2f660620d2b7277ef3180f8429e35afa7884f1945b73662aa1a38ec3258ea4c3

Analysis

user interaction
yes
max time kernel
78s
max time network
77s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 01:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Retev.php.html.exe
Size 276KB
Sample260508-bee7rscv2w
SHA256 2f660620d2b7277ef3180f8429e35afa7884f1945b73662aa1a38ec3258ea4c3
MD5 1fe91af4eedac6208e1e2a1046962771
SHA1 4340beb5b7a15e9d1d8b1548f98454de49f0f958
SHA512 54a3fd8f9001d0ad240ec541274130c57eb4bea9c4bacb799daeab0fc587a29aa081e473c974b0bc94c575dde5bba6e8a146d92803fb61e9d337d622358f5df2
SSDEEP 3072:/COlajPxi/CVpWD+Xc1q1pgpmegV1w6DHz6J1jab6UdJPU:/3a3Vpasc1qfQmbV1X6JOTdJP
TLSH
T1F4548369EF48AC5AD8F7A8FB3C012A3ED0D0546787F179E684C2097D5A0889F17F6D90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 46 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	4620	firefox.exe
Token: SeDebugPrivilege	4620	firefox.exe
Token: SeDebugPrivilege	5008	firefox.exe
Token: SeDebugPrivilege	5008	firefox.exe

Suspicious use of FindShellTrayWindow 18 IoCs

pid	Process
4620	firefox.exe
4620	firefox.exe
4620	firefox.exe
4620	firefox.exe
4620	firefox.exe
4620	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
4620	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 924 wrote to memory of 4620	924	firefox.exe	84
PID 924 wrote to memory of 4620	924	firefox.exe	84
PID 4620 wrote to memory of 4832	4620	firefox.exe	85
PID 4620 wrote to memory of 4832	4620	firefox.exe	85
PID 4620 wrote to memory of 4832	4620	firefox.exe	85
PID 4620 wrote to memory of 4552	4620	firefox.exe	86
PID 4620 wrote to memory of 4552	4620	firefox.exe	86
PID 4620 wrote to memory of 4552	4620	firefox.exe	86
PID 4620 wrote to memory of 4552	4620	firefox.exe	86
PID 4620 wrote to memory of 4864	4620	firefox.exe	87
PID 4620 wrote to memory of 4864	4620	firefox.exe	87
PID 4620 wrote to memory of 4864	4620	firefox.exe	87
PID 4620 wrote to memory of 4864	4620	firefox.exe	87
PID 4620 wrote to memory of 2628	4620	firefox.exe	88
PID 4620 wrote to memory of 2628	4620	firefox.exe	88
PID 4620 wrote to memory of 2628	4620	firefox.exe	88
PID 4620 wrote to memory of 4360	4620	firefox.exe	89
PID 4620 wrote to memory of 4360	4620	firefox.exe	89
PID 4620 wrote to memory of 4360	4620	firefox.exe	89
PID 4620 wrote to memory of 4360	4620	firefox.exe	89
PID 4620 wrote to memory of 1676	4620	firefox.exe	90
PID 4620 wrote to memory of 1676	4620	firefox.exe	90
PID 4620 wrote to memory of 1676	4620	firefox.exe	90
PID 4620 wrote to memory of 1676	4620	firefox.exe	90
PID 4620 wrote to memory of 720	4620	firefox.exe	91
PID 4620 wrote to memory of 720	4620	firefox.exe	91
PID 4620 wrote to memory of 720	4620	firefox.exe	91
PID 4620 wrote to memory of 720	4620	firefox.exe	91
PID 4620 wrote to memory of 1964	4620	firefox.exe	92
PID 4620 wrote to memory of 1964	4620	firefox.exe	92
PID 4620 wrote to memory of 1964	4620	firefox.exe	92
PID 4620 wrote to memory of 1964	4620	firefox.exe	92
PID 4620 wrote to memory of 4676	4620	firefox.exe	93
PID 4620 wrote to memory of 4676	4620	firefox.exe	93
PID 4620 wrote to memory of 4676	4620	firefox.exe	93
PID 4620 wrote to memory of 4676	4620	firefox.exe	93
PID 4620 wrote to memory of 1744	4620	firefox.exe	94
PID 1744 wrote to memory of 5008	1744	firefox.exe	95
PID 1744 wrote to memory of 5008	1744	firefox.exe	95
PID 5008 wrote to memory of 2704	5008	firefox.exe	96
PID 5008 wrote to memory of 2704	5008	firefox.exe	96
PID 5008 wrote to memory of 2704	5008	firefox.exe	96
PID 5008 wrote to memory of 1652	5008	firefox.exe	97
PID 5008 wrote to memory of 1652	5008	firefox.exe	97
PID 5008 wrote to memory of 1652	5008	firefox.exe	97
PID 5008 wrote to memory of 1652	5008	firefox.exe	97
PID 5008 wrote to memory of 72	5008	firefox.exe	99
PID 5008 wrote to memory of 72	5008	firefox.exe	99
PID 5008 wrote to memory of 72	5008	firefox.exe	99
PID 5008 wrote to memory of 72	5008	firefox.exe	99
PID 5008 wrote to memory of 3900	5008	firefox.exe	100
PID 5008 wrote to memory of 3900	5008	firefox.exe	100
PID 5008 wrote to memory of 3900	5008	firefox.exe	100
PID 5008 wrote to memory of 1748	5008	firefox.exe	101
PID 5008 wrote to memory of 1748	5008	firefox.exe	101
PID 5008 wrote to memory of 1748	5008	firefox.exe	101
PID 5008 wrote to memory of 1748	5008	firefox.exe	101
PID 5008 wrote to memory of 4820	5008	firefox.exe	102
PID 5008 wrote to memory of 4820	5008	firefox.exe	102
PID 5008 wrote to memory of 4820	5008	firefox.exe	102
PID 5008 wrote to memory of 4820	5008	firefox.exe	102
PID 5008 wrote to memory of 1688	5008	firefox.exe	103
PID 5008 wrote to memory of 1688	5008	firefox.exe	103
PID 5008 wrote to memory of 1688	5008	firefox.exe	103

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Retev.php.html.exe
"C:\Users\Admin\AppData\Local\Temp\Retev.php.html.exe"
1⤵
PID:3116

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:924
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 27097 -prefMapHandle 1956 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {58d4c1e7-a4e2-4670-bd06-8d3bee3f5665} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2408 -prefsLen 27133 -prefMapHandle 2412 -prefMapSize 270279 -ipcHandle 2420 -initialChannelId {aa66c58e-29ac-4051-b833-f004b39019ce} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3744 -prefsLen 27274 -prefMapHandle 3748 -prefMapSize 270279 -jsInitHandle 3752 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3760 -initialChannelId {8be9c650-c1b5-4d74-9532-31fa04f35aa4} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3908 -prefsLen 27274 -prefMapHandle 3912 -prefMapSize 270279 -ipcHandle 4000 -initialChannelId {d02b7835-0241-4b20-ac26-d0ee223281fd} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4516 -prefsLen 34773 -prefMapHandle 4520 -prefMapSize 270279 -jsInitHandle 4524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4528 -initialChannelId {7d8b9c2b-896c-430c-961a-5355b66b4edf} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4360
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2580 -prefsLen 35010 -prefMapHandle 2752 -prefMapSize 270279 -ipcHandle 4996 -initialChannelId {da335cd6-ee10-47fb-b4b4-7c212717e1e3} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:1676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5256 -prefsLen 32952 -prefMapHandle 5260 -prefMapSize 270279 -jsInitHandle 5264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {1f2794a7-c166-49dd-a2b0-55a5489c3394} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:720
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5480 -prefsLen 32952 -prefMapHandle 5484 -prefMapSize 270279 -jsInitHandle 5488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5260 -initialChannelId {a6c2e049-39f5-4708-8522-0e7333617b93} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1964
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760 -prefsLen 32952 -prefMapHandle 5764 -prefMapSize 270279 -jsInitHandle 5768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5776 -initialChannelId {1aa8f6ac-7b1e-44ee-8887-cce52874aa5b} -parentPid 4620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1744
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:5008
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1916 -prefsLen 23514 -prefMapHandle 1920 -prefMapSize 266331 -ipcHandle 1984 -initialChannelId {ae8a3378-d764-41a9-b6ed-a4963edf963a} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        5⤵
        
        PID:2704
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2192 -prefsLen 23514 -prefMapHandle 2232 -prefMapSize 266331 -ipcHandle 2240 -initialChannelId {cb1cae5a-7173-401c-8a6d-b2b2bc7c7e6b} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
        5⤵
        Checks processor information in registry
        
        PID:1652
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3968 -prefsLen 29168 -prefMapHandle 3972 -prefMapSize 266331 -jsInitHandle 3976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3996 -initialChannelId {191f64af-9609-48dd-9089-fed42ead5094} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
        5⤵
        Checks processor information in registry
        
        PID:72
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4176 -prefsLen 30068 -prefMapHandle 4180 -prefMapSize 266331 -ipcHandle 4200 -initialChannelId {a4ea7e99-e176-4462-9877-40ca3715c361} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
        5⤵
        
        PID:3900
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4508 -prefsLen 30178 -prefMapHandle 4512 -prefMapSize 266331 -jsInitHandle 4516 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4524 -initialChannelId {e14ec26a-18e7-4b3f-8b82-0d8b7b3936d7} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
        5⤵
        Checks processor information in registry
        
        PID:1748
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4740 -prefsLen 30480 -prefMapHandle 4744 -prefMapSize 266331 -jsInitHandle 4748 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4752 -initialChannelId {ee0ff1e9-ce48-4ed2-9a24-be5cbc40139f} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
        5⤵
        Checks processor information in registry
        
        PID:4820
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2984 -prefsLen 40126 -prefMapHandle 2568 -prefMapSize 266331 -ipcHandle 2756 -initialChannelId {134e040a-5ebc-4a7d-b9d8-1eedae5a0949} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
        5⤵
        Checks processor information in registry
        
        PID:1688
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3216 -prefsLen 38987 -prefMapHandle 3212 -prefMapSize 266331 -jsInitHandle 3932 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4164 -initialChannelId {0ac821e8-80ec-410f-83ca-5f4b6bdf5f24} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
        5⤵
        Checks processor information in registry
        
        PID:2884
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2712 -prefsLen 38987 -prefMapHandle 2684 -prefMapSize 266331 -jsInitHandle 3076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4044 -initialChannelId {da3f33d9-9a87-4bcd-bde7-62a0549e6ab4} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
        5⤵
        Checks processor information in registry
        
        PID:2920
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3996 -prefsLen 38987 -prefMapHandle 4976 -prefMapSize 266331 -jsInitHandle 4972 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5992 -initialChannelId {667ff76b-5960-4971-97bc-047ee576eb07} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
        5⤵
        Checks processor information in registry
        
        PID:988

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update-config.json

Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json
Size 102B
SHA256 ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda
MD5 7d1d7e1db5d8d862de24415d9ec9aca4
SHA1 f4cdc5511c299005e775dc602e611b9c67a97c78
SHA512 1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477
TLSH
T12BB012800100B658F0FC4CCC05303B3E0248402D44CF3903004D30A0787B0020A094FE
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\activity-stream.contile.json
Size 4KB
SHA256 24019b6d240fd4762c3747c84dd554c8ef9e2549f318c3a0014d07878ebf7aaf
MD5 ff4dcbd4052db7193a0fee25849dbb44
SHA1 2fc6d538afd6f9d48a2010ffa1859bbc33069e58
SHA512 f41d006026118eac8ffa76f691b707c249f564dd4700f0386e8879c415dbd3e11d71a4f0652dfda1f874c30a91977cbaefc1e3b945b4fdbec31d097d44f89886
SSDEEP 96:KSjAtvbQ1VwoLdk8pVvXzlYRiT+mRcqHKYiccYn0ZKAY6DSBl:KPtvbQ1Xdk6Vvzl6mRcq5IKPwSBl
TLSH
T154A1199B9D6486D30361BAF63C1F27DCB207B1578EE9D849E5989C10E5A925340BE3C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 d42328a5bd2055e02458070c3cd741f0067ad04a4313e904e67c47b07fd5fe7c
MD5 b6c76ccfe9077621402137f9bf6a895e
SHA1 e61122669279939095223c050a0cc2524b617df2
SHA512 80b3add9c9ffa660cacf625a5f1f07574ee966d8373166a2e2da31d8738a80f42c2b2b2a269b28cdb20a1d46294f38d53784cdddeec344a75fee7c706a09d56e
SSDEEP 768:qy3mPRUOkzNt4uEryJ1IAisiOwVhjx/dFJycxfsZnbr8qXiuu3tQ3B0FzJ5vmqdJ:R3mPXkxMciAGVhHycU0qXiuu9QRiZJ
TLSH
T1C8731AA353E9B1FB1BA537C72C0B755B62E64145E38605C8FDEEC51C818CB94023B6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

255

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\doomed\255
Size 52B
SHA256 fb7759e01775eb09bd780db7be32efcb8855fe782af14ff2fbecaf52121787d8
MD5 120a7eae5261d582410127e41b1609a7
SHA1 9eb3ca4bb8e6ba7af74dfa5f47cc0413ede638e6
SHA512 5f2a4a145ab691f6f7d1dfbe992a4ac92d1e47840e7a07407dcc110d20f0c9015c7ce982063bddf6a021924d0caf41c8469e437ec39f243a586a98433be2bf22
TLSH
T1D290044C5351D501D415C0715C03D5F544333D1044D7475374C1575114515D30001041
MD5 SHA1 SHA512 TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 13KB
SHA256 7c57e7cb66403029261f8ed7d59a7c8e43a8645fd16f161de3e5fd9dc1f77ef0
MD5 c319cd2ac472a7743a5ac3df07cbc4d5
SHA1 d3f0241b1799361656a75f827da590e85a873e20
SHA512 f83dbc60b1f1f98c6d09c66e6dce381cf5115e16448cecd14df31efa53a371f6253c2af075b0ea98db334f5b9fb32d03bdea1fba8c9fccef7f46be4139856595
SSDEEP 384:pWvoiz8SHXE+AxAbJ2ePsac4j0lpDIIbwAJw:3mP3exAtsac4ID864
TLSH
T11352AEBB8F2110EB0B12C9F67C6D27C85D0972179FE9D6DD59943800C0883A9E4FE2C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98FDC406B52DFF91AF48652B4ABB147FEB91B60D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\98FDC406B52DFF91AF48652B4ABB147FEB91B60D
Size 13KB
SHA256 324fd6466a492c90b027e530118e2c1da4646b1fc523a205e9b11e0cc92468df
MD5 fc0f46322ad83c809551ad2dab7e5716
SHA1 b331afabadbc0fd97677e1d88be69513f1edd7df
SHA512 c4f51970363719b6b250d2bfab5a6e4b67780b88925a8cf8f37ab66ca6de09598bfbdf2dd2cf07ff37297d299176418d5d6f7441ffe956b8accf80e9e4ebe548
SSDEEP 384:HSvhbciO024YmFuhw+5EL1pPsac4j0lpDII+E5nnV1:yphZYmFuK+5EB9sac4ID8LU
TLSH
T161528E7EAF0238BE1A27D194DDA95218CE04D6BBEED2D05605443C45CA80779B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACC1F099CF120A607272682D356278EC5F987AEB

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\ACC1F099CF120A607272682D356278EC5F987AEB
Size 9KB
SHA256 9daf6fbbfd8de85532635efb302d43e3aa258378a4bff5f63420398a160719e5
MD5 c7d1ff94726bbe31e426980aaaae1c64
SHA1 f2edb2d3f39be75830bf5ad4403440699944d61f
SHA512 19c75ee4d22aeb0b8bc66fd3fc383b9ad5305b3ef096f4bcb82705d9ce476e697f5f7fa6d9fa975b6c49fb67e6cd5afaa621bd740b86efe64894c45dad4b616a
SSDEEP 192:V/y8ysK1cURPAeUPE+q8sPU9PsALkhbgHpPueig7AaX6b4qx1e0lpBNDIIjuykkX:VyaZPE+AxAbJ2ePsac4j0lpDIIjub4d
TLSH
T17C226DB89E0120794EA38C56AE9FA3C04D68B2179F91CBEC49543904CCC66F8F6F55D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 9KB
SHA256 c605c808cf6ca85d359f0863f1b57fb745273ff2070d7a760171093202b93633
MD5 18eeeb5c9481d39ad2b00a8ca24235e8
SHA1 061b5c0688f62a445f52e66e6728cebe11ea45bf
SHA512 c8cfd705998d1ab64bfa027a13abecc21b7a24ae4facbb1e846a2419eca724f10bf955bfbac12a9188e712e9532750a8c1e92033260df8de5edab287163f2db8
SSDEEP 192:WSDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLCdWbkk35vdWbkk35q:WSDZAR9eYa9EHDEclrIVy8eLeWx5FWxk
TLSH
T16B226BB59F40180E2EF2E2A39CEC45191C55EB13EFD6B2FE1508250896C2BA9F9F95C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C91C508F4FCDB21E97A93EB6975EC9A6882A5E42

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\C91C508F4FCDB21E97A93EB6975EC9A6882A5E42
Size 97KB
SHA256 527430d397aece904cf7f5a9a7295b2d35538fc8465c8ed938fc8493b63c8308
MD5 3b13a48e048a12a7cebe3fd750db9463
SHA1 638afce63b385366bd999f840e409e91764b5be3
SHA512 b599a8a379337e7ba85fea22c31e76d16775f7dae8289908dc7850f26515fa148873eb3fb8f6406adb20940a0efcb5c86eca9c0a9e00685381b16b2881adea04
SSDEEP 1536:pabrXkkJJQxmhSp8lsJMEv7MmYs4jp9nffQ6kekek4IoUZ:pa8kE7zz4jp9ng67RIoUZ
TLSH
T15CA35A675AC91A77079773C42C0F7C9B0FBB0593EBE9C695A9DDC90980D3C98523E222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 242KB
SHA256 20f5e76f6aedcfa99e7120cd667abb285a5a318372ea1c1eda06ade6ac4f5a6a
MD5 8610074ca3b2096ff22dfc612a4652bd
SHA1 a3e342dfb414f57067a9564cd441cc13bb2b4a81
SHA512 187ec255ca1dff117e25f6edae95e6af3232d8dc0235c94b6f56093eb52ab7128ff42951eb57de2e3bd83e705c9eae9e260a6f13e2a1ba8a33491df6cf51c875
SSDEEP 1536:+bYCYPs+9ZnCFkLkAkgSPrIAVOAVtvkcI+ghVkpopcgX7P42zx5EeedsE0lo1akI:r9Zn2kLkAkzfmcPgrkdrhdsE0lo1aDRp
TLSH
T10334F7F3D6AC70FB075286DC6C1D72CF62AF8135DB5208DAFC698108D389EA5107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DE5F6CB1BD71958EB146CDD974763A3115937269

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\DE5F6CB1BD71958EB146CDD974763A3115937269
Size 10KB
SHA256 f3138e50cc978e63cbff2c08495e66e2313d7c7764c1c3dfa2a094f8afd2d6a0
MD5 cc773c10b67cc26fabd0202b07617cbe
SHA1 5fc3ae8ea2d3127c931a1d60c3bb8b10515a1fcc
SHA512 42d3f7e361f43760514b0445ca7616588d23d5bf63150dbf373f5d38225f5eaa54d7c98f3db1249f94dd156cc11883494fcf2014cbd45e0024ecd2090cd1e80c
SSDEEP 192:5b8zDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCCAvkd+kkUGAvkd+kkUq:5bMDZAR9eYa9EHDEclrIVy8eCAvUtGAP
TLSH
T16E228DB69F40281E2FF2F1939CED016A1C52E733EED2E1EE1508214996C57A9F8F95C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 9KB
SHA256 5bd52245b32073016f96227513df3b0294fcd9ad1150f5702e408f4e75f3fdbf
MD5 b5bdec0e7f4f2c748e0db21adedd5589
SHA1 8b20951b878a0173a9011fd3bc5ed116b069e570
SHA512 d7b16e75f067a0bf3eaa6b9dd3d8027c98405bcc5262ee3b99b4bdb657534a8d63eef192c7b568247055290284a530fb42272927eda47b2b875d28ec1c89b460
SSDEEP 192:ttwBDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCTwdsShX0KkYdso:bSDZAR9eYa9EHDEclrIVy8eTosSh0Uso
TLSH
T179227D769F502C1D2EF2E15789ED46591D51EB13DED2E2EE190C210882C0BA9F8EE1C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 a81bbfa4ea0bb3cbd48dba2ca2487bed247867f6c7868aa5765f870bd72f147e
MD5 7bebeff51ac7a7eb1ec721e9f88f80d0
SHA1 fda61b8de19e1a92e9e9c2f082370d692aba4ec1
SHA512 3886d34e64020310a3f81cf05871e953d5a01c33340858873e11189a0ccb14ddde2189c2fea0eebbe9bbb4d68582985ef14683ac521d47080304cfcf98635da2
SSDEEP 384:HHMO0iO024YYFuhw+5EL1pPsac4j0lpDII+sjDwXjDwz:nrZYYFuK+5EB9sac4ID8Ls4c
TLSH
T1EB527E7E6F1138BE1A27D1D4DDAA6218CE08E5BBEFE2D05215443C45C680778B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F6DB2CC802065A948266A380F89F5EB80BB1A349

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\cache2\entries\F6DB2CC802065A948266A380F89F5EB80BB1A349
Size 9KB
SHA256 97314b55c9526ac214de65fb9a05dd9a33fd1f2d88711cb54d7017edcff443ab
MD5 75afa9c33a994d15c780c153aeebf193
SHA1 27d3762b2248bee470c51604e395f40a053bca77
SHA512 9bd937775e7a00b9a16e5735fb38f8157d7597da65ea78574d3c624e26669c0ba1c42642f2ea7459e1d8cd43b1272f7679bc27218c2422d73b50d50eb9d49f23
SSDEEP 192:u+TMDZ4FbF9eYa9EWusY1/LQWEPfcPrJro15j75ywpskCLCdWbkkesWVdWbkkesK:dQDZAR9eYa9EHDEclrIVy8eLeWwsW3Wi
TLSH
T15F226CB69F10186D1FF2E1939DEC41191C51EB23EED2B1FE2508250896C1BADE8ED5C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\startupCache\scriptCache-child.bin
Size 471KB
SHA256 067c497c7ca834470e8ad826a0bfb7a786697d6eafc1141167e441b74a0e9009
MD5 9d9af615d1064548fd54820894429dbd
SHA1 6c297e3ba9c82e20979acb2375198e6457e262fa
SHA512 ec08f7760f920697eea95e2abd71d3ac634983b3f59fffcda08b35cb720e55c581c34410a0f68150d4c5db93c95165b3bde0a6de9803c830c5a13a49149b0235
SSDEEP 3072:DiO5Ho9UbaekRHeUwCbZ7jktcvFiTTBdtTapBCACi0uvjmHSTXHqZoNV4QWSW2SE:DFCUbu1hjktpJn2pmYXHqm4vSW2psu
TLSH
T1A4A47111EFA64E23C418037A44FB53313A31E14517EAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 5e994e902ac8a551f42160931f00894b371fcb459bb1ecbf43edbe316dc4799e
MD5 f124fee67395c8d5a3f67ff9a7b7eb2c
SHA1 ef147c0d4ff77c121f49f310bb0795aac8096c99
SHA512 28c750a658141622492c23a0c6396d7c9dadcb42af32a974bd42defbd99482a84c047e10cfa7c95b707d858afaa5d4d7394b6258915eca1c5e5b3290bfde3ed4
SSDEEP 49152:NNkVvxWNHhFDzwH6f8a5v8by38zYPHpJFVFwjdhCXfJDj/3UbSm:NsvIF/waf95PnRmSRs
TLSH
T1D5B68215EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\startupCache\startupCache.8.little
Size 8.3MB
SHA256 45029b78315a129660600349b1cd8bfdeeda2974e90ca2770d9fdd06a1e86616
MD5 b6ef5af21602b25d8e53692814d0863d
SHA1 4c54a547bee5dcfb87f0f8f959b1a10c0ea9d6d1
SHA512 cf5fdafef71292547a635c917da0acdd333853b15b38d3530164f898c2eaafc3ba3fb47ae0f108b4cd356421faeacda01adec825fd57a7e3496e1de1ca008240
SSDEEP 98304:Tr328lOheeNdVeqN3DVznQi6lwJ1YTngVVIKFGHSOR:/JlPkd35siuwPYD1FR
TLSH
T1499602B7B3590697C425191AE87A0A393763414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 8f37a754d3adb526d6945b050ba0111613c676e6704bc89d52c39d57f9a7a467
MD5 248e79163721a0154911bd632a309717
SHA1 dd85b6ac1c9497f429715ab5dfa7df8ad73f69d3
SHA512 3d830f78ea2ad3d068524f0c59be271254356fd57df57d7193b610a25db2d82f9fc7f2b19871ebd09de8d0e1e169fa223243ab48fedf0b7380c5a0288872d77a
TLSH
T1F161D492E43F203B7D62A8FB6D95C175B42009CED1CD20DDBA9663D4209E7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8bpv94fp.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 c235bc25cd382c258a16c1033ff47f6118db895ef8b0d51bfe8507e9c03c97c7
MD5 2a05b911e881d9f0ce982a2f4db67e83
SHA1 6b99dead38d4a7d1959f936331a504a4d109aed7
SHA512 729b153238982a8e59b89a51cb3224f74197f63271890baea15ec124ebdc249bd2018ba0ef7f0c942e32834904e5ded1d82697e2570b83e77904ad440a38255a
SSDEEP 3072:j3lBMjb0tiN1RsTpwx2AwkRwtWxqLqdA0:pB7tif21pA3wYuoF
TLSH
T18AB3AEF6DFA28A3D99FFD41C9B82C43EFD127400B3A32419C953675062C6FB86679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 34aa194f775fa56a1ba2acb6d2413231ef4151bd4cf66674915987fcbb8efec2
MD5 e07400828298c29c87a7833b39efe48b
SHA1 561618bcca27e762ffdf0bf273978cc8e21d9923
SHA512 da0218174a70d7049909fae5ccd5d99aa71a115f0ea39be3c2da5aac2bf0954c5376d54f4288b49e11adcfac05618f2c4995e54d16d2237d285d328f571fb154
SSDEEP 384:HHMO0iO024Y7Fuhw+5EL1pPsac4j0lpDII+sjDwwjDw9:nrZY7FuK+5EB9sac4ID8Lsfa
TLSH
T181528E7E6F1138BE1A27D1D4DDAA6218CE08E5BBEFE2D05216443C45C680778B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

asrouter.ftl

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Size 15KB
SHA256 7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
MD5 96c542dec016d9ec1ecc4dddfcbaac66
SHA1 6199f7648bb744efa58acf7b96fee85d938389e4
SHA512 cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
SSDEEP 192:63/CCBmqCIKJumwOGmnOq6b4b9C4GoTlbo2ofF9/cFnSPhxtj3tCiwwau13151iS:OuPngEG1xNUIzFnieWrc
TLSH
T1D162E8CEF48193585D6F920AEDC5B391FB27008C56693C6671AF608873B9529C03EBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 394KB
SHA256 c6f69ee81ebe59b6ff7a346084ac1340a436b5a5252d9a1eacebf04357d92581
MD5 d16a4e306b14eecb69a085380e8ce138
SHA1 f13582bc9db2941a85899c93366a430f97aa30ef
SHA512 5e13c2a9cca99dce91a6b6437e1ef7e66cef1e062bc2c3b2107cbc79cde1b930372dbfb224992de54be53b2a0aab705b1ee96f318dd3321aa5d03cbf2eaf6a6d
SSDEEP 12288:b0rxD5NCvFfszw3X+8btGtNwY/LSmNnxZ:4Fl8vFZn+yORLSmNr
TLSH
T1008401F5F3B038E7677E420BAE546FE987528C16C78F90DCA46B7781887BB285E46104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmp-s22.xpi

Path C:\Users\Admin\AppData\Local\Temp\tmp-s22.xpi
Size 78KB
SHA256 0609f82f931dad602c9386c47df60440422e70058f2556bdcb830967f6f0cff4
MD5 0b0c7efbd21a9bee05d7b14fcf7e94b9
SHA1 760c3a673b23186f90cda7fb7f553a881816ebf4
SHA512 f4dd18ce0d4f616979746b88a083b93e8aa639b57f669dc070e5e5d81e9d3ac9abb4b830122e420e023d41a3aad4eaf0a9d469ae5db38af936e73b27c16b4e35
SSDEEP 1536:AzBpDEu7PbNmpv++BgHmBdShrRnFb0/lOWSfUkL6bg6o0WAHkhfBoc7sy0yFrD:gBEu7zNmIsgIShr8/Qog6bg6RWNlGc7z
TLSH
T1167302850AC2DEE4EED78F7180D275CD7239AC126E8B41236311ED6E05E9428B7617FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\AlternateServices.bin
Size 3KB
SHA256 35336bdae40f0963bbda8e23f6e3ff48bbe81f75ffa569edd0ce221b1d6ffa78
MD5 bc8b4638fae3210d314eafc5e3627c54
SHA1 96fed8698d5de24c52590c27e3c4fd80dfd55a59
SHA512 3d8539067d370e20c9aa8f34ce12484d2ba708830b77f7e2d80a76e83055b86e4e7e17be874fa0ea6a7a337785bdd91053799104178d1c12c73fe4a4125e70e2
TLSH
T164814CBB42B34038E6258BF8F82A61444D6B67D557F9544A3BB2B0621582D9EE0EC050
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 b9d1dd2c08675f67ead134b19d1a51b31649b5097b33939b72c78b87f60da0aa
MD5 3d1f742411904c41f5c1fe26654a84d3
SHA1 c0f15b50e97f5dc3947eb2e75808a279014ca546
SHA512 250318575d90479cb86b1bc8ba27fe715a05b05f544994a2588be64ed7c94f0c50e2ad752ce388d1e9bab9a54130ea0c261c5ef38fd535d9f17f3adc25922aee
TLSH
T1D5211273ECAECA35E1C54E35785F89641C5E338902A2FDF93E94C694308DF9D209C191
MD5 SHA1 SHA512 TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 07389aebeff04f1d370ad4b1c9fedb5811035f354bb6bf950a4631bcf14a88d8
MD5 1fd6bd348a985b76dee8f0051337ddc8
SHA1 32ea4768657064b3ae4c7ffa2aa8d4cbeb044afe
SHA512 05d81d1334e42cef9ec183c8c8db20721c286b8c1e2ba7da80322833d8488bd58de0d6eb458970d33acf5b525b74e249824b1a1b918b78548e2baa288dced5ce
SSDEEP 12:DBl/AWnQ8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLPQ8akrEDE+vED8YfAlO
TLSH
T160A3268F1A742691EDC521B1D7829EEEAA5EC32DCB17679216A040B69D4216015225B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\content-prefs.sqlite
Size 256KB
SHA256 cb094929393d9779bbb5cb44da04caf0b304b67509dc99e4f9b99b77539e19d2
MD5 be3c562ea7e8d1c8e68c790481914f4c
SHA1 dd66dd963beafa2bd4f9a4aa2acf615d95b35a61
SHA512 ddcd4ac6df0a5307fecba86a8ea44c74836c6425608ecfb4dbeed7b847a639c59f9ef326afb1bf0d98619368f0e2f7c88938c4eb175979090aebd3af556a748d
SSDEEP 24:DLSKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D2Wwae+QtMImelekKDa5
TLSH
T1644426174A917408C0B014B1D4636F22AF3D405B8933E7B23ABC183A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 9f7f5bc42d2f6b2b9b6d4aeea76ed3ed356a2a8acabfa24967fed48eba9c342b
MD5 1ecbb3dbc8631b80cab9745aa4516eb6
SHA1 4c501940ffe46c8be70ddc0a26da8cf62226dc33
SHA512 139efb8ebb1456448720ef9ec1ae75ff617a12fb89d7e9c127d9ccef965933bd699e6e33b5631747d0511a350b78aa621189c24a4cca1ff7e125bd8fcc7a3d71
SSDEEP 768:ZmnIIKsVqGcmhu8E9RMgvpES/brbmbZbMbXvLt:4IIKmE9/5
TLSH
T17CE21244EB2A913FD41512BBDCA50B042F78B88A591D2FA73A4C646C6C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 4acd7f1758b84671f561cd40903f6db7677b32e9e32ed1c43650e7c3f7a1796c
MD5 87141896c0b7c7dd42740932e7f3e11f
SHA1 8c9105e51d08fcb8c9bcc45c9cbbc9b3fe4f81b3
SHA512 8713e6fc4ae9db003074845258a05d7dd39ae2ec0ec714826f85c83d344347c79d424533c1075f2699444e8d84391035981206fcb8e70fd8d716e4dd321f9eb5
SSDEEP 768:F/xIIKsVqGcmhu8E9RMgvpES/brbmbZbMbXmm/:vIIKmE9/x
TLSH
T16ED20244EB2A913FD41502BBDCA50B042F78F88A591D2FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\db\data.safe.tmp
Size 33KB
SHA256 ed00bc75e21ad4ec29394bfba86c7b34fd48de1e54dcd7c402963d860264b4f7
MD5 82a7fe05fa59dcc18f20c950e6a4cd60
SHA1 97b94c3da70a4e584c2cf415b08079242b71ae08
SHA512 2cc110bb376965e4e6a20dd62534df8c474f4a88e6e91e1aad897fe4698c74a7a837c5caac62fc754f7d65b75d64bb54a0e3ba594cb4617b23c54d873bc77e2a
SSDEEP 768:J/GrQRlVqGcmhuJbvjyKPyTTKpE1kbMb5bBbnbMbdrm/:UrQR8bvjyog
TLSH
T19AF22340EB2A913FD42513BBDCA50B142F78F88959192FA73A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ae36282f8065114006e0066223772eab2f548f12f16a5f8165288dba434a82d8
MD5 7d6e2f04b6f0931bfab2afbdede0d9f2
SHA1 7e7e6c0067c0eb71c6ead40b5d58f6bfe6a14718
SHA512 7b997fec174e7ebd1ef70726f4a31eb2a96119795d774e312ece30ffa7042d35a8a39f082cebb31685169caf621a1b2487f3da5bcda11893d0d3b685a72c1d85
TLSH
T14A21484C39F85D6E6AEBF2D8B461028E53D58E06058B1C436D63DE8DCD85BD9326A43C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\events\events
Size 1KB
SHA256 1fd30165ad8dfa93a286db755eb410b8dcec2ba5bffd67d17b90f7b166c1c310
MD5 26e8ace3681fcfb3f034de7736c2bbf3
SHA1 9fea0abaa327d4749aa73b87d9500152e6694916
SHA512 1710a33d93a0f1c65d63d6b66d82b10bcbc823e0ec6a32abf698645ede066f2eab28a9631202f9fcd6d968f8b91eca8dd305eb363910d5e00a8ddcf72dabd744
TLSH
T19C21574C39F84DAEAADBF2D8B450028E53858E0705CB1C436D23CE8DCD85BD9326E438
MD5 SHA1 SHA512 TLSH

Submit Download

65538031-bc0d-4d6e-93a1-f14d692822f9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\pending_pings\65538031-bc0d-4d6e-93a1-f14d692822f9
Size 886B
SHA256 9fc117400a0d14aa03e979adb82e8d788a0fcb35c2bd584a68f31b45ebf6e53f
MD5 5c24932caa13957866fb2e8f7e894a1d
SHA1 1081a9259f561a832614b2dc715dde0a686dfdde
SHA512 9df6995bb74a9d8d5de9a73a6686da112196d7343cfb63251564f8167ce681597b732578b73e4384a9ce7cf2e7fb046e9e78ed8d2a106e97109e26f643ec30f6
TLSH
T1581104918920F5B28C38D38B85E137124BE43133C0CA09247EA59E040CA792F6367717
MD5 SHA1 SHA512 TLSH

Submit Download

698fe884-4dbd-46f0-b996-685be72e05a0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\pending_pings\698fe884-4dbd-46f0-b996-685be72e05a0
Size 235B
SHA256 cedebf6e5c87765d0f1eae34eba7e858a6337a0442b1f6c496407d6c3d9b2118
MD5 82f9c009cf5df473247c25ab18e86d94
SHA1 c3ff44c68de7655535f422dcb772a73c57478aaa
SHA512 32245023a8089ec0fd82dd19f301da00fa6ec681aa5bb418a6530ed41e11fbe57814c5caa1abb643257d27cb1cdc3ab11a1aee7819b9958ecd8f79f45196b833
TLSH
T11ED097812C98336E4C280F0BB0F0A8D672494C3364766850C6604934DAB8DC401B382B
MD5 SHA1 SHA512 TLSH

Submit Download

8cbf8bd9-2f51-4b15-bb0d-45533522ee42

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\pending_pings\8cbf8bd9-2f51-4b15-bb0d-45533522ee42
Size 871B
SHA256 bfcf1e89db1864848db6f2e39d7785c3670d88c87c43476e5af34d24f980c864
MD5 a5e2a80491aea8acf737d90d8b869cce
SHA1 d8732b8d63c479e3f0ff4874414e14b8c1612a91
SHA512 d75bddfee793761241277833b3355446b4819b137eaa551e1a58a8f9ea05720d106964bdb372eb87db5d773204cac34a17429d03a00f12720b3ae7feaeccc740
TLSH
T13411E3C1D730B6B38C28D34F85A537125BF47123C4CE45247DB15E140D7A92EA36A757
MD5 SHA1 SHA512 TLSH

Submit Download

ced085da-165a-499c-bbee-87338a8ac308

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\pending_pings\ced085da-165a-499c-bbee-87338a8ac308
Size 235B
SHA256 7e956cfbd5b855d407ddf823b28dce6c1164856ee57a1e64c7a3b52bb68eb994
MD5 e953ef548366239777473b787fdd5d92
SHA1 aa677bb9d2a69c261946ad142a0c9b47ec76e050
SHA512 57edd77669abf4aa9f2c0106122f5f7807f64a1a717140f89b13ad490fbfe0ba8932a894fa115e4083b57a84fea2869136d058fd7be3bbf08d391720c248fd54
TLSH
T15FD0A7C0149C6BAD08240F57F0E569C671658C331565A8A0DB9545749AFAAC94191D37
MD5 SHA1 SHA512 TLSH

Submit Download

cf9db744-c040-4b1a-b0fb-12f2535f54a4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\datareporting\glean\pending_pings\cf9db744-c040-4b1a-b0fb-12f2535f54a4
Size 2KB
SHA256 9ee491dcbc9e7bbeb807b167fee49841a7b2ae3e4f416df8013b3ad472c8ddf1
MD5 885c93793263ddea47e00c4e24f1eaf8
SHA1 1136a1b5d31db6cde3eee6d601bd02a8536f5a86
SHA512 e7303e3f9cf045c228173afee2e91657bbba9f8c6c491be9c3dccb5ed123524204742df76787153c87b55c873295824caafc0663be697fbcc5d30a097be17c0f
TLSH
T1054144AC76788CBB98CBF24DD492334A9760871340CA2D532E51DF0C8C9669E636B527
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\prefs-1.js
Size 6KB
SHA256 8b46e6d37266095f709d5881ee2279feba0f5d23ac17a5473c50299864e884b8
MD5 3d3313a3df5f101f75b0a9a4ebf4033d
SHA1 5ed665acdeb770d9b9e66bf5625fba29477ca18f
SHA512 0274ef926fba4c26c4f97cbff134b86247caa381761cd3369d4c9c43f0f69cd3dd7c0303641ece0bf0347a9c110a46fc098920e87539522d7f60b66bee481386
SSDEEP 96:xHAUTUHqGqXfUr4q1zS8ESSlcdv9jGnSH3MkN/Bw88H8L4cnEVVV5:qaRXfUrX5ESSM3MkRBw88Xt
TLSH
T17AE120789418CB6F74B677ACAC688C316AB2013BB7BF68D750B54485054CF3882F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\prefs.js
Size 7KB
SHA256 cf4f2764b527ec44973b9936f9f6e2a247f03b8845f0a41f136c3c603004dd13
MD5 936e31724d34a6beda62871270509692
SHA1 432647998f63deba63c2f0b64bbd26e460764a57
SHA512 645de4699267663e51ff28341db163f87c83ce3ac06604f9cca0671751c664420149f2658df7a9845a482fbd47c0314762a3ed72e9a20367005cc92687907c75
SSDEEP 96:xHAUTUHqGqXfUr4qfbzS8ESSlcdv9jGnSH3MkN/Bw8OH8L4cnEVV4EGS:qaRXfUrXnESSM3MkRBw8OXR
TLSH
T104E1207894188B6F75B677ACAC6888316AB2013BBBBF68D750B544C4015CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\prefs.js
Size 6KB
SHA256 af6b0571934f691889e9ef7953f5358f08365a50a3f54c6a42b66c139a38a2f3
MD5 255acc3c88247fb4efc313503f63a6ae
SHA1 6ce063b981636a2ce85fb2fa571cf860a37153d0
SHA512 61dc50b86d4bb7fa99ef541d8620fa616f41dc0b3b1dc030751c8912c32a5d89f652b49a22ac54af6f99077bf4d5225d7046418d96df9a8342ac0834d66df3ee
SSDEEP 96:xHAUTUHqGqXfUKjNnjh1zSUSSlcdv9jNjnSH3MkN/Bw88H8L4cnEVVV5:qaRXfUadpSScA3MkRBw88Xt
TLSH
T16AE120789018CB6F74B677ACAC688C316AB2013BB7BF68D750B94485055CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\protections.sqlite
Size 64KB
SHA256 17ede89dbe62fe12796fe6eb7cb3e371dd058299c4dbc3c103210439259398a9
MD5 46af60692fb8e773e3d4b5d45ecfd6fb
SHA1 e87e10ade210f83e774d5d43e0058c3bdb63df93
SHA512 bb75958af15094d8bcef255bbebfa3e6cce6ec06f7b4b04662cee5d3efb6b548a8f9662a9bbc11e84c2fcb116c30f380e6b060e935360d481cd119ba74c464dc
SSDEEP 3:lSGBl/l/zl9l/AltllPltlzgRollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wg8:ltBl/lqN1MR4BEJYqWvLue3FMOrMZ0l
TLSH
T15453225E03383021C089137227C323922F3CD2BA93232E832A100C358C0A022B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\sessionCheckpoints.json
Size 193B
SHA256 ecb4133a183cb6c533a1c4ded26b663e2232af77db1a379f9bd68840127c7933
MD5 2ad4fe43dc84c6adbdfd90aaba12703f
SHA1 28a6c7eff625a2da72b932aa00a63c31234f0e7f
SHA512 2ee947dcf3eb05258c7a8c45cb60082a697dbe6d683152fe7117d20f7d3eb2beaaf5656154b379193cdc763d7f2f3b114cf61b4dd0f8a65326e662165ccf89cc
TLSH
T165C012C2C6565071CF8365ADB26C7B659E3E04F67665064470ACD54C147B027421B443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

upgrade.jsonlz4-20250130195129

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
Size 901B
SHA256 7008e3c99626aa06d5f2d5d9dd1dfccc7ba429b42784418b4f3f332abb2ad53b
MD5 0f61dde5d63a9232206f2d860c2ba39e
SHA1 9adb7d0a3460ff62ed1588c0a9f16690ced23127
SHA512 04e1f97907e85a6dc1d30cd8aeee00bdef3832be011eecb1bb425772962f5809b9b00a1bff3e4e3b4b667c3f46857675eecce0f31153346471df4c9ea9764682
TLSH
T1F811E601AC5F28EE639A115ED4899FE3A7C82422C0EA3835A44D5FC10CFC58B30CF01E
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\sessionstore.jsonlz4
Size 926B
SHA256 9a23c52ba8fa9c9d41187313482f4f3ea73c919ddb53620c0c45a806783ed4a7
MD5 09b8b0c728ed8bb270a4df44840b372b
SHA1 03ddf49593d3f510f2c50beea0eb695ce50764aa
SHA512 0615f198317c46b32838edfca411718ce92b60bc6ba9c2674bf346f83e2d80bcf0ede3a6a3e220c08dd5303419f80db12756722e005c6bafbfd682cacbdd6c5c
TLSH
T18E11B7D5FF2E29632A60D141758A5BF94BDD7023537484E0FA0F22010E2CA0FF97A2C5
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 643c219d65facfa200fd424609cb1a93489becb7d9b0c2434c70eb21784bb99b
MD5 3f908b5d3c65ad5766f572088ddd6e7e
SHA1 a39e5fbe48b395c2d9f1b3b949d09d22bac2e9b3
SHA512 af1b8e22cf562e3cd761f9a95a24e8459ee5527b413e36e582e27394ee516ba3d4e28919e001344950665c08245842cc31534fffff3dc1bee132788110aaeb9b
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBcp:Oa16S6CKnqlizbxV+2xVeU7X2B0mKc
TLSH
T11423808E3F07A511C53AF0B178A08D51BC5E321D07222AD669D0DAE4C8F215AEA5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.1MB
SHA256 296d80eda3d35db59f1b8b8ef5376c988c1d7e2a9fa338b6f080efb1673fe349
MD5 8aa4f0bb5a71d5b2c4130f278341c12a
SHA1 e0f38079ca4ee3384b3c102cfbc23c46ef12b8c8
SHA512 f7f133116cc498f9542188e542c20e0f7e13529c9e9cfe239e8d4fb529f7ba5683e505f9e93510346624886e69df7eb254a88f7fea4de474baef603184eb93a5
SSDEEP 24576:SgIeyvp5og6+NPS71C1Eh17RYCeVMxWVhwUcd:SpHj6+5S7s1ETRYCsMEV1A
TLSH
T187E52AF82092B357F3418033A64593EB21AFD00C6467DE044BA956F995B8CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\targeting.snapshot.json
Size 3KB
SHA256 5c24b6958c8dcaeb27468c4ec0ae3c6bcdc6c8f285e3408aca5fa73a42defc64
MD5 4d1c7a359c75693c78c5b6706a6e8743
SHA1 3d2e6d5275c64a2b2292e1c475ab5e3fbdd6bb16
SHA512 65bc9f80e588a837fd5a217d7c9704a97a7ea90db5df6aef4ca82b9402ec4eb919711e82165b0ab0f4c0a6d4395e68c35b90ae3585a07b88ef625daabfe64933
TLSH
T14171820C961CA4BEA66BC3C0D6847F978FBD063370446468DAFE460C45FB5FB162611B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8bpv94fp.default-release\xulstore.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

cookies.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\cookies.sqlite
Size 96KB
SHA256 33a2357af8dc03cc22d2b7ce5c90abf25ac8b40223155a516f1a8df4acbf2a53
MD5 6066c07e98c96795ecd876aa92fe10f8
SHA1 f73cbd7b307c53aaae38677d6513b1baa729ac9f
SHA512 7d76207c1c6334aa98f79c325118adf03a5ba36b1e2412803fd3e654a9d3630c775f32a98855c46342eba00d4a8496a3ded3686e74beaac9c216beee37aa5cb7
SSDEEP 12:DQnD+23Fmdmc/OPVJXfPNn43etRRfYR5O8atLwxeYaNcDakMG/lO:DQnS232mNVpP965RayKN0MG/lO
TLSH
T192A3DD826B781395C44701B2FCB0565E0D3CA23849272B55AC39B0B30CD6A438A329FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 1a512f0eb08d21764afde070e24709d045e8a16d3dfa2b6e89f1ddac003f19a7
MD5 d5d92f8681c233f8db4b8a801b91fb54
SHA1 8c3b0554cd6c87fc8fc57dfb469a79d9bf07907c
SHA512 023922e3afbb9a97aa9f76759c77aa7023fc467f1600ac031a175f10cab1989dea33d3f48a62776375f5957226159db2376c5c37de14eb831294a733f940db2b
SSDEEP 96:qQPFTFK/dd66Joz0dzgClKtmc0d/Uq1PSdF95/7bkW6QXjqr6EDxyUR6uWI:o1d66Joz0dzgCl6mc0dnOv5zbodZDxyy
TLSH
T136C1DD68E639823BC014433BDDB61B500F36399AD84E2F6971DC64192C576DE3A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 f0405742ba533e51442555e5ad9af401ca45adf1934003188494c1d242bab1c8
MD5 8f7c1ab06a4093f03bf6ba1705ae89d9
SHA1 53979bda44cdb637b73fa8779014731055803a3b
SHA512 c350a4e1886f279294fdfec2ab6a3da176f26b9207b8009579fcded4d0a74f141010846c3553ecfcd8e62c15c0e5f6a8a3543f7da020b6961fa9db12d967d652
SSDEEP 192:AOv5zboHIZDxyjvQ11d66Joz0dzgCl6mc0dz:rbooZDxyjkd66JozQzgC1jd
TLSH
T1F0D12EA4E638823BC014437BDDB51B500F39399AD84E3F29759C64192C576EE378E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 96244393564ba75a2c7dca05b6d7c9525e0837e7479e51ea8bad2c6f17cc5adb
MD5 91cee8075ad446d7e564c9bfaaa3b3c0
SHA1 1c233e788e4c198f8251d55bc30c0c6155c1f152
SHA512 24d4fce5fbafa5c655bbf1f3fa2cfdd1d6798af620fe55fefa314e045bcca608348d7532cda3283290a442709cef5d0b4502ca72672a4a4ad72610635b379358
SSDEEP 192:o1d66Joz0dzgCl6mc0dBOv5zboHxDxyjvQu:Cd66JozQzgC1jgboRDxyj9
TLSH
T14CE122A4E639823BC01443BBDC661B510F35399AD84E3F29759CB4092C576EE378E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\events\events
Size 4KB
SHA256 9ddcc1ee0bbc22fed01d3f98b41f2fea395b42cb019560c139db39e70362e4f6
MD5 5b88f56842be2183c6f11fb7387317fe
SHA1 455144ae4b8687677a000fe42ba9dd7d8edc8788
SHA512 6ea348181e70b13c73716c79011c4f6d8c3b2d5943e74a4498f841033e047bf2c64723f7fe46a8a934005e57493dbe327fbc73761177b586a1260ead816ef03b
SSDEEP 96:FTkJGxx3d/kL6kX/4V4U9og/4wbLvbRbX:F53Ng60/Ifv/fPVD
TLSH
T1F0A17E1D66BE4C7E6EC7E2DCE889068D43994B4246C61E471CA3CE5CCC5E69E320F039
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\events\events
Size 2KB
SHA256 527d1ff8a8d4fab385171febf883c4b758a60b0afc92e5e66e8ba7c5398e5f9f
MD5 929850b8687c1fdba6abee79be76d2bc
SHA1 7b7cea8b8d9ef7db3953a72c66846d7588dba926
SHA512 f971a4c65dc3b997dfe3a7dcc488b7aced8ba4b5e6e33a956fc3b5881b826a431149f59366bb6b496fb361dcde7e1510a34f0294e33b96859aa26d3ec72f5056
TLSH
T17D418D4D7CFD4C6A5FCBE79DA988038A53988B5606821D031D93DE4DC8CE6DE725B438
MD5 SHA1 SHA512 TLSH

Submit Download

40f6291a-9cfb-4488-877b-c2ca2723aada

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\pending_pings\40f6291a-9cfb-4488-877b-c2ca2723aada
Size 235B
SHA256 0aa629a023855b9034d762af7d7bdb75de079f236083a7f64a445423773af4ec
MD5 4269ba77fe5536384026f3e1256e3dd4
SHA1 69a9019ec6821bb10eebe5691d7fe70e4ba0825a
SHA512 a1e0e61781a139405dbce587415dec0206fe961d327ae46b41d032a25febaeb89a5d5367c95373a22032e4799059c42a17ab7fc1610032b159832b39934dd5ce
TLSH
T143D0A7E02C987F6D08582F07F0E57DD63095CC3314A598509A9245789AB9ECA41A2957
MD5 SHA1 SHA512 TLSH

Submit Download

ddfab69a-374c-4b88-b89e-3f08e96fc3e3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\datareporting\glean\pending_pings\ddfab69a-374c-4b88-b89e-3f08e96fc3e3
Size 796B
SHA256 d30a595a34cc55d0eebe261d76b37a51b769be0baf3b384670b5b8cd4ccf7e50
MD5 4327e1540e04d82bcd4aa0624b500fec
SHA1 cb0b7543451f91e01ea5d6d9a43d745e9a5cdde3
SHA512 c247768e5f54afd3471a0b1e7497624d6f59ac6d20c3342017d143bebcf482b6d1aeddc6ec826c86a3dcf8d3687f0c3c345a6dd3be4256da5328f5e99f13af2e
TLSH
T1C201CE959634B1B38839D34A87B13B528FF47433D0CB4424BDE855044DAA42A67AAB0B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\extensions.json
Size 16KB
SHA256 bb7d9bb5f6d93cfc661a4f3996ac1552f1f3a7f96fb237a40ca8aa5d4a02aa2c
MD5 a1d7e7a9a6a330bf0fe2a8a28059c802
SHA1 888659b1ffae351a50ff704707894a94f793cb37
SHA512 0a2b8f07b52db0fffbe9d0c99487b42c64512525ab7eaa5679d0ad2d07eb1a8cd9f892d3ce815502c1a904a3255373a447cc0ed5064677599db6f90f21a6ce7e
SSDEEP 384:IJkI4vqUmldvk8dhW194zW96oUL4HfL4P7L4HJL4HiL4HltJ4atc:BI4iRf9X84m6N4j4f4B4w4B4x
TLSH
T15972521545049EB8294FA78AEA367E02C37D573B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicons.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\favicons.sqlite
Size 5.0MB
SHA256 7a80c81aa04e812c1155ea606ffadfaece6aafe90cfc9b58365b352b7d031faf
MD5 fd95409e13823157bedd412eca97dfa4
SHA1 b14707f9d5cc6018df4e0557d09fab9c7c9e4a25
SHA512 97bf7bdcf65e8cfa6c47b357289ff8509eca040d7167d3bbf73a8546f97686e4a986af0886e2fda6fa15057151ff346a22c85d66f529a736dacf9b31bdd81ca5
SSDEEP 192:6HmEfTMzdLI+04FTUZEfTMzdLI+04FTUO:6tLu2+PFTUeLu2+PFTUO
TLSH
T16A364C715E11102ED7054873FD1716257E2F5269CFE78A0736E9A1B4C8F1074DE0B4EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\places.sqlite
Size 5.0MB
SHA256 98e9dae306c3642a20a3f1406168a3047164b7e29f27370989886a01a450070a
MD5 00f182b6b8f9496ec8fbf5970ae470c9
SHA1 27fd2386693d92051fd01a106eddf2f50a4bf058
SHA512 44f798f409d6ba18dae49895427c36c3e2f8d77002efe6411147895982f4f8c11f9132ec5ed279ffde54487f06bd4e625a61e9fcc1adfa32913ea8528f175ce2
SSDEEP 96:D4k1e/wAaF8M9Te9kjQruHtZroSzPFRPRYoa5Af22iV7qIsFw2iwRI7c2xfXsZ8q:M8rJQaXoMXp0VW9FxWHdhSsHvYYnZE
TLSH
T12236121F7A201150D4DAA132ADE36F16283F70168A3776933E94256D4ED0763B92DCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\prefs-1.js
Size 7KB
SHA256 7d0c774223eb4dcff16c2d207a1d0bb7cf7cc53eefc04fcec7be9284cd78cd39
MD5 fe0246cb739347b5356253a529121a5c
SHA1 e9a634d7bba6e5ba6c689a6f8db74ef59787edbf
SHA512 5153547b30a53775038a026e04160f42796210fda5ce37ee590e6e016860e2de5d910502feac92b3a091d39a7d33d4ff7d86cd821ca31772f1ef8bbbfd65d1ce
SSDEEP 96:xHYuUEeqGqFFfbKY1zvz4zSRJSHl7dv9jMnpHjHBWks/Bw8HjCcnjE5:jBRFFfbKYXJSHGjb4Bw8HjO
TLSH
T16BE11F7890488B7F75B6776CAC6848715A72013BBBBF68D710FA4484054CF3892F9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\prefs-1.js
Size 7KB
SHA256 68993d843a0a6ebeefbc499e80374779bf64081e840be26170958633888225e8
MD5 514608674acf2ea3cf253df9efe92fbe
SHA1 fb98ea559aa03444d2dfd39221ae0389100cc292
SHA512 56666aaf68de497feab23ad587beeb5d9e10a75e914b246ee9418f347c4c93458d4f8d8449a29b4e7a15295cd02d8f11e18fca7cfc9deb9aa81431012c9ecc69
SSDEEP 96:xHYuUEeqGqFFfbKY1zvz4zSrJSHl7dv9jELnpHjH1XWksgBw8Hja8L4cnjjF5:jBRFFfbKYVJSHGxjV5LBw8Hjt
TLSH
T1CDF1307880488F6F75B6776CAC6848715AB2013BBBBF68C750BA44C4045CF3892F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\prefs-1.js
Size 7KB
SHA256 153a41d80b1859fae8ad735aefa822eff21186b801dbfb42c5ecd3d2eed2bd98
MD5 d8d7c56d2de9c0eb0054d911e22568fa
SHA1 837f6ef4b6ecbc7654dc051994b4a5e0f286f684
SHA512 f44d1a2ceeecb3485447ee0790f1cc4258d9c076e08a7173dcd7ea11c6cfadb9779e048fffe9efe810d99133d419c2efb0e5df9eae8ae8a0cb49c5f35f0a18e9
SSDEEP 96:xHYuUEeqGqFFfbKYObzvz4zSrJSHl7dv9jELnwHjH1XWksgBw8kja8L4cnjjF5:jBRFFfbKYqJSHGKjV5LBw8kjt
TLSH
T18FF12F7881488F6F75B6776CAC6848715AB2013BBBBF68C750BA44C4045CF3892F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\prefs.js
Size 1KB
SHA256 31e403bcb8b0a7e5fe3859e80093862092915f9d975daf181f91fe562d8104d5
MD5 a21753e99b91d3b89e562f1b584ca5c0
SHA1 e18db621d095897a4456d9ee46746b3fecbc63ab
SHA512 c54d60011bc935eb56e17df8ba5dd0591d577c1d7f9eb7888ddc8e249e7b5697641d7c8c30e5ae525e63bf102ab7c2b48c47d78fe0f0ec3f450571d5d319a2ce
TLSH
T17031E1695945CF6FA5B6326CBC5545A1D673013B7BBFAC9230F880894508F3842F69C7
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionCheckpoints.json.tmp
Size 288B
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61
TLSH
T10CD08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

previous.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\sessionstore-backups\previous.jsonlz4
Size 348B
SHA256 5217da49eef2d201da5ca4c41d5ebb79dae470e4d2ec25bd3eba74249ddd6498
MD5 40701a4b2f26275ee69c595cd85ac1cd
SHA1 0416fe3fa794e5606307c6d8d4783b28520aaeee
SHA512 04aca2e8967b428f643e850fb5f6c6c9c3f07312feaa5d9762f65c35d8b46adb45d60a57baf68f54b88baa9e1d284a9ba7c75596b5a2b478e0a3c7cc92fe07fd
TLSH
T1B0E0C033051FCBE63C2EF58E84AAEAE6EA1731150C9138D09619044815C6A01764E57A
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y5xdnaz2.default-release-1778202263393\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 384KB
SHA256 a44562b45c2c53a38505f192d0f2c12e112ece9538d888b6e8409cfa07f1ad3c
MD5 2c93810c078a0f85f8e46a567561fac6
SHA1 5383cfae8ea7a1738bd6a99605267eb42d784496
SHA512 00f048e58ddbdaf2dd7898ce89a94d33d0188f19b9241e251f2d89eef84934588d6683ca428c16a23fa5ca4d9fac96a44316decc506d61f67f11e8b1d8f8a99d
SSDEEP 6144:ReH2cHc1N3O3l4Sq2tbTtR5IpFxL6uaY4a:vDd4
TLSH
T10A84E9A53064C153C322D8379B5DF3B7243FE29894E7E78893701748396EA0FAAD9355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2823318777ntouromlalnodry--naod.sqlite-shm

Path C:\Users\Admin\Desktop\Old Firefox Data\8bpv94fp.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

2918063365piupsah.sqlite

Path C:\Users\Admin\Desktop\Old Firefox Data\8bpv94fp.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite
Size 48KB
SHA256 f6346415a5c11e3a43dbc7d7a98f57aed0c5353969b901b2f3a2fafb50b067f0
MD5 7ccce08301f5436140d37aff0cd6fde9
SHA1 8fd5a29303364f3d8050a6e9d0a07e0f300eee2e
SHA512 e680bbc3324378eabe59cc1c4b55c374b32975e83777a320de9c7a87a287dd734833714c00ddc1e0ce424087c7070382e6420c7a13418b65ed4d02d8d0f7da4f
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEhk82aDc:Oa16S6CKnqlizbxV+2xVeU7X2B0hLDc
TLSH
T1B523818E3F07E551C43AF0B1B8A08D51F85E321D07232AE57990D9E4C9F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads