hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
302s
max time network
305s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 07:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260809-hts6hawxaw

Score

7^/10

discovery persistence phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
101	raw.githubusercontent.com
113	raw.githubusercontent.com
125	raw.githubusercontent.com

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 39 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	5952	firefox.exe
Token: SeDebugPrivilege	5952	firefox.exe
Token: SeDebugPrivilege	5952	firefox.exe
Token: SeDebugPrivilege	5952	firefox.exe
Token: SeDebugPrivilege	5952	firefox.exe
Token: SeDebugPrivilege	5952	firefox.exe

Suspicious use of FindShellTrayWindow 17 IoCs

pid	Process
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe

Suspicious use of SetWindowsHookEx 22 IoCs

pid	Process
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe
5952	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1264 wrote to memory of 5952	1264	firefox.exe	88
PID 1264 wrote to memory of 5952	1264	firefox.exe	88
PID 5952 wrote to memory of 4664	5952	firefox.exe	89
PID 5952 wrote to memory of 4664	5952	firefox.exe	89
PID 5952 wrote to memory of 4664	5952	firefox.exe	89
PID 5952 wrote to memory of 5320	5952	firefox.exe	91
PID 5952 wrote to memory of 5320	5952	firefox.exe	91
PID 5952 wrote to memory of 5320	5952	firefox.exe	91
PID 5952 wrote to memory of 5320	5952	firefox.exe	91
PID 5952 wrote to memory of 2124	5952	firefox.exe	92
PID 5952 wrote to memory of 2124	5952	firefox.exe	92
PID 5952 wrote to memory of 2124	5952	firefox.exe	92
PID 5952 wrote to memory of 2124	5952	firefox.exe	92
PID 5952 wrote to memory of 1364	5952	firefox.exe	93
PID 5952 wrote to memory of 1364	5952	firefox.exe	93
PID 5952 wrote to memory of 1364	5952	firefox.exe	93
PID 5952 wrote to memory of 3592	5952	firefox.exe	94
PID 5952 wrote to memory of 3592	5952	firefox.exe	94
PID 5952 wrote to memory of 3592	5952	firefox.exe	94
PID 5952 wrote to memory of 3592	5952	firefox.exe	94
PID 5952 wrote to memory of 252	5952	firefox.exe	95
PID 5952 wrote to memory of 252	5952	firefox.exe	95
PID 5952 wrote to memory of 252	5952	firefox.exe	95
PID 5952 wrote to memory of 252	5952	firefox.exe	95
PID 5952 wrote to memory of 2484	5952	firefox.exe	96
PID 5952 wrote to memory of 2484	5952	firefox.exe	96
PID 5952 wrote to memory of 2484	5952	firefox.exe	96
PID 5952 wrote to memory of 2484	5952	firefox.exe	96
PID 5952 wrote to memory of 1824	5952	firefox.exe	97
PID 5952 wrote to memory of 1824	5952	firefox.exe	97
PID 5952 wrote to memory of 1824	5952	firefox.exe	97
PID 5952 wrote to memory of 1824	5952	firefox.exe	97
PID 5952 wrote to memory of 5392	5952	firefox.exe	98
PID 5952 wrote to memory of 5392	5952	firefox.exe	98
PID 5952 wrote to memory of 5392	5952	firefox.exe	98
PID 5952 wrote to memory of 5392	5952	firefox.exe	98
PID 5952 wrote to memory of 6116	5952	firefox.exe	99
PID 5952 wrote to memory of 6116	5952	firefox.exe	99
PID 5952 wrote to memory of 6116	5952	firefox.exe	99
PID 5952 wrote to memory of 6116	5952	firefox.exe	99
PID 5952 wrote to memory of 3884	5952	firefox.exe	100
PID 5952 wrote to memory of 3884	5952	firefox.exe	100
PID 5952 wrote to memory of 3884	5952	firefox.exe	100
PID 5952 wrote to memory of 3884	5952	firefox.exe	100
PID 5952 wrote to memory of 5544	5952	firefox.exe	102
PID 5952 wrote to memory of 5544	5952	firefox.exe	102
PID 5952 wrote to memory of 5544	5952	firefox.exe	102
PID 5952 wrote to memory of 5544	5952	firefox.exe	102
PID 5952 wrote to memory of 2784	5952	firefox.exe	103
PID 5952 wrote to memory of 2784	5952	firefox.exe	103
PID 5952 wrote to memory of 2784	5952	firefox.exe	103
PID 5952 wrote to memory of 2784	5952	firefox.exe	103
PID 5952 wrote to memory of 4548	5952	firefox.exe	104
PID 5952 wrote to memory of 4548	5952	firefox.exe	104
PID 5952 wrote to memory of 4548	5952	firefox.exe	104
PID 5952 wrote to memory of 4548	5952	firefox.exe	104
PID 5952 wrote to memory of 2768	5952	firefox.exe	105
PID 5952 wrote to memory of 2768	5952	firefox.exe	105
PID 5952 wrote to memory of 2768	5952	firefox.exe	105
PID 5952 wrote to memory of 2768	5952	firefox.exe	105
PID 5952 wrote to memory of 1344	5952	firefox.exe	106
PID 5952 wrote to memory of 1344	5952	firefox.exe	106
PID 5952 wrote to memory of 1344	5952	firefox.exe	106
PID 5952 wrote to memory of 1344	5952	firefox.exe	106

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://google.com"
1⤵
- Suspicious use of WriteProcessMemory
PID:1264
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://google.com
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5952
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1956 -prefsLen 27097 -prefMapHandle 1916 -prefMapSize 270279 -ipcHandle 2024 -initialChannelId {a628947f-ea68-4d85-9c5a-4ad76230f143} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4664
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2424 -prefsLen 27133 -prefMapHandle 2428 -prefMapSize 270279 -ipcHandle 2436 -initialChannelId {7953fbb9-191d-47f8-b300-276f058033df} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5320
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3920 -prefsLen 25164 -prefMapHandle 3924 -prefMapSize 270279 -jsInitHandle 3928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3936 -initialChannelId {172327af-85d6-4e4c-924c-4a99a7f4b4a7} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2124
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4072 -prefsLen 27274 -prefMapHandle 4076 -prefMapSize 270279 -ipcHandle 4156 -initialChannelId {7003b8bd-f1e8-4a2e-958c-09bb1674aab5} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4412 -prefsLen 34773 -prefMapHandle 4416 -prefMapSize 270279 -jsInitHandle 4420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4432 -initialChannelId {ddfd9bc5-f782-42ad-b138-2ec8e3583b82} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4976 -prefsLen 35010 -prefMapHandle 5032 -prefMapSize 270279 -ipcHandle 5048 -initialChannelId {8bd79757-bd5c-45f2-a794-d34692ee6fba} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5540 -prefsLen 32952 -prefMapHandle 5544 -prefMapSize 270279 -jsInitHandle 5548 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5568 -initialChannelId {e21ae162-2c5a-47ae-8e6a-76c8a86cc447} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5796 -prefsLen 32952 -prefMapHandle 5800 -prefMapSize 270279 -jsInitHandle 5804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5812 -initialChannelId {6cee7908-6ef8-43b8-b772-95979a6ffe8f} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5828 -prefsLen 32952 -prefMapHandle 5832 -prefMapSize 270279 -jsInitHandle 5836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5848 -initialChannelId {3270ca85-aae0-43f0-9694-3614abd86127} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5392
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6176 -prefsLen 32952 -prefMapHandle 6180 -prefMapSize 270279 -jsInitHandle 6184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6192 -initialChannelId {5b514561-4008-497e-b8e4-474250ed078a} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:6116
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2668 -prefsLen 33193 -prefMapHandle 4400 -prefMapSize 270279 -jsInitHandle 2724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3836 -initialChannelId {cee6780b-af70-45d0-ad8f-1bf203795bf9} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2868 -prefsLen 33995 -prefMapHandle 7336 -prefMapSize 270279 -jsInitHandle 7340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7348 -initialChannelId {1d786438-4df7-4480-8ded-9ca4ed0c0613} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:5544
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7792 -prefsLen 37677 -prefMapHandle 6980 -prefMapSize 270279 -jsInitHandle 2788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7244 -initialChannelId {c389e33c-dc57-4860-9aa9-8662c2144b0b} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:2784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4900 -prefsLen 37677 -prefMapHandle 4904 -prefMapSize 270279 -jsInitHandle 7564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7784 -initialChannelId {dd97e464-84cb-4004-8715-3b5d784e8569} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:4548
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4564 -prefsLen 37677 -prefMapHandle 7228 -prefMapSize 270279 -jsInitHandle 5312 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5936 -initialChannelId {90328f81-8168-45a2-8d77-42302d317ff0} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:2768
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 3004 -prefsLen 41023 -prefMapHandle 5320 -prefMapSize 270279 -ipcHandle 7924 -initialChannelId {e796ecbb-da9c-4b25-98f0-fae61c585708} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
    3⤵
    - Checks processor information in registry
    PID:1344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 8252 -prefsLen 41023 -prefMapHandle 8240 -prefMapSize 270279 -ipcHandle 8292 -initialChannelId {2e8e8457-a00b-45d0-809b-329291a31411} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 utility
    3⤵
    - Checks processor information in registry
    PID:5396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8716 -prefsLen 37677 -prefMapHandle 8724 -prefMapSize 270279 -jsInitHandle 8728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8536 -initialChannelId {76dcc88f-11ac-4f85-976d-2b89c812c4b0} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:6096
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4876 -prefsLen 37836 -prefMapHandle 6624 -prefMapSize 270279 -jsInitHandle 7176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7424 -initialChannelId {1936a120-2819-4a26-bd01-19bae5da2594} -parentPid 5952 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5952" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:1768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

21185

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\cache2\doomed\21185
Size 7KB
SHA256 d3e1180d9ba4f0d2d6aef977e024f1015aa31bee136d0df3d4ea5c055d3549aa
MD5 89af5194b606485d03d5467028d249f1
SHA1 24bb45614b2b4855087028ed08967310408257d6
SHA512 d27e652fffa69f281ceee14ee39e078c8a4ff24ae4177420a45195818a9cbf5bb2b16905bed56506b40c173f811948459bb198a350ec8b002a75d1d658f5913a
SSDEEP 192:9DawzVTmoft2DwMWzamHwMWzaiWU587N6sHwrl3Hwrl+:9DaQ/ftuwMBmHwMBu87NVC3C+
TLSH
T197F15D331EF231352971A3E8DD0A87D15E209483FFF0E8FE7890795A15842BBA86B04D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 85deadc2870b56a8c3edead26ee6f786ced5800a0da1911fb344f7fd035520aa
MD5 df9ae4a02e122368717b4e71d6225216
SHA1 861aa5e3579257c0126e91008bc2295ff55d9862
SHA512 abfd6aa56bfdd287054bbfc8576e2427d59afb681ab6370830def801b918ca7e9ead1a94b5fb6ad17122078988bd83eacc41b370aa4a2959ed67a856de7cb7bb
SSDEEP 384:HwCe7iO024Y7fDL84KKDL849B7SOEAd9KVRaAcP+AWRMAnx8:QqZY7fDL8lKDL8CB7S/AmVAf+hRM+x8
TLSH
T103729E7D9F413CAC25A7C0E8C5F882DA4C18B6A7CFE6806D21683D0DC798969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 ee97458ba7434c2dfaaa9f9e75e229fec0397d7d3a6369baee5ecd65c06d0a19
MD5 dd994c3d7d15230b6bc4e6f46a29a71e
SHA1 4e3188c5be0531a658a950abf89fd7cacd5a02f1
SHA512 495ea90be3eba5849f104d625cf6f6b3659701df6f32cbb74d5e75b43dc8f0db704c50d7675a467bd1ae6f08a92fe53b4fb1de005ca6b0e7bc2f71140cb5cc73
SSDEEP 384:HXkRyiO024YGDL84KKDL849B7SOEAd9KVRaAcP+AWRMAJ:3mZYGDL8lKDL8CB7S/AmVAf+hRMg
TLSH
T148728E3D5F003CAC25A7C0ECC5F982AA4D18B767DFE680AD21183D0DC698969B1F508F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B50098C3EC451D0180E298A59099FF19ED878378

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\cache2\entries\B50098C3EC451D0180E298A59099FF19ED878378
Size 33KB
SHA256 24e4cabb0e9ec8c29de252c9b2c76cb7296c90e7c5d29b49dcc4f43576b4e1fe
MD5 f5f3d1588ce3eedf781dc905803d47f1
SHA1 2554b9fce8a400617e1624eff00fc748d0931195
SHA512 39065e0ee9ef91b26a2f41c2d7a76600ebb4dd1678a7b4cdd48a2d76d7824710ede59056875fd9474078ff18d29ea934650fc69999cbdfb10d73190be2034c3c
SSDEEP 768:ZNMnb1SJ+vvTeXyHJsPOOETz5qmawDqBIqf8h48F87H9W:ZWnbAJ+y2GOZTFqmWWqfa4K1
TLSH
T1B0E2E0B35D5A19414FD19AA3D88B75DE3C2579438FF2E8784090AD285CB6BCEB0B7131
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BDD5AA7CAC9DFB4AC96D78D54A74BADAD87A3C00

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\cache2\entries\BDD5AA7CAC9DFB4AC96D78D54A74BADAD87A3C00
Size 14KB
SHA256 2193f41e1cfbee0e84be49f118e1d0c8e0ceac3120249ac7b11ae74c6325e2d3
MD5 335d2bf305db3d54980aa82516f395be
SHA1 1ce7fb8601d8ece4a50874e11636f2336c88086b
SHA512 849301cb7efab4d23e0ca8c32cb488398c5bd17437a6543b0791bedd7a799886df6cb978a2275ddd6a9f1aca93bdc08ae9658b659e960ea6fd6c4ad122105250
SSDEEP 384:5NHKhR+WIWsMVkbiYbj6qgvDiJKHS8h48F87Nj:fgR+WIgWiMOsKy8h48F87d
TLSH
T1B9629E3F9FA52A4A4ED1D0E0C25A1ACE2C84B443DFF3DCBE608C3945DDA55B0B40B645
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NkGfxbKTvDLzgz8IYKOJdPzQEMTvUD4+MhvmhtNwA84=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\jumpListCache\NkGfxbKTvDLzgz8IYKOJdPzQEMTvUD4+MhvmhtNwA84=.ico
Size 17KB
SHA256 e6746d435cd3b86d9b44d3d6024d930802a222487959b4528340c865e7123b83
MD5 7ed42e7a8d8dd4c644f720ca55255c1d
SHA1 57ec200158089ecd167f3f977f0dd9f341694449
SHA512 fab60d87b2f04e3c9e1001094b7d403baf1801d3e73051f0998539256071cefbe3a0e1ddca9f80ae3ac7ff42757ab14917eca8e551a49022e12dde7a4f96dd4e
SSDEEP 384:U1hzE4JpZKSHetBVjqlz1D47MNsQ+PJ2YvzMPi+:+hzE4JpZKR/9qlz1D4GC2Nt
TLSH
T14E82E12D64DAEDC55D61AF14D2DAF1327018A6CD973283C08293C35797D93CA4EC9BB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fiyrtffj.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 c02129d27fb4a544532ae226964e7e8e22ef4a2c05836e3d52128920eb4cfcd4
MD5 b2a66dd99e6141aca875e4df16876d10
SHA1 7f65c73edf32c1734ff91f9345f3cf42a37541cf
SHA512 dd30e2f0c60618ede903a75351fd0327b3aa2252e01cfa99913ed5891e6af3b92f8c3cb652ac1747d1183cf7052a7f181e819a1f0961ca56c4e475da6124d397
SSDEEP 1536:jTrli77lLD//4v36UwAQ/PCenX2/gM12sD7Z00MZ+nc0nq+WB2eqok9cTrSDq0Lb:j3lq4v36UoRTMLxHcpbqbY+20LZHUD0
TLSH
T1E3A3AFF7DFA2897DA8FFD02CA6C1893EFD222444B3972009C9536654A1C6F786379648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmp-x2q.xpi

Path C:\Users\Admin\AppData\Local\Temp\tmp-x2q.xpi
Size 4.5MB
SHA256 bccc51a773150af4af6e1fd62c7bfdeb7238b79ff2381b998fa9f2e38f64786a
MD5 819b08d5189f034081a73111abe8e1ce
SHA1 1e09152269f169cfcf3e0723fb71d839484fd6d9
SHA512 10da0ffe1755cb5d36a07e70ce49954761ef92b8a6894267f8997d5c6ef4155152af6c6f7a273ce3962323e710d183d5425312ec4e2d041125630fea67bb14c4
SSDEEP 98304:R3dkJ+ca8VMq6iaRxaXSc6DCJ15GX9mnulXzI+k3WlVBfzaGirZxjJ32w4Tuy:Jd7ca8VMqERcicFJ1I91lDI+JRzXsxVO
TLSH
T1732623FAEF265C6AC7778031A1429050E4568980B3A1F11EAD05F65DACC69844FCAFFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 19KB
SHA256 1b2dc6e91fe79a10e13745f36d6514651bf4fceb52609402ba7e57a07bc26b53
MD5 f5765ee05b43a5c2eeceea47e77d0666
SHA1 7d4dfaecd8124928861bc3874117fb3b043c5c30
SHA512 343d55355b0bbb75f0fdf15bf8a2fd77d09e280409f4ce130231cefb48f74edd6504e8de951bcf07b52f866866c688d9c11a302ee99628eb3965ad7366a79d69
SSDEEP 96:aoXd/8z/2vPloAfPCR0fPzDhyKPqZ/JPLsYSCIYSUPk/rRIJpPBZJtY:htI/2Hl9XC6XzwGQLcRsk/NEtBlY
TLSH
T1D39200411BF72A55F6F39A32BE7177126F33F8025E169A0E8141624A0E33764896EF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 19KB
SHA256 f3490ee95373f4bbf7fe059d0e1972e34e916022a1558de2984316ca8d2cd11e
MD5 6022f700c7775190d5eee4c8f5a1ab42
SHA1 ada4cebf0f1bbfce9e70797ca802bc51a4ebb541
SHA512 05328252e9a5106e0dafde751a2f918fa84c92120b85e728a769ad0c5565f3fc90cec59639f9e6e80f99d0f673949e8079bdb9bee691a7c13cd1dbb90a259140
SSDEEP 96:lt/w/2nzDhyqloA3CR03zZlOmHiqZ/RLsYSCIYSX:lto/2nzwql93C63zamHioLcRX
TLSH
T192920F410BF72A55F6F39A327E7567126F33F8025E269A1E8141710A0E32B64C96EF73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\AlternateServices.bin
Size 21KB
SHA256 7e421f19682137d76a6c962b1c01b21818e22f7c4fb2bf67cfa2c17fba3c2a26
MD5 f98d7b9b11959c928c4346003f60a038
SHA1 bc4cc38d740c902b6b5f9c920a2ded1c832ef9f5
SHA512 b8b2d03c5608fe23fff7d4cf06dc6b147b3c00c3b2a8a2dd3bfe6e5b3353c5df2305e68f1a3b09c5e9f2f736f8fe2f4401ed75e84f54981c1f56f35850e492a7
SSDEEP 96:U5nznhn5CXByr3BRPBM/pe0GrGbGzBrV4M4LOzHBfc:Szh3BQN
TLSH
T17BA2E2F766B16472E0B19FB450AC7149DD33021915688DC8EB12E4E70BD2BE4E07FBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\AlternateServices.bin
Size 21KB
SHA256 d54b4438bcd6eea9117ae2bded1baea67409c88b169158402eede6ab6f091ed0
MD5 913da4bbea0eb98dadc65d7d307ed759
SHA1 9f1b2f1914dc71430f4cd38cf3d3f6e4173401a8
SHA512 6831478bd9cfa73d67a72ca3677b52bc7ca699483b4df0ca8fd4bd46fbe288a485314fc7aec636011c52ab4ef65e19ee6ab8bc326bbe97bbf695950c17d21cbc
SSDEEP 96:U5nznhn5sByr3BRPBM/pe0GrGbGzBrV4M4LOz:SzhfBQ
TLSH
T1AAA2D1F766B12472E0B18FB09068714DCD33131915688DC8AB51E4E70BC2BE5E07FB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\AlternateServices.bin
Size 13KB
SHA256 cce2cb4c271e9a2e66ddd79267c67a5fc5956c20f28f7c020c29ff449f95591a
MD5 a171655c6dc30de357e0f3ac434356a2
SHA1 d47162b53e50893d1f45f733632f696ee06183ab
SHA512 9ba734831d32c74dcef777fea3cc96fbb9e6ddbc7c102aad3eac203448167d642b60d6e4fdcd3eea6e2b7774fa92acfdc4962d762bb14a65fbf0614f26a5d49c
SSDEEP 48:cmsH3x4IhBT0q59yIlM/poT9GrGbGuBr:HsH3xJhBT0q5ZlM/poT9GrGbGuBr
TLSH
T1A7526CE76BB26472F0A28FB09068B08DDC331724157899C4DB04A4E706D6BE5D17FBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\AlternateServices.bin
Size 17KB
SHA256 84e874efee30db5a909620e19fb31b76083ff230ed8f0e2388fc212e3d0f18ca
MD5 cea4fd2eceec331ce52d46ca05ec46eb
SHA1 e18513bc665f80447b6f546c3fe3a393154805c9
SHA512 f2f6d3fb5c140f93bdef8f43aee7c93306bfb7ea5f990a05eedad2561c5c538b54cdbef17156c45f3af4af6364dbe7ce7f2996a75eae16fef27f945896a7de67
SSDEEP 96:Unznhn53xJhBT0q5ZlM/poT9GrGbGuBrU+C4:UzhTQ
TLSH
T1D5829FF72BB16463E0A28FB0A069744DCD331725157989D4DB04E8E307C2AA5E07FB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\SiteSecurityServiceState.bin
Size 5KB
SHA256 110288639b62c0c40a95730e5aa416cf1f474137dccc7c74fbb7b931d841aa91
MD5 fbca4b0a0097550761151f4056debb20
SHA1 1a77bf1e2dceafdc0e5afb712da0983d72bb39c9
SHA512 97c63fccbccbc79780b0a08b4898563d5dc9f8ccddbab0c51d8b346dd60a2a36a1cfd3c1b5487e716f5858790fdaded6474be500387543a7fed303b9fa286c4a
SSDEEP 48:8+o/sKDpTUOI5vtH0BolnnFVC87Un808XknbsKu8nSX6:5I/IhnfjFXQkD
TLSH
T130B138BB5EA5E163F6D19E30A0FEE2A88C736351B49580C4EC0446C722D4FA720BE325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 75KB
SHA256 8cb03db208a02b118134061bf8788ab0eec8da66d0b235f3154125c2957d1f4a
MD5 9af66fe7c076f9861b67d1bc544027c1
SHA1 0668e99c814d06c6598b3ec168dd52e1eb4da6e0
SHA512 29e39e0151bac3a2b4b25ad976bd050a86a8019115f9fe735d1b016ed6ecd30c33b62acdaf245a7818024dd9fb75f0d0d1c447e862a0f2412b103b7b5f9b68e1
SSDEEP 1536:KYCVuUIujMPXE3yUPL8Bho7Dge19MYYlwXB:KjVYSM/ExPAY7k6MYYl0
TLSH
T12073D190EB1B403FE82485BFB495672C2625F86149595B4B3AAC00751DCB3FF2D0EA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 797301c7cf4e516ebb802e18cd82e8e6b4c587b78bd487796e8985fcadbe2d5f
MD5 99de15eaddebf4c16fbd8e29523416a6
SHA1 efb9338f66bd929e27a1c602185bff46825945a6
SHA512 43a47238a9869e85da2417bc50017e39692d8e6d4853ed592ee192b65ed07cc90babd2be2cbfe25b5768902731cb679555a70ae9163690f1069c5bc6631d9fd0
SSDEEP 192:Kw1d66JoztdzgCl6mc0d6SOv5zbo7rC9yjHs+:Hd66Joz/zgC1jYRbo3C9yjH
TLSH
T1FAF11064E639827FC44512BBDCA62B454F39389AD88E3F1435DCA00C2C572ED768E5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 1cd6605b97003ae94980980fe674987201314d18500b2194b9021d447bcff30b
MD5 a25873468bd736fd526ca814a3a8ef28
SHA1 d616cc0a17381d14f9f7ca8b0cf157ab5a8c5cb2
SHA512 9dd1ae347ee0ccdbad2a90c01f63018e05958adc7d277fd5cc18a9684a7ef8c1e0dfe5c148db449b6b2dfd988e4c2a24c0244519cb17ec2fd6a4a04e409179fc
SSDEEP 192:Bw1d66JoztdzgCl6mc0d6SOv5zbo7vC9yjHs+o:Id66Joz/zgC1jYRbojC9yjHI
TLSH
T1EAF11064E639827FC44512BBDCA62B454F39389AD88E3F1435DCA00C2C572ED768E5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 a21497cad09e61aeb270c128f744a2c575e90d6270e7942493e4cbd22b671634
MD5 3f8301dd3238e8ad6612356cce929fa6
SHA1 ce98f1ca29cc0d02c9821b5f42f98c6425009019
SHA512 ac69c9a34241f88c94497fc04aa27ef21520bee72810942afdec88e3f02ddec402c858388845d6572f0789189cc9e2fd4cfe4235849f73d17f60755fb84e27b8
SSDEEP 192:Kw1d66JoztdzgCl6mc0dlSOv5zbo7fC9yjHs+o:Hd66Joz/zgC1j/RboTC9yjHI
TLSH
T145F11164E639827FC44512BBDCA62B454F39389AD88E3F1435DCA00C2C572DD768E5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 fbee67650b5eac959ac567161eaf22e45d4abf3b5cc3ee5f3fd56cc160895053
MD5 c6a70cd08a057fd564d0c7cbe7134a13
SHA1 f8ae47e2bd8096c0d0082eb3cc03f7c1a04bcb9c
SHA512 2ac83b649a3a3fb1f6cc940df187d6133887307d9e7628f84fa0c6168ef1a0526b13bcb8ed182f6e36a07f11d218a1ba82c550133d68c33d70b9f59bc06942ea
SSDEEP 192:HSOv5zbo7rC9yjHs+Pw1d66JoztdzgCl6mc0dz:HRbo3C9yjHyd66Joz/zgC1jd
TLSH
T18FF11164E639827FC44512BBDCA62B454F39389AD88E3F1435DCA00C2C572ED768E5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 0c761300c6c5dcaf8af3924c5bad3c0daa08a6ca96163f4a0f86794aaa0fac14
MD5 07a0a8fcd50cd48032dcd30990ed2b0c
SHA1 7d1e899cce34c6da0fcf7c9ca81b984bbaa85ede
SHA512 c1b0b01e80442e0cf6126a8282932c909494841993809edd7a2ddf10a31d883de4b424be1f1e46110182dc2ed7ad86eccaa24cfdd983b98266a0a5d62f115e5c
SSDEEP 192:Bw1d66JoztdzgCl6mc0dvSOv5zbo7eZC9yjHs+o:Id66Joz/zgC1jJRboaZC9yjHI
TLSH
T134E12F64EA29867FC409027BDCAA2B414F39388ADC4E3F1935DC640C2D572DD7A8E5BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9c2235d81416cde3a9081d14e8552ae2b91229e903038ff51c1e87b56aa49ced
MD5 33a2599d413262a15f46036837d24805
SHA1 8a01b9e92e509a4c67e74801eda0fbceaa12b884
SHA512 bb25b492122043e7b8a66090989024eaded36cffb01c62373e86dad18465b18c7383b6c6d1c98544391a39a19ce0afa520adbf533ebaa7c9227f7e63ca97d3da
SSDEEP 192:qSOv5zboKbC9yjHs+Uw1d66JoztdzgCl6mc0dz:qRboKbC9yjH9d66Joz/zgC1jd
TLSH
T1DBE11E64EA29863FC445427BCCA92B414F35384AD84E3F1935EC64082D572AE7B8E5BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\events\events
Size 1KB
SHA256 27b1b1ea1a88f9f2816e5612515a3c88b4e8876c35ba27bbbe90ec55223a4bf4
MD5 9c77a6b64c3db6530566a86ca195bbee
SHA1 211eda046e7485bdc6968de455e6600f5c250b71
SHA512 9912ded9e0c89bf01359919fd331dbd57f684561afcd0e1da939c9955d7ae76dc4feed3649ca4c32aa905132e531d51cc220275a700b2941b4fe971971e4ff40
TLSH
T17721488C39F98D3AD8C6E29C7445038E53164A0A05971D478E03EECEDE91EDA326A439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\events\events
Size 4KB
SHA256 60a407c5eb6b603c721495e5ce57670248a193bc7f8b2afe3ff783339c786027
MD5 a07ec6fa42d2e7bc5825b3b74b27de0b
SHA1 f87db8e665d4dc9c467e1036b26985c62bcb7728
SHA512 09a4764955415677b597a0c2e91a387215707751c2b841069f5ff9bbfced0dfa5fe800768698bd711110aa9682ae765ac6d590efd2be900f2e55f3bd616c5b88
SSDEEP 96:D0KdCdSIRg/437UrX/4HJHj4cF6wFnMNL:Dhki/t/qJHj4cF6wwL
TLSH
T154A1BF1D65AD5C3AA9DBD3CDB84903CE83464A1284821C974ED7EE89CD56ECF311F12A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c71be23-5e71-4b74-a7de-6bc214be20a5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\0c71be23-5e71-4b74-a7de-6bc214be20a5
Size 16KB
SHA256 173c3a85db9fe9e4629983c821b74b81564052a36d398d48808c22361ad2da14
MD5 e2861692580cd98d59c79f067a377102
SHA1 7b6102628480d04d871ddfbfe02c6c81b6d349c7
SHA512 42d6022baefe25534f45e856e7d3f1027fb79e2ebbb71dc720f8f75292ea3751111c43fcb578fcd8c2fbdac33fd181ca61e7133298ee4027a690f8963b8e9733
SSDEEP 192:tNJCHGYTSKc+Bz3eT48RipAtwmG6p+9AZvnnDun7K5hRe6zx8e211qg7BtjsfCmo:eGPKKyIDun7KrRe6d+qMOCmTDw
TLSH
T1E472FB56682045BA8591E36894FCBFC3E2F534CF4C419FCA9BE4BD085DDA0AE112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46253436-afed-4e03-82d0-16d1f18c9497

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\46253436-afed-4e03-82d0-16d1f18c9497
Size 2KB
SHA256 4aa7495c7c1cbeef285d566aa8d27a6f0d8c9fff0eaaebc84ffdad51f8bfc1df
MD5 1df3f0598179c810648699e06246cc1b
SHA1 cf104d21b04cf5d31347913e838294bef4410e31
SHA512 be40b8be9b744750943f9c3e3197c2f1079096a7603fc0ad40f0eefa0b9c35a8092d16f17096fbe34f879ccc014076f3fe533868bf458e20b9504d74e41d5566
TLSH
T1DA41535836B88D769CDBE14D949237CE97A48903448729832E41DF0CCE9269E736A92B
MD5 SHA1 SHA512 TLSH

Submit Download

56983703-8255-4fa1-a8f7-a938efc1f692

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\56983703-8255-4fa1-a8f7-a938efc1f692
Size 281B
SHA256 2c47db8670c9f8263046f18437c1341e22cefd84983f32a5e29622abb673b168
MD5 0f8e64c0a7feea84f7a7f25f4bc365a9
SHA1 43730fa104ac1e487d6662045f7f92b4603ebbfc
SHA512 331b7e0be0e8ae75c7534854a90f37afd7f8ec2be4ed4a60e78c7dbcd4a1d0da1509adc1a4e31a56d0364cad971e8f934a2b4f1f563b922173e74a898a8a35f9
TLSH
T163D0EB803CA823EC0C6C0F17F0B13AE730200C3310E098109590062055FECC98140827
MD5 SHA1 SHA512 TLSH

Submit Download

8404ca2c-fff8-4cb1-a009-c6a4dea0c900

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\8404ca2c-fff8-4cb1-a009-c6a4dea0c900
Size 1008B
SHA256 e0ffc37f35b2d6a43e4926bc8af89c8823ec376c0a5118574cc8aa7c043f5303
MD5 888ba383dcb4685131a177add685aed3
SHA1 e37574572674c279369f3aa912ced714ec8ffa0e
SHA512 687c42b786c489220e5bbcdc404193e4138ecbe3327b6a5c2e34b0ac72d56b9277cedcaea9f24ff04aa55c03ad1651ea6522dcd0b29972e58d79006d5a39bb32
TLSH
T1A51132408635B2B28C79D29BD9A83B9697A47817C0C25C047EE45A044DAA42EA767F0B
MD5 SHA1 SHA512 TLSH

Submit Download

8bd01f24-0869-43c5-a16f-9dd6418af59a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\8bd01f24-0869-43c5-a16f-9dd6418af59a
Size 235B
SHA256 c36ab03a0d391d93e24ef154e6145dafd24b011c3c56dc8d8050eb3e8ce6e058
MD5 2916310a2e269e96cdf896149f5677a1
SHA1 9a60c06f5d33e6ba7d899328438c05112a1fcfa5
SHA512 0e932c63c7afa48f93e0c6f7e8c96728fd18d7c23c32598b29718bf8ce3fbd4814ec62e38b172e07a3c4c116b33d1318fd30ea13537b6489308a8d69b6246aec
TLSH
T109D0A795A498679D4C181F0BF0A069C631948C3724A5A850DA61457499FBDC9525286B
MD5 SHA1 SHA512 TLSH

Submit Download

9a803655-89f0-4448-9a94-12a20ea7d4ed

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\9a803655-89f0-4448-9a94-12a20ea7d4ed
Size 235B
SHA256 45d706084cb141ce84877ad4d97dcbd42737ac58a957f57c354effd6261f3475
MD5 0dc81904cbf2a27a151415abbbc717d2
SHA1 a4d40962136668365126743ab760c3ac9b26bd07
SHA512 bb63e31a213499a4c52293c0edb60d0608e4c9166a6e10e22cf989cc0d3be33d935b1324623d3b2e11fa7242fc54722a1afccc04eaf4ef8dadad28e29aa7152e
TLSH
T181D097822898736D08010F47B4A428C230844C3318B86810CDA5527589F99C64112E1B
MD5 SHA1 SHA512 TLSH

Submit Download

d1ebb633-8295-4ae8-a136-e8648e3f8648

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\d1ebb633-8295-4ae8-a136-e8648e3f8648
Size 11KB
SHA256 36bf41ff9c27c168ca54698bb7d0e42b3da5062eaefcd209f306d030c75f8fbe
MD5 b5e984a815336d44c7df43af9bb2dd70
SHA1 d92a55ec1c8b8fcad62c4ffa880d32e4d7a173ec
SHA512 e2e7a46d00ab74d99b46ce18302a19f02f2ba6851fd8608c5e4f6fdcf4fd651b0445854a8626b14f41e392389dcde70107380e1c6cb88fa23a6a28fdca557e3c
SSDEEP 192:fADGK926/F/OJHTKcFAwkZEFK2r1SGY9yTiY4eu6:Ed/F/OJHTKcFA1EFK2r17VTiY4eu6
TLSH
T13532541E62BD5C7FB9DBD28D944A038E43894743D0C21CC78DDBEE498D5AA8E321F466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daa1e89d-4e3a-4442-8269-1b82291849c8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\daa1e89d-4e3a-4442-8269-1b82291849c8
Size 883B
SHA256 de00d1b35cec293adf3a0f492856135560005acf4868cb4dd65a687effc98091
MD5 f2dd2f74d2109be5fa65c9296885af33
SHA1 9f58db0cbe6f58b485aed7ed8047108539e0a2a3
SHA512 521fa0f8f9b1ae202d8714f6ef612ecf0a421f19c1ed1511ee08a817a933321ad9295cf7e9d3f326e6d67c2b6be93bd5fa2248d62d60b1ddc984233ab1f1ad9e
TLSH
T10A110050D235F5B2CD78C24B89997B4687E8B813C0C654143EE44A084E7E51FEBABA0A
MD5 SHA1 SHA512 TLSH

Submit Download

dc298807-fa03-4170-abf1-5c30b3c55c5b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\datareporting\glean\pending_pings\dc298807-fa03-4170-abf1-5c30b3c55c5b
Size 886B
SHA256 a9fa780d7e73c6e1074ad2078d37fbb9a5130a68f3c9dc7fb8a3d310b7dda285
MD5 68301593b4c1eccc74e0beb1887b1930
SHA1 b124a3f04568ded69d162e68761d608d48712a3f
SHA512 1dcd8f8488927e3f2271f7182fc0ddca908ae2f1d27684b6b00db2169ef675a1c2f9c2e6be28d46647de9ee71702bbec864ae3eb21f596cb2c958fa8bbc8e3f5
TLSH
T15E1167408635B6B2CC79D28B99D87F42C7D87413C0C608047DE41A144DBE41E9BA7F0F
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\extensions.json
Size 35KB
SHA256 c50b8bf911bf408a25b25ad854a2d69cacbfb09c06c0f7f3aafaf536fec0fe5c
MD5 466d54f873a704e6ae2b9e2305587853
SHA1 f82637920067cc9388045175ab441e9d773312ae
SHA512 d726d450324f43188b0bef38878709e221839a326772e51c06712e55215f197538d9f83d99059a296b79f1b9d885fe363934508269f6cb39489e9d6351fca7d0
SSDEEP 768:7I4eRfiXi+4Z6C424l4c4J4kLtWcFUOTnm0oivS8x:7CLIe7m78x
TLSH
T1C9F2A63909489F792D892ADA99377C4551AC877FD0490CBB64AE9F8D02FC27C47BB10B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs-1.js
Size 7KB
SHA256 d97590006ded7af6b515a2f96864f74a3276473e2d4fd49fe589dcbb836c510c
MD5 8cae9af7bfca310438db64743dab0654
SHA1 ed17dc9c218a759fd22fce1ffa678920e344f8be
SHA512 22267bbb4b99425b817a0f67f49c3691911b66be0e95df40e259fc3b22f303503b9bbbae0d163be65dafc70a77e50bf7f11fb9609d4edfbc6318aaac05046d55
SSDEEP 96:xHTGUTUEqGqSvfkLRObzSXhySlvdv9jbnNHVTHvLm9YA3Jw88u8L4cn5VPcGS:oHRYfkLR5hySTVTyKA3Jw88vE
TLSH
T1CFF12F7855188F7F75B677ACAC6888319AB2013B77BF68C640B644C4015CF3446FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs-1.js
Size 7KB
SHA256 b168e914f25e0809d53d565ac1d45e89379f4ba53122c79169cf420c750d2fb6
MD5 f9402d15bbf63d1deb354ea36173660b
SHA1 d21e77bede23fe782e91d34cf04d1ee3e64ba852
SHA512 f9c512b43f5532e3974dd7acc7aea49c12a041cb1a895cb4da3bdc802aaa5856dc187ce9c13fc3d4ff292184e4297e4a6ae2fea4113fbdd5e7beb5784c507c02
SSDEEP 96:xHTGUTUEqGqSvfkLRObzSXhSSlvdv9jbnNHjHfm9fBw88u8L4cn5VPcGS:oHRYfkLR5hSSTju5Bw88vE
TLSH
T142E12F7855088B7F74B677ACAC6888315AB2413B7BBF68C710B644C5015CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs-1.js
Size 13KB
SHA256 ddb8a8d2303e33dfaf4279a9648559c80f5af5f5a1c37eadc6e8d120c795dea0
MD5 7a27e07f528578ef84c1a24567507f6c
SHA1 f965a2f7bcc4bd81515e35d63b118a3f5125bb6c
SHA512 8f2fa95bbcb7d6e026167c2dd8dfab16a5fe3dcbf2740615ea3313c38883cb66216e000bd7dfc86d90a1dfa8760ed08f38b4bfd15ced1abb4148b95b4bf8f709
SSDEEP 192:o2RYfHLRRhySpPLRGGT6fOA3Jw88HcC0Ml6PfDG:mXRZT6Zwpgq
TLSH
T13E52E0389144CF3F64F3327DAC2949715562023776BFBCDA16F99882085CF2491E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs-1.js
Size 8KB
SHA256 5efc6d8ef6fdca9af68dd99f4db7d58f1882125ec96334238b6df3eeba9407b4
MD5 2dfb8a850c17471d6eeb3d20fb94054a
SHA1 79ac545139c25826690cea0e6159ba5449d7ead9
SHA512 6535f8c63cb3e4a6e620c46be2398dbddce55c28d0b1cebff73353dfbe2d35d40115d911112e47cee6075ef26281d8b33ac91db2ac682194e53d908f11829e0e
SSDEEP 96:xHTGhTUEqGqSvfHLRNbzSXhySlvdv9jbnNHGqBTHvLm9kA3Jw88HW8L4cn5VRcGS:o2RYfHLRmhySTGGTyiA3Jw88H3G
TLSH
T1060220785148CF7F74B276ACAC6848319A72013B76BF68C600B658C5055CF3445FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs-1.js
Size 6KB
SHA256 7f896a733e1f8f6a0411e0b72c408b5cc5f1879a1e77d97203a03762f82d7a4c
MD5 dd339bb7d9131ed4d8f863fa07ee28e6
SHA1 f3e83fcf0954bbf0951b22e2569d4d85b99e3110
SHA512 193f308278645ecd507f91e152aef86ea8bf285f4eb4d4e64fa9b609e45fcaef8ea50c51a7617345a47cd1ca30a839ee7a0b30e629ed603fb36935793389f65e
SSDEEP 96:xHTGUTUEqGqSvfkLR1zSXhSSlvdv9jbnNHKm9fBw88u8L4cn5VPB:oHRYfkLRqhSST35Bw88vT
TLSH
T1C1E12F7855488B7F74B677ACAC688C315AB2413B77BF28C610B654C5015CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\prefs.js
Size 6KB
SHA256 c0970ef9fc4d2d183666f490cf28ce24ce608d91f1500c28bc45f4e223fda1dd
MD5 70535bb1e4fa9478539db78f2dd21065
SHA1 e2b43bf2531d15624c283458b517680595446295
SHA512 366615df01ef202095dd225d59d4c6b81b54f378c4faad9f1187fb8221b76c00d9659f40498e5e9c178ab1feb73efecaf97025de35fd2ac55fa5cf89578fc8d1
SSDEEP 96:xHTGUTUEqGqSvfklN1zSLSSlvdv9j0nNHKm9fBw88u8L4cn5VPB:oHRYfklNmSSQ35Bw88vT
TLSH
T1E8E1207895488B7F74B677ACAC688C715AB2413B7BBF28C610B954C5010CF3442F9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 c352219206a92b96724954b69ce1f8c4fa6380d6de1b127596abbb5f94757003
MD5 27c6271a1a012fed5644014f02c8fa8c
SHA1 93ba65db85cfa5f6db38338d2cb068afbaa363f8
SHA512 ad2ebb31d685fc596045a4acb7a0e9effc20f0075ad1bd5ebc58fcc5e98ce47b4ffd14d0c840015e4dcfba4b4424d6a28111e87b103797452df3ee41193d2c25
TLSH
T13121C68344B62EF53AA0814AE08A8BF2CB5E342244BB58F0E19D8D4219AE54DA38620D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 7KB
SHA256 a2c2be8f66e77e05018e8d298842cfecf8518ee8a5cf10980819d6532e888d7a
MD5 da32577dcb7e0701dc5d11d184915bdc
SHA1 47f9933a2fc52c130ef1a8f07d2faf20f949735d
SHA512 5877de0b98520421b0716819e4605974fbdef4921aabad5da339c51584a30c755e55afe7f22f7f03e980d33be07def24147af0d8242c577ff339048644683681
SSDEEP 96:1ufYQ9evrxMV1RCd01VrqM4EcZZi6rLKJD+ILo3KxHV6BkNXEMJ970xQMZk0zf8d:WYQ9BV1Ri0v/4i+ILxHhKg9AQMZkcwLj
TLSH
T1F9E19F7708197EC3F4F181FE24B38E93CBB3104041E790D9EA654E32E18B64A0794D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 ca7c856451cd296f3f011bf434196b0d26611525e493dbcdf0b767b1da4f7a18
MD5 3352e19385fa311c64d07c80d2f984de
SHA1 da021fbd6953e428c799b66ac4a009581a34a67f
SHA512 d4ad59925d6ca30556164c60c0254f258a28453325e8e4defe89a51389dbcea88f5fbc927a8856978d9b2cd7c4d7422c10e96112462c4d0286215a8e42d10cf8
SSDEEP 96:5ufYQ9evrxMV1RCd01VrqM4EcZZi6rLKJD+ILo3KxHV6B81:yYQ9BV1Ri0v/4i+ILxHB1
TLSH
T166A18DB30D137DD37962C0CE687A8F508683101081AB10E4FA3E8E32A2DCA5E43A5D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 22KB
SHA256 74d7c5410315881fda32130fb350bfa963b62e0ad84167015152642663552680
MD5 ae89bb1742d4112afa6dff7e593bca90
SHA1 26106dd348907766d451499827942cac50c45cf6
SHA512 6c776b9221cff4ac7a56a0235fb4401eef7ea389aa6934cc8e5d85bc341923905b7a2140c1eb588eb1af6738562405d61d849afb36fbf3d5db857247e52e61f0
SSDEEP 384:2YQffRpgifxH8L/d7KI1p7RANIZCZa0mqhhagL3duVVvln7py0+0iCg2gpMBIfZH:2R3gk8X1QNIZCZl5LNuVtFdt+y1cMBI1
TLSH
T12CB2D06788A6B8C7ECB455BE34740E908BB32C00C0DAD551BB7E2666D5742CF4BA453B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 20KB
SHA256 0aafa5ca352858ddb8b6fac49110e35885b0bf3d4c3ed4e8d2780d8c0c43ee40
MD5 cf54a58a6b4005b0229040914290a7cd
SHA1 b5649f90d9888b8ebc93d496d09a7cf8359996fb
SHA512 f893966db93a2dc55ae90485526164fb2940db9a898317e024e94562c69600a44d15b1c36849f245c81e87e20e137c2a87f4aac9a5e8b8f011a3117facdc16ed
SSDEEP 384:qYQffRpgifxH8L/d7KI1p7tmqhhagXqduyVvKn7uy0+0iCg2gpMBIe2ZPdWzI:qR3gk8X1R5X0uytuyt+y1cMBIey10I
TLSH
T1D392C06788A578CBECE465BF30B90DA08FB32C40D086C951FB7E1672D5792CB4BA4436
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 60KB
SHA256 cf44ac02b68eedd645f8eb21edf3b473095acab76741df4e30821bd665522977
MD5 1971fdcb51ecb5f6e111fb16a890c1c1
SHA1 8aaa08ab11531e28982f503ec49ed74f24586507
SHA512 7b0e637a6e0e9531555854ee049b88794d52a611b01b405731f3da991f05a1f8d41d907eef75e83a4d2180258ec9791d8d98272c8afd77aa4f73f5fb2aabf78c
SSDEEP 1536:YgI7h36uPx+yCg1hRjl3L3W/+Ca6bM4Bi+At/htKrWGwa29IS:YgAhzPxvCehRx3Lw+SbxQ+AZx9IS
TLSH
T1DB530292699B7CB71FBFB879246949488BA61F41C811D454E81D39B082FC1CF5FFC81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 60KB
SHA256 cb04a77fdf3446e7405447e961e730272a528bd04d736ed7d540053b4b1b8aea
MD5 1ec25c4f659d31482e5967c8501e3071
SHA1 33d1c7bd2e1d803e7e20bde118435d88cf9736d8
SHA512 b255449f6c8d1810032d9b97cbf5d64eddde0bddec1f8c841631890f403b5bf56139a8301babfd8f5a90020b23b9c5c392eea1620d31c5696b522e43782dccf7
SSDEEP 1536:igI7h36uPx+yCgfsRjl3L3W/zCa6bM4Bi+At/htKrWGwa29I8:igAhzPxvCesRx3LwzSbxQ+AZx9I8
TLSH
T1A9530292689B7CAB1FBFB879246549448BA61F41D811C454F82D39B082FC1CF5FEDC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 62KB
SHA256 1fad58415a0fb4fe569147a54876360e43e5e88d4fc518b441a1d6b8843edb93
MD5 70009d876c748c90e13c306dbb9a8f9c
SHA1 dcfec797c224987efba1612a424985288f79f04d
SHA512 a86577cf3a9331193e794b16dd8de55e4da6458f18318411f56a9ef3307cec8c9fb3c1f17ff0b47362aca31a3508f4856351f5cf6e1910ce182c62ec1f806efe
SSDEEP 1536:hgI7h36uPx+yCgWhRjl3L3W/eCa6bM4Bi+At/htKrWGwa29I3:hgAhzPxvCPhRx3LweSbxQ+AZx9I3
TLSH
T1715302A2649B7CBB1F7FB878245549488FAA1F42C851D454E91D3DA082FC5CF4FEC81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 63KB
SHA256 3a8d3f865c486e536307d73e393d19f99fb846bf85dee173d3962343a94f3dd5
MD5 5994a64db722b036a3ef65f5eb7bc08a
SHA1 557e02139c93314dc1dc460832a1b6747b327f48
SHA512 4030329f25cc43613a3df2c0dc52b656bd8902d3e665a03463c4ca2a0bab595a7ba1d62b6478e73805a66276569418ea2ba94764581741c945ef970e5e603eac
SSDEEP 1536:sgI7h36uPx+yCg7hRjl3L3W/TCa6bM4Bi+At/htKrWGwa29IRpd:sgAhzPxvCihRx3LwTSbxQ+AZx9ITd
TLSH
T1825302A2649B7CB71F7F7879646949488F9A1E82C802D554E81D3DA081BC1CF4FEDC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.baklz4
Size 64KB
SHA256 1dec9701bbfa527dd5b4035582481e2634ae05d2980cbda8214fdb14c7227556
MD5 987b5963c3055f47471212ab8bffb1d1
SHA1 4239f6bc2e2c1f9905521d268715f53092a351ab
SHA512 eb1769c1c005d316165d572dc63e9eeb085d90b3076853d78f33ffb75350ecd1c01746241a7073602708641caded85586d1109efad967183b223477bd7051fc4
SSDEEP 1536:MgI7h36uPx+yCg4VhRjl3L3W/eCa6bM4Bi+At/htKrWGwa29I49BM:MgAhzPxvCBVhRx3LweSbxQ+AZx9IqG
TLSH
T1955302A2649B7CB71F6F7479645909488F961E93C852C454EC1D3DA082FC1CF4FEC85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\sessionstore-backups\recovery.jsonlz4
Size 61KB
SHA256 fd50839f0f66bc36066a534d3eb29421355d5aad128ac60e19f00bb6f30fbda2
MD5 0df132249a8838c31b01c8cd1fb9bcc8
SHA1 5177b94beddde2c89df69386e082fb07c9ca9d5f
SHA512 eea29502b4ea9d6ad44d804d3ca2de813090dfee06d52b5c5395a91697b4e57c0cae64c5c2cdef50080f912676b88cf65bda7d79328d491da22ea01c110b036a
SSDEEP 1536:kgI7h36uPx+yCg1hRjl3L3W/eCa6bM4Bi+At/htKrWGwa29I+:kgAhzPxvCehRx3LweSbxQ+AZx9I+
TLSH
T19B5302A2699B7CBB1F6FA879245549488FAA1F42C851C454E91D39A082BC1CF4FEC816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

usage

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\storage\default\https+++player.vyla.cc\ls\usage
Size 12B
SHA256 f3ca7c0296618b5f35970b528f779caed533dd9d6470982a5d4cb719e62ea829
MD5 096bcf635ec5cbb2bd06c48517046be9
SHA1 7ccbfe340bc8c74a9aed8b75def87619ea31a90d
SHA512 8ad6b8129f036cb992764b9891bd1ac093dd9fb58e5ac09e5fe07f9b59ea0e811288e5a390572eeeaaa5e6831d1344ffc64374aca83101f15509c692581df96d
MD5 SHA1 SHA512

Submit Download

usage

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\storage\default\https+++player.vyla.cc\ls\usage
Size 12B
SHA256 d0289eb87a7142dcbfeb25dfeb96c67bf3da71636310520bc76ba7c0c3fdc134
MD5 1646e2f77f202685a088ab4ac6284568
SHA1 52ab54a89f84387a8698c3daa71580374f8cd620
SHA512 8a045e76a84b686aefd57e5518e14299b354a0c932893ca4dabd7ecb16597dbf06f3040f3e631e7c89671fddd6fb751f451398459b3c18a66f5483cf793a012d
MD5 SHA1 SHA512

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fiyrtffj.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.2MB
SHA256 96dce1687c3e8e0b3ee92c96df963659bcc17dd62e4e9a886646d21e94a21560
MD5 a3aa6b2c4911f73f89e6e0481b50794e
SHA1 f56140b471522be4581d78d7cc6d997825ba2688
SHA512 5f695e6ca12e5373b2eafb8a96d214caf337c227a6e04a9b65e4d4347e84f0bbf91c6446a8839fa05b09ceeedf6883c81fb529852ad11760cbfc27880b866283
SSDEEP 49152:MLeLyQaeUqAhPAJTX2U3dCst6QC5zYYMFLLAIQeujX2X7pci7T5UvrODYaU1FUdL:MRBzXQd5FRm+5MF5IdX
TLSH
T178767EE460E1D252F38644B3719993FB10EFC00C6036CE4457A496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads