d15ae0266fe3a52779f6125bd9621c09bd95fb38c2b0b2d6d09d3fec5a9dc32b

Resubmissions

02/05/2026, 04:45

260502-fdks3sc12k3

02/05/2026, 04:39

260502-e9yjdag18t8

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/05/2026, 04:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
void-fabric-1.1.8.jar
Size 26KB
Sample260502-e9yjdag18t
SHA256 d15ae0266fe3a52779f6125bd9621c09bd95fb38c2b0b2d6d09d3fec5a9dc32b
MD5 0914fff56a5ee5c25683ffea872f0604
SHA1 a762a5c780127e9a0ae852595c8c1e43c5f66035
SHA512 a981425e004af26a8278e140e840f14f8cb081f84a60ce7a15e7244a3c539536f2730391c44154545c8dc28f29e7683fe723b37141984e2e4a51c7c3a48d440e
SSDEEP 768:2ksdLQ886Otk+/7ftm+ZlyxFIenPewvPq8Erh/e9WSbP:2ksdE88Rtk+VZMxS1ReASbP
TLSH
T136C2E05C7AEA7135E407027D3651CBD9F9C87A8F914A581B1B412B32C8E6B070B277E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence upx

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
173	2484	firefox.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000\Control Panel\International\Geo\Nation	TLauncher-Installer-1.9.5.1.exe
Key value queried	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000\Control Panel\International\Geo\Nation	irsetup.exe
Key value queried	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000\Control Panel\International\Geo\Nation	BrowserInstaller.exe

Executes dropped EXE 5 IoCs

pid	Process
4716	TLauncher-Installer-1.9.5.1.exe
5660	irsetup.exe
5572	BrowserInstaller.exe
3856	irsetup.exe
2140	TLauncher.exe

Loads dropped DLL 4 IoCs

pid	Process
5660	irsetup.exe
5660	irsetup.exe
5660	irsetup.exe
3856	irsetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
5632	GameBarPresenceWriter.exe

UPX packed file 9 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x000500000000070f-1364.dat	upx
behavioral1/memory/5660-1373-0x0000000000BB0000-0x00000000011B1000-memory.dmp	upx
behavioral1/memory/5660-1952-0x0000000000BB0000-0x00000000011B1000-memory.dmp	upx
behavioral1/memory/5660-1954-0x0000000000BB0000-0x00000000011B1000-memory.dmp	upx
behavioral1/files/0x000700000002462f-1973.dat	upx
behavioral1/memory/3856-1984-0x0000000000560000-0x0000000000B57000-memory.dmp	upx
behavioral1/memory/3856-2003-0x0000000000560000-0x0000000000B57000-memory.dmp	upx
behavioral1/memory/5660-2802-0x0000000000BB0000-0x00000000011B1000-memory.dmp	upx
behavioral1/memory/5660-2839-0x0000000000BB0000-0x00000000011B1000-memory.dmp	upx

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe:Zone.Identifier	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TLauncher-Installer-1.9.5.1.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	irsetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BrowserInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	irsetup.exe

Checks processor information in registry 2 TTPs 52 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3856	irsetup.exe
3856	irsetup.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeDebugPrivilege	628	firefox.exe
Token: SeDebugPrivilege	628	firefox.exe
Token: SeDebugPrivilege	2484	firefox.exe
Token: SeDebugPrivilege	2484	firefox.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe
Token: SeDebugPrivilege	5660	irsetup.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe

Suspicious use of SetWindowsHookEx 30 IoCs

pid	Process
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
628	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
2484	firefox.exe
4716	TLauncher-Installer-1.9.5.1.exe
5660	irsetup.exe
5660	irsetup.exe
5660	irsetup.exe
5660	irsetup.exe
5660	irsetup.exe
5572	BrowserInstaller.exe
3856	irsetup.exe
3856	irsetup.exe
3856	irsetup.exe
2140	TLauncher.exe
3256	javaw.exe
5660	irsetup.exe
3256	javaw.exe
3256	javaw.exe
5488	OpenWith.exe
3256	javaw.exe
3256	javaw.exe
2364	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5232 wrote to memory of 628	5232	firefox.exe	90
PID 5232 wrote to memory of 628	5232	firefox.exe	90
PID 628 wrote to memory of 4136	628	firefox.exe	91
PID 628 wrote to memory of 4136	628	firefox.exe	91
PID 628 wrote to memory of 4136	628	firefox.exe	91
PID 628 wrote to memory of 5844	628	firefox.exe	92
PID 628 wrote to memory of 5844	628	firefox.exe	92
PID 628 wrote to memory of 5844	628	firefox.exe	92
PID 628 wrote to memory of 5844	628	firefox.exe	92
PID 628 wrote to memory of 3052	628	firefox.exe	93
PID 628 wrote to memory of 3052	628	firefox.exe	93
PID 628 wrote to memory of 3052	628	firefox.exe	93
PID 628 wrote to memory of 3052	628	firefox.exe	93
PID 628 wrote to memory of 2408	628	firefox.exe	94
PID 628 wrote to memory of 2408	628	firefox.exe	94
PID 628 wrote to memory of 2408	628	firefox.exe	94
PID 628 wrote to memory of 5072	628	firefox.exe	95
PID 628 wrote to memory of 5072	628	firefox.exe	95
PID 628 wrote to memory of 5072	628	firefox.exe	95
PID 628 wrote to memory of 5072	628	firefox.exe	95
PID 628 wrote to memory of 3444	628	firefox.exe	97
PID 628 wrote to memory of 3444	628	firefox.exe	97
PID 628 wrote to memory of 3444	628	firefox.exe	97
PID 628 wrote to memory of 3444	628	firefox.exe	97
PID 628 wrote to memory of 3744	628	firefox.exe	98
PID 628 wrote to memory of 3744	628	firefox.exe	98
PID 628 wrote to memory of 3744	628	firefox.exe	98
PID 628 wrote to memory of 3744	628	firefox.exe	98
PID 628 wrote to memory of 5100	628	firefox.exe	99
PID 628 wrote to memory of 5100	628	firefox.exe	99
PID 628 wrote to memory of 5100	628	firefox.exe	99
PID 628 wrote to memory of 5100	628	firefox.exe	99
PID 628 wrote to memory of 2884	628	firefox.exe	100
PID 628 wrote to memory of 2884	628	firefox.exe	100
PID 628 wrote to memory of 2884	628	firefox.exe	100
PID 628 wrote to memory of 2884	628	firefox.exe	100
PID 552 wrote to memory of 2484	552	firefox.exe	113
PID 552 wrote to memory of 2484	552	firefox.exe	113
PID 2484 wrote to memory of 5048	2484	firefox.exe	114
PID 2484 wrote to memory of 5048	2484	firefox.exe	114
PID 2484 wrote to memory of 5048	2484	firefox.exe	114
PID 2484 wrote to memory of 212	2484	firefox.exe	115
PID 2484 wrote to memory of 212	2484	firefox.exe	115
PID 2484 wrote to memory of 212	2484	firefox.exe	115
PID 2484 wrote to memory of 212	2484	firefox.exe	115
PID 2484 wrote to memory of 3832	2484	firefox.exe	116
PID 2484 wrote to memory of 3832	2484	firefox.exe	116
PID 2484 wrote to memory of 3832	2484	firefox.exe	116
PID 2484 wrote to memory of 3832	2484	firefox.exe	116
PID 2484 wrote to memory of 1556	2484	firefox.exe	117
PID 2484 wrote to memory of 1556	2484	firefox.exe	117
PID 2484 wrote to memory of 1556	2484	firefox.exe	117
PID 2484 wrote to memory of 1396	2484	firefox.exe	118
PID 2484 wrote to memory of 1396	2484	firefox.exe	118
PID 2484 wrote to memory of 1396	2484	firefox.exe	118
PID 2484 wrote to memory of 1396	2484	firefox.exe	118
PID 2484 wrote to memory of 4688	2484	firefox.exe	119
PID 2484 wrote to memory of 4688	2484	firefox.exe	119
PID 2484 wrote to memory of 4688	2484	firefox.exe	119
PID 2484 wrote to memory of 4688	2484	firefox.exe	119
PID 2484 wrote to memory of 3152	2484	firefox.exe	120
PID 2484 wrote to memory of 3152	2484	firefox.exe	120
PID 2484 wrote to memory of 3152	2484	firefox.exe	120
PID 2484 wrote to memory of 3152	2484	firefox.exe	120

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\void-fabric-1.1.8.jar
1⤵
PID:4412

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5232
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2008 -prefsLen 27099 -prefMapHandle 2012 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {ee2e841e-e8cc-4adc-be9a-aa98ed9b4b8f} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2460 -prefsLen 27135 -prefMapHandle 2464 -prefMapSize 270279 -ipcHandle 2472 -initialChannelId {2f8d19a5-53a9-4d38-8859-e63bf652493e} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:5844
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3820 -prefsLen 27276 -prefMapHandle 3824 -prefMapSize 270279 -jsInitHandle 3828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3836 -initialChannelId {2c5b65a2-9e96-424d-b3c5-fab0f2ada0e0} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3052
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3984 -prefsLen 27276 -prefMapHandle 3988 -prefMapSize 270279 -ipcHandle 4088 -initialChannelId {34dddf40-b3e2-4dbe-b3ea-63f6481bd93e} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2408
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4320 -prefsLen 34775 -prefMapHandle 4324 -prefMapSize 270279 -jsInitHandle 4328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4336 -initialChannelId {2a060f8c-74fb-4578-876d-971bea697a57} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5072
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4864 -prefsLen 35012 -prefMapHandle 4868 -prefMapSize 270279 -ipcHandle 4876 -initialChannelId {97bac4d9-12f1-4b24-a579-7d6da415d368} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5080 -prefsLen 32900 -prefMapHandle 5084 -prefMapSize 270279 -jsInitHandle 5088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5004 -initialChannelId {b6b93475-5cd8-41d2-8379-b3b5cb00fe3f} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3744
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5308 -prefsLen 32900 -prefMapHandle 5312 -prefMapSize 270279 -jsInitHandle 5316 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5324 -initialChannelId {bf0fa988-122f-4b6d-98bc-30b2f7c8dd30} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5284 -prefsLen 32952 -prefMapHandle 5280 -prefMapSize 270279 -jsInitHandle 5276 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2832 -initialChannelId {d62c8b68-a9db-4280-9b28-072a8516bb26} -parentPid 628 -crashReporter "\\.\pipe\gecko-crash-server-pipe.628" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2884

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2040

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:552
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Downloads MZ/PE file
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2060 -prefsLen 31128 -prefMapHandle 2064 -prefMapSize 270923 -ipcHandle 2136 -initialChannelId {be73314e-2855-4ec7-81f7-1d1bd60b9df1} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5048
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2388 -prefsLen 31128 -prefMapHandle 2392 -prefMapSize 270923 -ipcHandle 2412 -initialChannelId {78b353ed-78d6-49c5-b947-8f9f1e8d3791} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:212
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3960 -prefsLen 31687 -prefMapHandle 3964 -prefMapSize 270923 -jsInitHandle 3968 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3976 -initialChannelId {dc9d2ef8-c3d7-4298-adce-d0bcdbaba5ca} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4128 -prefsLen 31687 -prefMapHandle 4132 -prefMapSize 270923 -ipcHandle 4140 -initialChannelId {831a29a9-ad69-4e53-908f-cb2d9d9a8b08} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1556
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2912 -prefsLen 39186 -prefMapHandle 3040 -prefMapSize 270923 -jsInitHandle 3796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3324 -initialChannelId {91ba9341-a35d-4185-b684-78c185f04310} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2604 -prefsLen 39289 -prefMapHandle 3796 -prefMapSize 270923 -ipcHandle 3184 -initialChannelId {04898be2-ae3c-435a-a560-a29722b565ff} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4688
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 36301 -prefMapHandle 5628 -prefMapSize 270923 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3196 -initialChannelId {547f2390-f38b-4dbe-a7a5-c2ea3b5780b8} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5848 -prefsLen 36301 -prefMapHandle 5852 -prefMapSize 270923 -jsInitHandle 5856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5652 -initialChannelId {d64ac8c0-3bac-4c73-a107-676b565ea94a} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6056 -prefsLen 36301 -prefMapHandle 6060 -prefMapSize 270923 -jsInitHandle 6064 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6072 -initialChannelId {9d4dff69-8fe1-412d-9aa4-31529f7dc047} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5560 -prefsLen 36341 -prefMapHandle 5868 -prefMapSize 270923 -jsInitHandle 5848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5664 -initialChannelId {ff0f5a27-4a8f-4fd4-8eb7-32462a08b74c} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4704
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5732 -prefsLen 36341 -prefMapHandle 5712 -prefMapSize 270923 -jsInitHandle 5724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6400 -initialChannelId {167148b4-8695-4e12-b8a8-8cf027b1ee9a} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:5956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6812 -prefsLen 36341 -prefMapHandle 6808 -prefMapSize 270923 -jsInitHandle 6804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6792 -initialChannelId {85733b13-a7be-466a-ae88-738732fa56da} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:4136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5808 -prefsLen 39460 -prefMapHandle 7016 -prefMapSize 270923 -ipcHandle 6984 -initialChannelId {8f3b5b17-04d1-42f0-9bab-69f9cdefddbb} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
    3⤵
    - Checks processor information in registry
    PID:4768
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7092 -prefsLen 39460 -prefMapHandle 6992 -prefMapSize 270923 -ipcHandle 7100 -initialChannelId {0e160cbb-738c-4972-bfce-068e127b90cc} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 utility
    3⤵
    - Checks processor information in registry
    PID:4908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5880 -prefsLen 36341 -prefMapHandle 6276 -prefMapSize 270923 -jsInitHandle 5964 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6076 -initialChannelId {55801cc6-0279-4659-a5d6-8df22dda3f31} -parentPid 2484 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2484" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:364
- - C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:4716
  - - C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-721190819-434563495-2007910846-1000"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SetWindowsHookEx
      PID:5660
    - - C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        5⤵
        Checks computer location settings
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of SetWindowsHookEx
        
        PID:5572
      - C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-721190819-434563495-2007910846-1000"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:3856
    - - C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of SetWindowsHookEx
        
        PID:2140
      - C:\Program Files\Java\jre-1.8\bin\javaw.exe
        
        "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        6⤵
        Suspicious use of SetWindowsHookEx
        
        PID:3256

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:5632

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5488

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
PID:5816

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\activity-stream.contile.json.tmp
Size 4KB
SHA256 c5a0cb66ca97d70bf703332fedfa6173972bb8c700519217dc36de1fdd8188e9
MD5 2c070b86220639ba857c660b0f5e9c1d
SHA1 0c05140874ea319fcf11695cee4fbfd91249279b
SHA512 6a73b362181d7b96cfa16c75e8aee1db766ae0ab733cef53586acd9241045d440dbc435498527bc7e2d8e6993ee701c395368389b8a4f818511c422daf5c29a7
SSDEEP 96:K549tJQ0uIPwFPdgVtVvPQzlYdT+mRYGCoeRVi78DlgajjvdH/l:KS9tJQ01Y5dgfVQzlXmRYGVkcolxjrdd
TLSH
T122A11AEF5D3494270732A7F87C4F375CF006B21B9EE5858CABA9CC03A29821E41DD685
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\activity-stream.discovery_stream.json.tmp
Size 76KB
SHA256 8ff269ffc3a71b804277e21c3b775cbb5524baeaf3b71600995e721c70027d41
MD5 3c7c85fc8b2ba0858e19dab6d8d743f3
SHA1 a8fb151632da72c3455652ae0958036e39ddaa3e
SHA512 6c7cb4d2316c7993d6785039ebd38a7cb6720f6dfe6cc44b84d095935f7000e779fd65b449e0dc17e3333f8e8ffc2458d7b3e64861767855d6865e4d952e2c9d
SSDEEP 1536:YybTuNAjUX3hPauKvZcB1WNsfT+HBTDqttR5Bjh/SWhbMmnJVJTsreF4CujY9NMd:Y3hPdpKmh3udV3GPiuuzQZc5
TLSH
T1AC732AA3A6A8B1BB1B9127C72C0F765756E20155FB4506CDECEDCA0C80CD664123F9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

0FAAF426B1560D2FB7554FC1F8B6E525130583D4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\0FAAF426B1560D2FB7554FC1F8B6E525130583D4
Size 11KB
SHA256 1d10da24f7d7706602de88feb3efd303d5409056d2abdd261fa74155c317d58f
MD5 b26b156f82a3dc6eb90e26462073a5a1
SHA1 d3f0812fa6018ecde9c642f586dabff3d478dd2d
SHA512 f463297a4687e74020e964abe6760b1d118296ae7f6dd21814deeea64b5c1047ac01f280f206eca840d0283d9b9c394b181e3d8acdadf573f071ea8513b567fa
SSDEEP 192:DHZxYXaBPaYDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCySd+kkf2BSdC:jZxaaBaYDZAR9eYa9EHDEclrIVy8eyuL
TLSH
T187328DB1AE502C1D2EF1F1039DEC55691C61EB13DAD2E2FE160C294CD9C4A69E8F96C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

111AE63D71402EFB02DAB8AC254CA509866314D5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\111AE63D71402EFB02DAB8AC254CA509866314D5
Size 17KB
SHA256 1b344e2e359c60ac8da4a8286f9f71a5d4f87757c3f00f628cf8c0465588b9bd
MD5 69d36f226b3de48523388b48f8b8d170
SHA1 a43946c5df20a39be6486f7c4d53fe74a97b743e
SHA512 36e4cefe74c7a7bacd7c202ba8b7b51e2ecd212777b58291f2ca991842546a1c04789a25d3b0ff5034a5348fb99c2ea81b6672ea6f52228f68252be36d1e5ee0
SSDEEP 384:6R4TB0PYZ10aBTvJGX6o2jTeNa5DZAR9eYa9EHDEclrIVy8eY+qYhL+qYha:6R4TBVv1vJ/o23eNa5tAreB9ADEcVIV+
TLSH
T14582BFBADF54580C1EF1A2135DFD42386C52EF33EE81F1EE368C150981C5A6EA4EA1D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15A1105BD50C8019A270EB43562CA2D47A46C584

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\15A1105BD50C8019A270EB43562CA2D47A46C584
Size 10KB
SHA256 b07a69ce29117a8863a2b1053b98b769b9a8e322fec0ca578b01b9be2b3ee9df
MD5 bc947f879f549cf1d6a830071e71ca99
SHA1 26e561a957a9e9fcdba7a55d4990d69933429dd5
SHA512 563511d50cb9eee9feb2e5e7b2cd21a058fd2fa355b49d4d597cd64ef58bd3b2cac0559cff0daae107a6e5bde37c0e3ab975f0b37b5cef01a15b8b2b0ef3faed
SSDEEP 192:mNYzKDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLI8dmlkk4dJ8dmlkk7:YYzKDZAR9eYa9EHDEclrIVy8eLIMmMdV
TLSH
T14C229EB19F605C4E1FF1F153ACEC85262C51FB23FED6A1EE2508120896C07A9F9E95C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1C8C54682B3709CAC523039982C1103B7620A376

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\1C8C54682B3709CAC523039982C1103B7620A376
Size 10KB
SHA256 19c9b47cf7ed0aab210a2720984ba96fc4f7a5665ea1af51b2e275ef3d2ba8d1
MD5 41401297d5ba2029da09b929647a6423
SHA1 551a794af38f558b5ecfc990a7104e03818b2ca0
SHA512 2bce0d0951522a0dc4a608d648bf88f44693aff10a5ab8989d1d981e518a978caa4a36df21b34eaf2dae46e774fea00cbe1129b2baecb4758b5a3bd093934320
SSDEEP 192:mv0uF9hMDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCMBdVSkk4iPBdVS6:mvJhMDZAR9eYa9EHDEclrIVy8eMrV/id
TLSH
T18C328E759F002C5E2FF2E15399EC16251C52FB23DFD2B2FE2508264982C0AA8F5F95C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63
Size 10KB
SHA256 7bded2f1e9e4e7c512ac23843f0a49452a6962f67c02253a90ec481a262fc516
MD5 911b9ce882b3a487108f32eafc82840a
SHA1 3914911b5718f3c9f9f367372233f54bda7b7b25
SHA512 53164cdcd34b52f269ba90e8f6e73eb7dde1f71354d5d10ff95657e1a0f7fd23c321d3874e9dccbd5d22b8df6c41f1ff69a0abb5682fbc9d8acb3544d097fc6e
SSDEEP 192:zQDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCM6dVakk40d6dVakk405:cDZAR9eYa9EHDEclrIVy8eM2V30d2V3C
TLSH
T12D227CB5AF145C1E2FF0E29398EC5A651C55EB23EED6A1EE150C110C96C0BB8F8E95C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24C9DF0972DD334A2DC66C223393C392A8C4BEF3

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\24C9DF0972DD334A2DC66C223393C392A8C4BEF3
Size 10KB
SHA256 04b37f779e73353715985aee84e0092347c0877694111d8f7cb461a36f80fd15
MD5 016409ace3b83a495c0bc6eeb5fc7d44
SHA1 2bae221563fd63697eb449131b6432ac50e990a0
SHA512 667e1ef96dffb04df9efd8f8ee18eb7e1b069516d7ec57cbc59ea5c6bf4172cde83948a1c55b0532ba42ff67c0293e26c0c2c0158600bb4a30d0b84ee3679c07
SSDEEP 192:tIdjUOGDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCM0dV3kk40RM0dV3m:udWDZAR9eYa9EHDEclrIVy8eMkVS0+ko
TLSH
T19C228CB19F50185E2EF1E1839DEC45161C51FA13EED6E2FF2508220D96C0BA9F9E95C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3116E4F3AFCB65B9AAB34F02A62C62118E1250DE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\3116E4F3AFCB65B9AAB34F02A62C62118E1250DE
Size 14.2MB
SHA256 6d68757880650df0337686f560ab4106cdd24a0f4684b5af193751bdc8c401dd
MD5 32405a38398635047f73b66baad5dfd7
SHA1 5f3f5606296ebd14f1589b4346a9b73b06d03c35
SHA512 11cf02d734b901ec8755914b1839cd73f26d3da202c7403302d98668232d892a9b1bfe62a1f335bbb8136bb274d4b00273e2bdc59fdfc8528ce4fdfde164d885
SSDEEP 393216:gd7ICVI4kYH6lvOItR8nF2M6jhbWtgOFlrkcNZnzkuTarqNv:gIChPHoWItR8n0Y5Tk+RnTarA
TLSH
T1DEE633DA71B69161D642203103D60284759620CDFAB49DFADC3FE75E0868F9F8E7AC9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3948F231342688EDE4BBF775617CBFC16F3F170B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\3948F231342688EDE4BBF775617CBFC16F3F170B
Size 10KB
SHA256 f75c8195741c7a177da057df5d0548e62ab54a942464c06ee20529e92f87a356
MD5 2a07201de0d15ed1aba4f9a0089e7bcf
SHA1 2c7f89a9dc775430e2ba3f9e4c0c9db0da9116b7
SHA512 730c989e5edaae15cff4d95fc2a96548d2b6ee9dc11538a42520e95cba374b5231e3b138453a4b6a49585552ef3624112fc12f37ca037ddd912d572874e33edd
SSDEEP 192:l6so2Da+PRODZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCCvDmd+kkf2Gs:0pYRODZAR9eYa9EHDEclrIVy8eCvDqmW
TLSH
T1A3327D76DF605C0D2EF1E193ADED16191C52F723EED6A1EE190C150C87C4A69A8F91C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48C8032F138E7257763E747F00326AC5F2800EC7

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\48C8032F138E7257763E747F00326AC5F2800EC7
Size 12KB
SHA256 533970cff356f924585cefebddfb4c103ce4e4dca047781ce89369f4c7c2924d
MD5 112e511eba73ac3bb209b70d0ce4bfaf
SHA1 cf9730b19278102bdce3114e421fa01c7d4cf436
SHA512 e0b54b98bdf15ece8a50fc2facb5f723ce6288a4f90f340aedd579a513a0cc27125d2884756fa2582d0d3ec504a4fbaa1863640ad9bd513e1a7e46b36591e2c4
SSDEEP 384:cwdgmtoC83DZAR9eYa9EHDEclrIVy8eC9pGmEQ9pGmE/:cwOltAreB9ADEcVIVy8S
TLSH
T163427BB69F41181D2FF1B1539DED85594C91A713FEC3E1FE1A48200C8AC1A59F8FA9D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 14KB
SHA256 0451787bfa940f5037fe881f15b89253152eb8c5bb29d8286a094d5cb73587f1
MD5 337fe947d7cb298f50766272abd6135d
SHA1 3fa43dc9654a56ede916d41368daf05fd53c2970
SHA512 d76b50dea6e60caea0b0218596030f79e1655c4a4ccd65e5d8adde0f58bcc82cfe8b1e8227ca4dbcadaa6a4ccca31b07d5c8dc306ee24d8c650a63cc9aef3692
SSDEEP 384:pBY5QzpSBxjJhE+AxAbJ2ePsac4j0lpDIIjK7A:s5UULjJhexAtsac4ID86B
TLSH
T1A6529EFB8F20606F0B1396F56D6E27C5AC08B21B9FE5C2DC5A95B801D1483ADE1F91C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B55984EC266F605276B136697BD93D722833A141

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\B55984EC266F605276B136697BD93D722833A141
Size 370KB
SHA256 92c41bde4c4b4bb9b61f00304c776d94c24d8f5f85bd852ed5ad4084b002e3ec
MD5 0025763c949d617a543b542fc115fbe4
SHA1 e06b1c08f4a22b4d4371d1b97d3202b8b27a07b1
SHA512 b88a481fc8eac0910ed938c0d2f34304e1620aaecbbf5e73c0ccd23a7ccd61e5096650981ffce08e1a061ffefa6f1cb62f876056c405843a56c8733b0f76cb34
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl52:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T1A08423378BEC80BD5CF649494B8C7FAAACCEA28BF8AEC8DD424D5185C008F7915B7511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 9KB
SHA256 c04b7b8e6fb56364579b9b4be746acf7c4ac163cff889a61d0a9cf1021d2aeed
MD5 a79d5797acb6304bfee6788f1f7ff838
SHA1 f648f907e711a44632bcfd8d4da317583651edec
SHA512 71153985a9407230751c76b6dfa9d902c2950205cd438625986f2c96e85858e53369cb50cabc633979d12b1139d7dde7d89b622914207fbefcb40d6b85053483
SSDEEP 192:dIDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLCdFkIkk3OdFkIkk30:qDZAR9eYa9EHDEclrIVy8eLeFkiyFki0
TLSH
T145226CB59F54680D2EF1E2539CED41291C56FB13EFC7E2BE1508250896C1BA9F8F92C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 244KB
SHA256 9bb58d02c38506cb6944c7d7ae2acecf780aa26a8d338dfa2c35a7d6c7cb2445
MD5 b5ec591da1861284966ace2659308cc7
SHA1 61fa051dbf0bb98e2549e14f7d63536bff30b313
SHA512 28388a866117c82b1f132426c6c0c12b00f60cb71b819412a99ff6f28e52c4b65f957be0075bd74395fe72f7902d0e4dd37530c6171065f60a6de6f53701fa6c
SSDEEP 3072:dLlPGD78yJ8yic7/PJzU2f3ubpPO1sE0dQPskRO:dLgD7pCc7JzUThO1sE0dp
TLSH
T1403408F3D6AC31FB175246DC6C0D72CB62AF8136DB5209CAFC6C8148D3C9A651076B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 9KB
SHA256 be51f8ff2008d1f9d0af487945d84b65d1cc5c229cb0432498cb88c886a3c8ff
MD5 6cedd52aa20340339985e48dc4722c00
SHA1 6990bcb62589decf8be0fb73d929050468d4f924
SHA512 089b7b30fdaf080be4881c790b9cdda147530d03cd0b9a64f830943f9539472b854b80427561754ec27fca93fefb19b4d1edffa250316342e1cfc8a5ddd27693
SSDEEP 192:ttwpDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCTwdst9mKkYdsZ:bqDZAR9eYa9EHDEclrIVy8eTostUUsZ
TLSH
T1DC227DB6AF502C1D3EF6E2578DED46151D51EB13DAD2E2EE190C210982C0BA9F8EA1C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 babbb30e8740b418eb92201b77e05191305013e3a7bb88e43b176032906179b1
MD5 c0cc97dc38a524095c217b30ab3e6e2b
SHA1 47d2ec4e3e77b57e1e6fc28b0d96186b2d39fa09
SHA512 350d503c45285f5ba058fb772941b45dd20978707b3aa80d4e26f20cdbb537db4d168a7107a59087fc0bf57eea2c3f3bb82b3b92e38a3d83e8b89985b19b2b85
SSDEEP 384:HHMO0iO024YBFuhw+5EL1pPsac4j0lpDII+prRrq:nrZYBFuK+5EB9sac4ID8La
TLSH
T194527D7DAF1138BE0A27D1D4D9AEA219CE08E6BBEFD2D06205443C45C680778B8F54DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 df08662b0f58793c55da68ebf800f2114bc7733df68138ff56c2ed6f263f4207
MD5 f0c4d730ff706de9431f03ddbe7c0ea9
SHA1 53a044fcb947b926840792410574800b8904f688
SHA512 b8d0fdeab072f71d8708dc5aff551d86a35286106d703bbf8a91fa49d046b086d905a6749044d25b63abcf542e038622e8b3d7a1b135f8233f171d7c72d9e8c1
SSDEEP 384:HHMO0iO024YCBFuhw+5EL1pPsac4j0lpDII+prRrq:nrZYCBFuK+5EB9sac4ID8La
TLSH
T1DA527E7DAF1138BE0A27D1D4D9AAA218CE08E6BBEFD2D06205443C45C680778B8F54DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\startupCache\scriptCache-child.bin
Size 534KB
SHA256 63f0ac578360c8797e9b84d60383b615ca24d00f17da0d498bef5c8caf90aa86
MD5 3ddb77b77473d50bec56bcc002930254
SHA1 45b7309c533b657a0eab0bdd82565f5b09f9c600
SHA512 b247dc0e82ccbbfd4eb5f47e6afb9f511cb1946706fb9017b589af91a9fd313ce7609f1f7d777515e9e07179ad6361991247e05101e8d09154940c1262b3d6d5
SSDEEP 6144:JFCUbu1hjktpJn2pmYXHqjOcpEIvSW2psu:H7ubotPnpv9h4b
TLSH
T1EEC46111EFA64E23C418037A44F753313A31E1451BEAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 366e881cdf1dfba3e99d172d3889c72dce2e38dd660500536d149e068ccea3a1
MD5 1036aa6f3771aff69a9dc284138d4872
SHA1 54031922fb68d719a97a8104ef8e3fc9139cc1ed
SHA512 fdd9973400a209a83ef4db15bb048e3de9e5f8153cfad91892d1115da9cfcbb344e5a198799aecce1d97f977b9c4b729be4ed0e5000c20757de2631d6af85249
SSDEEP 49152:kkVvxHNHhFDzwH6f8+5v8by38zYPHpJFVFwjdhCXfJDj/BUbSm:xv1F/waf55PnRmSRu
TLSH
T1FFB68215EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\startupCache\startupCache.8.little
Size 8.4MB
SHA256 a42d89e277f3ce9aac83ef54d2e79dfb6e74068c2ee97c420cec8f8497e1358b
MD5 424f47aac7b1e130e84c4f0f2d982247
SHA1 43ea742b6e1b33254f023a2d63a1b9dd57ee96c2
SHA512 f1173d3dc92c5ad1123452650cc9d4cfeb3da25edb46025e4ab1b91ab72724c834d9533a3a4367afc4c6ef3fd1449cffc48f466c9afa4efda7a4dfb3604d4ca7
SSDEEP 98304:dr3qsCOh7eNdQeqN3DAzn7i6lwJBNTngVVIKFGHSOR:1LCskK3Mviuw7ND1FR
TLSH
T13B9602B7B3550697C425191AE87A0A3937A3414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 1a2d7563af3d3b5c9f4ed45bcff6700c34d700da1d1c1b10d10e4204748b707f
MD5 f5892103570b2839469ce33e97e812d9
SHA1 b0d25857cef20e2ba2bb5025b2971c82272fe7a4
SHA512 7907c902d1b61bd17e6cafe5aa6667d6d9fb354607fcc1be513b49c087562b90c79f4e48d828a6b9e9ed8036062842d04d2eedd7c91fe5d5696372156ba0bc46
TLSH
T13561B492E43F603B7D62A8FB6D95C171B42149CED1CD20DDBA9663D420AE7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\unfswcr7.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 826172e844aeb91ccc7a3f7fe6f768267b43e77fbb3714d96fe358abbb2a3cb7
MD5 23773c33e41e03788f918b40b0f17ebc
SHA1 30812d9853c83e231564bce8d79a5794542938c8
SHA512 2a58c4146d36648108205a565885e852151a1d01686c45553767d2ac70595edcb1c4da157bdd733357ceca26ba4b08aaed4cffa9ec982369ef43569624037755
SSDEEP 3072:X3lqI+zaRJVIoUTCSy6WoDa8tGNH9LxSDl9VTy:FqL4VBUT7zW+a8tM1izVTy
TLSH
T15BB3AFF7DBA28E7D69FFD41DA682843EFD262400B3A7301AC9232714A1C6F747675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

200.ico

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
Size 116KB
SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
MD5 e043a9cb014d641a56f50f9d9ac9a1b9
SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f
SSDEEP 1536:5HmLYAoZllsaebGVeTZ8Sz3HjpAAAAADYmaAAGg:UfoZll0bGVmjWh
TLSH
T1C6C330260E6D3150D3992D79BEEAE3384E764D90EC6D21A314ED782AF9376EC13ED440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowserInstaller.exe

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
Size 3.7MB
SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
MD5 05db02530acae561d2e4b368ccd45f52
SHA1 050101d4689ee8012bcf7eff4cdbe15a3851ecc8
SHA512 8a3e37e6d5e73fdac7f4b974dd350011b83b410b2b26b140bb53f1c497d3fea857c9ecf03e931dba53908eeada1859d4f3797f47d187d84e651b1fa42f548b37
SSDEEP 98304:DLDSCHji8v64cym9lYQre8JVal0S8R4+h8GdspyRLndhyOu9w:DHfQbVTS8R4E8GduAT89w
TLSH
T15906F12A7A72C072C6323630969DA379E6BDB8705B35829317D01E3D2E715D2993C36F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG1.BMP

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
Size 12KB
SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
MD5 3adf5e8387c828f62f12d2dd59349d63
SHA1 bd065d74b7fa534e5bfb0fb8fb2ee1f188db9e3a
SHA512 e4ceb68a0a7d211152d0009cc0ef9b11537cfa8911d6d773c465cea203122f1c83496e655c9654aabe2034161e132de8714f3751d2b448a6a87d5e0dd36625be
SSDEEP 6:BlcgEMS0gjjjjjjjjjjjjjjjjjjjjjjjjjjj/naEMh:TcNwezg
TLSH
T192423A021F61C274F2CC0CA44D58244CEF10CA5B211B02C54C75073597C06D73EFB35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG10.PNG

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
Size 206B
SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
MD5 5ad7b05326e53ab9d91b36331c3f84ea
SHA1 bea6d94e541a2380b9506df97349aed1ebb1e04a
SHA512 51dc9a6c323207e628f7494cf83451687d9a5977368d761489b48c25174edc0dcac3cea2705389001220aef8896c03c8dcb878e963545dc3cdf51f59c982847a
TLSH
T1E8D022C29B42BC3CC10FD039EAAB1250D8BA044E16638A4CA06161262310FC4C2EAE83
MD5 SHA1 SHA512 TLSH

Submit Download

IRIMG14.PNG

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
Size 43KB
SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
MD5 c1380329e781c0a64b39b7441848c380
SHA1 f038908d637389cd56c2bcd524c1f98090b194c1
SHA512 51a9dcb8955cdb7b78d3ffbf8da8ecd866d46b325b0fe8c948a2ce81302ffb11ee933ee5de2850ec92950a5a5a1b7cfe0237a3817cf5ced7029ed9bfb2464f0f
SSDEEP 768:fKdTjAjz+7WyOYqVxkwGW/wh8P97nd6alQO/IrLXjTVgqjqC:fKdfy+76zVxm8PzYeIrzVgqjV
TLSH
T1C413F210C4CD9A6703CF5E12E46538A5B8E158C0FA2DC4AC38E6DE24552E7EF5F107D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG15.PNG

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
Size 644B
SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
MD5 803fe72088e9684779985bb4bc92c3c7
SHA1 427d3cbcd903a8ca0090914de9df0bb25f148776
SHA512 df33b0f72d3fa7da46ecb6f3d3b0df8cb3983d5c1ed04851e24bb3e6fc68eadbf01a1ffd5d3b98a5e9f13dfcdeb6a66e3624c66ab2ecccddd582de7569fff72b
TLSH
T164F068D615D15478C20781B480C502A3DCBA1A85DDD786445180B73317D1FCDD5C236D
MD5 SHA1 SHA512 TLSH

Submit Download

IRIMG17.PNG

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
Size 40KB
SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
MD5 46cbccfdcee617bb76271de3c8293da3
SHA1 ccd7bd2af1cae294803facb927b6d172e5fe8a29
SHA512 e88c47376c6d8df4d8d351df14b7c88820dbfafae24ebfdc6d6ea07afab14c7ab8c1d0394e3fe3759eea7051f67ff3005651e4ae00a3c2f7c7a020fe48765423
SSDEEP 768:PYY9Me/k8H5G7Ee6KkwtLIAKI3z9MmzYPjvdz5bnuPusRWFBFHyAoK5:FlM8ZSEe6Kk2TT36dz56PDS7H0K5
TLSH
T17A130111E6DC90A27A965C083488703B95A330C95DF57F2F9813F69440EDB0F69FBB68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG2.BMP

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
Size 12KB
SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
MD5 f35117734829b05cfceaa7e39b2b61fb
SHA1 342ae5f530dce669fedaca053bd15b47e755adc2
SHA512 1805b376ab7aae87061e9b3f586e9fdef942bb32488b388856d8a96e15871238882928c75489994f9916a77e2c61c6f6629e37d1d872721d19a5d4de3e77f471
SSDEEP 3:y9lMll2/l0uqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdC:BlcI
TLSH
T128420404113000D5D1450175007471C5751547D5D004034C30114C14451047703CC044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG3.BMP

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
Size 12KB
SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
MD5 f5d6a81635291e408332cc01c565068f
SHA1 72fa5c8111e95cc7c5e97a09d1376f0619be111b
SHA512 33333761706c069d2c1396e85333f759549b1dfc94674abb612fd4e5336b1c4877844270a8126e833d0617e6780dd8a4fee2d380c16de8cbf475b23f9d512b5a
SSDEEP 3:y9lMll2/l0ZVTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTn:BlcSj
TLSH
T1DA42040F110103C5D1C700350C57C1C4F51F45357004035C1011CC344D10457034C044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRZip.lmd

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
Size 400KB
SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
MD5 1698da32813956674734c753b55baa08
SHA1 cf4e3a707e59cd6c6bc5b7cca659d5dd2c080638
SHA512 eeb6ad23291f9bd37f20555ae8d557bf0e448e77433c3dbb859813cb70e80f9cd4d30219083aac23f99ed780ee510f31d78aedb44a548582e690eeed58245841
SSDEEP 12288:Gwji6+ZoE2oaXKOAilmVx+igEpONKiKjZTeGV+:ViJTbaXlAUnKiKjJeGV+
TLSH
T1D2948D01B6C0C0B2D1AD253124AAA3369A7E7D205735D7C3F79CFA7A5F311D1AA2934E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wow64.lmd

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
Size 252KB
SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
MD5 bfa121019a2dd9f7749f6bb72570319e
SHA1 fc48a96ad45e00815060bb366fe8f31c140ecb19
SHA512 cda75a55119104b23489b1048c810e066099b13e12aade7cfc757ba91de7b6754edff2da561741a16c92aa00d7e4ea0b53f77ebea6aaca059a74847a0f5d4059
SSDEEP 3072:52E6GukcxWtnwkwNBp0AUTjQzKgvyVx9QlllMS25RpaLSDk/wY:52EcxW2kwNBp5UTsKgaQllaMLl
TLSH
T15F444B0176C4C032D27B21354877D375AA7ABD618BB48287BBDCAA7B5F705C28A37316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

irsetup.exe

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
Size 1.8MB
SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
MD5 21618eb1ebe1b4033d833eb057c3d065
SHA1 40e80d4f0d0254bebf73ceabf28d3c471f894aea
SHA512 4765b54fe15bb127f4f80777004276212ffb5fe2bad1b887eed9fca5c50d2b336805de32913c41ba7f726445a21b591e6494363b52b5333e273f3254fc927c19
SSDEEP 49152:wo5xdLZj7eHEWcSkMqQjeDlSvKjoSCpWmp8728hLFhC:woDdGgbQyDlSih/FFhC
TLSH
T1D1853381E665C38BC57C483BA8FB5D556B29AFC27311C7D20BB9BD1FB8367922C48850
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua5.3.dll

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
Size 395KB
SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
MD5 8d18dbd14d7c233b0d1f5943226c35b7
SHA1 57de3e8d8e1f0e39244b3528310e513c7f90c5fa
SHA512 39777b070c6ea791ee5cdc1c8ad50015e9d6f6f96b2d8e02f4a80f97a7fa2c438770d5015eca5d19106cfce624b6a247de04cb4ce6baad353acbb298f0fc6aaa
SSDEEP 12288:B3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pFVY:IaLbwKLDTH5+6pFVY
TLSH
T14084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

irsetup.exe

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
Size 1.7MB
SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
MD5 fdc583888459954430cdb445138e8690
SHA1 1557c2343eebe793dad9d71af697db9c98f7224c
SHA512 4085953bdf51b93bbce4b2cdc1ae732de7a9a6e0b523fb794722fefef9d59be5624feb99f4f73cead9a4353d3f63c5434b21b65abcd0b3915c97d1d97747f7c4
SSDEEP 24576:Xgojt8rfJLbXIpyxOjNONgc2gI0pRR9djPOZYVFR9MRsixD6Oo1e4XHbtSwye:wUqrdspyxXn5Iy9Rdb92s27OgZ
TLSH
T1B1853323E5340AFBD86C2E3251BD2482AD7EFCF2F3690C4286557B1311ABB815A9D375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua5.3.dll

Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
Size 395KB
SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
MD5 4eed99fd77f4ff9c252f56e153f9c9ab
SHA1 995cecfe73f719c5135461402fdfb17d79721831
SHA512 df0b514491e48e0f6103c61833f24fd0822a5b7fbaf1df9f48263bb83b1d5e5157307d0f6b7fdf3281e32886d3d8201b4a378239d2cbd31584a7c200c2b69e03
SSDEEP 12288:l3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pu76:MaLbwKLDTH5+6pu76
TLSH
T1F084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setuparguments.ini

Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
Size 801B
SHA256 cb373202cd29655522a0d2f216044623ae812ff35bbab8291946451806dbb60c
MD5 3992a12dd763f1c137ab31a9855bb761
SHA1 e738df05656b7a2f3e0bc8bf482bd1a7872a2cdb
SHA512 0bdcc80dad7b618e3024db3d8990739d9b40dcdbcee55eb9a651ec0361e10a3307ef16723b4232628bada4fe7457a2afa54ef684b94d0bcd19ee55d4d7eb9171
TLSH
T1F80144438E4122ABDCA45781A5272D828DC8F9DEB09708D49BD7443BEEB0C69BD88467
MD5 SHA1 SHA512 TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TLauncher.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
Size 9.2MB
SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
MD5 6afe8456101c71193942943f9f8db1c4
SHA1 cc2dd5b0d2a531b27b3531d4ae7b77df2d385c52
SHA512 dae1d037610e663b8a0f034e345043303bd2a15b67d0a30be3d5b3c3230f6d82d39d2622b326bb84c3c838d2b4c296d9c3b95ae3289ab266ad31048c496ed61b
SSDEEP 196608:RshNVPPzMDzdatp5ahrePa+52Pk6ptJT:RshN6Dzov5C
TLSH
T189A6F15BFED8C069FA0794324162D067B82D4BC8D14BF19B15BC669A88B1C894F07BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG1.PNG

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
Size 45KB
SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
MD5 b1c738ebb530ef3312b3d7209d2a8079
SHA1 9884f02de44291f3217c03b02089824b7b25b55a
SHA512 f79d826d716239deb6077717dd6880236eab7a4a6639bf5de678500e6d5488b5a70938988207b8554782878ff5472e23b577db288cf273007f8778ca08b8a9fa
SSDEEP 768:FU5FNyQXHLMQk/CIEB1TGAPytWZixXgqZrPvgzfF7OBhTNj9YGhaBcROHI4QkU:+5FNyQXHQ3/xq5bytpWk7vg7FeTNuGhl
TLSH
T14523F21ABF030526AF1A1B70B91D71EA14452289FCB789888F670817B1CF9E2F64DB49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG13.PNG

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
Size 41KB
SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
MD5 d157aa0e365b8a0b4a72096792813fb8
SHA1 8ce762ca86b54b91c38b22027a4a36417c3919fd
SHA512 aedcf9706ddd901d4a5bb5096daefef5506007fc96351b44521bebbe70ecd1aa8caecf1cb76d9ff461c73b32a73f577f62330a19b764b0870c0b087828c449f5
SSDEEP 768:pJGBX+j3ksnMoMVCv2YMgvXVwHAt8fTzwqYGtIoz8V0bWa2NrrCwyF:p85c3XnMbc2tgvmgtITzGzY2NrrCJ
TLSH
T1B613F1E881CF028DD7A552440AFC62863FD2DA58B2551F1EDD8A36F93DF34646C8392D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG3.PNG

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG3.PNG
Size 475B
SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
MD5 a32b83463a6f7cc50e6be2c85ba53ac2
SHA1 e07c81d391d9acfa5a0ccabca0cffa4bc5c6aadb
SHA512 c32d1cd6fb8d50cf373ca96df9a150494015997424de2454aabf0c090192538e5c6a1e20e1ad7d2f520b628c3bfe5b47ef79c02e18bf044101d7c25217580df0
TLSH
T1D0F0D4E9578D456CC14F4535631B5063FCA239C69A6F57454C286D1B8B59FE84031F81
MD5 SHA1 SHA512 TLSH

Submit Download

IRIMG4.BMP

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
Size 451KB
SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
MD5 c87f44be2c13b601e3c6c2d2fe07a60a
SHA1 3518ba686c692c016dc46cc03846932f87295496
SHA512 25fd25de9188dfc3286b2acdba323cf0e7334c650e7796ac9e7f19e8a40b565a606cafd5b00039c351ccdcf40642c73914c6174d37a206ac81ca1d0d4b64df3b
SSDEEP 768:vdG5BfFYTNBwfaV6EzmQR/FQCSY+OpVbSPIFJJN:zTcySY+OpcIv
TLSH
T171A4AA965E139503E27B037BED616E21A1EBCED9E61A65A7C1C33D90E8F36EF0524043
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IRIMG4.PNG

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
Size 368B
SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
MD5 c864e0b6888f3aa5365c1b60c71db536
SHA1 f3b86b6dda72ba5e90e5a7f0afb4553f6b9c211e
SHA512 dddd8d83f80ca045bd6fcf697e3df717a56de7cdc3bfcb44d92b889f5fa570bc0671b3fac05233e459e1fd9f9c998afcd37bc766cba544e9b0d98546f37ec21d
TLSH
T1ECE0C0CF5B54AC28D9CFB976071B0590E5725D970C67C69831A0A4B91FACE489487282
MD5 SHA1 SHA512 TLSH

Submit Download

IRIMG9.PNG

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG9.PNG
Size 438B
SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
MD5 d5515147e2fd43bfcb51088cba0a2d11
SHA1 24319ae988efd59fdd883b14642bca432cffb049
SHA512 a54fb5461ede951704a1fdfd3ba0118a3e525412f1e9c41cceae17730d28ea2a6d22f1926c4eff50fd4a5e6caa4972fa085af1cc22ef47973a15763f4280ceb7
TLSH
T1F3F023C62F547AA0C50F6632DE1D8546C12364C73CF9B359DC04DB313380FC6A0461E2
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.xml

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
Size 3KB
SHA256 8e4353c9f57f40e6c4c68a2968fb6b57f86d2c816db7bf4604d5ddc851bb6359
MD5 aa019e6f09a1a83009843fed46560981
SHA1 40d634c860453fb725e8727fd1eaa537eada63e3
SHA512 caa6c04ca4d69e13add73d1b02788d1a6a906972f0065db8ab275869337614a05d595df307822051b5b9e0f11407afdd2227b67f934d2740b2abab18666b93fa
TLSH
T136612939C4DCDF1FFD62B7771262503EAAA085482EC72C54C6D9948F418A45CBAB35E3
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.xml

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
Size 3KB
SHA256 6c060205286ddd20073cfd030e78cb0fc0da27db028a7ccfe07b829f28118507
MD5 042c0903b0f904aceeb5edf760cf195f
SHA1 4abd745070c2b85a0a8c7e343e6432cdbd290a2a
SHA512 8e357013f59f4f69fc005597f33e8e1d34f4d0cff5368260105a90808a73a8c7e4a2e9617f657493015f6d3ed0103f29f8a99213c1f29bd1e7e53a7a1e2cf390
TLSH
T15561263884DCCF1FED92B7771272603EAAA085482EC73C54C6D9948F518A45CBAB35E3
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.xml

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
Size 4KB
SHA256 dcf277c0412908417346fb456ec160444a14a4af43d0c835b806e9a36c1bda31
MD5 66d3f39a191f77566156341d6c800177
SHA1 6c623c8546f49f82beac12ddc7546eb370db9c8e
SHA512 e84292262a3aaad1717668c75d44febc542428fdc2cbd590ee33aab8625e7099670f6b94f1f4c45d1244ce81abeaa4c849fa17c93f71745193e4a38ca5a583a9
SSDEEP 96:kTf6JEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrAM:eZVFH2VFH1VFHBVFH2
TLSH
T173A1E53884DCCF5EED52BB770272503EAAA085482EC73C54C6D9948F518945CBAB35E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.xml

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
Size 4KB
SHA256 a8f33e4f8950ffea0e801e882e8c89754f2cd0f36e8c15794f0a9d686bb53467
MD5 b75ed7183696290c4603d228809174b9
SHA1 dcc2eaf8c74e737e08314ba49344eeaca2e2aca0
SHA512 4a9072887eaf7ba1377bc8b1d9e5489704ac5821faffd47f2fb22c22216bc01db09ef3c9291514c1db55a9e57ceff66ca18bd388c46da0f404c7c4c293b9ceb9
SSDEEP 96:kTf6JEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrAP:eZVFH2VFH1VFHBVFHh
TLSH
T1E7A1E53884DCCF5EED52BB770272503EAAA045483EC73C58C6D9948F518945CBAB35E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.xml

Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
Size 21KB
SHA256 c440baf3bc57ab6c380c550209b85b68448ead99b82ed57f7e08c13caa8e1389
MD5 73baaf678b5369fc0766a9535cefcf22
SHA1 6ea6d19021b33e7f56394aa5eb72408d13a44b0a
SHA512 e6262c13b8527c12f1db6bd547e782ca2dd3d58f12aaa376f1943a5d51dd88eccc30fbb21340b08b7a200132f5b245f3ca570cef999d28f4e9bb491f8a210b17
SSDEEP 96:kTftHJEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrJ:eGVFH2VFH1VFHBVFHjsuop3pUJWKiU+
TLSH
T19CA2EA3C80DCDF7EEC93B37B4665546E65B1890C3ED22C59D2E8A44F548460CBAB39E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\AlternateServices.bin
Size 10KB
SHA256 16326c1a6e713ec8190f3da55eb4128c826cf03f99f65a8354e88ff63d7cd8c8
MD5 202c71ae258d0296fb066b23a4d774dc
SHA1 f5f8be538efb8dc003eb7904aba65c09ba7cc25b
SHA512 6e57b831c6b683ccfd0fc208bd3dd1e34e922bb91605350825f0d667ab250da63fd1fe194fe1200c71b528be745447ceea5c2d878b394e4fe0e4e473ace101d9
SSDEEP 24:+uhMZxQy+lzR791In9BjfwB9xqS5q9F55A5rA39VvSAII9lKA:Ly4/+9VfwTQwI56kNBPICV
TLSH
T1D22294F75BB6A462F092CFB0805D725D9C33032609ACA588C75894F706C5E99A03FFB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\AlternateServices.bin
Size 22KB
SHA256 16f252730b64c30ed9b41297f31c1dbbcf0c265f44607a29ff4d7e8c202df02e
MD5 056647d624dcf86ab20c832b87fa32ce
SHA1 a125e848472beb99eb62bd736fb9cecc948734cb
SHA512 ec9b3079a3bc54273198b78e478aaeff2b13e6fda7c8623b1773f0f54712dd8f17b488fd8f95479fdabf460ad593f6279a8065a667384a837e48c79136a6f982
SSDEEP 96:24ojjfY4AI56YtBL9Rk4MM/pViyx2kICz:ZQq22cz
TLSH
T11BA2A9F317F6A493F0918FB4409C769DCC73022548A8A598C759A4E706D9B98F07EF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\AlternateServices.bin
Size 3KB
SHA256 1092fd879f3cf02188b8dbfe30722ffcd7fa5663d0949d2ebd04d6de2036edfe
MD5 97af205b100c66a3b8517a0e15bb64cf
SHA1 07d9b145e51fa4571da59ed05b7ed5555ff60707
SHA512 b8c0977135fff24b56ddad803889b209e26997525dfa87b24805b967f2a825e2479330ff987b3dc15787c737f8ef2418455dd43d9ab0c3a80cb34e6f6a175c7b
TLSH
T12081ECB3467300B0E49006B4E819361A4D3F27A78AB9E48C43A1E9E699C1E9DE09EC34
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\SiteSecurityServiceState.bin
Size 2KB
SHA256 c098c830b9949d40bb418993c0b2d4c28db4dc11477083cc1adf60d58e989243
MD5 80d45bcd29561dd976caaf1fe2ac2e2e
SHA1 11ff643827be8864931178ccc6e0c07ec9ca462d
SHA512 79301cfb3869c2074bb8a779664ef9462d3f8ca876a85901c533738ed23a3563c2c2af476fae5e5e0090ff75be9bf722653af0ae479b39a7e40ac5d866f47696
TLSH
T1DB416531EC67CDF2F0C08A3975AF49103D2F23C951B2E8583D53C3927084E69219C291
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\addonStartup.json.lz4
Size 4KB
SHA256 0f9cfb9778614a4bf6c6a00bf80e045b3ec1cc4a92d09ef1362d63a4f37b8b89
MD5 73ccf282754940f3e9dac067f7c4b742
SHA1 50dd7ea6d0f29ca4a6883e5be9b4091b90eb6222
SHA512 82151ebb8ab9d31f2daf416e5cf06a30ddc04350399ae9ec3bff83c6d2b667213b98a1d565c0c7fb28bde803fbf09fab05f4589cba020ef485c3380cf248531e
SSDEEP 96:NZ23sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NO52xxhD8rGvm6ApwnHUuhN
TLSH
T180A17D7AD541EFA1FE32C04788D93FB2EA96AB7414A9C4D4F16E71264D74A731704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 83e2a5c9d65ed4f819fd9bd6a52715e7d92eb7665d12e9f6dc431496c2b758f6
MD5 87b094ee8bf6b3236413e045af531f39
SHA1 35b84680882ae729f75eaaaf14047adaf5f6746f
SHA512 0c47f8a39b1342ee8be869ae5e146cf2693fc118f9ae9588a03f08a26a756e2c1453c860d42060f505fc19bd47512d7becf73bf2680e233f1e7c3c10f6d88a4b
SSDEEP 12:DBl/WhnB8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLsB8akrEDE+vED8YfAlO
TLSH
T18CA3C68F0E702680EDC420B0D7828EEEAA1EC32DCB13279202A000B29D0206019220B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cert9.db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\cert9.db
Size 224KB
SHA256 d6ddecb6f1a49af88ad061f8450f95a235f41e3ddb71d9139fd1e61c79a4b9ba
MD5 e342bde4363a57eec55e594e50785995
SHA1 a959bf1aa119daab466da79e4809d26522327c89
SHA512 95ebb575c82104fd59bc511d6288b2f2d35c93ecca5bb24e3091a6ef41a4f9b21ceb75f2a4ee8f5b9f13bed6dcc9b2912f4524eb3d75c5ad1f0bea00798ed874
SSDEEP 192:zOFva0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23vgNHaRPNnKoP70w+:K1zkVmvQhyn+Zoz67/cPVPQD
TLSH
T1B02421C2F820745ADF4A6D31B662DCF23D7627410385A422CE289D3F1D64A1F67A68DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\content-prefs.sqlite
Size 256KB
SHA256 fff6c2239e0d2ccc2dfe16bece3f51fe2831ce8baaa337827bbde444207a727b
MD5 d3941a15a96fb3023cf1587a47b586b2
SHA1 94996d072eea6af88a1d96b8ef900a1fe3ea56ca
SHA512 d627318f49a185b6ad4dbd76c9eb5aef82c360ab76fed195641fbd258e045e1f04c0d6359827a9c31c677414bc656e183770c0d1b829821388db8bfd2608f364
SSDEEP 24:DLCKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DmWwae+QtMImelekKDa5
TLSH
T1234426174AA17408C0B014B1D4636F22AF3D405B8933E7B23ABC143A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.bin
Size 37KB
SHA256 b9133467f71c7a4f2feaa30cb8d88a25745c982baa363ceb2c41f29007e3687b
MD5 4c90d8a7562d1f2fbcf3cd5eca0f920c
SHA1 7078320d0489ceb9b0b696fd61c8d140de6ed6b6
SHA512 9cab18e7c25c05d7b0466e2f71dcca6a63f7926d30f5e5da1b52916e889a23c77e02dd9b023a873ccd90b96e3de6f12e0aa750f62503ec30b6141637a657fea5
SSDEEP 768:mE6EXc3Z5LeRGcmhunZqKioE2vkJ58i58b8bWbKbVbCbnbNbAbfFDgulv:Rc3ZJeJZqBFDgulv
TLSH
T182031144EB1E553FD46812BBDCA60B002F79F889591A2F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.tmp
Size 37KB
SHA256 2a61ea375a4e4236ac636c0ba420ecd2cf2dcfac1647e4afe7e624dd1f7dedf0
MD5 29c4f1dbb694309b88d95a76227e5449
SHA1 62a9153c31c87d3ca50cf9dadcca743873b182f2
SHA512 382e3b2ea352e4c1190db860b7f3bd56c4a854d6d3e17c8e538128f9226dd7c47308b7799d7b7393857d2c829a8d88e97169775fb6d2ad8a11beec8d69fb5de6
SSDEEP 768:ZJDc3Z5LeRGcmhunZqKioE2vkJ58i58b8bWbKbVbCbnbNbAbfFDgul1E8:Hc3ZJeJZqBFDgulb
TLSH
T13F031044EB1E513FD46812BBDCA60B002F79F889591A2F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.tmp
Size 37KB
SHA256 cefd4a238b9bcf646a22cec4bc69f64dcd055b0c134b2167292c2793d3eea7dd
MD5 1428f989ca7a867c35077ac74525f65d
SHA1 0e5d74d1345f3e6c5956d5822569610b59fd1be3
SHA512 c31c72b17c29b28e4e1af2ec5524bbc5c9d0fad5f2e78285b673cb62dd00c6dcb83d446d62611788d54c500a1f51ba18081f3cbad1585a728a71bf40defd8880
SSDEEP 768:ZJDc3Z5LeRGcmhunZqKioE2vkJ58i58b8bWbKbVbCbnbNbAbfFDgul1E/:Hc3ZJeJZqBFDgulk
TLSH
T16F031144EB1E553FD46812BBDCA60B002F79F889591A2F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 939d5d74d6451bcf2cb5129c0f1938275d803b922869fccc14934d0ced4ca589
MD5 7187ab66b2d40220475d61bf0aa7a76e
SHA1 48ca719105c96dc10bb363fbf288618950210659
SHA512 01f0bee40d1c345b3601630fe1ba14bf1fa799b70879476008bcc3bc34f8c1b10ca15267769307d94e34e3354d5a9316d842829c0f57a2161f67422316d07873
SSDEEP 192:gOv5zbowbKxyjE8r1d66JozGzgCl6mc0dz:LbowbKxyjfd66JozGzgC1jd
TLSH
T159D13E68EB29863FC458027BCCA61F514F76395BD84E3F19319C60092D472EE768E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.tmp
Size 27KB
SHA256 8af646ad746fc72d5eb3ab0de3306929c02180bfaf28c2e430b9ab35e25858a2
MD5 fea24509d7dfb8c531458924ba1f1aed
SHA1 befb0cf307232e1ef70b2bec8ad1bbb756d869db
SHA512 b8989bf00c78e536dfc2acf25c221b69bbb4ce7c26e96596a9395ab4fcd0f6f017e3b5f350f3a563f78ae142732a261b8e723fa9a4e44cc2d08a802c19a9c7e0
SSDEEP 384:nzCiHy2jH6Gcmhus9lrcKD2Og9bKbhD2d66JozGzgC1jYboWKxyjG:nzpH6Gcmhus9loKD2Og9bKbhXE6OF
TLSH
T1BEC2EF44FB2A913FD41512BBDCA50B102F79B889581A2FA73A4C646C6C872DC7D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 23e5aa89fdbafc4aefe879eced5486df154e015738ea824cc23ec6a8d17a5d38
MD5 98c54c09f834de8086f28d1c6a010021
SHA1 d7599ec4480caa7447c7ac26b811da83bd35f327
SHA512 b9a3cdd27b0d0fbfdba61c1d18d4e3751708819a64f5d35cee8ab2bf644ba2fcc60e858db83521d4351c98ca5ceb04b148bda7c53951329fda631bf59fe377bf
SSDEEP 192:6Ov5zborZKxyjE8r1d66JozGzgCl6mc0dz:5borZKxyjfd66JozGzgC1jd
TLSH
T1C4E12068EA2D863FC418027BCCA61F504F35389AD84E3F19329C600D2D472EE769E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\events\events
Size 1KB
SHA256 e1fcb021723a790e006cd27928e464552fc356dcffded5ec7661044814bf8f23
MD5 d64562df4e42f9fe0d9f2f2f702c6408
SHA1 49473137042033de8f326bcc03057cbb538957c2
SHA512 585175dd6e8805025cbeaf73a68ed2e37909a90d508a8f5a8631402465a1a38afb475f7862b7f125f99a8eb8182f5af125a3cd5d19f921c9590370f8b252718a
TLSH
T14711575C3ABA8E6A9997E29C7456038F53158A0348871C478D02DFCCCDC5ADD326E939
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\events\events
Size 3KB
SHA256 ddcb1c03d6e6f83ce58d7cff4bd602c50a1e02cf8627faa8ca67ca8693dec7d1
MD5 4b59aca2e5974c4ef35868e84846ad85
SHA1 28b09951b8491321cf39624d37e07afeb8d4f788
SHA512 48e4f4c5a4f0830b0fee430a54926c636433a67fe8ea2db9651935517d970a28de3ce206775b8380959729fcac89beb393cf738f02114c7fecf5a4b36fd3d333
TLSH
T13B61BC0D66BB4CBE6C97E299F845038E4285474398C71D878CC2DD8DCC8AA9E325F839
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\events\events
Size 1KB
SHA256 8f02734b7ce0a65d48a55701e586d1b699e104a930c5896305a1bb8db87ef9a7
MD5 5db32319a31463411b5362231151b16d
SHA1 9008a1a65f737ecfabf5a02a2374a7af9abc3108
SHA512 a3a753ec0b001c1a547e450f508e591712ae1ea7980984a3788cfaa0938d29ce4480971fd412f4df5b7899117dd2cab8a356a41a4b4ab59fdf718fcf043c807c
TLSH
T19721375C39F94DAAA89AE29C74A0038F53914E0708C71C474D42DE8DCCD5EE9326A838
MD5 SHA1 SHA512 TLSH

Submit Download

18fcb55f-c936-4e94-af56-9573b5c26054

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\18fcb55f-c936-4e94-af56-9573b5c26054
Size 235B
SHA256 2acb458fa66b95a6b377c0506d9c4966c14dff4662b17825623393a483f08d46
MD5 e98cad6d8cbcc7a4a710b6ce92bc5474
SHA1 dbe5d4089d41e21d9ebe07a9bbb25e2ce44379e8
SHA512 94f8581b5cb15a0528c123ba581b5d0c8ea019b3693e71df61eb35e4a690dd6891c057d8475fd5400acc108b7add4c7579c85884ebac8c333e969b4564ac3419
TLSH
T1D0D0978014A8A3BD081A0F0BF0A07AC630454C3320799C20DAE001B4EBBCECC0162C57
MD5 SHA1 SHA512 TLSH

Submit Download

1a437a15-9530-46a9-8203-c501b2e73418

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\1a437a15-9530-46a9-8203-c501b2e73418
Size 16KB
SHA256 3bec3a7831a40d2962bb18916fb12b4486f80b93a7033cf220951edd82220925
MD5 10dc3bbd8248b15f186f905798e49650
SHA1 985fed2c8e41b92a05ee3640048e6c48c3d92815
SHA512 8b599be2d959764723e5750db7a1e728d274b386b2445406147b0be267a76ebde12c079f0470a9b573812410ec97c3ac4088aa0602a89560c8ea736e2e7a9c7d
SSDEEP 192:ctAUgB6ytYNlURlTkYnR7elFd+hDL2L7KFHKPM9ZLFCe11XgDMABHDJXhPtYdB7H:cIB6ytYbfBPMtCyXqPJqdB7kclybY3
TLSH
T16772DA56682049BB8691E35994FC7FC3E5F538CB4C429FC99BE0BD092DDE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

416c9c81-d942-4645-bc1b-3d06b15be55d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\416c9c81-d942-4645-bc1b-3d06b15be55d
Size 235B
SHA256 b2d8343194dd15880f5e6e0d86c36c7966cc461e287ab553518056225b00b885
MD5 7db7d7741f9274b187e6cd6a3741337e
SHA1 8af24422d4ce616ce0d59f1cae053a703e0299a6
SHA512 c7e404416fa72a95cfa4c3132c63a8fc415be1d039bfd728a2ada91ddb54243593573fe8345d2b65523ab480172997e35ee8d8f8a430fe438c2e8bcb7a82a65e
TLSH
T186D097C0149863AE0C240F0AB0A078C230488CB3107498209A6012F8AEBDEE88216817
MD5 SHA1 SHA512 TLSH

Submit Download

60032a85-2bb1-40c6-8c58-754387deeb75

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\60032a85-2bb1-40c6-8c58-754387deeb75
Size 883B
SHA256 9825fd176dd391bd108c020d38815ce73f02493f24115725852260369f3ce796
MD5 5f268086bafb5d471c115622d60e801e
SHA1 d12f309168fadee9ddf79aec1ddc2be66d4cac82
SHA512 d7f63c54c9a8dd033b091a1b64008f67085099229ff1a58b83432a2486b7410d1b76c52fadf5f96b41c486c1a2cb6676eb08a159ca1e45ed88b7d25f1271691c
TLSH
T1E911C054963A7AB28D7C924BC4953B128FF43523C0CB48043EB15E140D7B66E936A747
MD5 SHA1 SHA512 TLSH

Submit Download

70f1d7ff-f546-4314-ab4c-759ffa818bc2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\70f1d7ff-f546-4314-ab4c-759ffa818bc2
Size 4KB
SHA256 68d97c4df8bafa9c8e3142b212169c4ed250fed3d97b98d95464ca7a9a617397
MD5 b2b50ad5b33307b8b96a9f730cc0773e
SHA1 f8d98ff2598a4cde95ff3850c22582f34bdea90c
SHA512 8acf6fa8eb07ffc90b5c3e4c011261176b5b7093c6cbb152bed63973539ff773c9dfa0a89d4d0df984dcfeb622eefcc0567c905eaddbbc540d3a95053fdde93e
SSDEEP 48:lUqNJiZyJdpfK69berL/AuJEKT6hyV7H4cq3gH23bSZT313NMFXp:JNGSdcPJF+yV7HLOC2LG1dMD
TLSH
T16E91411C667A5CBE6CA7E19DE447038E47C4474398C21CCB9CD6DD4C8C8B65E226F93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c990dd76-a59d-4e90-80e1-6e6391d2b0af

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\c990dd76-a59d-4e90-80e1-6e6391d2b0af
Size 2KB
SHA256 e486bbb79a364d19ffad9c0416a22400b760746b52f167fb0c6b2aac25ff38a1
MD5 05669f2434ecf6b139bc4641258714e6
SHA1 28a1289c3846c17845ee56dff73d27bfcf40ba24
SHA512 2b76d5b9bbb0ed20130181f8bb4f24e5bc36639f4e3c86fb28c4b75d35ff7f368651dc71b898fb89771768be8d10c7dd5aa36dd889613960072ca8715f93dba5
TLSH
T1D341FE5C39784D7A9C9BE55EE492374E57A08A03408719432E51DE0CCC96BEE736A42B
MD5 SHA1 SHA512 TLSH

Submit Download

ee39635c-4017-4f73-ac5d-910281dc9e23

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\ee39635c-4017-4f73-ac5d-910281dc9e23
Size 897B
SHA256 c3e8ef43c3414f7052cb974a22522cb224472f7746f5eaae52917fa8b0fe459e
MD5 f4d0217c2422304ecd6185d556651d5e
SHA1 f36b555af88226c956f77dbe088f83c0749579be
SHA512 a7c121030ae4c5b542c60f94cd6068ac5c659a4147abfd79375b0b495b6b50d51f159012a9acf9e74e5476798666a8ef92195af96c1a38c9b5b70b1f4e2db78a
TLSH
T1A21100A9CA39B5B28C3C928BC5D53B524FF53027D0CA0D143E605E190DAB67FA76630B
MD5 SHA1 SHA512 TLSH

Submit Download

f0c5c4e3-9b28-4d64-8ac4-b8d5e8ccd918

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\f0c5c4e3-9b28-4d64-8ac4-b8d5e8ccd918
Size 235B
SHA256 0bb4e8817a2084a82fc6a330e032081451161cabfa82b7b27125184eb3afdaca
MD5 796e782893f5c5ca254cb50482001ead
SHA1 f9a2204d059df084daec89dc43c64d2a99db60a9
SHA512 fc88f8216e02da4b068511ed5cb73846a09108fab87c5d3a64e1317c249999c5c292b049b578ba8403d2e7fbb85eca7bbe138802b14b65c1bc4b3e7e59b50894
TLSH
T181D097C018A8A71C4D084F07B4E269C7318A8C332C74ACA08AA184B88ABDAC8435380A
MD5 SHA1 SHA512 TLSH

Submit Download

f25ac85c-ae29-420e-8967-143d5cc9f46f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\datareporting\glean\pending_pings\f25ac85c-ae29-420e-8967-143d5cc9f46f
Size 886B
SHA256 2ac40d5a80aa3e2ea515589f99b39a5b5e679118457615e864d7144c464cd326
MD5 b2ff0c2e0110d9ab41614bdc3481996b
SHA1 391e8ec974b26cb0d7f02e74fd4571c27de9e24c
SHA512 2465b68a4af677cc734734b6c3dfe8dae4679d1df64c446a6941398399779af0e5c069afaa11f6f040ee9e7333a48f3968f216b7b0308662aa2fce77f0c3c8b1
TLSH
T13B1100548A2979B38CBCD29BC4E57B524FE43523C0CA0E047E605A180EAB57F6367307
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 c7baab1cd8662625bc822a3c3c7b57973b927cd5c26192d6cda60ed9ecc0ed07
MD5 7231237395096e88196ba0ffd7ac0ac6
SHA1 d303ddfed1d4341f30ed79abbc23ce51f651bd35
SHA512 6220c9908bfa889f1db84625dc214127ee76c40c97a0d2b81df251253d4a8cc7ba6387d94f751a8f092850ce8a86d5c7e0d7938b85ef763813c4ab4a0834055c
SSDEEP 12:DBl/ATMbUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLbbv5XvtQhP8W5/b
TLSH
T1A6A32B1F1B1CB840D4C356F26D8329067634D50B8913BEF03B9D84004F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\extensions.json
Size 16KB
SHA256 eb55f970a4c969d8908e5ef238ef4d0406311f1429889fec3acaac3e92f45d5b
MD5 fdb6d102675e60ccee344c705d80a960
SHA1 942e5f74aea69937b8bb177b451131d1828e8390
SHA512 49f80a9c5fb9de490aefccaab38132c9ff18ea3a0dd973c686330a03bd364e25e96390c2551fef62914cfd6752c550c5aa0241c2fc93911f79c93642fab19889
SSDEEP 384:skI4vGUmldvU8dhW694zI96ohL4H5L4PPL4H1L4HDL4HuL4hy:jI4ORfNXr4o6q4R474V4P4k4U
TLSH
T12F72421545048EB8298F979AAA367E02C37D473B60845C78F4DD8FC842FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs-1.js
Size 12KB
SHA256 53dcfc4a514cce7b9de43ec79dcfdee3b8394ee8f36d9cc847c58e2d8e3cfd7f
MD5 0aec7784dfad049aaa4ee57dd2800635
SHA1 6e518d6d8c2f8e845fa706fbdfb1a747063f97aa
SHA512 bb54f7a8ab3754d778628b721ad897e1f7d9421b38ad176a6c693ba67220940acf9ac025c9076d574e37fd1b111776746ec8fd5bbf35dd156f8f5cf08fb8a33c
SSDEEP 192:NmCRwfLgoDiSSGITLRg2D4PmBw88fJ4JOzl0:ELiRS8wxVK
TLSH
T1FF42CF3C51458B7F24B2357D6C294AB129610137BAFFBCD645F98892089CF2841F6AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs-1.js
Size 12KB
SHA256 d8459b5226e10d39617da61d37eb24ec124313083ba974e3e8d09e6fccaeac7a
MD5 2ce788a8514976b61236ec8d593c4e17
SHA1 2b8eb2cf578db52c3ce6348b970ebf83366ba932
SHA512 57c20adfc8345c5ab37cfe5a4cd5d5307a00ab029e36002631ec15da3a9c9634925ea2a4224d3eb09f1eb4ab40686ee92047e01b4adc5464214d248f0b49c8b5
SSDEEP 192:N+RwfLgoDiSSGITLRg2D4PmBw88fJ4JOzlR:jLiRS8wxVb
TLSH
T11242CF3C51458B7F24B2357D6C294AB129610137BAFFBCD645F98892088CF2841F6AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs-1.js
Size 11KB
SHA256 9dadbbdd2cc1b67f0c61218f8354f9af4e3d46c7ad0c7006874ca46d517acefa
MD5 45700b2433ea25aa5a1fc46885c30328
SHA1 633c8c751d0862a7a0bd9b014db8cfe70d3b7365
SHA512 ab4db23601b91a07a1980cd8f3609b3fb0ba300d8508a805af5304a2a6ae618538f55a1f75a1e6eb6c474e5b5719b0692342d712c7f61611ee1b893937969b86
SSDEEP 192:N+RwfLgokiSSGITLRg2D4PmBw88fJ4JOzlR:jGiRS8wxVb
TLSH
T11142CE3C51418B7F24B2357DAC294AB129610127BAFFBCD645F98892088CF2841F6AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs-1.js
Size 6KB
SHA256 4f679892c0c1945e7dbfec9181c0337b67384e4fb8c7d9f3b3dd2a21fa69c832
MD5 41a41f090d7e95af84ccbbeda9551c2a
SHA1 71c26bef19292d8d7c862595e20432a5e8528921
SHA512 22573e292810f4a6bb647ec6a4c95cf4b2dc6bd506db56e0b8cec2bd1ded49388c430e2174e65e1bb8d35a4809963137895b5aa811f37228a813e63f32707a5c
SSDEEP 96:xHDUTU0qGqwfCjgo1zS6dSSl8pdv9jmn1lHQ25YAp+Bw88n8L4cnMV81t:NXRwfCjgobdSSGmZQ2DEBw88lyv
TLSH
T1FDE130789408CB7F64B6776CAC688D316AB2013BB7BF68C750B94484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs.js
Size 8KB
SHA256 3225be35f41c7ab425fc5cee93ce40062dab8f9eb8896181bc7951ba7149c300
MD5 91366ab805d7227ad4c46bd5cdf411ef
SHA1 807ff2bc2013786fe06e88779d45ca793c713c5e
SHA512 12eda2233e44eb41e736aa38e3e7e0e97ff4f8d5dee6fe5e99558719a66a41c4b77c805993b2dd960167b2fd2844dab9ec49516d0e6c3983b01029394e2649b4
SSDEEP 96:xHD5TU0qGqwfLgoObzS6dSSl8pdv9jmn1lWRTM25YApRBw88C0M8L4cnMV81t:N+RwfLgo0dSSGmQRg2DDBw88Syv
TLSH
T15002FF7C5004CB7F78B2766CAC688E715A72013BBABF68C650B94485054CF3841F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs.js
Size 11KB
SHA256 52f7c2a521cb71a23975ce5c79b6d4ce5b3ef58ebf1e074197b9903b4af91f48
MD5 4b4d70a9f3f6f0d421d3cb8ea2660bf9
SHA1 bbfb853d3fc84fec3b38cb307819758ba36716aa
SHA512 71b98ca78bdf3538f6589271d27aaaa09caff6159f8a7baff0d60885ba2d288c4cb5f8f1b0fbfa2251ea7649cae535799cd6bc5a43a3e793848aa10a8bb25ed3
SSDEEP 192:N+RwfLgo0dSSGmTLRg2D4PmBw88fJ4JOzlS:jzARS8wxV0
TLSH
T1AF42BE3C51458B7F24B2357DAC294AB129614137BAFFBCD645F98882089CF2841F6AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs.js
Size 6KB
SHA256 5177f795ad8b33dbee0788f4fb608a97a9248dc9abede1a22b64d755b85e32ff
MD5 52a08e750197e17242b6ea2abaa7a858
SHA1 fa92258cf9725cad555d10ec618708fd1c2ffaa5
SHA512 89252d4a3c82a48584d616ea791dbe362ec1b6f0c3b984fb8119c8bf2256f58286c0cc7817d2c19368b24b895afb427ca2a675492119f9204f2dba2a3ed1cc81
SSDEEP 96:xHDUTU0qGqwfCjgoObzS6dSSl8pdv9jmn1lHQ25YAp+Bw88n8L4cnMV81t:NXRwfCjgo0dSSGmZQ2DEBw88lyv
TLSH
T136E131789508CB7F64B6776CAC6889316AB2013BB7BF68C750B544C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\prefs.js
Size 6KB
SHA256 da83850ebb1c167351a39a0f48687542ca79f1bcf8d5143433f8b228937674bb
MD5 27a77fba491ff2a84ad40c00602e94a9
SHA1 27c7abba1492efb5bf85a38384142181799ffb21
SHA512 c08c2c79b90c1b1c966a13b7b6c6f4bfcffd359ee63814945c7b4d61527ba52fd809f91e4757ad59ed9a8ce6d02f2497cd3185e363bc3a9453fe4566c1f0d73f
SSDEEP 96:xHDUTU0qGqwfCjKjGnj81zS6dSSl8pdv9jCn1lHQ25YAp+Bw88n8L4cnMV81t:NXRwfCjFgbdSSGaZQ2DEBw88lyv
TLSH
T191E131785408CB7F64B6776CAC688D716AB2413BB7BF68C750B94484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\protections.sqlite
Size 64KB
SHA256 f47973dd13805200a469d534a0ec50e224f0c12ae77d93a0e5bcc267af19c145
MD5 63b6f9d979a2cd96d93c105805cafcfc
SHA1 5fc70ce8799617202d1b2a350f6d596b65d48e54
SHA512 ca475720928bd40abab686efb8b890fdccef59c292b26263d41bfd9dfe8f35d21405820e10505fa7cff49eea5ae57ffdbd6ca73d5cf6e1cfe67f5994d2823b90
SSDEEP 6:ltBl/l4/WN1dR4BEJYqWvLue3FMOrMZ0l:DBl/WunddfJiFxMZO
TLSH
T1BF53225E47387021C0891372ABD323923F3CD2FA93232E836A100C358C0A023B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\sessionCheckpoints.json.tmp
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 94527d27835060ca2b50bb342144b73205046aa5c42a14d20e9449f59901613b
MD5 820240d1e79fea4d3ffb8a11facbd948
SHA1 985748bf8f77f786b553abae6e1c1efa16c04c7b
SHA512 9a2b4379db97fc5ea6311c774f7ae4c78f7dbefa0d33679f0e497dfc570553fee91ef70108a45ca8c918f9c7e3a7eebbf810ba44ab5a06a383c89e9bdf2f6f9c
TLSH
T12F21C657D86B0EF17AB09155C0C84FB6C71430328D6858F040AD8E8A71DD74D73C651E
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\sessionstore.jsonlz4
Size 945B
SHA256 f9ee92c2b8d4b3254c274aebdefabf9050b182d6abe87f3de73c40fdb283b18e
MD5 73745fea0cd1ffdd3ddaad0c204645be
SHA1 6623b5d368a93f37b045fe8fcb0e2d110f25d240
SHA512 bc370d606204fbe66a9a631771343cd221c4db163072e23900448c1ff4db1be96500df62f377375025df4b021e637bfc2876edcb3d63143b0d82107c92310c8c
TLSH
T16D1154C2B90A58A297A6905F90859FAF47C9202645BE14A09219BE01599828E359F94E
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 3b4d695a9dbc5096856d33a4748efdab01abc37aeefde4dad433219ef662a6f5
MD5 a04d1244b06b2f04b48512ae46252199
SHA1 cb743e95ffff8a6f35e2850914c1e0da9c44cf8b
SHA512 7fffc47ef19b816539bb3be5432db824bb7ee7fc509bae3447f705212c372543ad0d31b5468738770647886b2029b39fcd015f155f4d584b9f029b15655d562f
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBR:Oa16S6CKnqlizbxV+2xVeU7X2B0mKR
TLSH
T10323708E3F07E511C53AF0B178A08D51BC5E321D072226D669D0DAE4C8F215AEA5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 62af930697ffbd6a37c051a6d3a3af2021d62d8a4285ae6242ab5b0d0b485f46
MD5 609b75252676f25f5a8db84cf4f3be4a
SHA1 f681a7e6776cdd63f6661ec3a58334155143a0fd
SHA512 34d6ae4a6646dcaf0e5304f491b9e3d31b84e0220b87dade36037244ed3757b4ceb216a0e7df7f7fa842dfde16403a6f2208d4061d5301ab6748546ab14f93b5
SSDEEP 49152:nOkIRVaAIoW8zN6wlJeQolxRRue52efjS92kzUjYqrslLxOin0pMdQ9JvTc60XOL:RKYbclXO/PPokjU2
TLSH
T1A5565CE420E29252F38544B3719A53FB10EFC01C6076CE44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 f9229a8f99aabc7d66aa16e130174894a5bdf3ce50fa2dffa2dc7df7bb347c54
MD5 85977c95631841e6caf91c36d95ffd9f
SHA1 8a482ebf6f1d08e9678c49135c65d98d90aadef4
SHA512 e8aa4102d972d4addcc1fe8fd038ec3732f1a4f7b28e258d1e3b449302d2429603d7257ec87b9f4f3e58df264df6b61cf0eb8bf0aacd1e18f3c496c60cf56d9d
SSDEEP 49152:UOkIRVaAIoW8zN6wlJeQolxRRue52efjP92kzUjYqrslLxOin0ptdQ9JMTc60XO9:97YoclXO/iPokImY
TLSH
T185565CE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\unfswcr7.default-release\xulstore.json
Size 138B
SHA256 81ef165ad53b66d069fb647f3b801e9de87b7b09b37201943949ceba3e65bbea
MD5 20b352ea9514cb02dfaa2afcefa0b948
SHA1 16f12babd94531ff9bf0c6948065b40cc4558f0f
SHA512 2347fe24e07468c2d68f23d9c80aa1d1ddc29a066137acdb352930bf663202738f01548aecf9235a6cedae547340a9ffad60157a61d09889d152f4b09070059c
TLSH
T179C02BB0215FD8487F178FCF024D23843D2A851091C011A679C214E0008530F4C18308
MD5 SHA1 SHA512 TLSH

Submit Download

TLauncher-Installer-1.9.5.1.exe

Path C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
Size 25.5MB
SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
MD5 de90bdf89be7e8f55b9ea1e9f0a88613
SHA1 ea25984a475c95ad41abae25885db7b24514a7af
SHA512 42f6cc77ea8cd43d167236e81e4164da7c8030605d7d1759494f41f5b9b5dcdbaec3b4d901f1925f13d915756b52ec22927e1dc304e89fb7f9342b84c475d188
SSDEEP 786432:ytpZzp8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpTTuPKJBZlC39ORb
TLSH
T1014733357AA29072D772363496996339F77EAD70AB3802D322903D3C7E716C15A7C21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2140-2834-0x0000000001F70000-0x0000000001FE5000-memory.dmp

Download

memory/2140-2833-0x0000000000400000-0x0000000000420000-memory.dmp

Download

memory/3256-2904-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-3018-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2906-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2920-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2913-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2980-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2908-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2966-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2893-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2850-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3256-2948-0x0000025EED5F0000-0x0000025EED5F1000-memory.dmp

Download

memory/3856-2003-0x0000000000560000-0x0000000000B57000-memory.dmp

Download

memory/3856-1984-0x0000000000560000-0x0000000000B57000-memory.dmp

Download

memory/3856-2004-0x0000000000E00000-0x0000000000E75000-memory.dmp

Download

memory/4412-13-0x0000021294590000-0x0000021294800000-memory.dmp

Download

memory/4412-12-0x0000021292D40000-0x0000021292D48000-memory.dmp

Download

memory/4412-11-0x0000021292D60000-0x0000021292D61000-memory.dmp

Download

memory/4412-2-0x0000021294590000-0x0000021294800000-memory.dmp

Download

memory/4716-1947-0x0000000003450000-0x00000000034C5000-memory.dmp

Download

memory/4716-2849-0x0000000003450000-0x00000000034C5000-memory.dmp

Download

memory/5572-2005-0x0000000002B30000-0x0000000002BA5000-memory.dmp

Download

memory/5660-2848-0x0000000008310000-0x0000000008321000-memory.dmp

Download

memory/5660-2805-0x0000000008310000-0x0000000008321000-memory.dmp

Download

memory/5660-2802-0x0000000000BB0000-0x00000000011B1000-memory.dmp

Download

memory/5660-2847-0x000000000C260000-0x000000000C601000-memory.dmp

Download

memory/5660-2846-0x0000000000B00000-0x0000000000B75000-memory.dmp

Download

memory/5660-2839-0x0000000000BB0000-0x00000000011B1000-memory.dmp

Download

memory/5660-1954-0x0000000000BB0000-0x00000000011B1000-memory.dmp

Download

memory/5660-1952-0x0000000000BB0000-0x00000000011B1000-memory.dmp

Download

memory/5660-1953-0x0000000000B00000-0x0000000000B75000-memory.dmp

Download

memory/5660-2804-0x000000000C260000-0x000000000C601000-memory.dmp

Download

memory/5660-1373-0x0000000000BB0000-0x00000000011B1000-memory.dmp

Download