1072efad667d604f609fd850a13e54507e23b5ad33b836436267144a4cbd28e2

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Blank-Grabber-main.zip
Size 1.2MB
Sample260416-sd17aaez5t
SHA256 1072efad667d604f609fd850a13e54507e23b5ad33b836436267144a4cbd28e2
MD5 cf1622e33a46b0a9b7f88d0f031d679c
SHA1 6af28cb842e880d2121cc6f1ea9176c07d852bef
SHA512 d5768cab8a7c44f569dd9abbade6eb0a4cdce530e62e3b59ae19ddc7cab6782f2015c0b231568c9945c9fcb9e28ac8f7c4488d390416173c30a292f3e8b6dc57
SSDEEP 24576:OmyJ4KPprRsfyj7JHdGddG4VfvTbkrqAItD6b6D8J7kKy:grBrufyHJ9s04FMr8D8YZ
TLSH
T15A4533B046865893F3F994BAD18BDD0A200074DACEAD57F9B2B778CD0E4B418C597B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Checks processor information in registry 2 TTPs 32 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	5744	firefox.exe
Token: SeDebugPrivilege	5744	firefox.exe
Token: SeDebugPrivilege	5744	firefox.exe
Token: SeDebugPrivilege	5744	firefox.exe
Token: SeDebugPrivilege	5744	firefox.exe

Suspicious use of FindShellTrayWindow 18 IoCs

pid	Process
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe
5744	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1640 wrote to memory of 5744	1640	firefox.exe	80
PID 1640 wrote to memory of 5744	1640	firefox.exe	80
PID 5744 wrote to memory of 4252	5744	firefox.exe	81
PID 5744 wrote to memory of 4252	5744	firefox.exe	81
PID 5744 wrote to memory of 4252	5744	firefox.exe	81
PID 5744 wrote to memory of 4888	5744	firefox.exe	82
PID 5744 wrote to memory of 4888	5744	firefox.exe	82
PID 5744 wrote to memory of 4888	5744	firefox.exe	82
PID 5744 wrote to memory of 4888	5744	firefox.exe	82
PID 5744 wrote to memory of 1628	5744	firefox.exe	83
PID 5744 wrote to memory of 1628	5744	firefox.exe	83
PID 5744 wrote to memory of 1628	5744	firefox.exe	83
PID 5744 wrote to memory of 1628	5744	firefox.exe	83
PID 5744 wrote to memory of 3516	5744	firefox.exe	84
PID 5744 wrote to memory of 3516	5744	firefox.exe	84
PID 5744 wrote to memory of 3516	5744	firefox.exe	84
PID 5744 wrote to memory of 5996	5744	firefox.exe	85
PID 5744 wrote to memory of 5996	5744	firefox.exe	85
PID 5744 wrote to memory of 5996	5744	firefox.exe	85
PID 5744 wrote to memory of 5996	5744	firefox.exe	85
PID 5744 wrote to memory of 5592	5744	firefox.exe	86
PID 5744 wrote to memory of 5592	5744	firefox.exe	86
PID 5744 wrote to memory of 5592	5744	firefox.exe	86
PID 5744 wrote to memory of 5592	5744	firefox.exe	86
PID 5744 wrote to memory of 3392	5744	firefox.exe	87
PID 5744 wrote to memory of 3392	5744	firefox.exe	87
PID 5744 wrote to memory of 3392	5744	firefox.exe	87
PID 5744 wrote to memory of 3392	5744	firefox.exe	87
PID 5744 wrote to memory of 1544	5744	firefox.exe	88
PID 5744 wrote to memory of 1544	5744	firefox.exe	88
PID 5744 wrote to memory of 1544	5744	firefox.exe	88
PID 5744 wrote to memory of 1544	5744	firefox.exe	88
PID 5744 wrote to memory of 3932	5744	firefox.exe	89
PID 5744 wrote to memory of 3932	5744	firefox.exe	89
PID 5744 wrote to memory of 3932	5744	firefox.exe	89
PID 5744 wrote to memory of 3932	5744	firefox.exe	89
PID 5744 wrote to memory of 5636	5744	firefox.exe	90
PID 5744 wrote to memory of 5636	5744	firefox.exe	90
PID 5744 wrote to memory of 5636	5744	firefox.exe	90
PID 5744 wrote to memory of 5636	5744	firefox.exe	90
PID 5744 wrote to memory of 4580	5744	firefox.exe	91
PID 5744 wrote to memory of 4580	5744	firefox.exe	91
PID 5744 wrote to memory of 4580	5744	firefox.exe	91
PID 5744 wrote to memory of 4580	5744	firefox.exe	91
PID 5744 wrote to memory of 836	5744	firefox.exe	92
PID 5744 wrote to memory of 836	5744	firefox.exe	92
PID 5744 wrote to memory of 836	5744	firefox.exe	92
PID 5744 wrote to memory of 836	5744	firefox.exe	92
PID 5744 wrote to memory of 5160	5744	firefox.exe	93
PID 5744 wrote to memory of 5160	5744	firefox.exe	93
PID 5744 wrote to memory of 5160	5744	firefox.exe	93
PID 5744 wrote to memory of 5160	5744	firefox.exe	93
PID 5744 wrote to memory of 5072	5744	firefox.exe	94
PID 5744 wrote to memory of 5072	5744	firefox.exe	94
PID 5744 wrote to memory of 5072	5744	firefox.exe	94
PID 5744 wrote to memory of 5072	5744	firefox.exe	94
PID 5744 wrote to memory of 1684	5744	firefox.exe	95
PID 5744 wrote to memory of 1684	5744	firefox.exe	95
PID 5744 wrote to memory of 1684	5744	firefox.exe	95
PID 5744 wrote to memory of 1684	5744	firefox.exe	95
PID 5744 wrote to memory of 2128	5744	firefox.exe	96
PID 5744 wrote to memory of 2128	5744	firefox.exe	96
PID 5744 wrote to memory of 2128	5744	firefox.exe	96
PID 5744 wrote to memory of 2128	5744	firefox.exe	96

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main.zip
1⤵
PID:1528

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5744
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {1dfa4e16-855a-40b6-bdb7-fa0f5a00e542} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2412 -prefsLen 27133 -prefMapHandle 2416 -prefMapSize 270279 -ipcHandle 2424 -initialChannelId {15a39d5e-143f-4651-a6f3-00ea99be9f3f} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3724 -prefsLen 27274 -prefMapHandle 3728 -prefMapSize 270279 -jsInitHandle 3732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3740 -initialChannelId {80ba46f8-835c-4a76-8268-565061d71562} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3888 -prefsLen 27274 -prefMapHandle 3892 -prefMapSize 270279 -ipcHandle 3908 -initialChannelId {1fae0368-8232-42dc-bcd5-7ea1e579df30} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3516
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2548 -prefsLen 34773 -prefMapHandle 2808 -prefMapSize 270279 -jsInitHandle 4404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4416 -initialChannelId {9bad269d-bbb1-424c-8af8-f18f31c432b0} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4852 -prefsLen 34903 -prefMapHandle 4856 -prefMapSize 270279 -ipcHandle 4864 -initialChannelId {c931d507-9ca2-4c87-ae23-daf4555b3d3e} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2884 -prefsLen 32952 -prefMapHandle 5432 -prefMapSize 270279 -jsInitHandle 2892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5516 -initialChannelId {00ab9a34-b57e-47b5-abb9-01da3fd3bcfd} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3392
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5684 -prefsLen 32952 -prefMapHandle 5688 -prefMapSize 270279 -jsInitHandle 5692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5700 -initialChannelId {8f45976d-f15a-41e0-8d30-50c3080aa139} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1544
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5872 -prefsLen 32952 -prefMapHandle 5876 -prefMapSize 270279 -jsInitHandle 5880 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5888 -initialChannelId {0ba6397c-12e3-4575-b94d-b28a5e1e360d} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6244 -prefsLen 33071 -prefMapHandle 2988 -prefMapSize 270279 -jsInitHandle 6388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2448 -initialChannelId {a53fa687-1187-4dc9-b7b2-5fbb996bac3b} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6228 -prefsLen 39969 -prefMapHandle 3196 -prefMapSize 270279 -ipcHandle 4676 -initialChannelId {4298fd0b-10b8-4466-b699-82c151ceaf69} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
    3⤵
    - Checks processor information in registry
    PID:4580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6696 -prefsLen 36848 -prefMapHandle 6700 -prefMapSize 270279 -jsInitHandle 6704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6712 -initialChannelId {c8ca4b37-cd11-4bf1-a9fe-b907ada167b6} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:836
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5620 -prefsLen 36848 -prefMapHandle 5604 -prefMapSize 270279 -jsInitHandle 5608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2644 -initialChannelId {e7ba4b30-79cb-43cd-bbfb-131f1d62fa0b} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5536 -prefsLen 36848 -prefMapHandle 5524 -prefMapSize 270279 -jsInitHandle 5572 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5560 -initialChannelId {8ca7c980-4021-47d5-9eb5-07b792a9fbcc} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:5072
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2644 -prefsLen 36848 -prefMapHandle 5540 -prefMapSize 270279 -jsInitHandle 6104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5524 -initialChannelId {1d763b9a-97af-4af1-859b-4058fd4a434d} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:1684
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5972 -prefsLen 36848 -prefMapHandle 5948 -prefMapSize 270279 -jsInitHandle 5884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6004 -initialChannelId {49afd816-db82-4c04-962a-50743ca66b1e} -parentPid 5744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:2128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15F2BB48DCF5311B791D5FE370A6B16FE2745964

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\15F2BB48DCF5311B791D5FE370A6B16FE2745964
Size 23KB
SHA256 ffcbae7362671c773979917475027fb90ec72291c0c53ae8a706ae897eacabf6
MD5 50af9d967fa3a02b2a92660be085735d
SHA1 ce8b52330a973b8fff584ab3d5754f4ce75f6ca3
SHA512 72e414dfb830abf0103f5d2469584ac5dded391df83d45fbafb1d0a111e6dc352ed4929f9a093a9e4a3f8bd0723d701da4404cf6df591f4c6519e6afb4e5e4c9
SSDEEP 384:D/l5bfFVfxfp919AfFfLkSRF1b+SnG2Gfh8HF1l6q6+XJsWJuJz:b54F1+OG2G58HF10qdKEsz
TLSH
T16DB239BD3ACC58DAC035E034E980C93BAEB7AD1B958807729077B5970B357ABA513731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

386D22EAB36C3C5C3713F931E60D7F8CA78D773F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\386D22EAB36C3C5C3713F931E60D7F8CA78D773F
Size 48KB
SHA256 20410227bbf789f8b09a866debf9b841f14f31adff90c462d02274eb0b8d0bbf
MD5 9ac255e3aa84db713333a04067c52b59
SHA1 702c2c422e38787e6cf8efed29b4289af6638ad7
SHA512 1ff585bde693d00b8674f2524d48992a8ebd51263d053dc2ea9bef4fc7ababa5482ad0f8959ed62e2394ffee3cce8f8f08c55f7ede045334c24ea117a4b1ce47
SSDEEP 1536:VcI/iEEEtXdFJj+0GPwHbP+w5r5CccCPoRg/t:VZ/2wLt+0GY72wx5RcqoRG
TLSH
T12A23F13B9F149A0546103AF03A60FBC93D182FA2CFED94BF4F1D575508986E150EB1EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3BB664668BDED34229B24F2673D4DAD270DDDC92

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\3BB664668BDED34229B24F2673D4DAD270DDDC92
Size 28KB
SHA256 c8c3d69966b274d6e197259d2d789786933746ad359074e0b142ff749e719215
MD5 8808d039f5171cc308535cbc6fba72f3
SHA1 510e6ee875126978a28c9d9640e70f61af5b4cda
SHA512 5d86431759b41fd8e12bb581b7b2283193d8f12a04c55d0142a97eb33d54ec2948d4d3572faa6b298bf92398fa380de3135a16bc365d72e14e60b45539ac1b34
SSDEEP 768:AuawHYrsUQaipdC+jYufC4F1+OG2G58HF10qdKNAE:AkYr4pd13fCNOGrXNAE
TLSH
T150D2E178EF44644A2A3A1459D5AE34AC0C2EFFC32FD005DFC11A1C95560E766EEDDE60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4860CD16A380B5CF35B32B5C1B0D4E4C5F854117

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\4860CD16A380B5CF35B32B5C1B0D4E4C5F854117
Size 64KB
SHA256 be66fe09c33fe3138c6059441cef5012d83ccc8ed83042542e2156d6d45cd6e0
MD5 ab9ddffb0d3c43f48c2b6b92bf09d0b6
SHA1 bf904c4944d251fec6f1738db1a3b5fd54185bfa
SHA512 87a11529f6f1a457895a60154267403cae634d8903bf00a678004c46f9c2adb4ac07effd71cb5f9a001a9109302f35e85505809a81a7946932eeb215cee548df
SSDEEP 1536:3TMAcak0HV6HoOcrGTt4oqua0VNB67dFpbvEN4WWZ+bICdNOGrX7uA:3w8xGTtjVago+cCdY0F
TLSH
T13C533976EE114653C92502B540BB273B3A35E04A9FD2F3276ECF7125B8297B40D26E9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

573ADCCDDE448764CD7C9D0CDA443FE3A798AAA5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\573ADCCDDE448764CD7C9D0CDA443FE3A798AAA5
Size 941KB
SHA256 b9f74f0bc6b94de4a9fb859cca5126b08ba47a9d13bf483c1a5021e1728ab246
MD5 941609c9a45eee0b48db7a39e9d6c7db
SHA1 b36ddc2579cd4ad516eeff12ee5181602e3711c7
SHA512 a31590dffae90e139e47f8ccefcaa23944bc5ad754c1deee66031804ad550f36f8989b8fe7c8ea5607fce2ef242ffd92814b6defe7c8b1ded3426e20f78f6637
SSDEEP 12288:dGppWzOTFYc63ZkUJLOSUjZRPoP6U8KhXB4MH7f9X:YppWzOTFZ6EjZloP6U8KhRhh
TLSH
T16225D615ED076F62C42502B500BB27363631D04A57D2E22F2EDF75AAF87E7281DA297C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7445F0F1A704791B36159C77EEF62302A4FB39A4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\7445F0F1A704791B36159C77EEF62302A4FB39A4
Size 125KB
SHA256 9a3de09653e4472c0321fde8b0d2c6fbb670e618192d5ad49811f7b13c99898d
MD5 72f78cfbc66e079b0dfe2f7fb42e444c
SHA1 15f9454ac4740a36cd587d69dd854db8d1a23f0c
SHA512 34ac73fca73205562a947d72add78d2f57b65ef57eb7e47563fb9baf0759eaec77753fccea13a4020149d1db37cb936fe68a6b3ea5942dab3375d37530175205
SSDEEP 1536:/mk5UtgGyubP40oTtGv7dCpyk7qNgRf0NPxvGmfoqVAStCGOj6hNOGrX70v:wgGyW4To1N2MNkiHY0a
TLSH
T1A9C3FA16EF551A61D41202B540AB13373B31E489D7E1F36B3F8FB0A1FC2A6691D61EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

861847558ACF1613C52A3868D5EBEA5F31FE2828

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\861847558ACF1613C52A3868D5EBEA5F31FE2828
Size 430KB
SHA256 ec624fbe76ffd6334d2a167b6072c735076db7149d7046e51a145cbb6f8cdd5b
MD5 e119e78e24947ee0ec83bd32195e5aa0
SHA1 0a4aecd76e407e51d17e65fdccf5f099cf021de7
SHA512 4d26c6b52dcf2d15193b89bd8623bb7be5c0b895790d119b60d53067cdf2824b45f1df51eddc9293c0b353a96fb998e654953fbc4b4d6654e61d6d3c7526b701
SSDEEP 6144:BjSogd993rVkS8/5xoP2UtHyUtCuiOCFh4owOVEFA/WIKpDE8rUkFZGrh9q:tSog25eeEOOSh4C+6HKa8ZWV9q
TLSH
T18094E866EE422E63C42503F540EB23323A70D4856BDAF3276ECF7561FC693681C619AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B111691B4D57348085745E4F1020E07DF51B6C53

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\B111691B4D57348085745E4F1020E07DF51B6C53
Size 107KB
SHA256 2f227bdd54f7847a9a953433b929ac2275fbc11a16c39d8c0e4f1d82a4262f53
MD5 c496718dcfc746d07ba176cef6c91212
SHA1 d54c0a5c7aa6dcab2c413b94da3afa36d147c596
SHA512 8b5f02ea57ce2208054846733379f500b899aaea42ee3b8860641765a9df9458fde107f2bcce0951441a8cbdbbd3cc695c7f4e113660646feb88322ed30543c2
SSDEEP 1536:cl/3oJaDnVeFXibcLxqJW8rpTrS6FpOYpKQ+N+5:AfN8FybcL413
TLSH
T120B32D34BF625662C51AA238442F133A3B71F04157EAE32BB6467039BC9B7793D11B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 b81242b6211407ff33f94bd0ae39abdb4c26c384d19a6526471d08d0d1f81bc1
MD5 5753a91845959067ba286408f6ecedea
SHA1 dee6ec4bf615d944dab01c2b0d4a822ffbbfbbed
SHA512 b4eb28cb8a1929faea213b4c1b1edfa6d07f4da00c698b302ac5fe08f76562a6d7f45d60292e7e77123d5c3a4c7e75155bdb2b16440b25f921657213fda8bfcc
SSDEEP 384:HbaFrLiO024YEFuhw+5EL1pPsac4j0lpDII+cAxaUAxa2:7aAZYEFuK+5EB9sac4ID8Lc3U32
TLSH
T1CF528E7DAF0138BE1B27D294D9AD5204CE04D6BBEEE2D11605143C45C6843B8F4FA4EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D40AA57920B2A5795D44D531EE111C4552B02DC9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\D40AA57920B2A5795D44D531EE111C4552B02DC9
Size 123KB
SHA256 e0aba6b2f6f8582783d593ae5646e074b1728358b410cb4202733bb0bbd73856
MD5 fe9e9a437bacf95af617cfd21d48c8f1
SHA1 ee855664aa9e030b71393de6b44da268d61d4b82
SHA512 dea440e730fab6b87da09af0384f4a70b28b907fa9265baff09156e1dd39f24efaca4dfa33ac2dc1544cf5999f443898bbc88759a3f2d9be6c2e3330d0733414
SSDEEP 3072:kSM89rYXCbqW0ZG/oFTJR20/OSn8fMRJ3f0XOQR:VMmrYXCS6Cfdj89zR
TLSH
T117C31277F449213506BA18218A413F4436E6F69727EEC52500BE27E1E9073A3FBDD4A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E45D9D88D22A136F37884CCF58B97BBA5C4C5F6E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\E45D9D88D22A136F37884CCF58B97BBA5C4C5F6E
Size 16KB
SHA256 4fef07f3130e8c26c4b4bd8ed0db81144a7087738edfc57e36e07e14a5d29660
MD5 4f307ffa8d8fce039ebe994caaffc513
SHA1 3dac47f944323b9eb980bdc1d19b66c693ae2745
SHA512 8a6786ceae101803d0f54748c1524778acdfae2d0659a84cd257637aca14d26904a9c1636ff49c9d955824e3697aec8bcaf531aad2d856537ded2a7293c792b5
SSDEEP 384:rDnBdjlf7Hs7jBybDydGSRF1b+SnG2Gfh8HF1l6q6+XJswgNg+:rDnBtoBySdG4F1+OG2G58HF10qdKN2+
TLSH
T10B72AE747B28518E2E632046C19C5D6D0C69F9C3AEC009ADCC6A7A99C20D6FFEEFD151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F189984C66C3FD3EEECAB60EF4C0C13FD79B5CF1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ljuooy03.default-release\cache2\entries\F189984C66C3FD3EEECAB60EF4C0C13FD79B5CF1
Size 119KB
SHA256 840de93dc0e7e53b7b31e2c921cb9b08b6b01b77b3f2da1fb1fc15829b4fdfbd
MD5 f09f92e81e0eeac67aadda7eb3bf0711
SHA1 c995356e7d3f4b660a7ab71c194fce52c0042593
SHA512 34cec64ee85ac6c74357a8ab9b5bbe9b795f679806d0980f063df57b718b6cc59a177dc4d2538ccc6a783698edaf255947f58e42b467c52e1b676d245dc2945e
SSDEEP 1536:VkdZUx/YQI3sstxNyzm7Ji0nCzt45ztJ/MuPWKKjo2FFhTGb7cxaIQ7nzRNbNOG0:fAQFstxT9Wiu2b7rRNbY04
TLSH
T1D3C31A25AE131A22C53516BA557767352E74C0436AC5F32B7FDF3604BF6823A0E22E9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\AlternateServices.bin
Size 23KB
SHA256 0165eff3e80182b272a8863d84af36b2c31f7d545c0a3907d8b0b6237df8788c
MD5 664b8ccf5c7b66ee354f500aa20d8161
SHA1 f9548f2055d1f02611905370a180a61bdd503b36
SHA512 4a02f0de4b146822ad7b6ab9fe69a571f618f6899adc26e431d8a96a14acb4656b177e9512d6e378dfd7f00b8ab5d2ba77aa83313ae21aee71e783778d78e18e
SSDEEP 96:FI56yGBaqUa4UYIWveCtrbe6J3+WyPQs8VEPbEbE8qI6yMgxdxpWKKl57T:tos3IgSj
TLSH
T114B2A2F327756427F0628FB48098759DDC3302269D9895849B69D0F70ADA7A4E03FF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\AlternateServices.bin
Size 11KB
SHA256 8f80a5802b4de35b1b3d0d8ed8265d67b9f582a154b8e470cb946aef92959e28
MD5 76965ab378f5b336367a78af5c505346
SHA1 ea15fdf4d244b7259399ac87d5015f61285fa47d
SHA512 4821f7a4f0360ba002cbedf28f7770d466da7fecf3d2ff607d265b0e82520665cdc2d5d3f86a4b4c3623d828c09233e0d798764ac846797fc93b75effc123c6d
SSDEEP 48:zD0I56mycBZys7yR4v8MyLKygeCt7ybe6JSy:EI56jcBcs+R4khL/geCt+be6J3
TLSH
T1B5327CF32B7264A6F0628EB48458B09CCC3713298DA9D1948754D0F306D6AA9913FF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 87f1b15d60190a3f9e16b9526e47a0519ca57b6b3b49d9b6eb095b9d8bae5663
MD5 8f0314519fcccd61aae4cb54e7d288f6
SHA1 6db31076d8919c76f3ed9340da02dc3f96cbbcf9
SHA512 951bf3f2e7782c7a96df14493e4fe29b2e783cd99aa6db8b90dc829648758d0c8196190365633f438f4aa9999ea8c567bbd2d1267f62dc8b749d41422807bab9
SSDEEP 192:I1d66Joz0dzgCl6mc0dEOv5zboZZl9yj3I:id66JozQzgC1j5boZZl9yj4
TLSH
T12AD1EE28F7399A3FC458423BDCA61B501F36385B988E3F2531AC644D2C562DD7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 51abe3d96de4c0bf22a3360e0d7cf9b9d76885eaf7896f1655c8e812a1669693
MD5 e27d80b67f988a6cc53cbcbc6216357f
SHA1 82e72732332b0f906d32aaeb2c21ea789c823703
SHA512 92a085310fdbc31d0b4717ce7eb73346af0d113c2f223df08a3af74fd4f6f50bbc673fe1df8a54be64bdc589742696f8e405b2e00681925d05ce11741415eea9
SSDEEP 192:51d66Joz0dzgCl6mc0dwOv5zboH8Zl9yjR3Pr:3d66JozQzgC1jBbocZl9yjpz
TLSH
T1CDE12064E6288A3FC458427BDCA61B410F3A385B9C4E3F2935AD654C2C472DD3B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\events\events
Size 1KB
SHA256 caa90e45a3f7846236487e5613216a2c8769fda63c4c1b4aebc3d15318e3cd33
MD5 3e05aed4fd119126922c88e05ba92742
SHA1 de0ba1b009a022770bf3e0873242a8d305e36e33
SHA512 7b085101a9a525c46db26ef629fb7a4b24ed30454eb594bd66aa0af3f007f0538fca2e158083af97f2900e91b1b60fe8d51d21aec615d3fc9030bfa98b7fe383
TLSH
T1A721345C39B94D6AA8D7E6ACB481038E93558E0B04C71C434E53DE8DCE95FED326E438
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\events\events
Size 4KB
SHA256 dce2845528514fa4dce5761ae9a4084d5991a855cee8e94c82fde326a3c3fbfd
MD5 be1dc6f1d6b0c2ff75943933b83759c4
SHA1 ff6b50429702903fb3ac0497d6e7eef87455fed6
SHA512 1c9fe740f631b4cd13bf1dcbd92db4d809c1906da5916df8f5115fea87ffb1edf47bb6e5e61f7596c1d224975a5c85bf91860da4b4b0a193358749481eb8e5ed
SSDEEP 48:YEpUHqDm/p8cY+GKdI6Fy8CIizm61Ls2AMAMWLIJi/8urMRhn0HIK1OfPLHD1OYC:sLEy2uHof0HizpWleOhC8l
TLSH
T1DD91EF0D35A50C7F2D9BE6ACF84107CD93958A4684C72C838E9BCE4CCD9AE98725F539
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2743d483-315f-48f6-9482-9e35557553ca

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\2743d483-315f-48f6-9482-9e35557553ca
Size 235B
SHA256 d08554b3a7b2aa609489e48b9129287aea0ed1b31b14a4a22560e0ab5d8abcd0
MD5 e12556d5b103eeb1cfc179162b1160fa
SHA1 90cd3ee613655d16daa95ef67282c0295c410552
SHA512 c2a725099791154e95868762712889644eea07dc64311b99da95ba07dda8550225d3d6cb6898ed66acb7c12a6af07537a2b0865aee4edea992aaa263a6bfaa54
TLSH
T1AFD0978018A8339EC8040F07B0A0A9D331948D3394759890CAA1C67A89B8DC5012284B
MD5 SHA1 SHA512 TLSH

Submit Download

3c9984a0-39c8-4448-9564-bc7e2aa79401

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\3c9984a0-39c8-4448-9564-bc7e2aa79401
Size 883B
SHA256 4579b511018ef70e9acbefe3176aad877b76f57cae2c6b7ff5a2c239552fae15
MD5 5d452662e3c3b9271cb3286633bd11a1
SHA1 6f269a7758aec7e51689ec14c4ae385aaa2729e9
SHA512 f775715f2118150892e1141790cb8a58d4fcea9a6d76092923193ffe4d4793dc084f74bc818c4475738351aec8eeab0b14117ab3f9423a9d33aee7b058e074cd
TLSH
T14711C050D734BDB2CC6CD28B899277129BF4752780CA54287EB45A040D7952EA75670B
MD5 SHA1 SHA512 TLSH

Submit Download

54dbb469-d78e-4f17-a100-4f7d8ee919b7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\54dbb469-d78e-4f17-a100-4f7d8ee919b7
Size 16KB
SHA256 eec6ff4d6bcf6d1d9fb7ef6daec41e0c67b1a1c383b4e1b9283b6d039e5d74da
MD5 94ba3a1f90da550c5a395928b1e5bb61
SHA1 2f7b03ea5bd0888232cb57777d3c74906f7647f1
SHA512 c8f4b32f5e7b809abe6aebf9d3a208e8efe6cabc5cf6354efaa65a7943228c1aca662af25dd8ae59fd6d10dba3e12011aa9294f54fe70963c5ad50563b757abb
SSDEEP 192:NXPHKgypr1mOlBzDzAEsS7TayZFlwPQ3YHPvAni1NlHP0DFQaeyX0c6vmEfPwjrV:dKUOllDM7S7TayZwPQ3Y3IZjYc
TLSH
T11E72A956582049BA8291E3A894FC7FC3E6F528CF4C418FC99BF4BD086DDE46E512784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72e9b515-0f04-455f-a9e7-0a11e245a44b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\72e9b515-0f04-455f-a9e7-0a11e245a44b
Size 886B
SHA256 1c61317890b1ed487e834a8fd1352650f681d40ca1fa86ee809ea87386fbd929
MD5 1e672c50cd94838879f0909e845fd27f
SHA1 83eed0c8698febfd7972a85e9aeb0a5f37a6c1dc
SHA512 76a1510364e0b4fe8dd39f139f66083985d883efedf13f76fc9a7ce423a62f15acaa956e903ccf064da910739a7bd0dc366c6f61e25817459ef846ca72887dde
TLSH
T16C112391D674BDF2CD7CD29B99A17B4697E0752380CA0C287EF46A180CAA11EA75270B
MD5 SHA1 SHA512 TLSH

Submit Download

c0648abf-7d2c-4edb-9a2f-a5f30c9920d5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\c0648abf-7d2c-4edb-9a2f-a5f30c9920d5
Size 2KB
SHA256 1338dc912a211b5d457713530718c3ad2e9c04e0737d8ebf4b52828e35f3bec9
MD5 644da1aa70f2ade637437e71c16ef564
SHA1 7319d6766422300758d3871d9f2bf0d676faf027
SHA512 cfa4dd64fd5afef56d5f5ffed5dc6feaa3c5dc93c5b6db9f469bbe5ee5da72131fbae8f20f7d5f4034ba113ea398442f815bed01f33c0b49ab2b9a058bd1188a
TLSH
T17C5123587A786CBB4CCAE55C9482338F53E4CA0340CA2C93AE95DE4C8CD56DD736A52A
MD5 SHA1 SHA512 TLSH

Submit Download

e0fa893a-d05c-437d-b21f-83126fb23b1f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\datareporting\glean\pending_pings\e0fa893a-d05c-437d-b21f-83126fb23b1f
Size 235B
SHA256 46c4855496e5df42d683faeef23a7a371405f9d22b5a7b5f60d811a0d61c05a8
MD5 a41324579dace1f819444066dbd1dfcb
SHA1 26fbd4bb13915e6c8fd8d3b5f61f4c31b2175853
SHA512 c772b05a6e656ec35db145a09c9adf006edc2750e5dceefa7d8000da2221ed9ad06e7db6d4b1969de1fde33a2711a74da715f131bf7c9b00b1b08b134a0af619
TLSH
T1A1D097802598772C08004F26F0E069C270484C37106998108A940474AAFCDC44121906
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\extensions.json
Size 16KB
SHA256 4eb04c94de3b16b4fd3c4f2926d0aafa4baf65114da8c63844bec879078c87cb
MD5 765c8b3ba41ff4904207c5e4cf808dda
SHA1 1d8ffcfa550573589f476321395959c354d7ff20
SHA512 a593854419498c0ebafdc03c78b31770d31144cd8d337ad0853a81e7e81a704f046f312583e2f85c1db4ae73997ac2617a153423672b37c37debe752e7c6621b
SSDEEP 384:DkI4vBUmldvZ8dhWi94zI96oUL4HjL4P1L4HZL4HXDL4Hcko4h7:AI4pRfqXv4A614v4d4x43v48V4t
TLSH
T19C72321545049EB8294EA79BAA367E02C37D473B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs-1.js
Size 7KB
SHA256 bb239557200c892dc068a5316e49dfb9b58087116de11c9e8a1ff9e57ec7fcdb
MD5 17306007a0d013f59e2721ca91b3c056
SHA1 031ae4433c1769971b875cd0ea1bb4f4def01a11
SHA512 2e3c681cfa315b1bce52b9558ccb3389648e2e1846cc9d1f52a73e4858d7bdce09a8ccb858657fdafcf7932af149908d1b0e34b263a8fae3f201b46d47babdef
SSDEEP 96:xHX9tTUq1qGqafQu5FB+NNbzS+SSlIdv9jarnlHw303kBw88/sr8L4cnQSUGS:d90RafQu5PyTSSDw303kBw88k7
TLSH
T175F1FC7861088F7F74B6767CAC6889719A72013BB6BF68C711B944C5090CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs.js
Size 6KB
SHA256 60171ed1933a548a9e9ed9360c6c494e21149647b295007ac3ad7277cd718c1f
MD5 263df7d9c1f4154bb3a7d572f5bdd749
SHA1 b5203fb2e9b7f2cfba9b537b1ecb5a8fcaa5d495
SHA512 e12b7f71161b497bf7ea3d0f4f19b2ce0276993ad4743be67580c5bf206cb6ad6103aebd6dc1e100108fc067322cefc1e1ce12ee5f2ffc70fc916c374469d785
SSDEEP 96:xHX9UTUq1qGqafuKjmnjv1zSLjHSSlIdv9jnnlHw303tBw88H8L4cnQVJ:d91RafuNDcjHSSgw303tBw88B
TLSH
T1EBE12F7894488F7F64B6776CAC6888316AB2413BBBBF68D750B544C5050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\prefs.js
Size 6KB
SHA256 042cd7a8e90942290683397d748ede49c523346edb450548da271148d0a49a68
MD5 f6e2ca322f1716512cc9a59ed6fc6e30
SHA1 8909c92bff4f31028725d026051fbb1e16c55db0
SHA512 5eace6b53249c897f8aef4124ff44184adf2a5d6060ff396b3899098e8d8bc45cf5553a50f4fe63b1a6c2c6bf24f1d8e3aca14afd629c6bf5c2152f41d28be51
SSDEEP 96:xHX9UTUq1qGqafuFB+N1zS+SSlIdv9jnnlHw303tBw88H8L4cnQVJ:d91RafuPyfSSgw303tBw88B
TLSH
T1F8E1207894088F7F74B6766CAC688831AAB2413BBBBF68C750B544C5050CF3441F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionstore-backups\recovery.baklz4
Size 16KB
SHA256 0a18a12498fd3b0c2c53485538bff9ce71b2b1d145a33004b6763d1f5232c57c
MD5 9449b4a0440d1ce023a005253287b5df
SHA1 258a5cadfcff9947c6e60837d0be9929576dc001
SHA512 f08f4515d5e261d0f3f0dbf3e3276b1a6ad883eca2d1e581b4bacafaf9624a42a41c8304f58330ec802b7d40020c2a0250dd4c3c3d5ee4a580386577d174731f
SSDEEP 384:pK1QwyxONkS6oEf69pAZfgO/EMHaUcdLJWCAYCOQhtF:8a5S6oEfcefL/ENJ/ADhtF
TLSH
T19C72D00AE391FE38C7698D1511FB2D181EA3134F83E4499D8D59B8B680B6F165BFC454
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 6da197f478e50b4a670249f3bddd42f5988e466c747c26bb9b274dd664482aa7
MD5 8fa4a39fd37b13495bdee5086789dcad
SHA1 bcbf9eb40690817b3e4e7f44dcf4a1cca779bf4c
SHA512 d51d0e151a2a681652e9275bd65faa03915e04689bb84cfc1eb4dfeaaa55da638324fa600aaa3c515a250a7ccef229e89a007d5785614b03c0afeb0a70c20a37
TLSH
T1A921DA23793E2DF77401917A90188FF1D68A24218CA85CB0D2BC5A1554CAB5D331B52A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 f8ac7b9fec6f1ad383bb8654993d238d173276762e13481404ff4a08485bf4ea
MD5 d6149790515bb6276b35dd84e90eb1cc
SHA1 3c531eb664b08599025769e75e5f0c9bfe93c6b6
SHA512 43829a660f1cef1cb0a9eedeee6387000af0ea73c31a75560ab79fa172fa2290808dc0863f568cea24373531dc4888e6ba03f1846626657ad32c2406bd4726e3
SSDEEP 96:JJdiqMX0jEule88EMJF74cMZk0zf8W8Qge3ZwS2X2/4I90V4bvG:JJgqM+EuBRgFlMZkcuemL893bvG
TLSH
T17BA18E17EA1EBC89F4F8C17830FB0993D7FF64405AE6C98961501633849A3C923CD672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{afc116b9-fa0b-4148-aa01-ba230c8bfc62}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\cache\morgue\98\{afc116b9-fa0b-4148-aa01-ba230c8bfc62}.final
Size 404B
SHA256 ba3629c199956f51e9256ed5da1375954a0197263210e8f39a4e002329b71af0
MD5 85051cf42305694e9081822a85c9db9d
SHA1 9a0d7f1155462e0d8ffdf08d3d82057b538726e4
SHA512 3f9214d83f9c947d8f52e0ce2905f67192e15774a1f79a03729b2c32e955a31d2375c4213277e2623cf1f3f5922dece3733a89981e1eaccdbca1a9c89ae3c848
TLSH
T131E0F11BF3E974DC100D5B80BC6E7602ED4034FD83E840D9C5D01D33B364EA25242B98
MD5 SHA1 SHA512 TLSH

Submit Download

2171031483YattIedMb.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\idb\2171031483YattIedMb.sqlite
Size 48KB
SHA256 2ca96410739fad6328fb56078298b5feb2a4151f005995ebf6d67d9072e1ddd5
MD5 06ccfba75faaa6d404c219450afccbf8
SHA1 5200979fc34cd7597910800d3c25df629772f577
SHA512 cf3de34f891e43e7f3d052b2a6928cdf1b2d51920e47ba489c96c488601c8af7aff00fb6055e6590c394173ebb6c9b32b89aa0cec422b5096a0328cb7a5c02c8
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyETBx/6PIES:Oa16S6CKnqlizbxV+2xVeU7X2B0TBx/
TLSH
T15B23908E3F07F511C536F0B1B8A48D52E85E321E07222AD579D0DAE4C8F2116FE5F9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.9MB
SHA256 0d35a368769e5c5004d84739b2c10dd905329b997f2a8300d7aa8b38e28e6cd9
MD5 7907ac541ed8f304f220e65942e4ce01
SHA1 d20c6ea000c25de37f25af2ace9558013392708d
SHA512 609ed9092a14a9dedd167ee8dd4343167a656d5c270409f205f90869ea86969c0afe0136a27617d8ac5fb97bfc486ee675b687bd998e09ea559f81042042c73b
SSDEEP 49152:6mkWRVaAIoW8zN6wlOQGulxCChnuhiCO7xxEfudmICnzRFgEZmbW+mxsTCirI41l:R+SqICAI41nJc3M6
TLSH
T10D565DE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ljuooy03.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.3MB
SHA256 95f63c375ae383de91c33096e870dd6bc427ce3d38be579fcfe76f39e3bbf074
MD5 f8e3cf6949c6d9e8ab6cc80025a37598
SHA1 fe9ddd407870b071d3b0a2ab262d29cfc06bf4f5
SHA512 82f4d58fef39ffe18420a51c6f7eb354052528e9d431f3312fafb078ec81fb93333868cf20118e7f74f19039314193d9f39bb5ab7b4d24496172482e1bf911b0
SSDEEP 24576:JE+WO/IRU1h62rD6lZYDyrRLvcMITy8ZcWlr33tP:JV+ih606kDyrRjcMIT5Zcwr33V
TLSH
T1F1F53BF820D2B357F3418033A64593EB21AFD00C6467DE044BA956E895B9CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads