hxxp://globator[.]net

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 16:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://globator.net
Sample260723-t9ll5sshjf

Score

6^/10

google persistence phishing

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
198	1144	firefox.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	1144	firefox.exe
Token: SeDebugPrivilege	1144	firefox.exe
Token: SeDebugPrivilege	1144	firefox.exe
Token: SeDebugPrivilege	1144	firefox.exe
Token: SeDebugPrivilege	1144	firefox.exe

Suspicious use of FindShellTrayWindow 19 IoCs

pid	Process
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe
1144	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1144	firefox.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 1144	1800	firefox.exe	83
PID 1800 wrote to memory of 1144	1800	firefox.exe	83
PID 1144 wrote to memory of 3384	1144	firefox.exe	84
PID 1144 wrote to memory of 3384	1144	firefox.exe	84
PID 1144 wrote to memory of 3384	1144	firefox.exe	84
PID 1144 wrote to memory of 3200	1144	firefox.exe	85
PID 1144 wrote to memory of 3200	1144	firefox.exe	85
PID 1144 wrote to memory of 3200	1144	firefox.exe	85
PID 1144 wrote to memory of 3200	1144	firefox.exe	85
PID 1144 wrote to memory of 2144	1144	firefox.exe	86
PID 1144 wrote to memory of 2144	1144	firefox.exe	86
PID 1144 wrote to memory of 2144	1144	firefox.exe	86
PID 1144 wrote to memory of 2144	1144	firefox.exe	86
PID 1144 wrote to memory of 3464	1144	firefox.exe	87
PID 1144 wrote to memory of 3464	1144	firefox.exe	87
PID 1144 wrote to memory of 3464	1144	firefox.exe	87
PID 1144 wrote to memory of 1256	1144	firefox.exe	88
PID 1144 wrote to memory of 1256	1144	firefox.exe	88
PID 1144 wrote to memory of 1256	1144	firefox.exe	88
PID 1144 wrote to memory of 1256	1144	firefox.exe	88
PID 1144 wrote to memory of 2224	1144	firefox.exe	89
PID 1144 wrote to memory of 2224	1144	firefox.exe	89
PID 1144 wrote to memory of 2224	1144	firefox.exe	89
PID 1144 wrote to memory of 2224	1144	firefox.exe	89
PID 1144 wrote to memory of 3172	1144	firefox.exe	90
PID 1144 wrote to memory of 3172	1144	firefox.exe	90
PID 1144 wrote to memory of 3172	1144	firefox.exe	90
PID 1144 wrote to memory of 3172	1144	firefox.exe	90
PID 1144 wrote to memory of 5076	1144	firefox.exe	91
PID 1144 wrote to memory of 5076	1144	firefox.exe	91
PID 1144 wrote to memory of 5076	1144	firefox.exe	91
PID 1144 wrote to memory of 5076	1144	firefox.exe	91
PID 1144 wrote to memory of 816	1144	firefox.exe	92
PID 1144 wrote to memory of 816	1144	firefox.exe	92
PID 1144 wrote to memory of 816	1144	firefox.exe	92
PID 1144 wrote to memory of 816	1144	firefox.exe	92
PID 1144 wrote to memory of 2080	1144	firefox.exe	99
PID 1144 wrote to memory of 2080	1144	firefox.exe	99
PID 1144 wrote to memory of 2080	1144	firefox.exe	99
PID 1144 wrote to memory of 2080	1144	firefox.exe	99
PID 1144 wrote to memory of 4124	1144	firefox.exe	106
PID 1144 wrote to memory of 4124	1144	firefox.exe	106
PID 1144 wrote to memory of 4124	1144	firefox.exe	106
PID 1144 wrote to memory of 4124	1144	firefox.exe	106
PID 1144 wrote to memory of 3744	1144	firefox.exe	109
PID 1144 wrote to memory of 3744	1144	firefox.exe	109
PID 1144 wrote to memory of 3744	1144	firefox.exe	109
PID 1144 wrote to memory of 3744	1144	firefox.exe	109

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://globator.net"
1⤵
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://globator.net
  2⤵
  - Drops desktop.ini file(s)
  - Detected potential entity reuse from brand GOOGLE.
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {7997f277-d72f-4414-bea0-001c8260f193} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27135 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {effaa7eb-0966-4822-a414-c1d725d4ee00} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3200
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 25164 -prefMapHandle 3860 -prefMapSize 270279 -jsInitHandle 3864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {f12d916b-2fae-400c-bfea-b46bedf0fb16} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27276 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4092 -initialChannelId {d1e6073b-ffb0-4341-b361-a50f7ce0bc8e} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4324 -prefsLen 34775 -prefMapHandle 4328 -prefMapSize 270279 -jsInitHandle 4332 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2948 -initialChannelId {2c586c40-9eea-46d3-bfa7-d3e8c5677858} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1256
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4584 -prefsLen 35012 -prefMapHandle 4588 -prefMapSize 270279 -ipcHandle 5008 -initialChannelId {40dcc77e-9a7b-4eb5-9bbe-b07f267bf78a} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5200 -prefsLen 32952 -prefMapHandle 5204 -prefMapSize 270279 -jsInitHandle 5208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5212 -initialChannelId {63da443b-ef68-4389-a7c0-f4f919921389} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5232 -prefsLen 32952 -prefMapHandle 5236 -prefMapSize 270279 -jsInitHandle 5240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5244 -initialChannelId {6ba3b392-aea3-435c-8793-39ab1f71e864} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5076
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5600 -prefsLen 32952 -prefMapHandle 5604 -prefMapSize 270279 -jsInitHandle 5608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5208 -initialChannelId {e415ebf7-e7cb-4cbc-ad08-1eb55a5ece16} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:816
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2752 -prefsLen 33031 -prefMapHandle 3904 -prefMapSize 270279 -jsInitHandle 3984 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4552 -initialChannelId {88a785b1-a18b-4ad2-b0e4-4e3397c093bc} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3128 -prefsLen 33071 -prefMapHandle 6172 -prefMapSize 270279 -jsInitHandle 6176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5212 -initialChannelId {09fd5f6d-cbb8-4bba-a1d3-e5533927984a} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4124
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6584 -prefsLen 33071 -prefMapHandle 6588 -prefMapSize 270279 -jsInitHandle 6592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5556 -initialChannelId {cc459751-fb30-46df-b20f-03bed1b500b1} -parentPid 1144 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1144" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:3744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2d5mkwou.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 15KB
SHA256 1a73a32feb1b34866e28932314f1ca368a484548470887f8aa124e982893a164
MD5 f2da8f4b4f5db6f916737f589a5436e1
SHA1 104cf0bf6d3a4c908f29846207d87366bac5784f
SHA512 e7fe04b5a87b42aa85018e854d7cad09bf4e09492049607cf2eb420dae23f7db05cd389f69821b7ca80416c82f0d2fa382f7801cf04ce43eb062ea33bf40ed12
SSDEEP 384:HwCe7iO024Yjdcs3hk2nhfdDE2Ba/rIVy8esb+Qb+N:QqZYjdv3hk2nhfS2sDIVy8h+a+N
TLSH
T193728DBBDF516C5D29179585C9AD53A9DC05FAA7CBF6C0A60824344DCB8432AB0FA08F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd62a0b5-b056-438f-a254-8ca3545d75eb.zip

Path C:\Users\Admin\AppData\Local\Temp\bd62a0b5-b056-438f-a254-8ca3545d75eb.zip
Size 3.7MB
SHA256 9174664eae8a4dfc6b9a979d3806a8cfb2b1f190b4ff593cd6a9f0dac982de5a
MD5 b3292c00eec8e6afc680c31ed1b34098
SHA1 1101b4667096155117f4b2b49cd77a9435365a3e
SHA512 1499e1a4504683113095c4b61cb8724e10c535989f414a5dbe8fbd6dc0c4e4ce6da701d0008b293fda15dd223222758e968b881d86b04e199c17c6d974be4cbf
SSDEEP 49152:MMtss2HgPnuvfv67p+w0+w0vdChZlaeBDy6hEEy/W4JWwSlRHcS6/2W9a6OtiDI/:Xssh7rmgChHd7y/WSWwcckxoDIG76
TLSH
T1E706F135F25FD60BC9CF83BA850C2FC29C4C4FA680D4E56B6A6A95715CAF1E2DB44843
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\AlternateServices.bin
Size 20KB
SHA256 6079c115f504c173a9aa94ddb8e32be0a9060953e72fbf46879c09f33c6b274f
MD5 33a672b14157fbf352b6a2c98d40d472
SHA1 bf53a0cb346352068f2f72dbb839a0ccae9057d8
SHA512 a2829c6cd97f26359d89fb3ff8065b37c76456a598945159d843842023bddf4722fe52438191abbb647920670f60e95a5a45ea0fb87bb45b581cc2d2b34e2081
SSDEEP 96:Y1cMDbZBv4I56Y1BVFdM/pOFlzDRpSyx2QFyuZZxy8tZ/4N:gQv22IZZ/Ft
TLSH
T1629212F76FB16863F0628FB084AD705CDC33072958ADD584D644A4E70392FA9D17EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\AlternateServices.bin
Size 10KB
SHA256 d95614eb726cff78986fcad3a41d25f51668d9ac6d3430e1341e8c04afba35fa
MD5 7fa9fe437a8da1ba0887e8b2d66a6c5d
SHA1 3332243fe0e92970fc2ce22cdc96b6bfde1b0d9b
SHA512 af89adbad79d56ed36550ac3ef3990458aac3c38d182a10d7b62e54fd7b17e77b73929ea45bb111d052bf90bf6114a0011aed77e245b2d78af9d9ac7d7ebd605
SSDEEP 24:XuhMZSsp9132E9xkr9BrV9Vvto5q9F55A5Kd9lVm9BbC:PLomSJZ/BtSI56KXPc9C
TLSH
T139221EE76F72A463F0A28FB48059714CDC320725197DE584DA44E0E702D2B99913EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 37KB
SHA256 fdb2fd4e00738dca86323e3402cf5ec966f7ec383c2c04d41806953369845407
MD5 09647953ae556a2cc4cff390414a67c2
SHA1 f4841b88e818481d3d57ab0c1ac0da879e8316f6
SHA512 79b79a1326713b61bdd8e71dfd3d49d8856973db01086b6f55ad5a896623022336d6b21d4f0c1b954921bc04837cb940fa4b3049c93f68d55c5c335658d62700
SSDEEP 768:U8LA/DjQ/l8QGcmhu93gRCKWW0+u14bHbzbdbPZYDSsEmYB:U8LADjQ/gRCOs0
TLSH
T18A03FF44EB2E513FD42812BADCA51B142F79F886581A2FAB3B4C54686C872DC3D5E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 62KB
SHA256 39b407ab31c4fe09a3ca022ad48eed9b79cbcb841570904e0d5c8984a7178b0c
MD5 ba4a52c17dcd11a4cf8fa5e79b9bd144
SHA1 5b11ef0062429253df5763a7757c6b1320f32225
SHA512 57fce32fd94c903ab47a4be06287dce9fbdbabfc2ce3f87b2cbc773bc0f4717eda116aa8ffb1e5228dabc80e6679c52a4df3b9dc2e0ef1b75d7a2e854226126c
SSDEEP 1536:IbLfCALPeaOqm6PYN41z0BJr0D1NBXbcSHiey7Ev:IbDfqanmf6aIpNhcMSEv
TLSH
T19D530E44EB1A553FD82802BA9CD21B003F79F8894A1A2BA7375C64786C873DD3D5E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 b608ea6d78628660c067594d65fa18f42840fff4f38e0fde1c77c0c459700e45
MD5 6e61b0a2c3f0f4164801495f420de5ab
SHA1 cf2d2d6394e070e3ea5662ea1835334531a37fc4
SHA512 1344680e5ad55eadef6f708728526ad58b3aa825b7a4385b4d9280ecff5c9a5111d8e2669a77f7bb79c4d6d66a966be8cf1453fd643360012885d6639a4da6e8
SSDEEP 96:YFT2FvFVFlG/dd66JozGzgClKtmc0d/UHSdF95/7bkW60rcE+fyUR6Ux2WI:I1d66JozGzgCl6mc0dSOv5zbowb+fyj5
TLSH
T153C1FC68EB28563BC408023BCCA60F400F76795B988E3F1931AC741D2D562DE7A9E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 62KB
SHA256 81fa35cc7615a2e86c92cf0cfbf2e20641564291e1e97789b14ff1294dcaa138
MD5 58797b8ef85f39ef94d336edfc1b9d0a
SHA1 f73a2497b4c4e74997a60e3c40f58e9b620629d4
SHA512 ad1d081f9846366ebe7e93a9534c8329763b0f06bf1e0a86291619c7dfd386ded02ac71a44b722e76dd9ba1d9b1990116f3a3651710978dc9f32bc7faa0e258a
SSDEEP 1536:nbLfCALPeaOqm6PYN41z0BJr0D1NBXbcSHiey7Es:nbDfqanmf6aIpNhcMSEs
TLSH
T17B530E44EB1A553FD82802BA9CD21B003F79F8894A1A2BA7375C64786C873DD3D5E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 33ee731f111ceed97fdbaa05aa6e918b00e4875d9f73efc17f05ff13b38f5085
MD5 3a63dd698f11336e964c112cf468bbfa
SHA1 3ff64262d50e8a0aaad7e47e5c0d26597637fa91
SHA512 dafe73500862dc4382602ddad2545fb219722cbc8c0fa918916724eeb1057df499cbd85ae83b2a39b90b562980963d63e066e95fd38d4f9e5b20eb8d3166ef13
SSDEEP 192:WOv5zboPTZ+fyjqwL1d66JozGzgCl6mc0dz:tborZ+fyjtd66JozGzgC1jd
TLSH
T1CAE1FE68EA28963BC408037BCCA21F454F39399A988E3F19759C641C2D572DE369E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 e3094a72a5bf82f539fe20fd12d77a2fb5cf8c56927c191588d259504665a1c6
MD5 a387270ab49eb59c84a7d30e46c127fb
SHA1 23c68a889a32b036b0213c10e06ec1236726813b
SHA512 2c6a8b194188f2731e47585cb7c6ec51d9268267caeca956bdb648c696b992020d5ba5cb9260a8031c6823315338280f38bc54924b5e2e0f44f75536b8937732
TLSH
T1CC61B858F6299A3FE448413ADC921B406F747456A8AF3F2A35AC604D1E5B2CE36CD43E
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\events\events
Size 1KB
SHA256 0310ce3f44c0a202a08d8a4b4df4ef8d500c83e58499c83c4cd9bdad93e61590
MD5 6c27dddace32dbdd479b0bdb679946fc
SHA1 3e1c321d943a2ad2d078fd9e6095949e6ac17ebd
SHA512 6e0f1b8de6f3a1b15e021fbc1ef128ba4489437501a8527e5698222d42e765ada89e92e5d324969e4d5f9aaffc1a077570b866e544e7173a3d3c4db779e7ebfa
TLSH
T11811549C3EB94D2A9C8BE29C7441228E53554A02089B1C434D22FF8CCE81FDA322E93C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\events\events
Size 5KB
SHA256 dd2f3ecb8a1ec7017cafca71c1bc3449b9c45fdf581abcc70a0dab3f807ae796
MD5 d99a6b4cf1ffa0d31123054c11b9980e
SHA1 91d72df2c1b8b62cbbe47f8795724027e7ebdf8f
SHA512 9cceb1db4b6faabd796e309c001eb4177d3db194ae371d506002e6ee54220dcbcf8e8e612825757eef7afd241f6a38a41a5608d45fef6d994e12644db76ec876
SSDEEP 48:YEr2tLY1eR18a4+FKug/6b6RPi/HOL7lDtRii/LbdYXZ31b2eN3SEYnY64HwIddp:BjCMR7F72pcY64hd95Yd7PKy1S6+
TLSH
T1C6B1001C7EAA1C7F29DBD29DB841028D46DD470288C71D874C9BFF48CD86E8A325E529
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19651a64-a257-4f45-aa97-329c31226281

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\19651a64-a257-4f45-aa97-329c31226281
Size 15KB
SHA256 cbc07914f2d701e3fa08863139dc57dd5afd4d48ae08f6c22a758c75443a265b
MD5 3dcddf768f3076daaf1d21e742a7e60a
SHA1 792d3c0bf007e313d17d2eac32f7551234aee1f6
SHA512 ad10bc65779be0ee5586e680acf6b7a6b059ada40edd32bcadc182a34f6b00d909c28d3881a800c8ec148d7c429b641fe277feb6572e5262366424d330e54b63
SSDEEP 192:6tQm14yfRLjP8/AwdLG9BMKwBKOoKV1aOxLvt5ndrciSLARzH82Hdg81Og1Mmb:quVoULl5n1ciSLARr8m1Og1Rb
TLSH
T11872C956682045BA8291E398D8ECBFC3E5F528CF4C415FCADBE4BD086DDE06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

696150bd-0703-44a7-925d-50d3dbe64957

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\696150bd-0703-44a7-925d-50d3dbe64957
Size 2KB
SHA256 d720ebc0514afa494d5269155c2352baae3bb5662ca5dbf5eda1dba041ea2d3a
MD5 af17771e2353bb6611dc11490cdda6d5
SHA1 2fc6c6f2a327de12eb84b1be52e4e85caf9f3471
SHA512 22729405cc7f3f342b880af3bb349ea82fc6b35276cec301b58110a262cce137f2aa748edf718ac7bef8636d369332a2069acbbe930c1a2264513e8fc14c2194
TLSH
T11F41535C35B45CB79DDAF28DD5C2238E43A88B1304C628832D65EF4CDC9669E336A53B
MD5 SHA1 SHA512 TLSH

Submit Download

8c6779ba-fbcf-4ced-9be1-393fdad54d67

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\8c6779ba-fbcf-4ced-9be1-393fdad54d67
Size 883B
SHA256 c7178f99381e49f6a1153f9b90e8773fc7c7459761b2f93686ee6b700337a98d
MD5 f08bd5c4cb551e64c6f131202518abc4
SHA1 8eebea5a6d968691e4b088b7bc1a0a73040a5eba
SHA512 17e38c1ee4fdd9240a1bf0893c61d5429549db50c4821f0384596ac4c6fe278e27564fa9aef9c589697c0cf3d2fe0eddb7418c97d4312efbf73ef182fb659ce1
TLSH
T17A11C081DB71B9F3CC6C924F8A9137028BE47623C4CA15143DB069280DBE92EA76660B
MD5 SHA1 SHA512 TLSH

Submit Download

90b779b0-ac5f-4b45-a20f-691bda96c068

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\90b779b0-ac5f-4b45-a20f-691bda96c068
Size 235B
SHA256 36939bb957867ac9bf4c934adb3b6098370b920cb89f202ef95edf15d31470a2
MD5 6923986b5a0fb7c2cdae41a78f691b4b
SHA1 15a210f8d84c22eb47ea6225530975be5c83ca65
SHA512 4d20b9ab2153569eda3763f3d61d24ceedb29ed5cd56ea6aa22d2417dcba185256d30e040c092fc5c2ea85654b4303dd64e38c46bffdcff06003a0c423ec8314
TLSH
T15FD097C054A82B1D08000F1BF0F0ADD630848C331CB8A810DAE204749AB8FC8012180A
MD5 SHA1 SHA512 TLSH

Submit Download

96709653-a9b2-480d-b68c-26edc6c8d85e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\96709653-a9b2-480d-b68c-26edc6c8d85e
Size 235B
SHA256 e62e88213871e9654dd2ef17186eedbcb9ab668024d79d52de71da14e54a7d20
MD5 b66327eb4122628f1bd707753ab52f47
SHA1 abd68a3cabc25c62f430b88c79dd9ca6607708ae
SHA512 ac45ddcb3a6fb7a30a1aa3991154224c5a6c4ca9b89efac343446292917d7ca62d18b8e2f968e0ab23346c08ce48879176ceeedb3ca13bc0382b7f9e84c62207
TLSH
T10ED097801898A36C08200F63F0B06EC6318C8C3310F8A8208992803489BDACA0121826
MD5 SHA1 SHA512 TLSH

Submit Download

aa1009be-c769-476c-8e4e-ad35123b655a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\datareporting\glean\pending_pings\aa1009be-c769-476c-8e4e-ad35123b655a
Size 886B
SHA256 b9c7192376d3dd084611af5b3ee15316e7639269f110c474dcfdc12d4b8077dd
MD5 7a8549999648e24c0e36fb6a70668728
SHA1 dbd71553f04923963e0554879eae3ab40f2505be
SHA512 5d347931710b382bf909d571eac7c19ac3107aa4648b0e8eee8ff696502088d67803a0a6233effd4fdcc490fcd1b560654bb9776a29f5cd8504ed36f8e846689
TLSH
T19F11E3808B6579B3CC6C924B99D13742C7E4B22384C718147DA5AA2C0DBA51EA7B7B07
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\extensions.json
Size 16KB
SHA256 db225689284f1d0208da4f30864b8e02af9230f4c325d09cc8d44996d35372df
MD5 a66775b3776c5ae8877146708b0f8895
SHA1 c510c115ecc877ad24c9a0ca8c50372f170f8cf4
SHA512 91a8e2e4e7667dc3e6e4bcb03e61ac4c9a59843af5a2f02e163c432dc9be0e7a3e76144982e7b60702bc74b98315fcbc77500d1fac7129c131450f0b1ea4daac
SSDEEP 384:HkI4vYUmldvL8dhW894z/96ozL4HHL4P/L4HdL4HsL4H0m4hB:EI4gRfoXV4J684L474d4G4z43
TLSH
T17F72421545049EB8294FA78BAA367E01C37D473B60845C78F4DD8FC842FA5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs-1.js
Size 8KB
SHA256 91696522b5028e4001726944028099ab3c1a7f844c50d8b451c88866956d17a0
MD5 53af3ec8eabe8e791bf5ffa9d779e3e3
SHA1 a9f194676f51c875a1beb2d267085813bab45608
SHA512 1030978e880fb226af3926a22c7126ca90bc072cab90009fde7144bf2c349f1b91681e0297e044c820ac40477cf332a767fc7c1923e4dae69144eff37351f7f8
SSDEEP 96:xHr1TUmqGq6faI70NbzSmSSlfdv9jwnpRWR1hWyS9JOTBw88gFRBr8L4cnuFNqGS:1IR6faIADSS+8RTWBrOTBw88gh9s
TLSH
T127020F789504DF7F74B676AC6C2848715AB2023BBABF6CD610B994C4050CF3441FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs-1.js
Size 12KB
SHA256 13b52c0c481be18c68b8b51232567b006aa6e2d7ac953acfc36e5bc5a7b43e7d
MD5 10e14499ac6912f0f52f5cad6e53230e
SHA1 64929d2bef06577ea03f4df50d4b7445a4fcc339
SHA512 05e1fed543f9a8051c23559d219bee082c114ff2f717205ac700343f6ef56010926e4e7e9a93126be3e602b3fbc562c79d8de6b19db007de643381e3ce2936dc
SSDEEP 192:iIR6faIADSS+XLRTWBrOqOBw88AJWjgXh/:MTRTWAdwMHx/
TLSH
T1D642CD385A40DF3F20B7327D6C2569B019A54227BABFBCD205F9A4D1454CF2441EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 6KB
SHA256 0557ce185a141a0664d84ddbbeef0033397190e6624cda249db1ca9110c83256
MD5 cbb8386079c6ab3ac33d59d7acb06b53
SHA1 5e53defed46f3665ea1b1d4d4e1e5002f94f0cc4
SHA512 32ad8c70c02d1ec74eefef3621b528602fd23f659f7414e7d0519115ae8b835b69db0830b1691af12572b19c802a6c7002410656f4a6c71e710f759086db2e6c
SSDEEP 96:xHrUTUmqGq6fzUL1zSTSSlfdv9jvknpRHNWyS9JODBw88n8L4cnuFNj:1BR6fzULeSSG9NWBrODBw88Jr
TLSH
T139E12F789508CB6F74B676ACAC6488716AB2013BBBBF68C750B594C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\prefs.js
Size 6KB
SHA256 b169d303660772ed03ac8d224fec0b701c52401b4577e43e30b9f5258dc4d0be
MD5 f390150a65c194ff2313115043f597bc
SHA1 5a1a4bf704c4a0d12600a6d72f6e98f0e20d4ae0
SHA512 1aed0d12140465c90c0282eec0227ad50c3c5a99deaeec6399d5cd59d03330e128e42bfc6df334af6adaee58502759cecd5805749e29aa1475639942844112a8
SSDEEP 96:xHrUTUmqGq6fzI701zSmSSlfdv9jvknpRHNWyS9JODBw88n8L4cnuFNj:1BR6fzIAfSSG9NWBrODBw88Jr
TLSH
T104E110789508CB6F74B677AC6C6488716AB2013BB7BF68D750B554C4050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 5400aa197b43e0f093178ee6e0129362ab95dbd7f6d5e90418410515a1c204b1
MD5 1d879114d4f2629b6a3bd3a30b6de05a
SHA1 80f881d343d2608f396572e2f8209a63bb0cd6c5
SHA512 74c1d4013a75f5327f6eace34360000655288467f387bd56d8834e9aec0e9f7c056592118646b3f06a64b17fc3fdd75eeb0001f4eec7e824acc74ccce17cfeab
TLSH
T104311C86C9973EE5B571911CC45B2FA1CBA5311388BA9CF0C17D4D8712CD149714576A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2d5mkwou.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 be00dd38bcb582fa68749e2d4ee8924cc66d06b004474c0bf76a10570e90f540
MD5 9ea311a9c54b672e2abc84a0a120c550
SHA1 7873b621b57701cb73962c9da47d9d04c1a76f60
SHA512 18dbe3aed705761da27f03d42641367ec4fde4117df87fcd4de638e85b3aa72811173d324c9847bf84559485a3245f395a4aa02e01649c44992daf6169819400
SSDEEP 96:mDkflWpf1MLA3mj7c69Q3arDNR/UvtzgQCd01VrqM4EcZZi6rLKJeb5Q:Tl2tMLHt9SarkVji0v/4Ze
TLSH
T1D5A19EB78807FEE975B0D4484CEF0F4642F210A4C8FA0D76A71DAEB750AC3899548B6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads