f95e4e7d7cf0e8ea6b20121e91b970f01432ff4a240781b3ff83b87e946f68e2

Analysis

user interaction
yes
max time kernel
898s
max time network
428s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/08/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
search.html
Size 282KB
Sample260802-mxj48agh46
SHA256 f95e4e7d7cf0e8ea6b20121e91b970f01432ff4a240781b3ff83b87e946f68e2
MD5 7a371bbef11b6a2c21f32034b8658ca5
SHA1 7ec9f43774ffb5a13db6879ed59e48c4b28c1813
SHA512 1195b10b16d66ad39a829ad8d9161c606b71fd480f6c0df6d93be830f6f5c26673e45b3ce4dff7bd469b1854cb8383609ae207c240f06d3ab18dbaff272d6725
SSDEEP 6144:0J4yPbQ3ihZBZUMKVt5hOGtD/C7itvcCvrDOxJv7uRlGyGIfVJCB7VHctfwEfCM:zZRZwsCM
TLSH
T1D9542B26CA00572F0213C6E8B977775AB27E0C6DDA4F4894DFBB875802F5CE1B51E2A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 34 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4146128427-3460078792-3629963422-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3612	firefox.exe
Token: SeDebugPrivilege	3612	firefox.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe
3612	firefox.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 3612	556	firefox.exe	82
PID 556 wrote to memory of 3612	556	firefox.exe	82
PID 3612 wrote to memory of 4756	3612	firefox.exe	83
PID 3612 wrote to memory of 4756	3612	firefox.exe	83
PID 3612 wrote to memory of 4756	3612	firefox.exe	83
PID 3612 wrote to memory of 1608	3612	firefox.exe	84
PID 3612 wrote to memory of 1608	3612	firefox.exe	84
PID 3612 wrote to memory of 1608	3612	firefox.exe	84
PID 3612 wrote to memory of 1608	3612	firefox.exe	84
PID 3612 wrote to memory of 2152	3612	firefox.exe	85
PID 3612 wrote to memory of 2152	3612	firefox.exe	85
PID 3612 wrote to memory of 2152	3612	firefox.exe	85
PID 3612 wrote to memory of 2152	3612	firefox.exe	85
PID 3612 wrote to memory of 4672	3612	firefox.exe	86
PID 3612 wrote to memory of 4672	3612	firefox.exe	86
PID 3612 wrote to memory of 4672	3612	firefox.exe	86
PID 3612 wrote to memory of 3608	3612	firefox.exe	87
PID 3612 wrote to memory of 3608	3612	firefox.exe	87
PID 3612 wrote to memory of 3608	3612	firefox.exe	87
PID 3612 wrote to memory of 3608	3612	firefox.exe	87
PID 3612 wrote to memory of 3304	3612	firefox.exe	88
PID 3612 wrote to memory of 3304	3612	firefox.exe	88
PID 3612 wrote to memory of 3304	3612	firefox.exe	88
PID 3612 wrote to memory of 3304	3612	firefox.exe	88
PID 3612 wrote to memory of 1636	3612	firefox.exe	89
PID 3612 wrote to memory of 1636	3612	firefox.exe	89
PID 3612 wrote to memory of 1636	3612	firefox.exe	89
PID 3612 wrote to memory of 1636	3612	firefox.exe	89
PID 3612 wrote to memory of 832	3612	firefox.exe	90
PID 3612 wrote to memory of 832	3612	firefox.exe	90
PID 3612 wrote to memory of 832	3612	firefox.exe	90
PID 3612 wrote to memory of 832	3612	firefox.exe	90
PID 3612 wrote to memory of 688	3612	firefox.exe	91
PID 3612 wrote to memory of 688	3612	firefox.exe	91
PID 3612 wrote to memory of 688	3612	firefox.exe	91
PID 3612 wrote to memory of 688	3612	firefox.exe	91
PID 3612 wrote to memory of 4112	3612	firefox.exe	100
PID 3612 wrote to memory of 4112	3612	firefox.exe	100
PID 3612 wrote to memory of 4112	3612	firefox.exe	100
PID 3612 wrote to memory of 4112	3612	firefox.exe	100
PID 3612 wrote to memory of 3948	3612	firefox.exe	101
PID 3612 wrote to memory of 3948	3612	firefox.exe	101
PID 3612 wrote to memory of 3948	3612	firefox.exe	101
PID 3612 wrote to memory of 3948	3612	firefox.exe	101
PID 3612 wrote to memory of 5008	3612	firefox.exe	103
PID 3612 wrote to memory of 5008	3612	firefox.exe	103
PID 3612 wrote to memory of 5008	3612	firefox.exe	103
PID 3612 wrote to memory of 5008	3612	firefox.exe	103
PID 3612 wrote to memory of 5144	3612	firefox.exe	107
PID 3612 wrote to memory of 5144	3612	firefox.exe	107
PID 3612 wrote to memory of 5144	3612	firefox.exe	107
PID 3612 wrote to memory of 5144	3612	firefox.exe	107
PID 3612 wrote to memory of 5548	3612	firefox.exe	108
PID 3612 wrote to memory of 5548	3612	firefox.exe	108
PID 3612 wrote to memory of 5548	3612	firefox.exe	108
PID 3612 wrote to memory of 5548	3612	firefox.exe	108
PID 3612 wrote to memory of 1180	3612	firefox.exe	109
PID 3612 wrote to memory of 1180	3612	firefox.exe	109
PID 3612 wrote to memory of 1180	3612	firefox.exe	109
PID 3612 wrote to memory of 1180	3612	firefox.exe	109

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\search.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:556
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\search.html
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27100 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {2fe3ec6d-a1e9-4b51-8744-16c5dab4ff5c} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4756
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2504 -prefsLen 27136 -prefMapHandle 2508 -prefMapSize 270279 -ipcHandle 2516 -initialChannelId {0de7e34a-f42f-4c6e-bcbc-036e90e0909f} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:1608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3812 -prefsLen 27277 -prefMapHandle 3816 -prefMapSize 270279 -jsInitHandle 3820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3828 -initialChannelId {2c1eaa55-0614-4347-a615-180563b19dcd} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3976 -prefsLen 27277 -prefMapHandle 3980 -prefMapSize 270279 -ipcHandle 4048 -initialChannelId {565309b7-64ea-4fe6-90f9-f147665eb0cc} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4672
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4552 -prefsLen 34776 -prefMapHandle 4556 -prefMapSize 270279 -jsInitHandle 4560 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4568 -initialChannelId {c3a6a94c-3f56-47a4-b43f-93ba5e1701fc} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5196 -prefsLen 35013 -prefMapHandle 5200 -prefMapSize 270279 -ipcHandle 5208 -initialChannelId {c5b986ec-9a53-4369-9067-0be8d709e704} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5240 -prefsLen 32900 -prefMapHandle 5228 -prefMapSize 270279 -jsInitHandle 5328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5368 -initialChannelId {fcec7947-aa57-49d0-95de-1ffaec5bc094} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5724 -prefsLen 32952 -prefMapHandle 5728 -prefMapSize 270279 -jsInitHandle 5732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3196 -initialChannelId {5b2d2c88-ad58-4bc4-8ec1-ceed8ae1a48b} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5820 -prefsLen 32952 -prefMapHandle 5824 -prefMapSize 270279 -jsInitHandle 5828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5832 -initialChannelId {d9caf3c7-2f9a-4549-b106-e6b84fd65bef} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:688
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5980 -prefsLen 33071 -prefMapHandle 6288 -prefMapSize 270279 -jsInitHandle 5912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3828 -initialChannelId {a16f386c-9028-4799-935c-1e3557243e85} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4112
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6988 -prefsLen 33071 -prefMapHandle 6992 -prefMapSize 270279 -jsInitHandle 6996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6972 -initialChannelId {4c95e562-13be-4420-9781-6f98de5296f0} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5696 -prefsLen 33366 -prefMapHandle 4948 -prefMapSize 270279 -jsInitHandle 5740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {b102f34e-b26f-4ee8-96b3-f761bd42804f} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:5008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5784 -prefsLen 36656 -prefMapHandle 7400 -prefMapSize 270279 -jsInitHandle 5868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7320 -initialChannelId {4961b0c1-ce1e-4307-9cd8-10e5fe819e8e} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3176 -prefsLen 36757 -prefMapHandle 2996 -prefMapSize 270279 -jsInitHandle 2948 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3888 -initialChannelId {dd11d5e4-65ed-434a-856c-ae73685b0a6b} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:5548
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6180 -prefsLen 39877 -prefMapHandle 2948 -prefMapSize 270279 -ipcHandle 6316 -initialChannelId {1808ed58-3899-4d6c-b005-e8002677bdd8} -parentPid 3612 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3612" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 utility
    3⤵
    - Checks processor information in registry
    PID:1180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 ef16903f059d603391b4cca4f70d29eb497586a10cb9dff151897c82192f0fae
MD5 31dcf878fa1a10442f4427e11d903c2d
SHA1 ac7dd911827ae4b8a412b2318dfc5bc5fd10e123
SHA512 b8aaf1e73a2bbd100dd5450ffbb10f2e78d5b92d5eb3ade3451d8f69215a3c8d503bbdfa45161123d08c97240077a725e076296149bb5aeb0d7cdda538868ba5
SSDEEP 384:HwCe7iO024YxDL84KKDL849B7SOEAd9KVRaAcP+AWRMAUsD:QqZYxDL8lKDL8CB7S/AmVAf+hRMvsD
TLSH
T15E729E7E9F413CAC19A7C0E8C0F852D94C18B6A3DFE6806D21683D0DC794A6971F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5948E24416D61F80680B7B5CADF7704B9A8209D5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\5948E24416D61F80680B7B5CADF7704B9A8209D5
Size 111KB
SHA256 80cffc90ca362dc33b7a952de0d2817b6dfa91e3d3fe6f19076122d999e4b9c7
MD5 8c9d36658b33923b31061fb1f8cc5c1b
SHA1 efad949be726c8eec5bcfa3ab4c77bd2b7b528ef
SHA512 b119d39851d160c8e70e9d86f8e59b7e197432038689f3b87b8971978063285a8a48dfc9d60305dc61f8375b9d1731192c1531e3940820cd7f853959e454ed10
SSDEEP 3072:xwfwSGhUQn4QrOfcm54JYePWdOWd9DE83MTXnOJVG28oL6eb/toL6eb/tJ:W1yQKGePWdN3+l28ggJ
TLSH
T129B3CFFB050848182F319BE1B23236BCDA7B610FBCD9D9FAE1556D5158F0FBAA108E51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BC88343A7E0FECEF223F8C869042F5D494D3A46E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\cache2\entries\BC88343A7E0FECEF223F8C869042F5D494D3A46E
Size 24KB
SHA256 71bbdb3ee0b5af6096215c22b9c95e83c2704360d70dd3160a3e37cab477effc
MD5 e100068a930083cc7307e8958b08a4e9
SHA1 b7339f585e02ea6ccf976ce05ebd1f53688c7ab6
SHA512 90bbaf13ee6dcd4daf56fca0c18a15970ca75461308adb5782a2049e219566369aa2d6c5669d1165e5458589fdf25cff7c5d4282ce6a30f0d7a8d19ba65b13e3
SSDEEP 768:rtMgTb+tXC531Z6WvDi/8s7gyixvuY0fAi3ni:rtLKXgnTs2P0hS
TLSH
T131B2D1336F204A340E21EAC11E969F5C2D509AD76F69CDFEE5706DC159B44FBC39600A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 513c3224e69f951063b3d9977c76f159caed9b2610b2c01b5e73c8bf96a7f43d
MD5 f9e39899d5359f0b2550268a7c325389
SHA1 e507ccbf6926d4e97035b9e59c750d67f661c976
SHA512 1b27623f0336555adf6ee572ed47cb409556608708fef5b18aaa755cd0c6b2fd6670e3089d7ea1f9f3b8c5fc04810e4cf8a53d43f03728926e4f3e771bdd29fa
SSDEEP 1536:jTrliOm0/kDnB5GPzZrXZZgmh8iBgg/RGtUjXx9Cj3MQMpXfl6pidrExbEKlmsUF:j3ly5GPzxBgg/RGWzxJQ+g8rEirsUF
TLSH
T13BA39FF6DBA2893D54FFD4296B82883FFD267444B3A33019C863671462C6FB83675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 26KB
SHA256 1ba3d4f0504fe4f18140ebf87acc2e2e5678fe68cd7dadd0ae762f6d7de5aa5c
MD5 a199b5f19a08023c19f2992ab23701b3
SHA1 9350e2ea084688eed4cf6e7ab2212a207ff2f9ff
SHA512 09cd2d475d8211d1821ecf4c158dfbe9fda6dfb9d55203b9015402845e52c947240c75719a547d5851fab4c42ed2411cd32fd361e123c450fbe52e9bdd380fa2
SSDEEP 96:Ctg87uAIg5Z/BtSI56qPrH/4ECUyM/pLVRtyx2SgRyuZSgIy8tSho4LzHjrHjzpp:Ca87WQtVr22SMZZSXFtSh73fxM4
TLSH
T12AC296F33BB5A462F0E28FF0605C745C9C33122E5CAC9995C64494A702D1AE6D17FBAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 27KB
SHA256 a5cdd3aad32c2b555a49851b7374a8b63be58d6f1e41344d6d4853155fe272c2
MD5 46073a96972adfae8a3a4f6f1ea313a6
SHA1 17c9b8bda2c893310d0b0da64be5fb7f72313e59
SHA512 824b9e26287b3947e513f78d46d2468b5f03f0d1661bf2168b650a2cb8b77775d29c16ed09b1b596b79335f2a343fe3a1774ea1ead703c5354751688c8557002
SSDEEP 96:sg87uAIgf3NBzM/I568BJ5ltl6M/pbVyx2BdyuZBUy8tEjc4mmImdpbhpbKpbep7:j87YrQ322vZZOFtmTM4yq
TLSH
T181C2BAF33BB1A462F0A28FF06058744C9C73122E6CAC99A4C65494A702D1BD6D17FFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\AlternateServices.bin
Size 10KB
SHA256 487e153789609b14c0c14515588a029971a12d175a8906faa8948cb0d6fc8e4d
MD5 369cfd6f3a6b7a230a519ac91ef2733b
SHA1 4d908ef3f4dea770546c92ce2276cdba2e90a451
SHA512 75e42badee7ac96e575b15b0de72c608bf362cf574936ddcdd87ea997e2d5fe84509f48e9c6a9afce715ebca7ff4813ac2caf513883f61c55a5a04d02159cca3
SSDEEP 24:XuhMZY72kXyOFsuw7LGI91Yk9xkMS9B7V9Vvt:g9787/KGqMAZ/Bt
TLSH
T11222C5F36B72E422F4A25FF09059759CDC33022A1CB89995C610E4E706D1BD6D06EBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 d0c7a4f7114fa09b7e1092fea68f2ea079d3d6d177ac87bd0a9c8965ce32a53b
MD5 d8b670eecf90d90a5fd8b9000e538856
SHA1 dfe2019d963840569991c83ab16f1b4f043700cd
SHA512 8dade24e0841b162a7aaa21d83884bef411e3895e56cdbdfaf1022431d5144e9b9114b37b2c08d9079eaaa06295bc803fa8aed3e15f72b6bcf3e3a9c8887115b
SSDEEP 192:WOv5zbo2ZHoyj48s1d66Joz1zgCl6mc0d:tbo2ZHoyjQd66Joz1zgC1j
TLSH
T1F4E10FA4E628863BC419027BCDA61F444F36385B9C4E3F1A35DD64482D572DE368E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 97a15308fcdbf52f2c2eecf25b2ead6068bfa0bc1040bb55c64a4580f24fe6ed
MD5 f35aa03bcbf3c5f656ab6ad622af4777
SHA1 6e539219e0c479a054b658ae59dee76d6b9b2e9f
SHA512 f0cdbce3eb540440494efd3c3d988c019faed32505ed50bd65235ac9c39e037cfdff32ee5a658974a9edfef3229630cb38af74176fe26aa926a10304dcdbd435
SSDEEP 192:WOv5zbo2ZHoyj48s1d66Joz1zgCl6mc0d:tbo2ZHoyjQd66Joz1zgC1j
TLSH
T1DBE111A4EA28863FC409027BCDA61F454F36385B9C4E3F1935DD64482C572DE368E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 cfa766a1f39570a5db5bab0d6d5208f8f5478a7fc65e94305124012367386ea8
MD5 884599af21f9eb937191a8e75668d6da
SHA1 9db64172a17af0f6e753d678fe5d89c92f5089cc
SHA512 95938f36e9515c881d33c8efd82a8b123cf5e6f3c2105e87da02ecaa651de05f76cd8dd09dcc06e35ea0b9103b55df56e5b1e0998ed1300135019ff2e0852d1a
SSDEEP 192:NOv5zboA1Hoyj48H1d66Joz1zgCl6mc0dz:ibo2Hoyj7d66Joz1zgC1jd
TLSH
T1F9F11FA4E628863BC409027BCCA61B540F35385B9C4E3F1935EC644C2D5B3DE368E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 132KB
SHA256 09592dc75b9617d9447d3b2082531fb14b28d64842e29fb900af589801707f57
MD5 7909b2ca3c538d0dd699236f3ac71b78
SHA1 589811246e39146191c6f4fe16c06b808461a93c
SHA512 9d515f3aaaa3a6654147e5401d02405867350a277ade676f78d11a175ef4e544611461f8be9d3028ae55a566c30784077eb5128fdf569440991be914839d1509
SSDEEP 3072:NuEfNw2ak++aWB4Hn+B/9t4xNk6iyF7y45Wtn:NdfNw2ak++1B4Hn+B/9t4xNk6iyF7y4Y
TLSH
T17CD35AD4DB17407BFD2085BFB495673C2625B4314A599B0B2AEC04661DCF3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 0280dd1261830f466c8ee174ab4024cde1859fa087a2b8288858a6728352380c
MD5 90ad2db224ecd06eb23d4f180ea17127
SHA1 e6f55e097521527961e907e562eb3ac0e5fec550
SHA512 56d2b8f8f40bdf2b6fdf36a7c95360dca9dfd96998394a58f58dc4ff308e7bb4d0cb9f3989a9dee8babea6b98fccb7128b3eab834d685ab86bd3e01f297f318a
TLSH
T10F61D958F229863FE445413ACC860B511F303456A8AF7F2A38ACA14C1E5B3CD368D43E
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f98f88c748382a91e69fb36ba0a694c82197da186d3200dfe6ffadf34fa8ae2a
MD5 e1185fbee9d8e6a86e91938ff54782c2
SHA1 83452115115e7ef42b9bcb5026b405d4a47bb755
SHA512 7cf8c324be36e27c0561a29a057a74903c1afd7a0ffdadfdd2e0d0705274be82d2d446b429bb8ab06cd9371b986ef886f20672ef61942bb74af88339d3f11e64
TLSH
T1AD217CAC3AB94D2A6DC7F39C7841018E5B554E0B18C71D634D42FE8CCE81ADA71AA438
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\events\events
Size 5KB
SHA256 b7a6bd7d40802522b069eefea05da4d4cf203817295e3d964fc4998072e9c02d
MD5 0506be577d746a1d0fc5cbf08ef4ddda
SHA1 d869f34fc861d26691b8d446d5d89fcbfc9c3d61
SHA512 d04ca7bb1d60071634d882e52c05a5ac78f7b499abe877d0100aa107515fea78a5ddaf383a3ff6890e84c63b59e6f3c0afddc26c3c231bccd0bffce25426891b
SSDEEP 96:38C+npxX34oC8JdvZp8FdX6HA64yYsW/V:3NcZ5vb8rX6Pe5/V
TLSH
T135B1105C79B90C7E29CBD39CB84203CE4BE94B07A9C71C578C97EE49CD5568A729E028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35b6c6a6-5d72-4740-9d83-2d8b8cd42ecb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\35b6c6a6-5d72-4740-9d83-2d8b8cd42ecb
Size 886B
SHA256 2d68d841e11c15948ff4f8b363a23d388f8b59c9b4e05d67f70fcdd2f2136f5e
MD5 b9f569bd23210c087ec918dbc43302b9
SHA1 c9ca505f85560dbca2fca713a0974ca91ee22c2f
SHA512 bb256239ef2867e8bb2002455b2f7d9419d7acfa6ff36b3e8ee6bb4dac824d03954f0ed2276af9d2eea1116e0bbc4d5ef686520459ec68f99bc07a834a607f9a
TLSH
T1711104818670B6B2CD78929BC9A537568B94343384CA5C0C7DA45B080DFF52D6266707
MD5 SHA1 SHA512 TLSH

Submit Download

3d99f5bb-c996-4d68-8257-0cd8e039347a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\3d99f5bb-c996-4d68-8257-0cd8e039347a
Size 2KB
SHA256 0d663e8f6cdd704b81c073d809306efdfdaf9f6c6f46b4ff1a7a8b4aaccb66f9
MD5 82b02c12a0d34b47e5867abeb8c97d6d
SHA1 c98ad0120a878914f095d2b90f4e3d12d0aa5f43
SHA512 9d2734a3192b90b23e449157e5516e71af3bd9c5cf226da53097d24d862251dea1c706ae7f52d564af03d936d2bb6b03eb66a69ef617b4f46878e1f2ce629ff0
TLSH
T13941405C35745DBA9DDAF18DD442234F83E0494304C61C476E61CE48CD9A6AE337E42B
MD5 SHA1 SHA512 TLSH

Submit Download

78ce9423-b30b-4621-9108-2a0a98c4647b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\78ce9423-b30b-4621-9108-2a0a98c4647b
Size 16KB
SHA256 8589a8e5e9b8aff24a405c376766bc73f798ed2d5e133c106fac5ff32d471f6a
MD5 af636839942f717c5d8708de70ebbbc9
SHA1 966e23d92c5ff211fdb46fc8fa2daf803f09a87b
SHA512 c012b1658d1c348c8d85a1dadc7f1a33f945d80d07a42a54f837a3d327fda7b5e2a3f06cde1deb87d9e54156d9a865bd251cd0d3333075dd66ecffa18389e6f3
SSDEEP 192:sMf/dsx1rHPQnz5bYs2vc2wWLg5ApkmyQD09E1k7Py4M+eQtWyu6lBlU11H1wyfy:sM/5myQI91Py4M+yyvsVRSSlPiPxye
TLSH
T13A72D9166860457A8791E39DD4E8BFC3E1F628CF4C418FCAD7E4BD0869DE06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a034459-5122-4fe9-9e8c-8cb9ed7fb1f2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\7a034459-5122-4fe9-9e8c-8cb9ed7fb1f2
Size 235B
SHA256 81ebd0bb5689b83ddc273ae36c601ebf8ed01825dac1b313b77f18846e6841bb
MD5 f2f2a794956b73e04d9ecad6cdec0075
SHA1 72a34a39e4a325592ee94400e6b4014de07f0e50
SHA512 0532e2d836253d91dd55f831686f2c8cf3610085536c8f470fe2d37412ff041ba19cb0fc35cf2f5a0b587a053bd23b21fa87c3f00ef4ad3ccc50475ad9080a2a
TLSH
T192D097842498632E08080F0AF0E029D230988C3318625820C6620278A9B8DD881A191A
MD5 SHA1 SHA512 TLSH

Submit Download

badd5d3e-afc9-44b5-ae7b-ed8715bf5567

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\badd5d3e-afc9-44b5-ae7b-ed8715bf5567
Size 235B
SHA256 14ab8fdf62cc9718241c335a143939fb87ffcb045fa1e678845042de39e5bf68
MD5 8759f527ece7fd12484fc4c6a3c4c5bf
SHA1 1ae4109443d3504818c19d248e5b914cf33b9393
SHA512 32c03b70dd4745a52d11ab1d7d53ed759a7cc57ee3ba651266c27b6f5a06f13d8737564378ddb61371e0e6cb02603d14ae4a8fb25015d964738351a19ba217a6
TLSH
T18BD097C21A98EB6C08080F06F0E069CAB0C44C3320A15810C9A10438D9FEFCD4251C07
MD5 SHA1 SHA512 TLSH

Submit Download

e39fd39f-4442-409a-8a0a-5f050dfdc7cf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\e39fd39f-4442-409a-8a0a-5f050dfdc7cf
Size 23KB
SHA256 263c36a3a6dc381eb22016ef2e76402691cfd11a9d5d0f806e29ec6d36383d48
MD5 74e09524ed4c033f964d764784c98000
SHA1 d10d5226a944454a1fde7269575226e63c750228
SHA512 03b6c6131de54f51c05f6e1bfa4ddad23397dd927165fc1c4d5ae66a7adbe8cbc7b109d757157e096c50358e8e885cf2e4ed22728cb331165b179c0b13ed6ed3
SSDEEP 384:PJqE/LGotZewAQAO581yhqF4HBrsSxEkGqbCltd/k:PJqE/LGotZGVOK1yh44HBrsSxEkGqbEQ
TLSH
T136B2D9EDCE1200473E65E52AF2E5EDAB2057293209CDC7DD6AFD483A27C69BB1117318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3151f30-8ada-42e6-bc7a-80bd26a20e4d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\datareporting\glean\pending_pings\f3151f30-8ada-42e6-bc7a-80bd26a20e4d
Size 883B
SHA256 be4226562556683188389209c7bc389cc282b7417d09e42459e1149450e09834
MD5 3082fc86b59abf4c043b362f200f76f0
SHA1 fa789b5373f6c3ef104558b8b52267d50de5ecf8
SHA512 51741f8cc1f372f398a119df2f0bd47b60a93c1bfed950acb9d747f87d0a5d2f7c991951e781b4794460e0aca808eab2618d323261538e898a3f7779b7901025
TLSH
T1F4112381A675BAB2CD68924FC96537068FE4343384C94C083DA15E140DBFA2F636674F
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\extensions.json
Size 16KB
SHA256 9954d0685659df18b5f47276e6d7f204e1503db60ffd46207520b18990ddaf4f
MD5 25c53a98be0263ce6862e52f6686c6e3
SHA1 fa0041e5d02e9b5b50db5e69b3e8086143ecb99e
SHA512 908a060818a8d876b65d5c3d930c1fb4d289579b833438efeb3198715a9f22cecdf7a69301583f7e51414463aaa5e560ce53e77294a7a35d80a32785bb28d126
SSDEEP 384:zkI4vW9UmldvHM8dhWa94zjD96oqL4HML4P2L4HuL4HGL4Hpf4h6:QI4ARfVXn4J6D4m4U404M4d4o
TLSH
T1DF72411545049E78294FA78AAA36BE01C37D533B60845C78F4DD8FC842FB5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs-1.js
Size 6KB
SHA256 957dc09f230bb791f37bc12f22245966ba956efd48a325bb72ded92dfad68492
MD5 f46476bdc005a246a8820d8c30a04b74
SHA1 aa39ae23fd79e822e1b620cede8284755224abe1
SHA512 525cbad7b3948517d287583bda9541385cee0a1eb30f97b4e0c1bd1cf256e8a55e3017acc79bf78b7c767775a0ae787850539fdc29c6d14520ec36e83233992b
SSDEEP 96:xHLkUTUiqGq2fkhI1zSDSSlNdv9jon+H/vukBw88P8L4cn+rM:KVR2fkhIOSSfnukBw88A
TLSH
T17CE1307895088F7F74B677ACAC6488315AB2013B7BBF68D750BA4884050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs-1.js
Size 10KB
SHA256 879fe1e46771dd5c6fc5ee7c517514eab72100f3b6751d072d227dd7a6c0dba8
MD5 d11f418de3b46a5f1674ac95184b64e6
SHA1 e7f919756cc9624dbf33e380904c85fc5e843d20
SHA512 edfcbf30a93d3298a11648266fe2613d64b58a966cd51b868f4283fb380bc58ceec6640dec4fbed8bcffa98672b88962311dc07b20c44cdc703b3ccd4941e090
SSDEEP 96:xHLkJTUiqGq2fpBhImbzSDSSlNdv9jWeR2n+WRX0ibvuJaaXqOBw88mHIryEJR2Y:KER2fLhIZSSKeWR1u0OBw889yEJR/
TLSH
T1D332CC786144CB3F24F6327DBC2549705AA1023BBABF7CE345B95481450CF3585EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs-1.js
Size 7KB
SHA256 e92aae748969cd781153e78e157f9fce369366e9c999b4cb7082d3e4e040b9e5
MD5 243cc1d45e3029e85df999a02a53cb3e
SHA1 f877908188853314ef0a6d2a0cfc479c6bb60b4b
SHA512 62adf924ce6ce93a149b9bc630bdccd1a3adac83692a38293c6b5e42e4ddb85087dc921920b684573aa1d983e46b8065682f59b751b5bd41d416bd164a8e2504
SSDEEP 96:xHLkUTUiqGq2fkhIObzSDSSlNdv9jon+H/vukBw88P8L4cn+r5GS:KVR2fkhIBSSfnukBw88n
TLSH
T1A7E11F78A5088F7F74B676ACAC6888315AB2013B7BBF68D750B55484050CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 6KB
SHA256 dbe50c806b775348d37fbbc2b2a62df098bd3f8e6a8a8706986883eee84bae31
MD5 d70b349193d8d951f2429a4a45b9a7b4
SHA1 b6ba9c12a235c44376fd4e93e12d88fcfe4d2c97
SHA512 7ab0e8dc4b2e8e7b4132a3c8aeed0d800ef0e2b9678475db415c495f2f1c2023eabe18310c2e3e2c81932ad3dd3fb7b90d17e97a6f1b36c612b454881a1b96fb
SSDEEP 96:xHLkUTUiqGq2fkIj1zSNSSlNdv9jon+H/vukBw88P8L4cn+rM:KVR2fkIj8SSfnukBw88A
TLSH
T1D7E12F7895488F7F74B676ACAC6488315AB2013BB7BF68D750BA4884050CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 7KB
SHA256 bea83d5bfbe62b9848ea248f301f43a5c584e7539f867e4145d5fc356d353b6b
MD5 2146305774d14ec7acc7ddfc13b14736
SHA1 8f4baf19591864e3dc7f147108e387cf844f9b2f
SHA512 3b11690ae393aa1a4fad273ceb050e39d99c32b721119e1c7beb523c813f1357fc87dec9d93cca30244dc8c4b30d594f5c4fd841fd20cf6c3429de5548b0a380
SSDEEP 96:xHLkUTUiqGq2fkhINbzSDSSlNdv9jon+H/vukBw88P8L4cn+r5GS:KVR2fkhIySSfnukBw88n
TLSH
T174E11F78A5088F7F74B676ACAC6888315AB2013B7BBF68D750B554C4050CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\prefs.js
Size 8KB
SHA256 10b75d3dc9182bba801a72aaee5881f1396241e74b1a9ae96ac9f6e88800b6d4
MD5 1fb4b7156c591f2777ae2ede20794aa0
SHA1 d11e353fb76e68aa6d4df32380cd84bbbd12c432
SHA512 e59ef03935428b2915f34596e51267b6fbddedff9e9edee9f1ca7cb930ce32edb40a448a70891efddfabdabec2b099ce07a07be6f1a035eba33358393dee94f9
SSDEEP 96:xHLkJTUiqGq2fpBhINbzSDSSlNdv9jWeR2n+WRX0ibvuPKKBw88mWAq8L4cn+r59:KER2fLhIySSKeWR1uHBw88/
TLSH
T14802FE78A104CF7F74F6766CAC2449315AA2023BBBBF68D750B95485010CF3485FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 e69bfb8ff63e60f59fcf19a1c11ded2b11c6ae06a10f04e3579d6ef0d9e96d65
MD5 ab7b463e1034b6a99f3efaf5f6a486f6
SHA1 51b2ebeb31948147f6cf306eec022ded6dccf748
SHA512 0ff344aa2632ce32547d29f655cd2e91c9de94bcbc1bb539831ff54a5b81d66feb29a65daa5c75e27090e4cebb05d19d1e4cbe3bef78869dd0f51ee2d212444e
SSDEEP 96:qTfzWpL8clICMC6njUH3SkX1QvYahxcNV0ErvKu0jyj:az2QX3QCrYahyNVdvK9jyj
TLSH
T156918E579AAF3FB535608922D8DC1E3EADEDE803447058C4CA6406C15B1B19BBEED05F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 799c5e964f6b7527e5a1137a989682aeb1e3a20fd58e7593d3971293ebdbcf49
MD5 b7f60f0397c193b6cb637d65fc8841fe
SHA1 ed812f5159702fde1d6c143be00a643902fae180
SHA512 82ac1d7177aa93a39b9d6354672e2614f4b5971cf422ccc81496711e48aac463643704c925da6b71939fe2eb0209ddad01f6f87b15bc34855a7700e54490fd5d
TLSH
T1BE617DB33D1629FBB090C9315C4F4F9685F1246164B540A5FEFDAD61818C70A70B965E
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nw1cs7ok.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 1a3af2af647cce57205bde1d1f769c2d93ee8b4c193d3740ba50f79e761a2ed2
MD5 affb3107c259782e3d294f19638e70a5
SHA1 3ff39d5c5fda445781e7655412b7a5e3fc4f0fa3
SHA512 d80c8b62c1604f2febc8fb2322978cb07e58210059b1ad6ce57d88a21e1df7c5b0c5839840bcda86ac7469338157c6240b356382124e0968c9f501e42f730f34
SSDEEP 49152:6Dmg8uki5lUv2D4uNyFeaKvgmRBbFOYrg/Qf:2m9uki56v2NkeaKvgmk/Y
TLSH
T1452639E860D1A257F3814073A64553EB21FFD00C6037DE084BA956E9A4B8CDF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads