hxxps://azsolver[.]com/files/main[.]exe

Analysis

user interaction
yes
max time kernel
570s
max time network
573s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 06:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://azsolver.com/files/main.exe
Sample260707-grqrxsa16w

Score

8^/10

discovery persistence

Malware Config

Signatures

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
211	5896	powershell.exe
212	5896	powershell.exe
213	5896	powershell.exe
214	5896	powershell.exe

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	ShellHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	ShellHost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	ShellHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	ShellHost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	ShellHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	ShellHost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	ShellHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	ShellHost.exe

Checks processor information in registry 2 TTPs 39 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2532687178-1633831978-1202193935-1000\{F23FD986-2C7E-4D8D-BEF7-F461B08BCA13}	ShellHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
5896	powershell.exe
5896	powershell.exe
5896	powershell.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
824	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found

Suspicious use of AdjustPrivilegeToken 17 IoCs

description	pid	Process
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	5896	powershell.exe
Token: SeShutdownPrivilege	2216	ShellHost.exe
Token: SeCreatePagefilePrivilege	2216	ShellHost.exe
Token: SeShutdownPrivilege	2216	ShellHost.exe
Token: SeCreatePagefilePrivilege	2216	ShellHost.exe
Token: SeShutdownPrivilege	2216	ShellHost.exe
Token: SeCreatePagefilePrivilege	2216	ShellHost.exe
Token: SeShutdownPrivilege	2216	ShellHost.exe
Token: SeCreatePagefilePrivilege	2216	ShellHost.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe
Token: SeDebugPrivilege	3900	firefox.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
2216	ShellHost.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe

Suspicious use of SetWindowsHookEx 27 IoCs

pid	Process
3900	firefox.exe
2216	ShellHost.exe
2172	ShellHost.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe
3900	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 3900	2548	firefox.exe	87
PID 2548 wrote to memory of 3900	2548	firefox.exe	87
PID 3900 wrote to memory of 1104	3900	firefox.exe	88
PID 3900 wrote to memory of 1104	3900	firefox.exe	88
PID 3900 wrote to memory of 1104	3900	firefox.exe	88
PID 3900 wrote to memory of 4092	3900	firefox.exe	89
PID 3900 wrote to memory of 4092	3900	firefox.exe	89
PID 3900 wrote to memory of 4092	3900	firefox.exe	89
PID 3900 wrote to memory of 4092	3900	firefox.exe	89
PID 3900 wrote to memory of 488	3900	firefox.exe	90
PID 3900 wrote to memory of 488	3900	firefox.exe	90
PID 3900 wrote to memory of 488	3900	firefox.exe	90
PID 3900 wrote to memory of 488	3900	firefox.exe	90
PID 3900 wrote to memory of 3036	3900	firefox.exe	91
PID 3900 wrote to memory of 3036	3900	firefox.exe	91
PID 3900 wrote to memory of 3036	3900	firefox.exe	91
PID 3900 wrote to memory of 5992	3900	firefox.exe	92
PID 3900 wrote to memory of 5992	3900	firefox.exe	92
PID 3900 wrote to memory of 5992	3900	firefox.exe	92
PID 3900 wrote to memory of 5992	3900	firefox.exe	92
PID 3900 wrote to memory of 3424	3900	firefox.exe	93
PID 3900 wrote to memory of 3424	3900	firefox.exe	93
PID 3900 wrote to memory of 3424	3900	firefox.exe	93
PID 3900 wrote to memory of 3424	3900	firefox.exe	93
PID 3900 wrote to memory of 3388	3900	firefox.exe	94
PID 3900 wrote to memory of 3388	3900	firefox.exe	94
PID 3900 wrote to memory of 3388	3900	firefox.exe	94
PID 3900 wrote to memory of 3388	3900	firefox.exe	94
PID 3900 wrote to memory of 1744	3900	firefox.exe	95
PID 3900 wrote to memory of 1744	3900	firefox.exe	95
PID 3900 wrote to memory of 1744	3900	firefox.exe	95
PID 3900 wrote to memory of 1744	3900	firefox.exe	95
PID 3900 wrote to memory of 5224	3900	firefox.exe	96
PID 3900 wrote to memory of 5224	3900	firefox.exe	96
PID 3900 wrote to memory of 5224	3900	firefox.exe	96
PID 3900 wrote to memory of 5224	3900	firefox.exe	96
PID 3900 wrote to memory of 1724	3900	firefox.exe	124
PID 3900 wrote to memory of 1724	3900	firefox.exe	124
PID 3900 wrote to memory of 1724	3900	firefox.exe	124
PID 3900 wrote to memory of 1724	3900	firefox.exe	124
PID 3900 wrote to memory of 1428	3900	firefox.exe	125
PID 3900 wrote to memory of 1428	3900	firefox.exe	125
PID 3900 wrote to memory of 1428	3900	firefox.exe	125
PID 3900 wrote to memory of 1428	3900	firefox.exe	125
PID 3900 wrote to memory of 3136	3900	firefox.exe	126
PID 3900 wrote to memory of 3136	3900	firefox.exe	126
PID 3900 wrote to memory of 3136	3900	firefox.exe	126
PID 3900 wrote to memory of 3136	3900	firefox.exe	126
PID 3900 wrote to memory of 3736	3900	firefox.exe	127
PID 3900 wrote to memory of 3736	3900	firefox.exe	127
PID 3900 wrote to memory of 3736	3900	firefox.exe	127
PID 3900 wrote to memory of 3736	3900	firefox.exe	127
PID 3900 wrote to memory of 6240	3900	firefox.exe	128
PID 3900 wrote to memory of 6240	3900	firefox.exe	128
PID 3900 wrote to memory of 6240	3900	firefox.exe	128
PID 3900 wrote to memory of 6240	3900	firefox.exe	128
PID 3900 wrote to memory of 6504	3900	firefox.exe	129
PID 3900 wrote to memory of 6504	3900	firefox.exe	129
PID 3900 wrote to memory of 6504	3900	firefox.exe	129
PID 3900 wrote to memory of 6504	3900	firefox.exe	129
PID 3900 wrote to memory of 2336	3900	firefox.exe	132
PID 3900 wrote to memory of 2336	3900	firefox.exe	132
PID 3900 wrote to memory of 2336	3900	firefox.exe	132
PID 3900 wrote to memory of 2336	3900	firefox.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://azsolver.com/files/main.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://azsolver.com/files/main.exe
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3900
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 27097 -prefMapHandle 1956 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {eef5796a-6f1c-442f-8874-d8f5a6e60ebd} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1104
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {f0f5a6d7-b3b6-4e70-9566-e9623885bd78} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3896 -prefsLen 25213 -prefMapHandle 3900 -prefMapSize 270279 -jsInitHandle 3904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3912 -initialChannelId {52ab1a15-ae78-4b3d-8d16-6c2782eb123e} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:488
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4108 -prefsLen 27323 -prefMapHandle 4112 -prefMapSize 270279 -ipcHandle 4132 -initialChannelId {951dcf88-e841-4957-a2c7-af79e542cd47} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3036
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3176 -prefsLen 34822 -prefMapHandle 3100 -prefMapSize 270279 -jsInitHandle 3104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3344 -initialChannelId {261498a1-bcce-419f-8a71-6eb503bf1ad0} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5992
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 920 -prefsLen 35010 -prefMapHandle 5196 -prefMapSize 270279 -ipcHandle 1132 -initialChannelId {6c94a9db-8f52-4be8-939a-6b8e67a0be6d} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5376 -prefsLen 32952 -prefMapHandle 5380 -prefMapSize 270279 -jsInitHandle 5384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5392 -initialChannelId {85fdecdc-8206-4466-af7a-1bd22465dce0} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3388
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5412 -prefsLen 32952 -prefMapHandle 5416 -prefMapSize 270279 -jsInitHandle 5420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5428 -initialChannelId {504fc1a2-4546-42f2-962a-df84acbcbef0} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1744
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5448 -prefsLen 32952 -prefMapHandle 5456 -prefMapSize 270279 -jsInitHandle 5556 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5564 -initialChannelId {601717d7-b086-4772-9469-225a120356d5} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6368 -prefsLen 40141 -prefMapHandle 6408 -prefMapSize 270279 -jsInitHandle 6412 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6488 -initialChannelId {f0475eea-98c1-4c21-bacb-d1e0fdd460df} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1724
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6748 -prefsLen 36996 -prefMapHandle 6752 -prefMapSize 270279 -jsInitHandle 6756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6728 -initialChannelId {7223a82d-5c2d-4b9d-9cac-0dd368d98168} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:1428
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6992 -prefsLen 40181 -prefMapHandle 6996 -prefMapSize 270279 -ipcHandle 6864 -initialChannelId {25168719-454d-4c8d-9ecf-472fef585f0e} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:3136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5680 -prefsLen 36996 -prefMapHandle 5684 -prefMapSize 270279 -jsInitHandle 5668 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {de114ace-604f-4348-9fe2-40eb47925ddd} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5864 -prefsLen 36996 -prefMapHandle 5872 -prefMapSize 270279 -jsInitHandle 5876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5868 -initialChannelId {c66eb11b-fd4d-403b-bd57-e5b273bdc384} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:6240
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7320 -prefsLen 36996 -prefMapHandle 7324 -prefMapSize 270279 -jsInitHandle 7328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7336 -initialChannelId {84289e5c-5807-4555-9fdf-5cade5e31a38} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:6504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7684 -prefsLen 36996 -prefMapHandle 6464 -prefMapSize 270279 -jsInitHandle 6148 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7800 -initialChannelId {836e3643-1fd5-4ee6-8c4e-d24ada998ebd} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:2336
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4868 -prefsLen 36996 -prefMapHandle 3012 -prefMapSize 270279 -jsInitHandle 6912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4864 -initialChannelId {e1677013-12c1-4ba0-8255-edbc06a653b4} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:5108
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7208 -prefsLen 36996 -prefMapHandle 7200 -prefMapSize 270279 -jsInitHandle 5976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5960 -initialChannelId {5f05fd2b-739a-40f5-a565-287da8b374a2} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:1372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7468 -prefsLen 36996 -prefMapHandle 6496 -prefMapSize 270279 -jsInitHandle 7456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7200 -initialChannelId {08a4fadc-fd7f-4657-891a-53f7a303b7bb} -parentPid 3900 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3900" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:6176

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2828

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x000000000000049C 0x00000000000004BC
1⤵
PID:3052

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:1844

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2216

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2172

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k netsvcs -s LxpSvc
1⤵
PID:6588

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\activity-stream.contile.json
Size 4KB
SHA256 628776b01686004e341025dd94bd162615f669f40a63eec7fea0bb1ae02d2e8a
MD5 21453345df9e1fecd74861349a986175
SHA1 ddb9e7bbb29e7b69b433249fc2808f08e20a6573
SHA512 724f351b5001d5910e4556131359b7a13671ea16da7f72865e2940da5f4d1dcf3032e7233024da026f126dceedcc23429f19fc89e76f82442778f6571e6fa5e9
SSDEEP 96:TP3G1/8DXPQFokKVRzlY5T+mRC1rHKYhWrcOnEsR6D0Zxl:TE8XIFolVRzljmRErRi/Rwexl
TLSH
T120A107BF99A0CD430762EAF13C4A3B1DB187B18AC8E2D9057B59CC12E29030B40E8686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5B45A299B09F8844930AFFCA6F621C9C6E50AECA

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\5B45A299B09F8844930AFFCA6F621C9C6E50AECA
Size 31KB
SHA256 ad0bb33b95ed7b25f6ffa8c0235f8fede44960e4f60605720c8c72875553b8f5
MD5 59d741304bbdafdb8928379ad31b3bc7
SHA1 c607228250edbb5a3d3eba923554b8cdba6420c3
SHA512 6c07aeb1db8ec2d10a57fe9b9a372cc21b8b2a7a4caf2ecffb1be22f50e05f159a85156998241d26463b6d681fc842a45cf5f730c7a021decd8d8a94967c25bf
SSDEEP 768:k2SoRLRaV9rVPmrptyWm8uYsNZ59Tpmc8mFc8GHNaZLc:kroFRaVarpttVgZ59F2mngoA
TLSH
T153E2D03BAD2079982A4599C2C475A98C6E352F73F3F8E19C2508172D08F43E9D6FA49D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 15KB
SHA256 835d159dae275dfbcc75340d6f1f053a7a2dfefa3900f711747746083e935ed8
MD5 05e582dd1d6f1e4d60e9465fcc45498d
SHA1 9f97e05cfcd6cb58e7a1eabdd8504b3ff370181a
SHA512 a42541e3d6d0d9ded0bc1a17c39932054cbfc2a7252510823b7398e698dbc7ba664925d709a7e73331ac9b0ab6a0992ddda3534730acfa403bdf55aa8ea37534
SSDEEP 192:dG8XIF7DVRzljmRErRo/RwexO0Bzmoy72e0Bzmoy7oirNfoEHjGPl2BadE4Pro1+:7qzxS5Rty6PtyLhfdDE2Ba/rIVy8eRIM
TLSH
T16A729EBF8FD08C0E0E96D593DC5D27597C1AF21B8FE1E1D92E846505D2CA32A90F51CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71EB627640D184D1389E972AC4A36287659BF451

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\71EB627640D184D1389E972AC4A36287659BF451
Size 233KB
SHA256 b890bcf6350585067266ea1c3948608b09a1270b6995a8942d95bf06345f5e30
MD5 d868cd9f159eb5aac42695cd0b5817c0
SHA1 dafdb674f58320eac8da0afec9e924daea047573
SHA512 2c32b6803bbbdbe1e96cd3daa3338663e4c17967c06816e9005a4b12b436b8b8858ab7a02d027ec82bd9e46d31d29d8b4caac0821ed1480b4440a572041408d6
SSDEEP 3072:xRsyyUk/JpyEvb4dxnF/oSx9qYUXvYfvn0YM6y+PC1pWn7SRI:xC3G8b43iQqNXvcjM6y+PC1pWn7SRI
TLSH
T1EF34F726EE415B53C92007F080EB27763F30E48257A6F32F6ACE7125BD5A3791DA15AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7948970B68F55CC70278BC1AD49FFD78EF260932

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\7948970B68F55CC70278BC1AD49FFD78EF260932
Size 115KB
SHA256 28ef51174db31dbae8466ed9cca3fced869836e079ed5bd36b7dcb2d681c7304
MD5 a096830e2b64086ee8b24f027245e3c1
SHA1 491322b414a20822068ef07c5d73b9b0f252e68d
SHA512 6f83d32bff804b6b21215f2f3f5a15876f97364d22abe1b099e732fcd091039454044c9605bbc4a3435835df801b98d91ae8e6f1fe7959acaffb65a8439ca3d2
SSDEEP 1536:8q08PN+A9zqqLgKaf/xl7Qzpl8YCOqxV/p0J67Bx3792:8q0rA9zST6L2V/GEBh92
TLSH
T128B30926EE555A53C82507F180EB27323F31E0859792F32F7ACE7162BC5A3B50D919AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ABB55C5F15A26B03AB70662C92FE8F53DEC51F8

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\7ABB55C5F15A26B03AB70662C92FE8F53DEC51F8
Size 1.2MB
SHA256 462dcdc6a91f5417a34d9ba1a9e3ab0fa0fc4abce9d33866cfd1fa3e51f3ccc5
MD5 6e64d8ffa60110cfe9ca367685774fd8
SHA1 858dffac6ff0bdeff8b36f50538ccbc328728ffa
SHA512 e7f80a4dddd5b229014dba2745826010b2913518dbd0896264aee3f41c685203dae67277f2c4f42247c8f718cac7cb14253d25369c5e6a72206af3786ac1161b
SSDEEP 12288:sigeOlJhSRQ7m/0uxCeip1Yk686SuD4x0hztKlCK4glmaW6V10VwlJqL6OctKt9O:BoARQ71AX0uJdq
TLSH
T15B450A1AFF966E13D522137140BB23363B74E48567A1F32B16CFB162BC5A36C1D216AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7F9871722E8EE46276841D738F11B6FF18CFB274

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\7F9871722E8EE46276841D738F11B6FF18CFB274
Size 56KB
SHA256 63c19c3083492ebe2a6c5b86830b202fab1b4216314cb36d1a2f0d5adc2e496f
MD5 d7432d468a7137973890aaf9fc1cde73
SHA1 26468c4b65b8173c9626d89607b247c474bb1363
SHA512 b55e506d39400cbc02957c3e63469fc7f7fc9e220293b61d0ad2e9840b382bd54c7c8ee08b5360cdc7d7c272173b44e9c88aae1c7de52a986791c538bde73648
SSDEEP 1536:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpAm:9V4VA7oGR42dmadEN
TLSH
T11A430239E69034B36CE895D804C28DB1BE75389382F1A7ED077C452842AC7D17B725AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88976CCE3B7D372A013DD0AD91C5C7A21F07308E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\88976CCE3B7D372A013DD0AD91C5C7A21F07308E
Size 16KB
SHA256 4b18f956fea0b7a6f141dbdee523d5970225171df3ca1f8b5cf9497654b39929
MD5 c3e98d79f4b812f5ba537858e4145f0f
SHA1 9efe3006610a308de8de5639dec6f49b35a6f07c
SHA512 65516ecc313ed047360d8e9dc051c703cab871f424777bd43fe17f642fd74fc0ee2552d6013c3363a319f64abb89247aa06b74bc00d7b2b297586e69dd35c674
SSDEEP 384:Wr3LEqHJ6BHnLRJvPJQlg0EcUI7YX5Yhcnv8nyFz/fypr:WvEC6BJ0gfcUuYXKqnv8oypr
TLSH
T13972C03F5DD5653E06A27B88C9DAEF216CA8F143C1B6F4AF791C31025E187ED426E109
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9416CF1154170E0614F1A08CCAB3FCF967975D76

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\9416CF1154170E0614F1A08CCAB3FCF967975D76
Size 16KB
SHA256 7a7e48c6b1b3409021198fa627bc227905ebdec8b9618fe057a81fb9630e7e0a
MD5 e20a4b238bb5306006786c1e2771dd1d
SHA1 0f8aa5a8ae8b5a1558899adc028c76a8eb04e1a8
SHA512 0f4807eb63528c556f32c02d9a2a97f1c812e90404662c5c0a49a4a71431bb70f920ea9e6c16f9f2858b29a04c7a86582e9b385e2fd03ced086c4a89a663a75d
SSDEEP 384:U4Ui/C2b+VPC/YKwVP+bFEcUI7YX5Yhcnv8nyFz/fy/L8:U4US7+VPQYKYP7cUuYXKqnv8oy/4
TLSH
T1C1726E3BFE555637DA6202B884EF5B353D20F053C3E6F56B3E8C304568887BA1C99858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9512A4488B00CC053350DAC32D417B4A35C11513

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
Size 13KB
SHA256 8408e5271dfde4eed2923f8075ffe41bb0901dc0a192b907fadccc65c21c1d5e
MD5 acd8da953b37ba106334cce4f7e56cde
SHA1 34ecfd746aa45f09345436820e73d3b2c2f11ccc
SHA512 0255c05fd5beb878a6a557e1663bc3f9c6f5b9980d123801d90952b595e42399bbe680b1f076b6e14e81ae2b2853cb10ef7d3071117077900b9a59934f318fbe
SSDEEP 384:H9XghOiO024Yqo6J+Sl1xDnZBPsac4j0lpDII+Xkj:dX+ZYqo0+Sl7zZlsac4ID8L+
TLSH
T188529E7E9F1238AA1E27D190D5BD9244CD04B6BBEEE2D16516543C04CA847B9F4F24CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BDD1FD5980CBC0A45489B5C92C95B1F8A12C7AE0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\BDD1FD5980CBC0A45489B5C92C95B1F8A12C7AE0
Size 22KB
SHA256 e9fa3827e3e65f35e5b4aacea55321502339adf9c80e6a1ce24d4bcceb88e0b9
MD5 1856596301b460e3f191cad9854b0c76
SHA1 5a650b3b51051be7adf3fd9ab2892e7d56ded9cc
SHA512 899dbebd160ff16de108a9a850019fd5ca617d36f68cec433d4ac33a41b9b529bb651a8b37ec6d115c4215e6ea61bc55afb7fc79a5db4a953fb2427038df794e
SSDEEP 384:9V43LIR8kVH/S2HOrA1l6BeEanyF8z2k70xCEcUI7YX5Yhcnv8nyFz/fyKhM:9S38RnS2u084QmecUuYXKqnv8oyKi
TLSH
T109A24B3AEE944E22C92503B544E757363A35F0A387E2F71B3ECE344278467BA1DA549C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D021E9A681165CEABDBDB22F47DAB90B21C8F8FD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\D021E9A681165CEABDBDB22F47DAB90B21C8F8FD
Size 199KB
SHA256 ed76cf7ecbd3d323855814797e11b1bebb6fc34602a13a3c632c87d2a7b23950
MD5 28d3125a72babd20af97435e47351c55
SHA1 49352785e3abea38d8dc92586d32dae2eb4287bf
SHA512 2fd719b0ad16a19603bbb36e2429a485c211e1b6f74b4a44ba3e55855e3f721929120fefe7f789386df352d96acf1ab42a17843220c6ac0e2a13ae4a3123e07a
SSDEEP 3072:f4/Bwo2r6aM+2CjqWODhMMNnUnph6d4uA/1Nf1ZYxlc1la43IzySBSgEENR9puoc:aIr6TEqWO1M8ghSponMcDa44zy9ENjg
TLSH
T11314233E1FC8AC01A8F47EE0907C2A752C9175B5F7256CEB65CD173E9881C6858DA48F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D8292B1CBA2471562C4260444E1EB80517FF3F43

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\cache2\entries\D8292B1CBA2471562C4260444E1EB80517FF3F43
Size 156KB
SHA256 67d181df9b74615b54bf0c9701170db9d474ac6473c19fa76375b6eb500a3127
MD5 8f77d069d7e2d610a913fe57a156bdcc
SHA1 59d21e9f7acefd6f72a1644f637dcd127f7b2d9e
SHA512 776d5e5e0a3fde129ec051a206321e23f3a6f2bfaaaf75139e550db38a6033bb0cdf3384b660d9d7587d703f0fde363745c1e2816cdde388fe41997106f334cd
SSDEEP 3072:jxEV7x3u7l/cHGUoEHGRJsEtuor/OHGUoELGRhsEHuoFSgoF:jyxRQEtzQEpco
TLSH
T15AF37DDEF3C26331ADD2B1F2809B020A63BEA4155C85185EBA55E7F53E70D4B806BF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6088y0oq.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 a2e49bc23949184fe9b61d73965071dee530e977ac5fdae0aab55157fe9c53ef
MD5 5e4d12e70d151c350a8c2bb6a887d610
SHA1 aa3b20ef5e38b204e531484617592d5062c7fd22
SHA512 59b28d139b8ead235e96d9e7e503af32a1bb8fbe548f7d276dfdcb943d50e7dbbae5c4539a14934d725f95fd23b0218339f6fc20ae3546b51a52fed18b14edbb
SSDEEP 1536:jTrliHDm3qDDRqulqacLFTskklFqf4wf4EA2HgWZ4YF14t0jwAPpv1ToNpDz+R:j3l1aqulqN+lwf4E3HgWZ4m4mtveI
TLSH
T122B3B0F7DBE2C93D59FF941DAAC2883EF9222404B3A33019C963675451C6BB87379648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 15KB
SHA256 91d698fd44a532b207ccad5c4d721600bc533b463ec734201919c1c9194b9c1d
MD5 7688e261492b9e583295d5e03e41ab6c
SHA1 ad270378f86fe60c45a15a60a3bbf0dee1e8354f
SHA512 68a86fc4d479823599640bdea51bd66058e53e57983f31da50aefafb8b4d89a31b6c8dc9d537702fcfe11459bc4c288ee784458b693f235ac4db3b9ad9d8c4c1
SSDEEP 96:Qi9K/P9m/f9BOuQcfE2S737KSUe98H9UPO+xyctzfycJ9y15yO+39Bf+69POW9fa:QJc/n7jfy/K5n9EvvwHyNf+aOP
TLSH
T188620C022BFB1959F3F399B1BB71B7066B37FC114B0A661E8241120A4A32F509C69F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 17KB
SHA256 35fccf8b897b0887e95405e283fee4e1d38b3c6394a26c84ca8e668ac4b3e0a9
MD5 8f655adad2f9c6a2a6bac911a2677a2c
SHA1 b949a8d6e9fede94c6cfbc83ac824f66df581479
SHA512 d705c851ce95f447b3e443ce50ae20bdcdff87618b76b48d280e925396c0715087ea44b082938bba0da8ad49736e20cae57e8367124879e0acb2b85e17ba54e6
SSDEEP 96:9i9H/P9P/f9N+69POW9fLHdd7Z9fLOuQcfE2S737KSUe98S9UPO+xyctzfycJ9yH:9k5/P+aOg9RH7jfy/K5y9EvvwWyN1
TLSH
T194821D022BFB1619F3F399B1BB71B7066A37FD211B16662D8241110E4A33F949C68F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 8d8c5dbffed9ff922c56737afe4cff2f3de881cf94487264612a502d72263942
MD5 827f716fb6bd5c23de24ccedde65935c
SHA1 963d02881a9221228c1a452099739daa4cd350a8
SHA512 d668939378c4d9bd7c6becd25d4e34283bcabf10201414f211ec4189540aec4cc0ec0782e8fa00cd6cbd21d7ca3ced01c3c1e9dd3b7dcf8a1f28d14c87c81c78
SSDEEP 48:iQeTdIJ5Ugdwn91z3QDTdIJ/6Bdwn9z3Q9TdIJ/adwn9SChNQ5TdIJww2dwrriJd:Ti9V/P9F/f97+69POW9fa
TLSH
T191F1EB011BF60965F6F395717A316702AB33FD111B2B971DC280514E4B33B949D68FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 150dfecde6ce76bd0db82c834ed2a546ba81888c0c0538b54271937d43c25708
MD5 387de96362181f7b3980ad927f655ac3
SHA1 579a16a74ee44d69748d6d92fa44a939dd38478a
SHA512 bd46d7c0a99b238e98d3168dcc6ff3e500963ed24c8b28351452fe5269cac8ccb2ed51768f905477055d2b510a20394b5221587a2906f187653998a304806c63
SSDEEP 48:XeTdIJ5Ugdwn91zCDTdIJ/6Bdwn9zC9TdIJ/adwn9SChc5TdIJww2dwrriJteiZL:xi93/P9f/f9x+69POW9fa
TLSH
T1D8F1FC011FF60965F6F399717A316702AB33FC111B2BA31EC240514E4B33BA49868FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 26KB
SHA256 1cd1db124ee218d77f0813dd484baab55a9f2a1d15d28cdb0a313f197b0edd29
MD5 179d369aa4f87c64518ba8534e8e04b4
SHA1 2eaefb00a0a7ea82c0d711183e7a445182ce9171
SHA512 e0894c9e0261d2bc4b1151d068eb7158402dfdbe224e107985e19e95837b79051c82dc05d9c0b55a6bc64b84674834c3de0b1edd2a4b1c974667a3ebee79a8ae
SSDEEP 96:YEmVdsDSbH/5stsD4lQpBzeUqOEM/pltBmUgiqg4yuZWXL4e6JKiPQsU:te+tlQMZZnos
TLSH
T186C27FF72BB1A863F0928FB584BC759C9C33163958AC9595C604D0E70385BA9D13EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 27KB
SHA256 38c832fb7549b8148c7944c7bddf0ec3860d6b594efbea448ab77a4ae4b1fe8d
MD5 4093b4f321674b98fad07987dd19f0cb
SHA1 4576839f7d0b08ba0230d5c902c5daf816269c68
SHA512 0f84f3f701e8050a4bee1b813c768473638479bbf82226c1ed0ba75cbe61e5cee2ebbb4ec4126a8808a799c14a610f4a31fcf8c88f9cf20ed59783611e273943
SSDEEP 96:Y8eVdsDSjxB/5stsD4lQ/BtBN7d1EM/pltBmUgiqg4yuZWXL4e6JKiPQsULI6yML:tQL+tiSQMZZnosx
TLSH
T1A5C25FF73BB1A863F0928FB584AC759C9C33162958AC9595C604D0E70385BA9D13EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 3KB
SHA256 1d7b5c634e04f61dbbd24fb154d6c45c59dbd099ceb6bd4bdc708d43dbfa8a0b
MD5 359c98197b4639de10932d95be085c45
SHA1 4737c756dd33badb3bb595f0012998fd78d93702
SHA512 195c8f58e698e99e176e7d43abef8acc3565fabcf369b618f9f0cb811fa91535112ab23fab82712550d83d2eece77c0243a6404b07ed61be3d5df4e3010b6848
TLSH
T1D58122EB53366423F2A1CFB890787954DD232325A9B859850E60C0D243A27AAD03EF98
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 10KB
SHA256 d2c8f96dfe0c375d2ec4cca9486f28cf150154e1a1f1a851f9f732c8cbd10ef7
MD5 3a3e30826f79294f25fef57fde87789e
SHA1 87ea916b78e163d37cd65baffd4b245ce04317e3
SHA512 e8c6bfa8c30c64f08b365b2155bad44b943b751429c3671cb0db3c17d331fa565a15c3c9613656ad170bc9e811c6b6259a0009e868557ac81e7e5ce6927c69c8
SSDEEP 24:AfTuhMZdq21ezUpM2lRpJr2VpmpI2htp04R42Bf4RzRQpD+lzOBTs2h2TvhTAp:YDbEzYVdsDSJx0y5hytsD4ex49w
TLSH
T1A92206FB27756412F0E2CFBAD0787598DC371225A9B888854A10C5D243867EDD17EF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 15KB
SHA256 1cb073db14a66b89380409b90df58827aa882ae36ac9339cdf61e9fe96c65777
MD5 de46663681f12d13e516de6d32e93323
SHA1 24a3fcb71c76f6abdd655c92e6102de7bcec7d62
SHA512 57a09957904391ac3330818c2f7df3b57c436741822daf8478dadadefe899d9cc409c538dfc197949131c3a735028723cc0f902b1fa81e47061d079c58f48dc6
SSDEEP 48:YkKVdsDSbH0y5hytsD4jx49dpBzetGqXPGEM/pl:YkKVdsDSbH/5stsD4lQpBzeUqOEM/pl
TLSH
T18A627DF73B716462F0D2CFB98068769C9C33122555AD99858604D0E70386BAEE17EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 18KB
SHA256 427402f7673c06efbab35f45942ce16caf4cde200e163073bbdc6ee37da96587
MD5 003f868796d80e03029bf8dc1ff947a9
SHA1 f44ae60b3fbc4febfd19634ce254afab695e98ce
SHA512 0ceba0e8c0092065dabc57d3b8041c1f0db9241141166f359c054136352d6469f75e671e29cfc6395e9ed5c8ec50828b49eea9db58d9aa2beb0e47b15e3b93b8
SSDEEP 96:YOgVdsDSbH/5stsD4lQpBzeUqOEM/pltBmUgi:de+tlQ
TLSH
T1378282F73B716863F0D28FB580BC759C9C33162554AD9595C604D0E70386BAAE13EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\AlternateServices.bin
Size 21KB
SHA256 35a3b812ca160f8a2c3cd8f1006692741e3abafd3188a8c146d8fd03afb640b0
MD5 eb03be0d1dc826d4adf7f7edbb28bf64
SHA1 1fe4f196e4feaa896a1b68f912a3fc6550f86c47
SHA512 bee7c069c3eb445d7e2e0fe8ed6c0134133e8fe1a0e680013578235b0684d470668e47bbfb02b59024b664ae3e8e75b412f625f6f7250daf686e18cf55010127
SSDEEP 96:YNdsDSbH/5stsD4lQpBzeUqOEM/pltBmUgiqg4yuZW:Be+tlQMZZ
TLSH
T137A291F73BB16862F0928FB584BC759C9C33163858AD9595C604D4E30385BA9D13EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 61KB
SHA256 07723713caa9cbedd24fa74d065ec63fdc4bd0b0df88584cab644bf5c6d84dd4
MD5 9157c7568007dbf4b20e178d3bb2825e
SHA1 733be24fa73fbb9077a4b9bb6830a8f392106216
SHA512 d68aaaf4c76b04d2f30ca79dc10a93aad0a3ba27e81f006039a303fa1a1f1d3a57f024a65524d5d907251efc5a42b20ebe53498d4677c0ac768d7a98555b7a0a
SSDEEP 1536:wo7i4ps4vwurEc2QX69NUlYnKq6Xm1YV+JwHYzdFFraZW:woGWwuIrMcOlQ2WdJCyxWw
TLSH
T1CA53F245EB1A953FD92802BA9CA21B003F79F8895A1A1F67375C55382C873DC3D8E16F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 67KB
SHA256 a87519f5b6fad887d3b2265ddd0058025ce8c77cb9f5282a834d3a296b34c07d
MD5 c0bfffcdb146a5de8cba1eb91681dec6
SHA1 072108c6b1f0c524a10e75ac7f7d0698885efaed
SHA512 b185306600a2b9ef22f6e852f84c09ae57acfb3d26f0434b593ff244e6a8754fc5ca08667604fe3847cb89558dcca4de2eea148278f41f7692dd638d9cc39dc5
SSDEEP 1536:BaNi4ps4yhWk//tvJk+EpUcbbvZQYMlT+JwHYzdFFraZk5:Ba8W4x3Ru5acXxPVJCyxWm5
TLSH
T180630144EB1E953FD92802BA9C921B103F79F8894A1A2F67375C55782C873DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 67KB
SHA256 e6577a60e3481a303df34dae8b4a9fd54c0a48916032e0c40677ea7539b43370
MD5 d3605172736d5aa1370abfacf99e449a
SHA1 b79f6cee7f9b2d4311ddf0c1e3001e06f021be54
SHA512 9042b12c8930a54bcf87a242ffffb24122b18974013d980752b6620d41f40e8d5a07a1ecb26015689d264054858aebd1fe3cbbc680cb0bc7dd95bfc70328b868
SSDEEP 1536:XaNi4ps4yhWk//tvJk+EpUcbbvZQYMlT+JwHYzdFFraZkl:Xa8W4x3Ru5acXxPVJCyxWml
TLSH
T1C8630144EB1E953FD92802BA9C921B103F79F8894A1A2F67375C55782C873DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 dda5324b61354885d3658394ddce411d311482e7b99561cdbe3797aa38c6e1c3
MD5 99adcaca15544f1be51b8e88631216af
SHA1 ac8053737ed5e7fec3d514d2e57bdc978c9e6483
SHA512 5093530c0fe85c1a3e6b22a9810b3eeb9b99b0f36ccc4ac1a0ebaa0e59affc140bb408a3fafc87a90bb129fe2e3162ec1499a73690c31b9ca35886536ea756bc
SSDEEP 192:7Pe/vOv5zbo8bweZvyjRrV+yvxJq7b1d66JoztdzgCl6mc0d:7W4bo8bweJyjRod66Joz/zgC1j
TLSH
T120D12EA4EA28863FC404427BCCA61F410F76385A988E3F2935DC750C2D462DE768D2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 3e9915a054de6a8168117237f3c629cc4d54eaa8ab2acf9754926595cbd6dcfb
MD5 279dca6415ca2af9274b372a9a03c873
SHA1 e8d711147ea14f1d9a0f16b0fdb333e56e7f9393
SHA512 456f103752eb78a8b2a278efc3d4a7078d690c6a533a15ec12d0fd05a077f4f8408f4d97cb85cb7ab570006cadadad3a878dc9ac448ef5f3fdb9ff9ee50f3737
SSDEEP 192:KPe/vOv5zbo7z+ZweZvyjRrV+yvxJq7b1d66JoztdzgCl6mc0d:KW4bouZweJyjRod66Joz/zgC1j
TLSH
T108E11FA4E628867FC404427BDCA61F410F75388A988E3F2935DC711C2D472DE368E2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 be8947ad598fdc0cb94d8009b888c5c5af5cae2f902353b5a044e4a9f17d4cbb
MD5 5fcf399402c5607b7c5ac822d1510474
SHA1 3466f64a53864eaf2431852f018e68ebd5e7c3c4
SHA512 0af7afa2bcd6f9d9d897201b24578c5fa52dfe1f58a6dd6c673cd7961a473e5de015113782036423ad318d4e21014f7a34b92df2ca0a307ea7cb9db88e4f23b5
TLSH
T12861CB58F6288A3FE444423ACC932B415F747416A46F2F2A35AC614D1E4B3CE768D2BE
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\events\events
Size 1KB
SHA256 29b3a23ab90cc6b7d3863a8e87ef7871aeb8d7a5e2cc6e19048bb54e6a378536
MD5 1512d02e1ff6fce04e7b6c0015963411
SHA1 dfa263fc0cae9912efbe2025caee9edd62ea9c1d
SHA512 39ab3f06fd4d8067d435ce57e65a2a11ba0f02bc45f231045462a1abae27a7fa96ad86a718c5e860e52a654c13a577ab0bcb3373ff49659b07dc43e00e1dda7a
TLSH
T10D116A9C3AB94D2A9CC7E2ADB465028ED3118A0604871D474D12EECECEC1ADD326EC38
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\events\events
Size 5KB
SHA256 55453c6c7d271dc02a6bbcf5030d38a9decc2d1001d4d7e88b1b478f6f8ab5b7
MD5 7e83b1f707b334970fa62c079a0a6e18
SHA1 eda122364a9a6780c74041b970170fe41730a56d
SHA512 cbff7a5a22c3731d3707309f5bd1f1f76c53dd25c31e4e079e37de6a0f21688025a81ded060c0abeae85e2c97fa9d38484a96a3f94831e09e7e80cab0b9a5689
SSDEEP 96:jsdJaYqxjaqtiUt4Nns6XLgmDogBcF4ndh:sJaDtiUqnxbYeh
TLSH
T13CB1EE1C75B90CBE69DBD3ADB456038D86C94702C4871D478CDADE8D8D86B9D321F429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a07117f-a2a5-43b5-9933-5f35d3315a7d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\0a07117f-a2a5-43b5-9933-5f35d3315a7d
Size 235B
SHA256 d547a49032a2e637dfda2adeb6b2c181e486829dee9b682460390f84a256fc64
MD5 e913942e0c8caaa8b014606e29e72ab0
SHA1 a9f7e3dc1c38a731b39bd621d90bac9fbc5da774
SHA512 7e85dd9fb46ea76f8f40ffd292bb19ecda0cf7549c75bb005afc0fff39f9b944832adfcfac0ddd7e11407f33ed8d1cf453614d39e7d1a6e916627a72c9307b6d
TLSH
T1BFD097A0A88C675C58104F0AF0A16DC630444C3714B89810DA6146B8CAF9DD40251C06
MD5 SHA1 SHA512 TLSH

Submit Download

66cff2d5-3fad-49ca-896a-80f8227ac4fb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\66cff2d5-3fad-49ca-896a-80f8227ac4fb
Size 931B
SHA256 726c22294868743b13b5b2d9074137a18be7df9f58fd97062a55d7e4075aa671
MD5 a05572d4b6dd7adf9b4e85c2eea310e3
SHA1 095fa214bc67f3bae52cf9904a0ac358bfa4c0c9
SHA512 43bd803b82ac968089c5ca99a212aad96d2dfbc5a08276ca3938ea2129a0b8ce6423587646a435198594530802b69c70a48d0d9a9b097e7bbcf7aeb109e960c9
TLSH
T1C611109099247AB3CCBCD25B84E17B029AE0743380D64D143CD56B1C8EEB70B936234B
MD5 SHA1 SHA512 TLSH

Submit Download

6f4a6db1-3e97-4f78-9e67-b1850e582385

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\6f4a6db1-3e97-4f78-9e67-b1850e582385
Size 2KB
SHA256 7067e8def75d1b97d59a82d58a289eed4c3ebb5cb408f744c26e810a8ff95b12
MD5 a3c75645c292464be241f90836838c36
SHA1 eb078ae18b21f8d14bf601614208bd57a789b4e2
SHA512 7c472e4dff961c53c27612d6c603b2d6f6b38114aa0a9a956d74c1fcee3203a7676ce4dcd598483bf65093063a925128481ef2ac7d78e5bd6708347e10abe513
TLSH
T1E84120AC38B85D779CDEE55D9082334ED3619A0300C62C532D51EF4DCEC6A9E236A92B
MD5 SHA1 SHA512 TLSH

Submit Download

ba02a176-d2f8-4d8d-9e91-1f91c4e91548

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\ba02a176-d2f8-4d8d-9e91-1f91c4e91548
Size 883B
SHA256 5c2dd6f456c32590d59d24844a8b42cf8f9adee84c399576c62f6475d126229b
MD5 ad203127b5ceba6a098fd5f499fc3ca8
SHA1 e7ae14280e654f9d7ca528050057cf09026aa25d
SHA512 fd657a4e3d524a1d0203692147c445409c307e7c97dca65a2a641292c2fff3ac1422c4824ce8247b5662e7b9a36fcd38701d7b677fc6909067c7ff34324c9bbd
TLSH
T1451104519A34B6B3CD78D25B84953B018BF4741380CA59143DB56A08CE6970E936634B
MD5 SHA1 SHA512 TLSH

Submit Download

cfe83df3-07ee-41d2-bcb9-f929bf0282e9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\cfe83df3-07ee-41d2-bcb9-f929bf0282e9
Size 280B
SHA256 c969ac66d53f0b1c58a959f3c929cd926082e58c32e8f0bb9f67f382fcf2ed0e
MD5 dcaf396de5a916232f301926da6604ec
SHA1 a0ce5f4ed86a8df440d9c6bd29d430af149ca7c1
SHA512 da6d5eca2ab0df95b0ee9650624981c0b7a3ac736ee3fbb30eaeda77fd9dea69c500a4b67eb745c968707c1aa06ed0c79bcfec304d05584b3e90a3f6c08b1d18
TLSH
T1A5D02B9068982B6D4C7D4F16F0F038EA34A54C3311F0580495A19B34D6FFED9815684A
MD5 SHA1 SHA512 TLSH

Submit Download

fb1af7c0-096d-4c65-b8e1-3c5d9228700b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\datareporting\glean\pending_pings\fb1af7c0-096d-4c65-b8e1-3c5d9228700b
Size 16KB
SHA256 8a205f3ce3385fc187027489e4b61b7c0efc49724350666b24c992e9e32d8297
MD5 2d20fba33880c757ed544fb6e662a6e0
SHA1 6f37833c8a429a384b15d9cc4c92c493f070103b
SHA512 36482aa6eec6dc77dee2ca4e18524890b9d07cf8c225578ce3dec1fed42739508391a5b783dc9022c3af1488191f8e7c2395816925a3f1e5e19dce752f594723
SSDEEP 192:9REloV7PMP8O7eDReVT1GHBA5XlekV0Czx7KRy4K9EegBIJ0s1v5VaCvv3/t6xer:b70P8O7eDRHHlW0Cl7KRy4KKtCgNc
TLSH
T13E72B9566860457A8251E3A9D4F8BFC3E1F638CB4C419FCE9BE47D086DDE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\extensions.json
Size 16KB
SHA256 b87fce4bba56d85c523079e93513758f46429d59fd100577f22e46a3de45701f
MD5 b3eef65451226f981920c7ffca907ae6
SHA1 07336cda31c79ada087535a759987350433b755c
SHA512 182f22fa00412f23b796a035ed041bf68ed0717cc28c6c94b2379726fd591aceb045199e588301fd33b20a5301d8572ed9f5c84123053f8800714dccfd45285f
SSDEEP 384:fkI4v/Umldvt8dhWe94zB96oXL4HSL4PzL4H1rL4H6wL4HO/M4hVt:sI4HRfuXb4T6M4A434V34d4oM4Ht
TLSH
T12572531545048EB8294FA79BAA367E02C37D573B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs-1.js
Size 6KB
SHA256 c807304853388251936aa0c749a72ee2cb92154949cd49f2cd99ce8de2497e84
MD5 e2e93b8ba7a17f520e5c1c57a45d47b4
SHA1 c9f8b0666b7d6321a6ffc758bbb17fb6a8665b96
SHA512 3571c5f636f6d46b13c0eb4b48e0b16ff25ba2853a89bf4c0b02c09dc61afff770202bbfa038b7ff0381735dd7b74716d22ed3ca1b975c452ad7b03612367ee8
SSDEEP 96:xHTUTUtjqGqHLfAbfD1zStSSlYdv9jEn6RHzBd/0TEBw88u8L4cnP6CU:hQRrfAbfDcSS09zBdmEBw883U
TLSH
T1A9E11F7894088BAF64B6776CAC688C319AB2013B77BF68D750B954C5054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs-1.js
Size 7KB
SHA256 177c9a98e3cfd5bf0c71e10a3a4119a596ef2afb706d04d564b0f92d02b1bd4f
MD5 2a330c6b971dcf7dd8376db9d6ade72e
SHA1 6290f75ed56b6b488db171dfe02d3b9f319db17b
SHA512 003fa45e261be927c707d384853f99085e35b11e3dcfc50b5f6906660a6b6e25e6d6d324315ce5b8f8e0b3e804e56fcad87d87a853493f85863828c3fe6ba673
SSDEEP 96:xHTVTUtjqGqHLfAbfDObzStSSlYdv9jEn6RHzBd/0T2Bw88EIyTU8L4cnP6CU:hVRrfAbfDnSS09zBdm2Bw88qTtU
TLSH
T1F5F10F7C9444CB7F64B276ACAC2449715A72023BB7BF6CD650B984C6450CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs-1.js
Size 12KB
SHA256 77c13fc2562ad342d9688846669b7dd2de989ccf8b2625c074e17398d3972991
MD5 1148d66abe924fd1285a170d95af1db3
SHA1 0c5a189bb86336e1d45eae990bb9289d0ddc1996
SHA512 7b5d8a6642e5d83fd6fb162ef94faec9463796f0b9c02268c8ee68d621a18ab6878e34ee541085763a75a046949d35ac0ba6343c3fc9b8fb5bfa88fe581b2cbf
SSDEEP 192:FVRrfAbfDnSStXLRP+fBdmGOBw88qI1tIBbeU:l4RPaBYZwhCB
TLSH
T10142AA3C61408B3F24F232BDAC254AA019A15727B7BFBCD645F894C6444CF2845F6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs-1.js
Size 12KB
SHA256 9393c2a4317bd7ec9203d94cf15c72d342a96f9193a035fbbb4572a227822288
MD5 9d71aa5ba3d82952134f88f769cf17bf
SHA1 cde71601362bbd558f4dc101cd090a6c00ab92d1
SHA512 4f1734a5125ba7e76b9276db4dab1c6487857a2f879616d78a6443e7a5e9a2ffbe2d3b6c7fbcaa1e100a97408a99abe0479a2a43b95f2e90af32f44618618f11
SSDEEP 192:FVRrfAbfDISStXLRP+fBdmGOBw88qI1tIBbe7:lnRPaBYZwhCK
TLSH
T14242A93C61448A3F24F232BDAC254AA019A11627B7BFBCD645F894C6444CF2845F6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs.js
Size 6KB
SHA256 80320d0b325c60a70f8c030b33406e68a2cfd780c59264a8ba4f4e06abf8886c
MD5 760a3b5f8f72c60c0e7a0425f05b8878
SHA1 09b61e9681c12e9524ede6840a299b2fecd44b81
SHA512 1360b1f54f7ee3d8c083030822cd1246aee20ee519002719da385f96130e41e2f7047d80566775c6c23607b4ca83b4e69ca93cb8d1ea4de3204b0a2a3b1fb87d
SSDEEP 96:xHTUTUtjqGqHLfAbq1zSVjJSSlYdv9jYLn6RHzBd/0TEBw88u8L4cnP6CU:hQRrfAbqOjJSSg9zBdmEBw883U
TLSH
T19DE11F7894089BAF74B6776CAC688C319AB2013B77BF68D710B554C9054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\prefs.js
Size 6KB
SHA256 244dc345b837097d1b5aefc5136e451e62c33af5fa5805b26e6cfc1bc51123fd
MD5 d5705e7a78c6b71d42d2a6ad3b7099be
SHA1 ab268bd6ce50b39101d31f2e097a16b02a9c2a0e
SHA512 0f3147f7a51b85e1a8456d8939a3404bfc4c5b5704864fcc8d6791036361c95ef980ebe6f7686e17f8a186c50a2e093d4aad0b9284559cfcec7aad7cd15c2095
SSDEEP 96:xHTUTUtjqGqHLfAbq1zStSSlYdv9jYLn6RHzBd/0TEBw88u8L4cnP6CU:hQRrfAbqcSSg9zBdmEBw883U
TLSH
T15BE1107894088F6F74B6776CAC6888319AB2013B77BF68D710B554C5050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 105KB
SHA256 513cd164273427fba7108eae32ccea8eb0890eeaf0810d1b0e818b1d08904df9
MD5 3cfe2f1e1f8dcf61a9a27e932fce6b5c
SHA1 d8acde17801b0f5939989fb147a6bf8a99b41eee
SHA512 0984be0714afbedcf02b733a49e9747b558ad8a6a376b3a619afee77c132377c0cb5f653048f7113f6a32a7cf18b77bc3e2d70703da384ca003890b415461680
SSDEEP 1536:qINdI94XwngtefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrAgS:bd4gtefSIkUSauv7ybzFcXb6KbAcrAgS
TLSH
T189B302357E6308FF8AE0565840B75D9C6FA39F138845D858EA1EB88B02FCD88C547E56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 106KB
SHA256 133ccff65c6c565091f9ec5fa68a72e9597af3461194bb5ecca198bf669c372a
MD5 c03b338429ee1422eff7a4409a94a52b
SHA1 8495c67bece2aaf55edbd42df968d3aba91fc055
SHA512 d28f6f6e7b8a0a8f44f4133dfd1feda5489769fcf5c712f4e550bf664693113b44029f6e7c8dd095b15304cf5b5ca4cf5c67c8718d632ca691f8c0f443fb6dfa
SSDEEP 1536:nNdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrNugU:Nd4ntefSIkUSauv7ybzFcXb6KbAcrMgU
TLSH
T1B0B302357E6308FF8BE55554807B1E9C6EA39F13C844D858FA1EB88B02FCD84C54AE55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 99KB
SHA256 984115013558b9b402a2d219004140c4c419ddd535f68e3110b1359c5918f4c5
MD5 02f3e21295e00c4d8c8fdef022c6f466
SHA1 fc2a33b52e026a710fe1d6b82e4424c8c7a1a6b9
SHA512 3745eda67b62ed665fa6afd5d6ed172b8d4a1819cb9593da92535b73ae71e8e826edb3fc758df664868a00be9b269da3f5f40af98ba5e10cf0379fd8537943a9
SSDEEP 1536:+NdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrO:id4ntefSIkUSauv7ybzFcXb6KbAcrO
TLSH
T19EA302157E6304BF9EE06659407359E8AAA39F178C45E858FE1EB88B03FDD84C483E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 99KB
SHA256 b8f55eecf9988af84d474ff9b6deae7e646dbe7a2067a67353a50e1f4bb7b836
MD5 18a1ebee1b57ae1c7805dbdff49ff32c
SHA1 95e01c0df99c8951616a8628889e46bcc1d65ede
SHA512 f2cb1649cd152ac28b82fa55ef41ad19d98f917c0536bd185ed70fafe68046ce831c19a368fbb4f15e8bec41be65f01fc0f9572ec126d74966c298a9b5c6ebe8
SSDEEP 1536:0NdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrw:kd4ntefSIkUSauv7ybzFcXb6KbAcrw
TLSH
T12DA302157E6304BF9EE06659407759ECAAA39F078C45E958FE1EB88B03FCD48C483E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 106KB
SHA256 8ce2f61cfdcf2355646438ff9d0db3eb0b92940adab7b0bc6ff77b0336ad64e6
MD5 82bbe1db4d81b1611c6a10aaef5311fa
SHA1 9ae378f0f69f7b27a60dc0bb58716cf43d79d91a
SHA512 134c5dd94cdf0f5824f0dd49c02b104bbd22819e4462eccbbfe70e201178052490056722a88f4e9572aec1558421ad566630c391927b838d61d15ab26a97fc14
SSDEEP 3072:Xd4ntefSIkUSauv7ybzFcXb6KbAcrtglc:E8ZuTybaHjglc
TLSH
T1B5B301357E6308FB8FE1555480BB5E9C6EA39F038845E858FA1EB88B02FCD44C587E56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 106KB
SHA256 7a0b2419ae39535cb1e9a33c117370164928ba8326ca4836e83dc455f6e02923
MD5 dea10e786bdf6daaaa6f7bde316c01fb
SHA1 3e46916866d04662c8db64f31f735ffa0314b851
SHA512 49daef527cf66f0bc2f2870e15f1d750c6ea993db44e0475f568325901b5eee6d0a7c4fb90d63b5518643edc8450d12c7217c5e5e5f508a6a1aceb99ee08b103
SSDEEP 1536:fdNdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrNuO:3d4ntefSIkUSauv7ybzFcXb6KbAcrMgt
TLSH
T16EB301357E6208EF8BE4555480771D9C6FA39F138844E898FA1EB88B02FCD94C547E56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 106KB
SHA256 bdffab8e62a4b4138a44fddc5cbe774da1a069e3b1aabe2575d2328eb0135300
MD5 6f58a5e576f57a50e7ea5df8947a988d
SHA1 422bf9ac4e36b831cf36b46a44505704abf2a0b8
SHA512 a741991439fd96edd5592bc45e95b11dc8911e16983cec9c67e4a37d6f1b51b95002659d2a87166f06fcce08b004392a3804fd33eb4af066111bf9b43dd04ab6
SSDEEP 3072:5d49tefSIkUSauv7ybzFcXb6KbAcrJgQz:K8ZuTybaHXgA
TLSH
T154B302357E6308FB8BE49568807B5D9C6FE35F538844D498FA1EB88B02FCD98C44AE51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.baklz4
Size 99KB
SHA256 b4c0bf5ee135fcaf0cccd5f162ed4ca2d1ef557158e0f67127926117e61f874c
MD5 e74fe5f81f32d290e56dc68fcef6bf89
SHA1 4dbb16cd69414f8c1a5ca866d74275f9153ac8b1
SHA512 693e5a898847199fb4e9d37c8d9d4df81418da1609ce803da9ad3006dbbfb716cad684973f0a2afd1f9fdc41b22c57195c75ab2cd80a718aced12828c0e3f2c1
SSDEEP 1536:INdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGre:od4ntefSIkUSauv7ybzFcXb6KbAcre
TLSH
T12CA302157E6304BF9EE06659407359E8AAA3AF168C45E858FD1EB8CB03FDD84C483E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\sessionstore-backups\recovery.jsonlz4
Size 99KB
SHA256 6a8e7b278d08af9ad370386e52507ba81ad7a00e75f53bdd1942b1e4ea2da51a
MD5 0370e341c8e406b454474c271e9cc199
SHA1 ace0561715b503f7c68b9b6b69cdb50108503d11
SHA512 96e70b1366f1a01d5b980e040ca797c7fbd8f2f050ef2e2d9e3b0cea79247f2c6c84c79de859b3a1e3af36f88a6873ca74ae1d6e0455c040c86f2c465ca28f89
SSDEEP 1536:oNdI94XwnntefAmoI0a0zfPYS+hbuHP7tZrWxEWnzFWibPiGnOb6FwbLENGrR:Id4ntefSIkUSauv7ybzFcXb6KbAcrR
TLSH
T184A302157E6304BF9EE06659407359ECAAA39F078C45E958FE1EB88B03FCD48C483E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6088y0oq.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.2MB
SHA256 2161e2d224b4a41061dd1c6d16bf065c76f36a97762af9e79fb405b79345e737
MD5 f1a9737917db0c421a9b42e56a521134
SHA1 552f020444451d80fa76d670d189d5e144f92859
SHA512 c8e0ad8373918e834aab1fbef1b25e330476be5a5ee13c39b3ff31e59446317309f36d1293eb28b0d80232e99825dcf627d8ca2cf2b41f29513813a7818a54af
SSDEEP 49152:FLeLydaeU16QC5zYYuLKJgFy3QaZOmZQ8rtplTBIBaYylACMx2UgnYSg9B4tXdpn:JbG9B4tXdpEbze6Ol
TLSH
T1FF765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5896-460-0x0000000074610000-0x0000000074DCC000-memory.dmp

Download

memory/5896-420-0x0000000074610000-0x0000000074DCC000-memory.dmp

Download

memory/5896-434-0x0000000005CA0000-0x0000000005FFB000-memory.dmp

Download

memory/5896-430-0x00000000054D0000-0x0000000005536000-memory.dmp

Download

memory/5896-431-0x0000000005C30000-0x0000000005C96000-memory.dmp

Download

memory/5896-429-0x0000000005430000-0x0000000005452000-memory.dmp

Download

memory/5896-422-0x0000000074610000-0x0000000074DCC000-memory.dmp

Download

memory/5896-421-0x00000000055E0000-0x0000000005C2A000-memory.dmp

Download

memory/5896-459-0x0000000074622000-0x0000000074623000-memory.dmp

Download

memory/5896-436-0x00000000061A0000-0x00000000061EC000-memory.dmp

Download

memory/5896-461-0x0000000074610000-0x0000000074DCC000-memory.dmp

Download

memory/5896-419-0x0000000002D10000-0x0000000002D46000-memory.dmp

Download

memory/5896-417-0x0000000074622000-0x0000000074623000-memory.dmp

Download

memory/5896-1188-0x0000000004DD0000-0x0000000004DEA000-memory.dmp

Download

memory/5896-1187-0x0000000007AD0000-0x000000000814C000-memory.dmp

Download

memory/5896-435-0x00000000060F0000-0x000000000610E000-memory.dmp

Download

memory/5896-442-0x0000000007260000-0x00000000072A8000-memory.dmp

Download

memory/5896-1827-0x0000000008900000-0x00000000090A6000-memory.dmp

Download

memory/5896-1834-0x0000000074610000-0x0000000074DCC000-memory.dmp

Download