4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123

Analysis

user interaction
yes
max time kernel
150s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/04/2026, 23:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
META-INF/jars/discord-rpc-1.6.2.jar
Size 2.0MB
Sample260426-3pcceah19x
SHA256 4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123
MD5 5d90a25736333a404aeec88e98661952
SHA1 096bf031a21c43794173781b04cef995f045925a
SHA512 607fa86cbb88f6779422d83bba7c6ad48693185e7e423d01d28068b0018fb6cb0575711888aa559200e915051f100bc2e93b0d0630f91a93a57cb541f3c7b910
SSDEEP 49152:GmsZwtuPzO8GyJMDsLE+xvkYlCea9PCB7aTuCU:Grmtkiy6KyrX9PCB7a6CU
TLSH
T17095334B7C95C01CE927C4BA125B8D435F4A0ABCFD09BCED16E88DA99141D8B07C67EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	msinfo32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	msinfo32.exe

Checks processor information in registry 2 TTPs 42 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMajorRelease	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMinorRelease	msinfo32.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\r1.crl:Zone.Identifier	firefox.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
2484	rundll32.exe
1256	msinfo32.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	2512	firefox.exe
Token: SeDebugPrivilege	2512	firefox.exe
Token: SeDebugPrivilege	2512	firefox.exe
Token: SeDebugPrivilege	5972	firefox.exe
Token: SeDebugPrivilege	5972	firefox.exe

Suspicious use of FindShellTrayWindow 23 IoCs

pid	Process
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
2484	rundll32.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe
5972	firefox.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
2512	firefox.exe
5972	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 2512	4724	firefox.exe	91
PID 4724 wrote to memory of 2512	4724	firefox.exe	91
PID 2512 wrote to memory of 1244	2512	firefox.exe	92
PID 2512 wrote to memory of 1244	2512	firefox.exe	92
PID 2512 wrote to memory of 1244	2512	firefox.exe	92
PID 2512 wrote to memory of 3100	2512	firefox.exe	93
PID 2512 wrote to memory of 3100	2512	firefox.exe	93
PID 2512 wrote to memory of 3100	2512	firefox.exe	93
PID 2512 wrote to memory of 3100	2512	firefox.exe	93
PID 2512 wrote to memory of 2580	2512	firefox.exe	94
PID 2512 wrote to memory of 2580	2512	firefox.exe	94
PID 2512 wrote to memory of 2580	2512	firefox.exe	94
PID 2512 wrote to memory of 2580	2512	firefox.exe	94
PID 2512 wrote to memory of 4244	2512	firefox.exe	95
PID 2512 wrote to memory of 4244	2512	firefox.exe	95
PID 2512 wrote to memory of 4244	2512	firefox.exe	95
PID 2512 wrote to memory of 1424	2512	firefox.exe	96
PID 2512 wrote to memory of 1424	2512	firefox.exe	96
PID 2512 wrote to memory of 1424	2512	firefox.exe	96
PID 2512 wrote to memory of 1424	2512	firefox.exe	96
PID 2512 wrote to memory of 5172	2512	firefox.exe	97
PID 2512 wrote to memory of 5172	2512	firefox.exe	97
PID 2512 wrote to memory of 5172	2512	firefox.exe	97
PID 2512 wrote to memory of 5172	2512	firefox.exe	97
PID 2512 wrote to memory of 5504	2512	firefox.exe	98
PID 2512 wrote to memory of 5504	2512	firefox.exe	98
PID 2512 wrote to memory of 5504	2512	firefox.exe	98
PID 2512 wrote to memory of 5504	2512	firefox.exe	98
PID 2512 wrote to memory of 5512	2512	firefox.exe	99
PID 2512 wrote to memory of 5512	2512	firefox.exe	99
PID 2512 wrote to memory of 5512	2512	firefox.exe	99
PID 2512 wrote to memory of 5512	2512	firefox.exe	99
PID 2512 wrote to memory of 5520	2512	firefox.exe	100
PID 2512 wrote to memory of 5520	2512	firefox.exe	100
PID 2512 wrote to memory of 5520	2512	firefox.exe	100
PID 2512 wrote to memory of 5520	2512	firefox.exe	100
PID 2512 wrote to memory of 5916	2512	firefox.exe	111
PID 5916 wrote to memory of 5972	5916	firefox.exe	112
PID 5916 wrote to memory of 5972	5916	firefox.exe	112
PID 5972 wrote to memory of 1084	5972	firefox.exe	113
PID 5972 wrote to memory of 1084	5972	firefox.exe	113
PID 5972 wrote to memory of 1084	5972	firefox.exe	113
PID 5972 wrote to memory of 2536	5972	firefox.exe	114
PID 5972 wrote to memory of 2536	5972	firefox.exe	114
PID 5972 wrote to memory of 2536	5972	firefox.exe	114
PID 5972 wrote to memory of 2536	5972	firefox.exe	114
PID 5972 wrote to memory of 5212	5972	firefox.exe	116
PID 5972 wrote to memory of 5212	5972	firefox.exe	116
PID 5972 wrote to memory of 5212	5972	firefox.exe	116
PID 5972 wrote to memory of 5212	5972	firefox.exe	116
PID 5972 wrote to memory of 5384	5972	firefox.exe	117
PID 5972 wrote to memory of 5384	5972	firefox.exe	117
PID 5972 wrote to memory of 5384	5972	firefox.exe	117
PID 5972 wrote to memory of 1456	5972	firefox.exe	118
PID 5972 wrote to memory of 1456	5972	firefox.exe	118
PID 5972 wrote to memory of 1456	5972	firefox.exe	118
PID 5972 wrote to memory of 1456	5972	firefox.exe	118
PID 5972 wrote to memory of 3780	5972	firefox.exe	119
PID 5972 wrote to memory of 3780	5972	firefox.exe	119
PID 5972 wrote to memory of 3780	5972	firefox.exe	119
PID 5972 wrote to memory of 3780	5972	firefox.exe	119
PID 5972 wrote to memory of 5940	5972	firefox.exe	120
PID 5972 wrote to memory of 5940	5972	firefox.exe	120
PID 5972 wrote to memory of 5940	5972	firefox.exe	120

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\META-INF\jars\discord-rpc-1.6.2.jar
1⤵
PID:3756

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2072 -initialChannelId {896834af-a671-4ec5-8b81-0644fec1f810} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {674c19f8-05ca-4edb-a3fd-c37d3a1cb1eb} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3668 -prefsLen 27276 -prefMapHandle 3672 -prefMapSize 270279 -jsInitHandle 3676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3684 -initialChannelId {933e55ef-7ff2-4818-a8ed-78544938e6fd} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3868 -prefsLen 27276 -prefMapHandle 3872 -prefMapSize 270279 -ipcHandle 3888 -initialChannelId {6c44193e-fd4a-4539-9cd9-4a5eceeca4e0} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2872 -prefsLen 34775 -prefMapHandle 2664 -prefMapSize 270279 -jsInitHandle 1664 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4368 -initialChannelId {fa83a837-a131-4904-8c1d-21c41ae51fa9} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3208 -prefsLen 35012 -prefMapHandle 3300 -prefMapSize 270279 -ipcHandle 2860 -initialChannelId {91cec7e1-9810-4396-8e3c-4ba6e68be55d} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5292 -prefsLen 32952 -prefMapHandle 5296 -prefMapSize 270279 -jsInitHandle 5300 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5312 -initialChannelId {00a42163-c04c-4b85-8b10-6af3854b0f56} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5480 -prefsLen 32952 -prefMapHandle 5484 -prefMapSize 270279 -jsInitHandle 5488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5496 -initialChannelId {26ed1482-b329-4c41-bb41-2952d254d2b5} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5668 -prefsLen 32952 -prefMapHandle 5672 -prefMapSize 270279 -jsInitHandle 5676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5684 -initialChannelId {91c7316c-5ca3-4db7-be75-a4a84d02f97d} -parentPid 2512 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2512" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5916
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:5972
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1924 -prefsLen 23514 -prefMapHandle 1928 -prefMapSize 266331 -ipcHandle 1996 -initialChannelId {f77009e0-ae58-4fc7-a0ca-a95e8a901333} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        5⤵
        
        PID:1084
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2212 -prefsLen 23514 -prefMapHandle 2264 -prefMapSize 266331 -ipcHandle 2276 -initialChannelId {140d6ab2-2275-485d-a90c-513c84bc1dc5} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
        5⤵
        
        PID:2536
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3672 -prefsLen 29215 -prefMapHandle 3676 -prefMapSize 266331 -jsInitHandle 3680 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3692 -initialChannelId {a9fca4cc-c24a-4e7e-9e0f-275569621a02} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
        5⤵
        Checks processor information in registry
        
        PID:5212
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3908 -prefsLen 30118 -prefMapHandle 3904 -prefMapSize 266331 -ipcHandle 3896 -initialChannelId {f0a6e247-9a25-49fd-8ef1-0b33047c5145} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
        5⤵
        
        PID:5384
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4156 -prefsLen 30181 -prefMapHandle 4160 -prefMapSize 266331 -jsInitHandle 4164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4172 -initialChannelId {d66c8fe1-71cf-464f-a5b2-932ca0242688} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
        5⤵
        Checks processor information in registry
        
        PID:1456
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4160 -prefsLen 30603 -prefMapHandle 4164 -prefMapSize 266331 -jsInitHandle 4172 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4152 -initialChannelId {f782656c-650b-4f17-abdc-6ea7579a04bd} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
        5⤵
        Checks processor information in registry
        
        PID:3780
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5312 -prefsLen 40757 -prefMapHandle 5376 -prefMapSize 266331 -ipcHandle 5384 -initialChannelId {1e15fe24-92a7-4f1c-a244-cf1af57d1d87} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
        5⤵
        Checks processor information in registry
        
        PID:5940
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5132 -prefsLen 38844 -prefMapHandle 5636 -prefMapSize 266331 -jsInitHandle 5640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5648 -initialChannelId {8bf3e00e-1f0a-4c0f-97ff-477ef11ce6b0} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
        5⤵
        Checks processor information in registry
        
        PID:3152
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5840 -prefsLen 38844 -prefMapHandle 5844 -prefMapSize 266331 -jsInitHandle 5848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5856 -initialChannelId {ea3f1cd7-bf9f-4886-a890-8e792fa18933} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
        5⤵
        Checks processor information in registry
        
        PID:672
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5964 -prefsLen 38844 -prefMapHandle 5968 -prefMapSize 266331 -jsInitHandle 5972 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5980 -initialChannelId {86d1d1a5-2f50-4dc8-842c-908d5b0d59d7} -parentPid 5972 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5972" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
        5⤵
        Checks processor information in registry
        
        PID:3456

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" cryptext.dll,CryptExtOpenCRL C:\Users\Admin\Downloads\r1.crl
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:2484

C:\Windows\system32\msinfo32.exe
"C:\Windows\system32\msinfo32.exe" "C:\Users\Admin\Desktop\FormatWatch.nfo"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
PID:1256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update-config.json

Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json
Size 102B
SHA256 ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda
MD5 7d1d7e1db5d8d862de24415d9ec9aca4
SHA1 f4cdc5511c299005e775dc602e611b9c67a97c78
SHA512 1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477
TLSH
T12BB012800100B658F0FC4CCC05303B3E0248402D44CF3903004D30A0787B0020A094FE
MD5 SHA1 SHA512 TLSH

Submit Download

asrouter.ftl

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Size 15KB
SHA256 7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
MD5 96c542dec016d9ec1ecc4dddfcbaac66
SHA1 6199f7648bb744efa58acf7b96fee85d938389e4
SHA512 cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
SSDEEP 192:63/CCBmqCIKJumwOGmnOq6b4b9C4GoTlbo2ofF9/cFnSPhxtj3tCiwwau13151iS:OuPngEG1xNUIzFnieWrc
TLSH
T1D162E8CEF48193585D6F920AEDC5B391FB27008C56693C6671AF608873B9529C03EBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\activity-stream.contile.json
Size 4KB
SHA256 af09502fe1da2edfd78fe232f2443a1e7527991c52ada586623d7942bb21135a
MD5 f6911717d2848e3715824bbb0c98e142
SHA1 808b7bcd38e1fae709c6f53829d5d7d104c61654
SHA512 1f86391db606a3c38bba7651c95cbd6676498783abce35c55cf589a4a2537b669bc7ace6df17d4341a778e2ea2db2b6af36c80f69390b2cd3c09a5a20ed873b1
SSDEEP 96:KEStRjtGVwsHdH0aW8DlaFGdVvPptlYZCeT+mRInl:KjtNtG/dU6lAGdVptl8WmRInl
TLSH
T1A3A109DF98649D535370B7F13C8F27ACF107B187AAEACB48BA849D10F9E910B409D984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 45e7108fc41f7630d211f85971620ab20d5e8dbbf9acb9c174a7bc704f3f8291
MD5 b2535eef26fc9d7c55aa6c11b01e69d7
SHA1 c77bd05dadeb5e079d4a9eca5b95810c40129e40
SHA512 683881fab5f3ef94f10ddfa96ead1be6fbfb1002184365fcee96ba2a761a51f677c772a94f11bb4112af145fbb5eb89e7f31608342ad63face980f2de950e450
SSDEEP 768:oyRzrHkPn8+MwoKQw6vhtYcBVAe/jslo0to4mi/9d3BZeC+CoO:TxEPdMwoKKhto+O3BZeC1B
TLSH
T12E73F8A3A6A8B1FB1FD127C72C0F765B66E24185E7C501C8ECEDC91C80DD790523A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

13926

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\doomed\13926
Size 243KB
SHA256 db12571e3df778344ebbde0c0f1826372aed6b1b33bf5339ba762b02edd135ac
MD5 50592214757a4386a06cf7ada9d1c86f
SHA1 3faed583ff46e787f91bc6dcdd5eebc6a53a4b97
SHA512 7cd362d15ee05ae955172ca11bb994cba5e403895f1d37dadf3c0b5c7175309e58febe2d648d2826fba9c1d79f63a9c099240f7f298d1e8612eb3ab7b6cf90d8
SSDEEP 1536:JbYCYPshOD8lhk8Q/C8m0aoDSPr6oQloQsvkcIGwdDlOgoyTdFjiqDzLhL/keCVN:P0aondpcoOgoyTdFmqDzLbRe
TLSH
T14B34E7F396AC70FB175286DC6C0D72CF62AF8275DB5208DAFC6C8108D3C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0FAAF426B1560D2FB7554FC1F8B6E525130583D4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\0FAAF426B1560D2FB7554FC1F8B6E525130583D4
Size 11KB
SHA256 a3cec4573f1d751d86bf78ef4c9b3f03ba3e0fa0b04efd973fce9acd582ecf79
MD5 01beb5eff2b94a15f84c22638e714d6b
SHA1 34204941354a998219ed0c600871a3deb86615b2
SHA512 c67a10cbb183188d9ff99140505e8b0ba77e1fdf738d8dea076ad14dc0ee29259657c57c87258d129ccd92c5a60d7ccd082e7e4490b6cc8f4721d550e40f0a55
SSDEEP 192:mRw5nK1UgDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCskk9dPzTkk9dPG:me5nwJDZAR9eYa9EHDEclrIVy8esPBPG
TLSH
T11E327BB5BF40181D1EF0E1535DED88692C65E713EED3B2EE1A0821498AC4BA8E4FD6C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

102569C9E9DD7A5391D07F2E3BA3E5A34F5B1812

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\102569C9E9DD7A5391D07F2E3BA3E5A34F5B1812
Size 16KB
SHA256 4bdac53cd83e2de5f388a52b6b955254a0f704189811e98f81ff402b00257c39
MD5 bc5bc52010200730d43d946825bcb77b
SHA1 8c0c44a612ad244a90e9893660b727749a0230e7
SHA512 075cfb761dbb3794cb66a45be74e1bba95c9575193c8a9808d7c14874df7937725ef56401322e096e2d357ed1989b9e15b8644d2dbfaff300db6b12422cdd24f
SSDEEP 384:WEGjGVb067059KGW0lov4rME1nDZAR9eYa9EHDEclrIVy8efPcP7:WKlC9XNrL1ntAreB9ADEcVIVy8z
TLSH
T11872AF74BE60165E1FF3F18389C545981C51B323DF82E1AF52177204C785A39F9E9AC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

111AE63D71402EFB02DAB8AC254CA509866314D5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\111AE63D71402EFB02DAB8AC254CA509866314D5
Size 17KB
SHA256 0c77391dbf2643b387c0451bde665127e26eb8f586b0f4575269542ac94e33a2
MD5 16b817c6ab22ab52816975a666118873
SHA1 7f46cc53ae9efa22007c664e7f55fc6970d7aa7e
SHA512 f98ddc2b7adedd091823c999d0f55fd40042c35b098883962453401d37c592a9d8b3b23c84732fcd1bd7735eaad3589fed30ebeb5560a87c5ed577d3ab294fe6
SSDEEP 384:mvGQc1ag/aBgNSDZAR9eYa9EHDEclrIVy8e9DKDw:mvGQJg/bItAreB9ADEcVIVy86
TLSH
T16482BFF67E42BC5E1FE4E10195DC41291C62B707CE9AE1EF661C310C46C4DAAA1FE5C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15A1105BD50C8019A270EB43562CA2D47A46C584

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\15A1105BD50C8019A270EB43562CA2D47A46C584
Size 10KB
SHA256 cbee5b9cb108211bc8d23eef7e7d7a3ed038d8341570d092d5a4ec986c2f54f9
MD5 14cc4c1e147f8df2084c47461391341e
SHA1 88992f66595cb716c5c14fabd0a51321ebb948bc
SHA512 3814e789d43c6f76ac69e12d8510e1933e35569627a3ca851fcea4a848e1e47c0736401198154ced16a95689c133cd9213d188d034e6f4a5adcd8f2b5f6390ab
SSDEEP 192:bb/6NsDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLkbdokk8bdokk7:yNsDZAR9eYa9EHDEclrIVy8eLk5/5E
TLSH
T1A4227CB56F50180D6EF5E1534CED41661C25E723EFD6A1EF250C2708A6C0BADE4ED1C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1C8C54682B3709CAC523039982C1103B7620A376

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\1C8C54682B3709CAC523039982C1103B7620A376
Size 10KB
SHA256 b4f47e2c2e6990079422ddd44d783c831461cab5e70ae8c4dc77f3cec5c2928c
MD5 81251e789c75e3b8bd973e0d39451ced
SHA1 c4d8e81aa65b576abbb49c1358b24c4260b70477
SHA512 4d496cfcea9af6a2d8b0ab41a1ff9b223bef40c8c38d306b3d13f3d78d404316e8d7165e6d4c258400e6176f7cd182e7533535bb9416f7be591a47c4537209f7
SSDEEP 192:Ovm2tIACiMDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCFekkFd9ekkFdF:Ov3yACiMDZAR9eYa9EHDEclrIVy8eFcM
TLSH
T11D328DB4AF10182D1EF5E293ACFC42152D91E723DFD2A2DF1918250995C4768F4ED5C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63
Size 10KB
SHA256 af30e68d109c3ef8f30b436a5b381e13e79b397977e1dc81117ed8c7685a0012
MD5 0ff908c152d5d4b32ed5f779d21e4494
SHA1 e3250b8bb4d1472da1f4e0c3353f9bf59d261328
SHA512 05f838e2e42d777ff60f8c6d27f0376631228e4786e5e0bb4ba15bb5881e5c2d8070305bb2f4f744bb96a5224462932d7459ef6e65d743e6337c6c89859b7bfb
SSDEEP 192:hXqWDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCL36kk43ds6kk43dx:hXLDZAR9eYa9EHDEclrIVy8eLHt6tx
TLSH
T1D2227CB6AF50181E1EF5E25389EC05592D50E723EED2A1EE160C260987C1BA8F8ED5D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24C9DF0972DD334A2DC66C223393C392A8C4BEF3

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\24C9DF0972DD334A2DC66C223393C392A8C4BEF3
Size 10KB
SHA256 530bc4767b58be9af19abefda1ec8fc8d88f0b26539e8cb172873ddf7bd5df5a
MD5 771a05a81c0bbd18536d25aa64534a00
SHA1 04be7f581b6e019445e63fe8d97cf1d380d4c0ff
SHA512 209a8ca867e8b35fc0ed0a0230f1d648e7d2eb62ea5c2d0542f280b0cf160c7f64378ebd1dd8f19133a1880264ab9e0f7029df8fce2365ca7d18fdab90c12edb
SSDEEP 192:CZfMmDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLukk43dbkk43dy:CimDZAR9eYa9EHDEclrIVy8eLLt2ty
TLSH
T185228CB5AF505C1D1FF2E2538DED451A1C50F613DED6E1EF2508260886C1BA8E8EE5C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3116E4F3AFCB65B9AAB34F02A62C62118E1250DE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\3116E4F3AFCB65B9AAB34F02A62C62118E1250DE
Size 14.2MB
SHA256 086ed92292b77b12b18445ad0850074741f0ae896dab0d6ea4d1f2ace79d8546
MD5 d32b7b17e00e09f7f37a40e4dc003bbc
SHA1 0f912c52ea236a915db987286454e08b323bd099
SHA512 90bfae782307bdf3a006c4ad21b1c5a51a4c33f9aa40f6f0c943cb302bd00e76c0d2921984994019e11f85147379d470e92bc93930f69ac3fdbfdde8d0cc7622
SSDEEP 393216:gd7ICVI4kYH6lvOItR8nF2M6jhbWtgOFlrkcNZnzkuTarqNv:gIChPHoWItR8n0Y5Tk+RnTarU
TLSH
T173E633DA71B68161D642203103D60284759621CDFAB49DFADC3FE75E0868F9F8E7AC9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3948F231342688EDE4BBF775617CBFC16F3F170B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\3948F231342688EDE4BBF775617CBFC16F3F170B
Size 10KB
SHA256 a6b495f8ae44ea88d6dabcf5ec49d63a1c9103e027a8c15079fb55a346bddc7b
MD5 c3b49dce4b56eb07973067c693a8217e
SHA1 d2de11f44b6d89bd4a6432156e981ea41ee7ac32
SHA512 d715ac4f6a1656b54ef3623316830614e2a038020b734add25e9bea3ac406313d9b80e7289b47aee3c1e0ece638f98a228267ed519363f92f5b7721b9fcf43ff
SSDEEP 192:Cb2d9aODZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLKSdnkkJ8SdnkkJC:O2dIODZAR9eYa9EHDEclrIVy8eLKuYuu
TLSH
T155328DB5AE504C0D2EF6E2574DE8466A1C51EA13DED2A2EF190C260CA6C4798F8FD5C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48C8032F138E7257763E747F00326AC5F2800EC7

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\48C8032F138E7257763E747F00326AC5F2800EC7
Size 12KB
SHA256 7a18991ce950aac688dc5c5b32dc9a5de9802bb27d5b05e06f5e98effa6ee7bd
MD5 ea360bc443e03d2fa732a1f3c22936ba
SHA1 87d4bb893d929ed59a5026ccf0f3d173dd4ee1f6
SHA512 a0482a4e02f481c335d56e2c7c1299aed09611e2884a1d630c4f89f58875cf8804736f067c0283630b67bfd7130bce0f7c4b3703f477c38526d4160b547e81ef
SSDEEP 192:zCAaVHWc8kCWR4DZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCL+MdTkkbC:eEcHGDZAR9eYa9EHDEclrIVy8eL+cBcB
TLSH
T1FE428DB09E906C1D0EF5E38B5CED06241D55EB13EEC2E2EF151C2249D6C8BA4E8F95D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E587108F544107EF5F20ECC021930BAAB5E9219

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\4E587108F544107EF5F20ECC021930BAAB5E9219
Size 13KB
SHA256 8d0bf222ced314d6544e93718d29d40fe9ea263622bbb025ce55c4bd24716e4a
MD5 8416853da149aae70c159dc174fe884c
SHA1 0662032dfadce5a8071479115aa867798953fe5f
SHA512 86bc2f101ad31db5ec021eec986fd6c920e41809740aad3bad67cd1b6c72886ad9d82836fc1b888bec3207eb3dc4fce8bc4f39b07059dd00f6c61c3596f8bcfc
SSDEEP 192:LTdScPU6yjS2DZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskC91kkKdrGo15:nh2DZAR9eYa9EHDEclrIVy8e9CrLCr+
TLSH
T13652ADFD6E64682D2EF0F2865DFC02650C61E723DA92A0EE551CA908C1C52ACEAFD5C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

645239C26627A60E4611B43B2D65D457D5AF25BE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\645239C26627A60E4611B43B2D65D457D5AF25BE
Size 16KB
SHA256 93fee05fff9a6ecb426519cf3e0c369903dcf12828b973384a82fd872d8f1eb1
MD5 d0adf4e23315c0f38f4f2cc6c843445f
SHA1 0edda38093443024cc1f746395b8fc3eb30f3908
SHA512 a592715e1b16de0ec13646fbe886b21b167cc0384d7023616395403cb33374be71ae03a7bf9c6de803b43eaedc36fcfeb29db24db9b0470a602d37a3f285511e
SSDEEP 384:6lxC2G0piO02TCWDZAR9eYa9EHDEclrIVy8eLS+W+P:EB4OsWtAreB9ADEcVIVy8g
TLSH
T11F72AFF59F10581D2EB6E1475ED901960C91EF23DDC2E1EE1B08220C89C9AADF5AE6D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67C3822541C3A109A244EC30F3674B77F99A45DE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\67C3822541C3A109A244EC30F3674B77F99A45DE
Size 13KB
SHA256 6a507974e87fcfaf7c9e2452371e7fb79789103ee71b527f778eec8156beecc5
MD5 c060abd3b86ef082f32f9936e2ddeb2b
SHA1 ef7085e25b0f48e3c60ea0696864cb7a708ba23d
SHA512 572a35024238574866a54a1b901cf51a978f96cc9eb5751fbb64f6b87462b532c60f20d90ee4fbfd71a553e05458399e294e1e587e58bc9efc0bba2bb3aacf02
SSDEEP 384:+KOPznIU7ajgq0ywwDZAR9eYa9EHDEclrIVy8e9ESE2:hO7nIUG0q0WtAreB9ADEcVIVy8s
TLSH
T135529FB6AF502C4D0FF1B513DDEA426A1D16E713DBD5A1FE2508264C46C4ACCB4F96C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D7B55F03A2CB99086D18C6E2C7508A59D2D8364

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\6D7B55F03A2CB99086D18C6E2C7508A59D2D8364
Size 11KB
SHA256 04d5562ed2527de1397594bec26053489924f221fbe5ca42cf8c7552f526ed26
MD5 f25aaec36475aa980e821bf27c30404d
SHA1 1e5a338fb51098d099190c4b0d7a9040b84621c0
SHA512 65e8f42ca6c7fc9096d7afb68aa78f3ed801ee1f8fb24eb56e65ab83173e4fefe4b64dbe30fda9ebe51618ce53231c3ec7c57ddd883e1f48ce7329488fcc939f
SSDEEP 192:/f/xQNGhqbCJDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCL/MdvkkxMdz:/RnIbWDZAR9eYa9EHDEclrIVy8eL/crS
TLSH
T124428DF5AF41280D2EF1F29399FC46261C51E723DE8BA2BF1408114C9A84B58F1F99E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 13KB
SHA256 4b7e47ac0fda8b7c59b190afdf50d5bae9e3803ecda21df998829c43705746f7
MD5 fe55d52a54b36f69ba7052a3e0c9cd90
SHA1 6916fed3561ec785fdddd9194db1cc42537bf43a
SHA512 bf1960ad0c009f9106055aa1321691ae9efc7647645e17b2f1c574fffef782c6ecd80558888bea2e5e493a865523c9df9824d87826bf610c964db7d4edf64d6e
SSDEEP 384:pGNtgi0t+WSYE+AxAbJ2ePsac4j0lpDIIbA:L9CYexAtsac4ID86A
TLSH
T17952AEFECE2164AB4B61D6F26CAE17C99D0A614BAFEAC78D59843C00C49839DD1FD4C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6DED9FE7A50E8290358DC1D8C755B05692CB9E36

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\6DED9FE7A50E8290358DC1D8C755B05692CB9E36
Size 512KB
SHA256 b1cfb225e645184206d07e1afeccc6fafdd1def1cc99c6692699dc8ed48a89a9
MD5 5a3cbe6127782ad0e61bccabb5eb5327
SHA1 234c9b9355c03c21dd5638b08396c0d9348f6900
SHA512 37937e69f67a4fea86760ea5d4ac56569e357708f36ae3a32fed49f1491e770d05659958ff60b548cc2970e63ddc382b4acb6db073bf7631e9f81de8e41e46d6
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeEreYb:OltBL+PLQFZBgBo2xAzpsreYb
TLSH
T110B423ACF73B3668D37A9C76C257D4F857A8DA2B55523CE80C8E014E6040AF136963D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7309EA3158F39E1C19FEC3C3A7F7643B8E6AEF8B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\7309EA3158F39E1C19FEC3C3A7F7643B8E6AEF8B
Size 98KB
SHA256 e4ce7139c4bde467fae8053e8c340c9f9ee5820be338fdac9a9f4f10adc68f87
MD5 e66fb613a48a3f9903b0854509afff0c
SHA1 c48cc520d2c288419fd8264ed396456da195e49e
SHA512 c9362f906314778ab832b4b31d5bd8f0a43d436eca4c1a10802efadb52f764c5ff959722b8ed4f0d35fd1d4a7bfe6725a3bcba0c172ef96f04eae85e38fee6ce
SSDEEP 1536:JQgUGXwJogA2Vaf4A8whYFK7fwek4IoUR:VgJog1A8KfhRIoUR
TLSH
T12AA35A376A991D3A079763C83C0F7C5B0FB64583EFE9C6A599CDCA0880E3D58523E661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7338C927D34F5246FE9B1A84754B8036F9D68B7E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\7338C927D34F5246FE9B1A84754B8036F9D68B7E
Size 97B
SHA256 706310995a64f4d1bc5c11d234205c89fa8d55309e4c6ff53284ac596337de5b
MD5 e6efe764616d407e87caeacb2cfe1994
SHA1 6bc5c306d0f59eecdd51791566ca2de9c610997e
SHA512 804e1d3f6596badd02a528995b78b4d3a58e98eb01a0bdeb0c3c5c247c19799103c6c39c9528e7e80aaff8ff298277400cb0bf7a0467351c0d4e63c8597187f9
TLSH
T1A8B012B72F025965D30248FDA981A60C08404425C6C707C1A88057069F42A20F243105
MD5 SHA1 SHA512 TLSH

Submit Download

75215BD7B2FFA69AC236B15B29FC5BE0B1FE5884

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\75215BD7B2FFA69AC236B15B29FC5BE0B1FE5884
Size 20KB
SHA256 b2416b2a3175c82409ee418816b6d7ad92f9d014994786468a112cd2256bb0f4
MD5 36eb0fe459a459b4a0c342b95fa0901c
SHA1 0b212c17736958e21c65f08d54f714ec0927da19
SHA512 bd46407effc1ccf4d11177d4911cffa613dbd6fb223c1ea3b7831d43dca187faf7679a18393dd98e3c4659ce4c6fc54df1f4f3efad7183190898a781b5391d05
SSDEEP 384:NLW+1w6bPeiSywENlQ7wmxP9DZAR9eYa9EHDEclrIVy8eLk5r5u:NCCiiSOrctAreB9ADEcVIVy8S
TLSH
T17F92CFB31F502D0D2EE2F047ACFE08591C419663DA6A91EF286C1A498F80AE5E5FD7C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7B30395BC8EDC7C2D12D364C1B7B49D67DF89F20

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\7B30395BC8EDC7C2D12D364C1B7B49D67DF89F20
Size 11KB
SHA256 f015967a84936601dd0d7a7b1d0642cc5e1acf5c88466d5c90beca571fac9e36
MD5 89b604e3c1ee57a50080ab01fc05593a
SHA1 9a500af397eee29c29076b58a90f7c96820c69f4
SHA512 6948a1f10388c4aad4b4f15c0aaef0a10e7a5e9f84adf5ffd6e028fe3966a5e301cca275d70708d88b2d33e04491833df10925542d2427a6e8632199563b323c
SSDEEP 192:k0Z4mFnPrqzfIIrcDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCHqkkZdf:J3FPrJDZAR9eYa9EHDEclrIVy8eHMAMZ
TLSH
T11F329DF16F006C2D1EF5E29359E902542C51E623EEC6E0EE1518250C96C47ACF8F99D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 e3b86cad4eade0fb00329367c81229547c631bcd21b2cef04dfdb43c1ce06186
MD5 3bd5d1b981674f1a1a4c9793655725bb
SHA1 63755129ae5ca7da8f062eda701564306e937442
SHA512 f1d804a278403c0720780aaf92dcf13f947a656e9098edc83596c3b5ec4d994eecde9376848760578463d9fbee67f0c6aceef836e5048d41b3ca47bf26c8e190
SSDEEP 384:HbaFrLiO024Y+Fuhw+5EL1pPsac4j0lpDII+ekH:7aAZY+FuK+5EB9sac4ID8LB
TLSH
T1B4527E7E9F0138BA1A2BD294D8AA5214CE04D6FBEEE2D05605143C49C6807BCB8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 391KB
SHA256 1ce7848ae4441593497998f43b42f90c0d1946e093a35cc4b2e7502d76374efd
MD5 7a62517bfa96ed34a85877c07a355a69
SHA1 26433ba9419b4cc1877eec08df9a73828af7af64
SHA512 d306059de4a7d7ed4b4b9acedc62dd3ce1a6b519d5811d129b33c5a46b3d2e3d885d2e9c9f46b06801ef0a9a73fda4b907546145daa949051487533bd0f8265b
SSDEEP 12288:nIcjLHwPipMaXrmJlzo1XaFjL0r7eLpApNlCnQUDs:nIaHuiqmrg+4IrSANlC5g
TLSH
T1D28402F5F76078D3277E430BAE556FAE47A28D13C78E90DC582B778044BBB285E9A104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 18.9MB
SHA256 92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
MD5 ca2e152cdecfec8997a5467b9c3ce569
SHA1 abfefa098053f20577c867069ee2fa02c768c907
SHA512 7b07d200b5a5dfa88e22cc293be9f9fe0f26e3b927ca0222958c08db650590907bba852083562577b49f58edae676594ba4a1d8163bf07f102311a77694c0c8e
SSDEEP 393216:YD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5o:rGD+l8VmuZ/S24/junfSFwUqYg4z
TLSH
T18B17E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 c9a9f5143e042eb8f32d1de01fc5707ceaee33808ddf5d03d80f737c92d0f7a2
MD5 0cbb492d641a92f7ee392c426cf39651
SHA1 b1fdfdfc1455905c96f37deb6984e46dd7dc63a6
SHA512 4f46221ac262dccbcee11772beb340dce2afa39f6a190225373943dfccf86a4f9c50087e5fe8f3656834d5311a2ef5c055e65ee921a99b815c899bba1593ca75
SSDEEP 192:g1d66JozGzgCl6mc0dlOv5zbowM3zyjt82:ad66JozGzgC1jwbowM3zyjb
TLSH
T15CD12EA4EB38867FC408037BCCA50B414E36395AD84E3F1935AC75582D1B2DE3A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 f0ed2a11c3ae3bd03a9fda68b14d0636608bfb78e7c3e6b39582993a245691a6
MD5 09972dbb8643f9fc75a8340409f1efc1
SHA1 3f994aa888ac5cceb843f4b2e79b509895032639
SHA512 110fce0ab72ebadaf61ac6866cd8af753f7cb8eb9ed3535fb4ffeabd6d4227126e5ec09d35450dbfe58bd7301e5308b614652c3a4790153dc8add6ced8ec35dc
SSDEEP 192:g1d66JozGzgCl6mc0dYOv5zbokZ3zyjt8:ad66JozGzgC1jRbokZ3zyj
TLSH
T119D10FA4E638867FC414037BDC650B404F3A399AD84E3F19359C75582D5B2DE3A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\datareporting\glean\events\events
Size 2KB
SHA256 9738920cf878362341fe82d7bda19d76ff2276580baac20462818b85697378f2
MD5 99e96b8a8ffc3f1c6a2ba2ba3d8d4d4e
SHA1 968142bef33f47d7e920fef090ecd6aae2d0bb9d
SHA512 6b25a6aafc4b2c295479b3c27bdf25a3ff6ad33208c627e6defc4f42c9b23b9da8d36170729a0cb2df9820a6add00e6adf5f24c600e9b3a89f9821e349a7b553
TLSH
T1F5416CAC78FD4C169DDBE74C6989028A53A58B9205831D470E43DE5DC8CDEEE725B03C
MD5 SHA1 SHA512 TLSH

Submit Download

5b041b8d-4b7b-41a8-a609-2bbe7cf6d76e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\datareporting\glean\pending_pings\5b041b8d-4b7b-41a8-a609-2bbe7cf6d76e
Size 796B
SHA256 7832303df720f101fe9023c4bb526dd39f0cb99803aa47f8494213c3f0479026
MD5 936062011c0d42c3754e26e1e6ff94e6
SHA1 28bebdedd41874eca5bac358106ba181b2a210ca
SHA512 e360444ce16b06666306f54d473597aa28a693c3f93e0e0f5adccdaf7e1288e0b06344172ba78e855bbe9e29f401fbbdadfd90e892c5c776c3d95007b6e184aa
TLSH
T19401CE90D73879F28D6C924ACA953BC247A42423C0CF48143F71A7140EAE51AA79A71B
MD5 SHA1 SHA512 TLSH

Submit Download

eb46017e-ca84-492e-b997-985be5c09a32

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\datareporting\glean\pending_pings\eb46017e-ca84-492e-b997-985be5c09a32
Size 235B
SHA256 48240fd5df1fc9eb1add4a2c64594e5cddef1c42062770f5a0a737e91c280717
MD5 bc3513503d6fc971f2a9a1f4f6fe3b3f
SHA1 1067a95df9a893f3b4d3bb159bd95764aedce1ad
SHA512 6863f5bd1c46341bcc0bb4544ca99549a7d9e5ea84a65feca52e06d39626e43ee00710554b5789f18130d3f2aab31192ea4c37c19c1e2855e7dc1eaaffacd703
TLSH
T1B0D0978028C8A32C08101F17F0A06AC270444C371860981086A60938ABBCAD8016281A
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\extensions.json
Size 14KB
SHA256 1f05e519cc340cc5607bbcc567c51d46332ca5a40c5131b370fbd4629a5cd50b
MD5 6ef38fb477eec753cf4cdfa95ba24a37
SHA1 1966d076c9c3dfd5ce474b1dbe81c6ff909cd6e3
SHA512 307eca51f43f8b632ceaa81fc9f4a0d514dbc2f220046b764d3bc3cfdebbd88cd77cd7ad743bcb39c5210b8185d113902fb7f305f4a3fe64455e5686ff16ea3c
SSDEEP 384:ukI4vYUmldvJ8dhWv94zri96oHL4HqL4PLL4H9AL4H8L4Hd:BI4gRfaXa4fW68444P4di4249
TLSH
T15F62422545148EB8298FA79BAA367D01C37D473B70845C78F4DD8FC842FA5B902BB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\prefs-1.js
Size 8KB
SHA256 8d99c8ede743a7d27fe8d2b17fba9ee647eb4f05d77638c204d6f4e34d4bb30c
MD5 3e32a66457752bd3c57bc40f696cf50e
SHA1 29793941ed18e208615fcc1c0e445969321a18d3
SHA512 ec5845835cd47532bd10de8199a600be47d81a7ab951309075f7bab1870fe0325dc7f9810d707d88dd74c528cafdab1dd2e46d2666715c8557ba4899dd0fa19e
SSDEEP 96:xHdFETnqGqafPObzvz4zSRySHlOdv9jOnzSWRj2jxVDNiBw8HOG3DtcnLGT:X7RafPsySH9JRj+xiBw8HDDN
TLSH
T18A02F23C9144CB3F68B2327C7C2949B15A61013776FF78DA14FA4491455CF3881EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\prefs.js
Size 6KB
SHA256 3748e8b459ee0d74ef8ab0b8ac78444949533413632ffb1ff15f2f33ff4714b3
MD5 dfae84a766120451d7ecb4cefeb9c028
SHA1 07cf7525e7e4a6a27081e3ecdd03011df6dc38f0
SHA512 501badb5424a4ff77e51f218fc2a24c02ad0069f3d81935f8813ea85afa4ec657aa29bf40b4c5f5dfb5a2ed8b0cef55637cfb648b2dc9a6c3b87be47a3916b71
SSDEEP 96:xHdUETnqGqafbzvz4zSRySHlOdv9j9nzSHHxVDhBw8H9cngT:XGRafdySHscTtBw8Hn
TLSH
T1B7D140785108CB7F79B6776C6C6848316A72013BBBBF68D610B584C4055CF3881F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\prefs.js
Size 1KB
SHA256 61421ee0ff334a463f22da4ab61eaa003b0978fccdd295a0bb4730ab85108ea4
MD5 96b1d73d963a33fc94be33603ce16abb
SHA1 3e849555bfd7f1f7358284599ebce208b6caa132
SHA512 e6e334131164582a4f09cf5ed2bfa576bbf42fc6c6beb3d96bc81c81d6186b6c568510b726f62d87af8fa22f924edb76b36d37b850f629ec2c9516b39a4da264
TLSH
T1DF31FFA92A05CF6FE9B9327CBC155960D6B30137BBBF5C9234B480984518F3842F69DB
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

previous.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\sessionstore-backups\previous.jsonlz4
Size 288B
SHA256 133477571cca0a13add459da45be8b384f6170788bde7da900c48f658dc88741
MD5 7af0df0814309d93689c60ae9a764e37
SHA1 feaab3e7c6ad00eb67d3a7665f73b27707e4a150
SHA512 d969c352451b22fc1bda4614d1ef1aebfebe0c4b673454944eca2c415ae46d1b5f02e55e094700847d1ff51334c55481b99933143e8a6aa5254099945375a004
TLSH
T1ACD027531515CFE73C3FF54D44FBEA8AD317731D1DD528D0D615044D2B45901618D565
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 80KB
SHA256 7e136933085fd3991718cac40451926f6f2f9b45235dd062399989f2fc3649c1
MD5 f621a789d558eeebfeb62c732c250fdf
SHA1 8148c832eb3cf16f74fe9bc1994efa1196570227
SHA512 62462db33b32b4a2bb9580b4fa1c9ddf9fc5282db22382768670e9c8f86f3631bbf2f2922c39259e4ac1c47e31fcb163e4a995683719e3661404a301c42e1735
SSDEEP 768:r6S6CrAWRj+f3aY3p6x3I0H7f+eHPcHt5qcTPlCJbc+Mf:r6S6Gy3aY3p6x3T+eHPcH/zj4JY+8
TLSH
T1DF832A9D3933D463CB14E43B32A681FB901F969D407127883BA8978C646F15B9E2FF94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite-wal

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hnlef5tb.default-release-1777246931764\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
Size 256KB
SHA256 2929050068d81eaeca6287ca0293d996b164fb484d2efaeac1d911efe6ba6f8d
MD5 f28292ff8d30009ac28a49d42213ea68
SHA1 48bc285c90d7d26fcc0ad47fd2fd109b61cb8750
SHA512 9065926600a7d08a9f1d7c8a17cc2f08e0eb21818ce6b248ca0c0cab8cfd800e963a84e70416d35d088324eae715426f5d9d7daa2eddae2b8c5bb4bb4779887a
SSDEEP 6144:yEaY3p6x3q+eHPcHB3OaY3p6x3Z+eHPcHjb3y3WD+syAYve/Dp3/L2X6uaVf:ygqunf
TLSH
T1AB44D7A53065C193C322D83B9B1DB3B7243FD29894A7E68893702748396F60F6BED715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\AlternateServices.bin
Size 3KB
SHA256 d0dfbdf05578d311bf4f0418cf6995f9f0880c03127288a34cd9e77265117945
MD5 e55cea2714909104e36e5f01c3125b54
SHA1 8a4546c70841e7aede4d756a3b4495acb6ff90d7
SHA512 21a327ae51d86cef6e820c129c11a6b44a27dff48309272dca5c5d0e60eed1d2b256bd4c22b60112d56a1cfac8297de84755063fa9fcb05d816319d31da0cd38
TLSH
T1998182F743B300A1E4920EB0D85E38089D2B364B49E6B5841B7291A342C2F99F09EA6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\SiteSecurityServiceState.bin
Size 2KB
SHA256 b1e86b30b029cc250d6d97594bc709514a5fb926739e85575980ebbfda5f013c
MD5 5c46f1053c58389ebc9d0912020d461e
SHA1 d386c2dd296a9791f4aa5cd51db078e58c347ecf
SHA512 b1216c9985f1c90cee78a47590f6d1a27efe3f0bb9af82ff7decdda5e5eaa1166dc1c1c319bc7069899a1fd9c94b1c5a3708642381fb73eb75c7a35257b25f9b
TLSH
T11C413732FF9DC9A6F8C04635649D44502D6E735957E1E0943D54D3C33689FF92B9C150
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\addonStartup.json.lz4
Size 4KB
SHA256 f55b6d82a7b55c48fdb11c80845a212c60ba3bc1364b15c7bf738dfaecc1d303
MD5 e08e08497da234ff2182d9c5aebcc200
SHA1 9baaccf5abcbbfbd175dc05fe0328e1f5a6a2cb9
SHA512 ef280a6954c91745056666e78671cce8fb64bcacc41d457fd6e03c243b0aebd43587bf62ef60e82e5c9f6613ed1b86d43a36fc1b78d0a440798e14200c87863d
SSDEEP 96:NHe4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nh52xxhD8rGvm6ApwnHUuhN
TLSH
T112A16CBAD242EFA1FE22C04358D97FB2EA96AB7414B9C4D4F1AA71294C64E735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 07389aebeff04f1d370ad4b1c9fedb5811035f354bb6bf950a4631bcf14a88d8
MD5 1fd6bd348a985b76dee8f0051337ddc8
SHA1 32ea4768657064b3ae4c7ffa2aa8d4cbeb044afe
SHA512 05d81d1334e42cef9ec183c8c8db20721c286b8c1e2ba7da80322833d8488bd58de0d6eb458970d33acf5b525b74e249824b1a1b918b78548e2baa288dced5ce
SSDEEP 12:DBl/AWnQ8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLPQ8akrEDE+vED8YfAlO
TLSH
T160A3268F1A742691EDC521B1D7829EEEAA5EC32DCB17679216A040B69D4216015225B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cert9.db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\cert9.db
Size 224KB
SHA256 0d9d80ccf8a2e96a29b3d1a0ec2aabbcaa68a1704cf4ba9dc849a65548868111
MD5 32ec68764c956f4bbb42003f393b77cf
SHA1 18a162d5dbb08bc196206c91b902965fe0e1094f
SHA512 72b27c9fbc9d3cdaa072301c59b4b5cd63c6de4755fc61ae9c450ae189e4267ca9c88522b28380910679801d636605ed493d40fd39b326ad4f23ca1a99556a77
SSDEEP 192:zOFva0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23vgxHaRPNnKoP708+:K1zkVmvQhyn+Zoz67XcPVPQP
TLSH
T1CB242FC2F820745ADF8A6D31B662DCF27D7627410385A422CE28993F1D64A1F67A68DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\content-prefs.sqlite
Size 256KB
SHA256 cb094929393d9779bbb5cb44da04caf0b304b67509dc99e4f9b99b77539e19d2
MD5 be3c562ea7e8d1c8e68c790481914f4c
SHA1 dd66dd963beafa2bd4f9a4aa2acf615d95b35a61
SHA512 ddcd4ac6df0a5307fecba86a8ea44c74836c6425608ecfb4dbeed7b847a639c59f9ef326afb1bf0d98619368f0e2f7c88938c4eb175979090aebd3af556a748d
SSDEEP 24:DLSKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D2Wwae+QtMImelekKDa5
TLSH
T1644426174A917408C0B014B1D4636F22AF3D405B8933E7B23ABC183A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\db\data.safe.bin
Size 43KB
SHA256 3c0d183b0bbd49c0f8b53b33db684d5f855e04104c151bab3ae8c8cf63118d24
MD5 449867f3ea15133c7ee677b2c4c182f1
SHA1 6b5d992bfb2d0a6d11eeafb60c9690330c2acb29
SHA512 47956f07cb3de6ae9e7499df247926f9bcbb36feb429d9a64bf9a1fbfef2acbb478d0d9b7fc5432a37f11b9db1d6ebc160fcb5f724cad3cc514d0c8ea781a4cf
SSDEEP 768:MEAsVpcTph8LEHI7iGcmhuSWKs4N74eX5Zy3/bQbEb6bnDb0beblb3b79BhkcD:HpcTph8LEHT49BhkcD
TLSH
T150131144EB1E953FD41802BB9C920B102F79F88A591A2F973A5C64786C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\db\data.safe.tmp
Size 33KB
SHA256 b48a416bf6ada33d16e4963717257b33de188bc3002ac5d0791a3dd1abf33829
MD5 8fb8ebc6b937d1d1eb5727be4623207e
SHA1 1c6fba1ec8c0c847488c5f56fb33aafd79a9f05e
SHA512 cf9b042920dd6dcd2ff53feacb98017287e1c0e0ab2a3a88cd3abdb1e441c92f50d2255b3e3b7acdf27c6ea5eea26bcdd643f8223a12531e11ea8992871b5baf
SSDEEP 768:FF2nGPSeqeKGcmhu7sKDt7BJySHbMb6b/bkb//E/:ynGPSeeslC
TLSH
T10BE23344EB2E953FD41412BBDCA50B002F79B88A59192FA73A5C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\db\data.safe.tmp
Size 33KB
SHA256 328feb0381ac97a3b9884459344f287b9b46fc84083af8cefe2ac9110233bd38
MD5 eedb02503ca146f5a52bb606e3c921dd
SHA1 3c54b68be603832cefd76b5cccf06e7db02aed8c
SHA512 35f4f488618b39b663a460df2940e3fa41b84d88d983cb2a2d705829a5dac73adbb78dc996f676c01ca27a71cf74864b26e083fa986deab86d29178f08d2e9ce
SSDEEP 768:FsiE2nGPSeqeKGcmhu7sKDt7BJySHbMb6b/bkb/:JnGPSeesl
TLSH
T1B3F23344EB2E953FD41412BBDCA50B002F79B88A59192FA73A5C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 bd6942585327f3a9033ec6d9670adb745057e46ab733c8764ee2c4ce23f65ca8
MD5 5be89b9ae491a3463d2ac4bb3cb9231b
SHA1 0d1a3820c28fd9fef450d3704167c4c7251f3383
SHA512 79bba0db77326164796657122253b810f042f5c4811334bb2f3e24dbdcf747d826f54321ba3c0b11b02a5e53c856337790642a28c4cd786c6a1c0103987a3fb1
SSDEEP 768:X1kAIPnKJcjGcmhu0qRzdJyKnbebPbkblqE/:yAIPnKPqrP
TLSH
T175D20144EB2E953FD41912BBDCA50B042F79B88959092FA73A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\events\events
Size 1KB
SHA256 809cb17ae040a567dc33168c5a7cf219e88830498cdd4d45e19416627c2c8db1
MD5 182d89bbb94a730d260d0aebf88796dc
SHA1 a310770091fc659091885580007e9c2d668cd337
SHA512 97b138f40349a6164ac6da61e22c9e6c0e5ec867572ca497659d3feae1f3cd9794c83a7184b442fd909f7fc2bf53f2f507c5b953f9a9a8785ae4e02ce49c129b
TLSH
T1FD21C7AC3AF94DAA9896E29C7451028EA3508E0708C30D431E03DF8DCDC5AC972AA43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\events\events
Size 3KB
SHA256 1d9a078c1859c6e47ec5dcc4936837e4e5dbf7e6a301b7e7a6a4b9cd3b6b3bfc
MD5 9c86239ab8a749491b94e2ad66fc14ee
SHA1 609d8005c575a48a67f8b71157cc60470cac8abe
SHA512 7cb168d63b535eb72ab3597e99f739f7d59f7f8c35e76c4ef541960ef8c0ea3b15d40ea06e5201d38670e40137e0409bf833c26a24888c6e611689531c8a9b8d
TLSH
T1AB71CF6C76BA5CBFA8E7E298B846028D53854B0348C71D870CC7DE4CCC96A9A725F13D
MD5 SHA1 SHA512 TLSH

Submit Download

26de9c51-9c8b-463e-988f-fc838341af81

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\26de9c51-9c8b-463e-988f-fc838341af81
Size 867B
SHA256 4ad1a79b718b92efdcbc5fc5ebe27f97ea21335651e8cf5526bf327fe84f9715
MD5 a8d7878d8732e2f64bcf47029978ed27
SHA1 edc29e40b9bee813d11002ee25a40b0c055ed83e
SHA512 7e325aafb52f349912d9ae63b476b3689486d346f8b387bd56f1b7cfb8b474bffad6d5fcb994c700a126d7a357b2ce04a19e5a9a83c4d77fa78afd7d2049db05
TLSH
T16E11E3D1873568239C64D20FD650771B5696953284CEC0053EFC59354DEB03F576231A
MD5 SHA1 SHA512 TLSH

Submit Download

5736db64-6413-466e-8360-475accc42bf1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\5736db64-6413-466e-8360-475accc42bf1
Size 235B
SHA256 82b493f75b29bbecb654e3fa88220c799891a248c2b00d883f1fd25a67f96b3a
MD5 b95730023cce101ac7d8d4c22516c1b8
SHA1 8b222a1c1560c02d74300c446cd50977d5a8a5f4
SHA512 84d420f8e4fefb94d1781f14ea58f137b8ec3a46b1534266a77bf01db278a24755597d53c31ee11f6f90a6b82e54e83e7657b94f872878a8e5dec4bd02d8cc90
TLSH
T18AD097A014A877BC08200F0BF1B129C230444C3328A49860AA900AB88AFDEC442A1C2B
MD5 SHA1 SHA512 TLSH

Submit Download

68d04d51-c7e6-4b4a-aa39-b7a451aeae77

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\68d04d51-c7e6-4b4a-aa39-b7a451aeae77
Size 2KB
SHA256 aa24c62521e9a96c16f38f8a08a9da9511754836d324b29d5633c5186ba57c6d
MD5 faa7ef484a2a82e23736490db05ee203
SHA1 ad69ddae19ab88c6e4d93a2f8b280ca18f459e4e
SHA512 a895608ca7e44ee0baa17dca66e4a4a934317cbbb01755740e8fe3936a3491876e48778ac0b3d415c4ca6a08859a6628582c853d1ff670cafdb4b4e8001552ed
TLSH
T17B41346C35BC9D7A9CCEF25DE981334E57A04A0300C62C432E51DF4CCDA26A9736B52B
MD5 SHA1 SHA512 TLSH

Submit Download

75d07279-3ce1-4241-85ba-39981f584af5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\75d07279-3ce1-4241-85ba-39981f584af5
Size 235B
SHA256 8a92e248686860f9f52c9345dd1d1f204e933eed644acb252b7accf1e16cf244
MD5 dfd9a3f724f9d2018023b6279850b143
SHA1 66eb543847774bfe91ca87d2979f70b8eb227106
SHA512 6503f85ba448eb3a524d91beb106a9d4aeddf8524b53ef5d8dcfd3270616dd9ac87a4b4e80b518ffe2d2ccc0d4a00af8d299ff185b4578e6e451b68ec30d9f4e
TLSH
T1F3D097802488676E08200F0BB0A02AD771888C3320B4AC20CA914138C9FEDC84221817
MD5 SHA1 SHA512 TLSH

Submit Download

c8e4bc74-c8a0-4761-9628-368c0b3b704f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\c8e4bc74-c8a0-4761-9628-368c0b3b704f
Size 871B
SHA256 b4a58d89e1eb86664c92e095572582c15a897e77f1f7bc75cf017b182e0fe33f
MD5 8668e582aeee18cfe28db129e123a2a1
SHA1 d47b00b73980e3f8fc589b40694f2fdb0d6604c8
SHA512 3dea4d078109c7de49a699606170945c094ade4bc23bb58108ca433bbdef36669d4114e8ee7bc51b70c73e7f696933c0bc529982b202b4eade2b87fded52d14e
TLSH
T1A911E3819378F9B2CE78834BC6453B115BF4721380C654183FB05A144E7B51DF76B607
MD5 SHA1 SHA512 TLSH

Submit Download

e1a6ca8a-dcae-4cb5-a5d4-897280a3357f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\datareporting\glean\pending_pings\e1a6ca8a-dcae-4cb5-a5d4-897280a3357f
Size 886B
SHA256 eb92195766498042b1f2e02343ed656d5e4dede67d28fc3b9bc759e211bf0785
MD5 398c4684fd8a53b769e877f8952eaa3e
SHA1 33e4202606a9070b8ae709e4721edb1d1944f4f5
SHA512 031093a7e5300cde0a14aa8b643edd6eae97885f7d7e1ba991aa665574662cf502b4b5d76432d72d4df0ee66b04d902df16323481dba37308250961149121532
TLSH
T146110091C678B9B28D28924BD6907B424BE4321780C699087EA4AF184DBB21EA756707
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\extensions.json
Size 16KB
SHA256 46f5e29ff69fbb5e595874b38839b12b162e20dfbb41c692252074e80a47414b
MD5 a0bb2ea8c9d7225841dd24c404260bd3
SHA1 b63674b37991cb32547f9dfeff1ea288441698f0
SHA512 9f91d2cbc3b3f9c9c47c29620de79bcd214cfea01e59b6a0aa6117b62b2e849f5ef66f361fdb61d796af537b03096b0c8c77483e7af4eb34b9a004f076486c13
SSDEEP 384:tkI4vPUmldvf8dhWH94z796oNL4HCL4PvL4HbL4H4L4H0j4hS:OI4HRfcXq4t6G4Q4r4n464W4A
TLSH
T14472531545049EB8294FA78BAA36BE01C37D473B60845C78F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

formhistory.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\formhistory.sqlite
Size 256KB
SHA256 479a11b34ffccce96b2949924ee1319785547cce240662c131f1ff459b889717
MD5 502a42abe8eea3848813b3474394c6a8
SHA1 e3227dcc2fbe92c08940838be5892e3e1324d12e
SHA512 6a32840d8d8aee72a9341dff8aeb08573483f1576e320bbb81aeb5ecd84e919a36d7f2915a41acf90a9494964e546d9cfbfa56ea951352ebcf25947b05d411fd
SSDEEP 24:DLd8VxExBWrkier5NzW6LlmProNpNmVIpPuVM7rBmxF/EzgvA:Dh8HMArt0pmcNptpGVM7rBw/v
TLSH
T1E644874F59142432C9D78AB7FDD21F534AAD0056C6632B947EFC101D4FB1A09DE58EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permissions.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\permissions.sqlite
Size 96KB
SHA256 8eb8883189762b1b6188105c84487a4b6a6a348510c7a18ce5ef91730e342b36
MD5 8669775c8cea389a556576f1ab5759aa
SHA1 6892c4d035a4d0e19e11c7afd3509356eb542ac8
SHA512 77f59519f71ada4f2f6eb6d59079881dc7b9a3a0e019a9fd1e956339e8f0a520b406af31914392180f45aab062826cdcd83e072bb1d1c91fd1f996357e984d5f
SSDEEP 12:DBl/A0cbWla0mwPxRymgObsCVR45wcYR4fmnsCVR4ntcn0:DLhcb5sh7Owd4+P
TLSH
T193A3C0DB4E3869D2E98149336DC366D8603D041A486BB2CA1EC1443B8C039C9DE15EFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\places.sqlite
Size 5.0MB
SHA256 78c8ab9347132b58de6bc93d21364569718c9274f727abea908884a5733afc2f
MD5 a6838ad18e7e495829b971d20a574c31
SHA1 6844d573d90b7877d5acb4f8b8303d026ffd1a66
SHA512 80326ca98377f308c2e5ffbd5069fc2d7bf81d3adad8d7ff30cc436c2d6d51642bc9bdc2f6e8601164973dbf228092c3a54c289c792114f4de8b7668e14b7057
SSDEEP 192:M8rJQaXoMXp0VW9FxW/p8hCFUGE0gUua3ld3oZjm:M8r54w0VW3xW/p8hC+9ab
TLSH
T1DC364F1F7A215051C4EA9632EDE32F251C3F7016863637833DA4566E4DE0A23B91CCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\prefs-1.js
Size 12KB
SHA256 fa711ea472885c132e94df7d9b69c5cf3a2cc86fd9f2ebdad01b101f061a9356
MD5 6323e06e6f32ef9196709bdd3c28b32b
SHA1 028ee1cdae7bd6d43b4009e095d6249a95d565af
SHA512 0b0a93545ab131981baed0b3b6f77a6ad485921fd412f042763bc6e5fb3196d4340cd9f9549975930d03d00ece47e8d96bb04688aa24c789993b22aaabf37908
SSDEEP 96:xHs9TUMPqGq7f6L+fbzSsSSl8pdv9j9nEpwoDRdEfY2Th97mBw8OUh+KgtuX2M8C:qVCR7f6L+/SSGmLRCt3mBw8OU5gtuXCO
TLSH
T18042C178A1448B3F65B6317DAC254DB01AA10137BBBFBCD705FE4481059CF2491E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\prefs-1.js
Size 8KB
SHA256 a66a8d59865b38e4aac8a15f9ebdc19bc21bbdd78730701b17ebe918cbcf8467
MD5 b4ebfda448a8dd13f905e66e039b2254
SHA1 39d22f6dfd655ce71b5c69fecbc054c7425e5eb0
SHA512 e3834208908404eb87fd9ef6dfb70a5c3b61375870e9839780fd1b98dacda9b848c032ffd7ffbdf24e55fb9cc0af3f8a23f7062c42cee5823dcc34707be4f88d
SSDEEP 96:xHs9TUxqGq7f6L+ObzSsSSl8pdv9j9nEWRdEfYeBw88wuN8L4cnUYRaGS:qFR7f6L++SSGPRCzBw88twO
TLSH
T1AD0200785044CB7F78B6766CAC694D705AB2013B76BF68D710BA4485054CF3482FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\prefs.js
Size 6KB
SHA256 79f1a2205be6f10f1b72a2b6e4798c904d7bf7c995ee29ddebb9b6632e9a2f28
MD5 f303a36f926adced669b73d3c1cc212c
SHA1 65fe651513f008d600fa119b113000ead3e46952
SHA512 ae8ca6c2aad50c13fb839abc046d165094f89d5bb3a54cd9c37215f7564481dfed90454394475d22a5361050f74cfadc7daacc44e320dd27e80317e2eba1656a
SSDEEP 96:xHsUTUxqGq7fC6KjNnjy1zSp0MTSSl8pdv9j9nEHYfYWBw88n8L4cnU8WT:q8R7fC66eo0MTSSGyY7Bw88Ws
TLSH
T1C2E120789508CB7F74B6776CAC688831AAB2413B77BF68D710B54485054CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\prefs.js
Size 12KB
SHA256 a99a739de1983a19bf03737f1bd125fa9712c077812e62b27e16dff4c5bac955
MD5 4d268192ad1a93dc858bc7b42e658329
SHA1 31083298aec9bf24bdfa113fad4d65588de4ed1a
SHA512 9a315ddc5ee72fdc8a7e4e98c9058735424cd7d96a38c1660b808ab38b649f763e5490dda78c84ad743556cf7b3150776a6d60d9d5847abf2b950debcd0b10b3
SSDEEP 96:xHs9TUMPqGq7f6L+ObzSsSSl8pdv9j9nEpwoDRdEfY2Th97mBw88Uh+KgtuX2M8C:qVCR7f6L++SSGmLRCt3mBw88U5gtuXCO
TLSH
T17C42C078A044CB3F65B6327D6C254DB01A910127BBBFBCD705FE8482059CF2491E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\prefs.js
Size 6KB
SHA256 772b0c8ab7d3550bf4f87164a00c54836fd085dbf9a6ec6433bbdd3d90786ae1
MD5 17714a09b942cece403ea2bdc26ab306
SHA1 1913beb7a91c3c1a399a696f1774b22285c95031
SHA512 b9121247b1355097d338562777e83e552afa36b0c89b927d2094c2b753b3ba562e71dd6f977f742e4e3bf69612a8ae04ecf6153e41583530c5a6a1ed7a5316e4
SSDEEP 96:xHsUTUxqGq7fC6L+1zSsSSl8pdv9j9nEHYfYWBw88n8L4cnU8WT:q8R7fC6L+VSSG6Y7Bw88Ws
TLSH
T172E130789508CB7F74B6776CAC6888316AB2413B7BBF28D710B65485054CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\protections.sqlite
Size 64KB
SHA256 17ede89dbe62fe12796fe6eb7cb3e371dd058299c4dbc3c103210439259398a9
MD5 46af60692fb8e773e3d4b5d45ecfd6fb
SHA1 e87e10ade210f83e774d5d43e0058c3bdb63df93
SHA512 bb75958af15094d8bcef255bbebfa3e6cce6ec06f7b4b04662cee5d3efb6b548a8f9662a9bbc11e84c2fcb116c30f380e6b060e935360d481cd119ba74c464dc
SSDEEP 3:lSGBl/l/zl9l/AltllPltlzgRollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wg8:ltBl/lqN1MR4BEJYqWvLue3FMOrMZ0l
TLSH
T15453225E03383021C089137227C323922F3CD2BA93232E832A100C358C0A022B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\sessionCheckpoints.json
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 33e46ef609c602683567460bce54c493741dc946200ac37ecbcd83b1b723a838
MD5 73db9741bdd17c8057f333ac176de9ec
SHA1 d062a8b9de107adc7c7ae70fc4ce730c2503de26
SHA512 b13bce138e445e60efac52d70b5ef2a2b44f735808e9df9e27a9d791cea83755ff8539c8ab93f1682dd5b591a908b634edb1cfef85d2b8f601bd27baf7ecbdb4
TLSH
T13721C683986A2EE979B0A662E0894FE3C65D34318C78A4F080AD8D0263D940D778A52E
MD5 SHA1 SHA512 TLSH

Submit Download

upgrade.jsonlz4-20250130195129

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
Size 901B
SHA256 97fa6ad3a8de479f758121de4facb53934eb4c23c1979d7d726707abbbfb7895
MD5 d26a5a299567476ff354e3a122caf41e
SHA1 55cbb86371d2ca253ea4b6952a98f29d91c427c0
SHA512 5987f5f33cd977adcea33bd3cc81945ebbfbb203f3c947c20aa07fbe8ac91c708a1225c009f28ea55012eee1b22946e38fe8c5853ef26ee0114abe2c6ea3ed91
TLSH
T18211EB427C5C38DD62E1616FC0855FF7C586246141587450D05D5F410BF444F39DF00F
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 8ad10e8de00450af817071a02ad82bbe840178a0b57fceec97f3708e0e96ec68
MD5 d03e4cad29ae133ea63751d2ee7c2474
SHA1 f755e1f87c450448d9919248d34e3a212b825a8e
SHA512 b5cb842016a2cc81f5841b17f93dcd071a547b400060ff0678609d0f95fdba140a039886a670d635a1e352194425f0a991c02965ab3919623eed69117332a4a0
TLSH
T16221E7C37D2E2CD21295D18A95C82FEADA8790A5863CF4E0D48DAA0103C492AB29D30E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\settings\data.safe.bin
Size 152B
SHA256 fa19568e58f027aa1076f11b7181550df34a0fa0db74d60938377a4251a4ddf3
MD5 7b74dbe9ff74581b95c6e36e61c9bf5c
SHA1 2ef3c0cd0de72399161043fcd6389922077c0e59
SHA512 ce24dc97f626d865e2357c38443fe7843aae15073db4d0373764ba8a9cb50605c734a7f82cb459c37e29736e8826427283beda08fc28ec740392cf21011e9ced
TLSH
T134C0220A02020002ECA03E300008032023A080000AB0BBC320AE0E2C8C2E08EB2CA8B8
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 8767c46b4c057a1561d3dafabdbe09bd0b9fa23bf6bbd69a9f532b0f1aa08fc4
MD5 89b71d05bfcdd162dcae9b3595a7815e
SHA1 b0ba6e280827a2368129534974697a0cd4bfe0cd
SHA512 a59d578e4595fd7566785ba8711375698239f0f958c5263b146006f05c1d257fdfd6cac202df07dbca79abb90a343948e8905f07b5f05c43d15ef5ee95fd2be2
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBs:Oa16S6CKnqlizbxV+2xVeU7X2B0mKs
TLSH
T1DB23708E3F07E511C53AF0B178A08D51BC5E321E072226D669D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 93628faadab1ff9e29cf94429d2c6202b37c9fd750e0cc5c9cfb17fa2989e971
MD5 76c097bdddbe7bfe7d4e231a9886ae0c
SHA1 8b26eb30f8e5326e9a3d69e4b1587ebdec1b52b5
SHA512 b103b8cbfeeb14a040a778eec76b744954e33c0e09c520a121fcb44e33d4aa9a909c7d03ce3bf40d5eb58e3c4547c5fd6b4b1b38e39d610e78dc3f8ee4280f39
SSDEEP 49152:OSkzRVaAIoW8zN6wlxlQWlxigG+Wl8iqFwFdPUue9VxAuYziEQkqGAqCnoR4cTLx:LaiLL1nMFQplzuDns
TLSH
T156565CE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\targeting.snapshot.json
Size 3KB
SHA256 a7dbf2b67f4a152762aaa5b58d1d88b51d6e30c619a18bdaab878f6f022339d5
MD5 8892fb67a3d33391ac86d94dfa4ec9ae
SHA1 41c41b598090084a55ceb759de087ef56c3df359
SHA512 a7d6f2e41c645ecda3cc68e834966cf12b1c0a15dd7547cf58675a781c4075bc731babd024f0d54a0fab593570c9d715d573a45f57b13f42a13982000051ccda
TLSH
T1EC71710C961CA4BEA66BC3C0D6847F978FBD053370446458DAFE460C45FB5FB152611B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lqvyev6p.default-release\xulstore.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\Desktop\Old Firefox Data\lqvyev6p.default-release\gmp-widevinecdm\4.10.2934.0\LICENSE
Size 499B
SHA256 55064d7d8fecdd90ba36cebaff34f05583c183b34686b17b40b974442fc07523
MD5 d8a9bfce875f2081d41dbb18dc618b14
SHA1 5bc4e44bd455d8838fc382b5a5525aff1a117e4b
SHA512 643b0befb7244283f08188fafb2e7f96cdf82353d06ca5c0b25ad0157eabe786809677c876faf3b12888a8c3ce38e97c8090505b06c514370a16c955db3fd8ee
TLSH
T14DF09E7EBA224772459603C7011540D47B1707FAF25422D1B358C1E4276E27982FF184
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\Desktop\Old Firefox Data\lqvyev6p.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll.sig
Size 1KB
SHA256 5a63b1e7d4ae86804221e6edd021f3437f103e0aa6fa4f46f1a00524d340d0f9
MD5 c9b0f88fd890d705f0c161b89aef9266
SHA1 031c7162564994db8345a2c8a1c1d79ce18d1ee4
SHA512 06c9000559e7e5a8c3ab936121046a213a999aac5e65647a90bd761ec6a2d088fd66383f63a1f3c932acf17f24ba05fd23a902ec748d8b94f5aa9e16f3afe00a
TLSH
T10121B9DC697467952980812F4FEDD425DE3201C2BA7018BA457BA6C2BCD276134C053D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\Desktop\Old Firefox Data\lqvyev6p.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 621dc8686ed7b79e267ed65cfbbca8f8372cd6766605613c9cbfab91bb5a37cf
MD5 4dc8a20abe79144ed9d5f7221686666d
SHA1 152a2a7b6695bd9eba6c73e763a8cf43ca95890c
SHA512 4d4beda09e0f7742506a7c64c26e29cdc89edba8d9412ae0ef53a11a89d107de59f924b86f5cd4d999de55a9d3dce476f94782780e1f569177fef8e7ae738b33
TLSH
T12B21EAC13D1E2CF61594D58590C53FD5EA9AA0554A6CF8E0C859950103C497B72DD70D
MD5 SHA1 SHA512 TLSH

Submit Download

2918063365piupsah.sqlite

Path C:\Users\Admin\Desktop\Old Firefox Data\lqvyev6p.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite
Size 48KB
SHA256 0af0b9f84220259245b15f436c5313a52894822c83406278049f5d864c0b247d
MD5 9a86223d6b940abcc4cfd4b22fc45022
SHA1 4c1f501c4c5ee9ba964a64f56fd8dbe6b0995fa9
SHA512 482c7da3ac8bfb298eeb73766f1bca44c19e281431238bdf5705225b18e220577057be5b19f87dfe9282ccd8f341f39ce35f0bc416bd7eed1c9e49cf799170a3
SSDEEP 96:Oa16S6CKnqlizbxV+2xVeU7X2B0hksDc:Oa16S6CdFAWMksDc
TLSH
T11F23808E3F07A551C43AF0B1B8A08D51B85E321D07232AE57990D9E4C8F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3561288849sdhlie.sqlite-shm

Path C:\Users\Admin\Desktop\Old Firefox Data\lqvyev6p.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

uieujtLC.crl.part

Path C:\Users\Admin\Downloads\uieujtLC.crl.part
Size 993B
SHA256 a6f8f5d4ffd1e825ffce9a55861f16aa4dbe67871b1696b976194dd8be1fdf29
MD5 66690db6acf0bc08e16bca6a171dcd78
SHA1 5da0d5bd6d2a4808cf1632fa94a8278cc3f0ac0f
SHA512 08d6b113293d7333bf983d551c01de529599297134120d14aba4302408e912ee408672c9cc7f542177cc4bf50d918510d2675455c2bdda7a33c5090eab959579
TLSH
T1E611EFA8504C3413D186EF12DFDAED8ADD72779125D8664736A81A440850F905BF50A8
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1256-1698-0x000001F9C7F10000-0x000001F9C80B1000-memory.dmp

Download

memory/3756-2-0x000001A36C6A0000-0x000001A36C910000-memory.dmp

Download

memory/3756-12-0x000001A36C6A0000-0x000001A36C910000-memory.dmp

Download

memory/3756-11-0x000001A36AE80000-0x000001A36AE81000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads