Overview

overview

8

Static

static

1

setup.bat

windows10-2004-x64

8

setup.bat

windows11-ltsc_2024-x64

3

Resubmissions

20/07/2026, 10:53

260720-my22esfv2r8

20/07/2026, 10:47

260720-mvwp8sft2k8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/07/2026, 10:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    setup.bat
  • Size 3KB
  • Sample260720-mvwp8sft2k
  • SHA256 ac31cc613facb68e7689a6853457b758adc6f923ee77417b7cc52e871f1342e2
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Badlisted process makes network request 2 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 28 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 60 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 12 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 54 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\setup.bat"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:5028
    • C:\Windows\system32\fsutil.exe
      fsutil dirty query C:
      2⤵
        PID:1088
      • C:\Windows\system32\where.exe
        where python
        2⤵
          PID:3368
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:4860
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
          • Downloads MZ/PE file
          • Subvert Trust Controls: Mark-of-the-Web Bypass
          • Checks processor information in registry
          • Modifies registry class
          • NTFS ADS
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4832
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {14b0a619-a28a-48ca-afd2-fb7e04bdd1c3} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
            3⤵
              PID:4296
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {1b379370-158e-478e-b0c1-24df1da964b2} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
              3⤵
                PID:3380
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3696 -prefsLen 27276 -prefMapHandle 3700 -prefMapSize 270279 -jsInitHandle 3704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3712 -initialChannelId {914e009f-f593-4caf-a1ac-6aeca0eb44a4} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                3⤵
                • Checks processor information in registry
                PID:2640
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3856 -prefsLen 27276 -prefMapHandle 3860 -prefMapSize 270279 -ipcHandle 3952 -initialChannelId {b740d7fb-3927-4dc1-928b-5aaf541e6006} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                3⤵
                  PID:2584
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4368 -prefsLen 34775 -prefMapHandle 4372 -prefMapSize 270279 -jsInitHandle 4376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1328 -initialChannelId {b1ad2b12-8f3b-4d11-affc-fb29ad4d4ac2} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5008
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4760 -prefsLen 34824 -prefMapHandle 4764 -prefMapSize 270279 -ipcHandle 4740 -initialChannelId {1131ff01-225e-401a-823c-d56c0dfe3ca6} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                  3⤵
                  • Checks processor information in registry
                  PID:3948
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5112 -prefsLen 32952 -prefMapHandle 5108 -prefMapSize 270279 -jsInitHandle 5148 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5156 -initialChannelId {980eef0a-f0d5-42ee-a4ff-bfb11e6285cb} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5780
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5356 -prefsLen 32952 -prefMapHandle 5360 -prefMapSize 270279 -jsInitHandle 5364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {31192b36-8cd3-4a0a-af58-fd402e7bbb34} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5788
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4916 -prefsLen 32952 -prefMapHandle 5572 -prefMapSize 270279 -jsInitHandle 5576 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5584 -initialChannelId {305b99c8-6aee-4968-85bd-50ace0830c5c} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5884
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6284 -prefsLen 33071 -prefMapHandle 6288 -prefMapSize 270279 -jsInitHandle 6292 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6260 -initialChannelId {c9e1554b-e840-41c6-84a8-79f523f839bf} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5660
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6632 -prefsLen 33071 -prefMapHandle 6616 -prefMapSize 270279 -jsInitHandle 6620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6720 -initialChannelId {7f0bb241-4ad4-4dea-94c1-d4fa22a73c94} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                  3⤵
                  • Checks processor information in registry
                  PID:3992
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6880 -prefsLen 33071 -prefMapHandle 6884 -prefMapSize 270279 -jsInitHandle 6888 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4224 -initialChannelId {a8f51720-7a44-4e4e-acbf-613796734163} -parentPid 4832 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4832" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                  3⤵
                  • Checks processor information in registry
                  PID:6020
                • C:\Users\Admin\Downloads\python-3.14.6-amd64.exe
                  "C:\Users\Admin\Downloads\python-3.14.6-amd64.exe"
                  3⤵
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:412
                  • C:\Windows\Temp\{8A52605B-68BA-4E37-AC55-B5BF9C7D9D41}\.cr\python-3.14.6-amd64.exe
                    "C:\Windows\Temp\{8A52605B-68BA-4E37-AC55-B5BF9C7D9D41}\.cr\python-3.14.6-amd64.exe" -burn.clean.room="C:\Users\Admin\Downloads\python-3.14.6-amd64.exe" -burn.filehandle.attached=744 -burn.filehandle.self=728
                    4⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • System Location Discovery: System Language Discovery
                    • Modifies registry class
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of FindShellTrayWindow
                    PID:5236
            • C:\Windows\system32\msiexec.exe
              C:\Windows\system32\msiexec.exe /V
              1⤵
              • Badlisted process makes network request
              • Enumerates connected drives
              • Drops file in Windows directory
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:6172
              • C:\Windows\syswow64\MsiExec.exe
                C:\Windows\syswow64\MsiExec.exe -Embedding 79AD8D353A9D2C167B5873068F8215C9
                2⤵
                  PID:5592
                  • C:\Users\Admin\AppData\Local\Programs\Python\Python314\python.exe
                    "C:\Users\Admin\AppData\Local\Programs\Python\Python314\python.exe" -I -m ensurepip -U --default-pip
                    3⤵
                      PID:3828
                      • C:\Users\Admin\AppData\Local\Programs\Python\Python314\python.exe
                        C:\Users\Admin\AppData\Local\Programs\Python\Python314\python.exe -I -W ignore::DeprecationWarning -c " import runpy import sys sys.path = ['C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpi_pw738v\\pip-26.1.2-py3-none-any.whl'] + sys.path sys.argv[1:] = ['install', '--no-cache-dir', '--no-index', '--find-links', 'C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpi_pw738v', '--upgrade', 'pip'] runpy.run_module(\"pip\", run_name=\"__main__\", alter_sys=True) "
                        4⤵
                          PID:6804
                  • C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe
                    "C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe" /burn.runonce
                    1⤵
                    • Executes dropped EXE
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:6328
                    • C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe
                      "C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132.log"
                      2⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:6368
                      • C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe
                        "C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\python-3.14.6-amd64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132.log"
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Adds Run key to start application
                        • System Location Discovery: System Language Discovery
                        • Modifies registry class
                        • Suspicious use of FindShellTrayWindow
                        PID:6404

                  Network

                        MITRE ATT&CK Enterprise v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        e59e2a9.rbs
                        • Path C:\Config.Msi\e59e2a9.rbs
                        • Size 8KB
                        • SHA256 63914d27ed34ed4cedef62765a87ca96a519614c267db5f910a7b98c340a28ac
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2ae.rbs
                        • Path C:\Config.Msi\e59e2ae.rbs
                        • Size 12KB
                        • SHA256 250341d35c81000da3507c670b6141d8ed34bc86c5264e54da564806ea27ae88
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2b3.rbs
                        • Path C:\Config.Msi\e59e2b3.rbs
                        • Size 64KB
                        • SHA256 0e5052452c1b37873930a14cfbf74d022faf6413fd5923a2bbbcc0af2e8fcfe5
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2b8.rbs
                        • Path C:\Config.Msi\e59e2b8.rbs
                        • Size 132KB
                        • SHA256 9c4d41ef14483e0e91ef033546cfa07ae86829a377a22c656d2ba643ffc71c4b
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2bc.rbs
                        • Path C:\Config.Msi\e59e2bc.rbs
                        • Size 4KB
                        • SHA256 d042c0cdd774c6989e6ec8682b5e5a80f7a26f0790fefc98fc1970ca759d51d1
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2c0.rbs
                        • Path C:\Config.Msi\e59e2c0.rbs
                        • Size 369KB
                        • SHA256 8913e87876d1647b802cededda8aa11d3ee7d243b6b2e2573f1fdc109e806a78
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2c5.rbs
                        • Path C:\Config.Msi\e59e2c5.rbs
                        • Size 144KB
                        • SHA256 7d9399d56ae4e49b074c456321f700eff3359468048a769e75d622cf0ccd179b
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2c9.rbs
                        • Path C:\Config.Msi\e59e2c9.rbs
                        • Size 3KB
                        • SHA256 096ec54f36c8fb8052127cb0ea949294dd65cf6c28b7baef5d3656f2bf462408
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        e59e2cd.rbs
                        • Path C:\Config.Msi\e59e2cd.rbs
                        • Size 263KB
                        • SHA256 12e39ebaf2c9f53426f70bdaae3601a21807c927132ed465d7710545fb30e8ca
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        e59e2d2.rbs
                        • Path C:\Config.Msi\e59e2d2.rbs
                        • Size 14KB
                        • SHA256 3217e4e0f21f6c66c13aede295586225f3f1b843213f1c10ac04278a318c1053
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                        • Size 15KB
                        • SHA256 2fa1154825d024eb759f14dadb07c5d485c46e1931a80b0271bd71086fac2c9f
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        9512A4488B00CC053350DAC32D417B4A35C11513
                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
                        • Size 15KB
                        • SHA256 0977a3476dbef30a9e7193144af1bf70bb5428f97a840164a60447a37a9c5886
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        doc_JustForMe
                        • Path C:\Users\Admin\AppData\Local\Package Cache\.unverified\doc_JustForMe
                        • Size 7.8MB
                        • SHA256 640eb2a8846f046bf334a06d5e94ddfbfec71be8f3781f3cb41490e87b706299
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        lib_JustForMe
                        • Path C:\Users\Admin\AppData\Local\Package Cache\.unverified\lib_JustForMe
                        • Size 7.6MB
                        • SHA256 2ef284bcad45387e63f98e23ad057604af146d02f71d99157003f6c8dec9b5cb
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        tcltk_JustForMe
                        • Path C:\Users\Admin\AppData\Local\Package Cache\.unverified\tcltk_JustForMe
                        • Size 3.2MB
                        • SHA256 dab0df06908825a607867acc0f79223263b00677149accfb44554678cb8b9378
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        launcher.msi
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{0B1B5000-3C0E-41C0-83C4-4C914420AE93}v3.14.6150.0\launcher.msi
                        • Size 552KB
                        • SHA256 93a11dfffa695620dc5a24d65ed1af90abd678360d3bee3c51a0da61c82c5316
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        exe.msi
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{2126CF36-9D80-48AC-83E6-F391C7192987}v3.14.6150.0\exe.msi
                        • Size 856KB
                        • SHA256 7b582d761fa0bd491d46bf143164ecf50ed090b657c9b28e9fb97b42993e4ed4
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        core.msi
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{6F812B39-6738-4CF8-8BA0-19FB99506239}v3.14.6150.0\core.msi
                        • Size 2.2MB
                        • SHA256 17015d877ea07d71f2da6a57dd3c2f94f737dee503f28c87f35f700251896e94
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        state.rsm
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{7116a5c9-3a0e-4d9c-aa8b-c6f909dc9278}\state.rsm
                        • Size 1KB
                        • SHA256 39aa88a71ff427e7a82a40eb4f9ebb5e01916b452b5a8c59c2ca2e0333093c8c
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        dev.msi
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{7A1E2A4B-6DF2-40F6-A825-4216422085F2}v3.14.6150.0\dev.msi
                        • Size 520KB
                        • SHA256 899b3b6ff9b612f73956108321326516554786b32d81b761fd0f8e23ea1f082a
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        test.msi
                        • Path C:\Users\Admin\AppData\Local\Package Cache\{A130DED0-0143-4D81-A094-415C87A44D42}v3.14.6150.0\test.msi
                        • Size 6.3MB
                        • SHA256 9cd5bb1dca3db6f1fcd6b04c336d7740e5b45db813937e24eab01c8b2b964d2d
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        _py_warnings.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\_py_warnings.py
                        • Size 30KB
                        • SHA256 8261e35fff14aa7a615a83c844c0e9db4f0541e088bde4f2e94581d219033d42
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        _weakrefset.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\_weakrefset.py
                        • Size 4KB
                        • SHA256 1240398ecc4a08560bd03eb6ac97a70e8a10541709ad178ccc901c2c39d352c4
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\collections\__init__.py
                        • Size 53KB
                        • SHA256 f52c917fbab8e0a695de27a389776a6a61e7df1831a9de56e5e2a63176a1992f
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        contextlib.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\contextlib.py
                        • Size 27KB
                        • SHA256 ca6071e379d65e1ed13fea5206fb4cee35fdb6b3063fa4a47254acf10e42b764
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\encodings\__init__.py
                        • Size 5KB
                        • SHA256 dbf9022ec9b4d68d4f3f76c9cda44b008c3942df7f927189daba810321bcfddd
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        _win_cp_codecs.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\encodings\_win_cp_codecs.py
                        • Size 1KB
                        • SHA256 344faac7c9b1702d987233c500f5793f1d2729b7722578ceb344747078883b8e
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        aliases.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\encodings\aliases.py
                        • Size 16KB
                        • SHA256 da008f5eb1b85548dcc319cd906b27286502dd1bd7b997fa902d6fe8593384e6
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        cp1252.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\encodings\cp1252.py
                        • Size 13KB
                        • SHA256 7acb7b80c29d9ffda0fe79540509439537216df3a259973d54e1fb23c34e7519
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        utf_8.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\encodings\utf_8.py
                        • Size 1KB
                        • SHA256 9c54c7db8ce0722ca4ddb5f45d4e170357e37991afb3fcdc091721bf6c09257e
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\ensurepip\__init__.py
                        • Size 8KB
                        • SHA256 9aea80beaf8a611cf9ca5e4f476662652ff31c72a4e23c26d256382b0dfd09d3
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        enum.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\enum.py
                        • Size 85KB
                        • SHA256 1ca7df53237fb23471b60f6a7644edbf954386577a396aa2cee177fadf47a074
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        fnmatch.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\fnmatch.py
                        • Size 6KB
                        • SHA256 52a65ca47cb1d6bf5b664f39d2067ecf43af468fff19443a9bae7bc79905ef21
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        functools.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\functools.py
                        • Size 43KB
                        • SHA256 8261e4fb2c712de2b4718a6c0390e614215b744bfb7b46f43bef472dedc75d0b
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\importlib\__init__.py
                        • Size 4KB
                        • SHA256 b9db2f9b696913507da9fd83ecfc1f73cf6215d4c5a5cf4b4848688a8c710dc0
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        _abc.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\importlib\_abc.py
                        • Size 1KB
                        • SHA256 795157b91862d662ae681c0521daa1311b34b763b955e01505a27c865d848eae
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        keyword.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\keyword.py
                        • Size 1KB
                        • SHA256 1f28f509383273238ad86eda04a96343fa0dc10eeaf3189439959d75cdac0a0b
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        locale.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\locale.py
                        • Size 87KB
                        • SHA256 2c279e126c60c7668604f38c13735702abf4912f9692f0ceb3c72d55403c6cc3
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        operator.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\operator.py
                        • Size 11KB
                        • SHA256 eb4bd627ac1a6ecd480cdaa7521322095506dc0cbad4106e0a272a5195b04e10
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        reprlib.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\reprlib.py
                        • Size 8KB
                        • SHA256 98924232fa398cf72a7820722ee37606b271be663612e79356ecf2bf14484b9c
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        shutil.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\shutil.py
                        • Size 60KB
                        • SHA256 04a3fb04879a42b0a2e6ac9ba568f06941ba5a8c98a746381e4bc9cad4ab196c
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        signal.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\signal.py
                        • Size 2KB
                        • SHA256 0b7e3d3d39a120142dbf4875d7d79579cad8fee662add30c2375a797f0d2386e
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        LICENSE
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip-26.1.2.dist-info\licenses\src\pip\_vendor\tomli\LICENSE
                        • Size 1KB
                        • SHA256 b80816b0d530b8accb4c2211783790984a6e3b61922c2b5ee92f3372ab2742fe
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\__init__.py
                        • Size 511B
                        • SHA256 4bb8bd0e7f5a4994b4306fb65abbdeddd57d4c898fcef427e638e1a7db7fb9fd
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        build_env.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\build_env.py
                        • Size 21KB
                        • SHA256 5e980e2254d02e0cf73ef0d3da7ee3d8dcd7feb54564b0881bbb7b6f675d85c3
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        base_command.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\cli\base_command.py
                        • Size 9KB
                        • SHA256 fa826ce6529a3c3d915c1b81c817cabee9806b55cd615b61bf43e6d115f01a00
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        cmdoptions.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\cli\cmdoptions.py
                        • Size 36KB
                        • SHA256 4077d468f99934cba66493d2e4999abe1f2335b23b4f7562f01615124a851f16
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        command_context.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\cli\command_context.py
                        • Size 817B
                        • SHA256 926bb711665b7c17a06b5a036a69c625303f51a7a384840db8c8f609598c5eed
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        progress_bars.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\cli\progress_bars.py
                        • Size 4KB
                        • SHA256 216d4f1f99f614fa940533fb50b43962efb0c8d34ef57198de0d4f4f844cbb8e
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        req_command.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\cli\req_command.py
                        • Size 17KB
                        • SHA256 2a60a9a6791fecce92bc9215addb349e0f371c5319db3e18ea9835c829f28c33
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\__init__.py
                        • Size 3KB
                        • SHA256 68d7826d0bab1968a17e142aec1a9a2d71ea5834348b7234e0e4bb9312baa654
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        debug.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\debug.py
                        • Size 6KB
                        • SHA256 12f04bb118dc4d132b3aec8790b9494ba5ce0cb05b6ac365bd5cdc7bb71b46fa
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        hash.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\hash.py
                        • Size 1KB
                        • SHA256 18ef6944ddf05c2da441aa2f2b9ed368b60131cdc896d387f763ba404c3a604d
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        inspect.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\inspect.py
                        • Size 3KB
                        • SHA256 2e6cbbf961d9ee3b87a7eb718caed4ef85f78ebe5c7ef80e303202c8a8adae23
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        lock.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\lock.py
                        • Size 5KB
                        • SHA256 d78e6286350affeee03fc3bae573c38bfc4c8658798677b5a6d90775f9db0274
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        uninstall.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\site-packages\pip\_internal\commands\uninstall.py
                        • Size 3KB
                        • SHA256 0ac3a286abdbe9903a3baecbef4a177a82c778e7cdccc33cf07f60fbd6a8720c
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        subprocess.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\subprocess.py
                        • Size 90KB
                        • SHA256 a7b6bdf4657b018e4e76f22ebbb975a5fa6f0501088177fe950df1e20c18b209
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\sysconfig\__init__.py
                        • Size 29KB
                        • SHA256 2c73b4fcf9e4a938018a03f9e81801e2c81ed4f1fd59a394c69f62ca13e84e66
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        tempfile.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\tempfile.py
                        • Size 33KB
                        • SHA256 8c6b485b1936ce7e5968073f9a76fa5cf50dcf14e4f63f670d4850165fa6c76d
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        __init__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\test\test_importlib\frozen\__init__.py
                        • Size 147B
                        • SHA256 6546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        __main__.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\test\test_importlib\frozen\__main__.py
                        • Size 62B
                        • SHA256 b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        threading.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\threading.py
                        • Size 57KB
                        • SHA256 f4619610f468ed5d14329ac7a4cbc4b7c9e257a4e9a7cf1bc1f4f1e28ffa4f31
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        types.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\types.py
                        • Size 11KB
                        • SHA256 adb19a9a4ad62df98fc5a687428fcc4c812a2eb7ade78eaf8173cb4c4600dba9
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        warnings.py
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\Lib\warnings.py
                        • Size 2KB
                        • SHA256 ac8acfa4cacdbc548c5029fc7dbde4dca4d4d76868dd4b6e86c172e333c54a4e
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        python.exe
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\python.exe
                        • Size 103KB
                        • SHA256 03168c01b7b7491423350e82c26fee71f35b43694d1319d3c668bda6903a0c38
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        python314.dll
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\python314.dll
                        • Size 6.5MB
                        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        vcruntime140.dll
                        • Path C:\Users\Admin\AppData\Local\Programs\Python\Python314\vcruntime140.dll
                        • Size 117KB
                        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_000_core_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_000_core_JustForMe.log
                        • Size 3KB
                        • SHA256 431e5a2b51c0a5c9e36c389fc414ae5454eeeeeb893ba5a7c94784d091a36887
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_001_exe_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_001_exe_JustForMe.log
                        • Size 51KB
                        • SHA256 5a12e28aa9278669dc93110fec0647e435c43be1843ef4b5be95eaff573f3a46
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_002_dev_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_002_dev_JustForMe.log
                        • Size 11KB
                        • SHA256 02f06d3e78fe6db9bec90af05a1b27138edfb9cdbc47851232b51f71e1b2e9f1
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_003_lib_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_003_lib_JustForMe.log
                        • Size 1KB
                        • SHA256 79494572a8e991e82bb06b51543a53cae6d2eb004e77eb17dfb9d957401c4bfd
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_004_test_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_004_test_JustForMe.log
                        • Size 1KB
                        • SHA256 e6651aa6bb7405f4c3531b23cb49050c1f21f8ce9f3b1017542910654244c5c7
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_005_doc_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_005_doc_JustForMe.log
                        • Size 1KB
                        • SHA256 f43308cd64338088005dd9b029667d17b63fd7b9fe4f1fad088b832b75dde7a5
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_006_tcltk_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_006_tcltk_JustForMe.log
                        • Size 1KB
                        • SHA256 01d076a155a2a8250f4e225329835b162110ff003d5ad76ac77778a25d04c777
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_007_launcher_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_007_launcher_JustForMe.log
                        • Size 3KB
                        • SHA256 ba56308742539c06b2ec71fc498cf76c572c4a226b8622855caf81b3f9cbe226
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        Python 3.14.6 (64-bit)_20260720115132_008_pip_JustForMe.log
                        • Path C:\Users\Admin\AppData\Local\Temp\Python 3.14.6 (64-bit)_20260720115132_008_pip_JustForMe.log
                        • Size 1KB
                        • SHA256 361bd105969396119334cedad4067628a57dcd22d0a3e44c4a35d762c8998325
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        tmpaddon
                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                        • Size 11KB
                        • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        tmpaddon
                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                        • Size 502KB
                        • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        AlternateServices.bin
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\AlternateServices.bin
                        • Size 22KB
                        • SHA256 9a7d1a6d76ebb994cdcefe00cf809a4547cfd091934f75357d07b1eb0c6cd84a
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        AlternateServices.bin
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\AlternateServices.bin
                        • Size 10KB
                        • SHA256 64dbdfdfc11c801c15e90668b2b1ab70fdb8c0dacad288570c9c9f56d915bd4b
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        data.safe.tmp
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 6KB
                        • SHA256 c3dc523bcf4f50937486eb7816382a1edff8e9ad832ca1eb68e743c2022d3699
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        events
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\events\events
                        • Size 1KB
                        • SHA256 4737a1fe2539b6239207b2149c49b8edb13751392f378695fd80654a499ddded
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        events
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\events\events
                        • Size 5KB
                        • SHA256 a61f213f70b61e877ff861b33a6931fb66a742f6ebe96ecd30ed71963601c81e
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        27436483-d475-491a-8a2d-911e8eac8a30
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\27436483-d475-491a-8a2d-911e8eac8a30
                        • Size 2KB
                        • SHA256 9b161a63f6fddb0c9a2a88210eac7cc3b2eb2f061eb4fed195dbb4fee95432f1
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        3f02b82a-8096-4d4f-b993-a792ba5101e3
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\3f02b82a-8096-4d4f-b993-a792ba5101e3
                        • Size 235B
                        • SHA256 13fe91f5b9328f915f1280435d009e66ea4f18e78f9819d16f4451fbff22439a
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        64c489e3-18ed-459b-b4a3-fb40f9205bc9
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\64c489e3-18ed-459b-b4a3-fb40f9205bc9
                        • Size 883B
                        • SHA256 22a0711e550a07ba2861c94f9d9f736d286f9207ea2e9a1013f322f5dc46541c
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        67586a29-43ea-4567-ae6f-207d4ca9c04d
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\67586a29-43ea-4567-ae6f-207d4ca9c04d
                        • Size 16KB
                        • SHA256 8182d764a22a021718345a3b36992c89cbfef87204b53cdf5cb7507d07790553
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        afe83c90-6b5d-49cb-8864-94b6d9463bc3
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\afe83c90-6b5d-49cb-8864-94b6d9463bc3
                        • Size 235B
                        • SHA256 c16ec33e344fc65ece7720c60fe9436968eedfaf600fc1274372faa37aced715
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        c5ece36c-e826-4ebf-b3be-2f70ce9eab70
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\c5ece36c-e826-4ebf-b3be-2f70ce9eab70
                        • Size 886B
                        • SHA256 9ac8c76134fb2a58b6db2795251c6239cf101ab4e6a3f960154f86a62521d7fb
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        extensions.json
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\extensions.json
                        • Size 16KB
                        • SHA256 3b29cd2293e297630a83a683271fad7f12cb6823bc8e6d729cefceb471a13a8c
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        gmpopenh264.dll
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                        • Size 1.1MB
                        • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        gmpopenh264.info
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                        • Size 116B
                        • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        manifest.json
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                        • Size 1002B
                        • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        widevinecdm.dll
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                        • Size 21.6MB
                        • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        prefs-1.js
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
                        • Size 8KB
                        • SHA256 cdb1931b3f40650af5762edee2eb497eeb83704889801bc40e08ac2a455d8f26
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        prefs-1.js
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
                        • Size 6KB
                        • SHA256 7d73fa949c5310fd111cbfb14596f2b4beba1342cc8d56d8aa2ef02c78fc1c60
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        prefs-1.js
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
                        • Size 6KB
                        • SHA256 f094f79b3d7107f7901e7c481c4dfb39c0dfb67cc7ccab023d4077c7e316e2c5
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        prefs.js
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs.js
                        • Size 7KB
                        • SHA256 a1c2c4de6e0e350e91f35e49fef46b4fb3549bff02a2b1d3645a32087ecd1187
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        prefs.js
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs.js
                        • Size 6KB
                        • SHA256 3eb2c7c7348d2344bf35495933b4bd73d530f59aaa65660d068a8eaf9dbd3245
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        recovery.baklz4
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.baklz4
                        • Size 2KB
                        • SHA256 2c38fde28a10c4cf56de274a678c241a489755a01978cbb0b1ad2f982c0a44a5
                        • MD5 SHA1 SHA512 TLSH
                        Submit Download

                        recovery.jsonlz4
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.jsonlz4
                        • Size 11KB
                        • SHA256 76658626102ab18d2874effff384a59eb382c54faf9a2fcb30bcb04c300771df
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        3870112724rsegmnoittet-es.sqlite
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                        • Size 6.4MB
                        • SHA256 f5eb72c6f8a0c1401322f8c46ae66d689e1f57bba2c9efe88f980fddd5dd35a3
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        3870112724rsegmnoittet-es.sqlite
                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                        • Size 6.4MB
                        • SHA256 b6024ee416fa064628b221e5e0164134c9cf36006e577d5997f7e6598f4ca91f
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        python-3.14.6-amd64.exe
                        • Path C:\Users\Admin\Downloads\python-3.14.6-amd64.exe
                        • Size 29.3MB
                        • SHA256 14b3e9a710a3fcf0bd9b55ab6b60412bd91227563f813fc49040cabc0209e0bd
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        MSIA0E0.tmp
                        • Path C:\Windows\Installer\MSIA0E0.tmp
                        • Size 234KB
                        • SHA256 78860e15e474cc2af7ad6e499a8971b6b8197afb8e49a1b9eaaa392e4378f3a5
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        PythonBA.dll
                        • Path C:\Windows\Temp\{7AFB9326-F78D-4F5C-BD04-E016B3C11194}\.ba\PythonBA.dll
                        • Size 701KB
                        • SHA256 73c1f9baf29ce5bbff5458c4bdfaf9aa0889bab85034adeaf5a130ab379a190f
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        SideBar.png
                        • Path C:\Windows\Temp\{7AFB9326-F78D-4F5C-BD04-E016B3C11194}\.ba\SideBar.png
                        • Size 50KB
                        • SHA256 79434bd1368f47f08acf6db66638531d386bf15166d78d9bfea4da164c079067
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        pip_JustForMe
                        • Path C:\Windows\Temp\{7AFB9326-F78D-4F5C-BD04-E016B3C11194}\pip_JustForMe
                        • Size 288KB
                        • SHA256 ccf1da63405d58c5cad447b3fc26d1582eb6d2ba678038cc66be48fb2ad8041b
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download

                        python-3.14.6-amd64.exe
                        • Path C:\Windows\Temp\{8A52605B-68BA-4E37-AC55-B5BF9C7D9D41}\.cr\python-3.14.6-amd64.exe
                        • Size 881KB
                        • SHA256 5cb1af1c03c46d957ed75016999b207f04d917080a663ced156acf08c15f8fc3
                        • MD5 SHA1 SHA512 SSDEEP TLSH
                        Submit Download