hxxps://sourceforge[.]net

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 14:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sourceforge.net
Sample260809-rxpf6aah44

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
460	discord.com
463	discord.com
464	discord.com
466	discord.com
467	discord.com

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	10	https://sourceforge.net/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a2877bb389abbef5	5

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\Xeno-v1.3.55.zip:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	4468	firefox.exe
Token: SeDebugPrivilege	4468	firefox.exe
Token: SeDebugPrivilege	4468	firefox.exe
Token: SeDebugPrivilege	4468	firefox.exe
Token: SeDebugPrivilege	4468	firefox.exe
Token: SeDebugPrivilege	4468	firefox.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe

Suspicious use of SetWindowsHookEx 16 IoCs

pid	Process
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe
4468	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 4468	4228	firefox.exe	82
PID 4228 wrote to memory of 4468	4228	firefox.exe	82
PID 4468 wrote to memory of 5080	4468	firefox.exe	83
PID 4468 wrote to memory of 5080	4468	firefox.exe	83
PID 4468 wrote to memory of 5080	4468	firefox.exe	83
PID 4468 wrote to memory of 5056	4468	firefox.exe	84
PID 4468 wrote to memory of 5056	4468	firefox.exe	84
PID 4468 wrote to memory of 5056	4468	firefox.exe	84
PID 4468 wrote to memory of 5056	4468	firefox.exe	84
PID 4468 wrote to memory of 2888	4468	firefox.exe	85
PID 4468 wrote to memory of 2888	4468	firefox.exe	85
PID 4468 wrote to memory of 2888	4468	firefox.exe	85
PID 4468 wrote to memory of 2888	4468	firefox.exe	85
PID 4468 wrote to memory of 3636	4468	firefox.exe	86
PID 4468 wrote to memory of 3636	4468	firefox.exe	86
PID 4468 wrote to memory of 3636	4468	firefox.exe	86
PID 4468 wrote to memory of 412	4468	firefox.exe	87
PID 4468 wrote to memory of 412	4468	firefox.exe	87
PID 4468 wrote to memory of 412	4468	firefox.exe	87
PID 4468 wrote to memory of 412	4468	firefox.exe	87
PID 4468 wrote to memory of 4992	4468	firefox.exe	88
PID 4468 wrote to memory of 4992	4468	firefox.exe	88
PID 4468 wrote to memory of 4992	4468	firefox.exe	88
PID 4468 wrote to memory of 4992	4468	firefox.exe	88
PID 4468 wrote to memory of 4700	4468	firefox.exe	89
PID 4468 wrote to memory of 4700	4468	firefox.exe	89
PID 4468 wrote to memory of 4700	4468	firefox.exe	89
PID 4468 wrote to memory of 4700	4468	firefox.exe	89
PID 4468 wrote to memory of 3444	4468	firefox.exe	90
PID 4468 wrote to memory of 3444	4468	firefox.exe	90
PID 4468 wrote to memory of 3444	4468	firefox.exe	90
PID 4468 wrote to memory of 3444	4468	firefox.exe	90
PID 4468 wrote to memory of 3840	4468	firefox.exe	91
PID 4468 wrote to memory of 3840	4468	firefox.exe	91
PID 4468 wrote to memory of 3840	4468	firefox.exe	91
PID 4468 wrote to memory of 3840	4468	firefox.exe	91
PID 4468 wrote to memory of 1264	4468	firefox.exe	92
PID 4468 wrote to memory of 1264	4468	firefox.exe	92
PID 4468 wrote to memory of 1264	4468	firefox.exe	92
PID 4468 wrote to memory of 1264	4468	firefox.exe	92
PID 4468 wrote to memory of 3276	4468	firefox.exe	93
PID 4468 wrote to memory of 3276	4468	firefox.exe	93
PID 4468 wrote to memory of 3276	4468	firefox.exe	93
PID 4468 wrote to memory of 3276	4468	firefox.exe	93
PID 4468 wrote to memory of 3160	4468	firefox.exe	94
PID 4468 wrote to memory of 3160	4468	firefox.exe	94
PID 4468 wrote to memory of 3160	4468	firefox.exe	94
PID 4468 wrote to memory of 3160	4468	firefox.exe	94
PID 4468 wrote to memory of 4564	4468	firefox.exe	95
PID 4468 wrote to memory of 4564	4468	firefox.exe	95
PID 4468 wrote to memory of 4564	4468	firefox.exe	95
PID 4468 wrote to memory of 4884	4468	firefox.exe	101
PID 4468 wrote to memory of 4884	4468	firefox.exe	101
PID 4468 wrote to memory of 4884	4468	firefox.exe	101
PID 4468 wrote to memory of 4884	4468	firefox.exe	101
PID 4468 wrote to memory of 1500	4468	firefox.exe	102
PID 4468 wrote to memory of 1500	4468	firefox.exe	102
PID 4468 wrote to memory of 1500	4468	firefox.exe	102
PID 4468 wrote to memory of 1500	4468	firefox.exe	102
PID 4468 wrote to memory of 5424	4468	firefox.exe	108
PID 4468 wrote to memory of 5424	4468	firefox.exe	108
PID 4468 wrote to memory of 5424	4468	firefox.exe	108
PID 4468 wrote to memory of 5424	4468	firefox.exe	108
PID 4468 wrote to memory of 5640	4468	firefox.exe	116

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://sourceforge.net"
1⤵
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://sourceforge.net
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {2b77750d-1588-424e-bd55-55bca203d5fe} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {c64eeb24-3cfb-4120-a52a-9a94a2923178} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5056
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3756 -prefsLen 25164 -prefMapHandle 3760 -prefMapSize 270279 -jsInitHandle 3764 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3772 -initialChannelId {848cdb35-4b38-4dda-a2e0-6a612a96afcf} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3948 -prefsLen 27276 -prefMapHandle 3952 -prefMapSize 270279 -ipcHandle 3808 -initialChannelId {6bcc3a79-ae6c-4085-9df6-9bda43eb6506} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4404 -prefsLen 34775 -prefMapHandle 4408 -prefMapSize 270279 -jsInitHandle 4412 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4420 -initialChannelId {9e6b4ee2-b8cd-4f6a-b96d-048db980d0cb} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4616 -prefsLen 32663 -prefMapHandle 4620 -prefMapSize 270279 -jsInitHandle 4624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4632 -initialChannelId {dff4abda-7b9c-4521-b279-588cc80d9a91} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
    3⤵
    - Checks processor information in registry
    PID:4992
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3412 -prefsLen 35012 -prefMapHandle 864 -prefMapSize 270279 -ipcHandle 3760 -initialChannelId {22b663d2-292f-48d8-ab34-34c515ba0f5c} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
    3⤵
    - Checks processor information in registry
    PID:4700
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1092 -prefsLen 32952 -prefMapHandle 5312 -prefMapSize 270279 -jsInitHandle 5316 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3816 -initialChannelId {6ded2ae8-475a-42e8-b8ee-4c047b365c4f} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5396 -prefsLen 32952 -prefMapHandle 5400 -prefMapSize 270279 -jsInitHandle 5404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5412 -initialChannelId {bcfb6ea5-dc9b-48e4-883b-4edcfbafa55e} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3840
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5432 -prefsLen 32952 -prefMapHandle 5436 -prefMapSize 270279 -jsInitHandle 5440 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5448 -initialChannelId {49c18caf-520d-4fcf-a7ad-0c6fb201b537} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6356 -prefsLen 32952 -prefMapHandle 6360 -prefMapSize 270279 -jsInitHandle 6364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6192 -initialChannelId {2ee94cfb-4357-4723-934e-6e42625effb1} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3276
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6592 -prefsLen 35064 -prefMapHandle 6596 -prefMapSize 270279 -ipcHandle 6604 -initialChannelId {78fc9285-c536-4e20-a24a-a74a70ad43bd} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:3160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6628 -prefsLen 35064 -prefMapHandle 6632 -prefMapSize 270279 -ipcHandle 6640 -initialChannelId {6591cca0-df00-4efb-92ee-064d0b7a340b} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
    3⤵
    - Checks processor information in registry
    PID:4564
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4196 -prefsLen 32952 -prefMapHandle 4852 -prefMapSize 270279 -jsInitHandle 4884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2924 -initialChannelId {af9f414e-e4aa-4216-98d2-d17efba23d50} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:4884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7120 -prefsLen 33031 -prefMapHandle 7124 -prefMapSize 270279 -jsInitHandle 7128 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7136 -initialChannelId {d527c149-6b31-4592-a226-1f7babbf0361} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:1500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4188 -prefsLen 33602 -prefMapHandle 4200 -prefMapSize 270279 -jsInitHandle 5568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7360 -initialChannelId {b6a13962-8684-47ce-a29f-83bba3c4e23d} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:5424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2768 -prefsLen 39837 -prefMapHandle 7788 -prefMapSize 270279 -jsInitHandle 8044 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8052 -initialChannelId {cd786eb5-6b30-4be6-8b6f-c6fb0ffb6300} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:5640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7884 -prefsLen 36758 -prefMapHandle 7668 -prefMapSize 270279 -jsInitHandle 7896 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3180 -initialChannelId {8e67bbc8-67f6-49bd-960c-bd425a7a5341} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:5808
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4808 -prefsLen 36758 -prefMapHandle 7976 -prefMapSize 270279 -jsInitHandle 5144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7764 -initialChannelId {c95026ef-11be-4e2c-83ae-f92848c37cde} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:6088
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7416 -prefsLen 36758 -prefMapHandle 8056 -prefMapSize 270279 -jsInitHandle 7148 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7136 -initialChannelId {b1798c46-ce45-4fce-8985-3f1572374b79} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:1968
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3280 -prefsLen 36758 -prefMapHandle 3164 -prefMapSize 270279 -jsInitHandle 3200 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8380 -initialChannelId {b8f4c335-8d63-4401-85b7-065d26552e1a} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    - Checks processor information in registry
    PID:1984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8520 -prefsLen 36758 -prefMapHandle 3200 -prefMapSize 270279 -jsInitHandle 8580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7404 -initialChannelId {082818af-4e99-443c-afdd-0aa04ea1ece1} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:6004
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8992 -prefsLen 36808 -prefMapHandle 8864 -prefMapSize 270279 -jsInitHandle 8852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8908 -initialChannelId {4592d95b-0473-4a29-aa53-24f7e55ffb7c} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
    3⤵
    - Checks processor information in registry
    PID:2272
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9168 -prefsLen 36808 -prefMapHandle 9164 -prefMapSize 270279 -jsInitHandle 9160 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9220 -initialChannelId {a645f5ec-c26a-43ff-9f45-ef5bbd4ce46c} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
    3⤵
    - Checks processor information in registry
    PID:3612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9240 -prefsLen 36808 -prefMapHandle 9252 -prefMapSize 270279 -jsInitHandle 9168 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9028 -initialChannelId {8ddcf9e0-3e6e-46ca-8b93-67bedaf4c980} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
    3⤵
    - Checks processor information in registry
    PID:6300
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9028 -prefsLen 36808 -prefMapHandle 4880 -prefMapSize 270279 -jsInitHandle 9612 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3008 -initialChannelId {89bbed9b-67dc-4209-84b0-32b82c3bc602} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
    3⤵
    - Checks processor information in registry
    PID:6444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9400 -prefsLen 36808 -prefMapHandle 9224 -prefMapSize 270279 -jsInitHandle 9716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9404 -initialChannelId {61db46be-5f47-43a7-a6a5-9d3cbf813706} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
    3⤵
    - Checks processor information in registry
    PID:6060
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9796 -prefsLen 36808 -prefMapHandle 9612 -prefMapSize 270279 -jsInitHandle 9540 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4880 -initialChannelId {8cccc87a-5821-4049-9a71-1011902ed191} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
    3⤵
    - Checks processor information in registry
    PID:6908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8992 -prefsLen 36808 -prefMapHandle 10072 -prefMapSize 270279 -jsInitHandle 10084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9412 -initialChannelId {5b7f5421-9eb6-4fc3-bdbb-25a09b17ecc0} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
    3⤵
    - Checks processor information in registry
    PID:6560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3388 -prefsLen 36808 -prefMapHandle 3384 -prefMapSize 270279 -jsInitHandle 3392 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9732 -initialChannelId {95c4ab66-f90c-4fb4-a417-76b877dfb743} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
    3⤵
    - Checks processor information in registry
    PID:6712
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7928 -prefsLen 36808 -prefMapHandle 7872 -prefMapSize 270279 -jsInitHandle 8228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8992 -initialChannelId {526683ce-1105-44ef-9241-8d43040a5314} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
    3⤵
    - Checks processor information in registry
    PID:6724
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9624 -prefsLen 36808 -prefMapHandle 9256 -prefMapSize 270279 -jsInitHandle 9136 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9284 -initialChannelId {633b0fba-03d7-4548-a729-bc65f60913d5} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
    3⤵
    - Checks processor information in registry
    PID:6660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9572 -prefsLen 36808 -prefMapHandle 9092 -prefMapSize 270279 -jsInitHandle 10120 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7120 -initialChannelId {6d4513b3-7a2f-49e9-9892-824196454526} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
    3⤵
    - Checks processor information in registry
    PID:1776
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9112 -prefsLen 36808 -prefMapHandle 9088 -prefMapSize 270279 -jsInitHandle 9276 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10168 -initialChannelId {c0bd2785-2bbb-439a-ac50-08dbdda5c762} -parentPid 4468 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4468" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
    3⤵
    - Checks processor information in registry
    PID:740

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9539

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\doomed\9539
Size 19KB
SHA256 59595360be9bbc6d7dd565434ebb836fb0255697e43aacd4d65891ce3448ac61
MD5 78b70a61828542fa66a2904f8f2b7e5f
SHA1 eb2d312e6dd76494e082f6e3659c3e99a03e5187
SHA512 46e55a989bc838b5e0dcc4faca21019bd6942b1d19754bd9193ca0707e5290c4548a4e39e798061ed7ade382e6de804efe4e5a2e5c5ba65ee57fbb48c7e838d5
SSDEEP 384:w4gaieEwn9Jd7vKm5d3+qjwULDiXxpBOSONuQx+KAvKrWCt2BQxDL:dM5whLdOQwUXiASONuQ4KAvKiw2BQZ
TLSH
T14B92D037BF45BB4825925583D285CB40BD39B30363D9E1D4A0282E45A7E83FA9C65CCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

029B1BF1A0C39E14959CBB1849E7D001B46D2372

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\029B1BF1A0C39E14959CBB1849E7D001B46D2372
Size 45KB
SHA256 6fd103be11b29bbe1a2ee6466df96eb7d5445df87424b6c124a90b3fb244077c
MD5 7d5f26a589018b4fd77188a1396372e3
SHA1 0e2691a490e412b623a1ed7e2a3905a17df6219d
SHA512 3673e7d4a9364407a22ef6a78818c3504b2a0c12ca8f9c0ede34ee25e7b4ed73835f1c849c7cbc745d4342aa4162bbb531ceef17164d2bdd76217a8c5f8aebaf
SSDEEP 768:x1TK8e3bKAfes2bR5XWadF+TkW4c7XRaX6Ky8sqd5boMYCiD8eN7:TY3hKKk2R7sNds8hcoc
TLSH
T1F023D0BF7581512CCEF0C0482DE81948CD46A3AB2AC6E5F8B638700C95907EEBB456DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0D274B6E6EE38AA38190437FA5B112C084CCBF25

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\0D274B6E6EE38AA38190437FA5B112C084CCBF25
Size 56KB
SHA256 a1297f25cd8089d8ae45e12b15bbb8290ae86db202eafb87d93cb43ec033168a
MD5 49177b438306df8e9789d99e27863557
SHA1 e71305bc9b2ca3177600768cbc1aa85f03d080b3
SHA512 bc2eeb5ca15a85be7a2e0ce9b56b2f4e693445db5c933d8daa05d0bfd9b1087527095d4c0fb20b44f1b18bb8d4a64cd68302e2bb7b34e58551dc24d310245818
SSDEEP 1536:9q+SYuMaVwZ7oGRNh02dd6UialBcOEp0ow2D:9V4VA7oGR42dmadEGoX
TLSH
T10243023AB68031A6ADD8D5C100508E917F68395287F255EC427C5A3CA3ACBD07DB36EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1D3EB00CB19BE77690AC7385451DD17318FEB56F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\1D3EB00CB19BE77690AC7385451DD17318FEB56F
Size 32KB
SHA256 acea9e19ff04c1f90bf149fcb4d0455afacd72ce8cc87e2f145f12f076c4d5e3
MD5 e5917743125b548919f67a8f7d0e8e0d
SHA1 6e3d92c9ba4ca9148ec4fe346fbb2d44bdec30e1
SHA512 d10ee6e1cc9d4e01430e169d9fce4c8c517b08752aa7fd6d1b11f161e3aaa1f94ca34e41287eabc001955fd981d5c3216e1f31e1288d297046f4712bb8caf737
SSDEEP 768:2NWg1B3Xe+rL93Zzq8RJMHSALUHSA1HNaZzqW:naBne+rL93JqSOAozqW
TLSH
T1F6E2F27FBE20770BC381C5C1D4D65D093F6906B3EBFAA01DA118398089E52C9E5FC48A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29223D118AF872354B9FD0B56EBD9A74C0E0C306

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\29223D118AF872354B9FD0B56EBD9A74C0E0C306
Size 16KB
SHA256 819c4a198481b4e8e8f1fc1745248778fb190b6e0a38a4736ba7355e504b43fb
MD5 d4ae55e55bed2854650db18c4c7abc85
SHA1 36bc1532b2a497f9bd1af6e4c9cdcc77e25c24b2
SHA512 ed69187bb5c531f26a4b9de01d718cb0ff69fc2e8707b7ca2bb263f8cf0ba8170253424960a48ed8245439361ab34ec6fca78cc6a26cdf767ca1a9ad6129ca86
SSDEEP 384:59MXV9RLyLV1+yPouKAJTjBFxidS5TK5iv8nyFz/4T:AXBOVtRFJT96dS5O5iv8vT
TLSH
T1B172BEBF5D9226530BF3C198E4839F46FCB8789364AFF5DD443811408882BBA8A7945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43713F2F007BC8869EC95B777AF68D27F0727D6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\43713F2F007BC8869EC95B777AF68D27F0727D6F
Size 174KB
SHA256 246881fea34855c44f1234ce74657f3f821466906f25b741e52901eacc168d33
MD5 d087d86f5eb76824c7b23fa5f8db2c81
SHA1 6e534165420a51532b765112ff4022a83b8eada6
SHA512 1290c8e3504b8bb2cae0655377b3b7b5ccee29c47eea93c7ac9560946e63c1671016b84377cedbfe77a44f778759625cb84d918042565094fbdf1403789795b6
SSDEEP 3072:G7EV+mvmHh5a41DCGNt/XFDoWuKwMfldBOfxXIE5Klc2/7fHwPSKomtzOUh7co7g:JreB5a4ImtfFtWCDBc+cSwBzXTmR
TLSH
T18404127A2F935536E0FD4BC34E0B28C72D2C3D62A593853E66730903D6B9145C2ADE6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44F2854E7317DAD0BFB0C3623342BCBDAD4A0C98

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\44F2854E7317DAD0BFB0C3623342BCBDAD4A0C98
Size 82KB
SHA256 ee53af3ffa61a61d0c1030b0a0adcd64ba2b9603094335319c99fd092d25a924
MD5 b0ca71aa3853197ce127debe528135b7
SHA1 e6356c25ce835bc29f977cf10c17e01c51cc4b5b
SHA512 701dc1784e1f6fb189812f094a126f39f39d9522bd6be1e330dc4e7362560ddaa756cb5c9b8fc7127fe3edb7d9bd6d69307591cc9d787b0e8b7da8ee8e4ed6e5
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidGTAozqQU8:mj1h9rIHApCReO9vWR+V31TAozJU8
TLSH
T1628302F73DA4590B47A6828287D18C453D3673B3CBB6548C6B682C14EEE953A537E08F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4C1C3D6164E0D5BBE28010F6B7FB93A07EDD38C7

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\4C1C3D6164E0D5BBE28010F6B7FB93A07EDD38C7
Size 26KB
SHA256 42f3dcc73e530b8851a993cdf0a7cb5ce8a14db1c9991ee2a4bf90996699cc32
MD5 c0cf8f424d551030a7dcb12aac7e1079
SHA1 7ca12dd404f78f4ad022157a34bc63ffcb520d95
SHA512 efd0e3987b87c23d16341328a587d476f067094c0f776c92f208040223ed8a6ce6e3eafb9750ed083df289273380017b1b4b99478cb84647b49ca2a6d88f2e0e
SSDEEP 768:QkIvD89mpIi0zjA6HnBoyGOAvDSONuQ4KAvKiw2BQO:Qkn920zZhoyGOolow2OO
TLSH
T1A3C2D033BF013610A941518191497B8C3C18B903DADAE0F4A0287E52DDE93A6EC97AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4D87E638F926D1C72135DAEAD0CDD157B6D5A5C9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\4D87E638F926D1C72135DAEAD0CDD157B6D5A5C9
Size 16KB
SHA256 27323a5503a939abd402537e1597a4db9c37aa97e104b186b306d0ad7cb3e44c
MD5 86b2e2a4163c73c0178158deda0253b1
SHA1 b5e70a522ac00b85fcd6ebf85d1e729a30a70d7d
SHA512 0674f2ac9e7c3a54b1f5535300a2d3059f995c236eed984a5c1db69e31a1bc95a2b4142c8eaca0a5871026fdf3db89345f884842f980e2a95afcd427254a96b3
SSDEEP 384:BDN1NoglLTRyFYFwKeCjBvBHCIPFJrHSawPu7KAvKrWCt2B1Mr:BJ3V51ya3eCtvBiIPLHSawPu7KAvKiwp
TLSH
T15E72BE3B3B52710C4711C484E78E7B463C3EA32797D7F4BC50946A40A6846E5E8AA1FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 81563ff677dcc253aeaf69b5b60e8870017fec99feb838d465a9cc7bfbbf9b74
MD5 b334fad60e020eae84f711c7d9ae3a99
SHA1 b1e4a9bc4cec71567240b408544d989a72c5e20a
SHA512 9338c11cfa6e8d0dbf65018ac967c19bc1d2f904c881aea5db226d2f525c4a61ab42e55552e1853a35aa15e54a2e9b51076b298393147cceb29116c825871770
SSDEEP 384:HwCe7iO024YCDL84KKDL849B7SOEAd9KVRaAcP+AWRMAkGV:QqZYCDL8lKDL8CB7S/AmVAf+hRMZGV
TLSH
T1B0729E3D9F413CAC2597C0E8C5B982DA4C18B6A7CFE6C06D21683C0DC7989A9B0F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5CE40E01DB832782B5A8824296D513BFFD857986

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\5CE40E01DB832782B5A8824296D513BFFD857986
Size 17KB
SHA256 4cec1bcd7ff0c49431b0cdaecadc7e688a2902ec72a82e242a0859af4b4e7a3f
MD5 eb66b9c6dd17ab63c21fff4713c4e95e
SHA1 6e10150e2638495e9f8705a0f2e85d3b9987f0e0
SHA512 08f356e1e46c7adb327cd955e515e86c26fdd7b0a3ef1c21f0cb532522cb37b706d916ea8203c028146d1845ac06b10aab578141f54ea7bfefeece2a5c1a44fe
SSDEEP 384:kXojhHMM6gk1K+J3Rx5NgHNiCECIPFJrHSawPu7KAvKrWCt2B1S0:coJ9HkKyjNTC/IPLHSawPu7KAvKiw2Bv
TLSH
T12072BF3B3A80B1180611D540DA1B9A852D3C8326DBE3FFEC26243B41D745F65E6A75DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61B37B18060A0DF2C7CCC258842607FCB3043DBE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\61B37B18060A0DF2C7CCC258842607FCB3043DBE
Size 24KB
SHA256 5e150ff3a30c3902a1c0787c367cd6e44dbac49284feda21e9554da30b923610
MD5 1ee9d4bd1eab02e3ac782d869b2db146
SHA1 2d4e4477a44869586aae6c45313b89ca599572b3
SHA512 f79ec4031834620a7c6c378a295d85e3fac9c3d3ab8af19f361ba14d8a3833c63950bb86a89acfe3a8fbaa25f71a46561765c726919d1e1973cd451bcbbe6dc8
SSDEEP 768:pxQh53kwJYDJJ7Z49Xo+sm3bS2U5VnFJnB87N:PQhJ/JYDZ49ym3b85VnFJnBG
TLSH
T190B2D07B4C0B370955A5F6D0C60B22D9DC15960BEFE7AEB8B2801401DF89B7AE6147C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72C42FE33FD3CF180A00C9644872D329F5BFEB76

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\72C42FE33FD3CF180A00C9644872D329F5BFEB76
Size 30KB
SHA256 903db67012b39f8bd283b0a028020258ee7e339a086b1ab8196d4ffe855db34e
MD5 a1de2ac361616a38cf87c08042e7f957
SHA1 8790d9d8232d77163390fb9b6645a01d051b562b
SHA512 671c9b868ec73742286ad7d89373b2ad841b0de89b526f2bba077d8d0d421ea989fcc89c0689f3a67faccbeeac49dbc87c75f25bb0c61223431f504ad0ffa593
SSDEEP 768:bTelvABDe9pk8zVLgEQyHvvbHerZNh6R96dS5O5iv8vg:bQvcDe9pkGVLWyLeDeQg
TLSH
T155E2C03BAD24411606F2D2D8A28B86C7BD45B823ED8BB6BF449D128048C87FF576C45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76D76A9DDC3CC12D67DC11DA18FFDA27A71F7585

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\76D76A9DDC3CC12D67DC11DA18FFDA27A71F7585
Size 821KB
SHA256 452b0197a5c5af994f5dc6efd689ffcf88264adf44bed7115e6a209d62321fc5
MD5 5ecd09e1ebf98690e2fa32dd99d9cb98
SHA1 bd2ec8b4f2fd452ce0585947645536df08d9c1eb
SHA512 8c5c68bf8d3729ae1c081f41f79e74f5ade38457d7589c6a4d3a22f5a7dc4f22ef4bbf5683b8198064cf0035433b3c42fc4633d7a2d22b078774c7630da468b2
SSDEEP 12288:dE07ae9Sgwa+UvBGE0lcFF4k11J1DVpFl3vDbaQfSyz/6FstXLs+v1rDhbWqX:Ole9St1UvBz08x78q
TLSH
T1FA05E72BFE415E63C82103B144EB27363B39D4975792F32B2ACE7626BC1A7790C6159C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7B1F5DD2404D6FC32E5317709EEC1415137BBF59

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\7B1F5DD2404D6FC32E5317709EEC1415137BBF59
Size 34KB
SHA256 ba8b4951d1b9de0faf68ad5d990e10ac91e6c217434464a7a87ef70ee7a8a5e5
MD5 45d58053246e10fe8a23f873a9afc6ff
SHA1 36815c6b62f1a8ec61bd6edca4396e1b7dc5fc9b
SHA512 c3fd1f1ba3ad58efd28e5a3dfb736460e55d2649c759dee950572de3d683ca5a06d4449d4d311901b9a84c18e5e209553251f436a061707c8f0be98632f4bcb9
SSDEEP 768:Yzy0wiGvYATstPxUA8cJUkvgbUp86rjZnFJnB87T:I4sFxUBcW2pvJnFJnBG
TLSH
T1BBF2F1FFFE4213030A58B252C11321119E1129A7EFD3793E5A883755DA58BE1E2A69CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 2cbf2f1c19b1083e54d8e7931473eb4c9297409f9e45f399526b2ab436f3ed07
MD5 94cfe49874f52da6d94a19c7a4fcdc47
SHA1 4ad93413bdb257cbd9d57600a5a8a1fa9aa1db45
SHA512 5e9baf85d3b2434e44b38130b76bbdf283e210ac16b3027980501f3b88332ce0d4a05af5cf5b8029c0133277b8702620e560f7adf4abd54640d6a0a015e3db86
SSDEEP 384:HXkRyiO024YrDL84KKDL849B7SOEAd9KVRaAcP+AWRMAu:3mZYrDL8lKDL8CB7S/AmVAf+hRMT
TLSH
T17B728E3D5F003CAC25A7C0E8C5E982AA4D18B7A7DFE6C06D21583D0DC698969B5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B42B9C4CE8A3422E3F2D2D54546CD562AA8130D2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\B42B9C4CE8A3422E3F2D2D54546CD562AA8130D2
Size 14KB
SHA256 013a7852734f0177cbc152d62cbaea773e5ce824e15a9272c68f74bece435338
MD5 a8f9df0102b0d6aebe684791a838d51e
SHA1 89358fb8dcace83106679b855d9bf40a6be62212
SHA512 dec86b4673a944fb11bbe8e8891da9025728e02accc31d25a71011406e2a4ec7d513fad286243c26f77214884f588c6907a43172b87c4c0b31bf35c5c1258e42
SSDEEP 192:UPoq6NaXTCvaDVknmvOeQE+i0+9nO7cjCrSfo1GlK7Nwo1Etawnhuc7tawnhuMWI:6ojNZaDmn3M9nycWWw1N1InFJnB87NO
TLSH
T19B627C3A2F205D03FAF399B14E67994ABE121A438ED79465788C8467BF90BB6D815380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EFAE2BE4D14C5E3F34D6520DF43B8D6A31A115FE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\EFAE2BE4D14C5E3F34D6520DF43B8D6A31A115FE
Size 13KB
SHA256 9c21066f3672b23456a29e31b46624c4406672b85d149d5ce8b18586ae0339dd
MD5 d73666fc419c1d814c179ed4ae34b741
SHA1 eafd7dff9df112232a5167e349f9c78158f89afd
SHA512 21f267ef938f919f0beb55620bdc30f71177bcca2cf35e815ed205028428c540c40e20d91480c06de0f19aa6d293a67d379b56e7910268d0d3c7e3c44f353466
SSDEEP 384:7yMBmpFiG/06veO5np90RjBFxidS5TK5iv8nyFz/4W:7zBIeO5kR96dS5O5iv8vW
TLSH
T12352AD7F2E836B3307B2E484C4C31BDA7E1579A7D8ABF1F998081140C48467ECB24D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 711e24d7595c99f9b6a305fc7563823eb44be884df496dd9dd37c2bfb661e548
MD5 2798ab1340b0df094011cdebf29bf92f
SHA1 715881bb6b2149d814fc8d7bed83a1d18c52c0c0
SHA512 674c1395343cadad5c06289c0cbcdab11120d4513bfa8624e05791bea3a62c9bb4ff90949e53c94fa7eb1d93ff8762cbdcde7e2e36d79884439892dc61b7a235
SSDEEP 1536:jTrliM2X7DY+UUMTNLmVcyDcaegrwAFVeixliqzjXE1X5564411+VtglRNn9IWFo:j3loUUMTM/RegrwAFVe05XoD64IPlJ1I
TLSH
T10AA3AFF6DBA3C92D64FFD41C6AC2883EFD262400F3A73009C963775156C6BB86679249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 30KB
SHA256 d3ef78914e8acc2b337db317866a9ef2834d22bb4df572d6c69a2c98b56191dc
MD5 82a8a941377d5632fa07bccabbc1bf68
SHA1 8ed30bc8d1b36d3f60d1d159cc74d814a60e5ae2
SHA512 cd59c6bff7279d3eac972e9c5c4ca26b6d9f0e57f7034287223a10d665a57842b265f9ed5b34bb8795da5f28fd5351691c0c3160905fd8dce41ef9ed49976f04
SSDEEP 48:Uuf4E494D87hVKG7zwgkgzEPPiBGiGjGuiqiDeiH3Cu6DYRHU3CthjGQzwUyMbeO:V4E494DufEPEGiGjGqDYpU3A+UyMyi4
TLSH
T184D29FE707B9A033F4A18FBA4498B698CD375219895885BCDB15B0D703AA395F03EF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 30KB
SHA256 6caec5e508bde2f9b0fd1899b3bcfa2b2e4f5009e87c3af1098660f084f97cc9
MD5 f254668421884fbeddcc9bf3dc67ca0c
SHA1 ee60f3f364af7a1060b42295aaa193f165bb7aa2
SHA512 50476acf16c0ef33b51700ce2a01aaece695fffb0601d635cfd73bc0b70c512109de8ca015a192f6dc122d1e0cf677a7843d0a1897fca8cc4f94584a497cc193
SSDEEP 48:Uuf4E494D87hVUgKi+i15AS5EDYt5cEME1JoEAEhZUyMujeuoO4D2JH:V4E494Du8DYlHZUyMPi4
TLSH
T16CD2A0F706B9A033F4918FBA4499B2988D3751198958C4ACDB15F4D703AA395F03EF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 30KB
SHA256 91f7d3f672ae30420451043e2230d2967b56abd70db1758cc3e9f16c27111487
MD5 3e61fc8fefa2e10974a3e119db95bd7c
SHA1 114e8dc966ff678cf3a48c59374f334082122ae0
SHA512 fbecb711b940005e24e08eacff9a3ff45ef6db69a2f47cf14585a3dd8cea2ba5bf90e234b15dc91464a696cf242dbf9a8140b48041105c2cabbbe2ee95cc25a2
SSDEEP 96:V4E494DuaBMrI56n8CEM/p1mDYlHZUyMIv4:V54UzQuDYFx
TLSH
T1A0D2CFE707B5A033F0A18FB94489B2988D3352194968C5ACDB11A4D703DA799F03EF6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 35KB
SHA256 90f52eb22c196531f87c60b4c43007c21455ecefb9656c276e5eb487afec175f
MD5 59beb1b575378e8ed11ebcbe24710b7f
SHA1 b656b011de59cb201e9350642e98f946f3cd5d96
SHA512 83beecf02dc728187f75b1e728a6eb1aab867ac5f751fb20e8a0b4a57aa04c5f82c7a33ae30acd6d9ed4e7419c6a8375e1cddce0b8aef24cac1df5f6697ba735
SSDEEP 96:K4E494naBMrI56n8CEM/p1NJ++nyx2XaDY6yuZmLHZUyMIv47y8tm0F3l:K54hQf22qDY6ZZaxcFtn
TLSH
T1DAF27FE71BB5A033F0618FB54898B19C8D335219596C899CDB05A4E703DA799E03FFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 50KB
SHA256 4530c7708d91eba41868899355219fe866a34efdfa66c4bbb0ced0a7dc4f1927
MD5 bb579081977686bbb9bf57d3f3ad1eef
SHA1 c78c174ee6a0c8f0644bcc7ae05a85d4e0c3ddb1
SHA512 caa6893d085cb66d7488923d631dcb1bdf3f897ac654b1d8653f9463b965d5ae8afbee4a6694421cf5ca3cc3386b0a04c20c7df92e1ec4d0dad9de6f219d3ed4
SSDEEP 96:K4E494n8B6ZI561ygSM/pzNJ++nyx2XaDY6yuZmLHZUyMIv47y8tm0F3lsL1zpQ4:K54zQZ22qDY6ZZaxcFtn
TLSH
T1D233C1E75BB9A433F0629FB54499B28CCD3342285958A99CDB04A4D703E6399E03FF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 55KB
SHA256 b8dff9146046d3e0a5143ffffc8f0d4f73d815cc606c962e266acb1414b252d5
MD5 925d19375c00242bee7c6b4da650f487
SHA1 bead9419b2e796523c327fc0b6e92621c1349671
SHA512 777f86fb31f96251ce5c0cd80a82df20eba1d8b62a66d6d18e4af694d89f5e3c80e8fc3c2aaefd58ea332c77130cdb5f88621f788fdca8b4a44433a8f36a4294
SSDEEP 96:K4E494nH9eM/pzgcmDYlHZUyMIv4V39UL1bpQQAQkYsSw8CP3qr9BHvAy9W/etJz:K54TQsDYFxx8H
TLSH
T16443D2E75BB9E433F0625FB44499B28CCE33422C5958A99CDB04A4D703A63A5E03EF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 12KB
SHA256 64123d719c716f9697d3f89210739e674a6aa2f68d7b03a9b1e03f3d533e5477
MD5 bfe06cf6285c28a960e830c3e152aba3
SHA1 eca84753bed70fe709280c5b2ae903526d3e6132
SHA512 b0e2f9795b79a6708f3f25ac38775b684e1b8f0a903c8ee0b714319539821cfa162faf58954234517f7caa7312291513a015cbb291ff3c42f28f0c058b80530e
SSDEEP 24:ouhMZ8yQ8PoIBroZqb1eCnlBYCeHyAvb/A/vbLb0NqXGqCGGjGpaQYNqFII:NMfroG1HlVgEPgNqXGiGjGpMNqf
TLSH
T1164282E717BAA033E4624FBE04987398CE375219456885BCDB14E19603A6395F43FF4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 7KB
SHA256 fd793e237488ef69c130344b7fc33f47650ce9ab2f1903a61242f8061d20f022
MD5 88d3a3f8ac1590221cb37f659e0abc01
SHA1 b1e7236542aa98e52e2271db82d0ce121ce0dd9c
SHA512 3667b1c5a794fde40e1a1dc2ac87d41a98b1ca103d75a570872657017daa5ee35b0dfc73b6ec218a153c0889ddad3d7971aa025206b31a5bcc6387b77630f94e
SSDEEP 48:3sqK9d88Fjc9WdX/ZMNLL8EMERwzrdWZMfVLbEM:8qMptimERwzBf/
TLSH
T123F1C8EB57B99823F0626E70C4C675C9CE33422D9A2CBA9CDA08D1D30395355917EF6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 28KB
SHA256 60265dd49816a0c20c496c3dab391acfe4d7a296de35bec75517b2fd6a9ba3f4
MD5 ce095cc4ea845cfc07b2c1faf62bf315
SHA1 1098947a94338216eac965448f7b6bba07a01571
SHA512 5f756ed4043cc351b32add8fd2420515d3ffd4e052d35d4c01cea2907b55190a194af8eb9f88ea1f1dd0f8cdb06ba5eee26a5c3bc0a7128ae19d4d28d4a64c7b
SSDEEP 96:pcXHdptimERwzBf/D/kgc6MUGP3qfLEcnEbED9pL30Lpkxsyd7/etsjdtrhj9WC1:p8HiHgMlkP7YEyZ9Pg
TLSH
T115D2A4EB9BB9E823F0627F70848971CDCA33426D5A58B98CDB0894C70395395A13EF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 1eba458a8086bfc2f5ab46b539542fd38ecc32f2a26a394365235de7401ca95b
MD5 68e95216bddadf4b8f6ae30d57fbf487
SHA1 de61449e9be4f549d76e3aa27e5460bd66cf4140
SHA512 48ae1566beaaa18c9182c8c8bdf5a79502b51e407eef70730b34da59a612ecee83f8d793576f32aa971706e4cc827af0b13a7f79ba8daee05e61426f3e182048
SSDEEP 192:GOv5zboPCZbWyjOO/1d66JozGzgCl6mc0dz:9boqZbWyjjd66JozGzgC1jd
TLSH
T14AE11DA8F628867FD414027BCCB61F814F39389A984E7F1535DC64082D572DE7A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 167eb62ef06b8b5e9846347fccd54051099e9317eb2299c6cc15dc0bc2e10d36
MD5 20f8d9e32c860895591796c0877c587d
SHA1 639a569a185a6dfd61e31c3109bded4f0a9859c1
SHA512 04382fee48e99ffe6e5e5a5d383aa66973864e942991528af4553b1fb273d489668443e544517ae648b3213f3abc65647963018fea5b2a546285dbcbb24a107e
SSDEEP 192:T1d66JozGzgCl6mc0dqOv5zboPpbWyjOO+:xd66JozGzgC1jzboRbWyjE
TLSH
T145E10DA8F628867FD414027BCCB61B814F39389A984E7F1535DC64482D472DE7A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 f6a7899ac09d7801e184741b5a58d8d08e752defb88c02ad49dd563805bb50ef
MD5 74d3a2955866fc44ce0bd0f92459b943
SHA1 da1ea7c7f7604c05faf8d814d9cc38aec90d4872
SHA512 828ab662a3be8f76d0224d5c9765786c599f7a87a917fc2404ca2ca01da40103fa26ad7db7e98048970172cdc66c5475b5a99b6091341177049fa524f7bfe7e6
SSDEEP 192:ROv5zborbbWyjOOo1d66JozGzgCl6mc0dz:OborbbWyjUd66JozGzgC1jd
TLSH
T1BCD1FD68F628863FD405027BCCBA1F814F3A389B984E7F1535DC64482D5B29E7A8D1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\events\events
Size 5KB
SHA256 094682d86cd1f2f33cffe88648a6e3b952a77bcd27a99d1aa7a3efe527f88a16
MD5 3b60cb0627c868f9ba12ac1f313e43b0
SHA1 75d23c8272b98ff1e000edad390b51fedf79f596
SHA512 1b3b4278bb2eb0f201cbc7777101d7e5d96328cc178f69a381d6e568841d04852a1d183ae49974b4247414174b76efe68fc07564003a61863f4dc623739d6c77
SSDEEP 48:YpTRA7bYAF/0eoX7R6hKvK1zWvkTRG/pmxDWA9t3ACtuHzkFqZTwvFqZ3xGtx4pZ:Ww1xZDeH/yfF0J03to0OF41T3dj9VjdE
TLSH
T180B11E1C35E90C7E6CCBD29CBC42438D42D9470A85C71C8B8DC7EE4E8E86A8A325F569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\events\events
Size 1KB
SHA256 c73cc27f9c0988bd6989c49c4b37728eaf063ab3fd7f3a613e0052e682012901
MD5 7d6ba3575eec4e84643e75904fc7bed7
SHA1 eacfcd633d9b864529493926bc39dbc2a90bb583
SHA512 8382fe86ff507a7bb5f1091f5d2f43c7a005b3981cfce075e5ef1f96322f37c74ec56338e9a352938739e2f0612df69bef6fdc2fb58b6ec271bbba2f366d0ab5
TLSH
T15121495C39F94D3A988BE69CBC41138E53528E0E45872D478E53EF8DCE81AD9326A43C
MD5 SHA1 SHA512 TLSH

Submit Download

b3565125-1d17-47fb-812a-112741ee42dd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\b3565125-1d17-47fb-812a-112741ee42dd
Size 280B
SHA256 40716b00ea89083aef99634f9c42d0dc9a23a7b32e340594b7684538c4f41dea
MD5 be19792c59954c73d67778209b8943fa
SHA1 79fa268c1bb44a35521ba3cc61970f6b1e9bad66
SHA512 0504b2576a65ac3c4fe4a1f39b639466b9abb24fdc44d35a17cba4f4883271a7dabb525634d94ed0b6d9a3e43091cf6a44cf70eb8f0e3f91a6330e3601a0d07e
TLSH
T1EFD0EBC03C88A75C0C384F0BF0F835F330228C3320F02830889001788AFEEC99100C16
MD5 SHA1 SHA512 TLSH

Submit Download

e474db86-5c48-4648-9862-577470dccf4d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\e474db86-5c48-4648-9862-577470dccf4d
Size 883B
SHA256 1ad9e6f85ba2152b572f263696d7e9dca58b5332849d6853196df68fc99cccb3
MD5 0c3462cb762e2a363628fa82b93de5b7
SHA1 72f603d04719fa8cce42e90b706508cb45cd7d5f
SHA512 378a6a6fcaf6411c908445e0abdc79c7fa2d800318e885eee724b5ada1d58dfd988bb93d97294600cdfa2d7289239f9b085459ce297dc6d7e19345539e12a890
TLSH
T1B2112740E2347AF2CC6C928FC56537428FB4742380C558543E911D040C7E52D57B674B
MD5 SHA1 SHA512 TLSH

Submit Download

e8e942a4-e399-443b-92df-aba3216c2aad

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\e8e942a4-e399-443b-92df-aba3216c2aad
Size 2KB
SHA256 906fcb0458b594e86fa1aed03a95233edadacd61fb0fd37978dac390b3607887
MD5 a89079c78c1569535610f0138694d4f8
SHA1 45763d943597e68de63c3d4102a34e909cd43223
SHA512 51d6432ddf8148c9750192ae74ffedfe6f0c0fcd7916ba89f5c7e7c0aa28118a6a0557ec0eeaeaa0191cf1daa611239da982f0677c8f99430d75004450e2fc0f
TLSH
T18A41235875789DB79CEAF18DD452238E97608E0300C62CC36E91DE0C8CD6A6D376A567
MD5 SHA1 SHA512 TLSH

Submit Download

eaadee39-a37d-4a2f-9cd2-467ee0712c9e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\eaadee39-a37d-4a2f-9cd2-467ee0712c9e
Size 15KB
SHA256 038fd212e561730b93386c222127ae6717436e0b092fefe06a78bde9111200ec
MD5 16c7e1fc15466d9350dbfdd4b6c52896
SHA1 14811fa5d5fea7595c96f15d16440277ce057c2a
SHA512 ba83e58944c92388274fbf9f255743b2d3c3cb612ef8f7912e39b516f0569cccee69587a7a8591fadb194f12e673653d66f673353c8a19b2f79a7f36d3699763
SSDEEP 384:SDNkl02gTPOqIcbyVr6bl3NrvnjxVuNYP:SDSl07DzwYP
TLSH
T1CF72B8162420497E8691E36994FCBFC7E5F528CF4C419FCA9BE4BD086DEE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1b7c075-58ca-4300-8907-acf033741b98

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\f1b7c075-58ca-4300-8907-acf033741b98
Size 931B
SHA256 6176e466e98b0eb8c213a7db94e8d0ba028451914078fe3e2c784de55b906854
MD5 6604106c878aaedf1776740ad8b01ee8
SHA1 90374beb8df933537d3a4e25c9578fad073815df
SHA512 45bdbb77326de93e2df29b157f716b5daeace9865075d3e84080457a785c6166d2f023b51fbcadd5c259ef4d98af3019b8a6e9a4fd51124da895fb9302c95478
TLSH
T14B111490AA68BAB2DCF8928BA4B837539BF4341380CA5C147E900E140CBF51E5366707
MD5 SHA1 SHA512 TLSH

Submit Download

fa7dce2a-e565-428a-9e9a-15fd43035db5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\fa7dce2a-e565-428a-9e9a-15fd43035db5
Size 235B
SHA256 72adba71389466c1022ea2c6d32d2c16a829843e227a75c0cdb7c4fcbd07fe37
MD5 c749ead12f10ed6bedbcb76edcdffa08
SHA1 5327ef237304e28f00072bcf3ad4f38230b6efe9
SHA512 15800096d5b9f9da2bf0af9eef34fd3bb165aa63f9dcce37aaf383ef05ae2a424785b91dfbd2e95f48699324ab226296b2679c1cf5dad1ee77833dce1b8839e6
TLSH
T1CCD0A7C01898675E48144F07F4E069C632598D3365A4A870D9A14578DDB9DCD4165C57
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\extensions.json
Size 16KB
SHA256 bb11f43529fff5d6a6fd379508343a5a1b2fb4903662a9ba0e2fdcd7f003809d
MD5 97c5e4aa078e1c25696d4f038bd2c965
SHA1 8168cac379a881a94435865c99ef355342e9304e
SHA512 7fac4a931b3dc42d0d1748396389462c7ee58feb05e8dde7c3769a929e727d78c948ddd74b52c85b5b1ab0d37a40c36fd55ebebbc030fcb760fa543ea2317ba9
SSDEEP 384:AkI4vyUmldvXf8dhWnV94z6196opL4HBL4PlL4HDL4HfL4HdyzH4h50:nI4qRf/0Xen4K6W454d4P4j424w
TLSH
T18172421545448EB8294FA79AAA367E02C37D533B60845C38F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 7KB
SHA256 07f2ec40a53000ac6f364a9563d05505a9faffe66e774139b441a1b1661d0a77
MD5 44b5291e8a1b8ebb9fbe5185cd11821e
SHA1 1bd8c3200555e788863fc3713980f7fab403323d
SHA512 4dd8dd83bbe19b32838a73215b8eccb5bfa480f01a20002776fd0bedcc0838031129c8251767a5868ad409c9810d4c2e3607d9228db63a95c5ca7a7aefca40bf
SSDEEP 96:xHHUTUZfvqGqqkf+HgObzSpSSlDdv9j2nLHH4/39Bw88n8L4cn/MVzPGS:9QRFf+HgnSSMH4/39Bw889H
TLSH
T1FCE13F7891088F7F64B677ACAC288D316AB2013BB7BF28D750B65484055CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 8KB
SHA256 6a9574f66c6e05e948031a841a0f347da8d6c2ef29b3da6c6899644a8b02d22f
MD5 cdb8b271c98f75caf5fe90a2b968af9f
SHA1 779fd019aaf8684e083ade7c4dd333f4fd92d4b7
SHA512 b15064b7c532e0ee49026067e447175169c73fa65ba7832559c90bc299bf19af2d9653f30147f48f3aff45f9909a1e349e994bfa5e967edef09f269a96a86458
SSDEEP 96:xHHNTUZfvqGqqkffHgObzSpSSlDdv9j2nLWRUlL4/3hgBw88C8L4cn/MVzPGS:9NRFffHgnSS5RUZ4/3uBw88+H
TLSH
T1FB021E389044CF7F64B6776CAC2889315AA2023FB7BF68D710BA5885051CF3445F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 12KB
SHA256 bf1adb4b6d192ff95ce67f4d8a535d13f012b92b3377bc4e4047ad9bf662b6d9
MD5 b43d2f6019eb27f9ce7574dead2c454a
SHA1 ceb9c6c29dce2f5a7500369ff67b1325111e1fb3
SHA512 705319b9e77d2bbec9a992d118a3eeeeb388aa19eb276b0ac8bffa80e5030ab8d7995cdbcb2edf44074ccf8dc4db93e933e6a96d88d1131d87de2216850b640f
SSDEEP 192:9NRFffHgPSSQLRUZ4/3DOBw88EreLYDT5:7hRUtwSvJ
TLSH
T1B042C13851448B3F24B3737DAC6599701A51423BB6BFBCDA06F99883095CF2441F6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 6KB
SHA256 861dc7b7f65265aaac430bdf2500fd82bd6a2d99fa2f6342a773596cdce4ab15
MD5 f9d2741ae83e613db7209713f6972fb6
SHA1 861a6aa762b4395ca9c645f8bffd4c2025c85a34
SHA512 d7cd91cf8d7bb63ea01a74599a5ffbbec78c7ae22e446132c6853bb99526836ec99f75bc29c959d075c1fcc25d8e1ecc22a55d8769322b04e0fbde821e96c165
SSDEEP 96:xHHUTUZfvqGqqkf+Hg1zSpSSlDdv9j2nLHH4/39Bw88n8L4cn/MVzW:9QRFf+HgQSSMH4/39Bw889g
TLSH
T1C7E11F7891088F7F64B6776CAC288D716AB2013BB7BF28D750B65484054CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 6KB
SHA256 634f95f5adfe34c0cb350f4474a48bfcc42750866c2221f1ff96fb33d0c5ed1e
MD5 0c283029bace78f6c29a80a56b18d36b
SHA1 b377f7a0fe3f27792cd4beeb74214f1a92db9bdf
SHA512 1880d2132d5c1c84eb206b044d9667aa1e35d8566ff912be4c0e8739186c84e1fc6fd249476aff2a1f7d08691c21e6d462657fea50ef8b70751ed2fed6b0f2c1
SSDEEP 96:xHHUTUZfvqGqqkf++g1zSUSSlDdv9j7nLHH4/39Bw88n8L4cn/MVzW:9QRFf++gpSS5H4/39Bw889g
TLSH
T1D7E12F7891088F7F64B677ACAC688D31AAB2013BB7BF28D350B55484054CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 12KB
SHA256 2ec0616294e616a13d7066e57640ef9c5571667165d586bd1e8adbf91969776f
MD5 69a2205608bc88ffd7b0699d00b6e1f3
SHA1 499c4de3a956cbb30f8fa57c1dec012591c871c8
SHA512 7f0c2fd3f5b8a84497283912bcec0e2db8554b661c176a6fc118af7d3eb2347dd18198a1f66d805c1c68f08adbe4b98ddf4d630aac34b541297efee591ce4c29
SSDEEP 192:9NRFffHg0SSQLRUZ4/3DOBw88EreLYDT5:74RUtwSvJ
TLSH
T1A042C13851448B3F24B3737DAC6599701A61423BB6BFBCDA06F99883095CF2441F6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 42KB
SHA256 76b3839bf7cc176264a0732e5fe969fbf5907f2fbe69aa69818b16fe8c3ef5a1
MD5 e1df295c5643fb02ee3f73cfd44d3a5d
SHA1 e0342845a501c83d54f193d8da65b1b787b4916f
SHA512 2878496a2d8a8ba22e658d9437d46057e64b798368e469fc37c1faee1fbb5e21218f11b59002df91e5136e51638291619f37d28921123ffda32a76e864edb611
SSDEEP 768:qEUXZQ/R2udGHwGX8jz6YRB8AOLutd1cdFG2ItrVbkX/0ahZw46nR:fKZ6RTdr9mYRB8AOynudsP1OsqwT
TLSH
T1A313E169C858FD63EAB67CAC907B2D0466A01CCB927C1CB4E2097F6B0CF7509D4DD91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 45KB
SHA256 64bb1f3d9d6c223fbe36cc135ea600bd9fef7bed5e9a7e8ab4260282005f8faf
MD5 d694fe1bea74256057ed15daa964b37c
SHA1 ba5755bb89cd5cafb676162fa990c39d66d7426a
SHA512 46c5111260ae651c4d87a23bfc3fb8b554fc7ba935f318e5fc3bae92bcaaca579aaec42a9751f70b942febf8f2666a212f54a3df796df58c2a88a4b20c31c66c
SSDEEP 768:lEUXZQ/R2uQGHwGX8jz6YRB8AOLutd1cdFG2ItrVbkX/0ahZw4ehX6y:SKZ6RTQr9mYRB8AOynudsP1OsqwD3
TLSH
T1E923E1A5C858FC6299B37CAC50772D04A6A01CCB92381CF4E649BF6B0CFB608D0DDD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 4788424e960b7527a67db0582732d04282a495df0dda4e6d6225f4c4b2989438
MD5 973268adc6e16149820a8a30d4aecb92
SHA1 17994732219badec0ae54d6874309a048c6867de
SHA512 8805646bf2692993e2b7acaf7b7dd085d49f62b63e630991921d9a27dcac4a26339644446bde54d0e5230f9bb55cbc8bc8de58890b74d276ed22f3c32788292a
TLSH
T1B82106435A2B1EF9BA129111E4818FF2CF053030487588E0E18EAC0223CE06E778740D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 6KB
SHA256 beffb789d793fb099a2912a5f4b2e9e90b1ef5f09087589bdde14e7e46450da7
MD5 927ed3e4cfcf44c16fbf5f448fd7ac56
SHA1 4181eabfdea9593afeb3a39bfb928a12f192dc99
SHA512 f11cfa0f0272b35b3e6e65b9840d940ff8195b010e4796e1eb1b98b9417b18b74b36cb506d7283f2770eba7350b7aa1b51dafea078db6f74200da5e78e64444f
SSDEEP 192:Hx+OUgDA/994J+Rdv/yWhpc9ogw71R9d+:H8/r/dvKMpc9q9M
TLSH
T118E19E98E4571DC8A817544C84657CAB46883C09CAB0B1B0AA3BFC9D0EFD11FA3B962D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 8KB
SHA256 dba373ce68408b424f6278c0fbd6dec874924cc1c1eacce0b77fc284889844b6
MD5 14172842d34c901c3bb4015ed7cb8065
SHA1 0e18cb06f0833b2ff92c0694839060cc5fbf0da2
SHA512 17099ded2cd84a00fd0f12820645c3f3c5caf033a73d9f2e144c1089657fabe58d4f1e689b69a02aa8621f3e9a772d18749253a8efe14e3f38b56f24785bc45f
SSDEEP 192:Tx+OUgDA/994J+Rdv/yWhpc9Mp+Mqn7cRmgw71R9dSC:T8/r/dvKMpc9Mp+MoIe9p
TLSH
T1FC12AF44B85A2EC898272584C46B25AF46C83C0DDAB460F0D62FBC9D2D7E51FD37751C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 45KB
SHA256 dec4dda340bda96e7a4402a790291435d75049faa4f3a1a2304d3d6abf941071
MD5 c43de9233655d13d389c8a208e41edd9
SHA1 a78f091bea09ddecdbe2a800cade90beb422975d
SHA512 35e6eef8b8103955189f43ecc892d668e8ef5e8b4bd810f81b322ad18cf6f0cde658268fe7f8e0601210bccf0915919db56e48e8ac1592fa6f6511d509c86246
SSDEEP 768:dEUXZQ/R2uQGHwGX8jz6YRB8AOLutd1cdFG2ItrVbkX/0ahZw4ehur:aKZ6RTQr9mYRB8AOynudsP1OsqwDC
TLSH
T14C23E1A5C858EC6299B27CAC50772D04AA601CCB923D1CE4E649BF6B0CF7608D5CDD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 b7b0b2f6261facc80ac2b880e80746246994e4eeeed1e080848378154ced1a40
MD5 489ba3f94acfe4abff48bbb88ff524ca
SHA1 43efaf9df88bd0399dfab127ce3776f5afe5a262
SHA512 92e633f1876c4fa78d1e301b365c69a173c437fb570f7565b252114e0e7a688e16d8ab15bb03782019e5a813af53ffe5c9e1759a937ebebf8fbe1fcb2a751d08
TLSH
T14E514CD9991F2FD46E667084C4840DBA4ADE351E4EB01CB0A23F5C050B8E60DF7A623C
MD5 SHA1 SHA512 TLSH

Submit Download

2672389209aldlro.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\default\https+++sourceforge.net\idb\2672389209aldlro.sqlite
Size 48KB
SHA256 5ab30f1681f561f0562e7f6049572d843b914e970b655d1477cc1071cc174fcb
MD5 0cd2427272b1a916bf7c849d391656b8
SHA1 cb36c0907920cb814ea7229ff95096de5a5a2333
SHA512 86fdb1a1e7e59778999708192dd22652e4ef8749f54b34e75061e9ca6c41996e490c3a592034768389d8f5d925d50313aedc774a912b38cad0699aa46df1b6c6
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEw:Oa16S6CKnqlizbxV+2xVeU7X2B0w
TLSH
T15A238ECE3F07A511C43AF0B178A08D51BC5E321D07222AD569D0DAE4C8F215AEE1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.4MB
SHA256 10ba046af0d12cd6c1848948a938fcfedb0df5484836a7a051fefccfdd165072
MD5 99e620ecd160ad34276dd5adae0c199b
SHA1 b1d48128b690a9d1747ac1f5ab04309a4c55bbfe
SHA512 285a6ebe9d127f4c90d5c37bde39cd4dd76ab17705f245d4983ce812e66bd864757c84d440235c6e5df68e1603587058fbbbb7e79ad206ddd2618a82edbd0f95
SSDEEP 49152:XLqLytaeU8XyGJ9d1v1bP36QC5zYYHEIg1iuJ9lkRnaHugQjUt2U3P8wSDCOQwKX:7xkRuR0Ut2U3GAUY4Qs6j
TLSH
T1A4667DE460E29252F34244B3719953EB10EFC00C6077CE44579496FAA9B8CEB8E97B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 f166eb485956a4b6e034194af32464a735f1c365f5979239ce1145ef4b4e1857
MD5 7a6a4db15814b1e1de4d3f8e460c498b
SHA1 2890b87774aba90b26e9f54d91bdc25e384a6201
SHA512 5a5cae034f521df793328a7b7135eb833f771866cbf1e2cfdacce1b589860178e974d629dc0d63a5da0a47820b22f277920817466ac70b71d3d808f435c4b3fe
SSDEEP 49152:57AzfsOyaP6ryZt+/dvi8S2xRzMUghuRPbPxYIpq5U:9mfshaP6ryZt+/dRzMUghu1qu
TLSH
T1862639E820D1A257F3814073A64553EB21FFD00C6037DE484BA956E9A4B8CDF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.6MB
SHA256 ea50b9579846609fa0cb6ecda216689e49e48d4373d8a1f90a80ccc291a85e5b
MD5 f2e14d0958c8c284959933e72885919e
SHA1 786711fb67e0cedc80777a765d1190e82dddce6b
SHA512 8a26f3b9fbb1d4193396003d22737b0629e911748e0f5423d02326ebf83078040c18ea16d1c54b6e23cb8e3eb2afb45e369dc655d9ef3f2ab433e3b4587913d9
SSDEEP 49152:LbNRR5aHug0UtWZKb8NSuCOQwK8LznhYhf0wTkJk+gxyPSsSS9tx4gIQ3:L5RRIR0UtWZK8NnN15tSS
TLSH
T193564CE860D1A242F3458073B18993EF21EFC00D607BD94457A856E5E574CEF8E27BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Xeno-v1.sa5DC53Q.3.55.zip.part

Path C:\Users\Admin\Downloads\Xeno-v1.sa5DC53Q.3.55.zip.part
Size 6.8MB
SHA256 1c289425268302a153c03e144c0ee13fcbbac0081780f68db6a0a793a7adb658
MD5 76ed2d5e9804bfbc38a3a16c2a30eb82
SHA1 7d238524a38180bedb841d40b64ff38ae83383f4
SHA512 2e00bbede4d28ae14f7b395eb948755c7144c4ce45231757e4623b476ad3ff8f10122355b88473a84dca6137d1ff58d15a5f854566ec8401059356116704a846
SSDEEP 196608:d/Fs72qPGBvG7bM0t2XaCzx/sQ/28lgSjJh7d5yV/vJg:d/F62qP/nM7ha8lgU5yV/vJg
TLSH
T1F86633ECA7F818C2F92481BD9D601BF87613F7857611961BE24814D272D7DC0AA87B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads