Resubmissions

09/08/2026, 11:07

260809-m8bl8adr4y8

09/08/2026, 11:03

260809-m5373adq9y3

Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    462s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 11:07

General

  • Target
    0srd8b479kj0f31m54zw2h82hv64v5k5.exe
  • Size 5.0MB
  • Sample260809-m8bl8adr4y
  • SHA256 6dcb19adc30f1f0da64a54f180017898f66c9a2381c686db6f2219439899069d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 3 IoCs
  • Checks processor information in registry 2 TTPs 19 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0srd8b479kj0f31m54zw2h82hv64v5k5.exe
    "C:\Users\Admin\AppData\Local\Temp\0srd8b479kj0f31m54zw2h82hv64v5k5.exe"
    1⤵
      PID:2760
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:4428
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        2⤵
        • Drops desktop.ini file(s)
        • Checks processor information in registry
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2028
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 27097 -prefMapHandle 1956 -prefMapSize 270279 -ipcHandle 2028 -initialChannelId {f6893cd4-cf74-4070-b683-7052b65749ab} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
          3⤵
            PID:4908
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2408 -prefsLen 27133 -prefMapHandle 2412 -prefMapSize 270279 -ipcHandle 2420 -initialChannelId {aaae58c2-fe85-461d-ac2d-b7e411737cc4} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
            3⤵
              PID:4612
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3864 -prefsLen 27274 -prefMapHandle 3868 -prefMapSize 270279 -jsInitHandle 3872 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3880 -initialChannelId {44d7bbb6-09f9-4aff-9918-393a99f5cb00} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
              3⤵
              • Checks processor information in registry
              PID:2792
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4028 -prefsLen 27274 -prefMapHandle 4032 -prefMapSize 270279 -ipcHandle 4128 -initialChannelId {1eafdde4-09f6-49f4-8f46-cdea80096d50} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
              3⤵
                PID:1232
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2888 -prefsLen 34773 -prefMapHandle 3048 -prefMapSize 270279 -jsInitHandle 3052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3084 -initialChannelId {d66ca5ef-8ec9-4c1e-a031-a741c17a5b24} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                3⤵
                • Checks processor information in registry
                PID:2064
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5184 -prefsLen 35010 -prefMapHandle 5208 -prefMapSize 270279 -ipcHandle 5216 -initialChannelId {cffdd121-9188-4796-9a66-46f6097505bc} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                3⤵
                • Checks processor information in registry
                PID:1124
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5400 -prefsLen 32900 -prefMapHandle 5404 -prefMapSize 270279 -jsInitHandle 5408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5420 -initialChannelId {6adc2af7-e338-4cdc-8205-c572f42d5334} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                3⤵
                • Checks processor information in registry
                PID:4904
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5608 -prefsLen 32900 -prefMapHandle 5612 -prefMapSize 270279 -jsInitHandle 5616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5624 -initialChannelId {93d9f77c-5db6-4e26-a3fe-7f91ef20e92b} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                3⤵
                • Checks processor information in registry
                PID:2524
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5800 -prefsLen 32952 -prefMapHandle 5808 -prefMapSize 270279 -jsInitHandle 5812 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5824 -initialChannelId {f0cba81d-39d4-4321-a6e5-e23e96154473} -parentPid 2028 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2028" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                3⤵
                • Checks processor information in registry
                PID:2924
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k GPSvcGroup
            1⤵
              PID:2216

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  activity-stream.discovery_stream.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\activity-stream.discovery_stream.json
                  • Size 75KB
                  • SHA256 e0d617c046eb48976705cf41c71547c3c3a4ad547a1509d69edcb470b9ac3e78
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                  • Size 16KB
                  • SHA256 d4dae905ae71e27245467bd9127d2f9f17c96b54762f193182675e2e088b2e77
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
                  • Size 16KB
                  • SHA256 40637807fa3854cfdc3f3a10937e5e711e80460537b28ef283dca99fd7a6fae1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_arts_and_entertainment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                  • Size 67KB
                  • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_autos_and_vehicles.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                  • Size 44KB
                  • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_beauty_and_fitness.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                  • Size 33KB
                  • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_blogging_resources_and_services.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                  • Size 33KB
                  • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_books_and_literature.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                  • Size 67KB
                  • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_business_and_industrial.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                  • Size 45KB
                  • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_computers_and_electronics.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                  • Size 45KB
                  • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_finance.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_finance.json
                  • Size 33KB
                  • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_food_and_drink.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                  • Size 67KB
                  • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_games.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_games.json
                  • Size 44KB
                  • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_health.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_health.json
                  • Size 33KB
                  • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_hobbies_and_leisure.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                  • Size 67KB
                  • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_home_and_garden.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                  • Size 33KB
                  • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_internet_and_telecom.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                  • Size 67KB
                  • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_jobs_and_education.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                  • Size 33KB
                  • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_law_and_government.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                  • Size 68KB
                  • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_online_communities.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                  • Size 67KB
                  • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_people_and_society.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                  • Size 45KB
                  • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_pets_and_animals.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                  • Size 44KB
                  • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_real_estate.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                  • Size 67KB
                  • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_reference.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_reference.json
                  • Size 56KB
                  • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_science.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_science.json
                  • Size 56KB
                  • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_shopping.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_shopping.json
                  • Size 67KB
                  • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_sports.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_sports.json
                  • Size 56KB
                  • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_travel.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\nb_model_build_attachment_travel.json
                  • Size 67KB
                  • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recipe_attachment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jh02jw2g.default-release\personality-provider\recipe_attachment.json
                  • Size 1KB
                  • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                  • MD5 SHA1 SHA512 TLSH

                  46ab057d-e3b2-4550-abe8-0ca7e866e326.zip

                  • Path C:\Users\Admin\AppData\Local\Temp\46ab057d-e3b2-4550-abe8-0ca7e866e326.zip
                  • Size 3.8MB
                  • SHA256 0c21f80ad1b3796c49429949e6a3d52cbe9c3b5b4c317690a749d80076396d0c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  remote-settings-startup-bundle-

                  • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                  • Size 574KB
                  • SHA256 807e9c2788d4f35b62d7d32367b48df5390fba6b42a00e7a7ad4379511b4d0e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 502KB
                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 11KB
                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  6824f4a902c78fbd.customDestinations-ms

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                  • Size 5KB
                  • SHA256 3aabfd54bbdb27c52679664a7434376f1de48d3b51e7c3edb10339c1d4dcfc95
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  bookmarks-2026-08-09_10_2kFx1g0aB74Sr1ETk5SoFRK9LsnBxo2pl3NBsEbZVpI=.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\bookmarkbackups\bookmarks-2026-08-09_10_2kFx1g0aB74Sr1ETk5SoFRK9LsnBxo2pl3NBsEbZVpI=.jsonlz4
                  • Size 855B
                  • SHA256 4c288d2e9076c1e2f0bb411f330e9dbf705fa8a392814c7ef81853ac6f8b4eb0
                  • MD5 SHA1 SHA512 TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 7KB
                  • SHA256 fc36898aa3db63e9539443ed6b0910c26fd5c9c9acc4f8fda7566e5e8aa759d6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 25KB
                  • SHA256 78f8655c8ec5c59d552c3cb0ba046350bb3fce45cd222468be2169d00a29b753
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 25KB
                  • SHA256 88c7befa9aa004b2d2c9f7fcf566089da30da6f14c3328ee86517301d5d2c37d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 25KB
                  • SHA256 c2da7e28f646c038ad21b347ca15094bdbf2eccce7d1d81b7e1947c5992caf38
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 6d5836aa829a506dd0836296d4d044a0f3d9c3a26ab35ba0738787986148df43
                  • MD5 SHA1 SHA512 TLSH

                  15d41076-926a-4987-8f89-7e7a7ce4c2ec

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\15d41076-926a-4987-8f89-7e7a7ce4c2ec
                  • Size 235B
                  • SHA256 88ec1fb68e23546b49aa4dfe66a1b0e3f27fc0318d66b9dc8444e88771688710
                  • MD5 SHA1 SHA512 TLSH

                  3a7a7181-0824-4143-a3de-b0d718d63663

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\3a7a7181-0824-4143-a3de-b0d718d63663
                  • Size 2KB
                  • SHA256 4b48aaee6edc590982b6780072aaab94d8907a34537acbeae887af883e353dc3
                  • MD5 SHA1 SHA512 TLSH

                  44310415-702d-48f1-a86b-2067428520c4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\44310415-702d-48f1-a86b-2067428520c4
                  • Size 886B
                  • SHA256 c3350c68c7b60c46ca7ba80a3841d98272d3c3c4e15e0c098106061c4f7396e5
                  • MD5 SHA1 SHA512 TLSH

                  8ea9b05a-246e-4d8c-a9a7-1e623df524d4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\8ea9b05a-246e-4d8c-a9a7-1e623df524d4
                  • Size 883B
                  • SHA256 8ac16a0f8c33f415eb810db333fe90384c795fa88ae65868d7c957dda03d2b2c
                  • MD5 SHA1 SHA512 TLSH

                  c286112c-35b7-4e3e-a87c-545bab71dcce

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\c286112c-35b7-4e3e-a87c-545bab71dcce
                  • Size 235B
                  • SHA256 741779da24b63a3e3e91264593c5d8cc0b5b3fe2dd73daf688c6f992d584ee67
                  • MD5 SHA1 SHA512 TLSH

                  d75585ce-3756-430c-970d-905440285fcd

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\datareporting\glean\pending_pings\d75585ce-3756-430c-970d-905440285fcd
                  • Size 16KB
                  • SHA256 ad86fbdd8a4aaf0489dc2b8149a732b4e081172e04c09e3e5031a918a2e61f15
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  extensions.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\extensions.json
                  • Size 16KB
                  • SHA256 8d1b2a4e0b77cdc26c30bb0bdf930b97316fde9dd94548fb976eae4b74e12e27
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                  • Size 1.1MB
                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.info

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                  • Size 116B
                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                  • MD5 SHA1 SHA512 TLSH

                  manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                  • Size 1002B
                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                  • MD5 SHA1 SHA512 TLSH

                  widevinecdm.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                  • Size 21.6MB
                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
                  • Size 7KB
                  • SHA256 a6ff497399f4ee13d20242f2e9eabb160a129adca590605a87647cefff67587e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs-1.js
                  • Size 10KB
                  • SHA256 0c03fe94c75e563d07548b9fff52dfb4a986f5fc83c449afe9ea48bfe7f8189c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs.js
                  • Size 6KB
                  • SHA256 c96e724fb9d80b08389d3b7f9c678b96c612bc2dd63896dd07330325d71c7a93
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs.js
                  • Size 9KB
                  • SHA256 2f9a86fc0de36657476a99a36a7dc9b185c881b39aaad3633d936448e5228732
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\prefs.js
                  • Size 6KB
                  • SHA256 3040527a412d549bf797f30f6188107b39051e779c1a87a52aadf23833471ec3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 1KB
                  • SHA256 127389deacc90312bf4ca91d7ed723925cf5dec00c9ba28fae8c6ad853192498
                  • MD5 SHA1 SHA512 TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 13.9MB
                  • SHA256 dacfab86534ffc52ff923663715ab838b2f72a7af59da6c971d9d9d2a0bb1a4b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 13.9MB
                  • SHA256 cb6303dba128788ea665dbb6d3b3c23f8dd20bf9f47a6f20f4c04f15b1a475c8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jh02jw2g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 13.9MB
                  • SHA256 987710e23ce293e0292ffe054544410909da4caa6be354eead90e60f2bc8430f
                  • MD5 SHA1 SHA512 SSDEEP TLSH