8e3ae377a8835cbaf451748fb97da75444ab5fd1c17b1293c4ac887ededa303e

Resubmissions

15/04/2026, 12:20

260415-ph4lesdy3p7

15/04/2026, 12:15

260415-pe7tnsdv8j7

Analysis

user interaction
yes
max time kernel
899s
max time network
904s
platform
windows11-21h2_x64
resource
win11-20260130-fr
resource tags

arch:x64arch:x86image:win11-20260130-frlocale:fr-fros:windows11-21h2-x64systemwindows
submitted
15/04/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
REAPER_KeyGen.exe
Size 430KB
Sample260415-ph4lesdy3p
SHA256 8e3ae377a8835cbaf451748fb97da75444ab5fd1c17b1293c4ac887ededa303e
MD5 b444e2faf68b38dc77f98e46acb11c56
SHA1 546a4702f6b0158669b7ee38928f9d50b7793ff2
SHA512 866ddfb5ca3454acdd2b7398cd1afa1babf8a4cc54dd2d3c5986aa10289df9db07d1ca10dccd98ada190a8acaa66c47f02f727af9d1d5510e5e130b8278cf259
SSDEEP 6144:BX45rw6T2nA8P9tlASRzKW3FY/YAKpW1PoXqab57xjCnM+7cTxCKe9c+ZYbn3XHh:BX4Lc9t2Sll1+971PG3j/RxIZsnr5P0e
TLSH
T1D4941200FD6445E3D0660B3698BB99713BFB7D259AE6160B1398F33CBA73642501BB53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4972	keygen.exe

Loads dropped DLL 2 IoCs

pid	Process
4972	keygen.exe
4972	keygen.exe

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
157	pastebin.com
196	pastebin.com
211	pastebin.com
212	pastebin.com
213	pastebin.com
380	pastebin.com
475	pastebin.com

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	keygen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	REAPER_KeyGen.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Winword.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Winword.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Winword.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\NodeSlot = "2"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	keygen.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Generic"	keygen.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 = 8c003100000000003e5c363b110050524f4752417e310000740009000400efbec55259613e5c373b2e0000003f0000000000010000000000000000004a000000000031271f00500072006f006700720061006d002000460069006c0065007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370038003100000018000000	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Generic"	OpenWith.exe
Key created	\Registry\User\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\NotificationData	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	keygen.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	keygen.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	keygen.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = 00000000ffffffff	OpenWith.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\MRUListEx = ffffffff	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	OpenWith.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	OpenWith.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	OpenWith.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
2496	Winword.exe
2496	Winword.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3152	OpenWith.exe

Suspicious use of AdjustPrivilegeToken 15 IoCs

description	pid	Process
Token: 33	4996	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4996	AUDIODG.EXE
Token: SeDebugPrivilege	3796	firefox.exe
Token: SeDebugPrivilege	3796	firefox.exe
Token: SeDebugPrivilege	3796	firefox.exe
Token: SeDebugPrivilege	3796	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe
Token: SeDebugPrivilege	5488	firefox.exe

Suspicious use of FindShellTrayWindow 22 IoCs

pid	Process
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
3796	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe

Suspicious use of SetWindowsHookEx 53 IoCs

pid	Process
4972	keygen.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
652	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
3152	OpenWith.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
2496	Winword.exe
3796	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe
4768	MiniSearchHost.exe
5488	firefox.exe
5488	firefox.exe
5488	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 4972	4324	REAPER_KeyGen.exe	78
PID 3152 wrote to memory of 2496	3152	OpenWith.exe	83
PID 2496 wrote to memory of 5420	2496	Winword.exe	86
PID 4748 wrote to memory of 3796	4748	firefox.exe	89
PID 4748 wrote to memory of 3796	4748	firefox.exe	89
PID 5272 wrote to memory of 4808	5272	firefox.exe	91
PID 5272 wrote to memory of 4808	5272	firefox.exe	91
PID 3796 wrote to memory of 2304	3796	firefox.exe	92
PID 3796 wrote to memory of 2304	3796	firefox.exe	92
PID 3796 wrote to memory of 2304	3796	firefox.exe	92
PID 3796 wrote to memory of 3384	3796	firefox.exe	93
PID 3796 wrote to memory of 3384	3796	firefox.exe	93
PID 3796 wrote to memory of 3384	3796	firefox.exe	93
PID 3796 wrote to memory of 3384	3796	firefox.exe	93
PID 3796 wrote to memory of 5312	3796	firefox.exe	94
PID 3796 wrote to memory of 5312	3796	firefox.exe	94
PID 3796 wrote to memory of 5312	3796	firefox.exe	94
PID 3796 wrote to memory of 5312	3796	firefox.exe	94
PID 3796 wrote to memory of 2948	3796	firefox.exe	95
PID 3796 wrote to memory of 2948	3796	firefox.exe	95
PID 3796 wrote to memory of 2948	3796	firefox.exe	95
PID 3796 wrote to memory of 4216	3796	firefox.exe	96
PID 3796 wrote to memory of 4216	3796	firefox.exe	96
PID 3796 wrote to memory of 4216	3796	firefox.exe	96
PID 3796 wrote to memory of 4216	3796	firefox.exe	96
PID 3796 wrote to memory of 4892	3796	firefox.exe	97
PID 3796 wrote to memory of 4892	3796	firefox.exe	97
PID 3796 wrote to memory of 4892	3796	firefox.exe	97
PID 3796 wrote to memory of 4892	3796	firefox.exe	97
PID 3796 wrote to memory of 4784	3796	firefox.exe	98
PID 3796 wrote to memory of 4784	3796	firefox.exe	98
PID 3796 wrote to memory of 4784	3796	firefox.exe	98
PID 3796 wrote to memory of 4784	3796	firefox.exe	98
PID 3796 wrote to memory of 5980	3796	firefox.exe	99
PID 3796 wrote to memory of 5980	3796	firefox.exe	99
PID 3796 wrote to memory of 5980	3796	firefox.exe	99
PID 3796 wrote to memory of 5980	3796	firefox.exe	99
PID 3796 wrote to memory of 484	3796	firefox.exe	100
PID 3796 wrote to memory of 484	3796	firefox.exe	100
PID 3796 wrote to memory of 484	3796	firefox.exe	100
PID 3796 wrote to memory of 484	3796	firefox.exe	100
PID 3796 wrote to memory of 3788	3796	firefox.exe	101
PID 3788 wrote to memory of 5488	3788	firefox.exe	102
PID 3788 wrote to memory of 5488	3788	firefox.exe	102
PID 5488 wrote to memory of 6136	5488	firefox.exe	103
PID 5488 wrote to memory of 6136	5488	firefox.exe	103
PID 5488 wrote to memory of 6136	5488	firefox.exe	103
PID 5488 wrote to memory of 1412	5488	firefox.exe	104
PID 5488 wrote to memory of 1412	5488	firefox.exe	104
PID 5488 wrote to memory of 1412	5488	firefox.exe	104
PID 5488 wrote to memory of 1412	5488	firefox.exe	104
PID 5488 wrote to memory of 5536	5488	firefox.exe	105
PID 5488 wrote to memory of 5536	5488	firefox.exe	105
PID 5488 wrote to memory of 5536	5488	firefox.exe	105
PID 5488 wrote to memory of 5536	5488	firefox.exe	105
PID 5488 wrote to memory of 1020	5488	firefox.exe	106
PID 5488 wrote to memory of 1020	5488	firefox.exe	106
PID 5488 wrote to memory of 1020	5488	firefox.exe	106
PID 5488 wrote to memory of 1424	5488	firefox.exe	107
PID 5488 wrote to memory of 1424	5488	firefox.exe	107
PID 5488 wrote to memory of 1424	5488	firefox.exe	107
PID 5488 wrote to memory of 1424	5488	firefox.exe	107
PID 5488 wrote to memory of 5020	5488	firefox.exe	108
PID 5488 wrote to memory of 5020	5488	firefox.exe	108

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\REAPER_KeyGen.exe
"C:\Users\Admin\AppData\Local\Temp\REAPER_KeyGen.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Users\Admin\AppData\Local\Temp\keygen.exe
  C:\Users\Admin\AppData\Local\Temp\keygen.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:4972

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004DC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4996

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:652

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Desktop\reaper-license.rk"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2496
- - C:\Windows\splwow64.exe
    C:\Windows\splwow64.exe 12288
    3⤵
    PID:5420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:488

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {87438095-a0ba-4fd6-9774-85b20dd3fbe4} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2412 -prefsLen 27133 -prefMapHandle 2416 -prefMapSize 270279 -ipcHandle 2424 -initialChannelId {05b7a155-256c-4787-ad0a-07d28899592a} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3792 -prefsLen 27323 -prefMapHandle 3796 -prefMapSize 270279 -jsInitHandle 3800 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3808 -initialChannelId {2d96770a-8070-407c-b9b5-926321cec376} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    PID:5312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3988 -prefsLen 27323 -prefMapHandle 3992 -prefMapSize 270279 -ipcHandle 4012 -initialChannelId {1e8daba7-6cc4-451b-b113-2c525ce0a7f2} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2948 -prefsLen 34822 -prefMapHandle 3132 -prefMapSize 270279 -jsInitHandle 2932 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2852 -initialChannelId {c3124ce0-5dd3-4097-adf7-a322ace79a9f} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    PID:4216
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5096 -prefsLen 35010 -prefMapHandle 5108 -prefMapSize 270279 -ipcHandle 5116 -initialChannelId {d759fe0d-f0d7-42de-b282-5d3a0400208b} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4892
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3064 -prefsLen 32952 -prefMapHandle 5612 -prefMapSize 270279 -jsInitHandle 3068 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5624 -initialChannelId {908e49a7-2856-44a7-8e77-afd5e74e6ffd} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5724 -prefsLen 32952 -prefMapHandle 5728 -prefMapSize 270279 -jsInitHandle 5732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5740 -initialChannelId {43ce2d62-0fed-44cd-a16d-abc43cc87af5} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5980
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5912 -prefsLen 32952 -prefMapHandle 5916 -prefMapSize 270279 -jsInitHandle 5920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5928 -initialChannelId {a525e07a-3e22-4056-8f05-a638a2dc9780} -parentPid 3796 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3796" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3788
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Drops desktop.ini file(s)
      Checks processor information in registry
      Modifies registry class
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:5488
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1916 -prefsLen 23514 -prefMapHandle 1920 -prefMapSize 266331 -ipcHandle 1992 -initialChannelId {d460b7ef-5e7d-4a6a-a85e-135201d3805d} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        5⤵
        
        PID:6136
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2248 -prefsLen 23514 -prefMapHandle 2252 -prefMapSize 266331 -ipcHandle 2192 -initialChannelId {efb6a8aa-e662-406c-8c97-daa840748f78} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
        5⤵
        
        PID:1412
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3980 -prefsLen 29178 -prefMapHandle 3984 -prefMapSize 266331 -jsInitHandle 3988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4000 -initialChannelId {1b52593b-a689-4e94-8330-ee0d74c01df9} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
        5⤵
        
        PID:5536
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4188 -prefsLen 30079 -prefMapHandle 4192 -prefMapSize 266331 -ipcHandle 4276 -initialChannelId {11a0143e-4f21-422e-8afc-907ec8ac709f} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
        5⤵
        
        PID:1020
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4408 -prefsLen 30142 -prefMapHandle 4412 -prefMapSize 266331 -jsInitHandle 4416 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4424 -initialChannelId {ed694f84-f688-4614-a094-715751e01d2a} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
        5⤵
        Checks processor information in registry
        
        PID:1424
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3868 -prefsLen 30443 -prefMapHandle 4184 -prefMapSize 266331 -jsInitHandle 4728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4736 -initialChannelId {f14c7cb8-3bd9-4a31-bfea-67737ab23fa9} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
        5⤵
        
        PID:5020
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5428 -prefsLen 40126 -prefMapHandle 5440 -prefMapSize 266331 -ipcHandle 5448 -initialChannelId {0e9e9c8b-11d2-4c6b-a1f9-8974491e8cd3} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
        5⤵
        Checks processor information in registry
        
        PID:5856
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2660 -prefsLen 38844 -prefMapHandle 5148 -prefMapSize 266331 -jsInitHandle 3848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2732 -initialChannelId {41ed0302-75e9-4c57-8621-b0d9bb4ae2fd} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
        5⤵
        Checks processor information in registry
        
        PID:5608
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2724 -prefsLen 38844 -prefMapHandle 3132 -prefMapSize 266331 -jsInitHandle 2796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5148 -initialChannelId {390a00cd-e872-4794-a581-e4a302e1c3ac} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
        5⤵
        Checks processor information in registry
        
        PID:5660
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4120 -prefsLen 38844 -prefMapHandle 3184 -prefMapSize 266331 -jsInitHandle 4656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6108 -initialChannelId {652a41bc-c132-47af-bee4-d75d4c016ce5} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
        5⤵
        Checks processor information in registry
        
        PID:1360
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6444 -prefsLen 42782 -prefMapHandle 6448 -prefMapSize 266331 -jsInitHandle 6452 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5224 -initialChannelId {d25245f0-3dfd-4f6a-af70-bddd04ffb2b4} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
        5⤵
        Checks processor information in registry
        
        PID:5280
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6664 -prefsLen 42782 -prefMapHandle 6680 -prefMapSize 266331 -jsInitHandle 6676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6700 -initialChannelId {04da8e76-388b-4ff5-91b5-af97d157666b} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
        5⤵
        
        PID:3992
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4640 -prefsLen 42782 -prefMapHandle 6836 -prefMapSize 266331 -jsInitHandle 6600 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6644 -initialChannelId {d79fb828-8ed5-45cc-b653-67fb2a78fd33} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
        5⤵
        Checks processor information in registry
        
        PID:4636
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7132 -prefsLen 42782 -prefMapHandle 7128 -prefMapSize 266331 -jsInitHandle 7124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7176 -initialChannelId {bd677864-9239-41ae-b822-92e54db68078} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
        5⤵
        Checks processor information in registry
        
        PID:5528
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7424 -prefsLen 42782 -prefMapHandle 7428 -prefMapSize 266331 -jsInitHandle 7432 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7124 -initialChannelId {35804df5-1bd6-49ab-9317-96d0fe6e61b7} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
        5⤵
        
        PID:5852
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7828 -prefsLen 42782 -prefMapHandle 7832 -prefMapSize 266331 -jsInitHandle 7836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7844 -initialChannelId {5bd08c6d-27c0-47d2-9d85-02c2778a857c} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
        5⤵
        
        PID:4752
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7524 -prefsLen 42782 -prefMapHandle 7620 -prefMapSize 266331 -jsInitHandle 7804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7304 -initialChannelId {b8703909-0fab-464a-b601-9fb92a9b1a08} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
        5⤵
        Checks processor information in registry
        
        PID:3268
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7060 -prefsLen 42782 -prefMapHandle 7048 -prefMapSize 266331 -jsInitHandle 7032 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8172 -initialChannelId {17c30079-986d-473b-b4c3-8734801a3c52} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
        5⤵
        Checks processor information in registry
        
        PID:408
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7144 -prefsLen 45885 -prefMapHandle 7140 -prefMapSize 266331 -ipcHandle 7532 -initialChannelId {9232bd4b-dcdf-4a54-959c-fb081c035585} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 utility
        5⤵
        
        PID:3668
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7292 -prefsLen 42782 -prefMapHandle 6992 -prefMapSize 266331 -jsInitHandle 7152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7548 -initialChannelId {5aeab639-b551-465f-b21d-b8c2b315a8e5} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
        5⤵
        Checks processor information in registry
        
        PID:5980
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4136 -prefsLen 42782 -prefMapHandle 6192 -prefMapSize 266331 -jsInitHandle 2652 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8512 -initialChannelId {6ab5fdc9-43c1-47f4-ac9c-e2c0a6b6fecd} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
        5⤵
        
        PID:2428
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7640 -prefsLen 42782 -prefMapHandle 8644 -prefMapSize 266331 -jsInitHandle 8648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8656 -initialChannelId {7b838c3a-0682-446f-84da-2e93d67a7c2d} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
        5⤵
        Checks processor information in registry
        
        PID:1296
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6620 -prefsLen 42782 -prefMapHandle 6648 -prefMapSize 266331 -jsInitHandle 9344 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7512 -initialChannelId {f0d00d88-2326-4414-906f-f61a84f1e36c} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
        5⤵
        Checks processor information in registry
        
        PID:916
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8664 -prefsLen 42782 -prefMapHandle 8684 -prefMapSize 266331 -jsInitHandle 7640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8924 -initialChannelId {27d26632-c6bf-4ef1-a9c3-0839deccfcf2} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
        5⤵
        Checks processor information in registry
        
        PID:5236
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9360 -prefsLen 42782 -prefMapHandle 9364 -prefMapSize 266331 -jsInitHandle 9368 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2568 -initialChannelId {8b23cd35-0343-418f-b9a2-373b1cb06b9f} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
        5⤵
        
        PID:4380
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8696 -prefsLen 42782 -prefMapHandle 9276 -prefMapSize 266331 -jsInitHandle 9280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6024 -initialChannelId {7a4b541d-3cb7-4c47-a101-c557e4a96b87} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
        5⤵
        Checks processor information in registry
        
        PID:1528
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8496 -prefsLen 42782 -prefMapHandle 8476 -prefMapSize 266331 -jsInitHandle 6808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7324 -initialChannelId {94f93988-fa4a-49e1-a6a4-2f88228fda01} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
        5⤵
        
        PID:6084
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9900 -prefsLen 42782 -prefMapHandle 9904 -prefMapSize 266331 -jsInitHandle 9908 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8448 -initialChannelId {0756631f-4f0e-458f-a0ec-1c851eb295cf} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
        5⤵
        Checks processor information in registry
        
        PID:3884
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9688 -prefsLen 42782 -prefMapHandle 6620 -prefMapSize 266331 -jsInitHandle 9284 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9740 -initialChannelId {28bf4a88-1703-4cfe-82b2-7b0d6f58f9d5} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
        5⤵
        Checks processor information in registry
        
        PID:4512
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9736 -prefsLen 42782 -prefMapHandle 9852 -prefMapSize 266331 -jsInitHandle 9864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5288 -initialChannelId {a9231c54-e7eb-4427-ad23-6e950e95f9b7} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
        5⤵
        Checks processor information in registry
        
        PID:3180
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2912 -prefsLen 42782 -prefMapHandle 8696 -prefMapSize 266331 -jsInitHandle 6976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7400 -initialChannelId {de9c3aa7-b5de-4370-85be-4d71853a6a7e} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
        5⤵
        Checks processor information in registry
        
        PID:3980
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8224 -prefsLen 42942 -prefMapHandle 8656 -prefMapSize 266331 -jsInitHandle 9900 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6596 -initialChannelId {4195aacc-32af-47be-a572-c1af326aeb5b} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
        5⤵
        Checks processor information in registry
        
        PID:5084
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9596 -prefsLen 42942 -prefMapHandle 9676 -prefMapSize 266331 -jsInitHandle 9680 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9416 -initialChannelId {48e8f84a-4f2c-4923-a461-4e4b730bffae} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
        5⤵
        Checks processor information in registry
        
        PID:5644
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9792 -prefsLen 42942 -prefMapHandle 8464 -prefMapSize 266331 -jsInitHandle 9028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10060 -initialChannelId {1902692c-b4f8-478a-8eb2-d872ca362d6a} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
        5⤵
        
        PID:3396
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10088 -prefsLen 42942 -prefMapHandle 9708 -prefMapSize 266331 -jsInitHandle 9628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6596 -initialChannelId {b1697807-cf34-47a8-9a78-c47359270c1c} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
        5⤵
        Checks processor information in registry
        
        PID:3092
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10328 -prefsLen 42942 -prefMapHandle 10332 -prefMapSize 266331 -jsInitHandle 10336 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10280 -initialChannelId {87465442-1c76-46a7-bf5c-a365f4bb44f2} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
        5⤵
        Checks processor information in registry
        
        PID:4012
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7496 -prefsLen 42942 -prefMapHandle 3980 -prefMapSize 266331 -jsInitHandle 5724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9160 -initialChannelId {5d561e70-b7e8-4cbb-9f07-14fe6df7acfe} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
        5⤵
        
        PID:6632
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10508 -prefsLen 42942 -prefMapHandle 9536 -prefMapSize 266331 -jsInitHandle 9152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10692 -initialChannelId {fe86bcbc-cae7-4591-b790-931b98b603d3} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
        5⤵
        Checks processor information in registry
        
        PID:6640
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7460 -prefsLen 42942 -prefMapHandle 9540 -prefMapSize 266331 -jsInitHandle 7072 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9560 -initialChannelId {5a47b98d-a267-4329-8e9b-65be6ac8d236} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
        5⤵
        Checks processor information in registry
        
        PID:4740
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10144 -prefsLen 42942 -prefMapHandle 10128 -prefMapSize 266331 -jsInitHandle 10132 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10120 -initialChannelId {4155b89d-66b1-4fad-a654-59e4ecb13698} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
        5⤵
        Checks processor information in registry
        
        PID:2244
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2684 -prefsLen 42942 -prefMapHandle 10180 -prefMapSize 266331 -jsInitHandle 10040 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8480 -initialChannelId {ef670f72-3a97-4f04-bebe-f54e0159f73d} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
        5⤵
        Checks processor information in registry
        
        PID:6844
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9352 -prefsLen 42942 -prefMapHandle 7136 -prefMapSize 266331 -jsInitHandle 9776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9556 -initialChannelId {2aeefaa2-df9f-4b2a-a528-131249de960b} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
        5⤵
        Checks processor information in registry
        
        PID:4552
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3132 -prefsLen 42942 -prefMapHandle 6544 -prefMapSize 266331 -jsInitHandle 8144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8036 -initialChannelId {2ddcb0c4-5e40-41da-ba64-fead105f9058} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
        5⤵
        Checks processor information in registry
        
        PID:3872
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9540 -prefsLen 42942 -prefMapHandle 10532 -prefMapSize 266331 -jsInitHandle 7620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9368 -initialChannelId {0e53689a-ba33-4542-9770-e4353714d446} -parentPid 5488 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5488" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
        5⤵
        Checks processor information in registry
        
        PID:7104

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5272
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  PID:4808

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update-config.json

Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json
Size 102B
SHA256 ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda
MD5 7d1d7e1db5d8d862de24415d9ec9aca4
SHA1 f4cdc5511c299005e775dc602e611b9c67a97c78
SHA512 1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477
TLSH
T12BB012800100B658F0FC4CCC05303B3E0248402D44CF3903004D30A0787B0020A094FE
MD5 SHA1 SHA512 TLSH

Submit Download

~WRD0005.docx

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRD0005.docx
Size 11KB
SHA256 06e23041d45ec51134ff755479b2186b24e8cdb4d8df42f23a9f3b129135d651
MD5 9fbf0f50b14256529ccb21af0af513d5
SHA1 fcc01cc3960e783155e100305e8fdc60cb922b0a
SHA512 2e72a9c359dcf804ed4f459a9aa912cfbd8329a40a05a6910d68cd495619f92514fbe185102ac03da92d481934eb1f2417b708d9cb71718fd6878be752dd3b4e
SSDEEP 192:CtdGuiXkdCCNxtpgoZ22NNNRc3AY2nwUMVoGbZmBNTxSdm18x:adfiXkddNxt/ZtNNNmD6xYZQT0dm18x
TLSH
T12C42AE38C649FC64C8720D3D992A41FAD53C41529B206ADA14EFABCD8AA0EE33717D94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

~WRD0119.docx

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRD0119.docx
Size 11KB
SHA256 81dd6dbfa1cdbefef65761a57965d07aa3926f4218cb423c91d2bb430633fc14
MD5 f95fe51353b3e8c843eadcda5e498d40
SHA1 2ed4374c18abd615de3011d2da65caa3d1405602
SHA512 e28d1b5630cca8dbef8f2acb4f13b88a6bb924d5835af93cb523f92161afd25b01be08d9f2f4b2b6c678cc72316ad9f629cfb99c46b30a74a48086cb7b2ef9d1
SSDEEP 192:CtukftEq+CCNxtpgoZ22NN2D/OxYkX56knmQGt35ZAxDG4ZmBNTxSQmuS:aukfAdNxt/ZtNN2D/OmkTmQGt3DwK4Zf
TLSH
T1EA429F38C606F4D0CA63453CD82501F6F6344162EE3195DFB597BBDC86A8F9B171BA48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\activity-stream.discovery_stream.json
Size 75KB
SHA256 5c8271802a287aeab5b4b68298f7c8702dea96a852bb562d7de2ba530ff018ef
MD5 49332701eccde72e5e1bfd037ac7c9db
SHA1 18886585ba0021d4c6555e641017af6fbaa67960
SHA512 1183c3a82cd42a5347a82ed181b542964e327b11d70c95197b08abe8f7c9a426f7de8d12d0d94eebedc1788b90bec432d6c522d350215e8a7ba8598b21a00826
SSDEEP 768:GyPeFjb0eD8G0pqFa/Jcy/UVqKCA/tt3iwfnTAXKuI3D6QMlzO:dPeTYGFWJcqUVqKCA71fTWPI+QMlK
TLSH
T12473EAA3A7E8B1BB1BA526C72C0B796B16D60155E38505CDEEFECA1C81CC394017B5F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13046

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\doomed\13046
Size 15KB
SHA256 903a11f07827510146c6d0e67d10c263539cc307e92586f49975a80115ca1eb6
MD5 9d36a4ccc5fb278969faf1fcbcd55d06
SHA1 23ec759d6b78c9f90eea23d2688d067debe12ef2
SHA512 73946b74a27b6785000a3f48dc4bf3325a5ea6754d4e1e22b908417199259165cfb850b126591e3655436f2e6e483026265216386080fe4aa91d332aa61ec105
SSDEEP 192:0ERWY5biNliY+uD+iTnjLcGRJWs/ilySgZr9JUoYXmfDO+jJUoYXmfDOKWU587Nv:9rdHYLDDTn/9b6lySgYgnRYgn87Nv
TLSH
T13062B03B5C0125406B909AC0C5BCAB397C487563DFEAF6EEB1445F4AD4952AFD82309F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8716

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\doomed\8716
Size 9KB
SHA256 c6337c92c77333147ab4cb03ae814c0bbb3efcf871dba74b4a51fb1a7079847f
MD5 65c3433c5954ab6efecccdd7106af946
SHA1 1ca2d5a4c27ff083f2bd54fd2fd7189c683013f0
SHA512 be6cf086b2c838b56a557380b78796aa066139ecbb7d0fa9c6161ad69e60b40e0a04863722383302738450e6ded439a9c1c8ef7689413a778013fd0007586dc7
SSDEEP 192:LLJMPtrEqsPN599TqAHwWYu79lCZIipITQDpAmqxvxi:pGrUNz1YAnaAvi
TLSH
T1DF228D378E441E185E61F4C7C36A5FDE6D84EB678EF2DDEC611439108A91336CA488BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0DB3803B600B49911A500345FD3798C65EFBC29C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\0DB3803B600B49911A500345FD3798C65EFBC29C
Size 14KB
SHA256 dff35b832b754347311ed40f4c81c90d7ead9aa1aeabf0321b0ecec63d50d698
MD5 ffef1bc59d123b4a91c1c63323cb3da8
SHA1 b4e72be2b57fe59e587a937c25cd633d4d7a3872
SHA512 779e25469c4638d151100ac81574b3ea7d53c6c62e1d4cd8ea3daf2c31147cf4d2b16b861b9d032a8918c4e5cb46463a8184601bc475287742c098a261e8e968
SSDEEP 384:5GQG00ZjdJXCdrr/NIKfqNtlUxvTYgnRYgn87N4:QVjjidrrZCNfQY8RYw87e
TLSH
T13C62B0B79E663CC855F44981D23D37D82C04B913C6C3D39FA10C6F89E4517E9E96145E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

418D6328BE922475F6446537BDD7E97EDBDCE963

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\418D6328BE922475F6446537BDD7E97EDBDCE963
Size 11KB
SHA256 3afbfde5696786b5b581bf912448585c8abb23f086e58fd3f481d267d7642728
MD5 4a7faf05ac40fe63444a0b562596c325
SHA1 442924f0d1e6b6a4951f0689734bed208f37a6c2
SHA512 f3d8c1b5c804c6b384ea82e2e650fbfbe01a2883107c3b8506c526e886609e2aa85627cc012858bccf635f31472666cd70c7079873714c0be99bd99466a1ed77
SSDEEP 192:A76trVSYRdhXaM5+xDzGV4SXgPPq3Sq69YBraeFIJUoYXmfDO+jJUoYXmfDOKWUf:A76trV9v5yzGVdOCiqSYB3FsYgnRYgnt
TLSH
T18B32AFFBFC5228C837E41B81D2B9A61E2C00F993CD16E7EB728457879C407E9596506E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

429A3ED460AF903C172BCDB59643711F990A9864

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\429A3ED460AF903C172BCDB59643711F990A9864
Size 47KB
SHA256 774e613164404de8a06edeed6aafa6d325fdb0f9ef1489dac78f902625dbae5f
MD5 9c2bf89d3844b19e74448f044bb01d78
SHA1 af542eb76882b941e8a42928a8ed608c1bcb3699
SHA512 f64c0593da2f118c4c624ca5a4cdcbe8170893598e79f04b98a9aa8cbaf718cc719be3255b21d20e9402779f98471afda3f8c8b5b36fcb46ec79d551c1e868e2
SSDEEP 768:5HayW2Nah5q1p/uGe+NGYDIpUMqHFsQ+ho12F/hK27/nMsgatl5y5Ey57Wd1aeqb:565RA1p/ltGYEaMqiSK77/rtW73e2UK
TLSH
T1A123F2724F286AA01DB26F59AF6D174CDF6EF649EA78898F301E150CD0AF317B007264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66A88A30FBC0A71D383A8672280287B80E467580

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\66A88A30FBC0A71D383A8672280287B80E467580
Size 17KB
SHA256 5a5de09375579e30136e3ce3e8aabe1d8f79d064d56eaa3bf1ad2b2ff82bb790
MD5 57c1a8705fc9849b9def1e580c4c7992
SHA1 b42e275c6ac16ba9ca5121c680df19278b4324e3
SHA512 6020c5149d0e0fca9d775cbfa2ec3ff691ea94acda5ffeb6edbd68913d852c76094ad63d1bb356db8d8585d139bc7fa12563b1b471c54b96ef57a10b1c51d551
SSDEEP 384:mQuLCas91x6xSNS0Z9z+cr8aWEBKZFwdKKkHbVbJYX79zwAgA9i:mQ1pbvQ0z+crhHKXwdKK+bJYxwAgd
TLSH
T19B82C07ADEA51D181DB1E82AEBE073E10DDAFE53CA44E6A135183400B5C72360EFA55B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78C31D72D201B7068AF35CC19E8742CD03263E21

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\78C31D72D201B7068AF35CC19E8742CD03263E21
Size 61KB
SHA256 3b826f7aa710e122dd3c8610f4f8320cdb53016b6ef2feeb00063d9ecfc7d5da
MD5 7b03fb192e82e76c3e676a9b957027a7
SHA1 d011929acbcd7a61f04d883234c5470535a86f28
SHA512 35320b9f5631616823bc7c44c06ab0cf50a301c0205dac714a663de39cc55f6c61774fedc397a3492b4ddae4f6502df1a3534dc0a1de10cfe60e430d0aba61d1
SSDEEP 1536:LhLIOuwiuxcosCPTzdWfsRKOaSDwhKOknfebWzjBK1iRINn3x:LiDwpbvUfsRKOasnnfFWwINnh
TLSH
T1EA53F1B44F00EFD607DB711DE4A18F15CC4EDEA7CBCA91FA59841803A4F183AD85A2E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81AB8AF438D74F3D730228B275C8C80992BDAF76

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\81AB8AF438D74F3D730228B275C8C80992BDAF76
Size 10KB
SHA256 99091e09f38a603fa1d13899410caf64bd8bf35ca15c4ded6e9232be05433887
MD5 e591610957d11e9078d34d51d1c2b8a0
SHA1 dd77bb979cd312a3ccd9ffff6499994dfeefe079
SHA512 0a02e183fe158f217e0559fb44d4a0a0b6c84b792d32107b1814c61228eb242fc4a5abfadfa582922a23f083da5190596470e6fa0e660db31a6360f32b98d1b6
SSDEEP 192:2aJR6SFWl3yCLRv/6vQ14SQXyEUn/LqfJUoYXmfDO+jJUoYXmfDOKWU587N6tG:Xz6SFWl3PL9ZI9UYYgnRYgn87ND
TLSH
T16A226D3B4E8722883A76D980C17CA75F5C145EC3DFA2C5DEB6408F0E5DC53BA599488E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8E85625EE9AA011944D3C0C6D5776A5A154B9FB0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\8E85625EE9AA011944D3C0C6D5776A5A154B9FB0
Size 46KB
SHA256 e3dadc1f7010739c275d01b10e39380ac245ed851b06d704bd617198e6a79741
MD5 26d22c956b8a2a2d7a0720cd3e5b8027
SHA1 d8c09fb8ecc88e58075c2254d03720d4d91bd27b
SHA512 b7a1caec6ee737328012c8de41dd590e1b080a8b0b499b94e9bdd70e1a9f1e4206a14b69c1b42955b89ff350cdbf8eebf23f89c23dea823a0f625dd7d3c1cdb0
SSDEEP 768:DWZ/5JwEMTYZlrPPkXN7ahitTP9is3szlkD/TfjJ188vy4REcQqFYl/aSp5jTMR6:KjwEjZlrYNeUtrIim6HTLq4RQPi6
TLSH
T13023F17EDDE239641D733F894E6A4D4C2E926BC7E5705F57BC0E7802C69C020AAA2487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 c064e2defce6a84912d5951b560801ede00518c24c495c6b1212587f7383f88a
MD5 4e94077ec1e69b07155adb35461638ed
SHA1 2892ff3147f462e06c8c9686fc49fadf4a1a6162
SHA512 e3cdb678ded775febbe93f9de0e156e2038e46017f8ffc204afc184677492e5544f8cf254727c30d1266689c828eec0fb0e794ae8225d7f54863c22c458ce811
SSDEEP 384:HbaFrLiO024YaFuhw+5EL1pPsac4j0lpDII+CYC:7aAZYaFuK+5EB9sac4ID8Ly
TLSH
T142527E7EEF0138BA1A27D2D4D9A95214CE04E6BBEEE3D05605143844CA803BDB8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFE68C7EE9FB085B3359F3BE57839CFC0FB0318D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\CFE68C7EE9FB085B3359F3BE57839CFC0FB0318D
Size 18KB
SHA256 bbdd8a2a2fe4f93fc335fda1b5125ed8557c6e56f5eb9c1f3cc791316cd7e68e
MD5 b6e3c1a53ddb93542a7209dc3a69b9fc
SHA1 dbf17d0dc53828a7ac66e54746d6fdae363627f3
SHA512 13169156b5b4928c97cb5f3453550cb3d8de3d61e4244eb6985b14f340d52aca73a5e941929666c65237fbfa9163e9d09cf4860861da57b606fc781ef99247a0
SSDEEP 384:z3FXcr8Yo1eQfq0vNmrlTyOK3AW63NBZ8LUpNn9sGvAzMqM3:z39ppmrlTyT3v63ZMUpNn9sG4w
TLSH
T11B822BBF9F3135A4B485E7D697A5543C3E1F88A76E21CB7C866C7D44B68092E48F0C42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F81C9F6FACB14DC1A5CA523A35B7874DE6D1DF6E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cache2\entries\F81C9F6FACB14DC1A5CA523A35B7874DE6D1DF6E
Size 370KB
SHA256 1aaa6095d4c4ea1b264edd00d26b4854cc7d72cca1bb4d8f16cd721e09227285
MD5 3b230fe2ea7a5583c46cf63e0ca0594c
SHA1 c04ccd9c3396a54b0501de103614b1921469e162
SHA512 e264b274314986063c1d810bcc8ffa62eaaec2f4f612dca7fa7a914d4da1daa0ef328f4087f93d19c1108fd998f6215f1496ebf446e92a631812b098c8210617
SSDEEP 6144:+DK0j/+swYyGzH+v4vD66WHMHov4vD6DYuCSE170HhskHSgk:+5j/2tYuI7wyJ
TLSH
T1F7840826FF466B22D42102B044A723353B31D04697D2F32B6ECBB565EC6EB790E615BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pbuCKIxL222hCca_bLbcRbSGH8ria+iwgB1NBr9oug0=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\jumpListCache\pbuCKIxL222hCca_bLbcRbSGH8ria+iwgB1NBr9oug0=.ico
Size 691B
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013
TLSH
T15D0194C2B2203025F81A82B05613C895D04E81EE0998A42A8CA7D1F6A848A23958EFE4
MD5 SHA1 SHA512 TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

asrouter.ftl

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Size 15KB
SHA256 7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
MD5 96c542dec016d9ec1ecc4dddfcbaac66
SHA1 6199f7648bb744efa58acf7b96fee85d938389e4
SHA512 cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
SSDEEP 192:63/CCBmqCIKJumwOGmnOq6b4b9C4GoTlbo2ofF9/cFnSPhxtj3tCiwwau13151iS:OuPngEG1xNUIzFnieWrc
TLSH
T1D162E8CEF48193585D6F920AEDC5B391FB27008C56693C6671AF608873B9529C03EBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\activity-stream.contile.json
Size 4KB
SHA256 23ded12687fc1f1968dac75436f80d9c923a996277e271aea69ab5db9e1febc1
MD5 9e38199a874ca227cc6f31a7a6970c91
SHA1 95c0cacd03e6b245342d1a24cc09e2457b9f2371
SHA512 ccea22fcbbfd5e8d72250eb57faf2f1986562037ae88778a567b44e766765db75695d2b8d773a09f7244ea61b119808e888dde0cf6e0117014e0b2de464368e8
SSDEEP 96:KfqEe1yt1VWD9ddDcU8DlPv2quVvP/tlY4XT+mRGQol:Kfbt10DLd4HlX2quV/tlTKmRGQol
TLSH
T17FA1F9EB886595570723A3F43C4F177EF0077083A6FA5549AB89CC12F69528A80FB786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 043d571f1e6cd67c8902f3af235a165487749ec52efaf10fc384990bd9a8bb03
MD5 a6a0a61005c05ce13e06b1d3d8d45eb5
SHA1 67f6599f01478afe65a60663fc2b2f1535520403
SHA512 826bcda79f975bc629b2e6bcb641dd3bd504942cebe3cc989b774864329c6bb740ecf84c2b16768d17a921cabc2d4f69673a21852ab9acd5b9de98e17d28eb9a
SSDEEP 768:Zy3eDDbrzmcueDdWxQMlOHsyl2qKX+L8xzRA1KoyCh0IIaW3jmrbG4k:Y3ijDJWxQMlOMQ2qKX+L8zgF7IJzRv
TLSH
T19473F7A393E8B1BB2FA567C71C0B7A5B13D24159E78501CDEDEDCA1CD1C8391213A6E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

5AB028010BC4A0504031A378F565EF695BB9DA9C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\5AB028010BC4A0504031A378F565EF695BB9DA9C
Size 97KB
SHA256 f47e57b8b0e9e3af4432c52adeb78ffb19b7915dbf4d52a8873668622b6c84b1
MD5 24a354998af414772c5c1ef41c2f97b4
SHA1 cc7087f9a5748735b6defed913b1a5a3eddce877
SHA512 f7ea3150eaf136ed77bed147eed6e7ca44d273d6c0afacabb6aeadce1d70b0c9119e703fe1c9d4b637e7338f8e76c563c4a3b6dc055294df3fb13fb5b4019e83
SSDEEP 1536:Jxhhqh4Umhq4dPDgC7y1tF2BYU9Jof/MDQD5Tjek4IoUg:L+2Mcbz7ytFGo3KQFTyRIoUg
TLSH
T135A35A375BD91A7707A673C82C0F7C5B0FAB0583EBE8C695AADDD90880E3C58517E261
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 13KB
SHA256 f3fddb6feeee2f28d49a331586ecd6ad1f1f2b072676eb2fbf856f9c2beb7932
MD5 16b557e7a658a51e0565bf5a88ff828d
SHA1 bec0bcd75de6016bef49d4a49201c7b9a86c02c5
SHA512 12249578bf2df3c9b99a0e8d3d8e05a22732e31029cb7e5c433871871dd7ea626463eb04f8327e614c446ccf2df5dff856dc465ac24865878c31c708cddd93ec
SSDEEP 384:pyWfVvt1KSbE+AxAbJ2ePsac4j0lpDIIbe:jr1NbexAtsac4ID86e
TLSH
T1FE529EFBCE21605A0B23D5F56CAE07DA8C0A7147ABFAC2DD0A846C00D5857DDD5FA2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98FDC406B52DFF91AF48652B4ABB147FEB91B60D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\98FDC406B52DFF91AF48652B4ABB147FEB91B60D
Size 13KB
SHA256 021b92e4bcafbf4ac4f891fa565e4da1ef8b4aefcd01ff4881071c1852283320
MD5 9dbddf76b35320dfcf3ae29300da9af9
SHA1 3a841437e1e63b4fff8d7bcee3471cffbaf3c980
SHA512 fb612538ba1c340c988533dffaac8732892b67e4d299348c49c218670184bad877f425dd2c280f769aa753a7a14cd9abffec78c85c481a6413cf4fb95ffdce83
SSDEEP 384:HSvhbciO024YkeFuhw+5EL1pPsac4j0lpDII+i5Hy4:yphZYkeFuK+5EB9sac4ID8LY
TLSH
T10F527D7E9F1138BE1A27D194DDA95218CE08DABBEED6D06205443C44C680778B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 9KB
SHA256 00fb272241c908d4f7b80f606d67a239a6c91dfcb1ff1e7d0296982d529c41cf
MD5 5f4e435314ea924e822543eda0636617
SHA1 ae4082a072b9fe16c60fdcaa7cab68e640851174
SHA512 e178ec897b383890e4b9226ec077a628071d10d5cba8e4266713260d9270f6d0f4bdde42fee3bb9e092dcc132c007f7bca0030fa0ebbcdf82d0c3722ef41b2cb
SSDEEP 192:7WlXg7DZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCd2dykke2dykkA:6JcDZAR9eYa9EHDEclrIVy8ed6N69
TLSH
T17E226CB2EF501C0D2EF1F193ADEC421A1C51EB23DED6A2EF160C210996C0799E9F91D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 644402cfa2d58ca16c279cef2a5f7f3f479c5f6f3e34bf31dadd5d025fbda6fa
MD5 0ea1e125a83348f2d851dd5d174b0211
SHA1 f0165c1c363d7038b82207b094adae17978f33cb
SHA512 243664694399c4383beecb35d99802dc21e3cbe4a0c4715fb7cba65a0dbd60223246bcd06e7601bda8d1a745f32d80d6240ee165230565b54b3c59448eaed7b5
SSDEEP 384:HbaFrLiO024YiFuhw+5EL1pPsac4j0lpDII+CUi:7aAZYiFuK+5EB9sac4ID8Lm
TLSH
T107527E7EAF0138BA1A27D1D5D9A95214CE04E6FBEEE3D05605143944C6803BDB4F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 243KB
SHA256 12f66c58fde188fbd34ff14fe69c0eb2cf38e8acf98573b74cfd3ba4b0c77312
MD5 45da0c7dbe0ed648847ea9522cc7d68c
SHA1 77833a0032e37342b1c7b148c5f729ed3206a938
SHA512 efcd53c5be18cda373ff6e3595d7f3654fa90c01d84a0030192d57960cf003bb1538ae6f9e96328d9f2df286557019893845ae5ce653ff17cb98adb942af545b
SSDEEP 3072:7WKO8V3PGiS926icQHvUpiT4ccmtYGbdeXaR+:CWcedyGbe7
TLSH
T1BB34F8F3D69C70FB175286DC6C0E72CF62AF8139DB5208DAFC688148D3C9AA51076799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DE5F6CB1BD71958EB146CDD974763A3115937269

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\DE5F6CB1BD71958EB146CDD974763A3115937269
Size 10KB
SHA256 25c8027dfd0d00d69dba393f7f325ff44dce368adbdbc78ea533caa2eaba732a
MD5 fec037abc2318679260bc88760a10730
SHA1 080b0778036c4c026835fa6d90a5dd7ea0d01a39
SHA512 88b670f93af04cacf33dd15f5074cacc3258a4e14dc6f99fad5e675809c611ecaa2a5f762f844cf7d86e4aac490804dab59da6546ecba3e1fb77e1b69b75b332
SSDEEP 192:7kQaFiszDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCDmdykkFmdykk9:76PDZAR9eYa9EHDEclrIVy8eDqaqo
TLSH
T101227CB6AF50180C2EF1E1535DFC02691CA1F723DED6A1FE29082508A6C8769F9FD1D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E0A818978A759B51363F281DEC1EA89A53F1BA18

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\E0A818978A759B51363F281DEC1EA89A53F1BA18
Size 9KB
SHA256 3853135eca68b5d52bc10477916f5cf1a56a154a2a48527c62adc787e190ce98
MD5 b487e13e90d5ead90d299fbb57f6cd7e
SHA1 12cc033db42c2baac73668f3277e78cb72eeb86d
SHA512 20ae2d71ea23a24d3a4a2dfa112d623321b17b371d626187f1570af940b6445e3cc3e3f4aeece9add78a028a63f1f5f240c2ba9bb05f35dbb593bfcaaceb9b9a
SSDEEP 192:V/y8ysK1cURPAePE+q8sPU9PsALkhbgHpPueig7AaX6b4qx1e0lpBNDIIjSkkZXE:VyauE+AxAbJ2ePsac4j0lpDIIjmcH
TLSH
T186227EB89E0120394EA2886A9E9F93C04D68B2139F91CBEC4D643904CCC65F8F7F55D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 9KB
SHA256 1ecbad1ea6697f674a4a75ca1755ec4ff0a7a6392b90fe9fbcea1320a500b0c7
MD5 a1337565895b0c69a19cbaddc6c16910
SHA1 4e3f541ee0dcc9e58d20adfccfa890208423cd8d
SHA512 83a67587d7dba3d54789b0f71180fb7e975ce9e224f34619dba0f0736043f3dfac104680f3e577e9cf399b944771771127a6d93ac9a6130ad5dd886d90d445a5
SSDEEP 192:ttw/RDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCTwdsfiKkYdsd:buDZAR9eYa9EHDEclrIVy8eTosKUsd
TLSH
T160227D76AF502C1D2EF6E25789ED46191D51EB13DAD2E2EE190C210882C07A8F8EE5C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F6DB2CC802065A948266A380F89F5EB80BB1A349

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\F6DB2CC802065A948266A380F89F5EB80BB1A349
Size 9KB
SHA256 aefae59422673fbb1c9c2e46dce64036f3d52502d267f47c043cce0a670c7fd2
MD5 99a82a813d1848b6e4d1d0061c7d50e1
SHA1 2a44a0cd7dda5ea79489dffb916fc1e6469a140c
SHA512 939535d62c2d6ba9c554079ced8e42bc0a1442d70fbbef0c826f2d13764f3f6f38e849f1bf4cc3fb8533860219dee54991a1d111168957559b9de0babc0d02ea
SSDEEP 192:HjMDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskC8mdykkxmdykkI:HgDZAR9eYa9EHDEclrIVy8e8qQqP
TLSH
T1D2227DB6AF50184D1EF1F29359FC02191CA1E713DEE6A2EE260C210C96C1799F9FD5D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\startupCache\scriptCache-child.bin
Size 534KB
SHA256 ec999c99e34e34279f341825cf2137d74d1648bdc9d17713de2660566a10f95d
MD5 7aac1ed709927a0c1ac0db851a639f52
SHA1 33a639281c4e1d2230b535c435b80666565d1237
SHA512 e1b978b9cf9dc12f781dde40e6dc9fdc2d98eb4910f2c77c25db5220db0e07a632bd8d4b0d2373216a9d8ebd6fbe328006abea25126b6a4f8d49573df546a17d
SSDEEP 6144:aFCUbu1hjktpJn2pmYXHqjOepEavSW2psu:m7ubotPnpvBh4b
TLSH
T120C46111EFA64E23C418037A44F753313A31E1451BEAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 d7b3dd72cb9ce485b57abd3110fd6a5c529105bf73e0d45fc65189ed1c41364d
MD5 40250338c03c2745fe53e0e72c920eb1
SHA1 37a63df0ac8e48bfdc02a59bbb395fdd66eedc6a
SHA512 73f5f17f89ee923c176627303f0a69998eb4de44fc5859091fc23db4c1a17b30921164814a7b8be9d78482993e89135335efa2f25a2c97592ef6078a35bbcf15
SSDEEP 49152:JkVvxHNHhFDzwH6f8+5vIbL38zYPHpJFVFwjdhCXfJDj/BUbSm:wv1F/wafY5PnRmSRu
TLSH
T151B68315EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\startupCache\startupCache.8.little
Size 8.3MB
SHA256 d16bcfc3a78a9eb4e7af4896e61dc7cf8532e6dab40360e21239f40a85760047
MD5 4d016e51571774811cab04541669771b
SHA1 f51fb7013327179e76905009193b878029a08e69
SHA512 58433d9096f597e0b425ff610c2fd4ec7bc3f641f0dca3560593fae0f20944ec84865705859a55874f6fa7bff7995cff9f74f0fac4ee26b9b6a143c411a92548
SSDEEP 98304:Tr378fOPeeNdEjqN3YBrnNi6lwJ1YTngLeVXKFGHEOR:/oflkz3WhiuwPYB1XR
TLSH
T1759602B7B3590697C425191AE87A0A393763414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 9f769a6bbfda69fc29d9bdef6f5b435ee47534fed6927370d5152556607b3597
MD5 266eda804e3494c81cb404b87c9be159
SHA1 c57a22f1d2cc512e8b14100a58b19970947ed8b4
SHA512 5275549c42d9c4cc6ba7c0005fe1990d0caaf806a7b953bcccfc9f62a3baabebe1f3a4b6a133a2c655a279230c4df2041cb013da70c9743f04fa84969ea8bb89
TLSH
T1D361C392E47F203B7D62A8FB6D95C171B42049CED1CD20DDBA9663D420AE7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 07205dd2421fdfe36cc732ad34bf21a58a9c5477d1e177533d5ecdeda4a4f3c1
MD5 0644021db2519346217d84adfd2c20fb
SHA1 cc8eae801ec1707af9973044f1239d0994046495
SHA512 c367861ac4218c40af76d3d33849e8218ad72b9b7f0159c5e16676dccd36e5ffb2da883e65268f59edb84e6272ead21f7f6de5d3c3bc3d0b29821ec9dedaf7a6
SSDEEP 1536:jTrliOKdzDwujwD9bOj7RO78HLRaMgQuMUhEM5h69cUb9rCtOZKoZfcVkfC+Quee:j3lOsD9g0QiEs69cUZe8rpeqx
TLSH
T16BB3A0F6DBE2CC7D59FFC02D6A82C43EFD266414B3972009C8632750A5C6BB87679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchHoverUnifiedTileModelCache.dat

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Size 22KB
SHA256 10fef1456830664322cb395cc41af46fe5845240131f0d726e5f6e8230a46e5b
MD5 2c1bd241a1c4810f1a60b3eb8aeda761
SHA1 a00623db3205aaaafc9e42410e395b4c31bb6022
SHA512 937e7952ed952290b2ff0b5b533684457fa98bba57fea269803f8a4af8bdc152905110501366853f146d0be8c3b4416ab352c0b19a6e97b20f9930c8ab791130
SSDEEP 384:TJWJiVca12krtuJPpmXmlJVjeQ8RJoflgh0jU1cW75Pwm52+GDa50YL6YAVCcC3J:l+iVcWrsl8RJIlgyjU1ceJ2+GDa50YLV
TLSH
T1B3A24B743AF51319F3F69F759AF1A95A643AB8669C00DB4D0162028D0937D92CEB0F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BASSMOD.dll

Path C:\Users\Admin\AppData\Local\Temp\BASSMOD.dll
Size 33KB
SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
MD5 e4ec57e8508c5c4040383ebe6d367928
SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
TLSH
T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

R2RRPRKG2.dll

Path C:\Users\Admin\AppData\Local\Temp\R2RRPRKG2.dll
Size 85KB
SHA256 d109a8ba3f5f76f2860f8649895a52c556f5ba57faff2ce96a8216f09b47360a
MD5 08f5d7200733f206b8033308c2e22071
SHA1 73a110b12c958c7e9c1fdd7f658c322590ae9c38
SHA512 9b80baa5e5d06ce3411a5cb3d71344aae99801dc534ec903543d0f514e1c86c5ff9a50190255067059445285694f020b59bfacebb569bd8d1b8a5e1c2f9ea95e
SSDEEP 768:S7D7FdZfwJruuHvqESPSfXxmJ/59yevFJ5OUGzjcNVZfw7zfH1IR5Uhoibbb+S4N:S738u9ESqgJh99n5aZOibbb+S4A3JK
TLSH
T13E83384174A2F331C43A267C735A4B271F7EE9B41152E89B8BB90D0A5B32BC3CF15696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sist02.xsl

Path C:\Users\Admin\AppData\Local\Temp\TCD3308.tmp\sist02.xsl
Size 245KB
SHA256 ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
MD5 f883b260a8d67082ea895c14bf56dd56
SHA1 7954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA512 d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
SSDEEP 6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP
TLSH
T15B346895A6DACF144B71F23FD8B53492EA1DC87B29342D41F1DC733717AE948822B622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bgm.xm

Path C:\Users\Admin\AppData\Local\Temp\bgm.xm
Size 31KB
SHA256 c6d3769490a754c5d878e1dc5fc059ce04570c595b573f254c0903db11decdee
MD5 d7bf06611a3eb46e6caa92fa6e5f2103
SHA1 08adad693cc7455cfbbba9a77790a97fe493d5a5
SHA512 d915419126d4375c0711d2ca73e2220285558183ef5e4b30768df17c82d4303b754c725a815a003bb6bb3093f9a3ddc1ceccc37236f993e0bd88ca1935b623d4
SSDEEP 384:3FpGAStd56+L+iwE5TnUlW5nRqZC6A/7sx7c:Vc9t7lXtnGe16AzD
TLSH
T1BFE254150B1A04F5DD332F79DEAE4709E6B3E140162B2DE63F5E6F4487B9E88D968803
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keygen.exe

Path C:\Users\Admin\AppData\Local\Temp\keygen.exe
Size 442KB
SHA256 daf3e140087659ad4ae82493c95ca40f88aae3b26368a529d6384af5c9ce8a58
MD5 034c470c20a1ceba7b7f0abafed23f0d
SHA1 f332bee5e2e1bd819bd0b12c82bd087760a3f5e6
SHA512 6a6cd7d1bd688e8cc6495c1331a93cd6250ee37c48f80fb831f2298901400de52fee31b876587e289f709d6274e89454dbe554d7cf1766dfc50d3e647a674e27
SSDEEP 6144:icmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOEErJx85SoChmhr1DnZEthExqN5f:ic/kEPDonR6Y436vRv/85LJZOGy5f
TLSH
T19FA4B268DAA1C9FEFBF2933944856615D180533C4321A4EFE2DF8DAC987A6D160F40DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 380KB
SHA256 bb23eb90e28fe4f44eecb797ef3a0011fb753baa03484dd18fd805fc55ac0224
MD5 a89d0501b550a5577337c4a1d4b64771
SHA1 aacd84384b4227efb0ea1c1c8e6f1bca5886da11
SHA512 13ee7f73550e026625fcfd43a2135388024a9b899bfa083bf0ff0277b53a0b578214336b7309fbe5f06ee25a25a399577e2304fd8a8ac6fcc0710e66f8b2f112
SSDEEP 6144:Ww+voa5D7KA+x19+iZmAGN1MXuYxZf22WYopmCk5gHoAbesMp3Qbr+n6CnXuy:1va12A+xXhJGN1XkfktmCqweLpAG6Cnp
TLSH
T1918402F9B7703893177E4207AE556EEE47528D27CB8FD0DC442B378149BBB24AEA5204
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.dat

Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
Size 424B
SHA256 fec2c6597f9d199cef4aaf3100b15294d764d0d619a1512ba9b56dee3bf2ce2c
MD5 f52824a84372b52e821a59da73e8a776
SHA1 d37c20b461c83cc3e94c526981e9baf22206662c
SHA512 614f9a0b0c149cd1d05db2d99a58ea93ed15a9b793e4f1d1b74286fedd33b127730cae70ab672632a635e74a500e09e7afda1a85cdf199285d5f92ad6b2efd6b
TLSH
T110E039473726EBF293BD81A8BDB96CE61BF75C48C368506149CD6D8C0C20683608B429
MD5 SHA1 SHA512 TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 20KB
SHA256 4dd4793d187860730ec34aa7a54338af94d45afc9f6e967d13b92f5627846207
MD5 ae0adfaef62032b40cabccc6d3d4cd36
SHA1 8c5c93169867c9b3922ef5665afcf3535f301c32
SHA512 fd775bdaf24d5dfbd179d95eb1d28ae8d96ff3e348a2f7fe552012de39c713e80c9bd42d17d1468e2dca5d184125a565e0d54cb6dd97357cd4313810b6c013ab
SSDEEP 384:w5gfAgrAg8O+HgdagyxgPK+qgdY+cgd5wg+NSgH:+Z+E+u/
TLSH
T1369213011BF61A42F2F39A71BEB27216EF72F911A7069A1E8181414D0933794ED6DF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 23KB
SHA256 4c0c8922f99c1be48a078202b1cc2629b7323d261e08065f312f6c5c1bfaaf29
MD5 ee6f16ef90a5b08cca9b526f04d29c34
SHA1 ccd75b6b4e565ed3ea5844fabe6e2183972a8119
SHA512 b0dd0bc460df317d44e1b2f49d82d00c698ed1ee7f3b522b3a363a80f57ab8994daedab1820d5b45165083baea3e602d1e8f37ba207af44e177e7e4aa8995ed4
SSDEEP 384:C5gZAgJAg8gagE1HgQ5wg+DSgzyvnpDAogxBrxgx0HVHWgYN:8UOnpMrc
TLSH
T1EEB244011BF71646F2F39A71BFF27667AF76F9119A06952E814042090A32B44ED2DF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 20KB
SHA256 906c1f7a0d6a053265668c23f4616c5d3e21ca7f76c4bd9d13deb119be57c522
MD5 1a4d0ad232f2fd8273261679eeaa92ca
SHA1 050b2413b2269151152eb7ffe9a4c7d4ddcfe7c5
SHA512 bbc0466e78c5e29823e92b76805f21b3c13b78aa9f0310ec56828fbd9d903ede4158c136fe7de39d58729004a9db3b2f301697a5e1563804097ee6dd154be8c1
SSDEEP 384:E5gnAgXAg8W+HgVagqxgTK+qgVY+cgV5wg+FSgH:S1+o+23
TLSH
T1409212011BF61A42F3F39971BEB27216EF72F911AB069A1E8181414D0D33794E96DF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb3b0dbfee58fac8.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
Size 2KB
SHA256 0065ff3f1527109462901aaa1d4620a930bcc114c896218aad8cf1ec2862cee0
MD5 0319f432f25b06d2cef19d2ea37a11e7
SHA1 f7a35ae413c2f9ed3ab772810bb10331dcdd3e9b
SHA512 0cfec53a8b48f511fdc9fa3a122fd2052ae2352eafda66f724af3cca6bbfad05dd1fb38aab770bf7ad4532c12c5f2f3c1aa1a910a758d7b8196bcd0010dc5897
TLSH
T16E5110031B6B1F5BE4950372462D5724DBB03D82F721861DA6C8151DAD72A816F9CB2E
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\AlternateServices.bin
Size 10KB
SHA256 822767d2b316323e7e5c49548ca8e29a31de6941279308b4a3c91ec237bf1b23
MD5 b3dfc562624d1844c2822f429e530b46
SHA1 e829e3eeb5c634a4760d69096b4b183760f3a678
SHA512 2cc070a5bb2a145ff88474e0903ca7512b8adff5f97a284920d7b1f51cc995cc0a2e34b51aeb67e226b6676c74555c89b9330c19fe3a5b4b1e723a6947d42e34
SSDEEP 48:Y2IkDlzekp41Lx9si9nl39DI56Z9AB69:lIklSY4NDsQnlNDI567ABY
TLSH
T1BA227EF36BB2A462F0A18EF4D058714CCD33172509A995C4CB64D0A746D1BEAD06EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\AlternateServices.bin
Size 15KB
SHA256 702e6da44bdd78adc64159a8de5cedd7ec6fdc6184425f8d0399be148cbd9a55
MD5 db139f643e2e422c71f83785b2909a40
SHA1 9900dcdab15c3abd2a4581a18a5518b85ba26aa9
SHA512 ce982d64e79b17fb78e1f018994dbc65fbec456f1ad124250403d73cd23e9213f2bf3f88e8cdc49a8b31908656892420b2892f32cb76bfb13f837f580416cb4d
SSDEEP 48:YyIkFekV45M49KZS9nl39DI56Z9AB69wQ93ZV9D9FM/pQ9:JIR84eyKZAnlNDI567ABYwa3zrFM/pa
TLSH
T14C625EF36BB2A462F0A28FF0D498704C9D33172519A99594C764D0E70BD1BE9D07EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\AlternateServices.bin
Size 25KB
SHA256 0ccdc509e25842aa1d2afd87a27b7232aef903859b7101fb6b5f2ccf0236739b
MD5 c16cea3f9466e8487c33d2547e22087c
SHA1 92b33c5ece66c71f8c837ea3a936bbe828ed3fc3
SHA512 b744e15ad575a19ac3296d972e261f287abf45106d9aaa7843f0e2374c9a8b8be06e4f2c3b44f673e091a819646d420df402a7381f46728317c094cc415b73e4
SSDEEP 96:JIR84vNXfIw/I563wBE8qk23dM/p6KQLkc2Q+0UzM2Q3HHb3/YGctcvvxZ:lSQTpt
TLSH
T1CDB2A5E36BB56412F0B28FF084E8754C8D37471518AAD9889B5480E71BE17E9D07AFEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\addonStartup.json.lz4
Size 4KB
SHA256 f82e9b26245f6b4df0de6363df68d79b789c7b6d5f5176d02d2670c77df343d6
MD5 619d051681ab5afab69c276e7806835b
SHA1 2a7ab05628c7b092086c739cc7f1cf0e64e90a34
SHA512 d09c2bb0d07ffe0ba8f33fd3de23b3a9120b7ad3299bc11f92bd6f480f153e364261b67cc59ab904895a834750059952c2c0a0f92a275eddd5ee7b7a325a52a4
SSDEEP 96:6M2psYsPNU6M2xWohD4aMgGvmHtTvksO1L5OYvtp:T2z52xXhDTrGvmZw5rp
TLSH
T1E3A17E76D545FFB2BA27C043D8D93FB1E6E5AB7424B9C4E8F25DB2154C246A36305380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

containers.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\containers.json
Size 688B
SHA256 b32a837702b91f3d6c3a6a50da2e31f1cbe6384e991aefd08eb595a05dd27761
MD5 332d1459439502d9605d59b2c597af52
SHA1 aeee847012744a06ccd5201f288efc6c0ee6094e
SHA512 18ebc86d13eec67ac1e3705ce9239598f1a9b7ea5d5406ae41b854caba080d4d9f9cf3965643b793e6c8561f96177aa68806bb7ecb700e8515e8ce3be0095278
TLSH
T18901D1364507546EB3C503A912426D22675C60B1D71EEEE9E8360A4E4ADC3E6CE31BFF
MD5 SHA1 SHA512 TLSH

Submit Download

cookies.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\cookies.sqlite
Size 512KB
SHA256 6751c899a8f07e7d55c28a4c0ae2315b3602df0538aedb4d99b15a4a7989c02d
MD5 6b01e9276b80858419eb4a0963cd1ab3
SHA1 5b543068ce497d8a60be377819241c04bd71bca1
SHA512 ce84b9130b94fe7a3c396fafe32e99c6d71c1f9980626469e76f46644566efa90c96f9fc62c193e74dbb3d87af3cab95ddb524842e2e135b62823fc275b58546
SSDEEP 384:8l3pMyTef08eywXXEoudfMMWz6GXJdjC6wHb:8l3ny0+dpJGjRS
TLSH
T1B2B4B4717BF4A724EDDF05FCA490B808680C9997C6A7C8E82B5C34537961602B8766EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 aa6f74e8842ee110404a6888cfc60e6ac1f0abb7f8557003d5be049b31d44965
MD5 3f6eb5618d4ec99265ece070e3b6502b
SHA1 9b304dcf0fb20c5cf5b108623f57b6a8e32fc985
SHA512 b5a0d3a0cef4126338c82455f83a4158279c31f8785ec66ad0fe45cf0d23c04b69efb2d9d5df19b35bd81ff826cf722568b9fcb72041695abbd017a1d6915977
SSDEEP 192:VOv5zboH/Zl9yjR8QC1d66Joz0dzgCl6mc0dz:KbofZl9yjId66JozQzgC1jd
TLSH
T143E120A4EA38867BC448137BDCA61B440F3A385BDC4E3F29359C71582C462DE368E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 144KB
SHA256 25719a770da6228b5fdbec8d4ac228439569a2e6054ac63cb821c81acdcdabe5
MD5 d6c0f801133a5267edf104e3c7a5d352
SHA1 f3d30441b0d64cbd2711ccd0b76fc71e21dc8170
SHA512 720330392981d39ced109fce1ad35169ddd658370fa6c2d83ac5b3c0709daa9d0e46d8900588db7d19f18986a0839c96c5fab71497ac4b33892c0e7158a2375e
SSDEEP 3072:oEW7wYRkMGvyIkOHb+dd/LsZG7S/nGpTbSyEvsAZNsDJOJibE:oEYwYRkMGvyIkOHb+dd/LsZ4S/nGpTbO
TLSH
T198E3DF84DB1A407BEC2445BFB496173C3735F8644A595B0B2AAC04762DCB3FF2D4A62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 140KB
SHA256 b81e11b4b8b85dcc97ba436cb8784002d769c7560d46733739f18898ac0c648f
MD5 c25c045bbc8fbcafe7406aa1c3ef306f
SHA1 25b42b7ebaad12425d1b404c36a36ad160a1428c
SHA512 72c4d23389da7bb848857dade95459649759991ca5a163091b56d0fc1c0a571d50958bb946eaed5dbc2f61a9c92e132e31836f83a722e1e403e343c66f13bc4d
SSDEEP 3072:rn7PiByfC12oHBNeO+giJVZ1D45DQ5qQk67NMVZNsDJTEihw:rnDiByfC12oHBNeO+giJVZ1D45DQ5qQ8
TLSH
T168E3BE84DB1A407BEC2445BF7496273C3735F4654A595B0B2AAC04762DCB3FF2D0AA2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 135KB
SHA256 9d5675185039c839ded3e2a96735b8d9b78cdaa415d7094255515eb605231b6c
MD5 ce5fac3187722bfdd030ad1aca24cc7f
SHA1 0152912ab3450d8e48739efce174fec9c4116186
SHA512 f46ef1c4f32f96d665bf9cf7552be49308ab874a1f62ad3939655f578a8525100f7a600982afeca5dd3f56375f82a33c16792df67196616ec5ed9bd2e3a7fbf5
SSDEEP 3072:PRQpBXPiwJ/4/bNg8ETx7NIzNhi7z4gAYM8alVZNsDJHEiMs:PRcBXPiwJ/4/bNg8ETx7NIzNhi7z4gAS
TLSH
T18ED3BFC4DB1A407BEC1485BF7496273C3735F4654A595B0B3AAC04762DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 86KB
SHA256 92fb43694f37e176ee4e276a413f53688e997476cb0e030e2e711ff977a49afe
MD5 e5137e9a504405594525201a0996c1bd
SHA1 eaeab7974529f962c716811a9fb204a56bd3482d
SHA512 ae2c2bc14f0022d34e74db127101ab56200f7ca0767c08723984f75f0f643de5967b538211f340f93e8ec04a19a4e65675efe84df4a1da975c5a72a140602d17
SSDEEP 1536:NirpPUqS+P5NVlxQ3f4bLtuC8Z0zA8bqCQewN6atje4LC1cRzGioqgKIjvk/2fY:NirppSEhWf4BS0zAuOeU6ge5+zGqMvkJ
TLSH
T131831084DB1B403FE82441BBB89517283B35F8644A595B5B3AAC04752CCB3FF2D4E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\db\data.safe.tmp
Size 86KB
SHA256 b21dae4a4437bdaf9748d00d14258cda177c5f6c15fe6e563464a90c88fe6e7b
MD5 283508eea6885d4ea53e6fd7b8a1e121
SHA1 e1acf19e963b01490b5c631d619ac7d36908c4f3
SHA512 1cd632894783211a5d433c7d4c5fa2a218ff7a52d32b4366adcdb3736c01a04de4181c062becfb38fda6f5b9ab593633863222757bf5350bfc2109e018e7d298
SSDEEP 1536:yirpPUqS+P5NVlxQ3f4bLtuC8Z0zA8bqCQewN6atje4LC1cRzGioqD2f4:yirppSEhWf4BS0zAuOeU6ge5+zGqD2f4
TLSH
T1DC931280DB1A403FE81442BBB8951B282B35F8554A596B5B36AC04752CCB3FF3D4E67E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\events\events
Size 5KB
SHA256 6b3a54aff90cc2de9738f3ecb53a648043b941f4f11767948f7dace9618c92ff
MD5 0994aee4542c5394f61d36bbec33682d
SHA1 d17777791d3edb0c3b5dabc57e3f1a57df271d7a
SHA512 6e39276bbabb0c0d26b387d5b8a9d196ed290eaa5657716582d85c566a44551474f1510308cdaedb709e88a66dc4f7ee7ba691cefae7806484c6f42f80b00f00
SSDEEP 48:YMHjBffRmfJpCEf71dHu3xB+GwoewlAu9CxCzItK+28ASq7jbNITp41nP6qJhM8/:mv3MQDrKu+ZsewJVc27idUpW
TLSH
T1BBB1EB8C39A84C6E5CDBE62CB84017C953E2CA9A49861D974F8BDE4CCC8D9C9B11F479
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\events\events
Size 2KB
SHA256 11a4a2b1f32240bfbf34cfff43330ece0ed10f97fd77819ff6f82a73bd7f2a1b
MD5 19aebd38cc6c459337a5089c4ddc1572
SHA1 6ca3ee93abdb4885bdbd72b87e47bb2512f8da86
SHA512 ac39026a634ae20905ae34ec64e210123547ae90326ac72b12b49cfa08371060123ce112e97e7589ba0695711d594db1e304eb8205ce58be764ab0ec926bdeae
TLSH
T1B6419E8C78FA4C29ADDBE74CA985038943958B5A06861D470F82DF4DCC8EADE321B039
MD5 SHA1 SHA512 TLSH

Submit Download

3f9cc787-2fdf-4cf2-8283-05b170ca6a1a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\pending_pings\3f9cc787-2fdf-4cf2-8283-05b170ca6a1a
Size 796B
SHA256 195a7bc069c134d20def84c6e75c2498932f7bb779acb39a93243733e0268ead
MD5 1ca310f24acddb75519395800c4c9d67
SHA1 5d9e462f3f65deb3df2bf70cd855b95a410e4b4e
SHA512 85994017dc63b3bebc955d1588c72e7d9eab3a296270635af199ebe626005e5399d33d79ff5c0d2ad3de4ec810acc5509dd214e24b05b00c278de4cb1e27a731
TLSH
T12F01AB53D735B9F2D968A206C9A27B854BF8782380CA58247F6166040CAA61A935770B
MD5 SHA1 SHA512 TLSH

Submit Download

662c83b9-dbd8-4c52-affd-0ba22eaeab9b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\pending_pings\662c83b9-dbd8-4c52-affd-0ba22eaeab9b
Size 281B
SHA256 73a2e1a9f34da690e0eb89d5d2a2852f79af7465ea1581bc3f32f9d3b8180b18
MD5 8d051c5626a62b4771429fe47be3eac8
SHA1 5762475946a1d803d6dcfc64f9b6ef919774e08c
SHA512 4d5d60a8c1bd77fddd580e96d5d7354bf0a6a3f85177173ff3a2e4eb1d46c181d53c947e824ae0cd090caaa0014b1a4449a5828e46b57d8c704b38bad08ef91a
TLSH
T194D02B902CCC73BD4D680F56F4B53AE631A54C3614F15C05A5D1453459FFEDD4115C4B
MD5 SHA1 SHA512 TLSH

Submit Download

9eb7eece-13a0-4445-9cb8-90ffc9d98b62

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\pending_pings\9eb7eece-13a0-4445-9cb8-90ffc9d98b62
Size 1008B
SHA256 4874dd82db25a83cdd52dc86edd422094bc7d77b9d3e0a6f9028a37cbafdcd79
MD5 fb23506b511f368435db3505a3c10147
SHA1 8e6de85c4eaba40c1004efe2945cf669ed51c5ff
SHA512 c0482ee114832e42d314217f4c426605f5f9b799b527e5fb61c45fe2924b3336ff3e26512a22647bc7645c954936da72db8b9394b3b40608fffb73d75488f41a
TLSH
T150110292D931B9B28C7DE367D8A577925BF47413C0C64C047F642A040CDA51E6353B07
MD5 SHA1 SHA512 TLSH

Submit Download

a4699682-1c09-4ce7-8498-16f2c9cd600e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\pending_pings\a4699682-1c09-4ce7-8498-16f2c9cd600e
Size 235B
SHA256 7799730ef7b2bb8b0d74014e8580dd3f847712aa17972f0582171576cb3f526c
MD5 e4420cb8f0de2d5f119bf41b1562ff8e
SHA1 e75e115d1e50c5c2af9556f4eba1e10470a951f8
SHA512 47bab375cfb951e4aa2e850749ed5dc8f9c2ad743bad662f2ee8f454fd676c4af1beadf30d8b7f4222b6ff7a9be93d3319e574999b60204c47cd879f0e74967f
TLSH
T1CBD0A790689C6B7D08190F1BB0A5A9CA34994D3358B5A810D9618574D9F9DC54251927
MD5 SHA1 SHA512 TLSH

Submit Download

ff0d0be7-69bc-488a-b120-07f349455d39

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\datareporting\glean\pending_pings\ff0d0be7-69bc-488a-b120-07f349455d39
Size 20KB
SHA256 2ddbf13fab5d0d748d78b8f46fe4d7e567a3537658fd1d5e0c7ea5fdb5298053
MD5 001bb6f21b9e1afdf8a5142698777b76
SHA1 cbb38fe3857afa83a0f284e7867fba072f8a10b4
SHA512 00b3dfd83d1b56167d856c7250607a1604374777687de4a168c46bea989cf3ca118c541fb0248c3adb4364ddc2f1f2be4b5cb58317c967d08ee5e6e0a2301bae
SSDEEP 192:H08LpHkJtCO9eabBvlVHoGnk9cdphh+xacYKm9I7BYVeg/b:F2JtCO9ewv3/nNexacBD7Bupb
TLSH
T11192304C39A80C7E1CEBC67CA80227CD52E6C68694862CD79F8BDE4C8C9D9C9B15F571
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\extensions.json
Size 14KB
SHA256 d7755434b763e476eb21784651e5d076ec94d0a83f8b0dfbb7c47b140f3aa647
MD5 5ee5a403f37bc85209eb10e044bf2f41
SHA1 ada92cd978bcaa651f5540f8d7a21522270a482f
SHA512 c9d54fef3d66b8c89f6970fd196b14c27728761ed4d07020042d5e1e62d271e08678971c89ee25145e0c9eae5d9e3920f03fa392ccd1fa0d45375309243ab1bc
SSDEEP 384:TkI4vVJUmldvS8dhWE94zm96oNL4HlL4PVL4HhL4HeL4Hd:wI4vRfHX14G6W4l4t4Z4E49
TLSH
T11362421545149EB8298F978BAA367E01C37D473B60845C78F4DD8FC802FA5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicons.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\favicons.sqlite
Size 5.0MB
SHA256 2b0f7cf04ef2e70864ecc94296004862752a2694748b64cdf82995c51fc5bdc0
MD5 d809ca9b27c8dbd8077d8ddebbe50031
SHA1 6e169b29045c82ddcfffbacbc58bcb5dcb0b65e4
SHA512 f72e491f6086b843198f71965cd90d866b0d12804028c9a65bcb46f8d4768c7a67a836799c8400d3ae91f4654581d70f1e87e8a8b04bd676a812dbe1b09e45be
SSDEEP 192:6HCEfTMzdLI+04FTUpEfTMzdLI+04FTUO:6ZLu2+PFTUOLu2+PFTUO
TLSH
T19A364BB19A11602EC7094973FD1767357E2F52698FE38A0737EAA0B4C4B1070EE0B0E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

handlers.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\handlers.json
Size 380B
SHA256 a0e0f7d600383de873dcb01474154fbbf513bdbe55638481ffce6d198399352c
MD5 a2e4be6328337b95ac3bdad5bd4c0983
SHA1 0badbb13d20ca84b342d077cbc00fdd7b342fc28
SHA512 138be3384a3c874c967f0bdd56a6c1bca334deea67d21ade2ff281cfd1f10047561590520bda496b2e4d0130a42295c5ced08cd9d07f10a64ef27226f4daa149
TLSH
T19DE061D26C1DAFE1073DE56CFE077D06C1B6051B3CF8EAED58D08B04076195D9007215
MD5 SHA1 SHA512 TLSH

Submit Download

key4.db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\key4.db
Size 288KB
SHA256 1a8aca2098bb0576ecf4ab52e956d3c36ca050530bca83b1602246b497647ee7
MD5 ebf5b1bc01c41bf92f7e1f8e8bc63604
SHA1 9277d609f46d116d1b6f916093943962d59b6b77
SHA512 48a8dfedbf081fc8a67ec574ceba4b6e2299721eef103e438a860d69daa428bcb567e61857a395b0122310b141eee242c176d0b13d43c62124be4ffac9ebd93f
SSDEEP 192:fva0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23vMW9+C3db+:f1zkVmvQhyn+Zoz67PW9TV+
TLSH
T13254AA06ED85F10ADB1E6830C5454DF23941AA0447815E2BDBBC1E3E1E7564DBAAC5C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\places.sqlite
Size 5.0MB
SHA256 37f90fee79fec679c187183e95498692366abb34ac03d276ca149aa7a6cb4e24
MD5 96bff277351bb9d9efe3e3847b383e96
SHA1 1e38245b3d7a9c5ef5f685e04895b2ac4d8cb7cb
SHA512 9cbf54c3518ce698100cb15baa8c305c0944c730862fc07db4ef8eaeea312cc046db598a6a16b8eaabad04ffefd407db2a1294b5aec56a295d02b6b9d393cc93
SSDEEP 384:M8r54w0VW3xWJkC/FOWGL5cEs8DxYvFt98tHcC:rqVW3o3OXT6WtHcC
TLSH
T1C436B45B6A205211D5EA9271A8F37B0C683F71178A7376823884156D0DE0B27B96CCFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs-1.js
Size 6KB
SHA256 edc9c6330c1e4e602778a0a8265d738a1c56827b6d9e61c72a6252060294e139
MD5 99cc1a8ca04ec4811ebe43937d95645f
SHA1 4cce88a170bb3d81889eb1b1cbbdcccc250776a0
SHA512 ec7a26e402f4603939471979b52ace67298e8f729335ecc5283ef37da85da025dad5bd2fddc44912f7df2736e75ccbd26c2af630a5cd62d2ffa958d706c39c39
SSDEEP 96:xHZFUEgqGqofHCp1zvz4zSgSHlpdv9j3nNxHtn1PBw8HdcnYUGS:7FTRofHCpCSHPt1PBw8HS
TLSH
T1B4E12F7895088B6F78B5776C7C684871AAB2413B7BBF68D710B544C4051CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs-1.js
Size 8KB
SHA256 cdfa90a2fa384efa47352cdc2316fb6d35397927e5cfbb5c15c1eb8f380a8868
MD5 ee395e0306d5d91012c4d2b09893dbe2
SHA1 83effeca132114c2f8e27120bd5fd4bb229394e2
SHA512 1bad76b02f8358a0eec48b31c8cf328e2159b0aac590d5dff8eac5cfbbaba5729bf76599af5de3ca289c26b86ff49b35ee8b449215804c7d1bb0d839c977f0e0
SSDEEP 96:xHZFlEgqGqofHCpObzvz4zSgSHlpdv9j3nNxHunRn19Bw8HwvYhB9vGntpq44sMD:7FeRofHCpRSHPu19Bw8H+uB
TLSH
T1D7020E7891448B3F74F6727CAC2849B15A62013B76FF6CDA11F945810A5CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs-1.js
Size 6KB
SHA256 fa66d11dc65b1238350551cbe9cb320c3e304efc9da5d3ab5c32e112c241b586
MD5 4c0a045a87c7a938cfc308e3d2018b35
SHA1 3d65c9b4a17af2627a19c3893238205afc0cb427
SHA512 e65fa26b9a951287d30a987a3301e97078e3a8a46c01572940af77220741174d35b870b089d373f150cb6d5dbe2630887547590cfa94795bc07957b6047617de
SSDEEP 96:xHZFUEgqGqoffzvz4zSgSHlpdv9j9nNFPn1P1w8HdcnYJ:7FTRofoSHhP1P1w8HZ
TLSH
T1E0D13F7891488B7F78B6372C6C6488716AB2413BBBBF58C710B544C4054CF3846F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs-1.js
Size 11KB
SHA256 4cfaeaf5099c19ef7b9296e8811164095383f2837d8c2f0feba639fa1aab05ec
MD5 f9e62e98255d23f8f9647f80eee95627
SHA1 6b53d7da6b4adba49ddbec9aa15a684efbbac198
SHA512 87ff03ab6aac96f99452c71748e100b98b6d79865f165d584fdc7f2563f7f63f844e837ae6805228551eb34895d9a754c68c534a5d8c6c52bb2893b02259ce2f
SSDEEP 96:xHZFlEgqGqofHCpmbzvz4zSgSHlpdv9j3nNxpwoDRunRn1Ll5mBw8Hs+iGAqvY/0:7FeRofHCppSHRLRu1p5mBw8HOYXaPzO
TLSH
T1EE42DE3861808B3F74F7727DAC254AB11962012776FFBCDA16F989810D4CF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs-1.js
Size 12KB
SHA256 e584b1cdac62307cc90f2b03895b7d336fd3596d059a6360e7b2de59269026c5
MD5 249c9704b1e16ee837aa3ecbac47dd5f
SHA1 3529d3efff843a5a839b6bb3d04f48c827b578f6
SHA512 416867342ff2cb5fce04631a7763a2a4bc2f86084060277a6c05200298946f84c878b7e20a0ff320634e1b557597ff60af2e80b612bce1e277408035c763fcae
SSDEEP 96:xHRFlEgqGqofHCpmbzvz4zSrSHlpdv9j3nNxpwoDRunRn1SS15mBw8Hs+iGAqvYC:PFeRofHCpySHRLRu1SE5mBw8HOYXaPzE
TLSH
T1AA42CC3C61808B3F74FB327D6C254AB11962012776BFBCDA16F989810D4CF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs.js
Size 6KB
SHA256 e0a516921f2475138e9494d3c75c46277e4459ffa30b026f471920d9c4a9bc2a
MD5 97748fa366aaa9c5f71295823874e917
SHA1 176f5fc450ae4677a68b21d2a4ea197719431c69
SHA512 96f5a95feac80322d16b7427afd221c7f9e3c1cb1879023d5ea696f912e50fa48c82952a6b061a253d4e5754b16752b80323eda3747d23dd66b271a15bfccb83
SSDEEP 96:xHZFUEgqGqofj1zvz4zSgSHlpdv9j3nNxHtn1PBw8HdcnYJ:7FTRofjCSHPt1PBw8HZ
TLSH
T1FAD1307895088B7F74B5776CAC644871AAB2413BBBBF28D710B944C4055CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs.js
Size 6KB
SHA256 d803df32c8419f5432ea7a79a8fb4c23bdc394b3c19776c76817f78532ecb4bc
MD5 dbffd17dfdadeecd79ef7fc44dfd327c
SHA1 e7b68f882340708cc1a14122b8157b599bb3d41e
SHA512 07516fc2132681a19e00e66dfed9c7a3d0c21b921336eb80b72bcb0c6b29ad2bb3b8a564f3a51188b69dfdc2a02af2f7add3f06e09884ed11422d66a7ea2d8ca
SSDEEP 96:xHZFUEgqGqoffzvz4zSgSHlpdv9j3nNxHtn1PBw8HdcnYJ:7FTRofoSHPt1PBw8HZ
TLSH
T147D12F7895088B7F74B5776CAC644871AAB2413B7BBF28D710B944C4055CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs.js
Size 1KB
SHA256 efaf9afd78662140ff7f70c089f6487812506ac4d4a45dff5e2f5f7008fcf148
MD5 9c4eae14fc810e299deddd42918adb49
SHA1 d2f96fe53833d24abb03505e4b0fc2ac9e333273
SHA512 aaeab2c03d07758623991ce3c8e7653937e07ae9c205e10c44e10572370689ae6d7f088b2c092da6cddb14798f62665b4ebbc148a80b75d5a14d52729314d788
TLSH
T18A31DDA95A448B6FA5B5322CBC654960DAB341377BBF5C8335B880854518F3843F68DB
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\prefs.js
Size 11KB
SHA256 cdb25b849704e993f4c22327b80eda442a821e14acb920e5056e185cf9e34282
MD5 bf3879618722d9ae84cba92c49443f0d
SHA1 17a86632d8fdf971267d8371d54134d922cce6e1
SHA512 f7bdcb85c3b54b7396664e519384e81465d8f562ea7d939cbd394543b0285f1fe1e5afc783f47ba67e94d9b119f66a3081962fdc12e7d6ed8165cf2c6fb468c3
SSDEEP 96:xHZFlEgqGqofHCpNbzvz4zSgSHlpdv9j3nNxpwoDRunRn1Ll5mBw8Hs+iGAqvY/0:7FeRofHCp+SHRLRu1p5mBw8HOYXaPzO
TLSH
T18E42CE3861808B3F74F7727DAC254AB11962012776FFBCDA16F989810D4CF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\search.json.mozlz4
Size 327B
SHA256 a7c44a8d928c28fd679a8176a78ce028109693311f32f203b3a95f4354dfe4ad
MD5 f0158e5d9053583799b76587a3999afe
SHA1 8a13fd648ae40d60cd099cdda411835f34ee71fd
SHA512 dbfd167cf3f9acc93fc1bd1c1c925c76923f7c722faa52cfbb6f11245e0fecaf799467659dd633f83bbe7499509b64fee33362e31051266c5b46d42fb34151f6
TLSH
T1D6E07D3E9C5590F6C3A806C35F0B459B4F58487A9310FC8C91B09D91897FF9A5258D2B
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionCheckpoints.json.tmp
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

previous.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\previous.jsonlz4
Size 259B
SHA256 30eb9b8fb9ce869dddc19310c200bb23da42c5a99893f5b51152f361bc330bc6
MD5 9fb67d00b79a2372ec2a5d8148312e97
SHA1 287320d48991ae583bee9b896bce630a8a20fe69
SHA512 aab7a9571f331383236021d7cfdf237f65e43f76e73794371edcbf6ebacb035c2d424ffdbae80821119579e214facfcda8a483580b7abf43280fcd7241d547a3
TLSH
T115D095132905DFE72C2EF5C84067BBDFC33F72082EDA24D0D31505053A86902238943C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 708B
SHA256 52323ee5945ef86dc4a694ac5f77db9b69c212c53fb90cae582255deef48f284
MD5 a6d5e84acc5ba84ae9741656e629d230
SHA1 132e6335d07b612405c9d58314e26ed2605015ec
SHA512 54909c1d21b8d17254b478f74e5b20052c480fa75394da093970956545fd7b4c6d2d0d5d742b820934df550df7323f9603c1469cece981cc1cc5e3b917d02939
TLSH
T18E01996078C67AF32B10801964D5AD9D5A9C745584B4C1D191FCDB0026E01CDF557244
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 952B
SHA256 e819aea561fcd705fd678343db6564c4deb5446159d6ecfeea05c91fe11f548a
MD5 d0d823f368ab97cdb0c4ada8c73f1cbd
SHA1 6ec17bb88e2c06a3cc062e7184ff6a852cb62518
SHA512 a6d98b3acd2455d701b34e65aee7028890c313a8d26af10b91b3b1866cbd0a3df15fb6fe82e7203c1d212bb93977611ba63da56058d041ffa59f38ffcd3508f1
TLSH
T10D115886FD8578733B2181257085EFB947D97023C2B8E890F56C964549EC5DCB06B1CF
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 15KB
SHA256 8f472baf36ef7e3f87987d09cf067196828b0c09ad92df08b0785b0003e975cd
MD5 f0e549f210002f31a7a3bbc6349c0383
SHA1 4a72ae90e3b6c0b327e29b58f1d33a00a01d4ddb
SHA512 0c4b23763e27bd4d8452beeffd16af2da3b2aba61a6315f260597ab00456c8d126f127eef4d7e6dba0bcbc48795cf1d086daa035ab533279bb2fa7e7ac171692
SSDEEP 384:pwcaCQIKoD9Hwp1OxZeHRUJY4kRJsQZzLK:mCpKoDA8xpi4knskzLK
TLSH
T13D729EB7C624FCD74F6831C451DCAA080EA50D428AB64795C6083FEB7BF5A949F19538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 18KB
SHA256 09adcc347db03aa28f4aa931c4c9ecd76d43f9c9ef9f4b6ea79e66d1a9665079
MD5 c1a9df6e7760a4878dea7e5dca31b410
SHA1 84d58fa03205c124d98614316378db3791466977
SHA512 c0632846282bc9c6ebc2a964953784c2d063f9e163e86dbccb41a2c974aad87ed0ba235fd4b8933a44bf5f0bbdafe5ae41acc3f5779d4eac379e651db4ef6360
SSDEEP 384:ZwcaCQIKoD9Hwp1uxZeHRUJY4kRJszA0404afJ:WCpKoDAExpi4kns7J
TLSH
T130829EB7C664BC824B6C348450DC69180EE00D4786B64296CB183FAA7BFAB959F1D134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 17KB
SHA256 81f6110e34e16dfae71237c1357c6b18f371ddc2abb112e7662ad67379c0d0ea
MD5 11db67e51af429714c0b6a0a6b47ebee
SHA1 dbe0b0ded3ac86fccf59f9de409e945c46289268
SHA512 08e32190b741c4ca9226826a8a92e4a87e04d350db09e5035a54033eb7d8ef8ec6adf44ffcbeb0bf09c36cdd6c28aab362284aacc48c6e80e10a87d03f95a87b
SSDEEP 384:cUwcaCQIKoD9Hwp1uxZeHRUJY4kRJszm4yF05MN:cDCpKoDAExpi4knsKtN
TLSH
T1E5829EBBC664BCC34B78359460DC69080FA40D4386B6479ACA043FAA7BF9B959F1D538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 6KB
SHA256 96b3c0667cde6dc9e3c00244a71f4123501af142f0c685f2b672cc42091a6775
MD5 1c989bbcaa8a5441d4dcdc2f325ce6f4
SHA1 22e53e424b7c2052bd8787a305b98bdfc89d71cb
SHA512 f62cf406a7910f00d510fbd549e32222444721a41d7562657e2bac4329cd2fb9f1ab5c8220f2c1518f7a7ab46f23462c0a056e80913113fee0b012025c230e7f
SSDEEP 192:VwN4jJK9byHNCbphfXpyNhahZ8i0v/4PIr:mWscH4bphPpSchZ8pgPIr
TLSH
T106D17D6F491AFCEF9614D2A85CCB4F4881E1108494F5426B7A394A7603F8744FA2C79C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.baklz4
Size 17KB
SHA256 547817bf7fd64ea9bdb5a80f83dceb75e64b4354cf8699604c04e99a79a52fc4
MD5 e2061c1df3b6c94442c0564dc3a01fa1
SHA1 59fdc7b380e18abea6a2d10f082c6fa999d687a2
SHA512 0607e5bf1f52315c75b6b1b34c37476c3be22ca55f6a1b84dcf06f82fa79504e7af777f1a3d85e88d50ddd20f50300443f93ffb87edac30f364a7abf29bb3f0b
SSDEEP 384:1wcaCQIKoD9Hwp1uxZeHRUJY4kRJszm47P02ED:SCpKoDAExpi4knsDAD
TLSH
T1F982AFBBC624BCC34B68359460DC69080FA40D4386B6479ACA043FEA7BF5B95DF1D538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\sessionstore-backups\recovery.jsonlz4
Size 19KB
SHA256 c3a1599c8a666991ddc20429ea488bab5d65e5831a276392f5e2199f22bd3bce
MD5 1ec570f84f5cd6a12ecec2c4d475685e
SHA1 3979e2f9d708e8cfb0ec480d479b9dfdbb09fe69
SHA512 c6b055c3e0c06c0cdfc035974243109732448d7f9d537f4c2170c67cef2a7e8098d9677c7ed1b5f6c620dbafba4ddd4556ed3ac90acd2d67c6f6b759e2f9b2d1
SSDEEP 384:owcaCQIKoD9Hwp1uxZeHRUJY4kRJszmvnlJLPYT4J/Nh:nCpKoDAExpi4kns0h
TLSH
T13A929EB7C664BCD30B6C358850DC6A090FE40D42C9B64795CA183FAA6BF5B98DF1D538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shield-preference-experiments.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\shield-preference-experiments.json
Size 18B
SHA256 704d28223a4320a853df4a19d48c7015cf79d56a5317cc3475b6305fa43dcc05
MD5 285cdefb3f582c224291f7a2530f3c4e
SHA1 f816c3e87aa007b6e6d31eb6a4618695a7d83439
SHA512 8f1decf1e4b5755fce8f165daae115f45d6890985c9c4bbb33a6f724cbfd26db75f6da06f9ef675de20fe755da9b7f55e5ee37124296a12a520a393da159bd58
MD5 SHA1 SHA512

Submit Download

{73e5841f-e053-4ca7-80fd-78bd5b943218}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\storage\default\https+++tagging.wetransfer.com\cache\morgue\24\{73e5841f-e053-4ca7-80fd-78bd5b943218}.final
Size 4KB
SHA256 f1af3d6b7fee3175c5997c090c5c8a338eaa66197ea1a8d6a01701fb36cf9186
MD5 e7d49a1535c851e5285cf7dc2e4be972
SHA1 6affd1d5ccff7d74443811f0d95a2e45f0c6ec6c
SHA512 7f10d72d049c18ad1ab00ba5765f5cdeb2a15a7182d89deb3d13cdf7d2aab5e0b9ce39a1e86016ab53756c71a7850d2a41d5c94aea6abc50406b11b43a5a4d49
SSDEEP 96:AE6lgXXbQqymK4jjLLPJkodK9di8ti54RJuUncGjq2kK6t05y5POqtA:T6iXWKjuodK96+0Yjq75tA
TLSH
T191917E50862A264F32F8EAF9D3185B81F03855288FFF8967F1E03F4385514D271BAA0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{8a825b0a-96d4-4147-9f0a-02e22eaa4968}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\storage\default\https+++wetransfer.com\cache\morgue\104\{8a825b0a-96d4-4147-9f0a-02e22eaa4968}.final
Size 24KB
SHA256 e80deee5e1b8220a1f8b07f881722ec1e0d35cbd8c8abe86c4a304b85c706788
MD5 11a7314be15b0a34a0944aad406eefad
SHA1 812f8cbc8bfa54228e66b00dc6879c2b40163094
SHA512 474cda80e97036bb681b08bda7c9f6fdc33b83c5b05caec432677bccdc5fbd00dcc6c6d1f69cc16e44a23e6e66f7cb0b59451eb1bead81587a53bf0274698d04
SSDEEP 768:2CO/MaIlNPqv7mcudtAxH8Ts0xH1fZY7U/XJ4tTjnv:VKGlwTgSh8TnxZZhStv
TLSH
T189B2D0F97788DD98B53034EEFCA524018970D8586F286A5053A4F7CEEF1C48F8B71924
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{74969c4d-4aa2-4842-b331-f934cc312d81}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\storage\default\https+++wetransfer.com\cache\morgue\129\{74969c4d-4aa2-4842-b331-f934cc312d81}.final
Size 914B
SHA256 da41a58d0c5aedad28a1ea1a9559330212de64e9b19eca5e18ddf7730b6ddf9c
MD5 3a311bd080df757478a97131d2bd7227
SHA1 3e728cbaf7059f25cb127670861cc2e876a5b469
SHA512 e6d6f84fdcc5c46bc8c0d525b1c257f3106eef56ef53b8875eb36522b09a5149aee16b31ba5c2a37329623c1da8ea127c21ff98d119c5bd9b53436d2dc9617db
TLSH
T1B411672B85E0E2BB653B1CDF817B46311383586C202B1065E84D566D3975D0E6347D35
MD5 SHA1 SHA512 TLSH

Submit Download

{226d35d3-e1c8-426e-b9a8-ee695bf69ae0}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\storage\default\https+++wetransfer.com\cache\morgue\224\{226d35d3-e1c8-426e-b9a8-ee695bf69ae0}.final
Size 4KB
SHA256 5b4d17365a4bbdfe279825b247ce983215012cfe55315351920c9c0f1c984982
MD5 68ea72ba67b13b025c25e1c4a5d2f708
SHA1 54d0ff0f375e472596991e66369f35c1ce54eab6
SHA512 7fc49179b7a203b46e679d28b33e09054a7aa1ff12a40d98ad0f0cf2bc22ca1a1505808277e9df6913b3626e1b56c6ac6dfa45cd849f44b47ad042b378ab2f3c
SSDEEP 96:rU1GsuXS0RTBdDbV2Fv+cGXjM3EB6Jy3Gz0XKYXU2C5SCfCG+dl6AP+:rUWtTBd34FGt4EBey3AWKYXU2C5h9+dO
TLSH
T135A18E6FD475727E5389D2C3FA9D570A9242269AB40BE0D267DC6D8101EDD4A1B36F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 392KB
SHA256 ac9fa00c20231aca9187d9933bf147dda14a8310c781386affc20d072c501313
MD5 a39247c638d72044f029d795b72cf541
SHA1 aaae25bba9f7d2c0b79b758e27ed1bfb64bd95f1
SHA512 a8a8f4e88d2abdef7884d8ab7c90938f5c5d8de9b8839d59f73f1dc87ea4e0ca781df3afaf5f352daff036379f1d7889aff9a34f074ecd9781a2ee79df509218
SSDEEP 6144:vzeHlcHk22303s4S12tb5tR1OyZ+y6uaLjP:vQZ/j
TLSH
T19F84E8A53064C153C322D83B9B4DB3B7243FE29894E7E78893701748396EB1FAAD9355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webappsstore.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\webappsstore.sqlite
Size 96KB
SHA256 1da10f5699040d962bea2cfe660baa70952c599d1216ce7c11ec14d36db83dbb
MD5 b64300c306c07817b8d0cd16571b51ce
SHA1 6b5f3678cadadec5db1542e779b2a0620d9e00bd
SHA512 f6588541df0d6fd4b6c6afbd0ed90f2b63bb4b9813b18e077d738e4fd6ee5e953adf3386c213e7fc55eac88ca788fbffd146ae60ac4111a665c44e7b2815295a
SSDEEP 6:ltTyl/bK/E7R/Wwhm914iDKrvcwTlNCcVWDeNgLu5e3cwOJrheFDEf:D2tbaE7Rzhm9GiD0c4NCcVUo58cz16D
TLSH
T167A3D88FCA0813A7DE0083789B461F80EE93585E45C343E239B423CD0AA37440B2F828
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l5ef70ra.default-release-1776255913336\xulstore.json
Size 141B
SHA256 e9b73ee2824465bd5121c28b79995912b85dea8cd31b8864b85ad0efa17b341d
MD5 85588667f80668f1ce7638937c963cba
SHA1 ccd5dee1ff51b6ab899bdb7a2e89a06ccee9e610
SHA512 ae73977505dfc97006dc1b15f2ed51bcb751e1014e1c682c1d025aa412809d4b6e9da1d92c980e0710e81d216a3d97655e541c74e90f77f702252109f033cae7
TLSH
T143C02BB1029EEC487F148FCF030D23803F2B8000A1C01B267BC218E4508430F8C1C308
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\AlternateServices.bin
Size 3KB
SHA256 8ed7b6c144ebcc542ee8a27aa5b4c55fc20f1a135c2cb7831037ae378afd2079
MD5 835c74581a189d2202a214ea908ad096
SHA1 892170cf185f922f8948a33419ddcfd1a42d87bf
SHA512 1e85b9f2935dee9778cd1e454fb7852e577fc7772b6663aa9495cec0c7dc2c477129f0ea114b93e4765a824a62958d941d79945afbcd66bfbb167f3aff3f6767
TLSH
T18C814CF752B30030F1648AB8B81A60044E2797C656FA658D1B70A1632FD2DDEA0EC090
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 15cf062459c0da4d581a732ac937742f4c2f7db7425d1a81811d55c0e1fe4592
MD5 0f2732ead8c06d1a7e83d7c90cbc24d9
SHA1 6176d5d95390cb8ab0ffc972ddb347d6dcac2b69
SHA512 3e0eee9fccf7510863c07826f417abe9f5b4aa5ebaa181fa51225f030971ac24f6ea1bfc0e057e95af77037a02d42d976e6690a9d2aba7f17df8e97a2c3f510b
TLSH
T1E42112718AFFCF36F0C04738689D41602D3AB38AA1E7F1693E9452913084EED32AC290
MD5 SHA1 SHA512 TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 07389aebeff04f1d370ad4b1c9fedb5811035f354bb6bf950a4631bcf14a88d8
MD5 1fd6bd348a985b76dee8f0051337ddc8
SHA1 32ea4768657064b3ae4c7ffa2aa8d4cbeb044afe
SHA512 05d81d1334e42cef9ec183c8c8db20721c286b8c1e2ba7da80322833d8488bd58de0d6eb458970d33acf5b525b74e249824b1a1b918b78548e2baa288dced5ce
SSDEEP 12:DBl/AWnQ8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLPQ8akrEDE+vED8YfAlO
TLSH
T160A3268F1A742691EDC521B1D7829EEEAA5EC32DCB17679216A040B69D4216015225B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\content-prefs.sqlite
Size 256KB
SHA256 cb094929393d9779bbb5cb44da04caf0b304b67509dc99e4f9b99b77539e19d2
MD5 be3c562ea7e8d1c8e68c790481914f4c
SHA1 dd66dd963beafa2bd4f9a4aa2acf615d95b35a61
SHA512 ddcd4ac6df0a5307fecba86a8ea44c74836c6425608ecfb4dbeed7b847a639c59f9ef326afb1bf0d98619368f0e2f7c88938c4eb175979090aebd3af556a748d
SSDEEP 24:DLSKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D2Wwae+QtMImelekKDa5
TLSH
T1644426174A917408C0B014B1D4636F22AF3D405B8933E7B23ABC183A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\db\data.safe.bin
Size 30KB
SHA256 f1725560fe7b3cccaa216508396da3d65ced292fb8f329cfc11479891c8e7b55
MD5 472dc21255233f265a3b249dc8d0b909
SHA1 3393333ce8c0e8d21c122505a1076108559db10c
SHA512 9910d8ebdfde0e3f17b41204ccec0dd924e7f6439e37d69bde1d38c7bbd439b00cb3f66a3ee6de75cf37922c9dc2dd430b40ae8ab4edc921de23eb0802481d99
SSDEEP 768:l262whBjMI/SYGcmhuxKDKcWF5HbMb6btbQRZm/:j2whBjJ/TyRq
TLSH
T141E20144EB2E953FD41812BADCA647002F79B88A58092F673A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 2e25180714967b527a308e96faa1debd3e7da9248b90dc43f95e7241865786c7
MD5 6f096fcc81b974fd376f46ca9fef44dc
SHA1 a3ffeea1ddd286fa1919158c26f065578a416863
SHA512 3c9da54e92cbfec35ca2fec7318398176d2cb59dc51bce2af2d14c1b72d57828449cd377b7b6ba331b673d26d5436f32ed751072ca6db1b0eb771e7cefba7d1b
SSDEEP 192:ES1d66Joz0dzgCl6mc0dSOv5zbooMl9yjRyL:Ecd66JozQzgC1jLbooMl9yj0
TLSH
T127D11D65E638863FC448533BCCA52B441F36385B9C4E3F2935AD65482C4A2DE768E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 56d4ac727f376b11daaef2729d494dca612aeb444d4b451c9e380c5c29fcc291
MD5 cd89acc68d9ab62031a1a108884abeee
SHA1 db6f0622a98e136f48ee3f70a002c029db9f80c1
SHA512 81b5d87421ef3aa833c439feac84a4fbb3f403c43884c4cacf8d19315d1c054ba9887d6a605605cd9d2af33f52558c46ca78e476b16f6c73633895fee80ca789
SSDEEP 192:VOv5zboHQZl9yjRy4S1d66Joz0dzgCl6mc0d:KbowZl9yjJcd66JozQzgC1j
TLSH
T17CE11FA5E628863FC448137BCCA62B440F3A385B9C4E3F2935AC65482C572DD768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f4202a5f3af049bf51f4d8a5e1b6d9c7ee8ff4fe6a5d36cfc1566eb422f10487
MD5 4433e8483c06c984095531512e34fcb5
SHA1 e0fec489af3524d427c98c1d4a940085e756036d
SHA512 2fba55161f595d6e7a62bf7857c1fefe471184fb616220de62c3ab2affa1e9ebec18bedabc4f9c3656046992d4b7681beb8f6260dcd4f229468afe4744d7e667
TLSH
T1DE319C8C3AF84D2AA9DAE26C7840038E5395CE0A04C71D874F43DF8CED95AD9716E43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\events\events
Size 1KB
SHA256 bb1403489cf0665596dc2bb1eb4f53853aa45ca3de73aac01b9ccbaf36efab9f
MD5 182be171d529fed2b746ba56a243c1b5
SHA1 adfa2937660751b5e6745742334ecdee841d2e60
SHA512 bb120c90c83db80460386167f33c9a2d2558d969b4e60bb4f36de06c38e13661b688d50154fc4f1e666b02e7e22c8f19b52574c2cd2174e7a035df24ade6c777
TLSH
T1C5316C8C3AF84D2AA9DAE55C7844038E5395CE0A04C71D874F02DF8DDD95AD9716E43D
MD5 SHA1 SHA512 TLSH

Submit Download

0c5ecca2-da51-4ff8-9c82-80ad93f11cfc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\0c5ecca2-da51-4ff8-9c82-80ad93f11cfc
Size 16KB
SHA256 413bc78e173223b6bd6bc4a170ff7e68d98c3b110644fe3b40ea8743acfc4e44
MD5 ba5d4bb417a5d7b00106f9d559979b0c
SHA1 06103dc201776aefb917d7a5a5625db614d0df3e
SHA512 194cc5783d2db309b4c2cfea5e1de31ba948dd7ee37d3534568efbeefb942e9cf3560b8c1d35b160a0b016a36797f81cbe42a5648278b4c6ed42fb59f45646bf
SSDEEP 192:CJaEviSz87KideKw7UkUxZs2lI6OWlnZ+Esm37A9M5E8gtD1EBrPWDvTeoU1iyJq:CJZiSA7KidZZOaAqE8gtKFaTeNPEf
TLSH
T12D72B856582049BAC291E3A894EC7FC3E6F528CF4C418FC99BF4BD086DDE46E512784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63921523-35a6-436c-864f-71ac3de16f7b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\63921523-35a6-436c-864f-71ac3de16f7b
Size 235B
SHA256 7a0b6da9b9ad33be4896c4a7a49db3e1dd21b1688d093c35066f366c841884a3
MD5 a55ca1bf8f831a4a89d54fe34dd10358
SHA1 131c35ee5c9b2de411a7034943fb6e2da8708b95
SHA512 3025dc18f0d543e8db986157ab63df91726a690fa381d04b3fe2c489153b09e482996722570e046097951554ad03d0cf850d941255816589e4e872f8f1943688
TLSH
T116D0978916C8276D0C080F13B0E169CA30888C3350A098218994423489FADD842E1C16
MD5 SHA1 SHA512 TLSH

Submit Download

7cbd4634-116b-48ac-ba90-9a19558d969a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\7cbd4634-116b-48ac-ba90-9a19558d969a
Size 886B
SHA256 e45c9106304b7c4becbef21fee5badce616bb2f2d8f951d116f972c97e1dda63
MD5 4c4040c9605e86b554f8b5c130a092ba
SHA1 b316611b70267a4318da43943ea1d81014c9168b
SHA512 e4ed6ac6d0757bbbb8779dcfa06e39a1df297b102fe7761bb364771aeaebd48a51aa29e4a5c20c6eceb43ac507b0ee508cfbdf864e2250a64f4fdc02ebf17fdc
TLSH
T137112342C634BEF2CD6CD29B9DD1B7064BF0741380C618187EA56B080DAB12EA35770B
MD5 SHA1 SHA512 TLSH

Submit Download

a20aaf4a-eae8-49c3-b221-d92adbb4c77f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\a20aaf4a-eae8-49c3-b221-d92adbb4c77f
Size 2KB
SHA256 1aa6a99c6f3bd212a9a1351462e17dd7808e003467b5dcfd922dab55b2f50b36
MD5 a2bae442e4d25df6556d03275dd8e2cd
SHA1 1ace94b57636f6ba1056c27d5a4ddd299a9f23db
SHA512 0c5b225c7566444d7937512fb1d550d9e297dd770b3df501fc17ac1df78fd3e663b04bf87c7e481eada47822801ba6776fa9e69a998f51406301f88701efe16b
TLSH
T13351536879784C7A4CCEE56C9843338D53B1CA5300C22C932E52DF4C8CDA6D9736F926
MD5 SHA1 SHA512 TLSH

Submit Download

a648e068-4786-4e5c-a872-b19df39bfd1d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\a648e068-4786-4e5c-a872-b19df39bfd1d
Size 883B
SHA256 d3cc3a04e7309d48800a1901b0869ae16fb5c4b5a4899495cf4019d16e59d3a1
MD5 1c2b0847736d8ec386cc70a727ae8cf6
SHA1 ba5c86b79cc2c4793628dc2be11d1b666c6e61c8
SHA512 21df95f72af39ad21f7ae70e99d36c0fda56ea2289c671525c97dc8ee07bef218c42adb62e466ae81af95d817d25b1bb11713bbb383ff6545b55c2713a630811
TLSH
T1A7112F52E731BDB2CC6CD28B8985B7169BF4742384CA45187EF05A040C79A2EA3A770B
MD5 SHA1 SHA512 TLSH

Submit Download

c3371e63-334b-471c-a9f1-11e45a1dc2da

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\c3371e63-334b-471c-a9f1-11e45a1dc2da
Size 235B
SHA256 d1b94a2b06174ed004b5d6942b04102534b6b898da8bc0d71639079028fcb686
MD5 7f48d1620690db199941a69210db54ed
SHA1 fc03e6fb64cb4f8b442c616151b97380ea368b42
SHA512 10fcf56246da061bba198fc376e82cfcf98c0e3cb852cd5e42974baf9c4c975634b826b1fc40a6ef02df57dbc8e99e2704d8aeb075df707a439bf22909b940b0
TLSH
T174D09785989823AC18080F27B9E138E630884C3328B068208A9284788AF89C90A92817
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs.js
Size 6KB
SHA256 55e08798920532f33fcd1c02e98516cfca3c6a43dceb5b9fd3e0c445a43dbe0b
MD5 2a77dc34c60b903de16488d537bb7ff7
SHA1 f8f83ccc6f09421266b6a60c431f403fce56ef40
SHA512 7e0f8ca885b65ca41b58ef48a8fc3621f2612bb227967bc20995cf1d5a4052b5b09341c7e5a0b850d03d9026c51c426f316844fc97409a30614d85f414cf757c
SSDEEP 96:xHX9UTUq1qGqafuW1fbzSA1yFSSlIdv9jTMKnlHw303tBw8OH8L4cnQ2J:d91RafuW1HISSyMEw303tBw8Og
TLSH
T15EE1207894488F7FB8B6766CAC6889716A72413BBBBF68C750B544C4050CF3441FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs.js
Size 6KB
SHA256 6120ec324e869c9fbe8dc9d31129602d0e7b41fb7d3b99a97f909b74bc6aeca2
MD5 2af1c382180b7a5b61452b34577fa1db
SHA1 971964ff424451e4b89e77daa360935cfac0cc47
SHA512 bc237278ae414c0c54c1e12036cf4515eddee214922d65c3e53a011baf702a1dad4354c60bf077f90f696c8601138536538dd7c83deeab1719378a80875d3f84
SSDEEP 96:xHX9UTUq1qGqafuW11zSA1yFSSlIdv9jHnlHw303tBw88H8L4cnQVJ:d91RafuW1hISSww303tBw88B
TLSH
T1F2E11E7890588F7FB8B6766CAC6888716AB2413BB7BF68D710B544C5050CF3441FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs.js
Size 6KB
SHA256 5123471d26ebdb7ec262447bb28d9d97ea632dc7b13f09e9750aaa7794263cae
MD5 2b2bb73ba1655dada6d36c229fcf1f03
SHA1 b810acbc6cc2675d4762fa7474720339ccadf283
SHA512 926f7c7559a941362483fb8b9590ebc751a292d915aac6285ded198ab4c0bbaddb3dde0c593d7e5eae41b53ff9b8a866ed90e403422fbf6f15c52fd885c04326
SSDEEP 96:xHX9UTUq1qGqafuKjmnjv1zSTqSSlIdv9jHnlHw303tBw88H8L4cnQVJ:d91RafuND2qSSww303tBw88B
TLSH
T13DE12E7890188F7F64B6776CAC6888316AB2413BBBBF68D710B544C5054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\protections.sqlite
Size 64KB
SHA256 17ede89dbe62fe12796fe6eb7cb3e371dd058299c4dbc3c103210439259398a9
MD5 46af60692fb8e773e3d4b5d45ecfd6fb
SHA1 e87e10ade210f83e774d5d43e0058c3bdb63df93
SHA512 bb75958af15094d8bcef255bbebfa3e6cce6ec06f7b4b04662cee5d3efb6b548a8f9662a9bbc11e84c2fcb116c30f380e6b060e935360d481cd119ba74c464dc
SSDEEP 3:lSGBl/l/zl9l/AltllPltlzgRollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wg8:ltBl/lqN1MR4BEJYqWvLue3FMOrMZ0l
TLSH
T15453225E03383021C089137227C323922F3CD2BA93232E832A100C358C0A022B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionCheckpoints.json
Size 193B
SHA256 ecb4133a183cb6c533a1c4ded26b663e2232af77db1a379f9bd68840127c7933
MD5 2ad4fe43dc84c6adbdfd90aaba12703f
SHA1 28a6c7eff625a2da72b932aa00a63c31234f0e7f
SHA512 2ee947dcf3eb05258c7a8c45cb60082a697dbe6d683152fe7117d20f7d3eb2beaaf5656154b379193cdc763d7f2f3b114cf61b4dd0f8a65326e662165ccf89cc
TLSH
T165C012C2C6565071CF8365ADB26C7B659E3E04F67665064470ACD54C147B027421B443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

upgrade.jsonlz4-20250130195129

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
Size 902B
SHA256 a5314999edd19d10c5c80a3c165d39d1cb79b74d7d04153579dfc5033ddc2626
MD5 83ffa8adea24fefffcfe697654d023b8
SHA1 2c78a34d7d256b611e11db5e84c128bdb9891cf7
SHA512 6e77136fd97527889961870e744f566b30c7a8539fce5989f33412cfc8f89693474639892b3ac1469746928d7d78495ec6a524ea70c5354df30ea82ee3472747
TLSH
T1E7116303BD1D18BA62A2512FD0869FF6D6C964258A696C60A1A85B004DACA4F36EF00F
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 711d9581639a1d71f7e157f67115b32692cbff53fd435d9cb62cc86a866ad86e
MD5 3e7b846269ad12ab2b4eeed9bdd0ba0d
SHA1 fc9c0374d4e20015a852d426c24a35555aaf8281
SHA512 c2ef8737818a93041ba8cf65ddbf7737675ec8460ec9bab4742c24329cd5edd8f316c9b757b41f52cda60cba450ba996af00126c7b04d97541b5ce6957e16f3c
TLSH
T10B21CA47DD1B1DF27951811590854FB1CB8D34304CBDDCF082998902729D44E734761D
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 289fbd5ef011dad4bc740fd84f5ec7492c7daa5d65fc7ad396d4ca9a1409743b
MD5 37a8c3f2526a1dfdb9b2eebd61f5c4ce
SHA1 d4892e0a1c8a616e2db33de1698f64fcb5c86cbb
SHA512 fba6b68a41977bfd2e857db2012a26466fa75509d88b04c83a7feead0e93aaebbc43e44c77b0e7219f793f0609f765ae4dcc21034f05226fcfbc08e1d56f5164
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBw:Oa16S6CKnqlizbxV+2xVeU7X2B0mKw
TLSH
T16423708E3F07E511C53AF0B178A08D51BC5E321E072226D679D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.2MB
SHA256 fde9c3a2158cac11db9bd598f0dd19381e40244384fbc7dc315ffe67a2a6a513
MD5 8a9db6091c9a2c0944effb38fee0242d
SHA1 f54890163722a292309ee2cd79bd1dffa9d92fba
SHA512 c5d42c07f48b8f1d9927499461553d6f29ff5336e49bd4cefa74199f7b923b323993c0468caa9983288cc6055a1729784c20ec94655c9ae7613add41d1f5e36a
SSDEEP 24576:EE+OO/IgzrJEr26lZYDyrRLvcMkrf2fOWlr3yt:EVbfJ76kDyrRjcMkrefOwr3y
TLSH
T1A5F52AF820D2B357F3414033A64593EB21AFD00CA467DE044BA956E995B8CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\targeting.snapshot.json
Size 3KB
SHA256 e4a9e6d12fb48cdae529e6e258947c884f1e34b2cfe4cdf950ab8e9bda357335
MD5 bac11eaf1cafa9ae37407b59c932fb78
SHA1 1ef1265e084c6480868c984d6316ec9cc58b54e9
SHA512 bb7b7377b8567991e9b4e05448db996728357c6dd0d10e70e2c0cca4a04ee79475f851ddb21eca267db602d7f1a9d8e00af743e8e8da29fe3ada232f39dff35b
TLSH
T19471720C961CA4BEA66BC3C0EA44BF978BBD053370447458DAFE460C55FB5FB162611B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\xulstore.json
Size 141B
SHA256 9ff6f4e891dd9e5810ffd303a28bb5faafb64019f6b782df131188d2d9290d2f
MD5 3551b3fa50afb6a7762c4018eba3c092
SHA1 cea4bff11cd3465717a0aa9ffb28b16279a7f150
SHA512 fc90037c0f636fc74c707b4168bc61f97a41a1a39ee9e1a4ad78cdb94889598a941e89b186f89fd996eb1530f0bc4b9b70b1b5c02a2b5258374e91a7e8b8f52d
TLSH
T1E4C02BB152AEE8087F148FCF024E23803E2A800082C0222A7BC618A0008431F5D1C314
MD5 SHA1 SHA512 TLSH

Submit Download

2823318777ntouromlalnodry--naod.sqlite-shm

Path C:\Users\Admin\Desktop\Old Firefox Data\ljuooy03.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

2918063365piupsah.sqlite

Path C:\Users\Admin\Desktop\Old Firefox Data\ljuooy03.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite
Size 48KB
SHA256 32a50fa2b87a20a3176a93b20b58622f8ebb06d6ced31ee3db898a790ae103ec
MD5 04b8f242be8afc934f529d334f63c2e2
SHA1 233a8259c68fd91194bcf2d7c23de7a06bcadcdc
SHA512 8467752c8cd31a4253f87dabb561c67bf3dc709f87d63238ee684e7452f8e9ce34b724c03cb961423e5a116e14613b16b52f6bfa3dc702fa8a72585cf0553250
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEhkYaDc:Oa16S6CKnqlizbxV+2xVeU7X2B0h8Dc
TLSH
T15A23818E3F07E551C43AF0B1B8A08D51F85E321D07232AE57990D9E4C8F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaper-license.rk

Path C:\Users\Admin\Desktop\reaper-license.rk
Size 363B
SHA256 374e94e5f214222bbfef3c4f9a298584f963c6ba2333bb1558e64d442eb4fb4d
MD5 ba5cf903825300fc6f5a9fd05d416e92
SHA1 0c32d5a635114b90f4bcfdaceb4632113fc1966a
SHA512 12bf5e4714eef5ba9715086ad7120bfa8206a8bd3332d74d1a49e95aebbf622b1d70646ceab05ad5d4a3f28a475a663361eb2190298fa103fd94efc6902fadf0
TLSH
T185E0C03C006C1B4BCA3B056178DC8086D412288762CAA02F7D141F3420EACC7DF9CB25
MD5 SHA1 SHA512 TLSH

Submit Download

~WRD0001.tmp

Path C:\Users\Admin\Desktop\~WRD0001.tmp
Size 365B
SHA256 1605b48b750c2088fac9a5fa01702ac33d3c1d50d824d83a4e19a352981781f3
MD5 bebe4fc2975b26998099ad9da091407b
SHA1 bd7cf84a806b6ba901f5ad00951d71bb24e51c3b
SHA512 0e2dd354ec4290f08ae6bfb19697ca02a909f19a2db1e5b91fb7471fdf212c56eaeb4552a4897707b9aab5d2da820657b1b33659d3ceee551641dbce3b82d130
TLSH
T164E0C03C00AC1B4BCA3B056178DC8086D412288762CAA02F7D141F3420FACC7DF9CB25
MD5 SHA1 SHA512 TLSH

Submit Download

memory/652-39-0x0000020626FB0000-0x000002062775E000-memory.dmp

Download

memory/652-38-0x0000020626FB0000-0x000002062775E000-memory.dmp

Download

memory/2496-287-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-46-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-286-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-285-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-281-0x00000213642F0000-0x0000021364A9E000-memory.dmp

Download

memory/2496-289-0x00000213642F0000-0x0000021364A9E000-memory.dmp

Download

memory/2496-47-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-77-0x00000213642F0000-0x0000021364A9E000-memory.dmp

Download

memory/2496-48-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-49-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-45-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/2496-50-0x00007FF9F7C70000-0x00007FF9F7C80000-memory.dmp

Download

memory/2496-51-0x0000021324390000-0x00000213243A0000-memory.dmp

Download

memory/2496-52-0x00007FF9F7C70000-0x00007FF9F7C80000-memory.dmp

Download

memory/2496-288-0x00007FF9F9F30000-0x00007FF9F9F40000-memory.dmp

Download

memory/3152-53-0x000002879BAB0000-0x000002879C25E000-memory.dmp

Download

memory/4972-200-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-290-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-2306-0x0000000004C00000-0x0000000004CEA000-memory.dmp

Download

memory/4972-1920-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1880-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1833-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1742-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1474-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1345-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-185-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-84-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-195-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-73-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-2307-0x0000000004CF0000-0x0000000004D08000-memory.dmp

Download

memory/4972-2305-0x0000000002690000-0x00000000026F0000-memory.dmp

Download

memory/4972-207-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-212-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-217-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-222-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-227-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-232-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-190-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1318-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-40-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-1195-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-641-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-34-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-30-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-28-0x0000000004C00000-0x0000000004CEA000-memory.dmp

Download

memory/4972-29-0x0000000004CF0000-0x0000000004D08000-memory.dmp

Download

memory/4972-26-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-27-0x0000000002690000-0x00000000026F0000-memory.dmp

Download

memory/4972-23-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-21-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-19-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-17-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-15-0x0000000002690000-0x00000000026F0000-memory.dmp

Download

memory/4972-16-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-14-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-11-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/4972-6-0x0000000000400000-0x0000000000441000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads