93a015e74c5724876ef5952251ca94034e2882952ebf3955d6fbd32df58e627a

Analysis

user interaction
yes
max time kernel
135s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 02:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
image (2).png
Size 107KB
Sample260712-csheqaes7w
SHA256 93a015e74c5724876ef5952251ca94034e2882952ebf3955d6fbd32df58e627a
MD5 6223fd45653c664695673004f355f8fa
SHA1 dd3ba431c7f1d3eaea9fa8a0b9d1f5a0f10a1789
SHA512 d9e1e4bd5aa85538e8bc169a0b54f2feeabfc3b2d490a7aed14d96d0e70632ce51219e7a2545a968de84672e1f271b0bd4f986949e215b4a41516fe46fccc03c
SSDEEP 3072:EBpoWHpgsS9CRMQttYpmeoC1TFdZcSOVY2enk:VWJgL9g9ttYp1oA5cS2Ank
TLSH
T1CDB3128F51F42B06ED1B93C2E59E3C0F25755136E4290138B166B3E683A4FB3786AD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
135	raw.githubusercontent.com
268	raw.githubusercontent.com

Checks SCSI registry key(s) 3 TTPs 14 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	disasterlauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	disasterlauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	disasterlauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	disasterlauncher.exe

Checks processor information in registry 2 TTPs 37 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\disasterlauncherwindows.zip:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3160	mspaint.exe
3160	mspaint.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	4612	firefox.exe
Token: SeDebugPrivilege	4612	firefox.exe
Token: SeDebugPrivilege	4612	firefox.exe
Token: SeDebugPrivilege	4612	firefox.exe
Token: SeDebugPrivilege	4612	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe

Suspicious use of SetWindowsHookEx 15 IoCs

pid	Process
3160	mspaint.exe
3160	mspaint.exe
3160	mspaint.exe
3160	mspaint.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
4612	firefox.exe
7092	disasterlauncher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4836 wrote to memory of 4612	4836	firefox.exe	92
PID 4836 wrote to memory of 4612	4836	firefox.exe	92
PID 4612 wrote to memory of 1512	4612	firefox.exe	93
PID 4612 wrote to memory of 1512	4612	firefox.exe	93
PID 4612 wrote to memory of 1512	4612	firefox.exe	93
PID 4612 wrote to memory of 1580	4612	firefox.exe	94
PID 4612 wrote to memory of 1580	4612	firefox.exe	94
PID 4612 wrote to memory of 1580	4612	firefox.exe	94
PID 4612 wrote to memory of 1580	4612	firefox.exe	94
PID 4612 wrote to memory of 3272	4612	firefox.exe	95
PID 4612 wrote to memory of 3272	4612	firefox.exe	95
PID 4612 wrote to memory of 3272	4612	firefox.exe	95
PID 4612 wrote to memory of 3272	4612	firefox.exe	95
PID 4612 wrote to memory of 1948	4612	firefox.exe	96
PID 4612 wrote to memory of 1948	4612	firefox.exe	96
PID 4612 wrote to memory of 1948	4612	firefox.exe	96
PID 4612 wrote to memory of 4524	4612	firefox.exe	97
PID 4612 wrote to memory of 4524	4612	firefox.exe	97
PID 4612 wrote to memory of 4524	4612	firefox.exe	97
PID 4612 wrote to memory of 4524	4612	firefox.exe	97
PID 4612 wrote to memory of 1820	4612	firefox.exe	98
PID 4612 wrote to memory of 1820	4612	firefox.exe	98
PID 4612 wrote to memory of 1820	4612	firefox.exe	98
PID 4612 wrote to memory of 1820	4612	firefox.exe	98
PID 4612 wrote to memory of 4104	4612	firefox.exe	99
PID 4612 wrote to memory of 4104	4612	firefox.exe	99
PID 4612 wrote to memory of 4104	4612	firefox.exe	99
PID 4612 wrote to memory of 4104	4612	firefox.exe	99
PID 4612 wrote to memory of 3972	4612	firefox.exe	100
PID 4612 wrote to memory of 3972	4612	firefox.exe	100
PID 4612 wrote to memory of 3972	4612	firefox.exe	100
PID 4612 wrote to memory of 3972	4612	firefox.exe	100
PID 4612 wrote to memory of 3700	4612	firefox.exe	101
PID 4612 wrote to memory of 3700	4612	firefox.exe	101
PID 4612 wrote to memory of 3700	4612	firefox.exe	101
PID 4612 wrote to memory of 3700	4612	firefox.exe	101
PID 4612 wrote to memory of 5696	4612	firefox.exe	102
PID 4612 wrote to memory of 5696	4612	firefox.exe	102
PID 4612 wrote to memory of 5696	4612	firefox.exe	102
PID 4612 wrote to memory of 5696	4612	firefox.exe	102
PID 4612 wrote to memory of 2584	4612	firefox.exe	103
PID 4612 wrote to memory of 2584	4612	firefox.exe	103
PID 4612 wrote to memory of 2584	4612	firefox.exe	103
PID 4612 wrote to memory of 2584	4612	firefox.exe	103
PID 4612 wrote to memory of 1376	4612	firefox.exe	104
PID 4612 wrote to memory of 1376	4612	firefox.exe	104
PID 4612 wrote to memory of 1376	4612	firefox.exe	104
PID 4612 wrote to memory of 1376	4612	firefox.exe	104
PID 4612 wrote to memory of 5388	4612	firefox.exe	105
PID 4612 wrote to memory of 5388	4612	firefox.exe	105
PID 4612 wrote to memory of 5388	4612	firefox.exe	105
PID 4612 wrote to memory of 5388	4612	firefox.exe	105
PID 4612 wrote to memory of 3720	4612	firefox.exe	106
PID 4612 wrote to memory of 3720	4612	firefox.exe	106
PID 4612 wrote to memory of 3720	4612	firefox.exe	106
PID 4612 wrote to memory of 3720	4612	firefox.exe	106
PID 4612 wrote to memory of 4324	4612	firefox.exe	108
PID 4612 wrote to memory of 4324	4612	firefox.exe	108
PID 4612 wrote to memory of 4324	4612	firefox.exe	108
PID 4612 wrote to memory of 4324	4612	firefox.exe	108
PID 4612 wrote to memory of 3184	4612	firefox.exe	109
PID 4612 wrote to memory of 3184	4612	firefox.exe	109
PID 4612 wrote to memory of 3184	4612	firefox.exe	109
PID 4612 wrote to memory of 2880	4612	firefox.exe	110

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image (2).png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:5996

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4836
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1948 -prefsLen 27097 -prefMapHandle 1952 -prefMapSize 270279 -ipcHandle 2036 -initialChannelId {ea418fe8-c050-4467-bddd-328107bda067} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {8e0c12df-e90c-48fb-bf8d-a22fd2c8b71d} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:1580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 27323 -prefMapHandle 3860 -prefMapSize 270279 -jsInitHandle 3864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {e4b523d6-95b8-474b-971e-b958cfa49bc1} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3272
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4044 -prefsLen 27323 -prefMapHandle 4048 -prefMapSize 270279 -ipcHandle 4124 -initialChannelId {a94f868f-7c0e-46d3-b127-91b9ba181eed} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2596 -prefsLen 34822 -prefMapHandle 2732 -prefMapSize 270279 -jsInitHandle 3192 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3124 -initialChannelId {166410ce-1a02-4fbb-8af7-14ef22de55bf} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2816 -prefsLen 35010 -prefMapHandle 4948 -prefMapSize 270279 -ipcHandle 4968 -initialChannelId {9f5a6a76-22c7-44c7-979e-b66febba7327} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:1820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5644 -prefsLen 33031 -prefMapHandle 5640 -prefMapSize 270279 -jsInitHandle 5636 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5660 -initialChannelId {4f1dfd4f-ace2-410b-91aa-3dada016bfcb} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4104
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5876 -prefsLen 33031 -prefMapHandle 5880 -prefMapSize 270279 -jsInitHandle 5884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5648 -initialChannelId {f02ead53-9293-40e7-9da3-a52913d63b4c} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6080 -prefsLen 33031 -prefMapHandle 6084 -prefMapSize 270279 -jsInitHandle 6088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6028 -initialChannelId {b32c59d7-f798-4832-82e8-05b92f1f5154} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3700
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6400 -prefsLen 33071 -prefMapHandle 6404 -prefMapSize 270279 -jsInitHandle 6408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6416 -initialChannelId {fb0daa8f-63fd-4ab1-b3d9-cfbe5bb5595c} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5696
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5176 -prefsLen 33071 -prefMapHandle 2676 -prefMapSize 270279 -jsInitHandle 6820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6816 -initialChannelId {606a91eb-0560-48ec-a921-3008a502a088} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:2584
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 4724 -prefsLen 35181 -prefMapHandle 5672 -prefMapSize 270279 -ipcHandle 6096 -initialChannelId {0e35bf4c-69be-479a-831b-d0a5f1706de1} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:1376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760 -prefsLen 33071 -prefMapHandle 6072 -prefMapSize 270279 -jsInitHandle 5684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6020 -initialChannelId {c40f755f-e951-4d07-9d59-5cdabdc3c6f2} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5388
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6860 -prefsLen 33071 -prefMapHandle 6368 -prefMapSize 270279 -jsInitHandle 7032 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7080 -initialChannelId {93b0b472-3f35-40f3-b50c-37e874b0c52d} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:3720
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7364 -prefsLen 33071 -prefMapHandle 7368 -prefMapSize 270279 -jsInitHandle 7372 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7380 -initialChannelId {ed1ba850-20cc-4cb0-9f21-07ae0d9ed887} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4324
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7596 -prefsLen 40022 -prefMapHandle 6796 -prefMapSize 270279 -ipcHandle 7040 -initialChannelId {dece22f4-bd78-4422-ba21-084cbf86a843} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
    3⤵
    - Checks processor information in registry
    PID:3184
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6524 -prefsLen 36972 -prefMapHandle 5396 -prefMapSize 270279 -jsInitHandle 7212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7712 -initialChannelId {4f523fe7-eafc-49e7-9218-6ba24465295a} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:2880
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7332 -prefsLen 36972 -prefMapHandle 5760 -prefMapSize 270279 -jsInitHandle 7076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7408 -initialChannelId {e34d4255-c76e-46eb-95cc-8f84b43bd349} -parentPid 4612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:6340

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6476

C:\Users\Admin\Downloads\disasterlauncherwindows\disasterlauncher.exe
"C:\Users\Admin\Downloads\disasterlauncherwindows\disasterlauncher.exe"
1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
PID:7092
- C:\Users\Admin\Downloads\disasterlauncherwindows\game\Sonicexe The Disaster 2D Remake.exe
  "game/Sonicexe The Disaster 2D Remake.exe"
  2⤵
  PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9512A4488B00CC053350DAC32D417B4A35C11513

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
Size 15KB
SHA256 74f7998ff8749591d71edc8e150ea7624b4c7b4545f12e6d0cac98afd3990e8a
MD5 c54408284a33efa24310186932e26a1a
SHA1 7b36773949a11bb20a74efab1d5b0624dca02306
SHA512 2b4671c3b5609d3a519257fccb13afb7dc313beb28fde01344d6fbc1027cc6c450477c2f3e176421250273a28de2d105e21b20096e967019c90f94e5d8128a0d
SSDEEP 384:H9XghOiO024Yfdcs3hk2nhfdDE2Ba/rIVy8e1eQ:dX+ZYfdv3hk2nhfS2sDIVy8m
TLSH
T1BC729D7F8F117C592967D585C8AD8379DC05F9ABCBF691A60824344ACB8472AF0F60CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\AlternateServices.bin
Size 31KB
SHA256 0c8b141cc5e1581a39cd531dcda25855d437d6f41b537b8bbf7af69eec27ea8e
MD5 0ced004338bc36db130f1c8ca64a3c1c
SHA1 9831b5285ffd1a721edb6c7d886ffc3a15547ccd
SHA512 ca62eabbc30726c7a87916c83a1c35d38b2167b3bb829562312936a3581481e19a4dcba71908db30c3aa2c1cc79bad55bec8abb1d649f83864329b7128602838
SSDEEP 96:kJE84BglVSaVM/ptEUyx2mQebOJ6bmHb8bJgbgzPbtblb6ETbXEbE/byebVKcbLH:oQN22ZmUgzukss
TLSH
T16CE278E71FB57863F0925FF84498B48C9C33622958A8D5E4CB44C09702A5798E17FFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\AlternateServices.bin
Size 13KB
SHA256 80f0d342379496903b60c13442a1f8667b5cf97a388ac919723a18dabcefbd46
MD5 a4853b792674b61c47c6c5f298a9898b
SHA1 5b7b10c75b14eb98b55d944f4b8eb057b91bcabd
SHA512 190d944d688ffde3bfc8682ad880629d44cee9f6e7672ac34d6b37f4b086ce1e37205161972bcb0c6d5d80ec3dd0544f3ee9ff5d829ac5f3d6452f33ecbb5089
SSDEEP 96:qnJ7PpBrs2NRVM/ptEUyx2mQebOJ6bmHb8bJgbgzPb:IQN22Z
TLSH
T15A520FE76F7564A3F0928FB84098748C9C33221959ADA5D4CB44D0E702D5B99E07FFE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 0db522310fb43ccd6bbe0eaef28ede099021ab3bf3ba6b6f4a8a97a7d31cd513
MD5 2ce752e04f3b2bfd58b9cbb24bf3ea0c
SHA1 952d48bd245847c8d405bd9c9ed600f67b96972c
SHA512 fd723b1597adf55e3c0ead96e52a2518d6a153d73a2efe2b908ff1e247ba24369c9547ff9d3fff54db2cb0b74e762ad26a95923ca5667973d0fa224b99086d20
SSDEEP 768:Ses13NDsf7Gcm+uhJRN8i0m8bTbUb3bH:cNDscJj
TLSH
T13FD20144EB2E953FD41812BBDCA55B002F79B88A58192F673A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 9dac04041c4f2edc29e86a23d551def539d2f1064fa414175a5111e58cc3ca07
MD5 5e6e91800899385030850b7cc6bcf4bf
SHA1 12ccd0e6ee95b879a875ac7985044f11d67fd8ab
SHA512 a61e0f74f3a341d42f2a7c5ba4f270b9eb95f043127b42aabb509378fa30a7fce6014b5fb1608524a3c9369ba266c7aefee651c08c13a90fdb0db7cb8b5b6cf8
SSDEEP 768:4W4NDsf7Gcm+uhJRN8i0m8bTbUb3bHW1/:cNDscJjo
TLSH
T1D7D20044FB2E953FD41852BBDCA54B002F79B88A58192F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\events\events
Size 4KB
SHA256 3bfb392692abc307a0836a19d2fb3018ec562caa2b9a82aa14bb5b458c4e2b1e
MD5 da6822d79fbeb10e2d535f42fb89c1cf
SHA1 797a328980be19ece57ee5d405360b03fbe2fd17
SHA512 f78b371abe346f327e59e9f1043aca90f210fb8a61803f00dae1243425ae11d709a1bd09ef3bb974f4b7a3e93eeba4c6f85490024930633eb1a176e69a3ff9cb
SSDEEP 48:YjedbYA/558psKNIJgyzFi/CC/iksj6avMIDkcf4z7lbFf6zdU6xdkRYGMpnD2Xs:/fuy7I+lvL4ztQzdXxdE+FKXoAGOx+DZ
TLSH
T18CA1100D2AB90CBFA9CBD29DB44142CD86D96B0384C61C874CDBEE49CD46A9E325F13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\events\events
Size 1KB
SHA256 6788bddc7eda4a3aaaeb870d3b29c26356f3f23d9cfc05a10071d008a18cc92e
MD5 540448ff7b668c198ba276b2c94f8679
SHA1 29dddb96348a46c964150040e4c51b219eae4bb7
SHA512 6b1f424b6a339e41b9b5ecf3d18a452f89f102ab22263e70d4e6f522d0542dc1145933c6b5f09c3865701176712c5eff069c0e80b95ae3c5a5fd873a4baa82a7
TLSH
T18821255C3AB84D6BE8CAE69C7441128E97516E0709971C474D83EF8ECE91ADE326E438
MD5 SHA1 SHA512 TLSH

Submit Download

2ffb613a-7399-447b-969b-8f56e31fcb8c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\2ffb613a-7399-447b-969b-8f56e31fcb8c
Size 235B
SHA256 334061a9f145bcf5d3d9266ee1af7bc3f8202c495bfa22565105fa841c4f16bc
MD5 d01628219d46805dc14d797ce8b3d881
SHA1 a8be70fdccf928dfbd5c87e11860a9906b7427b3
SHA512 c58f2de9e26e4ef5d658b80bad0a050512b815dc36b30dd9fbdb414fac3c68ba0768df406621012537047e98b1f87c3475693ad4fb42297a7d4b670d40013f2f
TLSH
T12ED097D0A88823AE08284F12B8A069C630844C3320B47C10CAA681748AFEEC6426380A
MD5 SHA1 SHA512 TLSH

Submit Download

5a450a6c-586c-479e-b65b-423a20b429ca

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\5a450a6c-586c-479e-b65b-423a20b429ca
Size 871B
SHA256 47ea9a9558d3a4bd36120888dfc5da1df6bc274fd2378a203fdedb1a97c6e487
MD5 2e05de9a0124b90d923454d37e0debc6
SHA1 21ee6545a94179ba1994f432e06f60d03d0ea218
SHA512 0796d5dc77e9ca63769695c5a8965989ca5b85c7348e274a079e21417f2d8756225a1a3a35c1cbbcc62e2ffc5ca72230e7ed508033676039058d82c39194e6b8
TLSH
T1AA110040C63176B2CC28D24BC8A53755DFE4B92380CA04043DA58A080F7E61F976720B
MD5 SHA1 SHA512 TLSH

Submit Download

750e4bab-f83c-49d2-bbcd-fb3ece041e9b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\750e4bab-f83c-49d2-bbcd-fb3ece041e9b
Size 2KB
SHA256 ba7d748b89046046aa60b57d5faae09719f8971629c1ebd8193b3120d49dfdd0
MD5 8d7d384bacfcfef4bf426be31c917108
SHA1 ac1e84ec020e84e9e77faf8230dc9ed0cbad9529
SHA512 4511819c023ab725faca893973f21038d0fc40094e590147931baca093e5a6f1a4f87ecb244a10e6faceae916fab0bd45d5c6ceb07854a264cd054d09f33e0c5
TLSH
T10B4133AC35744D768C8AF64DE4C233CED7649A1344862C832D41DF0CCEA669E736A42B
MD5 SHA1 SHA512 TLSH

Submit Download

99cfd6bf-440b-472b-9c10-6c1dd09fbf5f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\99cfd6bf-440b-472b-9c10-6c1dd09fbf5f
Size 886B
SHA256 30cf628e86d9a1050a4b77c248c9c69839025876e5b6ad6c4a9123b08ce191fc
MD5 63a3eb80127b7b7ba431d4c28840c6ad
SHA1 130052b67cdd58b5943fa9657551816a2542c765
SHA512 e30a6f87d206aa601f1f9b1cfd609c532b69e766e9a4a0a63a49732d8f8f8603ea1823d443bae0dbe9d44fa83ca331496a71797866c39264a631143f7d6f0cf8
TLSH
T1BF110081C631B9B2CC28934F8DD17762CFF4B423C0CA0A047D949A084EBA66F7367207
MD5 SHA1 SHA512 TLSH

Submit Download

dcedf64d-65bd-4766-901b-f436823fa911

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\dcedf64d-65bd-4766-901b-f436823fa911
Size 235B
SHA256 7159172890f9500f43214556eba4cbe18509703fbdcae89bb5ddb35513047095
MD5 4c48b444f3f4ff8cce0b2fff35250dd1
SHA1 f785e8f2790cfafddb422b6141baaf6f4a7b579a
SHA512 6b366a9d96ad7415cb1092fbe646f063cb4021d726858239327c994728eefbcfc37632385bdce1afaa21e92dfcf842c4d6d365224d7cec0af9a60d59b5158157
TLSH
T120D0978014A8336E08280F0AB1F068E230688C3324A49860EA9005748FBADD542A2827
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\extensions.json
Size 16KB
SHA256 5ebe914307d18c36dc6ee542d77187482143d8ca1a27dd1038a20e9adff59743
MD5 6d13646bdea240905caa80324c0123f9
SHA1 7de592f9987dd0def24c77ff9a60b4664c6ae20c
SHA512 338c6d8350e181c2e6a06366e28b5dd9fbb8024d20ad1623d9c6d4324ea5a4d180695b828bc730cf77c5cd72e2d32c8752f0672c06f8c8e0588a9fc37cbf79d4
SSDEEP 384:qkI4v3Umldv/8dhWW94zg96oNL4H1L4PCL4HtL4HCL4Hx44hv:NI4fRfsXH446+4V4Y4N4Q4O4t
TLSH
T11972521545048EB8294EA78BAA367E01C37D573B60855C78F4DD8FC802FB5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
Size 12KB
SHA256 19397ecf5626e6714cd2fae10d5a725b21b867aad43b8a23852e965d7a859f93
MD5 e22576eda4f3079e58a78bd4cb7e8be3
SHA1 5b0d901f6e191f8abb4b9cf4e994bca6b268316d
SHA512 cdd5744a005c0bf3c2543c9ecbbfafa5d23b94979815391fe024fabc866821ba6239c637381d6ee670a8103570deb4f77de6a47b6f9b7ca06ea2b9e7d98d41a8
SSDEEP 96:xHyNTUJPqGqPf6KJNbzSrSSlvdv9jLn+cpwoDRN/CaRaGO1w88ZzHa2KDw32B8LZ:soCRPf6KJGSSZLRF73O1w88Z+2KDw3q4
TLSH
T10442AA3C56448E3F60F2327EAC6189615991223777FFBCE215F99481045CF6841EAAF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
Size 12KB
SHA256 ed78ce70d2980e1ead6a19517d38492b71f8fcc3624563825e5402953d741115
MD5 d6dbb99e0c62ca6478d9e13cf7f3b7db
SHA1 b4ac2d9fa72f1d09f277df467972b19cb5d96813
SHA512 495feef69d0686ffccf56f2ae0f6ee069b2f0f9c473f7e6b16570a9295134e7bb6f2e7ac13264641e0b8e22482d1de0f29657126e14b8ec7855ece1678609a41
SSDEEP 96:xHpNTUJPqGqPf6KJNbzSrSSlvdv9jLn+cpwoDRN/CaRaGO1w881zHa2KDw32e8LZ:voCRPf6KJGSSZLRF7nO1w881+2KDw3L4
TLSH
T14742AB3855408E3F60F2327EAC61896159A1223777FFBCE215FA9482045CF6C41E6AFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
Size 8KB
SHA256 0da897c464674656fd9ea4d3fb6aed39b60c8dea805a7cd8cc7e78c29d856731
MD5 db36c97fdc51c5aea5037d4c166c6df2
SHA1 36c9580e5674f5b105d9859078ae25deee6c6567
SHA512 ff5533feba420ea399c65d637591728e085f128236a49e166a1280d250e018e9abd41a10bcdbf6afdd195a319d4fe120111cf8ef5549558721cbb0954bf95164
SSDEEP 96:xHpNTUWqGqPf6KJNbzSrSSlvdv9jLn+cWRN/CaXBw88V89i9n8L4cnAV7wyGS:vARPf6KJGSSGRF7XBw884i957
TLSH
T10702FE3C95048F7F64F276BCAC6489316AA2123B77BF68D710BA5485015CF3841F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
Size 7KB
SHA256 6a610ae24ffd6cbe01e09c0347fda08e3a93978e8bebb910c98e1f919e134adc
MD5 9472d06a844b27de3d3219495f4d6b0a
SHA1 8063217952e5f57f99c89c8e1af8b40249c5b634
SHA512 24b5c32b829c937b87411652908e820aff75b2eac2e2a876b7bd12665e368410ec1b72cf685ecea35fc7727af5ff33fc66eb941e98b1e4a2ebf0e8964e6eefee
SSDEEP 96:xHpUTUWqGqPf2BKJNbzSrSSlvdv9jLn+cHjCa/Bw88u8L4cnAV7wyGS:vRRPf2BKJGSS3j7/Bw88q7
TLSH
T115E1117895088F7F64B676BCAC688831AAB2013B7BBF58C750B95484015CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
Size 6KB
SHA256 0ca1f94eff87d2a0dc5ff70e673fdedb979a712c2ee5f419d98f2b098f4d40cb
MD5 452cb65708892ac9fc80a0dba24d8bb9
SHA1 9d1613ccec3a28992daa5b5471a0fdda2a616af3
SHA512 fd9863674825fdacf4c0fee8061f6a82f42d86308017f7634e218989e3c6bfab5f393e446a9d8bfdc77d678a5a2dafa90e3309bd7a8b275f38c6bb4d713c67e8
SSDEEP 96:xHpUTUWqGqPf2BKJ1zSrSSlvdv9jLn+cHjCa/Bw88u8L4cnAV7wyGS:vRRPf2BKJySS3j7/Bw88q7
TLSH
T169E1117894088F7F64B577BCAC688831AAB2013B77BF68C750B95485015CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs.js
Size 6KB
SHA256 3562b2104042c198d4685cdaf2725f266707fe578ec34bcde51c19dfb303fecb
MD5 b98898ef7d556668b6c09546b4607880
SHA1 f31f6bbdc56ea014d0f038a479ccb1800a8bb9e0
SHA512 3d80dd1ece7c030e18a1a24e81893858297c1c7c60b12f7c8a780b8d8017b40db3fa137fa3d721e2104a8dd4d63406c58e77261b4bc65b51bd686a265532a32b
SSDEEP 96:xHpUTUWqGqPf2BRg1zSgOSSlvdv9jIn+cHjCa/Bw88u8L4cnAV7wb:vRRPf2BRgnOSSQj7/Bw88qU
TLSH
T117E1207890088F7F64B6777CAC688831AAB2013B7BBF68C350B95484055CF3846F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs.js
Size 6KB
SHA256 a2a3146219067a1475417293b4eae526e60be93fe917c15bbea91dd1a87dce12
MD5 7c8b548ea3c05ea050fe924ce560fc37
SHA1 f0f1f6e1b7a72feb12ff89bd7de3a00dedac49b4
SHA512 36ac3a9087305529a69ebae367fbd8ea3899658745dc0cef46a938e5799ebac3928f0f097f2ef98593a5a08e3376863d8005867232011c5ef0b69d0aac807a8c
SSDEEP 96:xHpUTUWqGqPf2BKJkzSrSSlvdv9jLn+cHjCa/Bw88u8L4cnAV7wyGS:vRRPf2BKJ1SS3j7/Bw88q7
TLSH
T1B6E1117891088F7F64B577BCAC688831AAB2013B7BBF68C750B95485015CF7841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 6KB
SHA256 3252b4cf21c86c3248b042df9e85c6e174f115330dcbaecf9c23691302855200
MD5 65be8f5a6607a64c67fe544b13beeaea
SHA1 c421b40373ea589779b1d6fc7b31b7ab86ddadf2
SHA512 7ead9c0ce41bfe2b502b0154731c168474361333c32de1c6f7b208a5359c8a8fec0d455eb454dee83724713ee28c8f18af3d488d9959e2072f9001681213bdc2
SSDEEP 192:Qkhcx9E2lb7BOCvGl6XnsEhjFRwDwjQ52JhoimilKT:bh8y2p7kCvGl6/bw0kmKVGKT
TLSH
T139E19EE2DC00119B73E441C3CCC66BD5A2AA3801C6F041588D4CE7394DFDA8A6BECACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 221cb566bf4a928a3bf107406ae1797872fff2bff689fcf0e957c7ea5a7fdfdf
MD5 0046546672c5fa421d87d58f1014926d
SHA1 eb43e5dbb10db4b385a12a8b9648041ace1368d5
SHA512 ce21120ae236e430972256ccda3fd1d0efeee8efd5bb459192559f46236a02fcd88d5486fbbb6db983da252e0b86bb7ccab7e31eb91a47354e7a71034000dacb
TLSH
T1D2614CA1FCCA08A9A69C414790C1ABF5E5F54413D3F189A59C8C8A2D24CC9C83BD66EF
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 10KB
SHA256 948f63b98b5fa7b33081eece8df572cc2ce89a836cbed6a46b51ebd9a71312c6
MD5 94b8b30463aba8a4c47d1c13e0e8e54e
SHA1 a623f5dda63f8adc7c120dcd47e24b15515631c7
SHA512 3baa3ffeb6189f8d96ff9b26b1f29b68d7e6b7b9007e7e2ee55f698f4e93145e99b4fd7df14cbde06c0fa79b25564def89d339771602cd3f3125d289224dc641
SSDEEP 192:ZRSXT93/LxNo2nGL8F8Dtjrgq6sEHcnwljrpF9ItGZMwM1P4h5x06C0Xx:zSDnB88qjrg9DoejJvMuCQXx
TLSH
T123228E775A5568A4C69D608A88D6EF0D19E97D0F9272012C6E01BDFE07B474F434E3EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 8KB
SHA256 d6f041064435ea45626583643591342f8bac9790730a33c6836f1d00be246fb7
MD5 8462beb464a9af44e6ebd469550def70
SHA1 6e2873c44280aa7aefa2e52ef6d5752ad756169e
SHA512 19dcaa2bf57d8260d08649a1a0809cd50552c7a9e35d2d9bbe094430c644e43682916ced773e64297683c823086916edf056862e15799d7d83ee1af5f9a019c9
SSDEEP 192:Dkhcx9E2lb7R63ORNCUPUxVAjVQjQ52t6oimiUkCSQ:oh8y2p7nQJk87V5kCr
TLSH
T195028DEEEC08945581B41886C4C5BBE1B2FA3C1AC2E042198E85F73E56B4A4637D87D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 12KB
SHA256 2165f090dceb508ea2c5cd8fdc8d0c51f200e050440eec1670ebedafeb9551fb
MD5 52a9406d1ff2323e7e569ea31801794e
SHA1 ce4698872b1dd3ba531d6a6fee946a023a08ce24
SHA512 6b2d36256594f9e60be5f842696401e2becb71102c6c2d8df7251db3123937dd0fef4b1d4b705d79b944b179258db03b4ba354f74187eddb87953624c6fb2f80
SSDEEP 192:C99af9XPWhkU/BaYb1UaxK9XPzozsVaRHzoysFjGGZoAT4CicgQVmnHf:i9SKkYvXKFEhofoC4umnHf
TLSH
T116429F66A160E82487EE7186C5C5DE0C1DDDEC0AD39600ACE640FA5A4BF870B671F7BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.baklz4
Size 10KB
SHA256 5f8bb67e2fab42e388224baf9f59cba4959e812d771e77d9ccc6bc0259786249
MD5 c58784a8c2abc7d1ba87402f69af5402
SHA1 9dbd6da6c62dafc052f48d2c5d1934770d2b31d6
SHA512 e383e518308a001a0dc84b49aebe8be7cac2e506cae7c28ac17c06fe4ccdeeb816339731219499e05e157f35222e70c66751e4ea343df0269cb9882d11fdca2c
SSDEEP 192:ISXT93/LxyoA5nGL8F8DyBrgq6sG1nBljrpF9ItGZse8wRNh5x0MgAdUAf:ISDnm881Brg9PDjJvswCmUAf
TLSH
T144228C63965558A1C6AD708AC8D5EF1D18EA6E0F8271412C6A01B9FF0BB474F138F7EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.jsonlz4
Size 12KB
SHA256 80b0aeee5ba77565cf41dd7db6cb0951a6b2bfbb171b9a11cd4b397968360f4e
MD5 68a29b3ee2e6b07b80c05d3bb56a0765
SHA1 74b0d555f7b558ac05b6d1a30a3b6cb388a8beff
SHA512 d2954627d8cea0ef07b103529ff9d9a0c6189c5dec95ecc1294fcc101c4a74d7c0ebfe18b3d65565bded3b4439631db09d0e3b81db91e8bec30e337eedcfdd8b
SSDEEP 192:199af9XPWhkU/9aYbKp/XDKw+xbmMxFZfoS74UBfFV2GZkAT4CicgQVmKHf:H9SKkYo92wkJXbkC4umKHf
TLSH
T1A942AF56E164E82047AE7492C1C5ED0C29DCBC0AA29650E89904BB5F4BF470E562F6FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{22fabff6-c10d-4804-ac42-98a5ad25966b}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\107\{22fabff6-c10d-4804-ac42-98a5ad25966b}.final
Size 273B
SHA256 a5d8e775c1bb1cbcb90c4b7c6cda2eb16f00db8cb71cf50598a619a6421d23d6
MD5 78d1d334760450c15a213fa8d08148cf
SHA1 a8d16d2b6342b7841f921986f7cb72e8cc45667d
SHA512 e64ace6c08492a8042087b8550c8dd3782c7b9356b709761cd0ee6cd123d07c4ec26917ec590c093c99ceedcceed99eb2513b409331c094d15abfcb1764cfa4e
TLSH
T136D02BF4C6594988EA1EDB25937FBA1C504EE2F312B9411CE48C8360A908849EE1DA09
MD5 SHA1 SHA512 TLSH

Submit Download

{79cd4acf-ab4c-4fc2-beb8-75e7097b290a}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\10\{79cd4acf-ab4c-4fc2-beb8-75e7097b290a}.final
Size 192B
SHA256 04cae3c7b208fc55b25763913d0bbdc99232942086efdf705f2a27764be6f5ee
MD5 2a252393b98be6348c4ba18003cc3471
SHA1 40f75302fcbe4a8ac2e33a8d9daf801abc2a9598
SHA512 07af4a7b0d10f1b5e1fe0877b21abc98483d78797608a1763cfb71e25559fdce10d20f03c16f4284d7ae7ab90266f45240425e3a264de9525ec1657345b85198
TLSH
T113C0225846A8EE3620A3CB3CC827E2820A3B831000498484E6F94A540C8BE850129A01
MD5 SHA1 SHA512 TLSH

Submit Download

{a3c9ac85-4dda-48e0-9f28-9c6c7e16a275}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\117\{a3c9ac85-4dda-48e0-9f28-9c6c7e16a275}.final
Size 3KB
SHA256 6c06425e0e6f2d3300c8c3eaa5af2ccbc48b499c232fb198b9dcd59db8737d40
MD5 97ec452cad7a42e4e2202a65f99f8766
SHA1 afa3192704cff3a368d246c98d872166bafb41b1
SHA512 8e99fd1a0d3fbca9b6ea6473356ca3d5673bc87284fd4ec3dc415272f3566572a6b2fee5d006db93015dcbf170daf207be941a9b021b9e0581ac57922ddba28e
TLSH
T197817D9EBA68C9F059633ECDE4171031177220E00CE2D71628E65632B4D50C7795951F
MD5 SHA1 SHA512 TLSH

Submit Download

{bd3d56fc-8abc-4bfe-ac59-6afc3e85f07c}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\124\{bd3d56fc-8abc-4bfe-ac59-6afc3e85f07c}.final
Size 311B
SHA256 7a27d4444bf0e864840bbc6827f7fe21cd071a834d5f82e4c9ab325efbc0baeb
MD5 33248c3b7677be361bf337a5d08f0b87
SHA1 af13654a65c094536855fbe79eda2fe7a9b5d2fa
SHA512 210696b948568044f1d703a24d7be5a6937f15f874451611d860075b1c9f26dc830cd995b92694021ca6d372248c4d299beb0fea8702df84ad2ec0b50735761e
TLSH
T106E07D42418D284D450FEE389E1E668C676B61E367F5005CF5A86DA45B84752F03A2DC
MD5 SHA1 SHA512 TLSH

Submit Download

{36c7ebc2-0f72-4551-a7d3-69913c42607e}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\126\{36c7ebc2-0f72-4551-a7d3-69913c42607e}.final
Size 184B
SHA256 51dfe813befe7a6d7bca7aa568ef88f59d6916180ccb521bc3aa46277fd8ab18
MD5 e3b409b3d049a2cf873eb49427646374
SHA1 8342aaea8b1afd1bf6ec66d3bc907d4dbe49bff6
SHA512 d6ee61b8b11ccd140291ead1fe00834e7495989ce5e65e66fad343643355c609da2d4978826c947ac5ab984761a1f0c329b1c50f42ab832d933b8951d3191f84
TLSH
T1A8C022A0C05A4948892887249528B22800AFB3E0238A149CF8CD13021408892E62929C
MD5 SHA1 SHA512 TLSH

Submit Download

{83744941-6f6b-4904-b9c1-8dea98861a0c}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\12\{83744941-6f6b-4904-b9c1-8dea98861a0c}.final
Size 335B
SHA256 bbaf8fcc3720af3e3bfecb0da46dc0ce9c12cdf34893d9e793f686462899fced
MD5 a73f7826f1eb9cdd349b0ed527a1ba9b
SHA1 58a8ad293e2ea1172d2dd818e280596847ca4806
SHA512 3b81639c23a4ddd9379cdaf7c015fd0fd5e95409a75266b7f282b34ef2e86bbfd20ad7c37edf27020b97abb70747f9a138c59e7e611960ce6b3cecc937a36027
TLSH
T189E02011873C4CCC515AC235896B750C0225E3B371FD04F4984C1A445B04852FF11D54
MD5 SHA1 SHA512 TLSH

Submit Download

{58e4639e-b9b8-476b-8855-e5242576f886}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\134\{58e4639e-b9b8-476b-8855-e5242576f886}.final
Size 422B
SHA256 956b3ca0af73c90eb69618cd17d60283cb4254914bb6791e2e009722100c913e
MD5 88ab153e5e64b5541a65227b76d1e848
SHA1 8a39afa9f5bb03f5d5eb4f836c2befe34bad9d19
SHA512 ff2206de9ce1871e1c1fbc2daa21ade0b53c243f795a2db39f886eafd014d089a7423f4e0af302ff3b6a76ba9694dba3ce64f7719e38768f0b1da54d3d3130d4
TLSH
T139E0AB89D5CE09CC83289F094D4B12AD130FB27EAB79856EB4595098A8588B9F821FCC
MD5 SHA1 SHA512 TLSH

Submit Download

{dce1c48d-1e18-4929-8e81-647cb99c6c8a}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\138\{dce1c48d-1e18-4929-8e81-647cb99c6c8a}.final
Size 58KB
SHA256 a4fde1c3e2c92f58912e788793f42b8486673d9243800f212317a6cddad71409
MD5 c2e46be1735f4e9eb858aea068d5e181
SHA1 a6f1fc316a2b2f740bd918bcde6420f655520f4f
SHA512 04bd7b06a9f100841714f9882dda9e1b45de22356c3a35a9a582f86efe5d886fc36a9fd93c0cc28cb9a83d7a7625562ec1e944443d76b0a5152d99f9506a54c9
SSDEEP 1536:lHpNF5zN9fa+Nd1tJtoWY2UVQZ+vRlfmGs:lF5Dfa+NDNoW2VeQ2Gs
TLSH
T1664302A598425A56B6F2D59AF51C3D9004C05C8A2DC322B73BEEC3244E17BB05FEA7A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{2193a5b0-6800-4d9b-ab03-6f8fda43fd96}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\150\{2193a5b0-6800-4d9b-ab03-6f8fda43fd96}.final
Size 475B
SHA256 c1727e2d138a94617c3fd4fdac4a7751e0aa4b62c6a0e2357cba17bbdf076a2c
MD5 97bd43b4fc82d3acb6e10a48054255d0
SHA1 21e7f3fe5bd49f4ffd501abf114517246fda7448
SHA512 9735084a29f9e15e78e17333b0071bc4a62f93c82de573187e39e4cd8a540625065c5c1d7c807371acb934fb8cbb5d3f43654dd0842c494e44c4603cf950cc83
TLSH
T18BF00EF4080CB2141C390704061DF20A686BB563234E0549B5C8669A1B0834B9429B9C
MD5 SHA1 SHA512 TLSH

Submit Download

{ac7295bf-38d0-4bdd-ba81-f001992b239d}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\157\{ac7295bf-38d0-4bdd-ba81-f001992b239d}.final
Size 41KB
SHA256 49f665564c77c648f03b91a1eb4a10b9e5b6dc25b45795471eee93b778fdb66e
MD5 8b82b58d1017748d34496605d287ab86
SHA1 5de6a7015362a47b9641440d8207a523b73669ea
SHA512 60a9eb082e0a44ec1e8748a21a8bb7a052f6c2f23bccdddcd44a31495fedd94c3d491fe1cc96bc0363283bf82e781043f3f59461dd639e71a83e0bdb25853480
SSDEEP 768:ID11BiGdbTHcYvi5x9a6cmY1jZWGK/NYr5sEeOTGFED9mxmaTDgLpnhIiyZ:JGZTHn+9LcmY1jZWYr5tZaT09nSic
TLSH
T11913F18C8B250F5189E375A86C0E681655DCD5801B0B12E2C535BF3CEAFE81A97F9F60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3456f7f4-07b5-432c-a2a2-63419803330f}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\15\{3456f7f4-07b5-432c-a2a2-63419803330f}.final
Size 329B
SHA256 0495e9f2a6dd37a787587b96429e7e96a5821085f53507861063e51832f853f0
MD5 06ce5d1f93456bf84d4fbc0a21d3c723
SHA1 e5af6cbbfee1f0f6664598bc5857bf8cdc1babfa
SHA512 24380f9c2f3945dcaa3ef376c8c0d809ef73d5d88ff16bfc85b8f63cbfc9cdc21c2584f9866e835d93eefbc50ac7b692683c5073c6f92903a1f83b8181b8ad0f
TLSH
T14BE07DEDFD214A8140EA4F906C6914564FAFC33EB3C2024EC204C2627161CBA940AA9C
MD5 SHA1 SHA512 TLSH

Submit Download

{49a74a78-264c-478f-ac58-cac3297ff6c4}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\196\{49a74a78-264c-478f-ac58-cac3297ff6c4}.final
Size 297B
SHA256 0ed3210afde1d7afa7e02190104fa49b6e995de7826f7b8b949053b22900182d
MD5 d75d6c6a4adf75a4566ce9f61671afd2
SHA1 e0edda3b6bd889a4f1767cacd1bcc32c6c7a8fed
SHA512 ec4e7680587c1251b5302d0ec99885cf066b83720f36ea0411503395b508f45578c4426adeea598a234a557f226954c2b1f62fe7ff5a84fd078a0c46a5e3a245
TLSH
T168E0EBBAE3AC6C08F90822068678BD1C021BF2D3B3FC80DCD8860712E809D49B4F11EC
MD5 SHA1 SHA512 TLSH

Submit Download

{6bae39d2-5c22-4a9d-b5fa-7597b9ff94c7}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\199\{6bae39d2-5c22-4a9d-b5fa-7597b9ff94c7}.final
Size 451B
SHA256 00ad6a28af951086f596020b7688bf2c5b86e9c3bfa5138fab026db32d08fe5d
MD5 6bc92646baa09f0374706583555ecf7f
SHA1 875a6802c635f81ad917acd43bab81a3cecb7916
SHA512 bcb2ef3dbf1a3add396b414b8dee79f94326deeab7e50c4ef357778a8f0c302c5a7cc1b7ef2760e648d6449e1730d20bc91946bb9a96c53b0d30a16361edf4bc
TLSH
T1B8F05CEA6254250C981F4723FB14BAAC240FF3B673B048D8D44E9E145E46C86F54DA98
MD5 SHA1 SHA512 TLSH

Submit Download

{9bc674f1-d0f3-40a0-bea5-5f630d4effd2}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\210\{9bc674f1-d0f3-40a0-bea5-5f630d4effd2}.final
Size 280B
SHA256 b7457a4fe828a771a9223ff698a2b252cf35a0fbaafdd5d24ffb098a24f4374c
MD5 3c05bdd1ed94b7b8c62bd1d8ea99f34c
SHA1 56ef36dc7930c2d3d4581146f54b7b09611ebe77
SHA512 ac6ca8fc60905ab4cef408047e13b5118c6ac2ff6f2596cbaabad1676714f39d9f7acf5c1f1e614b7e51befd89533efa8fa77662c01bf0d47304838bd784a353
TLSH
T10DD02B97A14905055A08DA856A2A6E15C01FA2FD4BDD511DEB8C065815D0933FC1A34C
MD5 SHA1 SHA512 TLSH

Submit Download

{a664eb58-638d-4d07-8597-6607ea9eadee}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\238\{a664eb58-638d-4d07-8597-6607ea9eadee}.final
Size 37KB
SHA256 dd15a23185ac5574d79574ffeb6273a773563a0d4f12db9b215ccc052064aa29
MD5 9b318b493639ed343b91626daea3194d
SHA1 d5523daa9477e956aaa78146b7707a743afd4ba2
SHA512 215cfda6ef217454b473b314ace169bc16484d916e171d808d9d3293927862e0ab118225850628d5d322e7b44e251ef3174cfa1db0c0d00dca1102157f68c2cb
SSDEEP 768:Lq0WljhRLFy70YsAZyloLWatKe4/xvzcc+ZzgRs+otsUZsyHnT0p:Lqnl/FDoL0dzccfs/ZRHT6
TLSH
T1FE03E0ABB2D48456D0E3D3C8654B50C2C2E17C699795ACD2FDA6EF3B1A3B0C3D132652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{c55748bf-22e0-4211-afe2-ea52de610017}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\23\{c55748bf-22e0-4211-afe2-ea52de610017}.final
Size 418B
SHA256 aecfec69e6667ab47d43dd9b2baba9fa97e4dc7040ebaa4d882e042966b56810
MD5 9359b530bb5428f90a4cefd9963896e6
SHA1 cf7757fe445146c1468bc252147e30eb27f32143
SHA512 4f389e47c70374f76453726a49a9896a522736dd2c00c399932f811248e2aeae0a2535ce3632d980e3eacdb3847bfcbabc2f11e74b189e60a2d11d0b8409acf4
TLSH
T131E0AB6AED7C5108513CC2328C6471090316B1B723BF08AAD80E2A841919C68FB29EA5
MD5 SHA1 SHA512 TLSH

Submit Download

{4ca3cc57-3b19-468a-b06f-a74f3e7ac5fc}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\252\{4ca3cc57-3b19-468a-b06f-a74f3e7ac5fc}.final
Size 255B
SHA256 a8ac8397fdb12e0234904357e7d7f6e0a13044ce39651b15dad9a5cfac0658ac
MD5 fc960fd63817a72c48d6fb666dcf795d
SHA1 5284292a6cca2db22e1d4c8d58eea598b47dca13
SHA512 81453590659a0f9421ea72490fc48d984f99d4a269a6f2f15cf2e4f18e7b9b5c0e9157fa9d79619fcf975ac9fac47d8778087c9cd05ad4187d5e2d189061a671
TLSH
T1ADD095865F483444E11A4511573FF57C5137E172B38E014EF5C41124A800DD1F46438C
MD5 SHA1 SHA512 TLSH

Submit Download

{27d14749-a5c7-4564-94cf-2dbe0182effd}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\253\{27d14749-a5c7-4564-94cf-2dbe0182effd}.final
Size 2KB
SHA256 0702bfa6837ae4b52f8a1f1d44001ec45c8ef71b9fa67ce332e4d672a9a0b1c4
MD5 b26b79f6aa96998b48a55e2524b62447
SHA1 bf81d37f0eb4245c78ceff18d51fc1a29941437d
SHA512 4b178d6a5fecbc3944951efcf6822a7cd588f8148fb091c4b54a5c2db198f31d088de122fdf298698430d1fe3f16a4a3382400b3ec6523e02afaa63bf3f5794b
TLSH
T1EF41D7A042B0E7CB7155CB0C8AA6F04526657DF12AB8D0B5579CF1B4A04841ECCBCDA9
MD5 SHA1 SHA512 TLSH

Submit Download

{7b6b71b1-e748-415a-9599-f2659d470a1d}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\29\{7b6b71b1-e748-415a-9599-f2659d470a1d}.final
Size 100KB
SHA256 1971436cc53345041d001e28915ee29526e08d7f6b503a00ab31ba8d2ca58d2f
MD5 eb3e8761d3aa53a0fc01b3a3f64c3d86
SHA1 3b468f5f362a1f41e669f25890cf6e6b47ea1be6
SHA512 fd26636419a4e221a98ee57b6a8a5015f49a144a7b63c003d291b698a0987cd9c858d8f203a6492f7920010898e5623233dc8136e3d5ac3c0959e8f7fe4c15a8
SSDEEP 3072:nZ1I6ttYPFgTUNlgI14Opo2fBHQG1f2xHo8dge2RYFeK:nZ17XTUkqJoitd52xIIqRYFN
TLSH
T1A4A30272E12E5A57F77100D4F4910096B995C972BF8EABD3C6C9131C629FF88EB7A210
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{f9954f2c-cf26-4da1-beca-0b06042ffc02}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\2\{f9954f2c-cf26-4da1-beca-0b06042ffc02}.final
Size 11KB
SHA256 32775a48be2775cd43102ceafb048399c89707eb963bcdc59f661838671f3aeb
MD5 768408d67ea0d05b09e9aafdf20ec65d
SHA1 366a41d5f96c40d7c9f64d0beb185af220efd027
SHA512 5c7316dc42823e1e8cdb20d2fe7483ae595359f58c7f3b4dc268e51d5d136708d2e253e16c416d204acef6034b93b070afb29e605d5fdf63d2ee8f9b76173d43
SSDEEP 192:rLM8W0onlg8ASdbmWkmztk7TmGBXsvKhii66dx530pvpExWjioSTI3jyxz:rL1dSdbHkXzBrlav+WHAoGz
TLSH
T13732B0A99B9554CA332FB75DDD183DF4B808AC248DA8AE22964C41731CB6CC531945BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{b01a8329-91ea-4c95-89d1-016baae78826}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\38\{b01a8329-91ea-4c95-89d1-016baae78826}.final
Size 335B
SHA256 d5b33a3bc3af44b444808147e59ab302c4b10cbc9039ba96c2f3ed42dae9e904
MD5 f8fdc90bff4d28a96dbdb1691ef6df83
SHA1 5b3f093b1f401cac4ce80243bbdf24d1869cbeea
SHA512 d74e590bdcc560a63156b5b045050c0cd2f2c3f558b5c217f63193d4b11ac37d4c42eacdd2c7e98667cdef921064ac9f735b3510763179eae586926e29b4a2cf
TLSH
T10EE0C6F5C30A8788AB1AC911EA3AB81C000BE2B2257A811DF5A40330A288882680CE58
MD5 SHA1 SHA512 TLSH

Submit Download

{48cd42ac-a848-44f4-972d-2be8bb0b8c28}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\40\{48cd42ac-a848-44f4-972d-2be8bb0b8c28}.final
Size 237B
SHA256 61c5836cc1a153d9ed263fcdb44a78a7f9a80760e456933ff0289b8a380de896
MD5 85949168bbe9076dda6bfe52393fbe5d
SHA1 ba7c971a320882ba80645c6aba98caf68d0f1543
SHA512 613db8d0ebfc8c68e92ca060d48624b54a1e0fe8f8602d12ae989a5934923de92dd630f8ecc17c800a022cf13cdfcd82950d6bcc59bdb1f6bc06b69e90478df2
TLSH
T115D0976AC46C240A96C4CB34AF3B3A28085AB3B253AD002DEB5C091814848CBF412AB8
MD5 SHA1 SHA512 TLSH

Submit Download

{58edba4f-f763-44c6-ae02-411f1a83a729}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\41\{58edba4f-f763-44c6-ae02-411f1a83a729}.final
Size 387B
SHA256 6309aca88db20b8d3f83ef9c9619a80e552bb64c55af9adad08328873fd68dd5
MD5 af7bd2490a6f4ea5fb78b078246fdc5e
SHA1 032dbdf9840f949c269b6d30c4ba0c369ae27eb1
SHA512 43121b979a4ba5bc438203d25aa2978259ca7e47a6748f4455303e9f442405f0d34d1e2b672d94ef3356761eebc7b39b6e1e885106979c8d59a912d094a12007
TLSH
T18AE0F132AA151C1CC818C9530F2DB28C40A7F493A3A6405AB5542260FA45487EB3258C
MD5 SHA1 SHA512 TLSH

Submit Download

{71495420-e054-4624-86bc-b6aed4a24c29}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\41\{71495420-e054-4624-86bc-b6aed4a24c29}.final
Size 447B
SHA256 76b91ed358636c9907e6b5167ac6671d0c4564b8b174c79ca056d79016ff4c57
MD5 a3737793070e433e48cd8fde14202fec
SHA1 ef8d532328f28a3e126c92f129d54bde1ee88dd1
SHA512 9eb26ee2e55a46855cfce4658f02718a3db49fc98056efbcf542da9b83cfb1821e3e2a8ab7eaaa8ccdfbfcda5c85cd46b71cdbc28d865892684f0f6fbee93603
TLSH
T12FF0DC64EF88CD08BA024C336F2C3E38091F04A773EF006EDD4F4100A886DB5D01494C
MD5 SHA1 SHA512 TLSH

Submit Download

{d63c59c8-9ce6-4df9-be86-d281e0bd252e}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\46\{d63c59c8-9ce6-4df9-be86-d281e0bd252e}.final
Size 4KB
SHA256 aba102625fa8f2afea60d804c94690f9e658a370034e5684f67a18d98018bea8
MD5 e4048b41d3d3f9e679bc3b2f75626ed1
SHA1 3f045ce7e5e8f75eb8fb8f83018bb532034ba38c
SHA512 eeec0b2c7f965441b6d8de8d44f11c6ebf218dd9f090fa9828e42ef3bb9441cb1b9f69990e8ec6c3f1d40e365fe744d97e54e8a23528f9e69ee14bc1c4cb2604
SSDEEP 96:BNjdiluUqUmaobL8G768xXz2vVl/2EWCZaBqWX0aL73o+:B1diluU7sB7C9sga/Eano+
TLSH
T110A18E33FCAAD92BC2E28AC3E5DF0B58A9563E0170E48CA4D69800CC61CD984B7C5683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{32ab16e2-0233-49fd-8269-ec24eeb9b232}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\50\{32ab16e2-0233-49fd-8269-ec24eeb9b232}.final
Size 305B
SHA256 536aaff1a83524e5b515ddf03269ed52dd8a6e012d9c48ced997aef1fb06ba0f
MD5 1b92cdea9ed58ddb6b10f88fb561188f
SHA1 88463a993ce686934d208db6f85d1d60bef26156
SHA512 0596ea950b3d5ebdd620d60ceff2958a3590d7b4e32ab495e2c142be2f167e52098602787fdd3fe8bc802194694546af5b9e3f12ea9d848bafb8093f03ba0f42
TLSH
T1A8E07D17831C0C5441DCC1B1CD7B6508032BB1A1627A00489C7C99892D40C76E914D4C
MD5 SHA1 SHA512 TLSH

Submit Download

{bf31dd20-eb45-484f-9e00-7646c1196c3d}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\61\{bf31dd20-eb45-484f-9e00-7646c1196c3d}.final
Size 203B
SHA256 b622c1be755be6a1afc6ba42b1853c3af4ff9d28395ca6b4d5bde4237061861a
MD5 8642492bf98b6a7bdcd8a310896216b4
SHA1 4b16b9bb07e4926a255701da9391f08e49311d4e
SHA512 978aa3ef1ba009491f94b295e20188e3f272a0872b7abba83e100e2ce4c1b0fb79f50a2fcf7cd8a1125ffb8ad9642946c88bf75317e239cfd0a8469bfe677415
TLSH
T15AD02236923D098C895AC320572BB769811EB1C652B900BCFCCA22282448CB2F82429C
MD5 SHA1 SHA512 TLSH

Submit Download

{1ea3bba9-2621-4935-a01b-016492b5b448}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\72\{1ea3bba9-2621-4935-a01b-016492b5b448}.final
Size 1.2MB
SHA256 2af1f06c86391f28fe4a069e9dec5250f3ae2252782d0270c171d2fb5d572a55
MD5 d42e2e385433780ae27978511e7fc071
SHA1 cadbfd4608106170e115569b6a2945387e276c43
SHA512 012bfd5b6e597e3fce5bc501b4e4a4839b7adeee7c9a468d3b0fbce90c1c261c5a7d9afe044bdfd388d61e1a15345fe40e00c1cfd95c1f45c934d2427c1b3877
SSDEEP 24576:gEpRUcQYD9KGI5ji+waIeTVNfUVKjBqSnm82ClPf:ppRU5YD9lI5jNwaIiVNIKjMSmIR
TLSH
T11045237ACB010857D1F2C1C3F82A3181AA4516263F0997D0779BEB3817A59E5E7ABF13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{c3a4423c-3e87-4cfd-8d22-1897d629514c}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\76\{c3a4423c-3e87-4cfd-8d22-1897d629514c}.final
Size 339B
SHA256 d753640f8d2b6246aef0e37ba40dcce1169186506dc4bad16f900eaa7f48a101
MD5 51e0ecc86017577f7c7a1b8e14dae45d
SHA1 907a69535c44f9b3193f660baf74648c3e4119b4
SHA512 0ddf5fddd6d75300a74fc0388f59372c2444a06870a7c20e3021026a5ad87b1ed54c8bd7aa2dfcacba5482c7c9c8b2a7758a40ba95a0b8cf8718446bdf02927f
TLSH
T1D4E0C68DD32C1918C09EE0001A6ABA2C803BF1A413B0C399CAAF84410A0D8C5B418A88
MD5 SHA1 SHA512 TLSH

Submit Download

{9687a89b-8ee5-4cc7-8021-d3ef85503253}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\83\{9687a89b-8ee5-4cc7-8021-d3ef85503253}.final
Size 482B
SHA256 f1acf5ffefe8f6ab4502286d30579deadbaf5705c28ea0fc2230f905276de1c1
MD5 112f500cae0b4ee8a072222e8163d76c
SHA1 9466bbcfff603ff68176f4f47a422b3bfa9ee51d
SHA512 2807819f317a9d436098a1de16e428bba69b189afa6f896da424a5742a302e439f2f602942ab44187420b25a7ceefbbd7cbaf54107a48f05ec18a6e4b5eeb092
TLSH
T11FF054E7461E2D6CCC1E86044A1FFA25216A31F76A7900A8DD48DE191984413FE27FE0
MD5 SHA1 SHA512 TLSH

Submit Download

{12888a66-3ca0-4bce-93ee-6dfc91e0285c}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\92\{12888a66-3ca0-4bce-93ee-6dfc91e0285c}.final
Size 304B
SHA256 6412dc90f49e4e1eafcf9a602b2f607b8b4a8d9c7d462c04ac6d0e7a92165d98
MD5 681aeba828f8d61cfa4da424668e952c
SHA1 7543bf4d133fa596e902183201fa42501d7d6ec3
SHA512 e0af064e200579aef2a59373e2c59f21beed3cddcdc2bbdb0769035b3e38ab6af0d8ae67f2a646a83d985f09111e8ccadb04bcd9ee5848203ec08c5bb0f62fbf
TLSH
T1B2E07D278B7D0DC8CE4CC227CCA7600C1327F2F0327D0CA8F418AA852800855AD11D14
MD5 SHA1 SHA512 TLSH

Submit Download

{42b960db-30a4-4205-96ea-afd6272a995e}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\94\{42b960db-30a4-4205-96ea-afd6272a995e}.final
Size 443B
SHA256 13d16171d57d9d38cab5a712acbfddd26b337fa50c42c46979fed80b23795fbb
MD5 86f34fbe26bf6b372209d9a4bc93d91d
SHA1 4d9225eefa0a7561bd66c944efbff80b4dd9035f
SHA512 8c0634180f5796bce7c302baa4e7600014be1b4cb15e57798e74bcfbce4511c4acd82e8be06cd54115b406e8f5acfb9367be04162c1495c504b12343333d62c8
TLSH
T1EDF023A9C3065E88D0458E29A76CFC5C132F71F7A2D8004EEE8928D932CC523FA6559C
MD5 SHA1 SHA512 TLSH

Submit Download

{076b3f50-2593-46e3-89d4-c37cfb488760}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\cache\morgue\96\{076b3f50-2593-46e3-89d4-c37cfb488760}.final
Size 297B
SHA256 fdf3b7954bf98a8fa04c9f0aa5f4417b29a602ffb2478da0f350347e37aac1d1
MD5 cc885b721e2d8ff376d423d91d2f3968
SHA1 021101b4a2406e4486f1abe1dcf536c5185ebc0d
SHA512 d51cd50d355ce759ae8f68df44eff523b8bd69b4739e909c4e65ef4a71ad6645aabea883db0be85384dff1f09ac435aad41085216daf430a70136ee32f583dbe
TLSH
T1C1E07D19CF0E08CCEA0FC9012B2FA70D022362C3B2F84028F0990500B006845D8F5584
MD5 SHA1 SHA512 TLSH

Submit Download

2701656005yCt7-%iCt7-%r9e4s8p9o.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\idb\2701656005yCt7-%iCt7-%r9e4s8p9o.sqlite
Size 48KB
SHA256 df3fb42af4d04a2daa107ec6e9e72f8384cd3dcd3c91eda7c9b30cdacd05e906
MD5 98470506e0cd24494f67f10c4a55f279
SHA1 a371fb4118c6f07f31741c877427b1065083db72
SHA512 8e3497336bf39ca18dc475d04e81dab43ce9bcb9ea2735529e34cd3bb43161f252cf25d1b2796b2d62b408eb694cbad6b6fc73c45c5c4fb0e0bb07f80b857d3a
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEVi:Oa16S6CKnqlizbxV+2xVeU7X2B0s
TLSH
T17823718E3F07E511C53AF0B178A08D52BC5E321D07222AD579D0D9E4D8F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3211250388sbwdpsunsohintoatciif.sqlite-wal

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\default\https+++www.youtube.com\idb\3211250388sbwdpsunsohintoatciif.sqlite-wal
Size 40KB
SHA256 e4eb2ccb81f35adccd0c7c7038f91f24ca3f55c0172692e6e6340869fbbac7b4
MD5 5ade43a05ba077f2037faaee21ecaaf8
SHA1 a04e506d8198c58fef3aad4df93dbf9dd47603cd
SHA512 3a797cd2b80ed4bb95a8f120f201f4c1cc61af4b1a9c43c4c6e1372a0fadcc7ae522fd2497bbc5d4f6490a666adff56f7b41ad50b247dbe718ca99ed746aff15
SSDEEP 192:zdwRN8TNRNTcTNRNXBOcTNRNb5PBOcTNRNDT5PBOcTNRN1:4FPhPV
TLSH
T1A103791DB420D50BCAB445FB42BFE4E1016AB4AE39ED92FB3382539F4C16B119BA7914
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.2MB
SHA256 2bdb678771684f91ab0a9b3f667bddb6c579954dd63f47853600b29b0d698d8b
MD5 dc9d2767f358bf9dea438dc20a99879f
SHA1 0ac45d2fd67585aaa24a9391959b24589ca33e50
SHA512 592627e20700826e2f1c3b6b1d9302e0a9d30cf53c68cc4e41f8d3bd04ecb8d3a101c5a2a671995a777bf4aabd486daf498448b2c298a16899e905df8416fe24
SSDEEP 49152:yZwlDg0FqdeLTC9jHCgYQE3BPnSrfP05p/JuHgcJ230CKPRx7NabY4y4CCUkTvIa:aRKxPnSrfP6p/lcJz
TLSH
T159765CE420E19253F38640B3719993FB20EFC01C6076CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.2MB
SHA256 35a4eab8bff1b3b96bb3b559a1ff4684d1273992a8db6c001076a64ea959d420
MD5 a25538c9b917d9da2e2d04e79ee7fe37
SHA1 0a60bf0bb3bff551f07f7eadddbc8960f8a3dcab
SHA512 9b163e04f3524fa4a0d068e8a32784ccd55f40396523d4262d20eee42136c94e764ac840e1257a70f00a6b6693867cc9725e14da4a2b79076d9b064335ed9919
SSDEEP 49152:zLELyiaeUB6QC5zYYpQDJe6HMQbup6HK8grtxlDg0FqdhLT30jHCCYA23aPnSrfb:mx2KPnSrfP6p/tcjN
TLSH
T1C2765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

disasterlauncherwindows.aybUiS2-.zip.part

Path C:\Users\Admin\Downloads\disasterlauncherwindows.aybUiS2-.zip.part
Size 1.1MB
SHA256 ed1388f6c859cd81be0713934f549c7aaf9ae3210ea4d8203235de709dd1aa12
MD5 e32e2b46a2588574d83422788de44937
SHA1 9c0bf3cf21ed4749aa3937207736e31cbbd659ff
SHA512 518b0178e2c2e72b5f6bf2e4810d43e775dd57daa5518a5b2cf5441122b5a11667b92bb60546f1bcd04efc5ebe98b0393c525a1b9d587bdea722fee5808bbe1e
SSDEEP 24576:z4NOmA5pNmE0L3hGzkEUiL4mlFK/XsyB2SJT5OFUOO/Fr:z775pgXLRhE0mlFqcyXT51h
TLSH
T1D23533E9A858A384FC414B787D5AFDBD3324B6A053FE75443EF0331C6B5254AA2AC742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sonicexe The Disaster 2D Remake.exe

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\Sonicexe The Disaster 2D Remake.exe
Size 1.2MB
SHA256 8d5fd2430250cc9d72cfb64b46aba1ff44f0b2007a42bac06054418dc2beda23
MD5 bd661383b3f4c625f656b7b6176bc6d2
SHA1 4fa414c95f71f4ea59d863cc72495fd5e046d85d
SHA512 424a012e5b52c19e28ea4bab0675ba4d0f4e1ac5f427d5d1c1e3711c76f69ad33880e2a9e14cd8c771400b66a7087a3fb0daf294b282d035a72cdfea5e0a21a4
SSDEEP 12288:94iTjKXj+RdF2FG80i6RmQj7mXnjlS4lN1nfZvfzrCnp7AEWdvjBhHP0ATU+:94iTjGo8OmXnj8ufZvXClAEWdvjbMATz
TLSH
T12C55D7141A7285DDD8B3D2BC9A269727E630389CC33835F7CAA02A934FD83F19636755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sonicexe The Disaster 2D Remake.exe

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\Sonicexe The Disaster 2D Remake.exe
Size 1.2MB
SHA256 e874b750f8c134a924c1c15a8aeec88b30417c6ea192bcbe3866bae27bac70a5
MD5 98001420e0e3d7cf38a9cc4bf58d5a42
SHA1 01d0eb69077cbda86075eec352bf0c815aeae775
SHA512 c20bdc100f2de6e27bce36f4f736365574be09e1aacdf8fe2d05fb0043ac57686c828ea2db0358c48cc7cbbf662a700a3ffdcbcd07268913c11fc47646841f22
SSDEEP 12288:94iTjKXj+RdF2FG80i6RmQj7mXnjlS4lN1nfZvfzrCnp7AEWdvjBhHX:94iTjGo8OmXnj8ufZvXClAEWdvjb3
TLSH
T13045D7141AB685D9D8B3D2BC99269737E630388CC33835F7CAA02A934FD83F19636755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

disnet.dll

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\disnet.dll
Size 35KB
SHA256 bf96633a717d980d744eb5cf151566ccd5e3a940eb9817d58cd81a87f2096a61
MD5 43e6b797d495feecd1878494fc68af05
SHA1 6728d23ca1062f4b00b993dfa3ad85e8ae6f9162
SHA512 ea525b6be5dd5d07b6bbcf2dc8dec655362c2c22ff8e32d5f73a6d17646201f7ebd5b07ed0d0d98d765e2d02f84db4f9edc93a4aa58c52e45f1fa808fbda5d23
SSDEEP 384:+EHwwuinPWlsG7yPsk6H5edj3Ccc8K31vpHAF2KlHrx7wunDkxsaYDLqE+N9TwH+:+YDlGe6ZM3CccJFBAF24rxaY63V
TLSH
T172F25A88E3A411E5E4678578C6536B4BE7B6301413202BEF53F086672F63BF1A73A302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

options.ini

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\options.ini
Size 181B
SHA256 a51f9fee1c6a57ddca60c8be51d3fad282ee4aada42a62c6c3137192a2044ab7
MD5 752e4c0c04cd29b2cfd2df8afad68a84
SHA1 cc5af552cfc4c84d27e13fe5ca579a0b6a2b99a2
SHA512 a084c23977e917e7890e26b891e9c53522b45963e4f82b65fa27810361b601287af87c4ef107b0f1fed80f1b8c7a33513fb3a4237be041282e57c157538c6115
TLSH
T19DC0C04CB324C4C54050F0CCB18107800AD66F240FB03BF35000A6461788F07D5ADCF7
MD5 SHA1 SHA512 TLSH

Submit Download