hxxps://pixeldrain[.]com/u/VGDCtfTA

Analysis

user interaction
yes
max time kernel
172s
max time network
174s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
31/07/2026, 02:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixeldrain.com/u/VGDCtfTA
Sample260731-cs4mys1gre

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4184	chrome.exe

Checks processor information in registry 2 TTPs 60 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299380923347017"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4146128427-3460078792-3629963422-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4146128427-3460078792-3629963422-1000\{9F071A53-85CB-4054-8AB8-0686E86F7316}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1124	chrome.exe
1124	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe

Suspicious use of FindShellTrayWindow 62 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
772	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
772	firefox.exe
1068	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 1372	1260	chrome.exe	83
PID 1260 wrote to memory of 3744	1260	chrome.exe	85
PID 1260 wrote to memory of 4184	1260	chrome.exe	84
PID 1260 wrote to memory of 3744	1260	chrome.exe	85
PID 1260 wrote to memory of 3544	1260	chrome.exe	86
PID 1260 wrote to memory of 3544	1260	chrome.exe	86
PID 1260 wrote to memory of 2852	1260	chrome.exe	87
PID 1260 wrote to memory of 2748	1260	chrome.exe	88
PID 1260 wrote to memory of 2852	1260	chrome.exe	87
PID 1260 wrote to memory of 2748	1260	chrome.exe	88
PID 1260 wrote to memory of 2704	1260	chrome.exe	90
PID 1260 wrote to memory of 2704	1260	chrome.exe	90
PID 1260 wrote to memory of 4840	1260	chrome.exe	91
PID 1260 wrote to memory of 3320	1260	chrome.exe	96
PID 1260 wrote to memory of 5068	1260	chrome.exe	98
PID 1260 wrote to memory of 4908	1260	chrome.exe	99
PID 1260 wrote to memory of 2040	1260	chrome.exe	100
PID 1260 wrote to memory of 1784	1260	chrome.exe	101
PID 1260 wrote to memory of 1784	1260	chrome.exe	101
PID 1260 wrote to memory of 5000	1260	chrome.exe	102
PID 1260 wrote to memory of 5000	1260	chrome.exe	102
PID 1260 wrote to memory of 4724	1260	chrome.exe	103
PID 1260 wrote to memory of 4724	1260	chrome.exe	103
PID 1260 wrote to memory of 3672	1260	chrome.exe	104
PID 1260 wrote to memory of 3672	1260	chrome.exe	104
PID 4460 wrote to memory of 772	4460	firefox.exe	111
PID 4460 wrote to memory of 772	4460	firefox.exe	111
PID 772 wrote to memory of 2488	772	firefox.exe	112
PID 772 wrote to memory of 2488	772	firefox.exe	112
PID 772 wrote to memory of 2488	772	firefox.exe	112
PID 772 wrote to memory of 2064	772	firefox.exe	114
PID 772 wrote to memory of 2064	772	firefox.exe	114
PID 772 wrote to memory of 2064	772	firefox.exe	114
PID 772 wrote to memory of 2064	772	firefox.exe	114
PID 772 wrote to memory of 5216	772	firefox.exe	115
PID 772 wrote to memory of 5216	772	firefox.exe	115
PID 772 wrote to memory of 5216	772	firefox.exe	115
PID 772 wrote to memory of 5216	772	firefox.exe	115
PID 772 wrote to memory of 5244	772	firefox.exe	116
PID 772 wrote to memory of 5244	772	firefox.exe	116
PID 772 wrote to memory of 5244	772	firefox.exe	116
PID 772 wrote to memory of 5548	772	firefox.exe	117
PID 772 wrote to memory of 5548	772	firefox.exe	117
PID 772 wrote to memory of 5548	772	firefox.exe	117
PID 772 wrote to memory of 5548	772	firefox.exe	117
PID 772 wrote to memory of 6364	772	firefox.exe	118
PID 772 wrote to memory of 6364	772	firefox.exe	118
PID 772 wrote to memory of 6364	772	firefox.exe	118
PID 772 wrote to memory of 6364	772	firefox.exe	118
PID 772 wrote to memory of 6764	772	firefox.exe	119
PID 772 wrote to memory of 6764	772	firefox.exe	119
PID 772 wrote to memory of 6764	772	firefox.exe	119
PID 772 wrote to memory of 6764	772	firefox.exe	119
PID 772 wrote to memory of 6772	772	firefox.exe	120
PID 772 wrote to memory of 6772	772	firefox.exe	120
PID 772 wrote to memory of 6772	772	firefox.exe	120
PID 772 wrote to memory of 6772	772	firefox.exe	120
PID 772 wrote to memory of 6780	772	firefox.exe	121
PID 772 wrote to memory of 6780	772	firefox.exe	121
PID 772 wrote to memory of 6780	772	firefox.exe	121
PID 772 wrote to memory of 6780	772	firefox.exe	121
PID 772 wrote to memory of 6068	772	firefox.exe	122
PID 772 wrote to memory of 6068	772	firefox.exe	122
PID 772 wrote to memory of 6068	772	firefox.exe	122

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixeldrain.com/u/VGDCtfTA
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ff88317c728,0x7ff88317c734,0x7ff88317c740
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1984,i,16601832508776498175,3492131099989071418,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,8589664727475827708,14365082704877105395,262144 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,3952156420020828965,10464051392034056523,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,16221428661669298954,201306488353928074,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,12869552968603920538,1638298149124443436,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,11855802902274935349,6957060035014158549,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4476 /prefetch:2
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5264,i,17559661038974080917,17551007319417476149,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,17528458114895125402,12991823602111270688,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,8609191294549996890,3829908765826267784,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5736,i,3054105890808878080,10729567871231658328,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,17209412629709985788,15806284274988733193,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4480,i,645922764232840345,17331245015386655983,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4448,i,12101040959032144275,3906694053358055602,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5760,i,9120362934020223564,15320451927968267499,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4540,i,236607213652457719,8552511561095561778,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4876,i,1605106269499277404,12615300152203846907,262144 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6276,i,8126295980693905779,14294052033892887573,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6292,i,15876898503534669145,7784625771822751679,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=2440,i,14629968384871655758,8371459355772156369,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6644,i,722214244150102273,4445866660323408042,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6424,i,4522900066446651024,1592267364231191042,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5708,i,14485442356971849745,10668198247007117027,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3532,i,6602122055096045804,8571883305738946819,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6468,i,4035465310005182547,14521033766945858161,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6596 /prefetch:8
  2⤵
  PID:6520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6300,i,10824930955646118188,14597793194326717030,524288 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  - Modifies registry class
  PID:6528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6416,i,10810060719413695262,6167555604917572974,2097152 --field-trial-handle=2108,i,12384556065766241162,16415390761064021183,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3912 /prefetch:1
  2⤵
  PID:5816

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1184

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2676

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27100 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {7cd6a5a5-7312-40e7-bc31-e3ca3a6b1292} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2488
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2448 -prefsLen 27136 -prefMapHandle 2452 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {453b50a9-00e2-4b7a-bd47-b47bd48f3096} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:2064
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3612 -prefsLen 27277 -prefMapHandle 3616 -prefMapSize 270279 -jsInitHandle 3620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3624 -initialChannelId {889954aa-70c5-4c36-b1e1-52dd3750e39c} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5216
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3772 -prefsLen 27277 -prefMapHandle 3776 -prefMapSize 270279 -ipcHandle 3868 -initialChannelId {ea6482b5-88dc-4070-a082-4941c265587c} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4376 -prefsLen 34776 -prefMapHandle 4380 -prefMapSize 270279 -jsInitHandle 4384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4392 -initialChannelId {07f4aae6-4900-4ff2-a92b-3a95245b51f7} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5548
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4588 -prefsLen 35013 -prefMapHandle 4580 -prefMapSize 270279 -ipcHandle 4824 -initialChannelId {5c0c60c1-339a-41e2-8691-a64aaa1483aa} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4324 -prefsLen 32952 -prefMapHandle 5280 -prefMapSize 270279 -jsInitHandle 5276 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {523e456e-9130-444e-8a27-de0cb7fd785c} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6764
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4328 -prefsLen 32952 -prefMapHandle 1620 -prefMapSize 270279 -jsInitHandle 5028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2732 -initialChannelId {e5c39481-d08f-4026-9460-e8009c5ee3bc} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5700 -prefsLen 32952 -prefMapHandle 5704 -prefMapSize 270279 -jsInitHandle 5708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5716 -initialChannelId {01ff4e78-665f-4117-9b2c-f6d3d7213eec} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6304 -prefsLen 33071 -prefMapHandle 6308 -prefMapSize 270279 -jsInitHandle 6296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6332 -initialChannelId {59ff5e30-22c1-4659-b7d7-0d8629fe9fdb} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:6068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4324 -prefsLen 33071 -prefMapHandle 3612 -prefMapSize 270279 -jsInitHandle 5996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2512 -initialChannelId {cd90b00d-5a28-4b2c-ab7a-5ec71e4eded5} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4032
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5500 -prefsLen 33071 -prefMapHandle 5496 -prefMapSize 270279 -jsInitHandle 5028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5488 -initialChannelId {68aab2ad-1364-4707-9caf-2fc2657727c6} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:5996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6640 -prefsLen 33416 -prefMapHandle 6596 -prefMapSize 270279 -jsInitHandle 6204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6756 -initialChannelId {05df0ce4-5d4f-4092-904a-59f9404338f6} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5496
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6076 -prefsLen 36758 -prefMapHandle 6500 -prefMapSize 270279 -jsInitHandle 4204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6564 -initialChannelId {d65cb28e-27d2-4f29-a923-f6eb9fec89f4} -parentPid 772 -crashReporter "\\.\pipe\gecko-crash-server-pipe.772" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:6964
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    PID:6268
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Checks processor information in registry
      Suspicious use of FindShellTrayWindow
      Suspicious use of SetWindowsHookEx
      PID:1068
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1920 -prefsLen 23514 -prefMapHandle 1924 -prefMapSize 266331 -ipcHandle 1996 -initialChannelId {b9812b65-f1bf-4912-b6a9-4e7b4a192a50} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        5⤵
        
        PID:4876
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2276 -prefsLen 23514 -prefMapHandle 2280 -prefMapSize 266331 -ipcHandle 2004 -initialChannelId {dde1e5c3-2237-4e2f-b6e0-63cdf50c92b2} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
        5⤵
        Checks processor information in registry
        
        PID:6668
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3684 -prefsLen 29179 -prefMapHandle 3688 -prefMapSize 266331 -jsInitHandle 3692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3700 -initialChannelId {3efe534c-79b3-4224-8c6a-f0608a060f8d} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
        5⤵
        Checks processor information in registry
        
        PID:6924
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3884 -prefsLen 30083 -prefMapHandle 3888 -prefMapSize 266331 -ipcHandle 3968 -initialChannelId {a3234a8c-9d7c-438b-8d87-9a75991072b2} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
        5⤵
        
        PID:5256
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4172 -prefsLen 30229 -prefMapHandle 4180 -prefMapSize 266331 -jsInitHandle 4184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4192 -initialChannelId {7bb8a7a2-7667-434b-a848-a02a0bdad637} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
        5⤵
        Checks processor information in registry
        
        PID:6584
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4556 -prefsLen 30688 -prefMapHandle 4560 -prefMapSize 266331 -jsInitHandle 4564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4572 -initialChannelId {9a36d433-4048-4749-9a4d-742f58fe0ed8} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
        5⤵
        Checks processor information in registry
        
        PID:5236
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4144 -prefsLen 40758 -prefMapHandle 3356 -prefMapSize 266331 -ipcHandle 3908 -initialChannelId {7d4e2f74-05af-4655-9f37-faa4d3bff4f8} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
        5⤵
        Checks processor information in registry
        
        PID:6812
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5284 -prefsLen 38720 -prefMapHandle 5196 -prefMapSize 266331 -jsInitHandle 1340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 956 -initialChannelId {e33eff05-5681-47d1-a371-aaeed4c55e32} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
        5⤵
        Checks processor information in registry
        
        PID:7024
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2712 -prefsLen 38720 -prefMapHandle 5208 -prefMapSize 266331 -jsInitHandle 5216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1340 -initialChannelId {0ce6ce68-a291-466d-a6ee-11942dae52e2} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
        5⤵
        Checks processor information in registry
        
        PID:6040
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5284 -prefsLen 38720 -prefMapHandle 5768 -prefMapSize 266331 -jsInitHandle 3048 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5216 -initialChannelId {13ab105b-5e2d-4025-899e-9802e312b42c} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
        5⤵
        Checks processor information in registry
        
        PID:5224
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6020 -prefsLen 38844 -prefMapHandle 4884 -prefMapSize 266331 -jsInitHandle 6052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6016 -initialChannelId {ca9ade17-6245-4cd3-b344-330a11e55350} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
        5⤵
        Checks processor information in registry
        
        PID:3620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update-config.json

Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json
Size 102B
SHA256 ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda
MD5 7d1d7e1db5d8d862de24415d9ec9aca4
SHA1 f4cdc5511c299005e775dc602e611b9c67a97c78
SHA512 1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477
TLSH
T12BB012800100B658F0FC4CCC05303B3E0248402D44CF3903004D30A0787B0020A094FE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 71a805d61c255bdf0b08df8e4a4ca9dc2b51c65c7cdedd327754634caa07c54d
MD5 2c63d472ff031865e289bad4653d433c
SHA1 3143d897c607a49524e2f95be4ced95c51546d55
SHA512 67cd787c684b7ab44b379060df9f243202df5038b3c0404ca141ccfa813a36960bff1e086bd32a6e1c1fa14e1da804f57e06945d31561a32c323ca8f3ff6cceb
TLSH
T10EE061EECC11EC3709FD4B2955845646E664135F2B415A1F7A3C910D4F7077B4782C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 84KB
SHA256 b02d81653438f2206e406fe74f198c4081b749f7ab9e5a2de8c1fcf349bf0f82
MD5 a06a101f4e9ae9bc3c7185f29d973177
SHA1 71ad19396030d4f261a2b79d182e107583b81016
SHA512 b022a01a0aadcaa3e9f8ede517d02121f852b5d20a3f0e07f76a01d73c412caff82f6ed33f8e8b459706741720002af2c8047988e7c4d96d360348d73cb8c1f4
SSDEEP 1536:X/Vo6Xtocjv/2uDQOwVIC+Qo+kgi1GbP5xunBQ+JPqiCEyDddmWOGPR7hjMHy5sK:X/Ntnj3BwVNfzq3lCEyYGPQHymvMNrY+
TLSH
T10A8302D04C3B7A5463A19924C5CF3A4CD4E1A65F9F97E8AD8C89B39B11F640E3C0E84C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 21KB
SHA256 2a0b7c30f0977fb1625451633b6b398f1f2c69d01c655bba3918c961b66a0583
MD5 8a2c36b90c9c621271b5b157ed86e56b
SHA1 f542f96bdc7ea0f2acfd8cd9353ad01d722256a2
SHA512 10ab9e8180698c4f5570b516c20c7282c50755a33c9215c9bb97d58990004f614a95c06fcf5dd2fbb844e24a5d81332ebdffa5c89cd4b22ee46828d5deab1bd4
SSDEEP 384:3YCbDPjmywD3fwAJ2ZmSMqcHbjgog9rfaPkiTOi/dkewSpcE5uW:3sv0YUmSMnHgogxfadFkewc75uW
TLSH
T164A2E17711DD711BF84E9DE82DCE8ED5C8A9A0DE6C618C4047E014A8D0DEA760FFB4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 c73e0c82098d0d85227c49ce8067698b6747e16fb0c1d1d1c6089322511c65f5
MD5 f3a352fd65778b98f20ea4da36eecfe8
SHA1 6b148a1c715deea3ca196342407eadaa1a82f603
SHA512 69f641dd6cd90b2e048f3acbd8b0235f652c55917c425a2a7944c02b86b69f063869f6d706755af29bea22d3279dfcee4df13880a31937cf1f32b5ddbc3e50f4
TLSH
T138E0260F614461E3CB4873BD58AFA23BE120298A6C536A45FC508F3C2466EB3844BD19
MD5 SHA1 SHA512 TLSH

Submit Download

8a7393f8-6e61-43c8-8a1f-e8cdb483ba52.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8a7393f8-6e61-43c8-8a1f-e8cdb483ba52.tmp
Size 10KB
SHA256 7bb641558aecf0068fd136749829718e5bfeaae28b410e7b17fe2410e1288cca
MD5 12c5a86e053051ef04ea791f397f5e41
SHA1 9f9e8f7f0cb82178196892acbcea369f7c4896fc
SHA512 b80e590eafdad617e566991056cf7d6d58bbe4961e4c0e867c216b4af6d12d388541b86eb2ac880a0fc6968f9c373ff12bcbe98c08126cf749b83783ea164bb7
SSDEEP 192:DHPGBAxSQvY8hlJSelJmoaIQFzVYudMZq1vSUe0aPtIRv9io1fP6DrL1gpNP+Cjz:DHPGBAxSQvY8hlJSelJmoaIQFzVYudMG
TLSH
T14432AFF7C3D9C52D895156F8DB257F2FCE1A0928031C3D2685D8AE5BE3E2831E21564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 6f0ab57ba07178abdec3b0ec13dfee944e71914de57bf73598a6240a6218f4f1
MD5 c0fb113fb4b349184f3584b175614bab
SHA1 6b48441f794cd2d5856c9459a71eb6f239ebb0ef
SHA512 cd2c713eb0ab27629a62a8ab4f62b35ecc6b9b5f2181071040320275ea75eb9c3798a2ea62de8fbd2b55ad43caece2ff37a15d34157e3144f2c1df4930c09702
SSDEEP 96:DHPGBAxKaIQK9FTMoatlX8p/C0JNP30aPAmVD:DHPGBAxKaIQ2hMjtlX8VC0JNP30aPAmB
TLSH
T1E3C18DF7C3D9856D894156F8EB157F2FCE2A0A18431C3D26C8D8EE1B93E2871E21524E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4c0be106f80faf6a3ac8caef419d932574829305580b0ec56e1e77f2a1855935
MD5 889beb908c069b1f56f3a49bad2f99e6
SHA1 a5b844ab760b073ffdb8cbf890dbac8dd789bd9e
SHA512 eaa847c838a03d768db7f09ad79b48cf0855a6a57f28cc514d753a0d7a29bb0b6ec7dba535ef488d93a8635221f8345eac168f8dabd30d64ac52d3223068c5f1
SSDEEP 192:zRrcBzQPWwgeJ1v7TpwPRpscFghSo99Hsb+WNTG8tI73s+rnzQIh2/CeFPaH1pVo:zRrmzQ+wFF3sXaZjwXI40cy2paVPE
TLSH
T1AC62D72FA9202A7B4CDBC21BF9657B1BE3F5102565D06E84EBFC8A1C25D75CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b79e317b336c640ea37384bc18ed9b53da57a885dafce27341d3cc7faa3c9545
MD5 c07fe0cffc8aa7bd29399fdf120abc85
SHA1 e8c53409a5bab9b85ddbce986779eda753255628
SHA512 92dbb4b8ecf7bb9899eefc412ea5612758d2e8a19a65e5b0219b5c0e510e4917138da29581a143c0859630a296e0c015ad22dc55495fad497782e57fc4d26f6e
SSDEEP 192:zRrcBzQPWwgep1v7TpwPRpscMHhSo99Hsb+WNTG8tI73s+LITQIh24CeFPaH1pVo:zRrmzQ+wNF3sX4ZjwXI4x8y2yaVPE
TLSH
T14B62E72FA9202A7B4CDAC31BF9657B5BE7F5102565D06E84EBFC8A1C21E76CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e0225fd14214f8fd10fa09346fb53b125cd834d3c320aa2431b3f80d48977238
MD5 bce65d433955c42dd658d6c769231260
SHA1 e864d72e1e1ccc53a6af2266678e59bdfd43b7ed
SHA512 21459361dac8d05175e39444a2877454553ef74d23cb17e08c518c86b0205597174221845658f458b05d248edc5451ebbbaaa54c9ad182168b35e8c033c28f12
SSDEEP 192:ERXAPWwgeNgv7TpAPRp2v99Hsb+WNn10P1CeFPaHnVyIsnAUge:ERXA+wB83UX4jwCPnahe
TLSH
T1CE42D62EA920793B4CDBC21AFA653B57D7F5102125D46E84EBFC8A2C25E75CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6c1370245f266152fafdf24da6b90872fecb0ea6d3e4085146b2730c659ee2d3
MD5 13d6a82e3074c624cf82f81d4fb1bcf4
SHA1 1f7055ca48177e8c72162752ecba2655fdf937e2
SHA512 c604be40059ef607b99829a34e00f60275e6c3e37079ff62b2bbb789b384840bdd50d20900afc3a7ced393953bbd2815f6a1e6c43bccedb9187524f8e3a4181c
SSDEEP 192:zRrcBzQPWwgeJGv7s7pwPRpscFghSo99Hsb+WNTG8tI73s+rnzQIh2/CeFPaH1pO:zRrmzQ+wFyI7sXaZjwXI40cy2paVPE
TLSH
T18062E72FA9202A3B4CDBC21BF9617B1BE3F5102565D06E84EBFC8A1C25E79CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 13083851e2ae7699351ea2d97d2ec63f1b5a44475d9644cee631dda32e793f85
MD5 6ecb7618c2905693cb530b678e17224a
SHA1 5c566bf6cf025c3f5e2ee705a810c2628488760c
SHA512 0d6aa092ae91a113e0b01f0a0d424109a35f7905f588bbd4dedeb28f2c8a23190f01b5760af9ab92692f32f28344acc4223f8a807a06929b5b675e72aff9507b
SSDEEP 192:kRXQPWwgeN1v7TpAPRp2GhL99Hsb+WNn6p63s2mCeFPaHbpVyIsnAUgE:kRXQ+wBF3UX5hjww124a7PE
TLSH
T19042C42FA920293B5CDBC31AFA653B57E7F5102125D46E84EBFC8A2C25E75CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 67d4302d6fdd961c9212047f4e8a3f260c67d9e0dacd93c93b539a06cdd1da0e
MD5 fede0ce7a6001a9ea8b6d2c4fa2b378a
SHA1 4a282e9614d47ff7a3d783615e7f2d93835ebb13
SHA512 95b542ec073732b8410fdb8d02fd7a231b904ee70feca95bd5b8ea6d416ceb54fb154cda953b199c9aa6d357b854483fe1272f708f8e6de7211b7fb60c6dc413
SSDEEP 192:kRrcBzQPWwgep1v7TpAPRp2cMHhSH99Hsb+WNTG6p63s+LI2/CeFPaHbpVyIsnAI:kRrmzQ+wNF3UXWGjwp1x2pa7PE
TLSH
T19452C52FA9202A7B4CDAC31BFA617B5BE7F5002165D46E84EBFC8A1C21D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 347d73ba7d38af83ac3d460ce8c2dd97cabdd4c55b65412cd8b887fb45b65b38
MD5 871109c95d991c94717364d65631baf0
SHA1 fc56f3d2f1b22d07cb19c827684bb9fb264712aa
SHA512 3ade27ac0b79ef313d66bfd054d6fd2751cb9827493acd598ed9e782f0d4fcd111331893c5c70bec25cf3d8785027f9de5a781447cdf6e3bd8e08cdce6002844
SSDEEP 384:IijUn7KxkXqKf/pUZNCgVLH2Hfgslk+n7pLuLcSjijXODUL+ErU3gRnHGmvcrBv0:IiUn7KxkXqKf/pUZNCgVLH2HfgsK+n7D
TLSH
T1A27219776C4C9E370F94C68CD8277B4FADB5025B65E9886843FA982903D5ADF010A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 937b8c0a224b574c9744009dbdb0867f73a44fd332e2a21e6ab9c86efc581d56
MD5 f6109486dd3ac854abbc82ee8ab68fdc
SHA1 5cede299c6ce96c004b9109b10a6332a89b7af93
SHA512 6e1b369a08153ad13ee8f1f4ff710be09869b4f9899d5ae4df65e62b55558a5052546f5b7d143dbb49d85e2ca4c6f954a498509665cd7b10c9e26f462eb690f8
TLSH
T135B0124084025202C00A0AF4114217F9F1549F10960A1B0283F86DF688391508015150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585464.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585464.TMP
Size 96B
SHA256 530f19a53cc716ed2b79499944568ba43028d8dee42b7f0c5e51a85d8b42b3f6
MD5 578cd648f835ea689616f378cff4b0c6
SHA1 c28173ab922f939fe74f75c6b2dac763c609b572
SHA512 677eeb9fcab4fbf462575280d21785be390839d1fc681e4c48a8f2b23773ce20ac63b37cfae0ca8aad7dbefbe6e0b677b9575a1db80e052aa2344a09e0e76565
TLSH
T18DB0025EC102A316C84307B06D97A5FD71B4DF39D603236692E41E66DC657704925660
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 d673caf66c8484a4be542d557922d88940cdcd85a9944a3e51af1b201ccc8d4c
MD5 87800969607fe6ceacdaca74f9be5556
SHA1 4d655fe49a94bab1029eb378fe254d3cee0b1904
SHA512 21a9838d7815642f5c2b8cb4445caadbe9c2bf96e194c5ace41832f34b7b08032cb09c0353a7cb08a4d6869233871bdc0822f9c3124c7dae2d6e6c1dbdcadd90
TLSH
T1E9A00211158E103AD44C02B114C615513620C87045D1025340940C99DD662415237904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 767b811c74160e29786c99ff2f54683c7c46bd5f22467537e01bcf6436fb74bc
MD5 2b1360f764232e3091cb69b51d85dde9
SHA1 ada070e805c959f3c8f5f5cd15a10161597f09bb
SHA512 98b36d909d815a1ce4e582678811df25e57cad46395d93ab077c933d0bd2ef889185dd00a0a9e7cc051c1b09b35b44d5a679127260e7d5b2b7cd86bdc8b99b9b
TLSH
T174B002365182892FC558137557CA5DD73B230C7053E6E11349A71EF59A273B3632B748
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 783d1bf3be0d37fe76dbab33f295caad8913f565a50a60174947f78a03538173
MD5 4436d9cbf0f6ed1a605ba727d1da5282
SHA1 e9362bad403f187f83b1b73f5535e2b767aeec2f
SHA512 7d89bfaf1f9d2fcb1548204bb9e9846a7b6ba7351d9e050949da87948615030b36703008c8cc2291a7207a1680c822714ec53aa439aa0a1b8a2dd80d0e23ebff
TLSH
T11AC04CD31454954B5730AED81029721DD55B834C8CCDCCF8A54451162578A264902AB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a7fb1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a7fb1.TMP
Size 157B
SHA256 165f78fafd9468e8b54cc4a56c370a628dbcbf6d9864ded13b8e2050e672f30d
MD5 b7f89b46a7f6e37043c07a57029bf4bd
SHA1 5c05b376550922081edcd57df5090e951b626b7b
SHA512 8672208536fa0c0ac7ac0b0ec035b074a78745a4106c605cb0e501517b3a4fba53ad3a236816726f8784a7463795c7fb74ba27a36405f9346c35669a10a8fac5
TLSH
T126C08CD3042040470730A9C81038320EC86B8E0C8CC8CCF8A405710621789238901AB8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 420cafdd4ed44eb94d0439660c5890d29e518a0b66e3acf134c1b627965cd2b1
MD5 2629af85237c20d39682385df9eaef25
SHA1 892ee8bbbd383f20454401c38471fe573b2e29ba
SHA512 cb57e73beb1f50bb228333359cc39c81892ce40d050cb17f53faf08e55d5190632b18095b0ea9ee8e6dd378e0e7458e08fe98a941b8a5524eb71c9fedae11a22
SSDEEP 3072:2xy9w3LffUnBKU/F8enCW3iyVEXGey0cB12:2xya3LfqBZqenbyyVEd1cB12
TLSH
T136C31231E4AAFE6B52B5563B750B97195CD108BB58E1B788883C2F1990C63CCEFA4C54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8b2f1d6b620f321f3a9bca7d82183c6f67f16ca3105711207552a8bf8d88d0ea
MD5 5480fc7573f27eff0266e41659c48c68
SHA1 84baed3a721ff7cc95ea5ec2000cd97588e8c025
SHA512 37ad4347450c5f05da3a1e9a6bdfb2f657567bc11fcff062e10356b3234c9fc9bf9e117645329d056f7ab21191e25b1fa1495022e58e67cee968e6174763dd1f
SSDEEP 3072:2xh9w3LffUnBKU/F8enCW3iyVEXGey0cB12:2xha3LfqBZqenbyyVEd1cB12
TLSH
T1BDC31231E4AAFE7B62B5563B750B97195CD108BB58E1B788883C2F1990C63CCEFA4C54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 dd2a7b39ed3c578b0b5f63af083ef04bb44fe537e583c63359fb1e276e6dd16a
MD5 6a006e25f5b3de34424af48a2ad8746b
SHA1 f2bad5e874e3b6a12dc8edaf4620c62c246d016f
SHA512 1d47e95851e22077a052210c8fdf451abdc3c3a0fbf1278c8f03232d58c1c36c9ed92b0284be470f601c8fab1559d0992d3c25859865a89b8aa631b29fd67fb5
SSDEEP 3072:IxOw3LffUnBKU/F8enCW3iyVEXGey0cB12:Ix93LfqBZqenbyyVEd1cB12
TLSH
T146B31321E4A6FF7B9275472AB50F93195CD148FB54E1E788443C2F19E0CA388EFA8D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 131508522c1b91014482d06b7a97f544816bbf7cf8c3e7e80c56074c15d991b2
MD5 b82b745e23096cbaaa305c3d114c8d61
SHA1 eff22e936a11cf8b7022807f0e832065384f3ba4
SHA512 4c1005a51c833c81ec6a91f5b732c0e2884c8beab6bb825ef2f2cf47b6edcac0db2d1c3602759a949a02f25498c5bda6b2c0ceaf4db691c390c04723844be8e0
SSDEEP 3072:2xnw3LffUnBKU/F8enCW3iyVEXGey0cB12:2xw3LfqBZqenbyyVEd1cB12
TLSH
T14FC31231E4AAFE7B62B55737B50F931A5CD148BB54E1B788447C2F1990CA388EFA8C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 79d42edca66ec22c51455f208c93a84b434ccb7f62645e7f9959e306baf0b682
MD5 90fb34728086e7bd00b12598978dbcc7
SHA1 0f93e614f1cac4b26e2199a817af2bded558d8e1
SHA512 4ae6bd7cdc238792f6cea3d7cd8aea157879998d6ce7467d8006bda54714d40f61ed2b870a4b4434a4017f3f13e86107ec9b7d1bcbdd6d12e18e38aadaddbf9c
SSDEEP 3072:nxSw3LffUnBKU/F8enCW3iyVEXGey0cB12:nxx3LfqBZqenbyyVEd1cB12
TLSH
T19EC31231E4AAFE7B62B55737B50F931A5CD148BB54E1B788447C2F1990CA388EFA8C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

asrouter.ftl

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Size 15KB
SHA256 7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
MD5 96c542dec016d9ec1ecc4dddfcbaac66
SHA1 6199f7648bb744efa58acf7b96fee85d938389e4
SHA512 cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
SSDEEP 192:63/CCBmqCIKJumwOGmnOq6b4b9C4GoTlbo2ofF9/cFnSPhxtj3tCiwwau13151iS:OuPngEG1xNUIzFnieWrc
TLSH
T1D162E8CEF48193585D6F920AEDC5B391FB27008C56693C6671AF608873B9529C03EBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\startupCache\webext.sc.lz4
Size 105KB
SHA256 7b4425a5f2ecbb650aef40129ad6c98630303570ac84e4827508ab9322ac69f0
MD5 853ed008f88f6caeb79c8b37b26a850d
SHA1 1fe11d8683d68f3b2a24cd6f717f370c50c4fffe
SHA512 de6e1037ae041d3546b6ea5c62a7e9c30515b610e86a6dfe83bc6e2a7937925b533c199a893338cca32a679cf2641909852961bff8c982ec758786570e92a0cd
SSDEEP 1536:BTrliIcZdhao0+yjfEKX7VH073K03Lw/4IXY4MFhZZUyCEEjPv7subZtzdhXGvTj:B3lYrzyrEsV1/fMxZUdpPsqdJulVX
TLSH
T107B39EF6CFA68D3D55FFD42D9AC2893EFD273404B3A32409C8632714A1C6B786679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\activity-stream.contile.json
Size 5KB
SHA256 d0c79cd5cd2b0dbc47a91ca63cc8385acd3b18a4ca5a215812e816e61648d1d0
MD5 382d2e675bc60be0afd51128da6611bd
SHA1 3b8d503362c6fecb9a91fa1cdc09ad165f1061eb
SHA512 b3a048abc17af1e1580e753929e8025c0b30abf9ea273b78449a964f3580ad984c0d618ae540fd5a5e038e8f54a3281f90ecb9b5bf9c999af0ea942a1779da5f
SSDEEP 96:kKY94S/VrNc6DqHdJCSbrt0MKy2SiJqLnDXAVEK/S:sNr2wqHdb/t0MKeyqPXqtS
TLSH
T12CB11AEF997485631BB36AD42E0B23D8E283F24B9DE8CD9DF3C1AC12420974545E9D89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 6e31c267fa9f398028421c65ff7f9e24c4ea317506b6f6fab4395f5912312beb
MD5 4ee30d81f3262d10d14a4158989f3093
SHA1 7ba427b23a43c8e5a6494b2971729cf05ffd7565
SHA512 5ccaeb55fe5d327ca37539cb8a2e1119aec877455fe5fba0450a730e39b6f08a1cb70a1236c3f3e1a1264a0257fc917932050ed38ec5e4f48d5f30b70ca8784f
SSDEEP 768:MyvCbr+CpL0xOxqZ4P75PHmGvHyNxRQoy/lSiCQ:XvCbowmGvH4wl+Q
TLSH
T1FB731AE3B6B971BB1F9537CB2C4BB55F6AD14186F38501CAFCADC91C8089654023A6EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

1358

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\doomed\1358
Size 257KB
SHA256 433147142a4bf857d5eaf30d6b43d1308c31d32e3ee19cfad11ab8b9a780f9b1
MD5 b539ecad7d064ca36d64c3acb033695c
SHA1 cc4f337e2b8e4326275c10cf1a275638b16c98fd
SHA512 111f55563a4ff149e11ec6a9ffa9967b53402f197e774cc9c6565287754e00211888b634efa85910189ff1f63045ee97f68a4ab49a4ff1cfd8ec54895204f30a
SSDEEP 1536:cYCYPsBLPLsUQZpr04FSPr9vkcI+iNgxRMk2II/HOaveh68Ct5X+2M1SCumR3tQY:pA0cEqMIIGavfuFis
TLSH
T1E24409F7D6AC30FB175286DC6C4D72CF62AF8179DB4208DAF8688148C3C9E65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18813

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\doomed\18813
Size 244KB
SHA256 7b2b86e2da3e689af654524cc8cb2646cf3e2345267a93d6b152f0133e184bde
MD5 d434915b1faca08fddd1eb3d165b8c5d
SHA1 988116066160e42f2c25502d898dff65d3cd15f9
SHA512 eb43acb0bd4b4576e720861cd382ebf7d905a0bed29a892b7e6848596f83c6646d6514b952d0195d83fba59bc9eceee6c4844f4eedfef1a27ff1ed0a0516196a
SSDEEP 1536:+bYCYPsBLPLsUQZpr04FSPr9vkcI+iNgxRMk2II/HOavehV81t0SkM1SCumRYVVi:vA0cEqMIIGavzRX
TLSH
T1FD34F8F7D6AC30FB175286DC6C1D72CF72AF8175DB4208DAF8688148C3C9A651076B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03D74D5ED346B6A425AA45C38A54C3F6BCFF5085

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\03D74D5ED346B6A425AA45C38A54C3F6BCFF5085
Size 47KB
SHA256 aa523d0ba5cae975f30a9b816a5e2ab75028b2217a4e8f34cd709080bca47199
MD5 9dd0d4bdc71d623c272023240a30f5f0
SHA1 69e55d44a0f06077c724bd137cb847e62c238a99
SHA512 82ead0111c6269d843339d7e3407a174dfe7821579fa829bdf0928416d506f75292768b0e9b1506cce15ebe4a14d1793d420721cb9326946a62fefa6ae78cc9e
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3ugc0bu:eUEEoBVQDjeQaLnP2pfZTqgSEY1W2w2h
TLSH
T11923F1370C5A3B50C241F290D0DEB509BC83F613EFE2D9AC90787B8642093D59BA51EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 a09c37eb1db8f040d2eeeec29d9dae3fa2c8f73d6d07f12bab070bf8a4bf37ac
MD5 9603f3242e2c4d87b839c711582e39e2
SHA1 07a70a706fba862335329664b6b4d3efd9aaedd9
SHA512 a458c346f006abcc1e247980f744d51c1d24e6f64174940a6bb74ef2fe2c0202c60a48b5316fa7af371b20ce8905dc0d6c1f472b56212e03581b482b79142ed7
SSDEEP 384:HwCe7iO024YvDL84KKDL849B7SOEAd9KVRaAcP+AWRMAkZv+n:QqZYvDL8lKDL8CB7S/AmVAf+hRMBmn
TLSH
T17B728D3E9F013CAC1597C0E8C4B892DA8C18B7A7CFE6806D21683D0DC794A69B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E5D888F226F4D2E71720DF974971A8F11E74B203

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\E5D888F226F4D2E71720DF974971A8F11E74B203
Size 124KB
SHA256 49cb4f1684f4dec38853e7c167cd650c52de512b33765665b9ed9364c7604b7a
MD5 f171df99c8ccfef8627eef1b44cad144
SHA1 eda8b7c443c100fed3fb4ae27ec44f242c756d71
SHA512 9058d3ebaf6c098365d8f333c0803f6bd7a35acd444695db94e5f1bd0178596cdd17e1cbf92f111dd13cc412b85c04ff86677afd0b433898974d1dc6e35f17c2
SSDEEP 3072:f+40Oc3mSVzToPgSgNrAV7yF8ci12PCS4FY1jzpoWUd:W3nFTooSgVAVmF8qCSF1jk
TLSH
T1DFC3123F1F066C0489A122E37888EE85652D6789DF8D919F3E5553CBD1CC128AF9F3A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 12af54afca6fd10e0611a2397475075a7b8463e9c941be05705dd24feabb0744
MD5 9f4b40fb4ae8cd5aaa3c35ce2849050e
SHA1 3adb1625edef6b039956a7bb76b85ba89e6f38fc
SHA512 01804466be7dae67b2dad3790dfdff58e3fa8773f3fc93ae2835db64660ce9be2d3b809ffb26e6969d07e1e7d2924e5e243c4042dfa97c6bb80252002ddaa977
SSDEEP 1536:jTrliO8uJEDZRYQZ9vAqZ6EUbEDtkg0ijOLqaYVsYfjtMmDdekLWH46dLmwIAlgK:j3lgxZ9PUb+0ixsYfOa5kb+ZLt8L
TLSH
T198B3AFF6DFA1897D65FFD42D6A92883EFD262414B3A33009C9132714A2CAF787275748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 545KB
SHA256 973aea6dae31a3e88435bf192550693ea0e8b00852ce010f7a2db43c92bd43a0
MD5 f58d46b36af427c9bf985da6fc9d87d0
SHA1 9701205c11304441073aea7196b27897f62709c0
SHA512 df335f4f616a0f3b29bad489a47ad24489177e1f234a23e1ebf792daafe20f62ebdc9f3d913dc9410ff2b4a317b42d05c0d3524cbc75957a7d8efbc7acabe0de
SSDEEP 12288:d7w/J62N1bHTwgLYPEOPSs/bYVaW4neX2yHqN1X0oDUj2DjyrdEhlY:d7wp1QgLYPJPSs1jy2mq/0o+G2pEDY
TLSH
T11EC402F5F3A038E3A77E024B9D867FAE0A565522C74FE0CC447767C2499772AAFA5400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 cb4d0122d1f7df152d09300ed7598338e18ba21e74a1182de97e3f902dbfa4f5
MD5 a2dfeed791b2d91bd5e6a719d0e18bd5
SHA1 f9acf09359f1290d503b74abd40d4e503e4ec94f
SHA512 1da9d55950f68bc25664c671cfd4d18576beafcfc1ce24f69718346016c87fb8d02b419d508c98d05e75b5ad49df270e9fdef4a65dcac6e5ede43e202638bfa2
SSDEEP 192:FOv5zboBbHoyj4031d66Joz1zgCl6mc0dz:aboBbHoyjTd66Joz1zgC1jd
TLSH
T19DD100A4EA28863FC444427BCCB51B450F36395BDC4E3F1A35EC64492D5A29E368E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 57e1d0a94202119e16e186d9909dbb074e1890608fb7c50f8d36c784de4b5e71
MD5 58a8a89659da805000cdd7f624dad850
SHA1 2c6c4313c4ec34e9829ad140dcb1fe348d83f35a
SHA512 94bdf116a854eb2d6f246f020caac4ee5cbfb770c864feccfeed9d953308221c075422c51228e9553360bb83c6b0285dc273b2ebbbbcbbf897836ceb83e0e4d5
SSDEEP 192:DOv5zboVZHoyj4031d66Joz1zgCl6mc0dz:MboVZHoyjTd66Joz1zgC1jd
TLSH
T104D1F0A4EA28863FC404427BCDA51B440F36395BDC4E3F1A35EC64582D5B6DE368E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\datareporting\glean\events\events
Size 2KB
SHA256 6841001428dab03f133ec18fb732faeefa7d5244f872367c512f61c2b4756a90
MD5 65e5b3f340f40ce1e3f21bca47505c09
SHA1 e2b2030bfbc49941ccc88c2d32a30990d179295c
SHA512 4d0c5d3e37f2d265a2c00755a37bb8383262e5bdf86dbd3a054e4ec66977d7bce69134434c5d3a76c78f3a3ede8c7bed1bc86f96b9d7b2d36310066a2ca3a1b4
TLSH
T181418B8D78BA4C2A6ECBE38C69C4138947D98F5606821D530D52EE4DC8CBADE725B43C
MD5 SHA1 SHA512 TLSH

Submit Download

2edd972e-6b43-4bf3-b4e9-f29deefe8eb1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\datareporting\glean\pending_pings\2edd972e-6b43-4bf3-b4e9-f29deefe8eb1
Size 235B
SHA256 babed8513f33befa4ccb96a988ba2dcab18783bef27b16c90421295b6880c0b0
MD5 031b9c6db0f1b6cbd6607387f4ced248
SHA1 21681a5184ddce9dbf341fa01b10bc619405d38e
SHA512 19d141c7de94e8fff2b627ea32342fc96f5322c22af500497830eed6fde769089eccacb86cd27777ee336442caadd4d013683bd3551c734ddda3ca094523eb1c
TLSH
T194D0979028A8279C18080F03F4E02DC330884C33206168B0D67100B4C9B9DC48112867
MD5 SHA1 SHA512 TLSH

Submit Download

723f5c3f-35cd-46f5-910d-c47d55b5446f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\datareporting\glean\pending_pings\723f5c3f-35cd-46f5-910d-c47d55b5446f
Size 796B
SHA256 273487bc14bd016dbb3b226836f06c982f5741f0db78a8916ef2ce481b590398
MD5 c1b15c70d0214d28adfe82e71b65a1ff
SHA1 3b16af1de31af8708c21692561af94213aed435b
SHA512 70bbe665d4e099c5d2da92cc29a8e0037525a77b852de9ff033a0d09304f9b124758bf30d0ecbeac57312f6dc475031d5f1507a9fb3931bf25ac3e77b56355f4
TLSH
T16E01F6865674B9B38D79D247C9A037454FD4B423C4CA4C143DF495084EAB12F7315747
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\prefs-1.js
Size 6KB
SHA256 f38dca7a80ec2bc4842923a9cb890a5f4b6e88daee809c64e765c838dc771448
MD5 816411ad0077e45ed2fb0c65923ad951
SHA1 4e1336fc53d51ac0b5a3bce099e631273cc6810e
SHA512 2f2e00624745d34226e49f5b77892f1ef8ad911be10677e6374e391dc6b8a4cb4bc7624e3eb241bb2f2dfe58fca461a6c1c3c202a8f1e9e185a5f4e305275170
SSDEEP 96:xHBGEUEfgBqGqyf9Obzvz4zS4SHlxdv9j+znjHDOM0DBw8Hr8L4cncV1M:zGENRyf9tSHSDOMGBw8H1U
TLSH
T177E12D7891088F6F79B6366C6C644831AAB2013BBBBF6CD610B544C4055CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\prefs.js
Size 6KB
SHA256 178014cc65e15e4bb3b6ef9b3f1e8292e13f043caf4f8a82acc9a7cbe4f1ef46
MD5 9777b19dcad1c9f4f3047f01428c38b8
SHA1 8889a7143af7cd7111a09847d6a4518f3ad04bd8
SHA512 f779f89b57fc2c3301e4fa727f95452009666aab63ddd5550b9023dd0826c5b149f29714e20753b6280253d4cad999c9d80fbf0156e50cd0dea45361eff913fe
SSDEEP 96:xHBGEUEfgBqGqyfBzvz4zS4SHlxdv9j+znjHDOM0DBw8HVcncaM:zGENRyfCSHSDOMGBw8H3r
TLSH
T199D12D7891488F7F78B6376CAC644871AAB2013BBBBF6CD610B54484055CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\prefs.js
Size 1KB
SHA256 64f9b444a2a1e89c0a31a9d26d4737447d6c808915854f87acaa0566805572d2
MD5 49b84ee74a35294330a1f0e1403c069c
SHA1 fd9ddba2e911c4e6c2a7202f5852d065e39bd0d1
SHA512 3d4fab61ab757a9279b869df1c390e14f08da040b31d467c5e7e92ea61ec2b583eecd611b3d26add731eefaa2a2bc1dc02b61b11bb219d4165f8b8d1cb19ed76
TLSH
T1A031EF695A458F7FA5B5367CBC1549A1D6B30137BABFAC8224F840844418F3806F69DB
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\prefs.js
Size 6KB
SHA256 12cca154a386be40583c338a6dfe936cd6474f88b8c912ec93cda963532b90d1
MD5 3725aa40d3b9a8e76631ff63d3ed4daa
SHA1 59075fd755e56b879a2d327fec716e7c8e6a9264
SHA512 c097f1ea2a2507d8d683347642803272d610d59733f5effb7c7d21d94cf07971a407aa2880b8e4f696792109f6ea20a572d80803e66f2b13fabe1ea25d674f9c
SSDEEP 96:xHBGEUEfgBqGqyf91zvz4zS4SHlxdv9j+znjHDOM0DBw8HVcncaM:zGENRyf9+SHSDOMGBw8H3r
TLSH
T16FD11D7891488F7F78B6767CAC644871AAB2013BBBBF6CD610B54484055CF3841F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionCheckpoints.json.tmp
Size 288B
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61
TLSH
T10CD08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

previous.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\sessionstore-backups\previous.jsonlz4
Size 527B
SHA256 eec6d37df8a786db5276f202a44992e970524c3c25d55f217d1de39b24bff8fa
MD5 9e8dea92e37f7bef59e8d2d50cfaed27
SHA1 b20f8d078568d7698275571419dfb7d467dd9f02
SHA512 3c9e16da8dc3a948f251378bd66178cf5c8039b74697d4c9b232e0dbdce9590e882f0a58ae4c829e3e5f08415b7f525bfe6d8ef6bf3fcc2d22b89805c6073038
TLSH
T124F0C063181AD9E33D2FF44DC069FADAE66B32458DC624C1D594088916C5A03E64856D
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 48KB
SHA256 34263c67123d0fa04c7dd63f8540891925247cabd6cee9835c25eda1031abdf6
MD5 5672f52bd2824d9b2ba2b0c905533b10
SHA1 2c467197831aeed9a3e22a5e09db8a7e943980c6
SHA512 946399a63b90e34c32c15f02fcb730cf0298715214a5172c8c8e76b51526a359e1d7f9a618eb49800dfea06eac731493ca889390debaf95b47d367baedb9f6f3
SSDEEP 96:Oa16S6CKnqlizbxV+2xVeU7X2B0E6ZMNXCL23Cfi2f6E2A/2g42cRCH2ZC0H7mh9:Oa16S6CdFAW2yh44CfiaR/skL0H7
TLSH
T19123448D3A33AD50CB69F0B8639145AA584FB1DD0030278965D9DF8C842B1ABED1FBF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmx55oxn.default-release-1785464588276\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 376KB
SHA256 6b7f61a072c691618c05b9e24dd6d261bfba3b3624ec5dd2f4912af94084911e
MD5 7e904662948b36b667f3dbd0d5c05344
SHA1 14484dbf05b37eb1b0dfc94744d0391772689480
SHA512 0c065d0963ee66b232f22d7ca2667120d795b71f8dc835788f6e4854aa2d90a708e495b969f23524449db0f43d9d8323c9decd88af6b52f544a1d7387ec20ead
SSDEEP 6144:1aY3p6x38+eHPcHAb3y3Ab4Sq2tbmtPP1Ipvp6ua3q1:zyBq
TLSH
T14B84E9A53064C193C322D837DB4DB3B7243FE29894E7E78893701748396EA1FAAD9355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 16KB
SHA256 d8f62340abd72c959f227617db0b6432a061324fd658bfc57a1546dbab7284e7
MD5 d116fe642bb8c43be363ad9b1e36b7bf
SHA1 e6d549f88d6ea75f811ed89f3d17d0cbf5bfd67c
SHA512 8021666010cfb129ab603eeac5de70086190bca3b143074901449df4833db9ee505adfd06e4631a4d2ae3940c406828a0ee17a147dc77bfb29b18337de8b2707
SSDEEP 96:Hw0kvB5nDCI562i5LAzM/p8qyx2IDyuZbjy8tbn4:TCQN22+ZZnFt
TLSH
T1557280FB7BB27462F5628FB48098748CDC331329546C95A4C655C0E302C6E99917FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 16KB
SHA256 7e637ba5579a961aa792bd327bdc039127e890ecbb3d3f65980faf99360858e6
MD5 6de56a115909b0f2544ec54a3d825ab4
SHA1 420d2b93246c0e2c851d0010a1baaee6952cebc6
SHA512 b29c906795ff64fde93b9539596e4f1154acb406e8564cea11d33f057abb72463551ad98f1fe2a3f9114608a09a62f16f18e8bc7655d9eae7e5cbb13f7531d23
SSDEEP 96:Hw0kvB5nDCI562i5LAzM/p8jyx2HDLyuZHDTy8tHDl4c:TCQ822HvZZHXFtHZ
TLSH
T117723EFB3AB27462F5628FB4409C748CDC330329586C95E4D655D0E302C6E99A17FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 10KB
SHA256 8fc901727d29ae2771b0b4360d3d17ae5b1f04f95e2bc3316b264d4a7064f678
MD5 049017a18f9dc49aadd649d4f97696d5
SHA1 20d888d20cc72cb40cdcd937f7ba4667bd7d3079
SHA512 7574c8106f298bc963cbf612360d7f43a0466967fddeebeffdeae98f22836289b72f3b737a394d6e669e2a44a67e086bd522fb31dd771be4378efdced65e5214
SSDEEP 24:9RuhMZMB1f91VW9xZoO9BtoQ9VvWI9le75q9F55A5hz9BbP:gFLMYUUaBWCE1I56hh9P
TLSH
T1F62250F76B72A462F0A28FB4409D758CEC331325156C95A4C615D0E302D6E99913EBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\SiteSecurityServiceState.bin
Size 2KB
SHA256 2afec236a8693df669dbc07314e6627eac12f6facc23f27862ddaa11259cdb2c
MD5 6e2efddf99f0f924013416a72469c138
SHA1 070b7bce8535fbb697844cb9cd4a4d0eff4fff73
SHA512 e44c9f059cfdd5fd04705b64ff480c949a69fb19dc46e495f0e33f6f309af7f49e22e0c3af5be13d476fa317c3ac7662d9e92dedf6345b3c8384fa7eedbd8399
TLSH
T12351A47B6E87D062F0C1DA30B4EE84650C367357EA55E090ED5086E63194E7A25AE361
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\addonStartup.json.lz4
Size 4KB
SHA256 1259b69b7f1e1e8646747fe8819b84aef3be87181740bb901c9c3f2ec80d0f7a
MD5 cb3fc903c4a52425f365e817045f9589
SHA1 ac255edca472f3aa80a9271d4486be57aba4958a
SHA512 75ea1c0dc08c71b144bc7543a80e75f92de1f86fa54271742bb2d8c917bdfd6207f4557b828dae68f15be35ba13379f5feb978c07e57ef9b483a9b7ccbbf3f79
SSDEEP 96:NORQ4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NOl52xxhD8rGvm6ApwnHUuhN
TLSH
T1CCA17E6AD141EFA2FE32C04748D93FB2E595AB7410A9C4D0F16AB1290C24E735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 d4452d3376340e2843be9e7fae062e86f233206398ae09de2c979e87ef26b9fa
MD5 673bf0f1c7de4e831676691652b365ba
SHA1 4f99f1f5ba313b5c7dec97c2c48dd3ed5fc722c5
SHA512 ffe8b6e630e07709b0e9723d52c94488f3fa5c8b28b120875c081c8c484deb70d0e159e954664caae3751a9d380496e44f86c465bdc56d5bed2a5a8b8fa4d32b
SSDEEP 12:DBl/VnC8/ykS2lcBDMGEJKM+vcBDMvYkMBAlkDTAuK:DLVC8akrEDE+vED8YfAl4w
TLSH
T11EA368AF2F752A82ED8920F6D3809AFEEAAEC32DC72BA693065440B79D4106459115B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cert9.db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cert9.db
Size 224KB
SHA256 8ed0c2c978ec2385c951f81ba9d388c1860dcf9592f9e69b27ca89eed8423da7
MD5 bcf6f8bec562a52a6d523b75f122ef01
SHA1 e0874a9e882bc95d32b15f43c1a3324772082c5a
SHA512 3ebb8421bd81ab5549411c8c7778faacce14e0df58316e63b04dc4e998cf4e7bcf189f5e761087b57a2046c199e1ea1266610ccf151432e5d0a5051744d8cc42
SSDEEP 192:zOFva0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23vgCHaRPNnKoP70n+:K1zkVmvQhyn+Zoz67kcPVPQ+
TLSH
T18D242FC2F820745ADF8A6D31B662DCF33D7227410385A422CE28993F1D64A1F67A68DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\content-prefs.sqlite
Size 256KB
SHA256 cb094929393d9779bbb5cb44da04caf0b304b67509dc99e4f9b99b77539e19d2
MD5 be3c562ea7e8d1c8e68c790481914f4c
SHA1 dd66dd963beafa2bd4f9a4aa2acf615d95b35a61
SHA512 ddcd4ac6df0a5307fecba86a8ea44c74836c6425608ecfb4dbeed7b847a639c59f9ef326afb1bf0d98619368f0e2f7c88938c4eb175979090aebd3af556a748d
SSDEEP 24:DLSKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D2Wwae+QtMImelekKDa5
TLSH
T1644426174A917408C0B014B1D4636F22AF3D405B8933E7B23ABC183A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookies.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cookies.sqlite
Size 512KB
SHA256 b9712fe45b7bc35094a0c7d8cae3229499607d627df688cbd7a76807e5027f6b
MD5 a9442a1874791a03a4a7d482c0ae9cbe
SHA1 83ba51b134539467d2ed2febe2fdbcb6d974aae8
SHA512 c6324a923ebffbec4b0be948575f7594ed33dd41fe8646f4e2b4ab49d37bac3309d269b9d4cbfe4a56f2a34331291c928b2a057c015323a90d47efe8af6ec0dc
SSDEEP 24:DQnS232mNVpP965RayKN0MG/lRn4tn2GJ0huX/14Gu3H6oEFGoPeNJSMtXIpu9wD:DQnS6rh9WTEUGiuvu3HSGayJSVU9r
TLSH
T1C7B47093BE341286EC8684B3EC10160C4D3C6A18858BDA8A7824B4732CC1E438A319F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.bin
Size 81KB
SHA256 7b4837d40128e40b19b824de02f785b93a78dfc356e9155924450e83410ed22e
MD5 a9a938ff41c6f99e166897158052fffd
SHA1 8b933f83855f08f0d69c9ef62da7b0efaa31ebc0
SHA512 d7cf1caca2febbfa92edd25bd10ec4b8117abd685befdafd5a89d5bd3a2ac214fc4a93aafecda5d8cccb9906e5615d7d6c37d6ddbaf52f61159b4216c16f3215
SSDEEP 768:iPORA9/bOgh5i/tQbBEHHjK1GPuGcmhugiKkKw3W8boYCIbvbybjbobibMyaW5JW:YdbOgh5i/tHHjK1GBiKkfQ5JchxB5
TLSH
T1F183E080EB1A403FEC1485FFB4955B2C2735F4614A599B4B3AAC04751DCB3BF2D0EA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 87136e55f2841ce17cc2ecca8903a766463a6be40c0a7f29800cdafb45944934
MD5 82e39552f6fbad2c3cf2225cb9674ad7
SHA1 ff96253793d012b82d279da2b94843142609975f
SHA512 4949dd2a1e3dfc3ddad12e8a9e3c8b6003099c050237746ef1f189af85a078dd4e32fe0d723c6ccdbc1f5dcdcf60599387928a7e670f8dd68398a32a99b775db
SSDEEP 768:z/qcvcHQGcmhucoRjBJfFAbrbEbVbNEP/:GcvchoPa
TLSH
T1F2D2F244EB5E953FD41812BBDDA50B002F79B88A981D2F973A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 9f05367f1535cbc928d09a041f117d4bab0371dde340c6a36f665aa413587891
MD5 b3337e00f7d5700fa19a761e3f48dbc4
SHA1 85039dcdf3dc0c39b3fd78a6ccb598d91e775668
SHA512 0bcbb2cdcbbc1b251ba88d8b63ddab555c2803cd54844bdb48bf02d5e82d13e33502908f5c8987fe7138084163ffe5910b22b65efcb39a39270c7917097ecb54
SSDEEP 768:7PG/qcvcHQGcmhucoRjBJfFAbrbEbVbN:pcvchoP
TLSH
T139D2F244EB5E953FD41812BBDDA50B002F79B88A981D2F973A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 89140d052df5d6015252e00926e442aac190be54fcf20746b608f0dcfcdb665f
MD5 9905eb8f6db838aee6c8f5643ad3cbf6
SHA1 b456669dd0d032185d1647e6c4ad152421ff9b79
SHA512 ef9b2c70a487ad4d4460572d2c7b6a1e0f7867da4b6b98a127e7bc9bcb71519e642f3daa3d79b014578793e4762a7e92b2bf98d90843f4d54d4d71fc8c0a601d
SSDEEP 768:ccvcHQGcmhucoRjBJfFAbrbEbVbN5PORw:ccvchoPV
TLSH
T1B3D20244EB5E953FD41812BBDDA50B002F79B88A980D2F973A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 6bce2747700ac7f27fb8def77ec99106fafe246ed2243be360fe2552e6d814c2
MD5 0fdfceb845de7855196eef0161fb2b69
SHA1 247616964de5939583e652de1fb5390fae3238d3
SHA512 3fcbfc85b107a51452142e2451a81b036a785780f86735852cc1e6dccfc7dbbc1570304f1485e01185d63d0ecfcf3af60453a0cf025623020d4ab420b42aaf0a
SSDEEP 768:7PJpqcvcHQGcmhucoRjBJfFAbrbEbVbN:qcvchoP
TLSH
T1F2D20244EB5E953FD41812BBDDA50B002F79B88A980D2F973A5C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\events
Size 6KB
SHA256 096e89b83ca27802ad1f8d121f5818be3dfb3104e6cda9429866a090ba58a604
MD5 e7f2ac28fc7d8171fe0a836dd7fdd331
SHA1 fc58a4702d26126698289f1372fbc75a2c7fa8aa
SHA512 eca5bff48e01bd974ba4b9435b3bdb3e50807de9b317553eb20e962d4f5794db0fca92076d9bb9f6bbd6ac935206a037f2d8d7d4954f4031728954f903643ea1
SSDEEP 96:Ye40/xYP6ZnTX48edFJdzI2OH6yAJQcnMWsxl3:Yf0RRYFn546yUbMWsxl3
TLSH
T1EBD1105C75B90CBF2ED7D39CB881028D4BDD4B0384C71D534CABEE49CD96A9A321E469
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ca7756d70b80d849a53c41c38bbf2c31ab76672d174dac6698f1f961175a52b4
MD5 e0cc1c1eccb54de845498c020df2cd08
SHA1 d2e420a270f0179c5860926e75b2632694a4ed3b
SHA512 e0d6a89f3363429eef6879b1fe0bf8ec05195aad87eb6fd0b70e2442be903334c38213980e8e039a378dc52b56af922de8dc780e49fcd4c2b5e8f580ab780ff5
TLSH
T161214C9D39BA5D2AAEC7E39C7881128E57514E0708871D530D62EFCDCE82ED9326A43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\events
Size 5KB
SHA256 93b404fa6cbcaa3e9e8d946e521777a05b5b13c2cbddf4390f3a3f333102c636
MD5 5cdcde8fa5bc0afad3b78777fe56c795
SHA1 dee10e5716dd76521d1627f7b5eb0caf6d454f8d
SHA512 00c3080d0733533c3bb24fa47d79cecd58005744069dce7bed67a26497d291916ac5d87361f4a2c0b224072caf39658f58e3bbb4324a7e61df2e277dd1425d88
SSDEEP 48:YE+7eMbYAsb+ZOcazA6kmYJi/oyZfiUZfdXDWIBVTX4J6vhLkRd5M2+tidomU8IC:Ye40/xYP6ZnTX48edFJdzI2OH6yAJh
TLSH
T114B12F6C75A90C7F2EDBD39CB881028D8B9C4B0394C719534CEBEE4DCD96E99321E468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pageload

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\pageload
Size 326B
SHA256 3f47df605c3b79f298a9cf2882a224f633726fec79c6a641ca95c741f6a157eb
MD5 bed7578d3ca4d5c90e8bb124866dead4
SHA1 0c06863e729fe1177947c9aeababb199fcba23fb
SHA512 047a03ae8043444290528ff1b2c8d833adca1809749b1c49879e60844d2d9d61585d28a7b93f3e56632b9214c72f1598d48c93ec79a0b6ccfda48b78e447959f
TLSH
T156E07D2D5905CC6C97FA203C3285C7FF6F48524711C2AB9375B09E2CC5C42051007357
MD5 SHA1 SHA512 TLSH

Submit Download

21d8d354-dd38-4bd0-a091-a8467a009e43

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\21d8d354-dd38-4bd0-a091-a8467a009e43
Size 871B
SHA256 4d4d2b72246a4740c570141c764ed73528286608037a4999325b17b24dc96445
MD5 fccb43da1adffe5cbdc52cb9d9d51cb6
SHA1 b88897933e34f1e01cc1bd0e0fb012b05f8a557e
SHA512 e51dd863dd53f0e0dc730387b5bc79f0786fcc998c6420f1d66e8d24bcd6acf35ba711fcb7dc5e83af6283f9189abdaf4054775556514f1013e7336477919bd6
TLSH
T11D1123918774B7B2CD68928BCA5437028FE4752384CA58083DA45E140DBE62FA37A34B
MD5 SHA1 SHA512 TLSH

Submit Download

60e17c80-4581-4625-9268-ad0f6b9cd3dc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\60e17c80-4581-4625-9268-ad0f6b9cd3dc
Size 235B
SHA256 ed0c8e50e9bd46149201fe94da5d26efa4aceff261f6af3bc394e7bd3280702d
MD5 6a26a89b3fcd11e85745525a6568fb47
SHA1 f14f5885fe67a42148bf0ac87a62c3009620adf5
SHA512 63bfd1c2b3b6f4e08c560094336635706c8f14958b89faa69950be08d762199c296f17e2f4d6e4b2878fc3ec45f6e87e07673060dad8b3f036d1b561671cd6c6
TLSH
T1BBD0A7823498776D8D284F06F0A27DC671558C372478AC50A9A245789ABDECD5351927
MD5 SHA1 SHA512 TLSH

Submit Download

96bfc9af-dad6-4bf9-b96a-3cf245558c7c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\96bfc9af-dad6-4bf9-b96a-3cf245558c7c
Size 2KB
SHA256 4794f48cfc8f11f790d11446c888383803111fce81c11fe783252574b84f132f
MD5 1f6e8125885299e7c7322d4e40e37153
SHA1 dd95985735ecd720d51343d318fc184219855b15
SHA512 346b1ea4165b05360c4e326b304ab880549601243cbe8068092e1b558368eb088b36ce1eee09c89bc3725d855bd0ee642897c421e1958f967ee15a11cf85503d
TLSH
T1DA41335836B84D769DEAF15DD441238F47A08A1300C21C876D61CE8CCEAAA9D337E53F
MD5 SHA1 SHA512 TLSH

Submit Download

c219b23a-3f4c-46ad-a774-214b8e7d8f26

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\c219b23a-3f4c-46ad-a774-214b8e7d8f26
Size 13KB
SHA256 a75924a0fcfdefe9c63a84ed657f1f034d7c6d29e889ea520f8f865ce656d1ef
MD5 1f7450d4c3677791c6b3de7a0ec52d3d
SHA1 06b0a51d00ad2d7c34edf729425283b02d823899
SHA512 d629dcf65bf50685e76d79e1b49b572f4c5cdb2c0293b8f4177fdcf0e33f2b177cf9eea210f63ac398fc6d9278f6986dac6c9a3d55ebe6325a55a1d618ca125a
SSDEEP 96:tONvHtNHUBcTaYuMaMBc8/79zEhat9hG/GIHHUyLo/xk6paj4wAyoEqZZuwkOzYV:MvZDT8leVSlfnNMtQKcq+
TLSH
T17052BCFDCE1200473E65E52EF2A5EDAF2057293249CC879D6BFC483A26D69BB1427314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e744d9ef-a002-437b-a502-29f730075d6e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\e744d9ef-a002-437b-a502-29f730075d6e
Size 235B
SHA256 23a5adf5888f72bd884c562742c757f3c6d6426502d7903c20bd1eaba9b013de
MD5 3d709cba06a84a9d11e0944e7a7d0057
SHA1 719f37a3455f303868159187e9c98c2ecc939019
SHA512 f5e043776463ed7435d112e3b21cc8782a69a784083529efb96d8dfa1817135ab24d7420672c4dc4e97dc0cb6f9044d9e0b93cd9951213e22ed26b502239bc67
TLSH
T127D097C01C9867DC0D141F07B4A0ADCAB0484C3724B26810CA908038D9F8DC942A281A
MD5 SHA1 SHA512 TLSH

Submit Download

e7b99919-beb2-42a0-8dba-b3335f0e17df

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\e7b99919-beb2-42a0-8dba-b3335f0e17df
Size 886B
SHA256 c65e255616ad69162a6bc810b3058d6b71099ddf9054adf85a8af3cf92f90c67
MD5 6d6bc10fce1487d7700302849c619b48
SHA1 7c0d1841e99aa99e0c549c1a56f6b55008e9bfa5
SHA512 bde414a713c0bf8a2abd02daae4cc035be4d6c85521ad47b691044f04a8ac4bbadf63d96a1c55791a3882951f0893f17bb770d933de77642a844fa42a98ed9c8
TLSH
T13111044186B4BA72CE649187D99437478FD0742394D65C087D904E180EBF61E636670B
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\extensions.json
Size 16KB
SHA256 ed3a0f53c5e8eb0979b5d18d9b1c3870fdb7125ffca2c643d5c60bf26fa877e6
MD5 5679173d482981cf26b74765cd565d75
SHA1 9b4616ffbba136971fbd548e5878f014bff33364
SHA512 2ce0a385b3f4aca94e8d2a65aefc39588113d716e0bd5599689907ffba57fd4c2d94a0d58eb4cfd2a599f67498a9b04cf2f227400e86a69c425bbacd4144a51b
SSDEEP 384:zkI4vW9UmldvHM8dhWa94zjD96oqL4HML4P2L4HuL4HGL4HLeZ4hE:QI4ARfVXn4J6D4m4U404M4rK4O
TLSH
T1E372511545048EB8294FA78AAA36BE01C37D533B60845C78F4DD8FC842FB5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicons.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\favicons.sqlite
Size 5.0MB
SHA256 0e45fe11ba068588f64a24597ddc301958b724b4d0d4ab85df6e8aaea29470ad
MD5 f20985de9a6db0fdc4e052388e0a059f
SHA1 979f92d94735926fdded9dec407b713f3a887d5a
SHA512 9d033fd31621a837ac6b11a2c34d177c33469dd24968225ef8e10cfb1e278d55436196ee772cebfe63538ca1399fcc4e7f6ca43691f38ae8f847cbbb25739760
SSDEEP 192:6H3/soj2QEfTMzdLI+04FTUZEfTMzdLI+04FTUE:6MLu2+PFTUeLu2+PFTUE
TLSH
T171366BB29B14506FDB094473FC17A624BD2F63598FE38A0736D9A5B4C8B5061EE070ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

formhistory.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\formhistory.sqlite
Size 256KB
SHA256 cf6d290270440b3c68a166096e0e2e6c78ead57e76c91d4b3a003dc28c72e40b
MD5 e8ea300ac584c55644c584e31be80552
SHA1 4f61ce7e9403826b731bd11399ae8308a058339f
SHA512 6b56f0099d7c9ae39473e3ee45522c9a87add3ad9da7f6d67e8f26c3786db65e0c235ba88b8f85f401ba58c4af71cb5de750e072cd0565bccdbe7fd87f6787e1
SSDEEP 24:DLN8VxExBWrkier5NzW6LlmProNpNmVIpPuVM7rBmxF/EzgWQbqMYNx:DR8HMArt0pmcNptpGVM7rBw/vrbvQx
TLSH
T12844070F56242832D9D78AB7FDD22E534AAD004AC6676B953DFC101D4FB190ACF5CEA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

permissions.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\permissions.sqlite
Size 96KB
SHA256 2bad62dc4bd450fb4765a5e632c4f8bc3c9b85529e01aca99f1b24937e1c2c97
MD5 0b5fc0dca2325b735d8c5356b1268d8d
SHA1 2cf460571c2eb9585e94d6f8ba612710f4d0c3dd
SHA512 b2b47230019556f52468de09e79cd267af6b931f3fa63d756d0448a9f028b2e482ad5a999a7e5e0c7f70939d92d57d72757099d40b7b9b5e8fb8cf6759000a45
SSDEEP 12:DBl/6PRbWla0mwPxRymgObsCVR45wcYR4fmnsCVR4PleaZW6lvlt:DL6PRb5sh7Owd4+or
TLSH
T1CFA399972C7869E2D98099373E8225C8643E09194C6FFAC50E86403B4D03AD6EE05EFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\places.sqlite
Size 5.0MB
SHA256 5250f616a06381716e4b88ea1c81b96175dcdfa027de9e0e63c0d769857ce147
MD5 db276095286f4296e8525168181a4d5a
SHA1 ba579d9e77a97b9cd16abeb723359b86e203eed6
SHA512 91e8442bc63e4252e74aafe427b7e7f08909b513473208f70c8fe0d3ba89ef902e34165f7ecba963bc06506d88af49074adcd1f9ef775f18fd003046cabeb6f5
SSDEEP 192:M8rJQaXoMXp0VW9FxWOFcNlTbu/TUT9PJ+f5c4m:M8r54w0VW3xWOFcDz+y
TLSH
T14136200F7A216151C4DA9132ADE36F19183FB1169A3376923EA425AD4DD0B23B91CCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs-1.js
Size 7KB
SHA256 f0a89a6b6a00121c6e44bc5c1418d2703fd8babde7d1119c63040a88196f450d
MD5 83e8df6322db6f36c19c17465c996948
SHA1 fb3e6ecccba3682a79f788a211dc9c9695f1faa0
SHA512 f062038879b8d2de3c1a94837cd1a04cecb1d8ac9e93412ff1760db27868c2e62a0ea0b1649bcb09b9b1bcee3b0ec3c70881416f02149e41f9573bdb96f28f3b
SSDEEP 96:xHLkUTUiqGq2fkBMNbzSjuSSlNdv9jWn+H/vukBw88P8L4cn+r5GS:KVR2fkBM+uSSNnukBw88n
TLSH
T173E11078A5089F7F74B676ACAC6888315AB2013B7BBF68D750B548C4014CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs-1.js
Size 8KB
SHA256 762fdd2b0804a623d357a1aeb10c85b5d93c0284813366890fcab3b12a17b6e0
MD5 62689a5a401eb398af884559949543c1
SHA1 6bab3ccea38fdc89862c5109764f0af2d05aabde
SHA512 8c81c601a1e80261e04b89302eb79109c8b39727145bab3499b9e80ce30bd024f38e7297a9ac836b1d029adb0dae72ca2be3e02573d9824a619bda5479008ab7
SSDEEP 96:xHLkdTUiqGq2fmBMNbzSjuSSlNdv9jWn+WRJNbvumBw88c4Gk8L4cn+r5GS:KAR2fmBM+uSSMRrumBw88cy
TLSH
T14502FE7C6104CF7F79B676ACAC6449315962023BB7BF68D710B98885014CF3445FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 6KB
SHA256 2d19521542ac444fcd2fc6b90772c3fcf6cfc6c861f4e8267be51c7aa1d07dd2
MD5 d24805965f22ff46dd5a6022e4a32198
SHA1 99742b4a66611cec369ef9aa4bd80f937d8632ec
SHA512 c06a33d45294663795a7fa7a32be6b0cc594b1753e65fbb091c46b4c1d181d830b3f726c87693de37fb42cae14fb17ed3490e4bd0c685fb29b6d096338bb3d10
SSDEEP 96:xHLkUTUiqGq2fkBM1zSjuSSlNdv9jWn+H/vukBw88P8L4cn+rM:KVR2fkBMiuSSNnukBw88A
TLSH
T166E12F7895089F7F74B6776CAC6888315AB2013BB7BF68D750B64884050CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 6KB
SHA256 dc0dc0a1baa11468040e0201bf4077f426a212b24168f9be88e9b798367878a0
MD5 a5f84365454f2ae56ffd0378b7abe44f
SHA1 83d5d81796c4d01223e920818528d72793abd2bc
SHA512 7f3f33b550d578fdb8e4ec537f403dba8b581c9b2d57f6d6ac2a61051499886369e4851e9300d52cbbdbc568d022158de2721a8b93a5ed436aeaece47bc4843c
SSDEEP 96:xHLkUTUiqGq2fkIj1zSAVSSlNdv9j/zn+H/vukBw88P8L4cn+rM:KVR2fkIjNVSS4nukBw88A
TLSH
T15AE1107895088F7F74B677ACAC6488316AB2013B77BF68D750B64885050CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 12KB
SHA256 449ab35073a7c7ff32eef4ce576ef88079db7091d23093dd314c571e4e92eaf7
MD5 69b179aa79ae26428d93213d0239467e
SHA1 66d657a7ca30a172f5ddf3468e2ca5b5193e8477
SHA512 e1d75f28713993a465c6555228d6da4fb3bf771e4b66307dc35cfbb186ac00825ceb5f0b1c38c82af961c5924da5b1b938aa72ca308860fd374d66711dc68191
SSDEEP 96:xHLkdTUiqGq2fmBMEbzSjuSSlNdv9jWn+pwoDRJNbvuq/S2OBw8OcEO6IzGHr2l5:KAR2fmBMPuSSnLRrup2OBw8OcEAzGHrI
TLSH
T1C342CC7C60408F3F35B6327DAC6559605961023BB7BFBCE302F98492044DFA451E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 6KB
SHA256 88836a93b6f8ff5186ba910a24fe4e0aa98b5c46a4d17bf732696f0d769393c2
MD5 1ebfbe2ea5531aa71df42ee16c4412c3
SHA1 7e05e487ea45b72cb39167495b3b079e156d327f
SHA512 f22785578c7b68ea958e6d339201da884ef84f499f4d4c5469c364881776eb721669f6a21318613161c7ba536d43475f9c91ef5e7ec5518868f71ca964bb8837
SSDEEP 96:xHLkUTUiqGq2fkBMkzSjuSSlNdv9jWn+H/vukBw88P8L4cn+r5GS:KVR2fkBMxuSSNnukBw88n
TLSH
T187E1107895089F6F74B677ACAC6888315AB2013B77BF68D750B548C4010CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\protections.sqlite
Size 64KB
SHA256 17ede89dbe62fe12796fe6eb7cb3e371dd058299c4dbc3c103210439259398a9
MD5 46af60692fb8e773e3d4b5d45ecfd6fb
SHA1 e87e10ade210f83e774d5d43e0058c3bdb63df93
SHA512 bb75958af15094d8bcef255bbebfa3e6cce6ec06f7b4b04662cee5d3efb6b548a8f9662a9bbc11e84c2fcb116c30f380e6b060e935360d481cd119ba74c464dc
SSDEEP 3:lSGBl/l/zl9l/AltllPltlzgRollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wg8:ltBl/lqN1MR4BEJYqWvLue3FMOrMZ0l
TLSH
T15453225E03383021C089137227C323922F3CD2BA93232E832A100C358C0A022B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionCheckpoints.json
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionstore-backups\recovery.baklz4
Size 2KB
SHA256 76b3f535825ce7a1b5832cc24c8c89c6bfb33eef9f74bff3e2cef93c23cbee5a
MD5 fcf7d1ceac00e37327833e6d2bc8c088
SHA1 72d87545d7ac0f109b7a3cd60838d8a9c059608b
SHA512 f0ab10ab26532b8af167d63189b6367a99b8b391781b510fed56e31fe591c6b9d3b0c76609605e4862c091814209730ecd021b4e39b6d7dc529f9604941d0b36
TLSH
T19D515AEA1C1A7CBB3524C550AC9B0FE0CA92346119B691ADE8B8D52309DC30A98D4B9F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 97f85b585bbe079b66adf6d51efe778f14ed66b02aa5e5c90b9e6f815e543a05
MD5 968469a143663b12bffc3b6996d2223c
SHA1 549de5013fda8ae7f17b9772516f25b6169f8fe2
SHA512 3f3c414326ca3eaaa7a4220e5d600c94ed9f969fbe85897302fb846fd7a6ffafcf38fafef4b3c32c0a119a5064f13fe1ffde2491736dfa57c89c7b88dd8a678d
SSDEEP 96:421Ifdujg9Ub1uT7Cd01VrqM4EcZZi6rLKJy8H0Q:4Qk9Su3i0v/4o
TLSH
T170917DE75C2AACE72971C9448CDF0FA181E2105095F8022ABA5D6E330398B0EA5246DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionstore.jsonlz4
Size 3KB
SHA256 39e07150e8bb8fe10fa91d65b2fc0a992ec83d30012df0b2c54f1b2fa9d3757e
MD5 d3df78050724ae84d3464e0d894eea43
SHA1 b16ae55be96cf16d37a1ab9103cc74bb52fe3f79
SHA512 397eed7baa28516e514f996ffba2027d072f26c32b3bec2582ca95b89fb50ae7f4a095b230308626d261767e667df286ea9d1bd88f2aeee115457d4b19d35467
TLSH
T147615AC3F569DC872FA6DB488CDD2EE9D6E120548EF4009C755C0D1202E8F0A6A2C2D5
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\settings\data.safe.bin
Size 152B
SHA256 9e9236f6bc6f93134394570cc11d083c0a3b23a54507b07cecd19e9622aa4ae5
MD5 9b6b3a04cd4878f9985a243c6489bcd5
SHA1 aa03a03e097574152fcd24b1b54de612f5a1877d
SHA512 baeb9952c871c8b09bd4e3da62ad55ee45529b8708b4b51dbd7038f4ffce22b37189d35da6eb0e282075d96e0396e8e08350328129dd29ab8778e1d7a23912d8
TLSH
T1FDC0228A08020082F8AAB8B8080033200B80C0088A30AAE200CCCA2CCE20882B2EE02A
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage.sqlite
Size 4KB
SHA256 a93ba9099560cd0cc12237cf328791af95e245d56b9ac71c5e753512da13665b
MD5 0dda860fb768c1e690e83d1f80ab78c7
SHA1 bb8b61060583a1b03792dd6458dc5ad7b91b35ac
SHA512 096cc5bc32c8fe8df79d281d10067114ae814d1c7cbdd0ac93bac0ea6fec2b7b3286a7f350098bd85b8c42f397577e13ac71f78399cc1fcad11051ec4abd0d2c
TLSH
T14A819B8F1F247500C0B193B1E1E00EA29D7F211E4B5B85C73EA011FACAE3592AA164FD
MD5 SHA1 SHA512 TLSH

Submit Download

.metadata-v2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\default\https+++www.google.com\.metadata-v2
Size 52B
SHA256 0795713564436e419931bee3a5385183d0d979b26ea17f49710895d0c21273ef
MD5 bcd06f8e40350ff06fd78fab292cd208
SHA1 aab22f9376d0bfc48585a1566eaab9c652650486
SHA512 c38fd9147c57f34643fa217bff833c28eadcfd6be78927a2a495f3f1f0cb1e59f975ff010c2f71ffb5b34e3d2bdeaab65eadd5c7345a78e25ce5dd261ae3d86f
MD5 SHA1 SHA512

Submit Download

data.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\default\https+++www.google.com\ls\data.sqlite
Size 6KB
SHA256 387bdec331113ffc37bf930fb5bf6e303ce40a9e241dd01b3039d1535bd246a3
MD5 0eaf81c2d4fc9ff577ffa1c4ba98beee
SHA1 ec47e1ffc28a7351916a05ad5448b3798b574d29
SHA512 ec119d947c53eeef006e7b6bef710f3cd657626f110032deb4fba5a9a9f86a7a0d767149fb46a936fd1c9795afa1167e1f027f74d3bd4b9266c8acf3d5b3ff3c
SSDEEP 48:qtiEjEVdyaLZ4WMfV7SFU8J/8jQ0GUL/F+VN9:qKgt7mU8J/8jQ6L9+VN9
TLSH
T1F6C1D9AD278C6102C1656CB29973A332BE3CB43E833A57814C6029F3E4B20A77629155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

usage

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\default\https+++www.google.com\ls\usage
Size 12B
SHA256 980658eb7a95b084f338ef0249165bba0ec717d9a61bf41adedd8f5c0a82a242
MD5 2a5b75c6b8d9f58626c2d6bb6d0ab67f
SHA1 4414a3ceaeebfc327531d628b4c1eb784776e680
SHA512 07824d90bf9384ce7560d4b1801549e94394a11fe352e8423af82486526b235428bbaa7bfbebebaa8efe92e25b306f3012dc83ef7cb0e3a385dfa4d1b66173ed
MD5 SHA1 SHA512

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 b789310b7408922672592adef5f51deba7bcc79c85e7ee42a02d728048c42246
MD5 5096f9c4ffa57a69b65f65b75eb358b2
SHA1 6bab7ed185a99ec550389a2cf8082b79bd9e8900
SHA512 622f7ba0ccc2bb08c36ec7c77252dfdba5993fdf4cd9188cba98d92d3f73c25a3f42b04bc22649a4d435ec14f9d55afbb6a426dd8dfcb452c0d6b80da128c6c1
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBQ:Oa16S6CKnqlizbxV+2xVeU7X2B0mKQ
TLSH
T13C238F8E3F07F511C53AF0B178A08D51BC5E321D07222AD669D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.4MB
SHA256 d468093cff162c0ade8b03bc511fed89928d3fb7b94bd2c4f1aa3eed862f48f3
MD5 56b7cf8dad1d8106b518f6bd78ff4837
SHA1 f046e7185a977338f4f5b0c6e4c0c8adeb1728b6
SHA512 d8ad231fa33e6638eb15c8183c85dfd7a787e50161b1ed199ca68dcc9ac392511eda4ed9473b56d69431714e95ca766bec571d742b42233d0e8f92a38bd67f47
SSDEEP 49152:yL9LysaeUT6QC5zYYC1vJ5wbxAZ0HeUJDf/vfpHFb1ONEg5zaDf6VAGQgFWnZm5w:AFDiAGQgFWnZMXbe
TLSH
T157665BE420E29252F38140B3719953EB11EFC01C6077CE445B9896FAA5B8CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.1MB
SHA256 8976f239f550e80024fa72b48ed67ec392377b6a2279d4448a5f67d658ae4c75
MD5 3b0c5d1643f457d2b1dc69e743fd8341
SHA1 d802e8d1bf724498e40269543d1f8a1374ac94a6
SHA512 4786f31cc4740a84b2babc6cf7e5c3c38f65c36e14baae82b021085caaf69746ded527aae0bb300ddbe314553baa00845a1394fc8095e4e779330713f6c42dc0
SSDEEP 49152:EDmgBuOjA5lUT2loNcNeaKvgmRBbFOYTg/:8mYuO856T2KOeaKvgmc/
TLSH
T1291639F824D1A257F3818037668563EF21AFD00C6467DD484BE966F990B8CDF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 a946ffe973023a3735a1618f3736e8c622766afdc3577304bcffe7c15f0cbb5c
MD5 fc0aebbb8994d9634c658ae4d6fc2816
SHA1 98f479ffd17520b9f253055861f876653471ad6f
SHA512 99b1203f9dd4bd3c7b5973855456dbd123140a00eb6b0d7ec153e956b84ae695b81ae60b3fc87ffade0b3c8362baa7e740092c03eb74c6112ed19b8870b758f8
SSDEEP 49152:cYhg6u8z5lUk2i5M9hBGDpxqGAYQ9DLs:Phzu8z56k2pHL
TLSH
T1F8263AE820D1A257F3814073A64553EB21FFD00C5037DE484BE956E9A4B8CEF9E16B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\targeting.snapshot.json
Size 3KB
SHA256 1bb461c739567fba47c7f9e58fc98b6e1f8be768b1d74037e35eb60fb2b4bfe5
MD5 f6bbfacd599559e483bb6227d71305a2
SHA1 8e5244173618500fbbe9e61f7125a85d32eef34a
SHA512 55092ff9135a1b8bd44f2c7de59dd1d515eb3aa554bdf3ba8b0f6071d118c52de57effbe98cc3752113048bdd71056e85727da50d930ab8f5e4f506095d79b02
TLSH
T15B71600C961CA4BEA66BC3C0D6847F978BBD053370406458DAFE460C85FB5FB162621B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\xulstore.json
Size 91B
SHA256 721d92716545995aac5aece2d2e4e842eb90fec4a8312f8520a63d6e0529b74f
MD5 aad7d2b56d51c15c3bf52433648e9a49
SHA1 c781a34d94d5e3b41a5e66c9f90969df065c85ee
SHA512 7a6f73c92d798a7d36c5d23e570cf46c0f0858b576802cd34c26016531d4918e96e526431a1387e02e8657e9685c85ea2072785c525ac62eb2e2fb3e4b0e326a
TLSH
T1F9B012B4001FF4483F288D8A028733D03420011040C071A774571464518130BCD0C30A
MD5 SHA1 SHA512 TLSH

Submit Download