP/aSSZPLVCYzYaiBw88+ZYAUqydii:rFT5MwG+
TLSH
T155021D7C54058B7FB4B676BC6C2488315AA2013BBBBF68D791B954C0010CF7442FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\prefs.js
Size 7KB
SHA256 858743930aa6a80119060e3f27cfafac1a401400ccf2ddd8d18775ce84319d4e
MD5 722af8e8816f434983b590377e02f2f9
SHA1 905544971e84434f972f7ed0e8eddb977bb0f670
SHA512 a281071005650de679d146ba96a895b931f41b549a2786b157ed377b5bccede59554d777821117e08a218523c0e59934c2873008bfb47e2c02210f6c500d64e2
SSDEEP 96:xHOSUTUakqGqLFrfN9IObzS5/aSSlcdv9jPnyHgmnLVZPBw88EF8L4cn6VzGS:bERLFfN9IP/aSSZPLVJBw88E1
TLSH
T108E1207894088B7F68B677BC6C6888305AB2413B77BF68D750B954C4055CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionCheckpoints.json
Size 228B
SHA256 df49028535e3efe4ed524570624866cca8152de6b0069ebb25580fce27dccebc
MD5 66bdbb6de2094027600e5df8fbbf28f4
SHA1 ce033f719ebce89ac8e5c6f0c9fed58c52eca985
SHA512 18782069ef647653df0b91cb13ba13174a09ce2a201e8f4adfb7b145baf6c3a9246ef74bdad0774a3023ec5b8b67aba320641e11dd4b8a195e1c2b448202a660
TLSH
T190D0A783C6055075CE83696CB39C7B519E3E04F672640245B1AC954C187F027414B843
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 409aa28e59d9ca326936448e4b890056eac351fb579f151c6da55c5d882194b6
MD5 14add63fabc85cec858cbe07be99a273
SHA1 88c0b9f546e92d107e5d0eacb17f4c8220626200
SHA512 f66b06b4c0995a36fd361ccb578147ec60a4573d0b199085fb14e7a2477b8461ad5c94a6032d3eda42a0e575a41de481064bbaf95c054e41db20ea84e438171f
TLSH
T14A210D82FDBF1CF16955E35FA0C51FDADB2D4016836464F0C448AF00159821E7FDA61E
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\sessionstore.jsonlz4
Size 1022B
SHA256 a5f19106ec34883fac5573cc54bdcfa8657ce861dbe5bde8a529fbf27e27c15a
MD5 7f6d25caba71e55a8afb768b076068de
SHA1 cb6dfa81e7455de1f88800b57e25ae03aad04eda
SHA512 31bf20171c1c141633222b4387829fbcc4a1d1075114db41fa4a178a553fda20b200c8f8f930f02d677b6fa39ef6427b8ca3c93ed35469dce01fc956447ac638
TLSH
T13511A8CAED5938BA5F51C09639C5DF7997AC7016037E05C0F64D66020258A7FE25F2C7
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.1MB
SHA256 024ff3cbdaf322b92633260698556b5c47f7a698caa0f8df0e7f7668adcb930b
MD5 b07f7c17d444b031adb0dd99d6aa17f0
SHA1 fa56582f4db3379453f53fefeb540518981fc143
SHA512 c90222d48c47609eda8d8108e8dd7942468dd9255ecc2923f48f0c91bb9d9802aaad6b990ffae592c82b80f0b09aca96e11345b72a5f0ce1b142da07b017d240
SSDEEP 24576:SNJKq7imi+fOPjPt5YoEBhTzbDQWsbgQPhTSxK9Z15P7UNqs5Ahe3QNo5U:SN3akkD/YRhV0SxmT5P7xnhsqo+
TLSH
T102462AF820D1A257F3414033764593EF21EFD00C6027DA085BA95AE9A5B8CEF9E16B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\axxisef0.default-release\targeting.snapshot.json
Size 3KB
SHA256 508b31f6944a7272c54e1ac28dc41ad2fa0cbfcb21acb87b87268dc58fbc338e
MD5 3dc5b2b1c801d25e4921e58b6b670d1d
SHA1 76214e0cf9bdf0ec0b8686c12776b0048612da89
SHA512 12429c05f2af4f39b0ab79fb833cbafc33494090e73b6cd8bb2043c497aafe1c1fca48560555bc38068e020b4b2c8693700ef35e741d3235fb4710e91935faa3
TLSH
T1B371600CA61CA4FEA66BC3C0EA44BF978BBD053770447458DAFE460C95FB5FA122611B
MD5 SHA1 SHA512 TLSH

Submit Download