0a855fd4e5384d132e32d9996ff83316ff0cf5f7e995e032120aaefad421c185

user interaction
yes
max time kernel
899s
max time network
899s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 02:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ink!sans Fight - v0.39.exe
Size 4.9MB
Sample260802-c9fx8acb53
SHA256 0a855fd4e5384d132e32d9996ff83316ff0cf5f7e995e032120aaefad421c185
MD5 9d620dd27a586fa0f8bd60a5d618d6ff
SHA1 ae20692c5234e5a09d8cbd0e513397f1c94a588b
SHA512 ac27b6660981a1663b6265faa70a53588f45ec75fc5d9cbf9aff414c1d58d7682df25f2c8c297bf83c59df0782f6bf29075c074eabc793d6fea3e589f0e67a20
SSDEEP 98304:PiQuE42N00DQDHO/sc5yor5Cvpau8tYVKAfz61ca9BsC9nAMS8QVjS:PRus00DQDHO/sc5yor5CvpawVVr6d1Aw
TLSH
T196368C80BA52C272D1422174E1AE6BFB25386D64CF14C6C7BBE43F3C79719D05AB385A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery motw persistence phishing

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
458	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	1180	firefox.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ink!sans Fight - v0.39.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Control Panel\Colors	Ink!sans Fight - v0.39.exe

Modifies registry class 42 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\NotificationData	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	Ink!sans Fight - v0.39.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 14001f481cffcda87848be43b5fdf8091c1c60d00000	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	Ink!sans Fight - v0.39.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Documents"	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	Ink!sans Fight - v0.39.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	Ink!sans Fight - v0.39.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	Ink!sans Fight - v0.39.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	Ink!sans Fight - v0.39.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4132	Ink!sans Fight - v0.39.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe
Token: SeDebugPrivilege	1180	firefox.exe

Suspicious use of FindShellTrayWindow 18 IoCs

pid	Process
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe
1180	firefox.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4132	Ink!sans Fight - v0.39.exe
1180	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 1180	1908	firefox.exe	99
PID 1908 wrote to memory of 1180	1908	firefox.exe	99
PID 1180 wrote to memory of 2856	1180	firefox.exe	100
PID 1180 wrote to memory of 2856	1180	firefox.exe	100
PID 1180 wrote to memory of 2856	1180	firefox.exe	100
PID 1180 wrote to memory of 5040	1180	firefox.exe	101
PID 1180 wrote to memory of 5040	1180	firefox.exe	101
PID 1180 wrote to memory of 5040	1180	firefox.exe	101
PID 1180 wrote to memory of 5040	1180	firefox.exe	101
PID 1180 wrote to memory of 4044	1180	firefox.exe	102
PID 1180 wrote to memory of 4044	1180	firefox.exe	102
PID 1180 wrote to memory of 4044	1180	firefox.exe	102
PID 1180 wrote to memory of 4044	1180	firefox.exe	102
PID 1180 wrote to memory of 4040	1180	firefox.exe	103
PID 1180 wrote to memory of 4040	1180	firefox.exe	103
PID 1180 wrote to memory of 4040	1180	firefox.exe	103
PID 1180 wrote to memory of 4436	1180	firefox.exe	104
PID 1180 wrote to memory of 4436	1180	firefox.exe	104
PID 1180 wrote to memory of 4436	1180	firefox.exe	104
PID 1180 wrote to memory of 4436	1180	firefox.exe	104
PID 1180 wrote to memory of 2476	1180	firefox.exe	105
PID 1180 wrote to memory of 2476	1180	firefox.exe	105
PID 1180 wrote to memory of 2476	1180	firefox.exe	105
PID 1180 wrote to memory of 2476	1180	firefox.exe	105
PID 1180 wrote to memory of 3804	1180	firefox.exe	106
PID 1180 wrote to memory of 3804	1180	firefox.exe	106
PID 1180 wrote to memory of 3804	1180	firefox.exe	106
PID 1180 wrote to memory of 3804	1180	firefox.exe	106
PID 1180 wrote to memory of 3640	1180	firefox.exe	107
PID 1180 wrote to memory of 3640	1180	firefox.exe	107
PID 1180 wrote to memory of 3640	1180	firefox.exe	107
PID 1180 wrote to memory of 3640	1180	firefox.exe	107
PID 1180 wrote to memory of 4536	1180	firefox.exe	108
PID 1180 wrote to memory of 4536	1180	firefox.exe	108
PID 1180 wrote to memory of 4536	1180	firefox.exe	108
PID 1180 wrote to memory of 4536	1180	firefox.exe	108
PID 1180 wrote to memory of 5316	1180	firefox.exe	109
PID 1180 wrote to memory of 5316	1180	firefox.exe	109
PID 1180 wrote to memory of 5316	1180	firefox.exe	109
PID 1180 wrote to memory of 5316	1180	firefox.exe	109
PID 1180 wrote to memory of 1752	1180	firefox.exe	110
PID 1180 wrote to memory of 1752	1180	firefox.exe	110
PID 1180 wrote to memory of 1752	1180	firefox.exe	110
PID 1180 wrote to memory of 1752	1180	firefox.exe	110
PID 1180 wrote to memory of 3064	1180	firefox.exe	111
PID 1180 wrote to memory of 3064	1180	firefox.exe	111
PID 1180 wrote to memory of 3064	1180	firefox.exe	111
PID 1180 wrote to memory of 3064	1180	firefox.exe	111
PID 1180 wrote to memory of 4520	1180	firefox.exe	112
PID 1180 wrote to memory of 4520	1180	firefox.exe	112
PID 1180 wrote to memory of 4520	1180	firefox.exe	112
PID 1180 wrote to memory of 4520	1180	firefox.exe	112
PID 1180 wrote to memory of 2148	1180	firefox.exe	113
PID 1180 wrote to memory of 2148	1180	firefox.exe	113
PID 1180 wrote to memory of 2148	1180	firefox.exe	113
PID 1180 wrote to memory of 2148	1180	firefox.exe	113
PID 1180 wrote to memory of 3184	1180	firefox.exe	114
PID 1180 wrote to memory of 3184	1180	firefox.exe	114
PID 1180 wrote to memory of 3184	1180	firefox.exe	114
PID 1180 wrote to memory of 3184	1180	firefox.exe	114
PID 1180 wrote to memory of 3980	1180	firefox.exe	115
PID 1180 wrote to memory of 3980	1180	firefox.exe	115
PID 1180 wrote to memory of 3980	1180	firefox.exe	115
PID 1180 wrote to memory of 3980	1180	firefox.exe	115

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Ink!sans Fight - v0.39.exe
"C:\Users\Admin\AppData\Local\Temp\Ink!sans Fight - v0.39.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4132

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2024

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1964 -prefsLen 27061 -prefMapHandle 1968 -prefMapSize 270140 -ipcHandle 2040 -initialChannelId {d154492e-d6b5-4f25-b369-ba6e41d9d739} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2856
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27097 -prefMapHandle 2424 -prefMapSize 270140 -ipcHandle 2432 -initialChannelId {d97dafd1-9eed-41ea-b8fd-c8217dfe18f1} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3992 -prefsLen 27238 -prefMapHandle 3996 -prefMapSize 270140 -jsInitHandle 4000 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4008 -initialChannelId {2136e9b1-6756-499f-9c1f-feff5b029571} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4044
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4172 -prefsLen 27238 -prefMapHandle 4176 -prefMapSize 270140 -ipcHandle 4192 -initialChannelId {66e5150e-45b1-4cb1-96a0-0abb08fe19b3} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3168 -prefsLen 34858 -prefMapHandle 4460 -prefMapSize 270140 -jsInitHandle 4464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4472 -initialChannelId {dc1d87b2-42b1-4315-bbb0-d9a9fdabe98e} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4436
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5048 -prefsLen 35130 -prefMapHandle 5052 -prefMapSize 270140 -ipcHandle 2756 -initialChannelId {616db59d-dfc6-4dea-bcfa-e456d9cba11f} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2688 -prefsLen 33071 -prefMapHandle 2800 -prefMapSize 270140 -jsInitHandle 2804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5480 -initialChannelId {c71443a1-de2c-49b3-8d97-625a5fe2ecef} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    PID:3804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5564 -prefsLen 33071 -prefMapHandle 3272 -prefMapSize 270140 -jsInitHandle 3280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2832 -initialChannelId {a47317a6-5f24-44e9-a9a8-17f7f9523e75} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5836 -prefsLen 33071 -prefMapHandle 5840 -prefMapSize 270140 -jsInitHandle 5844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5852 -initialChannelId {0a271869-8f27-4121-80bc-d654a9765160} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    PID:4536
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6448 -prefsLen 33190 -prefMapHandle 6452 -prefMapSize 270140 -jsInitHandle 6464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6472 -initialChannelId {21a463c6-1f5a-4fed-ba0b-26f0f78bc047} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6872 -prefsLen 33190 -prefMapHandle 6832 -prefMapSize 270140 -jsInitHandle 6916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4680 -initialChannelId {61d0563e-01dc-42dc-a996-420dc58c66a3} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    PID:1752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5980 -prefsLen 36955 -prefMapHandle 5984 -prefMapSize 270140 -jsInitHandle 5968 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5956 -initialChannelId {96d1b78a-5606-4117-a815-197b2c94e4cf} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    PID:3064
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6524 -prefsLen 36955 -prefMapHandle 6528 -prefMapSize 270140 -jsInitHandle 6512 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2964 -initialChannelId {56e57e9c-be0a-477e-abab-3f39607b4d62} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:4520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4704 -prefsLen 36955 -prefMapHandle 4028 -prefMapSize 270140 -jsInitHandle 4700 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4792 -initialChannelId {4485470b-1776-4e53-8a21-8bf269475ee2} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:2148
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1360 -prefsLen 36955 -prefMapHandle 4688 -prefMapSize 270140 -jsInitHandle 6860 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4980 -initialChannelId {9a64dad5-a08c-481f-92eb-d6f01991baeb} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:3184
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6772 -prefsLen 36955 -prefMapHandle 3280 -prefMapSize 270140 -jsInitHandle 6596 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6260 -initialChannelId {f52c3c42-84e1-4e05-b60a-4dce9545ae8c} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:3980
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7600 -prefsLen 36955 -prefMapHandle 7560 -prefMapSize 270140 -jsInitHandle 7584 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7676 -initialChannelId {744f7112-8353-45a1-8bb2-d3a35bdadd69} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    PID:4420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7844 -prefsLen 36955 -prefMapHandle 7840 -prefMapSize 270140 -jsInitHandle 7836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7868 -initialChannelId {2d368722-d133-4fea-bc48-8235385ef465} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:2528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6088 -prefsLen 36955 -prefMapHandle 7608 -prefMapSize 270140 -jsInitHandle 8072 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8080 -initialChannelId {3c08a389-db76-4d20-9290-6f485630308c} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:5416
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8244 -prefsLen 36955 -prefMapHandle 8284 -prefMapSize 270140 -jsInitHandle 8296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8324 -initialChannelId {b53e3e41-7880-467c-ae16-a919a6922ded} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:5748
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8312 -prefsLen 36955 -prefMapHandle 8316 -prefMapSize 270140 -jsInitHandle 8320 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8332 -initialChannelId {7b1189ee-36db-4689-8dfb-0e318f36326c} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    PID:4236
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8284 -prefsLen 36955 -prefMapHandle 8244 -prefMapSize 270140 -jsInitHandle 8472 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8560 -initialChannelId {ff5a99fd-5296-4d5c-9bcc-c9cf6ab8a6aa} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:2144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9064 -prefsLen 36955 -prefMapHandle 9068 -prefMapSize 270140 -jsInitHandle 9072 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7664 -initialChannelId {361278b8-fc99-460c-820d-c8daf4c46aa8} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
    3⤵
    - Checks processor information in registry
    PID:1824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8700 -prefsLen 36955 -prefMapHandle 8696 -prefMapSize 270140 -jsInitHandle 8692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8308 -initialChannelId {a253cbbc-f9c6-4da1-8ae7-a4dd7a2c1cad} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
    3⤵
    - Checks processor information in registry
    PID:2888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9304 -prefsLen 36955 -prefMapHandle 9300 -prefMapSize 270140 -jsInitHandle 9296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9352 -initialChannelId {c2c30cea-a13a-4c65-affe-8992823e7eb6} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
    3⤵
    PID:1056
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9200 -prefsLen 36955 -prefMapHandle 9196 -prefMapSize 270140 -jsInitHandle 9192 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9524 -initialChannelId {67614b14-5449-44bc-a6fd-af2465a995d2} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
    3⤵
    PID:2624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9480 -prefsLen 36955 -prefMapHandle 9476 -prefMapSize 270140 -jsInitHandle 9472 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9496 -initialChannelId {3b89c36e-72f6-4319-bfb8-9ddd2f5acdf1} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
    3⤵
    PID:5180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9520 -prefsLen 36955 -prefMapHandle 9948 -prefMapSize 270140 -jsInitHandle 9944 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9936 -initialChannelId {e6c08bfb-efd2-4741-93b2-8ddb59af3f12} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
    3⤵
    - Checks processor information in registry
    PID:5400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10176 -prefsLen 36955 -prefMapHandle 10180 -prefMapSize 270140 -jsInitHandle 10184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10192 -initialChannelId {f478e5c2-7ef6-49c6-b56f-81b942d12267} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
    3⤵
    - Checks processor information in registry
    PID:3288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10060 -prefsLen 36955 -prefMapHandle 10056 -prefMapSize 270140 -jsInitHandle 10052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10044 -initialChannelId {bcb9637b-a952-435d-9989-030236051824} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
    3⤵
    - Checks processor information in registry
    PID:5556
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10500 -prefsLen 36955 -prefMapHandle 10504 -prefMapSize 270140 -jsInitHandle 10508 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10516 -initialChannelId {f8c59dcc-1fc2-48a6-be90-47634cfc34c3} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
    3⤵
    PID:3924
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10732 -prefsLen 36955 -prefMapHandle 10736 -prefMapSize 270140 -jsInitHandle 10740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10688 -initialChannelId {91f00973-0ebd-49a3-89e5-ba5ba2fbe05d} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
    3⤵
    - Checks processor information in registry
    PID:1504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10552 -prefsLen 36955 -prefMapHandle 10500 -prefMapSize 270140 -jsInitHandle 10504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10904 -initialChannelId {04613428-2042-4b10-a425-7784a5a392b7} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
    3⤵
    - Checks processor information in registry
    PID:6228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11064 -prefsLen 36955 -prefMapHandle 11060 -prefMapSize 270140 -jsInitHandle 11096 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11116 -initialChannelId {43d9aedf-aa8b-4f33-af3c-99d9e5561491} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
    3⤵
    - Checks processor information in registry
    PID:6312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12104 -prefsLen 36955 -prefMapHandle 12108 -prefMapSize 270140 -jsInitHandle 12112 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12120 -initialChannelId {ef3e0acc-fedb-4e6b-9dc7-0c955c5b7738} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
    3⤵
    PID:6416
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13112 -prefsLen 36955 -prefMapHandle 13108 -prefMapSize 270140 -jsInitHandle 13104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8716 -initialChannelId {dfa2a435-b7ff-4b0f-8142-269e581efc63} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
    3⤵
    - Checks processor information in registry
    PID:7396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13088 -prefsLen 36955 -prefMapHandle 13084 -prefMapSize 270140 -jsInitHandle 13080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13052 -initialChannelId {a09902fd-43f9-4ca2-9c5c-d913a5ef6f2f} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
    3⤵
    - Checks processor information in registry
    PID:7404
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13036 -prefsLen 36955 -prefMapHandle 13032 -prefMapSize 270140 -jsInitHandle 13028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13072 -initialChannelId {75eec566-2fe4-483b-b6d7-4ead77687409} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
    3⤵
    PID:7440
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4736 -prefsLen 36955 -prefMapHandle 12856 -prefMapSize 270140 -jsInitHandle 12848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12840 -initialChannelId {0ae2257c-5e83-42e2-8821-7c5ff23b2cef} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
    3⤵
    - Checks processor information in registry
    PID:7448
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12824 -prefsLen 36955 -prefMapHandle 12820 -prefMapSize 270140 -jsInitHandle 12816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12804 -initialChannelId {b080b406-9092-44a9-895b-ccc7b56ad77d} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
    3⤵
    - Checks processor information in registry
    PID:7456
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12992 -prefsLen 36955 -prefMapHandle 12988 -prefMapSize 270140 -jsInitHandle 12980 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13240 -initialChannelId {62954b09-c40a-4587-8095-3c3781d939e4} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
    3⤵
    - Checks processor information in registry
    PID:7464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14060 -prefsLen 36955 -prefMapHandle 14032 -prefMapSize 270140 -jsInitHandle 13972 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12096 -initialChannelId {c0bff490-5805-4245-8eb8-42225904d83e} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
    3⤵
    - Checks processor information in registry
    PID:7520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14012 -prefsLen 36955 -prefMapHandle 13996 -prefMapSize 270140 -jsInitHandle 13992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13084 -initialChannelId {7c899f63-a3c7-4748-a6d1-8f6d6a3c2ba4} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
    3⤵
    - Checks processor information in registry
    PID:7260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10276 -prefsLen 36955 -prefMapHandle 12848 -prefMapSize 270140 -jsInitHandle 12856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12808 -initialChannelId {4d0f657c-2caa-48e9-bbab-feffb7909a16} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
    3⤵
    PID:7140
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6596 -prefsLen 36955 -prefMapHandle 10092 -prefMapSize 270140 -jsInitHandle 11068 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14648 -initialChannelId {b7835a9a-415a-46ed-9aee-5a92c0b3eb7d} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 45 tab
    3⤵
    - Checks processor information in registry
    PID:6676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14808 -prefsLen 36955 -prefMapHandle 14804 -prefMapSize 270140 -jsInitHandle 14844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14852 -initialChannelId {9eb26455-c649-4241-b797-7aebc6d6ca2e} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 46 tab
    3⤵
    - Checks processor information in registry
    PID:6620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15180 -prefsLen 36955 -prefMapHandle 15176 -prefMapSize 270140 -jsInitHandle 15172 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15164 -initialChannelId {1bb0a516-bc5a-439c-a637-31349c65dd62} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 47 tab
    3⤵
    PID:8412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15316 -prefsLen 36955 -prefMapHandle 15320 -prefMapSize 270140 -jsInitHandle 15324 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15268 -initialChannelId {c089b8b5-902a-4044-a90c-5b9509b55c6a} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 48 tab
    3⤵
    - Checks processor information in registry
    PID:8420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15340 -prefsLen 36955 -prefMapHandle 15344 -prefMapSize 270140 -jsInitHandle 15348 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15256 -initialChannelId {cd1be197-c613-4044-b556-67e59f9cf634} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 49 tab
    3⤵
    - Checks processor information in registry
    PID:8428
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15228 -prefsLen 36955 -prefMapHandle 15704 -prefMapSize 270140 -jsInitHandle 15700 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15616 -initialChannelId {d37cd8e0-6546-4371-9ffe-ad536eb46616} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 50 tab
    3⤵
    - Checks processor information in registry
    PID:8480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15336 -prefsLen 36955 -prefMapHandle 14768 -prefMapSize 270140 -jsInitHandle 16012 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15584 -initialChannelId {360bc8bf-246b-4724-a700-1caf3f68ff28} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 51 tab
    3⤵
    PID:7180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 16012 -prefsLen 36955 -prefMapHandle 15228 -prefMapSize 270140 -jsInitHandle 16036 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 15336 -initialChannelId {d49b67d3-24a6-41da-a52a-332af9d0bd10} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 52 tab
    3⤵
    - Checks processor information in registry
    PID:8112
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 16524 -prefsLen 36955 -prefMapHandle 16580 -prefMapSize 270140 -jsInitHandle 16576 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14020 -initialChannelId {b65d22d9-2465-4c22-89c5-c2319ceea1f7} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 53 tab
    3⤵
    - Checks processor information in registry
    PID:10016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 16552 -prefsLen 36955 -prefMapHandle 16560 -prefMapSize 270140 -jsInitHandle 16472 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 16464 -initialChannelId {e07c1445-21b9-40c2-886f-02b445fe1216} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 54 tab
    3⤵
    - Checks processor information in registry
    PID:10028
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 16364 -prefsLen 36955 -prefMapHandle 16372 -prefMapSize 270140 -jsInitHandle 16648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 16660 -initialChannelId {ed47c203-2b76-47e6-bba3-d79f1d5f03df} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 55 tab
    3⤵
    - Checks processor information in registry
    PID:10036
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 17036 -prefsLen 36955 -prefMapHandle 17032 -prefMapSize 270140 -jsInitHandle 17028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 17044 -initialChannelId {4d1c272d-cd01-453d-b175-03a8321a692b} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 56 tab
    3⤵
    - Checks processor information in registry
    PID:10096
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11432 -prefsLen 36955 -prefMapHandle 15976 -prefMapSize 270140 -jsInitHandle 17296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 17292 -initialChannelId {a4eaaa59-a1d4-4fdb-b1a9-7b9a270882f6} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 57 tab
    3⤵
    - Checks processor information in registry
    PID:10172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 17596 -prefsLen 36955 -prefMapHandle 17600 -prefMapSize 270140 -jsInitHandle 17604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 17612 -initialChannelId {ac78562c-6324-4d5b-bc19-990bcbd3ad47} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 58 tab
    3⤵
    - Checks processor information in registry
    PID:9536
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 16360 -prefsLen 36955 -prefMapHandle 16272 -prefMapSize 270140 -jsInitHandle 16400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 17648 -initialChannelId {d0a73227-6810-4e7d-9ac1-4fbdd36bec0c} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 59 tab
    3⤵
    - Checks processor information in registry
    PID:10248
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 17804 -prefsLen 36955 -prefMapHandle 17800 -prefMapSize 270140 -jsInitHandle 16592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 17560 -initialChannelId {dd1a1325-3cc1-4adc-8ac3-6ed565df0a34} -parentPid 1180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 60 tab
    3⤵
    - Checks processor information in registry
    PID:10256

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\activity-stream.contile.json
Size 5KB
SHA256 7c21681b9cfc80ff028169a68ccb8cf27554bf21357f907708737c7f24fd169c
MD5 5360fdd406aa96ad999e729b121465c5
SHA1 500590c99feb2918737faa6f19fab4e0f295fc23
SHA512 9e62db3205ca5763e69d718e2662dbc2bac48aea00109a0adbc9b54dd4591ab7eebbf7475df42d2299f60d1231a2aed9fbef49f272c99317d452a7dc60654d3a
SSDEEP 96:kKYvS34m/ONb6D+tuHSg2miJCpnDXAoEKTQg7DMFpm/pL5laTsTJqob:tvGbw+kycyCJXfVTh/pDaITJqob
TLSH
T10BB14C9F853990B317B267507C0F1798D2D3F10B66E8C9DD93D5F8218AA862948EFC88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\activity-stream.discovery_stream.json
Size 76KB
SHA256 8c485e72576f4fd6ae3bf30122b1aadeba2a3b6884e40bded4214c2be8baca9e
MD5 29461d15b2dc4d4346ae6fef58ed7890
SHA1 87229e9a9fb09993a26290bde590d2ddaff02d25
SHA512 3207d7cb6b2e55ccb02704c36373bcbe8e2a01334f2c0cecd110741eba447b10479eb95dab5987321209e5263600bef433531b932620fc9f25177cd42d9d10a4
SSDEEP 768:eybB9ZWUZQR0urb1AGnmqD23659wbvuJUXCD8ofehAxr2gfv:FbDZQTnp+c9wbveFDvvp2gH
TLSH
T167730B63A7AC71FB1BA43BCB2C4B795B56E2414AE74905C9FCD8CA1CC1CC654123A9EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3EDDA4487B7BB0FA688CCAD556998906EC4B89A1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\3EDDA4487B7BB0FA688CCAD556998906EC4B89A1
Size 116KB
SHA256 25c110f8f061ebd3132ca2a246592f086f80ec14e2b0ba0ac520977f1449b8c0
MD5 a7ce42b88930e567a5371c7dde429ac3
SHA1 1cd3ed500e4884ddd815ac91b0a521f5fa1d8504
SHA512 08db15e2686de5007b5d67d632d3562a2ada1d6035a31313720e9b2707bed1898a315b724eb608279ae65501544a20e0ecc94c6a74eafc5bbeb6c55d3e26dc56
SSDEEP 1536:0OtyMOxlZ5HkNYGQPjldukaqeAcoanaCSd8GkGgX6QwFvJppQbJkXJqCsqnx4v:0OLN1QXmoanaCKQbCZqrYSv
TLSH
T1C5C31B6BFF525D13C92103B140B7233A3B75E48557A6F32B2A8FB062BC663790D51A9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4017C5D8EC1E184210BD3F7C1B176558C7B69B95

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\4017C5D8EC1E184210BD3F7C1B176558C7B69B95
Size 60KB
SHA256 64bbeea75356e02328db00860bcae2b419e724f7e6ede1a193f095cd6bc58d93
MD5 1faddcb1de8fe7e8facc587723cbd6bb
SHA1 075d8cdd35f6034e90d8225666ca3a6513312666
SHA512 fc6fbf75a679ed22b55b2da94f41b90b3559f5045f380a017da1dd754e581405bc117cf548a29b1b7f60a4ff5f3041f7fdc8879e42d2f6820d32cab1085e35b4
SSDEEP 1536:b90/TV911BA/sdCqbCB7mIPKvkom8s/vP4epzYpom:4TVrCsd3UpOko4RpzYpom
TLSH
T1CE5302799B046E19A722CAC4840A8FC17E32F16FDA27959D4D80784B4AFC3704E199FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4D5DB1A7762AB6DFADEA83E8D2D9C81D0E9FD837

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\4D5DB1A7762AB6DFADEA83E8D2D9C81D0E9FD837
Size 148KB
SHA256 576959079858f568f4e8b953267ff554d7974fc7c13278c35b06e3ca2b29c9be
MD5 c02825a1cd7b1f6a5c7eb82bccb78010
SHA1 9eae44b53b65b568fade4462fa027a90d40c5310
SHA512 376582883f6f324943e401af655ed6141d6694d097ecc9739c94923b4d802760493193ec216cec6fea972cfce7a3f327b4f20b17a61a31f0a741b50cf09f7357
SSDEEP 3072:BmwGEvcZjpAKBmMCxrUaN2Lk3w4mm6CxHUKN2Lk3wUduyom:gEUVjBjkfw4mX0fwU/
TLSH
T10AE319CEB1D2F33185E3B2F1505B460993BB660A5C88545EB904F7F82A70D8B946FF29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 acbd1b4853f02daa8bf70ed7821476680d5fb0eb75118c48baf596d697338761
MD5 6893739d3fa6848ebd39165c86515a38
SHA1 8498eda1e10dfb28fd882edeaed340a0b8633987
SHA512 2e9722d253bc25e522f236080e3537d7aa0906bfe30702a925e845c6a8d877726ba8e9296a876bee2cd087e09ed8ad0e365d06406ffbc279a5937366fbcb9acd
SSDEEP 384:HwCe7iO024YfDL84KKDL849B7SOEAd9KVRaAcP+AWRMAB5h:QqZYfDL8lKDL8CB7S/AmVAf+hRMu5h
TLSH
T19D729E799F413CAC19A7C0E8C0B842DA4C19B6A3DFE6806D21683D0DCB94969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78104F04C2A7EF5F2E2B7961A7F8A0D49A72DA8C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\78104F04C2A7EF5F2E2B7961A7F8A0D49A72DA8C
Size 121KB
SHA256 1af4e1fc3f6306ab4e8246ff63ccdf011bc156036f0f7cd9cddc263b35593220
MD5 a145ebb91ec49ed0015940066922fb59
SHA1 6cac27e5d411bbf6ebad83ad6499c1484015285b
SHA512 891ab046b5d68326493946858e17cf2d93fd00ded4331dbd7d4d3c4d57b9483335b331a368a92efa725ffbb9f8db3db411e7aa366c8dd067ac523847000e0f29
SSDEEP 3072:stsWcdwuegNjJe+TKCL/uTxeo605i+eijd/++7Mr+Qi+v5poEGq:stsW4L5wW/ud6Gj1+Hzhvd
TLSH
T13BC3123B3674A6460E711870DA11942CBCEC3A7789774CD6BE251D06CBAC1B26CBBD9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

826FF5283F1DB3EE179B620F796C93F48153ED4A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\826FF5283F1DB3EE179B620F796C93F48153ED4A
Size 70KB
SHA256 68472453f1f0365e36bb5493172031c94b982e6b561f9860dad1a30c3ec0b38d
MD5 02bed069b9173c25c4e31baf4ad93e41
SHA1 d111c517cdae878fcabad42cd34952eefa620bc5
SHA512 b7a685162e360e42622e1e1f3f182b743fce3c7b960dbac2b1f75c96901a0d05f263704224474c112b6351f4cc2e6395f10a987c2756cebab187f4122351a1ef
SSDEEP 1536:eTQXQf3sY6dIRCRHSJfCmly6ZnOqGsFgO8kKlenQ9jpoy:eTQXA8p2URHSJfly6ZnOKVKlenQVpoy
TLSH
T168630130DB807E058ACAADC914B7B86D3DA9EC77EBE05164F3052A8904C4393FD6D5E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

943E4538C286FE706B97DEF9A38BD7ED72732D89

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\943E4538C286FE706B97DEF9A38BD7ED72732D89
Size 142KB
SHA256 e1b02689a3e4baf9d3d10161e4a1fc32570aebf7513adb621a155f18df0d997e
MD5 51d1363047d10461861df9f5c6914b42
SHA1 54d574db8759e6dc3b4efe7801f7ee204dafad89
SHA512 cbc6d9d9eb7fb45f5c8e20d66ed95d755df2c0649b0c568c89b279203f79d329d48673aafb48fc14398ee282d0e4ecb55016cbed8a795d9a2dd553a924b7d826
SSDEEP 1536:4cUVw3bMm4mI83SdnPGkO6vnlJKtJYqub/i/qO0e5e5tqPbdadJIvOUUAlbh6UKH:4c2ebM4I8id+CjbiTk5kzgdJIEUKpoW
TLSH
T102E32AB635A22C03C172287941AB03577F77F0C727C68B67AA84F9917CF161469B1BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9C52DD0AE44D78310A0309646F8F29F173294FD2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\9C52DD0AE44D78310A0309646F8F29F173294FD2
Size 6.9MB
SHA256 5e5fb02bc8a2e22863b0225207b02c07ba313c599bb06656a1381a01302be606
MD5 add1fc8df770e3e26c09fc33de41a48b
SHA1 98d6aa637f3049e34c727af5926e9e650cd77b1b
SHA512 65b7d62d9266d6557558cdd65b05c511772e84c954503233bc1fcfbc9e6f1d5662b4a1ebcf83441e9979d9c52aeb31b57ace5718afcc93b6b26d746432815eda
SSDEEP 49152:VnTJPkxCsGeX+edbaVFckOXPIpi+kGoPHrC0XI5eeY3b0juDOI8jEgGZpm0i9JCU:VnNMxxGwi/WTubGZaEvTCluaB
TLSH
T11C761816EE535E23C43003B240FB63723B79D0856B97F32B2A8F7552BC697650DA52AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9CF4A9CEBCA93EA84407EE23FCE23C98CF576D4B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\9CF4A9CEBCA93EA84407EE23FCE23C98CF576D4B
Size 1.1MB
SHA256 1a28728f4b5558f830b47b6384a7a82e659bc658a7c9450864dc9770c1052f15
MD5 2c12eb31e08e44bd5f44864d2661f209
SHA1 c70fb83787982b38e76d66ac209c52d203cef88f
SHA512 ef171d1827f373339960d05c552d0affbb70e8c2103e65bc89e989c1b4bc77acc948175140ac889dcaa2b243985d202fb69e3ce5d5a731a4da66c2763a5bf656
SSDEEP 12288:ilqVUNrHhGl2clLo7ChSxjp9YG0HtIGnxyW1bWULiVFw77+SoobUZvOMp9ih+z8A:ilqVeBGldlLo7ChSx09iT3x/DZLgWEps
TLSH
T11F45D816EE465E53C82103B240FB63323B34D0856B96F32B2ECF7562BC697751DA52AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CC403CFE9AFBF6E31E492AAACA65F18919F04D47

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\CC403CFE9AFBF6E31E492AAACA65F18919F04D47
Size 64KB
SHA256 1f6f63cbcd44156d74151228f52bd49828fe474db7494ce1111e2414ade8586d
MD5 160e0ee14a6733da18b7437246d25c3a
SHA1 fb2e9031b6aa1fc5a2842815fcb37a5e2bac1d7a
SHA512 1beb936658208b0d5f078015e0882efa8631c6dd8ecb2e5482089bf2aa4c82c543f9165d86dccdda49ac35b3bc2e8c63a657dc15890220fcc4494a4740dc4721
SSDEEP 1536:YXL7mBYyV7GMnxBFqNZMzpwdRgbBYyV7GMnxVFqDZMzpwdRBQpoK:Qs1yI16fQpoK
TLSH
T101533BEC7651B424C1E3E4F1606F118CB1BFAA66D48C6459F300D2E97EB078A1467EAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E2E41CA3E48D2627D2A1C76828444D9215432E1A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\E2E41CA3E48D2627D2A1C76828444D9215432E1A
Size 14KB
SHA256 fc9db67c69d03a2934c00e09a40d32dc94d13622cdd11623b97d1068c83e07f8
MD5 259915817de4e053b31ffefeea8f8bd0
SHA1 cbf83fcf607142685203ff46cea108deb0ca2856
SHA512 f9b3caabcc73e21ea98160883f253f24e7a9c336265a1ee808590780161d48b76ffdee71c1f2c6d5755ad3ea104d8d5cb9cbf4b43e68a9fb7f04f51c2cc9dbac
SSDEEP 384:7yMBmpFiG/06veO5np9MKqvX5rpJGHJRv8nyFz/fz:7zBIeO5cKqvX5+Hv8oz
TLSH
T12B52AE3F1E4226330AB3E484C6C31BDDBE21B997D8ABF1E5E8091444808AB7EDB15D56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EE827ECCA3570096CED1C397182B0B8A084CD889

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\EE827ECCA3570096CED1C397182B0B8A084CD889
Size 17KB
SHA256 3344f5ab66fc32d2a0db8a38ea7debf14688dcf984c1d7128dcdc94c54a2c3cd
MD5 2c9856164c19780e90597fa43b09c8d9
SHA1 3d32acaa192a6130f018081158da605077ebaa73
SHA512 4042649c2b8fac71f50307eea6f113c7d3c9ac33bf4d256dd6150d140aa2ebc9ee3eda9c15f36e12d04081be4b0570cc8f2b683e7eb21b2f46189f656a5190f4
SSDEEP 384:cZrST7DRDsAs85ThzmZI0Xb3flmiSsy8D9Gpo/VMAkD:cshNv9zzwb3flSsy8R8o/VMB
TLSH
T13382BFB53F9839851B11CB46DC7B161C4D3A8967FED7F1EC680576828B8CB6C1E84C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F99ABE0BC8DDB023B60DC1797DE2F080BEB11A59

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\cache2\entries\F99ABE0BC8DDB023B60DC1797DE2F080BEB11A59
Size 19KB
SHA256 ceedb7be50d8f01497da1d065c536608d98ee482f6523209680328c1aa59c8af
MD5 7f1fa49d0cc1104fa78bb01acad88982
SHA1 6d2cea2e590b787d280f2850ade45934a1ad16a9
SHA512 87112d5461fcc2414bf3b3df3a4ea9c3708a651addf8b7a6a70a905fc9b1404795ae7bb24b6120636a0719efad019701136ac55a0f94d9777b4792f8f255c5f3
SSDEEP 384:fqKLbgEDoNRYSdZggHjQSsA+Ozv4tO22ufVYieSp5jTMSp0:HLdDq/dZrDxsAzMf2u9deSp5jTMw0
TLSH
T1AC92BF3E2DD129A81FD3E208D596891C9D7E5957EFD2BEDB3D803127888C7385DD0890
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

XzWNX01tCmC_eVaNjvn8HtBiKy2RuzJU7DdJCzwzeLs=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\jumpListCache\XzWNX01tCmC_eVaNjvn8HtBiKy2RuzJU7DdJCzwzeLs=.ico
Size 1KB
SHA256 f0af4b3bbc6815bc18b3ad3be0b69034882aac0cb47a4e4b863c62f805e838ec
MD5 dfcce34fde3fa9b55f069c1e86de2786
SHA1 4023e0e71a069c7bb4d8c169dbbad6c325c86da0
SHA512 54dbc559521387000864490fbefff68073e54a8610d9323a82e01a3a7f8ab81655264c74e171d95cc391d4a41a8f8dc82770e0cd4d6fe875560483c7925ebdbb
TLSH
T19F31E6FE336BC9E8E9770E3346C70B80BEF2CC49082D6E789909DF43A576A216814941
MD5 SHA1 SHA512 TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\x9aidq83.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 549KB
SHA256 1a9b181c03212cfad281dbbc2ee10b3bbc52edf4b2d36af09616e949ad2a96c5
MD5 a4cf664dd991bf0ca7cb9ea37f0c2f5c
SHA1 a6d1185e4b809182aa90d4d1a2268ee22e37dd0f
SHA512 3aa4febc8d8a873117110864f99fe9b21086bcb3de4bab009fdba002c176436d976d54e663d67d30af0be2ae6ee15e28cc24bd5eab25604f08da21867d71f248
SSDEEP 12288:9gSce3xMBiN1bHTwgLYPEOPSsBbY8aW4neBrrHqN1XMgDjj2DjyrdEhfi1:9RceSC1QgLYPJPSMYjCr7q/MgDG2pE5A
TLSH
T144C401F5F7A078E3A77E024B9D867FAE1A525522C74FE0CC443B67C2495372AAFA5400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 25KB
SHA256 d51a60f4bcac5e0a6e8ac0c4005bae78cab0827c29c53a0e0906f0f62b90f7e1
MD5 5cabb0d789f964e990b0bfef9856e313
SHA1 656e3fdb5acb994cf6a150b3ee1884aa156d13a4
SHA512 80c2d3a5c945a12215fcf595740c285d98da7667b37b774314290339c07f027afdb0635d0833e6764d7229d138ec1b081d054749c510b86bbaa3edc7db57ed15
SSDEEP 384:Jiq3Rq7RqbfXqEB7YjqwqYruqxnDizfqZA9jKdqG3wqAPqS8:t6Vv
TLSH
T13DC211002BF71559F2F78FB1BFF1A6975B3BF8265A0A546D4082124A0A32B50CC66F77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 25KB
SHA256 d899f4388bf101bbaa77ef687a01dbf86973fe257a9817939cbea10a25bccc05
MD5 8e3a67fee5d0ab4c02303eae4920e59f
SHA1 e88bb0bb01b716c1e95f81ba5092636173f83ce8
SHA512 5d6edc5c05691940c5feb1a909f997b60e906db1579a2e93e0acb94ad7ba03aa4f00cf0e851ba85283b8f3c8bdaa7f79efd2f3a5d0baba2e6ddc474c176b2215
SSDEEP 384:1iqvRqrRqbfXqgB7YjqsqYruqpnDizfqBA9jKdqS3wq4PqS8:9G9/
TLSH
T15BC211002BF71559F2F78FB1BFF1A6975B3BF9225A0A546E408212460A32B50CC66F77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 18KB
SHA256 7592c11c2ca3e4eb79a88b62f77059ac9bb08dc82f5a442f3d8e63821a77db9d
MD5 e16abf12ce92b4e61b180cca3d916e96
SHA1 fed81896d44bdcd7f01b71e52ecd8bef44bdd2ad
SHA512 63a34f3df12698d47676cdf27d3996b5d6072a6bd369c3c3004770568664e9912a1fa6f110abf079e62181c417ec0f3065050d09777c11c683a9abf634f81ea3
SSDEEP 48:Pqdc0d0i0XEKCaXEKXXEKKUHCFHWHKCM/p/84:Pqdc0d0ijKCVKkKK2ChEKCM/p/84
TLSH
T15E82FBF76BFB9461F1234FF098A97448DC3317296C28D6D48E54D4E60242A98E1BFF98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 45KB
SHA256 46c4d820e3e22e2fb05f38ad38f86062293cb1b38c5697035d41d71430606e3a
MD5 31318da727d70349d8abb92609c6f2cc
SHA1 498ac529a3107aaff74307877c0b3bc341188e07
SHA512 fa41de73f721b8334ede3bffd50e8bb157b293910a457e269f8884c75dacfa15c40f58115688b0181af0dd7ade11349202a80debcae12486ba7b03d3381f7341
SSDEEP 96:mbtx0izKCVKkK6+ChE6SC9kKOGCsGbGdlNCM/p/gfCEzeFC6bztHC5HgH/8491Fx:eXd0Q+OEANBjB5BEC
TLSH
T11223E4EB57BA6451F1735FF1489A78888C33272ABC9496849E04D0DB02467A8F17FF98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 8KB
SHA256 6de29090dbab8259514b0a2f36f1196f8a4569ef3cb8868aee22676b57f007f2
MD5 843f1f6306f519a3ca99760819834431
SHA1 7c3c4b987fb52c9d72b7ce74af7d53e020168576
SHA512 eee2a269ef14dae5f38ec5fdffd19c6a39cda4ba01ee9ece39307555bc4933818a8283f7d9666649b47c3ccb269e6a3c36d27dba197b50dfd833661059b800c6
SSDEEP 24:MuhMZ1/B915GB9xWdV9Bhf9Vvj79FHf5q9F55A5Td:QLjGT0d/PFBjZRhI56Td
TLSH
T1EF02B6E7B776A062F0A28FF0509D754C8C33072A59688584CB44C4F712D6AE9917EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 12KB
SHA256 2792bb2e21b5c15fbc039285586e929d4299972c628b349c8ff4a1e2dddbb6b7
MD5 8395c1602a247f1bf082edd171f39f89
SHA1 6cd480ea70459b1df1df821586fc54bc77dd8b6d
SHA512 451efe1739a2f7cf71efb7efb7a3852f705c47aebeafafdb0be1dad27781e0231715f50c5fcadbe37a123c0b1981d91796550c8b845d142b936c99a596a4d030
SSDEEP 24:MuhMZ1/791DGB9xWdV9Bhf9Vvj79FHf5q9F55A5TdK9lQP9BbdN/VyWN9VxWA7N/:QxZGT0d/PFBjZRhI56Tdoa19nsM/pZ
TLSH
T19C42A7F77B75A4A2F0A3CFB08099758C9C331329586C9680CA44C4F706D6AA5917EFE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 16KB
SHA256 4abe58451eb0450f6d64bc7be42d09a040a7bd47c878b7c7b393ec242b506c27
MD5 003cab8069a57059f5006849a9e50ba3
SHA1 474bd6f9e3fe219d9d9fe044cdc4312589e85ae2
SHA512 2631314ef181a785e005a1c8eedf35cf59e19be6f39c0a84877dc5578a0c5a7ad08f15910e359f0af0a26cac2fe483796ff1ae8a706d51b199f0d9672ca5577c
SSDEEP 96:Q4iGT0d/PFBjZRhI56Tdoa1lsM/pZ4yx2OsyuZOfy8tD:QaHQA227ZZiFt
TLSH
T1327285F77BB564A2F172CFB050AD748C8C331329886C9584CA44C4A707D6AA9917FFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\AlternateServices.bin
Size 18KB
SHA256 04ef21c24729cec51ba4a4d3cb2f36f42d787659cf9b61e9cb1d883552611661
MD5 4e518c8681cf5321607a774d4ed0e6b1
SHA1 89f1f2ce9d326a3c4e202e17d57b37ad37a2e848
SHA512 f87be55b755eb0a12441b82df8800199e71c8cc718974788a559be03af03962c48c2bcdbd55939fefb9219008a5eeeeafbd2cfee714a3721a099a62e2b4f67f0
SSDEEP 48:I9NCM/p//1HSD1HWHNsHSuH5HuUyyxytDm4aG:ITCM/p/tyx2tsyuZOfy8tDm4aG
TLSH
T1B98266F77BF624A2F1728FB054AD744C8C33132D8C5C95848A45D4A70792AA8D1BFFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\addonStartup.json.lz4
Size 4KB
SHA256 cbd4beb16cb19f5d0e0173ebfa5997d9da797448a037657d9090f9eca6820b8a
MD5 b139f18c0b75bb4b99e0a774f381a971
SHA1 eb7d12e8c52e5440e4422af58071f8182d6cffce
SHA512 b86a80099ce00a73d43b82de5c6c0d6b408121ed9ae57946fc5262ebf720ed4ff5ef51e8a0f23a755c06d625d0862000b0998ba5a36e711c994a4a85cc39005e
SSDEEP 96:NQp4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nv52xxhD8rGvm6ApwnHUuhN
TLSH
T143A17DB6D542EFA1FE32D04358E93FB2E6E5AB7410A9C8D0F1AA71294C64E735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-08-02_10_aNvW7x3ir1XrgFiZALi2f9ZvzDx18UTYlP8lVP-Tkg8=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\bookmarkbackups\bookmarks-2026-08-02_10_aNvW7x3ir1XrgFiZALi2f9ZvzDx18UTYlP8lVP-Tkg8=.jsonlz4
Size 855B
SHA256 de5fecb7833035e96ea46b4c59fd2891f38783a3191ae766cd0985fcaecefc67
MD5 f33c6063629b41fd1a5b478c26c54c44
SHA1 42bd5e3fc3b2ab3cdbd49d096d564d0c17e764af
SHA512 37ef057e5e39dc98abed63085c33c04ed4d3ecffe79d3c8836cf55f0187d393c88a53aa8cb994750d12bbf9fca80d98f99deb1012a8365c918c47fd64cac602f
TLSH
T10311524CE6F205D008D1447A60051A95BAE33E06DED848ECFACD04A4206CAC4A3EB78A
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 151KB
SHA256 21724ca2987e558a1ed68af723f669436e0569f5c80843ee3e86d6b9be2d0b6d
MD5 1f1108ea90763c01466bcf69f91d5c2c
SHA1 fac839f6afcf785882cae7f104eb1791eaae6e43
SHA512 abb7c85c98f9ae124e870b46ef085b8ae04118021ab015a786f7e1d2a2a6d17f5f3863075fc6105c551b679eee396ef850c6b902d8b52322dcfb338b216b3ed7
SSDEEP 3072:Bbkck12QuYxKsj6bWSbJEUy28gqD5yevN8aCvMf9A06f0a:BbTk12QuYxKsj6bWSbJEUy28gqD5yevc
TLSH
T10CE3DF84DB1A407BEC2445BFB496172C3735F8654A59A70B26AC04722DCB3FF2D4E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 27KB
SHA256 1dccd653411369f27324a763869c3be48753129a642e6c68e61086729116ebc3
MD5 b4b1971f18295227a796d218ec355a3d
SHA1 cb4d05205c51be2021d08bde5388e3aa6298a0a6
SHA512 78560db980a4a26ffc9f475febf06ab68521233dc0a9465dd71e66c36a88254cf17724c1df9e0237bb1d4162678851f84d862bbf5d59ce2fe521fcd29fd7884b
SSDEEP 768:bLZRcoiGcm+u2uxRsIyEfWbHbNbIbKX1aWr:bLZHeuxkd
TLSH
T162C21094EB2A953FD41552BBDCA50B042F78B8CA98092F573A5C64682C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 51KB
SHA256 5c1d2909db7c3bd0fbe6b27b50bfc3004d899da6efd4cfc900a3009152d33bb8
MD5 bfc7829908f168649310d70c0feeb151
SHA1 70fc70d9dcfdf2e2e4a8765f2c4303f9afb094ab
SHA512 bc9bcaf84b97aba7d48d970681327722ebc4a41076e1f25f0e7b43c3a9787ced3420477f75cf03fbd87e1224026fc74423eb7f6ea90f99e3a8e0cc42187ca881
SSDEEP 384:pdCvvN8aCvJm0T0f9A06f9EalySwd66Joz/zgC1jDCbo9CQyjb:pdCvvN8aCvJm0wf9A06f9EawSt1EE4
TLSH
T16E3342D4CA26447AFD10D4FFB199667C1022B83189989B0F29FC04671DCF7BF2A1AB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 144KB
SHA256 99ad09473991bb73aa5624baab8c595e2b77f31e3bb849c54dba7f36da24ba7f
MD5 388ed7ce744c7fb578df1844895f653b
SHA1 133aa15ea5ba50610e017266dd17e5f0e67b7921
SHA512 00e70184adee6fa423533fb7cf6f7dc6b2bd7c98546db28e4ec846f4cf70edb3cf3805887728dc359bc8e15f34e959e082d60b8945c806d4ff543c90b5098a8e
SSDEEP 3072:Fp+wMhI5mo5eARnaQL6kzTm2sxLuCSuvN8aCvMf9A06f0A:FpZMhI5mo5eAdaQL6kzTm2sxLuCSuvNE
TLSH
T142E3E084DB1A407BEC2445BFB496172C3735F8654A595B0B2AAC04722DCB3FF2D4E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 144KB
SHA256 9091b66b45ec9389604994dadef8424cc4e5ef26b70faf919dc2b59f6c8f7c59
MD5 acd9a8fe6a1b7009203d2f29cc22c380
SHA1 33bd76e8b5b4189b959ce9377f0795aa7818e6f2
SHA512 1f7aad7835f2986f257227723b9c0b3deee7b4b8f14bfb5ea283d5051399055a39bd5a3e380366fbddb2f8cf0712968fad3a11a6afb7cce0aa1d08207cf1fa3a
SSDEEP 3072:zp+wMhI5mo5eARnaQL6kzTm2sxLuCSuvN8aCvMf9A06f0a:zpZMhI5mo5eAdaQL6kzTm2sxLuCSuvNW
TLSH
T12DE3E084DB1A407BEC2445BFB496172C3735F8654A595B0B2AAC04722DCB3FF2D4E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\db\data.safe.tmp
Size 144KB
SHA256 3b92d65a311f722b62d38fe32e44ea7d99cbcfe853753de0f736c7da343f047f
MD5 a712d4f9946f2fd087a436a82e4987b2
SHA1 406d3958e870aaf7f700910273ebcac8f402d740
SHA512 492d125ba6764fc0f8eac94ee5eeb95c31e59f68c7614fbd506b45d6ff96223d334943f451e02b275d5afba6cf3008aa77d309be680fb8a6cb4ba5bf41b2383d
SSDEEP 3072:np+wMhI5mo5eARnaQL6kzTm2sxLuCSuvN8aCvMf9A06f0O:npZMhI5mo5eAdaQL6kzTm2sxLuCSuvNS
TLSH
T141E3E084DB1A407BEC2445BFB496172C3735F8654A595B0B2AAC04722DCB3FF2D4E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\events\events
Size 1KB
SHA256 3dbdc4a2a4e9928b7d0bbba0b42a2df9bc8d2ba0d81134b99cd91ff06bc5ee04
MD5 ea53dd5e0b9775325063077a2ef4bdbd
SHA1 8aede3e7da82fc2dd6453028ad5cf9ec385b2b71
SHA512 0cc505d470d34ef2d4682736f473e75177e936befc2157483c16c2ea8c959782e1aebbee9e5766da9e53ff462517a463de431f61e6a1fcba106b6cf304d764e9
TLSH
T1B711609C3ABC4D5A59C7E76CB881158D53A54E0B08471C434D02EE8CCED16D9316AC3D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\events\events
Size 4KB
SHA256 23611b937f4c998c808530f578dc8d3df19375b7d79e851cae3c25c89bdd5ce1
MD5 2c6b655ab393e11f3252faa650173c23
SHA1 9351f71e8b7536ad24f27296069563539c46f7c5
SHA512 917d3861d47feca21f04b05c857e8b303f574418120a4165995928544a3269f8568f9fa49fb6b022a9a07517d17d03657cbfd9166035ab64887d76d62345e948
SSDEEP 48:YlblpY1R6kcQbk5N01i/LPwaHaxY0ZsHeBOfIU4AGmd3c6sd926uYrUi1A8/OHaQ:y30ZYDfIU4EdfsdzDP68fHQ2t9qFY0zL
TLSH
T124B13F1C36AD0CBF29D7E79DB8810A8D42E9470398C71C874DDBEE4CCD46A99321F929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b00d39b-d826-40a4-a886-3c204b4d825e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\pending_pings\5b00d39b-d826-40a4-a886-3c204b4d825e
Size 871B
SHA256 291869a86650e3dce021686b896d494682fc93d6ac3d9f79fbe04430eaa47783
MD5 be99fe55c981596ef1f654de03a38e88
SHA1 a6e8c0c9000dafaf8087b84b5cd4fab1fc125d63
SHA512 f636d56475819a456ee454d1e8496915cdeac8fb342e0051a1f680ea9ac67cb793d0383c3af8292534ca192360c64a6127d9efe794aa2f5e24f0aa7005b5973c
TLSH
T12B112391C62076B38C7C934F85D63B168BE4B91390CA44083DB00F184F6E60FE3A6307
MD5 SHA1 SHA512 TLSH

Submit Download

64f0ea96-598f-4082-b803-d7444de5fbf9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\pending_pings\64f0ea96-598f-4082-b803-d7444de5fbf9
Size 886B
SHA256 3d064c64bd4f56582d5f841559dcccc829dc9c157c8cc35f955f21aa4094a97f
MD5 424c9fbc0be29ae3ef042325fae46fbe
SHA1 c0cb88b80c9fcab2f5decf6d0d2b7b7efd395e96
SHA512 d8132884256eba6bb8497da7ccabb3652a4bae730209811429396801164165868582a579196642d6aa931666dc62b1ee0a67b3e6c341e3ea4b875b1351dd999c
TLSH
T1AD1100A2563475B2CC3C87DF85D53B568BE47423C0CA14087DA54F1C4DAA21FA3AA707
MD5 SHA1 SHA512 TLSH

Submit Download

90c4b2a6-910f-4870-8ec7-152dd05d6bef

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\pending_pings\90c4b2a6-910f-4870-8ec7-152dd05d6bef
Size 235B
SHA256 0217ac65c7c5792cda307504ac1bc0f7837865d59298aedb7805aaad36abb908
MD5 97082de8ba5349b1f8d70df570c39fe7
SHA1 9496c64afe1a4f881280c82abd0db427920a1fb3
SHA512 37e369296e22a93c547dd4a00977278763b1cb15c4420e23cc38329458c6d00d4177ae118412512769fa95437d47ae8ebaf51ac88ed882bcc309e3186658ec67
TLSH
T170D097C01498676D4C000F03F0F069CA70844C3314F4A814CAD14C388AFDEC81222806
MD5 SHA1 SHA512 TLSH

Submit Download

ac804f79-042e-47f5-9339-109f544f0dfc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\pending_pings\ac804f79-042e-47f5-9339-109f544f0dfc
Size 2KB
SHA256 d66f923c6a110a812cdf421a8e890eaaf791e3c55fb2c1040ee9dc8a2469184e
MD5 ce1884066a19846404b1ac2b3c4c6e48
SHA1 6809b994fbd0c476981b542528c5615e78f046db
SHA512 b6cf732ba5b09907ab1cb710e25cfc08bdd1b2245334d47b43263719b938e6f3466abcaea8a4680197829fab35e56f5bc7a9970618f8c459fa4d6dcb2a68ec35
TLSH
T14541676C35785CB79C9EE68D81C2328E97A09A5310821C432D51EF0CCE9639E73BB52B
MD5 SHA1 SHA512 TLSH

Submit Download

f6002725-58bf-46f1-89bf-3d2b6b88f5b7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\datareporting\glean\pending_pings\f6002725-58bf-46f1-89bf-3d2b6b88f5b7
Size 235B
SHA256 76ca45f30239c42379c1fb10e7c90fb000a3fe4a2f68c2cd507a27f4c46d4d79
MD5 3f32042fb86f8d70a32b55fb5db2b332
SHA1 eb3f2190efb8c632f8bfffe597dc5c7bab44b228
SHA512 8b9f1153afce4a66662ef21e1eacec9bfc40529cefe0d609aa2644a69b6a9cb93e44bee61dec31cb3d0a6e5314884e14aa3c16d65a07113d6069a317f4d1a239
TLSH
T1B6D097C43888636E08081F06B0B07AC631548C33687658208992803889BDDC802A191F
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\extension-preferences.json
Size 942B
SHA256 ba2da3c2e48d77af558a475a59dc7fa14a1e721bf6a2aeaeaf59682f840d7137
MD5 f1d670951a62ae5daccc9687d7c214c0
SHA1 06206062240e3a25f4d296dd75ad30bc2efd4343
SHA512 2d6f9c8f6867bc1936be79dd0df6f2716fb6f9652e58b82e3d7c8078f88cd068eb9c9908e1e5fb6d8971bbae31cd26b48df6b632438a9e1f36c7a769bc08399a
TLSH
T1B811F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\extensions.json
Size 16KB
SHA256 3324445a621e662c21cd9148e67d98329198b245b277a8998ffc84857b16b2d2
MD5 47bdd3248428bc68e0e1bd0f9201b07f
SHA1 ca88b8b7ec5889bcf5d035c7e905c045aaecc287
SHA512 dcdb4e683ebe429adea313e93eb855586c535b88d0df5b3efd29bc3f7b991953ff971770d1ec792a55afb5ff09f7d68f0a15361844e72f5f3508a0397f019576
SSDEEP 384:LkI4vUUmldvS8dhWp94z7j96ohiL4HsL4PoL4HFL4HwL4HQo4hb:4I4cRfHXY4Z6N4G4y4F4S494J
TLSH
T16772431545049EB8294FA78BAA367E02C37D573B60845C78F4DD8FC802FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\prefs-1.js
Size 12KB
SHA256 5d5d2026be5b2290d13218d3415296289195aa77cc42271611692b5893fc395e
MD5 2107a716db1a40837bcdceb073504f62
SHA1 46e16b997f36e2e5841005b277b2596d8249f73e
SHA512 c8dfac45faaad9ef22943f445d76c63c42cb869372dadfd13ce6cea736667961fbe3f6002a4985f4c9c2dbb6f15b9116dd59af36e83fc4c22f40cc7f4213da63
SSDEEP 96:xHvqtTUmK4qGqvfqrqNbzShSSlQdv9jCnoRpwoDRYJAwFOBw88Jlpuc8Van2w8LD:lqbKTRvfqrqASSoXLRyOBw88JCc8VanA
TLSH
T19E42CE7CA5448B7F25B2367DBC254D701961022B7EBFBCE709F89482481CF2441EAAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\prefs-1.js
Size 12KB
SHA256 685b4e694226b001770fb05ade2168a93b59a1d87de5ae61ae79d9da92da89aa
MD5 dc83118459de7eea258dcdd30b622444
SHA1 7009983914e23bd16f89822cb5a74554e8e032e4
SHA512 996a2c754699d396d2de7afdd86b01fbee737858ca02f07ea15078a5a5fabdd5b6935bb9573d6768e07e80ac4ef6d0478973b581478707dd3dee99ce6ac89b43
SSDEEP 96:xHvqtTUmK4qGqvfqrqNbzSESSlQdv9jCnoRpwoDRYJzwFOBw88v7ApyWfo3238Lh:lqbKTRvfqrqFSSoXLRDOBw88v+yWfo37
TLSH
T1E742BB3CA154CF7F24B6367DBC214DA01961062BBABFBCD249F884C1845CF2541EAAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\prefs-1.js
Size 7KB
SHA256 221e688e25f2e7d3d6f422abbcad20da0c1e0983f60fc6054cc0ffef17b3a119
MD5 e2f613908b1cf10c032106adaa1e746e
SHA1 a6e2d0d29208703ea16db77a28ed222392627617
SHA512 5221c5229fbff360172df5b2f19ee7fd56c149ea85bf03b30d10634250b66d7c195bd03b0bd4c9dffc8edce12ddf8fc149dbd94ad6adbd6a4e944879bbd45943
SSDEEP 96:xHGqtTUmK4qGqvfqrqNbzShSSlQdv9jCnoRHDBw88dvP8L4cnSqoLxGS:oqbKTRvfqrqASSo9DBw88oS
TLSH
T104F10D7891088B7F74B276BCAC6449315A72023BBBBF68D614B944C5451CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\prefs.js
Size 6KB
SHA256 01172338c7dc2f103b46759bcbdf0f7c943b8d4a16fa783f1bdb89fb084072f3
MD5 b90c9f6edbe1bf2d8b9f608d466df3cc
SHA1 aa48951ad2c34690bcef3d189f4d2dff15a1dc35
SHA512 99d38983b33754f7cf3f8ea5fbbdcec2004195700d7baf17195d5adadc6cfc2d7ac7a64e53776ad7731440606484d02d5fcae20efc63da29aceb494952bd1e59
SSDEEP 96:xHGqUTUmK4qGqvP511zSeSSlQdv98noRHmBw8828L4cnSqoL0:oqWKTRvP51LSSI9mBw88fZ
TLSH
T11BE11F7850088F7F74B677ACAC6888716A72023B7BBF68D710B95484454CF3882F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\prefs.js
Size 6KB
SHA256 655bba9fa91a01a28a8334fa693a686885510b1c12ceec2a9506163a282e5759
MD5 6f7c0b6bbc6056596d995f66700902ba
SHA1 07cf83ba843f0fb269cff328d9f48c8fe3b99a94
SHA512 88a51074f72b1d11a8f4cc1ea57fd8a4be1277fb11206af58082b4bcc546bc174330510f6e6ad49f7df8f34cb28338066c4c009ae9f70ce9a2a8ba360c2367f6
SSDEEP 96:xHGqUTUmK4qGqvfqrq1zShSSlQdv9jKnoRHmBw8828L4cnSqoL0:oqWKTRvfqrqMSSY9mBw88fZ
TLSH
T103E10E7891188F6F74B677ACAC6888316A72023B7BBF68D610B954C4450CF3482F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\search.json.mozlz4
Size 327B
SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
MD5 240589068f063f8f706378168230e975
SHA1 9531374a22dea374d032f7484567fb1b201af87d
SHA512 6d04629da44769a64b8808d198f3b3ba6388a0cd5441269e35ca39e7595c4e9abd32618f76ff60b79df80732838ee2a67455e195a801a67334a592b6b6240da5
TLSH
T169E07D3E9C15A0B6C2AC0AC35F0F494A0F58583A9324AC8C90B49D91557FF9B5248E2B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\sessionstore-backups\recovery.baklz4
Size 2KB
SHA256 978b7738d1e39065b0f3b1e1f9a9f850c9b7626bab12e61c10881b5c0ca68e90
MD5 f1789883d32d086362a2e55515372792
SHA1 28d26eeae536efa60e9bd54a3dc509718fbea6b0
SHA512 4820226693a26baa0eab86fb1146cbfdb051eb98d3fdb1ed948798a88daebfca06a1df6423e9ee93c44debdfa4718ac1e9dbbb275c6ba89fe5d286b60feabb8b
TLSH
T125518DF62C2E2CBB3110C495B86F0FD0C7B324240AB9A0686D6DA5230AFC62790C5F5F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 31520099c4f9224f181ada9107650269798ba5d8908a5c873c2195f4363d53f2
MD5 13faab66845b7d35bc03adac5522629d
SHA1 ffd39ab02ce3a4f02964b5f917b82d77139294d7
SHA512 ecaa00f22d1d5989ad6a7d982f816a2a61f85d058e0b5463a0ff4cb5f475b6d7c19d89bbd44dce26cf15f1e845da57cd1c3b3655f05f4ce79e705fedc1237b98
SSDEEP 96:x2brjn9yGnCd01VrqM4EcZZi6rLKJyiFZM:xcj9Hni0v/4OM
TLSH
T10B919F77DD2A5CF36DB6C9908CFF0F3857E3024159F8005C7A6D692212AC30A992879E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 7f70fefcc3db451bec434d260d3fbf73ae6caa563328b21267d2548591451fa2
MD5 97b0c1cc73b7484196eab7da79a64490
SHA1 3cf8de255bd20fee92033c7ee3786d66cf945ed9
SHA512 4eefeaf3f1749609ee3c32c2fac1149fa245a6bfbe100445b5b767141a2a61dcd95b7f849a4ada36eac5a30e8524449259143dc4c9b559e157011770bd12a68c
SSDEEP 96:x2brjn9yuWPCd01VrqM4EcZZi6rLKJyiFZi:xcj9TWPi0v/4Oi
TLSH
T141919F77DD2A5CF36D76C9908CFF0F3857E3464159F8005C7A6D692213AC30A992879E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\sessionstore-backups\recovery.baklz4
Size 16KB
SHA256 5757d976d3b1c2a96a3a2efabb27b4c703bc92f966a98fcdcf3a434b19f69fe7
MD5 810a347813e8d0e005f81bb051ec04b7
SHA1 2edd55402895a8f9bbf85095fdb7117e92c77690
SHA512 e87f17a4193f598d0a05203dfc6cc3d97ddc6b23ab8a5fc14ce8304322c6f1bac1b1d59183bf93b366a190a3396e4c59ef23392b8df4e633af005f5b6f62b798
SSDEEP 192:ocwH9uLfhY5Pez4suJQS2cKd+zvPj6v1iPdPLcACg6xGpVi6YMEBMnsnSRRnaYb9:LwH05Y5msaSfiumfS6gpqJ+N
TLSH
T12E72D11FF7706E82BF411585E2E48BBA5B834C288BF806089F1CAB1692E79160D2D197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\sessionstore-backups\recovery.baklz4
Size 12KB
SHA256 053d9cee4880c421c797d250afe38251843b6c6c023f69b8ccd7662ea23730b3
MD5 167421468130557763bb5ba9ca5db26e
SHA1 9416a5085c64dee3b91e7effe6546f4d03c19545
SHA512 38ef3fa7f08e5781d50631c61e90f721ef04de635b2d1505c4539eb7773eb60ef251767dfb42606a56758b8701ecf12fc0dfe7739afc37d6b35f68e16155d949
SSDEEP 192:AcwH9uLfhY5Pez4suJQS2cKd+zvPj6v1iPdPLcAC4j9CcRoi0v/48:jwH05Y5msaSfiumfaj97opg8
TLSH
T19542BE3FEB3B6C56FF50685848FC4FF95BD308204AF501483FAD1F1702A9A1588642AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3619099707vealluiddoamt-es-cbir.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\storage\default\https+++gamejolt.com\idb\3619099707vealluiddoamt-es-cbir.sqlite
Size 48KB
SHA256 b44af5521b949ed86c88b94afd3db9fe38305652b5daba88d34cb76e4f25ffcd
MD5 4202fa933dbc4e16e5bacc99f3f32597
SHA1 9d78d09422404995c1e62f5e6d28e18c5b22c99a
SHA512 29cf6ae38c49afddd8d742bf865e42dd4cca47a372a0f25c50a8a5d3d481f6ed5a37730283471248aee16dc19162769c435f67f67e9696a541e77ca27d931886
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEZ9C:Oa16S6CKnqlizbxV+2xVeU7X2B0+
TLSH
T1A6237E8E3F07B511C53AB0B178A08D52FC5E321D07222AD57990DAE4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.1MB
SHA256 e9a5091092c84646593c41f88a2e04da84cbedf85236bba1e0025d3449678a81
MD5 cbf4b60786d67b49adddee36a0832565
SHA1 d48c918c469862eca569604ad83cf5088f5c8e65
SHA512 8c81488adb7f7fccd858632507196a8a2bb07088c0c8b7b4922700e96a6c72a08677c9a72884e1d7de021c2884d84f31c8572234b84b2831cb454ff41a249e21
SSDEEP 49152:DLALylaeUT6QC5zYYS66CJ0SEteVeZWDxsF2s/2/vXwc2QfeLkTYuFOtNL8DllKy:68RItpgllKrOj/eK
TLSH
T16E765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\x9aidq83.default-release\xulstore.json
Size 170B
SHA256 9a064be7a03a41018e66e7987d47ffc3736718756ee071ba8494a49c857636d6
MD5 753a7b1790fb9e8554550383b467c37d
SHA1 536d12622b84acaf3bea2ee360afc4794d28bbdc
SHA512 041b4bee9558bb97dc67a7489696048ef2bb43d722d2e8b9ce2905080f7bb8bf80f699f05a2e58c5df45ca9342de0c748501432b53159823da46da434d83e6bc
TLSH
T129C08071216F98557D17CA8F12C525643D34496451D051D575E594B4148130F9D181DB
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads