6063900f2c41c5f7916eb44745a976467a86181f2a82f55a878f67d7a8814269

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/05/2026, 18:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ROTTR.exe
Size 26.3MB
Sample260501-wrsc3say21
SHA256 6063900f2c41c5f7916eb44745a976467a86181f2a82f55a878f67d7a8814269
MD5 bc8d475d56895e70cf719951c7e42122
SHA1 353d9a67a5a78c65479093f75ee6422aec572683
SHA512 08a0132c1cca270af6a6f321561566549e1b3e31a32f24aef55e24ead09c34db15d72187b38f4e0f0d8eddc3aa36106c83f778046e02d5ff0e642272ecc5a1b1
SSDEEP 393216:J2GIk4aNZBokYf2U0QcRpRSBlYyWkDCrZ5Ql1I/sVGxPY0u6tlrbRF7z:JEgPRF7
TLSH
T1A357170B7364D5B5C46E82398CC7D66AF33278501FE24BD72A98231E2FB36D41D762A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 52 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeDebugPrivilege	2324	firefox.exe
Token: SeDebugPrivilege	2324	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe
Token: SeDebugPrivilege	3576	firefox.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe

Suspicious use of SetWindowsHookEx 26 IoCs

pid	Process
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
2324	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe
3576	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 2324	2428	firefox.exe	88
PID 2428 wrote to memory of 2324	2428	firefox.exe	88
PID 2324 wrote to memory of 5892	2324	firefox.exe	89
PID 2324 wrote to memory of 5892	2324	firefox.exe	89
PID 2324 wrote to memory of 5892	2324	firefox.exe	89
PID 2324 wrote to memory of 5960	2324	firefox.exe	90
PID 2324 wrote to memory of 5960	2324	firefox.exe	90
PID 2324 wrote to memory of 5960	2324	firefox.exe	90
PID 2324 wrote to memory of 5960	2324	firefox.exe	90
PID 2324 wrote to memory of 3380	2324	firefox.exe	91
PID 2324 wrote to memory of 3380	2324	firefox.exe	91
PID 2324 wrote to memory of 3380	2324	firefox.exe	91
PID 2324 wrote to memory of 3380	2324	firefox.exe	91
PID 2324 wrote to memory of 6020	2324	firefox.exe	92
PID 2324 wrote to memory of 6020	2324	firefox.exe	92
PID 2324 wrote to memory of 6020	2324	firefox.exe	92
PID 2324 wrote to memory of 3944	2324	firefox.exe	93
PID 2324 wrote to memory of 3944	2324	firefox.exe	93
PID 2324 wrote to memory of 3944	2324	firefox.exe	93
PID 2324 wrote to memory of 3944	2324	firefox.exe	93
PID 2324 wrote to memory of 2936	2324	firefox.exe	94
PID 2324 wrote to memory of 2936	2324	firefox.exe	94
PID 2324 wrote to memory of 2936	2324	firefox.exe	94
PID 2324 wrote to memory of 2936	2324	firefox.exe	94
PID 2324 wrote to memory of 5640	2324	firefox.exe	97
PID 2324 wrote to memory of 5640	2324	firefox.exe	97
PID 2324 wrote to memory of 5640	2324	firefox.exe	97
PID 2324 wrote to memory of 5640	2324	firefox.exe	97
PID 2324 wrote to memory of 3084	2324	firefox.exe	98
PID 2324 wrote to memory of 3084	2324	firefox.exe	98
PID 2324 wrote to memory of 3084	2324	firefox.exe	98
PID 2324 wrote to memory of 3084	2324	firefox.exe	98
PID 2324 wrote to memory of 5772	2324	firefox.exe	99
PID 2324 wrote to memory of 5772	2324	firefox.exe	99
PID 2324 wrote to memory of 5772	2324	firefox.exe	99
PID 2324 wrote to memory of 5772	2324	firefox.exe	99
PID 2324 wrote to memory of 1860	2324	firefox.exe	105
PID 1860 wrote to memory of 3576	1860	firefox.exe	106
PID 1860 wrote to memory of 3576	1860	firefox.exe	106
PID 3576 wrote to memory of 4476	3576	firefox.exe	107
PID 3576 wrote to memory of 4476	3576	firefox.exe	107
PID 3576 wrote to memory of 4476	3576	firefox.exe	107
PID 3576 wrote to memory of 208	3576	firefox.exe	108
PID 3576 wrote to memory of 208	3576	firefox.exe	108
PID 3576 wrote to memory of 208	3576	firefox.exe	108
PID 3576 wrote to memory of 208	3576	firefox.exe	108
PID 3576 wrote to memory of 1244	3576	firefox.exe	110
PID 3576 wrote to memory of 1244	3576	firefox.exe	110
PID 3576 wrote to memory of 1244	3576	firefox.exe	110
PID 3576 wrote to memory of 1244	3576	firefox.exe	110
PID 3576 wrote to memory of 1960	3576	firefox.exe	111
PID 3576 wrote to memory of 1960	3576	firefox.exe	111
PID 3576 wrote to memory of 1960	3576	firefox.exe	111
PID 3576 wrote to memory of 4024	3576	firefox.exe	112
PID 3576 wrote to memory of 4024	3576	firefox.exe	112
PID 3576 wrote to memory of 4024	3576	firefox.exe	112
PID 3576 wrote to memory of 4024	3576	firefox.exe	112
PID 3576 wrote to memory of 732	3576	firefox.exe	113
PID 3576 wrote to memory of 732	3576	firefox.exe	113
PID 3576 wrote to memory of 732	3576	firefox.exe	113
PID 3576 wrote to memory of 732	3576	firefox.exe	113
PID 3576 wrote to memory of 3832	3576	firefox.exe	114
PID 3576 wrote to memory of 3832	3576	firefox.exe	114
PID 3576 wrote to memory of 3832	3576	firefox.exe	114

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\ROTTR.exe
"C:\Users\Admin\AppData\Local\Temp\ROTTR.exe"
1⤵
PID:1772

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2324
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {f7628f53-ad7d-4972-b8b8-e1dda5e3bbdf} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5892
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2472 -prefsLen 27135 -prefMapHandle 2476 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {abcc463f-fefd-4fba-8273-6411894bc01c} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:5960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3752 -prefsLen 27276 -prefMapHandle 3756 -prefMapSize 270279 -jsInitHandle 3760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3764 -initialChannelId {7b88b81e-00e6-4350-a47a-d2eb187bc808} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3948 -prefsLen 27276 -prefMapHandle 3952 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {c9e9abc2-a33c-4389-bcb8-8335caf66764} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:6020
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3104 -prefsLen 34775 -prefMapHandle 2804 -prefMapSize 270279 -jsInitHandle 2824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2632 -initialChannelId {6a963cea-f809-4978-a7da-1985d9b80dbe} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3944
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4884 -prefsLen 34905 -prefMapHandle 4888 -prefMapSize 270279 -ipcHandle 3368 -initialChannelId {387c776b-7cd2-425d-9dd4-530d2f003575} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2936
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5348 -prefsLen 32952 -prefMapHandle 5352 -prefMapSize 270279 -jsInitHandle 5356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5332 -initialChannelId {f5955fa3-f926-497a-94ef-ac5e7f5fb993} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 5520 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {e4983bf0-0664-4284-aed3-397531fa60cf} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5700 -prefsLen 32952 -prefMapHandle 5704 -prefMapSize 270279 -jsInitHandle 5708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5716 -initialChannelId {0a348288-ef64-4043-af50-1759ffcb07a5} -parentPid 2324 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2324" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1860
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:3576
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1936 -prefsLen 23514 -prefMapHandle 1940 -prefMapSize 266331 -ipcHandle 1896 -initialChannelId {7eb5c00c-2298-4102-90e9-99f35cbd80be} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        5⤵
        
        PID:4476
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2268 -prefsLen 23514 -prefMapHandle 2272 -prefMapSize 266331 -ipcHandle 2276 -initialChannelId {e19eaa4a-3c2a-485a-a354-ff859178f208} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
        5⤵
        
        PID:208
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3628 -prefsLen 29215 -prefMapHandle 3632 -prefMapSize 266331 -jsInitHandle 3636 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3644 -initialChannelId {5f31a375-51e7-475e-a1fd-79b8ca53b044} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
        5⤵
        Checks processor information in registry
        
        PID:1244
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3828 -prefsLen 30118 -prefMapHandle 3832 -prefMapSize 266331 -ipcHandle 3896 -initialChannelId {5b641bfa-c919-4f83-9a7c-82a14e6e971f} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
        5⤵
        
        PID:1960
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3632 -prefsLen 30181 -prefMapHandle 3628 -prefMapSize 266331 -jsInitHandle 4036 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4044 -initialChannelId {b954cb93-d53a-463c-beec-d288672ebb03} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
        5⤵
        Checks processor information in registry
        
        PID:4024
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4472 -prefsLen 30603 -prefMapHandle 4476 -prefMapSize 266331 -jsInitHandle 4480 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4488 -initialChannelId {656f390e-1050-4d11-adb2-bc157d4fe942} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
        5⤵
        Checks processor information in registry
        
        PID:732
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5336 -prefsLen 40556 -prefMapHandle 5340 -prefMapSize 266331 -ipcHandle 2444 -initialChannelId {80e3ebb4-e97d-4fdb-a8e3-7739c9e0e20f} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
        5⤵
        Checks processor information in registry
        
        PID:3832
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4940 -prefsLen 38713 -prefMapHandle 2584 -prefMapSize 266331 -jsInitHandle 3152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3848 -initialChannelId {230091f3-5705-406f-b774-99a40f8223f8} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
        5⤵
        Checks processor information in registry
        
        PID:5588
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 38713 -prefMapHandle 5628 -prefMapSize 266331 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5640 -initialChannelId {0e6c2859-f200-4851-9e2f-c5e27642d868} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
        5⤵
        Checks processor information in registry
        
        PID:2608
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5812 -prefsLen 38713 -prefMapHandle 5816 -prefMapSize 266331 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5828 -initialChannelId {785186b6-8cea-46c9-b6b1-eb93ecf7e936} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
        5⤵
        Checks processor information in registry
        
        PID:5672
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2700 -prefsLen 39099 -prefMapHandle 5236 -prefMapSize 266331 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5808 -initialChannelId {7d13545c-54a7-45c4-a455-3091b72a99a6} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
        5⤵
        Checks processor information in registry
        
        PID:5880
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760 -prefsLen 41738 -prefMapHandle 5756 -prefMapSize 266331 -jsInitHandle 5776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5652 -initialChannelId {c193d830-7164-45d6-83ef-d8ed960ae7b7} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
        5⤵
        Checks processor information in registry
        
        PID:2220
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6420 -prefsLen 41738 -prefMapHandle 6424 -prefMapSize 266331 -jsInitHandle 6428 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6440 -initialChannelId {fe02324f-e4f5-4e6d-8f72-b4be2c001691} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
        5⤵
        Checks processor information in registry
        
        PID:4744
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5792 -prefsLen 42827 -prefMapHandle 5656 -prefMapSize 266331 -jsInitHandle 5668 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5848 -initialChannelId {32298cd7-a3a3-4f96-af2a-cb472f003496} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
        5⤵
        Checks processor information in registry
        
        PID:3380
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3940 -prefsLen 42827 -prefMapHandle 4284 -prefMapSize 266331 -jsInitHandle 3828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3692 -initialChannelId {55dd33f5-700b-43ac-b51d-683602ae0254} -parentPid 3576 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3576" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
        5⤵
        Checks processor information in registry
        
        PID:2492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update-config.json

Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json
Size 102B
SHA256 ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda
MD5 7d1d7e1db5d8d862de24415d9ec9aca4
SHA1 f4cdc5511c299005e775dc602e611b9c67a97c78
SHA512 1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477
TLSH
T12BB012800100B658F0FC4CCC05303B3E0248402D44CF3903004D30A0787B0020A094FE
MD5 SHA1 SHA512 TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 eed9df64d22c59d299426fd47297c9c80fdd1104cd8fb2433543dbe01987e957
MD5 9111d199302285591d23e7f0748c6c97
SHA1 bcac81d80cecc2ba3d7366f64a298a9e4b35c0dd
SHA512 bf6b16741cd349fb99d41bec4036591ba212a904c128bdffd6f2c323fa6aca9f78c3550ce5a74cf5856d2c5a8f5b05e008c6c078206af72ca9d6b63e77adf073
SSDEEP 384:HHMO0iO024YjFuhw+5EL1pPsac4j0lpDII+hlNlc:nrZYjFuK+5EB9sac4ID8LA
TLSH
T1C3528E7DAF0139BE1A27D284DDA95219CE04E6BBEFE2D05606443C44C680778B8FA4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jcjS+4KYac8lrOPZ3TPPROock3lykTxc8IcdbAU8VlM=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\jumpListCache\jcjS+4KYac8lrOPZ3TPPROock3lykTxc8IcdbAU8VlM=.ico
Size 673B
SHA256 f4fcd3d71407c509ec89aec78bb3dcf6dd6ee700632e3823b5e72c2e52c5f763
MD5 cf93ebceedbb668bb1196ea4eb0b9428
SHA1 026747941e1eb0d99eb24fdca7bd9a12833f4277
SHA512 726d6427b48399651e2d02b0b06e2808a471fcbb27bc1c43da346fd36ec58d948eec2b4dd0f5e26fc5c51352f40b570585b23b5a416b4e62002ee0d28c63e043
TLSH
T16B0183FF414D1A13C454526B4360F2411D38406B059BE74882C94B9F3E10AA824CDA72
MD5 SHA1 SHA512 TLSH

Submit Download

asrouter.ftl

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Size 15KB
SHA256 7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
MD5 96c542dec016d9ec1ecc4dddfcbaac66
SHA1 6199f7648bb744efa58acf7b96fee85d938389e4
SHA512 cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
SSDEEP 192:63/CCBmqCIKJumwOGmnOq6b4b9C4GoTlbo2ofF9/cFnSPhxtj3tCiwwau13151iS:OuPngEG1xNUIzFnieWrc
TLSH
T1D162E8CEF48193585D6F920AEDC5B391FB27008C56693C6671AF608873B9529C03EBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4aa7f80ff514156cb9820739f87a8560.png

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\thumbnails\4aa7f80ff514156cb9820739f87a8560.png
Size 42KB
SHA256 5e268d783e24462e6e63beff0dc27cb4663b364bb3443daae70cfd525024751d
MD5 4615bf0cbba1c5f89377a160c1757a41
SHA1 c495a7831c9991c5890a453e5e0486895155225d
SHA512 8002e14334eb0a2f3457b10e74e262a3631cdd83b5495dddd7f3d81fff1fcd0ff4d8e8167244f2fab5d1f738f0659f2f626289eeecd266bf6c6f1e377e740604
SSDEEP 768:PBM2tmjKzDFm1p4l4Wwzo/zXTGl0jHt1E9cQWH/Wlsi8wMWaxWHJHb3:PBM2gjqD41p4l4aj+S89WfWii8vWbp3
TLSH
T1AA13F1352D2F0E111659668C02E7E896A1E39B50E20BC55BF173FB9A8ACD41CC222FD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\activity-stream.contile.json
Size 4KB
SHA256 7862ffef9899bbeb31eee99bae81aba6005bc2a3fa5397b256b62d08da86dd0b
MD5 cf8462066a5512becc36870e1c77e538
SHA1 02ad5c0cd673ce9f0d2750227d3a90803b62715b
SHA512 cc1832f2cfd97134bcb013746c823a15e0ef83b411fbc0edaf61d5358719d76885892916e0b288f7cbff0b7c568156e2e004cb7ed913e1df3406eba02d954425
SSDEEP 96:FoTHmrtR3tOKqL3lvDvaMi1HKYlpQzcBjn86D8CBl:WGrtR3t9qL3lbSMi11az9w8CBl
TLSH
T1D3A109EB8DB4C9872673ADF46D5F3269F10370A7CBC6CC86FB868C17D1B212601A9944
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 28ab9b8b9ee4c5d924f4a29f743e25e6dc70f37c1b1582ebb0f6373c28a59132
MD5 def25914640ca3c937048edc74e7d704
SHA1 5a7453a988852a65fce4bae7d0d4aa43f4612faa
SHA512 114a604cbb26a8710a9327d638949cdf852c929c88e148783a7dede5f450426bfe90b4d52fcd6f4bf08c1a59e40f1a257ee88be3d4f53e403b8927eda3dd6fb4
SSDEEP 768:fylw8uvhPrWanvaWEffqrEp1CLgHqahtjA60OM70nxLFZ1r7vV:6lshPaKvae4GEqa3jzs70nxL71r7vV
TLSH
T1117319A3A6A9B2FB1B8127C72C0F795B52E24155E78901C9ECEDCE1C80DD694113B6BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

0BF5BD8B5792A66EC613C0B4503BB167C5A660F0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\0BF5BD8B5792A66EC613C0B4503BB167C5A660F0
Size 9KB
SHA256 215ddd00f2e1cd945e3ffe57b358d2988fba64820a7c2bd935aada8e4dc5c101
MD5 3364fa6f1249055ae461cd7601625565
SHA1 1c1e69354ace506826817d869958d9d4c2b0a5ac
SHA512 8726824e8f437e7753052a0a80b3db6decadab45562614300d683e66b6f415700da8e1e6ec5a9d3da924adcadc1f17d7713c1f7ab7106f7a2d142b4c36175401
SSDEEP 192:V/y8ysK1cURPAe8E+q8sPU9PsALkhbgHpPueig7AaX6b4qx1e0lpBNDIIjBkkhZL:VyaFE+AxAbJ2ePsac4j0lpDIIjRVb
TLSH
T16E226DF89E01207A4EA2985B9D5FE3C14D64B223AFC1CBED499439048CC66F8F6B15D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 13KB
SHA256 f0390ea6d5834a0e979d134733b140110b2b388ee7d0a1b37fb965ca86b505a4
MD5 e62ceb7bf8c9f049b8038bab366ef3b8
SHA1 8182753dd413ce640edfaa08f5fab72d987397f5
SHA512 a1b86542c75d706cf812738ecbdf8748a80cf48678b93b2497b1dd3de05b102cc7b49a38d50e6d050d9cf9efb59bac45f9e8c87b4d1b5fb31bf6086750a29149
SSDEEP 384:PhBrlPNuE+AxAbJ2ePsac4j0lpDIIbwC9p:6exAtsac4ID86v
TLSH
T17B529DF7CF71A08F0B63C8F6AD6E22C59D057167AFCAC59E9A813801C0917A9E1F54C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98FDC406B52DFF91AF48652B4ABB147FEB91B60D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\98FDC406B52DFF91AF48652B4ABB147FEB91B60D
Size 13KB
SHA256 2a95ef1d231e941c58e2618129b5fa98fa73d093921b0cfd8a2f638c21956923
MD5 e60044aa64e1c1ca951c073257e9291f
SHA1 b748cf523bab78e2dd19f7285c9ea24d249d1570
SHA512 da067b16784002cb7b16307203aac6fba027c18a8b2873c6fcc83e40e229d6a88378b34fba042caa9818a32d5d1db1f115745c4e8520f148be4152a2bc554423
SSDEEP 384:HSvhbciO024YfFuhw+5EL1pPsac4j0lpDII+te5CSe64:yphZYfFuK+5EB9sac4ID8Ltyi
TLSH
T185527E7E9F0138BE1A67D194DDAA5208CE04DABBEED2D05605443C45CA807B9B8F64DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 9KB
SHA256 21f690e486d1da0423f5642afcacb5dd9663411defbb05e7ef0f547a64b457ef
MD5 f720db1e3c17ed0cfb55123a9cc00d30
SHA1 7fc12db880c5bba3e651c19929c0c1377c073115
SHA512 12f5ed9c3baf60a8f3a93dc7566319192098964882b380670ef5fee2e0de37cedd3af89f6c978dbc9c225ba418994bf841a0b8e23e1a19ea8fee9698a85b1159
SSDEEP 192:8spDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLIPdOkk4HSPdOkk4HR:8oDZAR9eYa9EHDEclrIVy8eLIlrHSlrx
TLSH
T16D225CB2AF50591E2EF2E1539DEC41691C52F723EFD7E1EF1908250896C0B69E4F92C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 243KB
SHA256 2be8d152b4efbc8f7068cb2d732dac3c486ff8093ed0a5ff4db5169913304dc0
MD5 1a98445b403d3f13384139d7571d5e99
SHA1 5a1536d6394a0754d2685eebfa5d2daffa0c4a8a
SHA512 fdfb55d004e24f0ef3d690cb438ebf0c48edf48a9d958a4ad1772013c660e5ebf29343ce7d2b1e3004998c2e4c95faaa85102dcfe2bdbfdbe5e6bbb388f870c6
SSDEEP 3072:bXmlPLDrzaOeJlcb+/PPIzwwM2Jj8Rq9/JF1xMRc:jmtecSP3lcjp/X1x7
TLSH
T1843407F3D6AC70FB075246DC6C1D72CB62AF8276DB4208DAFC6C8148D3C9A651076B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DE5F6CB1BD71958EB146CDD974763A3115937269

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\DE5F6CB1BD71958EB146CDD974763A3115937269
Size 10KB
SHA256 2f5098f39fe97f4b4a02ace97814fcca755efd7e645788a7d13acd304165a618
MD5 c821e21993d1a44bd13be2e30300c244
SHA1 05bbe20a530bb80f38437d6de17441e6a8920493
SHA512 ff7ba8c4313994bb02af8f738f6de9677dd9064e1983e5e4f7f5f6fda9ad6dcaba61e09b240491758903402455eeef8a34e8fd472f68710c543970b84aabbbad
SSDEEP 192:5bnzDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCCAvkd+kkplAvkd+kkpb:5bzDZAR9eYa9EHDEclrIVy8eCAvUIlAl
TLSH
T108227DB29F40291E2EF2F15398EC41661C52FB33EED2E1EE1508214996C5BA9F4F91C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 9KB
SHA256 d30f91d32805d4ac444de8a2849f60bbcb763911863cb79fa045f45b8a8d1d91
MD5 6bfc984dd8d32d88a7f8a64b7f684d61
SHA1 63d5104739aa560d110a4d2ba8cf727982acb655
SHA512 59a82d62b4c24995d5a1d68dcc94af75fe4cead82f7ab96379981b5e5901830db7e4681ee83aac7dde4cbb253aee8b82144956f22048069fc7f18e3c25e9a574
SSDEEP 192:ttwtDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCTwds3vFhKkYdsi:bqDZAR9eYa9EHDEclrIVy8eTos3NhUsi
TLSH
T1B4227DB6AF506C1D2EF2E1578DE946151D51EB13EED6E2EE150C310886C0BA8F8EA5C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ED7DBE9772D86F5623F1A3B8D2FB406E0DA7E8D4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\ED7DBE9772D86F5623F1A3B8D2FB406E0DA7E8D4
Size 98KB
SHA256 77f3d376f59468b4d3289d84ad625e686ccae8b4f61d717dc764636fae43572c
MD5 b67123156a7213eb16abc981a714f2c2
SHA1 5eaf1ef4bc6ecbc02a56d123310d2a998c1b50b5
SHA512 19d9879dd30d21f9c3273bbe6ba8a2bf3ecc81137c6b04f326ffc825184825e58f343306ad73620b9bcda4d28f69984ed8172acdd04ee3b093fe629edd3fffd5
SSDEEP 1536:/nKHyP2RCB7FM3pi806HmY5+TqY61I5AxL6E5CBmek4IoUk:/8yPP76DNGY5y0I5A0E5CtRIoUk
TLSH
T126A34A379A991A7B079373C82C0F7C9B0FAB4583EFE8C695958DCE0980D3C58513E666
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 813ad1c993171d28e0d6c516181bc2d225390252bea9aac76b50ce74235d0760
MD5 aa66dadb8a4cf0af080d44eacb5b776f
SHA1 aebb57d10cb33b5f420dd75a45804e7f943024d4
SHA512 f46aa7c25b4c0444d71e078b75854642f056ca5c7853c55b90027ec0c5d25fd7b28717ad60c8e2229c0dbe59c91749e7c7dcf306b7c2d55a8431e0d3deaee945
SSDEEP 384:HHMO0iO024YGFuhw+5EL1pPsac4j0lpDII+hl/lD:nrZYGFuK+5EB9sac4ID8LV
TLSH
T1AF528E7D6F1139BE1A27D284DCE99215CE04E6BBEFD2D06606443C45C680778B8FA4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F6DB2CC802065A948266A380F89F5EB80BB1A349

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\cache2\entries\F6DB2CC802065A948266A380F89F5EB80BB1A349
Size 9KB
SHA256 46d62c6496f8c5e82be0d209fd67e1a2eab0a347827a795ac6560430dd3bba86
MD5 aa1ed98e89de53a5764e68676778087d
SHA1 777a5e78ab4f0afd086ac68e2e8e79bfd8bb7783
SHA512 5e701f0279a186035d946b0fc29d8ddfcf6b9d21c3bd6a2b36c2834b61a939921a40fa460a40347fe495fb28329cbf1e234460dbc62f65381f57fa42a1d71500
SSDEEP 192:LfOMDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCCneKd+kkGKneKd+kkGj:Lf3DZAR9eYa9EHDEclrIVy8eCneGLKnL
TLSH
T1B8125BB69F40195E1EF2F1638DEC01261C51E723EEE6A1EE1648260897C1BA9E8FD5C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\startupCache\scriptCache-child.bin
Size 595KB
SHA256 d5f43f8c48902a8221c7c270349e8d48dd666f907dff1ca570df4b8ed84fbb7f
MD5 df177e2b2c1affd89df2e437d91acdc3
SHA1 7f9b9821c2b19f08dff4a064afc7c97734b04926
SHA512 91d6dfd286a10d1129ebb2163beaa16d03450e902d40e2ed5daeb15f659f293206bbe3625fc390fe57d44ecd04284e74e6260de19c889aa1f6243ec658e11c9c
SSDEEP 6144:5FCUbu1hjktpJn2pmYXHqjOcpEavSW2pshURAv:37ubotPnpvfh4JW
TLSH
T1FED47111EFA64E23C418037A48F753313A30E1451BEAE3176F8F7629BC677A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 ea9488ca5e2237ccb5338eb8f1d78b798cbd33583ba9fd7b423f410643caa6ed
MD5 6552383949a8d638ca79b02b66fa9bb4
SHA1 1d9f49391ca4d5c38167097c93bb908ae825380b
SHA512 e0bcbadf673e156854908e0dd455d6e007de51feb2504da3a122a629ccda4b20b52bc5e25dbbb48f018f110f2626a25e0a8ebb1968856a0254452ebec2c031cd
SSDEEP 49152:OkVvxHNHhFDzwH6f8sbM5v038zYPHpJFVFwjdhCXfJDj/3UbSm:/v1F/wafh5PnRmSRs
TLSH
T1FEB68215EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\startupCache\startupCache.8.little
Size 8.3MB
SHA256 15333fccd8b0344f3ba0d9b273e2d8998f7297f4b6987da8a041d37156c5221e
MD5 8c2116c4066636e86a8e6fba278ee503
SHA1 c3b9b0aaac3c9840c09ef4350b5984d2a10f945e
SHA512 a95e28ea36dbd2306c750b1e57905d52cd85c0db07a4d976ea4d0c4f1cd69e8130da0a0594f994ab0fb4eb8ab6de9b91c0ff576baa2d65b9f62015592a7c352e
SSDEEP 98304:gr328iOheeNd1eqN3DBznii6lwJ3YTng4VUKFGHSOR:gJiPk53VmiuwdYG1FR
TLSH
T1949602B7B3590697C425191AE87A0A393763414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 109c548a3fe79e3833b77a71ba498e16758329a2d6558e71d2f3d793cca776b7
MD5 e33ceabede4181c9b9d889cc5d137764
SHA1 7048b14986ac7791764fe1854f3483da7c64c121
SHA512 972c70bff28512df3f8c9254c1066d2d8fac3b48166ad0d7b28ef47aa6ac72899c944d32517de1f2fad15854fcf732179059ccd177d0fa7fb2a72ba9c472b22c
TLSH
T1EA61B392E43F603B7D62A8FB6D95C175B42109CED1CD20DDBA96639420AE7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\uqk3a6df.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 eb04b1043ddb6571d517a6bade3882371ecd28b98805db2ef0626fde303a77b3
MD5 5f862cc155a0df4636d294b7d4d5024a
SHA1 f3ee6fa82b222368e739d4673e76557417d50b90
SHA512 66c3fbfe0172b6a11d11838c425500c29a28cb75129418de3ecf75bf8aa7e39a6b0732d3327cf5626febc431c84a88b4d9242f24bed1ad0a60ae009369ba564a
SSDEEP 1536:jTrliA1S+D2oaabbz8ZV1604eXBclqPGq+SixTPb5IQIeKUeTTTKc9hHL9wlPLC:j3lc+bztzgBclWGaMWCKUKzWC
TLSH
T1CCB3AFF6DFA28D7998FFD41D9A82C83EFD263000B3A72009D953375591C6BB86779608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 394KB
SHA256 56a673c8f97ee11f4df10dd9dc7c5309643fec8a6901411f56f69c2769777bb5
MD5 7ae518030571a03e6537c3971ebabc63
SHA1 c5c1961585208ae76e69a700b289eb8eaeb9774d
SHA512 db6b92e11041f03f3478457bf59b55cc52a4082797651de389016c84230f073224bd3dfd0e499c92c73a1e74fa09861ab806d74a6337fe467cef9bde71a9ef33
SSDEEP 12288:SGR9tMQq0yQb8JRg1XaFjL0r7eLpAw56n7C:Sc9tXPyQIR24IrSZ56m
TLSH
T1458412F9F3A038D3277E420BAD657E9E57628D12C78E90DC983B778104BBB295F99104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\AlternateServices.bin
Size 11KB
SHA256 85a705fc1d7e3134092bd25342d26e6d661137d0128fb1b33a9fc28eee932587
MD5 8a7ba247639f0801bc5850199b78dca2
SHA1 c36899ef6b0ceb53e75aee49ed0c14013edb821b
SHA512 2752d008571424e71f995870199abd20d03f4cecab9c16b8059eaf86340ccfc5a08b12ecbce6eafc686e394d833c9d9e5f6d3d7fe20bb82b23ef325a9c18e00a
SSDEEP 24:luhMZc91ZU4n9Bn99xx/+lzq5q9F55A5FI9VvCA9laaq9Vb:2HU49B3b/4YI56FCBCKgdh
TLSH
T15C3296F32BB2A566F4928FB0845DB25C8C330726156C91C4C65494E74AD2FA9E13FBBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\AlternateServices.bin
Size 15KB
SHA256 91ea07a1e8184d248c9e72c315012476f7ca2eab19387b5722cc306a9376e3fe
MD5 f8a694a9252cf34868879dea65bf7bfd
SHA1 38f97580339ccbc8976205ff2a4cbca9b94d24a3
SHA512 78cf24908a5bb60607379af79a826a08a7cba299fb3d55d346ed55f1fbfbd4601efad8687c6c5257401832bd21586f8ca69257abfc9fe8a75b93fc3d7e303d27
SSDEEP 48:pyKSMXsC4QI5650XB80jC0lY0l4z8jAe6JWoc:pyKSMXsC4QI5650XB80jC0lY0Ae6JW
TLSH
T1E262A5F72BB2A566F0928FB0405CB65D8C37032655AC91C0CA55D8E706E2BA4E13FB78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 7e530d7b9447d9356f1c0de56685da79421f7d505ecd21133603bd04141ae2af
MD5 12001d67b8cb945eff43688dbc12d30a
SHA1 24840c80e344cf039fb08d2d2620b7fcecdebe1b
SHA512 3cd6689f8fc1d65a1ce0ba6ce7fa0f8ebae6ac36d87dbd60429e7e4886c700068e658b1bcb4c44ac73533f5b3b8568a39ea9715344a4be941e9b00ab806d8a48
SSDEEP 96:HBwSdF95/7bkW60rvEc+4yUR6HlWZOFVFvFW9/dd66JozGzgClKtmc0d/UK:6Ov5zbowMR4yjsf91d66JozGzgCl6mcM
TLSH
T1A7C10E29E629463BC448023BDCB61B400F72395AD84E3F2931AC741D2D5B2CE7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 626d60697f463b7957410517279a42e8286b333bfd83c7f4c928a1679f23f265
MD5 3295f28aeb2c31e59cff6c9abe7e153e
SHA1 74a99ebdc4b3575f8b8a53fcf4c3b0b24758232a
SHA512 a932c1ec1e31d0e49822306fa112551ae2954d631d02036a584fde41665f735a784b17c9e2c7c2d5d3439621de8c90888f55a94fa5bf94bcff9f2ff3dafe01d0
SSDEEP 96:OFVFvFW9/dd66JozGzgClKtmc0d/U4BwSdF95/7bkW6I3r6Ec+4yUR6HlWI:991d66JozGzgCl6mc0daOv5zbokZR4yP
TLSH
T1DEC10128E629863BC458023BDDB61B400F76395AD84E3F2931AC745D2D572CE7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 de4338f41fd6c5fadd0ddc06e0d8116932515d09130efe031e9f2227fa7b3257
MD5 5b87035700d96ea5bba54d39dbcfbf49
SHA1 88d2a64535b7933b1335b789445e7fdd77a92b88
SHA512 1c28c3d9bd42488d2cfe6e5bd1b13958b27dd8ddad6cb8c3193a0622cbee637bbb73392455606f79ee48b5e0a12cfaff516d2df76fd76c165408f969d32c02c8
SSDEEP 192:0Ov5zboPTR4yjp3PD91d66JozGzgCl6mc0dz:Xbo7R4yjxLbd66JozGzgC1jd
TLSH
T144E15264E628863BC408027BDCA61B400F76389ADC4E3F1935ACB45C2D572DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\events\events
Size 5KB
SHA256 7f7e681533271083e46d3865a9cd471f4943b496c4077cc8ed445399fabe285a
MD5 eba2354b2b6a635ac2ee4ec9b8d199e6
SHA1 a5407f2490da2985e059b92755bfcc67b7a21734
SHA512 bceba3072369d293fff4f17328e809e441b77de3a18da8b0949e7b1364a5a41c3b29fd343ead072e0538069194b3662f710725690a848837168e6011a74912a8
SSDEEP 48:YMH1BfCBq7rg1cx7j3H6y4ne4W42WAYZJV2iD+EAZZHu7Y43aNA0hDDei/LoTVTI:pROgEA0+/DoVTiCqWkz4wD7G+N
TLSH
T15CB1CD1D75BA0C7A5DEBE39DB848078E57994B0385C61D834CD7CE0D8C9E69A321F538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\events\events
Size 2KB
SHA256 f26f020bc5dcf8cb73919bd5e16f495688be2541896f83108528e6c4e1c49135
MD5 235f2d92f4fca503ddb4a13893cdd756
SHA1 040419507dcc737acd2155921260f543cc2b1bfe
SHA512 b587cd9714bbff56458271f54a52922ab1120b5392e0bc2b110c66f00807a6b262ac403327409ec74efd274b33818db3cfa292d03dfc06bb201a810808357768
TLSH
T15641664D78BE4C2A9CDBE75CA988038A53948B5706861D834D83DE4DCCDE6DE325B138
MD5 SHA1 SHA512 TLSH

Submit Download

bfa78d3e-e6ac-4078-bf98-d53f78872706

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\pending_pings\bfa78d3e-e6ac-4078-bf98-d53f78872706
Size 235B
SHA256 7bf91dfeaaf1a4c0d06a73214cfd15938216977fdda89e030ddffcff3e4835f2
MD5 925b76ce171cba570c36a108f977b26d
SHA1 994b05ddc6cd07bbfb887b9cfc360a1fa7a734e3
SHA512 1045afa177115f050b5cc4b4c1eab7bedf763910d9eeaee2dcb9d8093c2766f209a2bd0268decd313e873e92f267a17b0ad2ba10cf62a6283af8098931472710
TLSH
T110D095816484B71C04340F13B0B065C6325DCC3354615810C95148348DFD9C80251517
MD5 SHA1 SHA512 TLSH

Submit Download

f32f4e26-ee40-4112-a5fd-aaa7b2f7db64

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\datareporting\glean\pending_pings\f32f4e26-ee40-4112-a5fd-aaa7b2f7db64
Size 796B
SHA256 ab2c445aee732b495715e503f9716e6d2364a21a47e0217ba31009b21ff231ab
MD5 8bb03900bcbb0681e0006f5b162c4d23
SHA1 b0728c50c22256d2ea368aa50b24a708e6480deb
SHA512 a517d39a159f797dd93ac8c9f63a9ae481d3a85e5ee7e92b702f324e02d4aaa681d898e07519f372d88573191f191339f4877c2b411b2d75e0ad8eabc54a4f35
TLSH
T15501F6539724B5738C78A20AD6613F804FE4642380D6491C7D34D70D4D5712E775E207
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\extensions.json
Size 14KB
SHA256 c5ff9506c77f51b72d75a30e4646f0da3a5620d1be9e46218c9464dd67cfecad
MD5 5408ec3fa8b09f398aaa12ca828c62fb
SHA1 77d3407bef2955c0c7083bfdd49e2d7f6b9db8f9
SHA512 189aacbaabbf04f5de1cb2fdc1442d2f980dfb4be0a0a235334c95e95f553ccbd287122e1eb420bf1d1ec5038abcc83a9ab7846a604d04ea2dbbdd60d1934071
SSDEEP 384:YkI4vjUmldvV8dhWs94zgq96oAL4HDL4PHL4H2L4HAL4HC:PI4bRfmX140O6R4P4D4c4C4i
TLSH
T15C62431545148EB8298F979AAA36BE02C37D473B60445C78F4DD8FC842FB5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\prefs-1.js
Size 6KB
SHA256 796fdf3dec59e6872b97fd25c29ed0feb54ae9f8486c5cb6c9b926c25c2f41cd
MD5 3e8cb79df97f000d4e4362681933e6bd
SHA1 6ce9db11fbd7f2d09765f8876c7a5a89ccd80cc3
SHA512 008422897223c028bd2c12291720d504a7e21eaa6b61303452230ca2fce8bb4b5a7561ec5b1c0b25f68545108fc448cb3e5e260101e65ada513196b79b87df80
SSDEEP 96:xH6OUEmqGqJfi1zvz4zSgSHlWdv9jGn3zH7nIqrZFBw8H9cnLmdGS:8OpRJfimSHFLXNFBw8Hx
TLSH
T1B9D13F7855088F7F78B6776CAC684871AAB2013BBBBF68D750B54484015CF3841FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\prefs-1.js
Size 6KB
SHA256 d932bf75fedd3af8e33752a6fb9b6c5fc997585f43947206cbb1c5f4ce009f3b
MD5 8cf8a6ccd89486fad721339574d91843
SHA1 8f16977ebc4153c4e6adc1e040369f1877f88d78
SHA512 f357bac9282d59f0d65a0d5bf8116f8c87a6a80580235e847c01948bffc61ca8a541a6634b22927d589a5ddf11271a72d0d0a565c74921651043356cc51f0534
SSDEEP 96:xH6OUzqGqJfQzvz4zS5SHlWdv9jwn3zH7nIqrZFBw8H9cnLmg:8O/RJfOSHXLXNFBw8Hy
TLSH
T135D13F7855048F7F78B6776CBC684871AAB2013B7BBF68C750A58484055CF3882FA6E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\prefs-1.js
Size 7KB
SHA256 395c56519f525183a32467c8e5baebf26633e3014722a31ce60774e2aae48ee1
MD5 ba8e01a1245c4f7b0037980b5a56bbcc
SHA1 1185069e3f50cf99853258c12f814dccdde5d27c
SHA512 963fc07acd085f6263a1a9b960bcc1e85e4ddf62c5921d87e59c17a3f60786ec8af4a89da37e048905d1cf90d6d08b3b349a8ddf2f56aa3879e4c8ef8de60bd4
SSDEEP 96:xH6ONEmqGqJfvM+Nbzvz4zSgSHlWdv9jGn3zH7nIqrZsBw8HnIAIcnX2mdGS:8OoRJfvM+KSHFLXNsBw8HJT
TLSH
T194F1FD7855048F7F68F2367CAC2849725AB2013BBBBF68D750B94885055CF3841FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\prefs.js
Size 6KB
SHA256 cee457db591003ca7e921c71a9fba2017287c5cbd7a85f10047bdf3f4a271402
MD5 a9c1d9492ec9319b5b79f24a1adedb84
SHA1 5da0fd34e29b82a42491d44cc2497c2058d6ba5f
SHA512 b438651cf6035bcf66b3bde767d50b1b9a212c5026dbfbebf5db701745620d64ec114dc982796ee1695df8ecc2f604671d4ff9f6d848d09f5fb5de09fc8145a5
SSDEEP 96:xH6OUEmqGqJfvM+Nbzvz4zSgSHlWdv9jGn3zH7nIqrZFBw8H9cnLmdGS:8OpRJfvM+KSHFLXNFBw8Hx
TLSH
T1F9E13F7891088F7F79B6766CAC684871AAB2013B7BBF68C710B544C4015CF3841FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\prefs.js
Size 625B
SHA256 dcee9dfa0ccbb1b03369eab7c2b23c5d3e702e1403cc7e34008c07bfd1a48a0f
MD5 acfa6efe3dd3145e58affd35679a161d
SHA1 a63742ee0eceaecc1544d4bc46edea9ac1dc789f
SHA512 9019607847f7c82c74d3edf3e8bd1d73f78c8384949996dc799b3fb87e456a30e54533be94de65c0d8da19e941385d1fb675bed5d6a9589f7a186752b963fb13
TLSH
T199F07DEAAB4457BA5BE22414589D43D3AA6B417ABDEF4841323CC0880101F7841EE8DB
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionCheckpoints.json.tmp
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

previous.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionstore-backups\previous.jsonlz4
Size 278B
SHA256 6b02fcab6ff02d2fb23e59412ebe16ff9977d5f061233ee67ba6c1f4ac8e75fa
MD5 393b1319948c88276486df8fde5ce295
SHA1 1a1ddf9274846924d5dae3285e8c7b51cc116229
SHA512 fa3063b641b32992b15fd31ad4d600f75b86187c665eb8e6e3007159740e9df7f7ff6a64ca5721fb91029250ca0a6c2d8c256f7b95e245603c6a68cf55462a8c
TLSH
T13CD02B5319178FF7B828F94948BAFAC9C327B21D2DE63CD0D51604563EC9A16A28A068
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionstore-backups\recovery.baklz4
Size 678B
SHA256 73b10560faeb1c1742dd6022c7d12ddb8df7b97390f15fcfd9ccbf0e361a2d3d
MD5 fb1d7f245a3e6eea5890911e6399e338
SHA1 f5e24a20434631d2aa77f8b1973524e530b570ff
SHA512 d37ee7dcaa4cde74a5d2c3d0f863838a5648c14cf3748e7773d1dae80e20126faa940ff705d93ad7cec37ff3e6cfc9fd240b443f73ee8ef1f810908241258c3f
TLSH
T1A801830955CE78F02AE4F04B809C6BAA9B0C7516C87D78C1FD8E57000BF428A678B6CD
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionstore-backups\recovery.baklz4
Size 5KB
SHA256 766576da3e4bf3973b63612d6fcc57ecd490b0d60d88a8c64d41bb6fb475b63a
MD5 3c73f2349b06a777f31f2ae2ff745ae6
SHA1 7411cae3559ebfcbc5b45359501c7c656a068814
SHA512 b6f0cf470007b0f9f1e5e94efead4a06844209ff3b5207cd39a8a213a99e7cb7c1a2278a2bb0f343d624be2c2f6b41cd47dc03ffa6d476bf26f81f8a8c53206a
SSDEEP 96:AebEjjyuCc9Vy9HsyWo6Bn65JC+SXu6poj5teC5Sw/RcL/7:XbEjmRc9wpY56a+SXuTj15v/u7
TLSH
T1C6B19F47B371EBF6A7B2904CC0AA0A6F0694906781AC63CCC92CAD774553F60516E366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionstore-backups\recovery.baklz4
Size 5KB
SHA256 3e7f3a4b7ffb5762e92adbb2cd231ae93bb45a6a9b3bcd203dc67cf92e2a7433
MD5 cef77ea1f5d64c7f05c78a3a3988f190
SHA1 d4635f2f2e9d3cc695f41dcce847ff82cdbd44ac
SHA512 a8eecdcd0c587d8c66d0d67be74adc8c5ab61fc0c8dce0d403907fddcc2cb4d46a2e6d9c3f0a0b22ea4225db7f27c8ef4e317930f60100e120e937efa9b40126
SSDEEP 96:oebEjjyuCc9Vy9HsyWo6Bn65J9b3Ki5EeOj5WbUfujy39FL//l:/bEjmRc9wpY56Vb33+dfuWbHl
TLSH
T140C19F03B391DF966773D04CC99E1B6E1698587B40AC52CCD93CF9774512FB0912D29A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\sessionstore-backups\recovery.baklz4
Size 465B
SHA256 4b698d5d5c6753f6c2163e5ec1a3ca4567bd4b6930a67e5bb09b1d505abd9603
MD5 521bb6cffc7eb5a0b8e8e1f7018411b4
SHA1 e087f5a938b37d5e1443235f146dc15bdfa38774
SHA512 0a6eb95184c8933c41f15901dbfcc4c84f2c5982af157ea2987542145b5437bc8cbadb6273f2dcbacf205b91e7f3cfdb35d4393fa4680e2489973a64c64c9304
TLSH
T119F05C081A8AB0F46F90E28BC1120B33CF993020C01D2880F9AC2E8187B23CF688B182
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.0MB
SHA256 d187a9605b0f91f748842c6c5b59db271020f5f68d45e0354f0089ff4f2ae5cc
MD5 05db15dc4bd6357daef0178577af6d12
SHA1 ae5d5b0fbd78ddd82f4d7f79aec5c9e67c2834a0
SHA512 f40504fcb5548b3827d6eac2e2ed01854dbb866070a3817a83f894d129c8493ccac4cabc85f9a5f0414688a8aa607867dd72bde6ea5dd5b0db946bf787ac1156
SSDEEP 24576:i1V8INVCVzwewY0tVod2O/F4jAhGAJtYJaGE7+0pM+dGBHDD:i1OIz+wxYJ2gyjAhGAJtYJaGE7+kGh
TLSH
T1BF1639F824D1A257F3804037668563EB21AFD00C6477DD484BE966F994B8CEF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\m941t55y.default-release-1777659026255\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 392KB
SHA256 745a2c93725108963b1735be35386f4c9de7c0fdab66453c941b947a51457b8a
MD5 b54148960d656015cfd75eb0408eb1d6
SHA1 36c6a1ba6b529aebd63110daa1c3b98ec21bcbb4
SHA512 aee589582724c3ea910b53d21de8a7572d1746a9e21c340ea458398f8f46b90957724b4b972e3ac5cc08b65987d21465c22d058361146dbde645e868db297764
SSDEEP 6144:nMeHlcHk22303s4S12tb5tR1OyZ+zap667V:n3Zs7
TLSH
T15484E8B53064C153C322D8379B4DB3B7243FE29894E7E78893702748396EA1FAAD9355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\AlternateServices.bin
Size 3KB
SHA256 1aba3adcd886092eb555dec4c1f98444abf1657dbffa8de7262b37b4b19a92f4
MD5 887a8e9730788806c7ed9a0ef5933ad1
SHA1 2fde3f1a5c546214034571cd8d9c317773e81dea
SHA512 62d6a4104d10dfd054ca3d0ab880fe841d886c23a7e442af9e2579b8057303c04a21059ee000e9d69a253547e48dc6320dd5ba974791f124ad76ab368282f7ab
TLSH
T140818CBB92730030E0444BB8BC2AB1054E2753CA56F990891BB0A0621DD2DADE0EE060
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 ae55229c4ae8faabb30a0fec8b75163e1683827cc70fe70654b7dd399bbe96d0
MD5 435922c14aff5c087c0fd0f7126a59e7
SHA1 edf9a86f09139f1853e0920a5fbd4a17d0b65413
SHA512 851ee16f12df2c9f5456fc6f32e7a8b988dbe18d32612f88b00d9da785457d3961621805afb2ce30b53d961c3a644e296fb57d4c4cb8c49f36b5c10534f99bd0
TLSH
T166211231E8AEC536E6D1473D78AD89111C7F379A55A2F0A87ED0C7E13098FD8209D255
MD5 SHA1 SHA512 TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 07389aebeff04f1d370ad4b1c9fedb5811035f354bb6bf950a4631bcf14a88d8
MD5 1fd6bd348a985b76dee8f0051337ddc8
SHA1 32ea4768657064b3ae4c7ffa2aa8d4cbeb044afe
SHA512 05d81d1334e42cef9ec183c8c8db20721c286b8c1e2ba7da80322833d8488bd58de0d6eb458970d33acf5b525b74e249824b1a1b918b78548e2baa288dced5ce
SSDEEP 12:DBl/AWnQ8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLPQ8akrEDE+vED8YfAlO
TLSH
T160A3268F1A742691EDC521B1D7829EEEAA5EC32DCB17679216A040B69D4216015225B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\content-prefs.sqlite
Size 256KB
SHA256 cb094929393d9779bbb5cb44da04caf0b304b67509dc99e4f9b99b77539e19d2
MD5 be3c562ea7e8d1c8e68c790481914f4c
SHA1 dd66dd963beafa2bd4f9a4aa2acf615d95b35a61
SHA512 ddcd4ac6df0a5307fecba86a8ea44c74836c6425608ecfb4dbeed7b847a639c59f9ef326afb1bf0d98619368f0e2f7c88938c4eb175979090aebd3af556a748d
SSDEEP 24:DLSKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D2Wwae+QtMImelekKDa5
TLSH
T1644426174A917408C0B014B1D4636F22AF3D405B8933E7B23ABC183A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 3dcbf2094a694b761d840291a0cf4f438a64e5208ffcbff81635afb0c9be5dcb
MD5 06fcd32cbafe0f9a50e0f24cd0380c5f
SHA1 bde19432a7a818f4e79102c85be3da7777d83c59
SHA512 007f5ffd3ad685fd6cc4c656ea1f886837c62ab9bdebbf283d14ff243b7cd6d4ae08dee7bda717e58e88c5081e37689ecf27085bbc135e3ebdb97840bf27bb91
TLSH
T11D61A899F229463FE444813ACD922F411F347456A8AE7F2A35ACA04D1E5B3CD778D07E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 bc02dcafc3e1dc8e6894e87e23417df69b8934cef0acc3c97c1a0d2e1b2d6f8e
MD5 84cfce753dca2dfbab0cf7ff4ec15036
SHA1 a8e8f3962db92ff4f47b73b5c9e98733670d6189
SHA512 be8ef9050ad51e6b1ad8ae58f7c7259608de371f074133b19eff8e8f662f555299d3f2e1dfc504977e7bc2a1e10fb1a98d3835adacbcf878f1f95f07b65fd14a
SSDEEP 192:g1d66JozGzgCl6mc0daOv5zbokZR4yjsI:ad66JozGzgC1j7bokZR4yjL
TLSH
T12AD1FF69E629453BC408023BDDB61F400F75389A989E3F2931AC745D2D572CEBB8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 26c6970df801eaace31874883cfaa5e0cccb299a86c91e1197537ec4dcc69574
MD5 7d41c0de0623cfc10828d24f5f7a04b1
SHA1 5600b469625195f5f97ca87ad5776e453807ad76
SHA512 f7f1fc70110d099464cf0bc4173a337eeedd9e10920bd1eb20a37e642b969e1494fcfb99960ac5fa89c29c02fa20a3a40dad3932831403d5fd681e7d951c5c3f
SSDEEP 96:XFM2F1F5FmFn/dd66JozGzgClKtmc0d/UvBwSdF95/7bkW60rvEc+4yUR6HlWI:g1d66JozGzgCl6mc0dpOv5zbowMR4yjL
TLSH
T197C10069F629463BC448023BDDB51F400F72385AA89E3F1931AC641D2D572CEB78D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ef7768024495873fde1f634cf815bc59ab79da4430f00e50a451c75a98f86c5e
MD5 f945a9a3a0abc7574d5aa12c7fe0dbc8
SHA1 2fb3fd8db6494eaf04354ef0534a760294fca9af
SHA512 d9eceec0118cf6d74ebb8cd3a4273a10bcf7fc7a5bdfba88cea7b5fa66f2ca9b317859ef7b798959023fee4af74e6039999cb300e16f4f786f99e064e8e6a300
TLSH
T1C1217C4C39FA4D2A98DBE29C7884038F63554A0B08CB1C838D02DE8CCDE5AD9316B538
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\events\events
Size 1KB
SHA256 2b43a914bc180df2713281e23d402bcc5a4731087c546e9fa8824ce49cf4921f
MD5 a8d97707620a3c0036d6daae1f669186
SHA1 d11334e3241a9619bc1232a25ded00dddebd3d0c
SHA512 77e8220720e31bd8146ba17775ee80e155c6933680e6d5392106095d4b6e8f6beb849ec2f1e67f596062e9aef32e11580db2bc2c9add867b381f2b5f352dbfec
TLSH
T1D921374C39BA4D6A98DBE29CB884028F67554A0B08CB1C838D02DE8DCDE5AD9316F539
MD5 SHA1 SHA512 TLSH

Submit Download

4d774876-4842-4f4a-be25-263c13c415c2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\4d774876-4842-4f4a-be25-263c13c415c2
Size 2KB
SHA256 ca6863e1b0ff4c2865b40ef807502167e1e6a08d57fa31a39002276e870d1a02
MD5 0ec10445e789101cc3c56c55eede2505
SHA1 c381bb9271ec3ff79dca18a35f031ef18d5351e7
SHA512 44bd859a866abe14bef76a445f474681aad565f0194264494e41e6f454f26a76cbcacdea0397f21e0456929cfae2212836ba70831cb03d632c90cab531122801
TLSH
T18C41425C35784CBBACCAE58EE491338D57A08A5350C61C872E51DF0C8D926EE736F52B
MD5 SHA1 SHA512 TLSH

Submit Download

600e9b36-41cb-43cd-9624-45c1a7471110

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\600e9b36-41cb-43cd-9624-45c1a7471110
Size 16KB
SHA256 79d74ec6e7da790b858d2fdebc30eb88b68ea0eb1db9cf0c72c0a6d7e0f87d3d
MD5 b06ff6a7f1ca0667592a191863f108d1
SHA1 693d4351ccf396b0a9314969eacf932da1d8e10d
SHA512 0281ae2e3336bad3de33b9c74e4f3abf17e8e9d68e3bb0c48ec220dc37c37f7044dee35355f586cb0e06fa7068d362c9b5733163f8248e19825968f0f70a85da
SSDEEP 192:dvh6zH8unKS/igeEoUxBE6I19gleWuQ4T/aJknLggDBG+e25Fo4HwhNwAbWxnBms:dQ7DnKS/igerAXnleWuQ4T//NmJ90
TLSH
T18E72DA5A1830497A8291E36895FC7FC3E5F528CB4C419FC99BE47E486DDE0AE113784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7cf73dbc-8e7d-41b2-ae67-8b5af95cf5ec

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\7cf73dbc-8e7d-41b2-ae67-8b5af95cf5ec
Size 235B
SHA256 1d7b731c64bfafac65ea380ccc7a18065769c53ed31fa2e69e1ae7e16442164b
MD5 15d17e4792980ca20e546ffd9a1e27a9
SHA1 c2afaba48d332310fbd661ba4960b11a457e97d7
SHA512 c733fcaf5dd0660868df411b480902805f2764af114265b415d32369f94d9191bc3af9ade6e3c3a6246c932638542030d3f684b93953f583b029a30f4f8b144c
TLSH
T132D097D014AC635C88140F03F0B069D630594C3794646820E6608438E9B9EC4413191B
MD5 SHA1 SHA512 TLSH

Submit Download

a8dcedc9-fe00-48ca-9ff7-ef5919458006

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\a8dcedc9-fe00-48ca-9ff7-ef5919458006
Size 886B
SHA256 e3203d853ced5e691b873fe4daac0d488a21302fe80d47ddffd0354ba846cbf4
MD5 21c86429e5aceffa68509575908989c6
SHA1 4161c25b93aa536ed003fa50eeb846e5a88a6679
SHA512 fb7de1a03147037700611bb1aaae853650ba86bdfd30ea9eb4ecbeba9667163fbbc4da226f03619f75b976c241671c899290740e1e8f2cf19b5988ad2d59f17c
TLSH
T1AF110092852579B38C78C29BD6A07B424EE4712390C91A187EA09A1C0DAE11EE35B307
MD5 SHA1 SHA512 TLSH

Submit Download

ab82bdc4-48db-4531-8d8e-e6b8ace6e07b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\ab82bdc4-48db-4531-8d8e-e6b8ace6e07b
Size 235B
SHA256 9e4f79574a156c4683113f80c22d3bf428dc491a6170cd356eefbef4f76dadde
MD5 78946b7b925a5a762871e000acde6c95
SHA1 9d62de9beabe3eb85a21e5f7db21cdf97753b9a9
SHA512 74c85e216741450cc6627bc3e2c9b7249d3b523892ae701c4dbc1432250615b9f8e05b55a2e70d58bb373be1cd4eddf69bba62f953ada72044f87407eda9f05c
TLSH
T138D097C124A8237D0E108F26F0F029C636888C3314649820C5524434AAFE9C80551806
MD5 SHA1 SHA512 TLSH

Submit Download

d2ccaeef-d0d9-4640-b816-86b0ef13ab7a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\datareporting\glean\pending_pings\d2ccaeef-d0d9-4640-b816-86b0ef13ab7a
Size 883B
SHA256 3e5f00e3f2f0a7414eb09edb677ae3f0a171a2cabe4307060eb96929c62c7985
MD5 16b8800d6f9064b0f25655c055c24cc0
SHA1 8e1ca68192ac94cbe60fac1fea82319f96ae588b
SHA512 aa3b93ab28573101b0bcc636e7cf24c895d377032783a7703d511a6591a06a383d80b59de3a2dbe27501edd5c4ae6e79438c49b11a2e9a4625deed9902ce9630
TLSH
T1E7110082D52479B38C6CD24BC5A437414BE87423E0C945183FF19E18096F61EE36B347
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs-1.js
Size 6KB
SHA256 150f2b85a72b1885f37b3671a64bf2cac1b9e5c8904db355a4a7096fc2fb77b9
MD5 c8f221582b5c1583a75f94a6834bec19
SHA1 57a6a576b876dba66c7622cebbcf924ea578a5f7
SHA512 151b7e91f2c64981ef0b98cc103602adda35c8c2db564d1ed175b0f3a55d88bde4497619ddd84562f132060c11d5dd63cac1581a14f276f1cc8f51426b1f7898
SSDEEP 96:xHSrUTU5QqGq0fCkah1zSiFOSSl8pdv9jnn1HacetBw88n8L4cn48gmg:4rJbR0fCkahbFOSSGjacetBw88yi
TLSH
T123E1417890188F6F74B6776CAC688C716AB2413BB7BF68C750B65484051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs.js
Size 6KB
SHA256 ee327b4f709aaea7dced7bd551497f34569cdc3b7b5311d8b5a070af913c56ad
MD5 a6e6d486fbf6b6e793d134bc89151501
SHA1 9e2b4330ebe549136a1d27df495a9a0bca4b9697
SHA512 6c0e1b1bcfb8b5b1fdff03b283bd9545c5dcee12ad22716431f621db1482a173498f244edc388127687872bdcbb834276e1dc00773accc5678ff33ebc7a53ac5
SSDEEP 96:xHSrUTU5QqGq0fCkKjanjLM1zSpQISSl8pdv9j4gn1HacetBw88n8L4cn48gmg:4rJbR0fCk13MoQISSGWiacetBw88yi
TLSH
T1A8E13F7894188F6F74B6776CAC6888706AB2413BB7BF68C750B65484051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\prefs.js
Size 7KB
SHA256 7ddb808ebc2054af269ef75f8178d11d636119a21f9c19f3b473d114fd95811c
MD5 a8da26669a65a1a2b8e9f453bd31f5de
SHA1 ec6ccdb1cb8bb3fde298fdab14af4b6e1fa28f11
SHA512 005209432b33a32c12ce6d4b91efa09dd9724010e52b93621ff4bd9fcdc3ef1d5cfee7fb3520924c342749db8cae9cf91c0f2171277f36c39c049a25afec112d
SSDEEP 96:xHSrUTU5QqGq0fCkahfbzSiFOSSl8pdv9jnn1HacetBw8On8L4cn4zmdGS:4rJbR0fCkahVFOSSGjacetBw8Oq
TLSH
T15BE1427890188F6F78B6776CAC6888716AB2413B7BBF58C750B654C4051CF3842FA6DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\protections.sqlite
Size 64KB
SHA256 17ede89dbe62fe12796fe6eb7cb3e371dd058299c4dbc3c103210439259398a9
MD5 46af60692fb8e773e3d4b5d45ecfd6fb
SHA1 e87e10ade210f83e774d5d43e0058c3bdb63df93
SHA512 bb75958af15094d8bcef255bbebfa3e6cce6ec06f7b4b04662cee5d3efb6b548a8f9662a9bbc11e84c2fcb116c30f380e6b060e935360d481cd119ba74c464dc
SSDEEP 3:lSGBl/l/zl9l/AltllPltlzgRollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wg8:ltBl/lqN1MR4BEJYqWvLue3FMOrMZ0l
TLSH
T15453225E03383021C089137227C323922F3CD2BA93232E832A100C358C0A022B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionCheckpoints.json
Size 259B
SHA256 4c22e8a42797f14510228f9f4de8eea45c526228a869837bd43c0540092e5f17
MD5 c8dc58eff0c029d381a67f5dca34a913
SHA1 3576807e793473bcbd3cf7d664b83948e3ec8f2d
SHA512 b8f7c4150326f617b63d6bc72953160804a3749f6dec0492779f6c72b3b09c8d1bd58f47d499205c9a0e716f55fe5f1503d7676a4c85d31d1c1e456898af77b4
TLSH
T1F8D02E83C209507ACE836E68B39CBB508E3F00F372240202B2AC888C183F023418F803
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61
TLSH
T10CD08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

upgrade.jsonlz4-20250130195129

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
Size 902B
SHA256 ddff5686caf425f27fc63d2ff67397a79f2dfde468ce95008f768b86b6ede720
MD5 85f0ef5e8053c60c8bf84a7e45d3bb65
SHA1 65f382e4fe25b432de332f77e4db224a8fa62dac
SHA512 d2c8b6b6902a0187251324e6218ddc9de065f31c815ca4322db28bcffefcbd58757a5881b7d28dda4ddf696189a051790add58d28f7f47d4a7dc8af6b85084d3
TLSH
T14611B742791F3CAAA695126FC0C58FE78789103142595860D09D17400DF820F75CF00A
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 77464ea35c23b61b8c7304341ee7b6ec73055991df4409966c4033f73cf5ce5b
MD5 450c83fbd92a30c6995bb31babf6d651
SHA1 fc969c290c7bd83e8c56bf7899468071bceaa8e6
SHA512 15260e4dde227022f45a19c01ff6b5823c14916b6841f9e1697b456b301eaa67b4b569bce4ad66731e276701682389a3b427aed06fcdedde631b25e97790060a
TLSH
T150213B449A2B6EB72B54C179D1CDA7F1C7857170C61960C1E4B82341C2FCA07316F21C
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 8d48b789c1504f54b71e5d6a41c09901ed14641800a0f708e97932bf0b5a4f4e
MD5 93baefb5242535bc26cb76adaaf095d2
SHA1 c5f568e959a15b32c75129710da86ed9c520bcc3
SHA512 76a37276a790c3fd54bbc0ccd06a889694168f7fe266939b525fa44e14dd2de49b924a101ec9070c420716b3a43ee6d3915c650e753ca1264056df2ab90f9adb
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBI:Oa16S6CKnqlizbxV+2xVeU7X2B0mKI
TLSH
T18F23708E3F07A511C53AF0B178A08D51BC5E321D072226D669D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.2MB
SHA256 140b4f0399217c049ac52de05c012b815ab5b4de45d0557d8b558494c4c059ab
MD5 d9dab89036f78b651c73ec272d362768
SHA1 f2e11114563299f3a0ff5bfb4dc8c403f55204dd
SHA512 329c39f2c0995d06be73c17be62571244a7d8618cbae8d54ffb82de515871d7130203624335a189acd122ddb7daae4dd06874b2ea2859d6134939fb9763f837e
SSDEEP 24576:maR6O/IB6jo4oa6jBfXmr1Op5VdT3QJgqlbUsP+:mE2aoA6NXmr1K5VdbQJgIbUsW
TLSH
T1ACF52AF820D2B357F3418033A64553EB21AFD00CA467DE044BA956E995B8CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\targeting.snapshot.json
Size 3KB
SHA256 4724b6cabd7fb9fc7dec9e1d979dab6ff1265ffc525f4c104cbf632129846f26
MD5 26f066e3953ad2ecf58e14c6d8d2d170
SHA1 e2eabb890099121e7ab5729b9cfa7fbe5f26fb5a
SHA512 9e77474e4bd6316ca9853e9c5f565327d76614d4f9be720de45f016458ef2def5b4d3daafd388cbf743169ef4f92e2ff81af186c476cb89d2b7c920e3d35b6bb
TLSH
T10571800CA61CA4BEA62BC3C0D6447F978FBD063370406418DAFE060C45FB5FB122621B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uqk3a6df.default-release\xulstore.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

data.safe.bin

Path C:\Users\Admin\Desktop\Old Firefox Data\uqk3a6df.default-release\datareporting\glean\db\data.safe.bin
Size 30KB
SHA256 e60b93ea716de77f84bfc383893d79b836e597fe88c3309d6c502b28a2aa47c6
MD5 c1e15a02928c288367025d91d2092201
SHA1 240ec16a2e45079ae945ba48ab47594bba4b29c2
SHA512 b6a488bf16e539a5a664c7c1a0119bd68673a0bf528d516649d44f42a603bd34c35f336ab70147510f11b800ebac3f24758d0995c7431f76954b563edcf96711
SSDEEP 768:rUHsIj/kih2cGcmhuy9aKDzcSF+UrbibRbsbz6E/:YsuciWIw/
TLSH
T102E2F184EB1E953FD41812BBDCA507002F79B88A99192F573A5CA46C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2823318777ntouromlalnodry--naod.sqlite-shm

Path C:\Users\Admin\Desktop\Old Firefox Data\uqk3a6df.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

2918063365piupsah.sqlite

Path C:\Users\Admin\Desktop\Old Firefox Data\uqk3a6df.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite
Size 48KB
SHA256 fa2ce60df28e89065a6ba023ceea50f1a64ff94ae4013b38dd699f78aba74cd7
MD5 148df294f70ea84d2ae497be2f043380
SHA1 55342fbfa9e7b8b259329f3425966ed742f1c020
SHA512 f85c16a72b2806d0350553ca2876184006ca6d360ba5ca9024e887381098d1e5a1ab5d9d049995466b01f8343cf715846bb48a7b59ccea229ce69d0224890562
SSDEEP 96:Oa16S6CKnqlizbxV+2xVeU7X2B0hlTDc:Oa16S6CdFAWMNDc
TLSH
T11D23808E3F07A551C43AF0B1B8A08D51F85E321D07232AE57990D9E4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads