832b5a4c93c7a8d4bee8afa9f2c37288f61cab51594f510c298e3ac362496566

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 10:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Screenshot 2026-08-02 122009.jpg
Size 159KB
Sample260810-ml1mtsfe56
SHA256 832b5a4c93c7a8d4bee8afa9f2c37288f61cab51594f510c298e3ac362496566
MD5 9eca11dbedbccf1b6f7bdb41d14d60fa
SHA1 dee6e6bd8b727905d21f3212b60c4d4e5a8c45ea
SHA512 5f01041c577c383e0068257d56a35e38f0cf067a81a10a05312cc14dae6f9a908fc750fbbdba35a6180cbe638f948bbc46139cec41658e23c944e127c04028c7
SSDEEP 3072:aRpCxyuhqJJsR7bD56qzr6siFFxbtkBE8TIMjNSU8ySeLE+n4vsWrtf:IpJJJm7b1CsiJbtk5l5Styxn40C
TLSH
T127F3126465E223ECF14DA9A6F21CCB48C5F1DB7A31E02A583573BE4DD14FAA450FD284
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3688	chrome.exe

Checks processor information in registry 2 TTPs 32 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308316558099849"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2380	mspaint.exe
2380	mspaint.exe
1976	chrome.exe
1976	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe
Token: SeShutdownPrivilege	1976	chrome.exe
Token: SeCreatePagefilePrivilege	1976	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe
1976	chrome.exe

Suspicious use of SetWindowsHookEx 20 IoCs

pid	Process
2380	mspaint.exe
2380	mspaint.exe
2380	mspaint.exe
2380	mspaint.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe
3872	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1976 wrote to memory of 4868	1976	chrome.exe	89
PID 1976 wrote to memory of 1764	1976	chrome.exe	92
PID 1976 wrote to memory of 3688	1976	chrome.exe	91
PID 1976 wrote to memory of 1764	1976	chrome.exe	92
PID 1976 wrote to memory of 1328	1976	chrome.exe	93
PID 1976 wrote to memory of 1328	1976	chrome.exe	93
PID 3444 wrote to memory of 312	3444	chrome.exe	96
PID 1976 wrote to memory of 4796	1976	chrome.exe	97
PID 1976 wrote to memory of 2780	1976	chrome.exe	98
PID 1976 wrote to memory of 4796	1976	chrome.exe	97
PID 1976 wrote to memory of 2780	1976	chrome.exe	98
PID 1976 wrote to memory of 1748	1976	chrome.exe	99
PID 1976 wrote to memory of 1748	1976	chrome.exe	99
PID 1976 wrote to memory of 4676	1976	chrome.exe	100
PID 1976 wrote to memory of 4676	1976	chrome.exe	100
PID 1976 wrote to memory of 5004	1976	chrome.exe	107
PID 1976 wrote to memory of 2716	1976	chrome.exe	112
PID 1976 wrote to memory of 3944	1976	chrome.exe	113
PID 1976 wrote to memory of 772	1976	chrome.exe	114
PID 2128 wrote to memory of 3872	2128	firefox.exe	116
PID 2128 wrote to memory of 3872	2128	firefox.exe	116
PID 3872 wrote to memory of 4208	3872	firefox.exe	117
PID 3872 wrote to memory of 4208	3872	firefox.exe	117
PID 3872 wrote to memory of 4208	3872	firefox.exe	117
PID 3872 wrote to memory of 5180	3872	firefox.exe	118
PID 3872 wrote to memory of 5180	3872	firefox.exe	118
PID 3872 wrote to memory of 5180	3872	firefox.exe	118
PID 3872 wrote to memory of 5180	3872	firefox.exe	118
PID 5464 wrote to memory of 5528	5464	firefox.exe	120
PID 5464 wrote to memory of 5528	5464	firefox.exe	120
PID 3872 wrote to memory of 5540	3872	firefox.exe	121
PID 3872 wrote to memory of 5540	3872	firefox.exe	121
PID 3872 wrote to memory of 5540	3872	firefox.exe	121
PID 3872 wrote to memory of 5540	3872	firefox.exe	121
PID 3872 wrote to memory of 5580	3872	firefox.exe	122
PID 3872 wrote to memory of 5580	3872	firefox.exe	122
PID 3872 wrote to memory of 5580	3872	firefox.exe	122
PID 3872 wrote to memory of 5904	3872	firefox.exe	124
PID 3872 wrote to memory of 5904	3872	firefox.exe	124
PID 3872 wrote to memory of 5904	3872	firefox.exe	124
PID 3872 wrote to memory of 5904	3872	firefox.exe	124
PID 3872 wrote to memory of 6740	3872	firefox.exe	125
PID 3872 wrote to memory of 6740	3872	firefox.exe	125
PID 3872 wrote to memory of 6740	3872	firefox.exe	125
PID 3872 wrote to memory of 6740	3872	firefox.exe	125
PID 3872 wrote to memory of 6756	3872	firefox.exe	126
PID 3872 wrote to memory of 6756	3872	firefox.exe	126
PID 3872 wrote to memory of 6756	3872	firefox.exe	126
PID 3872 wrote to memory of 6756	3872	firefox.exe	126
PID 3872 wrote to memory of 6788	3872	firefox.exe	127
PID 3872 wrote to memory of 6788	3872	firefox.exe	127
PID 3872 wrote to memory of 6788	3872	firefox.exe	127
PID 3872 wrote to memory of 6788	3872	firefox.exe	127
PID 3872 wrote to memory of 6872	3872	firefox.exe	128
PID 3872 wrote to memory of 6872	3872	firefox.exe	128
PID 3872 wrote to memory of 6872	3872	firefox.exe	128
PID 3872 wrote to memory of 6872	3872	firefox.exe	128
PID 3872 wrote to memory of 6172	3872	firefox.exe	129
PID 3872 wrote to memory of 6172	3872	firefox.exe	129
PID 3872 wrote to memory of 6172	3872	firefox.exe	129
PID 3872 wrote to memory of 6172	3872	firefox.exe	129
PID 3872 wrote to memory of 7072	3872	firefox.exe	131
PID 3872 wrote to memory of 7072	3872	firefox.exe	131
PID 3872 wrote to memory of 7072	3872	firefox.exe	131

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-08-02 122009.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2380

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff83da6c728,0x7ff83da6c734,0x7ff83da6c740
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,12022440043948419184,5082677305402725590,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,16591311764880972970,2602768921568712147,262144 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2228,i,2068825325021951889,3477695793022654236,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2344 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,5142426484125878830,12163059520825792794,2097152 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,4001889075032779582,5223504377135193875,2097152 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4484,i,10703126032118665962,18098425399882118022,2097152 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4440,i,10520924365765242951,15388793572361778229,2097152 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6092,i,5111905907169654751,2936183907256226329,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,17460829823953536553,14588809481842560904,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5224,i,11502525764773830194,18087718302981982071,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5232,i,341459359504486756,2651224992363592753,524288 --field-trial-handle=2040,i,9493293023849231063,9265178804277814871,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3756

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff83da6c728,0x7ff83da6c734,0x7ff83da6c740
  2⤵
  PID:312

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1412

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4500

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2024 -prefsLen 27099 -prefMapHandle 2028 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {bded2672-12ad-45a9-9601-3489d107095a} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4208
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {f0027f14-b57d-417b-a186-b4a8abdc1bc3} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3788 -prefsLen 27276 -prefMapHandle 3792 -prefMapSize 270279 -jsInitHandle 3796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3804 -initialChannelId {d71dc5a4-cad1-41bd-889c-e666cce86f8f} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5540
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3984 -prefsLen 27276 -prefMapHandle 3988 -prefMapSize 270279 -ipcHandle 3996 -initialChannelId {7e963177-089e-4a06-9e5b-ed72f559420b} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3628 -prefsLen 34829 -prefMapHandle 3724 -prefMapSize 270279 -jsInitHandle 4456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4464 -initialChannelId {a47348fb-9bc1-4e10-b0c0-ff8a28cf9fd2} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5024 -prefsLen 35012 -prefMapHandle 5028 -prefMapSize 270279 -ipcHandle 5036 -initialChannelId {d4381e22-3cda-4d96-88e0-c6ff187ae7d4} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6740
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5176 -prefsLen 32952 -prefMapHandle 5180 -prefMapSize 270279 -jsInitHandle 5184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5192 -initialChannelId {a4b3d01c-be82-47e0-ab2b-3c76c15ac5e0} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6756
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5208 -prefsLen 32952 -prefMapHandle 5212 -prefMapSize 270279 -jsInitHandle 5216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5224 -initialChannelId {3f70412b-b71f-4678-8ff4-4c68dde98d9e} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6788
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3576 -prefsLen 32952 -prefMapHandle 3568 -prefMapSize 270279 -jsInitHandle 3644 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2876 -initialChannelId {51fc72ce-4ed9-455c-ab2c-1216c32b6c2c} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6212 -prefsLen 33071 -prefMapHandle 6216 -prefMapSize 270279 -jsInitHandle 5988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6188 -initialChannelId {75bdbd10-95e2-4a33-b6ce-fb48fb1b4c97} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:6172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5380 -prefsLen 33071 -prefMapHandle 5376 -prefMapSize 270279 -jsInitHandle 5364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1324 -initialChannelId {fb827469-4df8-43f7-9489-9314fb4b5671} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:7072
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3764 -prefsLen 33071 -prefMapHandle 4500 -prefMapSize 270279 -jsInitHandle 6532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6528 -initialChannelId {6fa622b5-35cf-4c1b-a7da-92df486d88a8} -parentPid 3872 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3872" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:828

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5464
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  PID:5528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 ecd252b3f1c5f339086245da7090a285db79f6bdbaf05efc407e533763b1cd9d
MD5 9e8a968ddefd4d013e51d21d82cf1104
SHA1 2fbcd2f941dcb366be77993bac70c4e59d25de29
SHA512 5c8f8e39a186c5f1aa266b589b30bd1126d6f7e74860b3db3e5e427f28c5b8e9beec691dfaed35f96d0998833be844518bee7e0a64b8ccb4dde37e161d1c26c8
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c3fac1dfe5147d92ad2ebe61433af7a0abafa56aa1e87f7f6b66dbcfbc4ba19
MD5 6b24201baa2b8ef5cf591da07e60f567
SHA1 d2492b9aa15de72f8746c82580ac8425f89cef94
SHA512 450c5077daf4173a6bc7b5d5fb43dfd667120d4e1ed822dfeedf6ea2cc54dcd6c232114906dfccb05a028e69ea2b87b82e385163aea6af88c9a72087fdd60132
TLSH
T11CE0E5AAD932A83719FD5B6C50540B86D65013572A40894F7A3CC00ACFB56360545C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 5f4528b279acfa1089e646a40652585b09c9693118c8882d0d7aaaae2fdb037f
MD5 d52adb3493683e2b02efb43b49d7c865
SHA1 bdb465d79231f777c01dac435c904d07cdbb57bb
SHA512 703c05c4ca9173a0e6005db2ff5e6ef5d0caf0ad09dfac7b2b8bc79b43c6fa034af14d7df4318c5ba19d3c6eaf2e588254791367cb409f3c1e042131abbc3f6a
TLSH
T1AAC09229995C2977E3AD8AB221E20DC1B2B129E81E4285E78192488EC7626F40113802
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 96560f72abf5d91d7bdbf8a3389e712eda982755750ed88ecbdfebf7d006d6d3
MD5 6f60525300fb3ce5e45af842f5826579
SHA1 a7b4895576b4c2046cb68a3523f3297b827bb721
SHA512 882c879feea24beaf1b321966d79d2e67e2c8803c685d0363e2ddfafe4c63a48a9ab077c4f0553183d11f9145f8c7be93174629c2f473439df65b147fbfa9b07
SSDEEP 384:a8DZlDKDCDCjG/tIkUI3ijVYWNkqpdCQZwMYfceDNy:a8DZlDKDCDt64idkqPCQZwMYfceDNy
TLSH
T1ABF3515F9F216623CDFED1BA6CE361A64C3EE07F874215C1AC5000B1CEE26A7A01D5B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0860a7c2-ab25-493f-957c-22e7cdf11d2f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\0860a7c2-ab25-493f-957c-22e7cdf11d2f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3625a0744086ce421eb5023a66b0b4cebdf142119904e6f4fe5bb6109240466e
MD5 497e2cedb433e34fe87fe641da552802
SHA1 eb0264d446b1344033b2847397dad704569f5dd1
SHA512 dc466eef56a8c3063ccc242d5c7715b8ba8efc4ba18137a34e221749d29dabf4233778812f6d114b6301c609a3e96b6b1cbd10b3114535cfe412555c8d3ce963
TLSH
T1FA619BF7C3E4D62D885156F4DB256F1FCE690A28421C3C67C8D8AE5B93E2972D21134E
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 26b4dcfba8b51380e34ca218f3822aba0db15d16dcd9654a454a82cfd704d299
MD5 c6e0205dc86da67e63f98887590010f9
SHA1 923d41fd3533b5438de06a5d6cecb03fb3e1690e
SHA512 722f9de64ee346edb53e52bd1de2a812784575a442c6ef93d9c78c3b9b867f78cf729d93d141410115e30f1c3fbd779e90a4682bb2333dd30d52cb3ca27ef4f5
TLSH
T12FF059AB967EB43700BD05EF0E0478096CB5A431028558E0CFAB82BCF0D15E71B02857
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8c1775205aa08a7057186ab418c95899c5804e266e9aff67e132e72ff25717fb
MD5 d7b6fc44ed78390d7effe09e39839875
SHA1 136472ad6892dba844ac9ed52ad81e6fe6893c76
SHA512 6b6a1f6bada6c49e2a541baa26d9d6d9393c517e46201769df53836724b9c378e577a5e282157a44d3356247577bf5bff4fcca6ff003cef58a71daa44d60aa25
SSDEEP 192:qR6GxnRv78pAPRp2Z/X9DHsb+WNng/BAv2RaeM2PHaCVyIsnAUge:qR6GhB4UX85wsC2u2/aCe
TLSH
T12442D72FAE20693B5CDBD219F9667763D3F6102661D42E94EAFC892C14EB5CC312701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bcfdfd63ecd371151826e6be0e68e4641fd26acc34b7cf685d900a1e33b29ad5
MD5 b96737f8e83d65589a87248ce3d6909d
SHA1 b3fd12ee9d8bf1b7c2f79a50095f3c976482d484
SHA512 07af35c6317904c37fa8d992eb08cf77002295ef086066efda101fb3d0ee28ad9b267773f92e7c74eda0a745c96647143210e0a7c3d3749efde9e90f311ea2a3
SSDEEP 192:qRkGxnRv78pAPRp2Z/X9DHsb+WNGHg/BInYtaeM2PHaHPyIsnAUgraJ:qRkGhB4UX85wL6Yq2/aDe
TLSH
T16742D82FA920693B6CDBD219F9627767D3F6102261D42E94EAFC892C14EB5CC311701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 832f9a95c3ad3d2e71f9b7d6c4e627787ac886ee5cadfe346883e2a9f1a7e54d
MD5 6499f06a01384c6977b0baf9e7c262f4
SHA1 0c4c1a8aa8bd6ec51fe55c21923cf3a8732289f6
SHA512 cb827f4aecb20c002b5f018f13a2893771dd1e4e8c1f4c645a98309325cfde2cd6c801348564a2e772fe65e1bc21bb81beee82dec4e9db65eff5585f68634bad
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2uFoVumTny4a4:1nbZeMrv/hGXFAny4X
TLSH
T138D3974B3A743002EDE59A722CF055BB5E3CB16D4F51A5D428B620588EF2863B63D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1c3fd3defc59f55ee4016b41cf476dd7fb89777b64015a1a7a27a76fc377c2a7
MD5 d485d33a1fcf6b98146cbfad18aa4a3d
SHA1 7ae98690338e7d5d5238ef3d44f38416ca817d8d
SHA512 f4499c520e85313709667722fd7ac26ed24993311a74c4f19ef04a6c6b9f7fcb2ac7adb14e8c2b74ddf0acd1c67b10363e6da740940a2df00d4e16445d3be2ff
SSDEEP 3072:zgGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:zLm7Rkm1tYpBeh2BAor
TLSH
T161C3123B6D75E8375DB9BB1EA04E0A1F1DF14DA6C920DE52C8D46B0433EA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 399fca10b710273ad95e93e01599ae6b51845859a57f28659e28ed51a228603b
MD5 33fccf00ffcb4f5d0e475d5c4550d5cb
SHA1 d4e7479ae63ef886e6c11af954256cda80c69819
SHA512 81aa7a892f78c90a3b5c499da8114c83ee92a41a55d6b5706236aeb88f5045fb3a33b6e40d11a27d6d528eb4af1d9f84f67c37e61f3cd1423f14c1a646b4c0b3
SSDEEP 3072:JGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:om7Rkm1tYpBeh2BAoO
TLSH
T195C3123B5D65E9375D79A71EB48E0B1E1EF24DA6C930DE42C8D46A0437FA7CC1904A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 c53e99b75aaee4860a338e96385eae06c037fc0adfeb2fffb3293642f971ef26
MD5 0e0833cf01738cd5de229c347a9cb480
SHA1 bbd7e550cb5126b8e60876962c2066a6e10ec621
SHA512 5255942aada2e0154fb431bad55a34d7a2f29db31c94bf6d9e7263d5feecb40fcb231259189a11e969e40f9e4aaa99d930d78db521e395fc1a2b0e450d7eeef5
SSDEEP 6144:Pj4Exli9ujwHzoqtTm7Rkm1tYpBeh2BAo8:P0EfJj2ti9oBGcAo8
TLSH
T18E3413A35EB1BC7B0D329166B48F4E2F5EF11A6BD910E99254C43B086BDD9DC4B02E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 3bfdb377040aaf46526f80c70ebd8b932b3f0a4405dc0e4d375b74fe376400b6
MD5 59d6f9143e609e82db8f6a61308dc09e
SHA1 10dd798e8f7a54f135193139655af067f7a75fab
SHA512 9638e59a17eb165fcc4b2c9b5a715794f8d8c7077d1ed438f21064bf422e8cde475bc019df0039cece1082350a0c91da8c7dacf419c97cc15a998ae5b52f8a48
SSDEEP 3:MsEllllkEthXllkl2zEkltlt:/M/xT02zntX
TLSH
T1E6440414FFC4040DCD0010304411C3500374D4740D155F4334510C137CDDD400C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1D0AA4440D1BCCCF330C82225FFD88BCA4DDBB90

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1D0AA4440D1BCCCF330C82225FFD88BCA4DDBB90
Size 804KB
SHA256 50e27c815249ac7a546113a7cbdb64e55f3b60a97a194f673218228fa592f252
MD5 8b60d1bfd30fda80efc43f5dfad67df4
SHA1 14dafd26f92eb5ceb81fa0879035ad91d0be554a
SHA512 d6db128667fe47d69dd1d70714548aaf0689237ab7683989bb013955108227f35d21fc68a2389dca28f347f8757e550ebd2a840a4a3c27b7912b1b53cc0f44dd
SSDEEP 12288:IfJWKtz5b5Dr7nBmlEQEukIbCItIzj2CvhzI:cb5VkEQxCSIBzI
TLSH
T130050866FE96AE63C91603B140B723353B74E4551BE6F3172B8FB022BC563B90C525AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1FA274447B23875E933ABC7DC2E3B89FF50039B8

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1FA274447B23875E933ABC7DC2E3B89FF50039B8
Size 140KB
SHA256 57de5b694a0daf781623b11471f93b6985f7e24b778bc299c37775b6d7387740
MD5 f47d6a9f027c705f9752469de956df95
SHA1 f3cb16b6c80d42355656a5af80fa3c3a0a9a10fc
SHA512 e71fdf085c589c73f80403aa56461d32ece32fdc50afa47dd96a619bb22c4dccfcfd2d02ef152088ec0f6d38c894b176a65e97b54487ce4f750aa29c4e1c3737
SSDEEP 3072:L7dL5PIROuUznZfbdVbAET32Ftdr4C4JJ4xBJHxvmlV/hucL9NpSh7RDHck3Pck7:LMR9UhdVbUK/9Rzm
TLSH
T186E30D5AA3F90149F6F33F5A6EB656545E7ABCA2AD39C19C01200E5E0A72F90CC71733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3A72DCA7ACE85624565F8B6EACC9E70F7B578199

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\3A72DCA7ACE85624565F8B6EACC9E70F7B578199
Size 16KB
SHA256 27c4813f503cad59e484ed3e2cbc42ecfd8b0b30e12935b57d286872812d1e95
MD5 fa89394ce2cdab8934f3431da4873e2c
SHA1 ed1d37043974243da7b78e260e7e9bf9c27b858a
SHA512 01eabaebbb8145c7f9df15f604fd344036822c7a56326e018c4e99db62b328108bded2da7370f6b2674349ffabe88057d752f44e10a10e382448a41e69fbb72d
SSDEEP 384:nQ/pw6Gb2RW+XM8jpJl35z6scFMFWTSp5jTMSRg:n/6Gb2RW+XxLl3Vtce0Sp5jTMf
TLSH
T180728CB6A37136E0DE22AB7AEB25810C6F915C4BFCE094A99804343FB534D42F52FC64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43A79F78509B95C096475B1B0859C6D2637FB71F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\43A79F78509B95C096475B1B0859C6D2637FB71F
Size 547KB
SHA256 752304020a4afdf8b213612fbc167453ff88bc1a04ca0e76a594b7614d69228a
MD5 7bbe88ef284cb59e919e75fa8f250eb7
SHA1 79793baaa00e29db2b87388812874ee77f600c7d
SHA512 f29da81993a9eec854220f940c95af9a6cc4bcf51f004573d20419d3c37f500c9943e8b44a817fdeed79066664286f5f6bc422b51ebeacbf52a0f280330cfd8a
SSDEEP 6144:6AZGOsHfdRB9BNUzL63CN1vCJJnPjWSDlyvfe28nz0SkXu+DdfFHVYmPDUeMzKQu:6AZGOsHfjBrN2Y0FCJpWSWWXTkXukGzG
TLSH
T154C4F86AFE419B13C93107B140AB2B353B74D4061B91F3276ACEB429FC9D37A1DA259C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

444C0FC15FDA26CFA9691B0807CA79F799C8B4BE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\444C0FC15FDA26CFA9691B0807CA79F799C8B4BE
Size 47KB
SHA256 2fd348cc2487addfe4f1c014fe05bb5ecd845ee5c176feb3fb7514d7c77f6380
MD5 a042f05cc5fe4828db00d8e87f52ee80
SHA1 68a6435a6af50debabc5854d1bee8c36b231584d
SHA512 11946bd4ff77c536ee1d11222f156c82c01143eace9bb6cbfc03d9a22171ac9b2f5d9e40e005e08ae662e2c7b5af31cf4f4631eb97998024275537808fffdbfb
SSDEEP 768:a1V3dON3UZUrr9GsXR/DgdJnWu3JOwiSXtjoSmnG5Dr5DI2h6ogfogOmT5czg33v:a1V3U6q9jR7Gl3JOwizGJ9D9h6VLOmTV
TLSH
T10D2318BABE14596BC81103B245B327763F7AC09A2BD7E3232E8E70317C957B91C5189C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 2be8f039f8b8b0a8b1d6392540a3f2837e75c626d15fe09a5ce3f949fa69955e
MD5 4717223038df2b91bc0dcb5e8c0dfeea
SHA1 92180c9ef1decc0f7f85ba321d0caa8d7c1cbb9d
SHA512 1d536923242be1d269fa78edff5f386fb6c829df10c8804eae64f12faebb1dacad015fc6ca58e09cab01d4601f10836dc5597287c94deee488297695f944dbe4
SSDEEP 384:HwCe7iO024YsDL84KKDL849B7SOEAd9KVRaAcP+AWRMA2AFM:QqZYsDL8lKDL8CB7S/AmVAf+hRMDAu
TLSH
T14E729E399F413CAC2997C0E8C5F892D98C18B6A7CFE6806D21683D0DC798969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 715258dd9578bbe6b0b64abe2f55f42cb8300679d656255618fa94c08f561c4e
MD5 e975c5cca4b7dc6b0fab598c8b0d4080
SHA1 33d195ffa345e7be7df196028cddb4276015c233
SHA512 3585675e05fa47e1056950f9d4bd6d63ef4cb7d9e1694e8e0c93201c8d3cab33309e6b4870fcf526349e6ed5f33e7527d3695644ad4942b1d5b5b037d343dff3
SSDEEP 384:HXkRyiO024Y7DL84KKDL849B7SOEAd9KVRaAcP+AWRMAr:3mZY7DL8lKDL8CB7S/AmVAf+hRMe
TLSH
T17C727E3D4F003CAC25A7C0E8C5B992AA4D18B7A7DEE6C06D21583D0DC79896AB5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

A70432612D66B77A3E5C3A669DFFC85135C14B78

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\A70432612D66B77A3E5C3A669DFFC85135C14B78
Size 37KB
SHA256 692ee749219f1e45acb297639fd120dae0628669c134c6a52a005403a6727601
MD5 3ce497f7d304801f367d06a4357746df
SHA1 9b937c77ca7e6c1198fb03069bb5f645f24f528c
SHA512 0bce08ec913cc5bc3813dbf89140864a5cedc49a0ff120c9ce562bf20e7d2e0e9e22b68aa50a7f946802049d3430f559e5e55f6fe1b2e3d17ff9b3af6cb6e56b
SSDEEP 768:zVvFPWGddmFQF5LQxhkvl9oD1uxb3sKZoDsKZdlE7kHORO4ETzxL5HDkHORO4ETR:zHPPnF50YjjsjsTkuRO4ETzxL5HDkuRK
TLSH
T1FF038EF36904065F2F62D7C98255B28CE93B655EBDCADCF8C4210C514B88F75B228ED4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C63F9C52F33838C044A87354164E46A2EBC6E2F5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\C63F9C52F33838C044A87354164E46A2EBC6E2F5
Size 47KB
SHA256 6e8f2963f3ea4ea8e7a39ac536d2350530ec0fb402f20d89f359bd076e881459
MD5 43ee59f5217cb9c821f4d86cf138de55
SHA1 919d21fb735698f27233243e62dde962e073339e
SHA512 4d31276a18965f33b769f935f23089e568037eb83e2d7ef102c020610095e4f66cdd9bfe46a5ec1317bbcf65b9e8967908192bd45d517142c81f7cf740f32b09
SSDEEP 768:q2W5vzNLyvrB0vfz8JB8NVI8A1owf1QTxrvvNN440sg23WtPNKRwEczg33Pczg3B:KLRLi8PL2owf1QTxrvvNNZ3WtFKRwEcu
TLSH
T18D23922DEBF91159FAF32FAA29BB5654497ABD92693CE4CD01500F4D0A32F40D821B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D6B20B8D16A1572A25E72890F14AACB9ED306587

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\D6B20B8D16A1572A25E72890F14AACB9ED306587
Size 48.8MB
SHA256 6688330eb4e6ff94c6352a9fa18e6117498853d12cfa663784015e9f7b1d3d7c
MD5 17d8e301a428d2e476df3a08c803338a
SHA1 c5449d3434331bb54ea67436dbabdd001b4e9a84
SHA512 6bb0ffc6c10fdb88f4a840c28c4ad985b0347a2b44701c6d7b5b9c8bc2de517492b9c4f39a2dff2eacc4a531a4843d01dc6ddfbc7cadcb6548d895326737ec87
SSDEEP 196608:6NJTEQ1NCna+4NxTEQ1NCnaEEd5dg4yyen02vjakbePEa+Z7L1:6NL+4N/Em2te8a+ZH1
TLSH
T1F6B74B44EE869E63C51502F584B723307E35E040279AF32B6DCFB619BC7A7E60D9266C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 60c4c99d092912355202c3c7738f8a1bbbc558184f5da16177dcb8890b9c0563
MD5 294d23be4a345c586b15b1cf35343f3d
SHA1 f3dac660f1545f7762c4a64541848f6b316edb74
SHA512 3ab7160bb325b54b88aae0eda150ad1d724f4ebb000c1f6a64f142ec243a60a51f3ead377b1dfeadf3851a8a8808dfc83e2f21d728567090e63f75e0dced4498
SSDEEP 1536:jTrli5yy0D6ffLdTcOmXccgilhHMLS/eya0pydUe5PyygvvE0Mp7GmqnjLX06BP3:j3lafLdTq1gkJ/ydUg7mL0f1bfQ
TLSH
T12AA3BFF6EFA2CD7D69FFD4296BC1883EF9262440B3A73009C8536711A1C6B786375648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
Size 28KB
SHA256 2e30fd46d1fdf6fb235a85f0bd34ae46324d7cd3a4ee407c069fd514a11acd11
MD5 33602cec7257883a128dfdca884dd613
SHA1 6a5ff9b24fcf1501922262459cc9f7dd23633577
SHA512 c39950798fc3c67d76a46457f605e8fda7bdf31f4b35fdc1aa8aef6308c9f31805bcdcc46f5b4cf3eb46d7150b1fabe0a74d5d7d3a8f8737360c2d684eb014ea
SSDEEP 96:Z220Ls0zw01BE0oI56H09m01K0Ba07M/pD0KZ+lKUlm5D4zl+2l4olu8lC98lIUh:Z5nbDXvDTSQFujLbzfLHzXD5+I
TLSH
T166D28BEB17B6A573F1628FB0406C718CD8330625496985E48A44E8F70AD67E4E13FFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
Size 10KB
SHA256 72ea2512053c218a08daff0631789a4c3f67866ca3a7ac029817bce7abc69c07
MD5 9f84541c93ef9aab3105fb4efc1d8b14
SHA1 65a6bf9b2306650c0a5641ec7afe5f8c1ac3fe6d
SHA512 94d0e4506c8ee51620b88595dd9e203ad0ab59876c37768b8d690b6c4349ffd72fad19f0b9285bb84acd021397967d53dd9e9bab2c6fc53f368e1a222855ea99
SSDEEP 24:rMuhMZSH7S91R80hsB9xVZf0k9BJZf0Y9VvzZf0T5q9F55A5WZf0E9FfZf0Csd9L:rlMY0aTt0GJ0SBl0dI56O0m307XM0
TLSH
T14E225EE36B76A473F1A28FB48059B28CCC331325157895C4DB8494FB46C2B99913FFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 1ee04795cf7d3d3a13e9261edd8d24ee4ab21e2fcb2ac82a9c5fa4910e382276
MD5 af976179ad5659264adb118670477614
SHA1 efd3ef6c318acd10db2bc76cef08f0ca94d01420
SHA512 d0ffaf5958c6d3dda6f4d86f711e4adbef71fe519b0a60c9cdd46279a29932f9b7599700c23b6ef5251005e1d040d2d1be0a3e2f4d0eb0ceb5b361dd5ea18f2e
SSDEEP 192:GOv5zbogbDLyjlcX51d66JozGzgCl6mc0dz:9bogbDLyj+3d66JozGzgC1jd
TLSH
T101D1FE64EA28863BC404437BCCA61F410F35389BD84E3F19369D65482D572DE7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 58c649af41f1b2e005f033288399d5353b1e625bb4ee00e16f76f9316c8a26cd
MD5 ebdf8c03d78eaca618cbff868b1094bc
SHA1 796816f10b326d8eb2da3d1d696c404535cbe5ff
SHA512 f2be24cefe807938f02b5d8d23c5972d7fdae510b89f2e3cb33b4ab08bb74ea66097c182576e9bbd204923b5de0c9aeaf943a6dd3d29ac044aaa2b60fff82798
SSDEEP 192:b51d66JozGzgCl6mc0dYOv5zboP9ZDLyjlcD:b3d66JozGzgC1jRbolZDLyjC
TLSH
T1ECE1EF68EA28863FC414037BCCA61F450F39389AD84E2F15369D61582D572DE7BCE17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 1KB
SHA256 1f3861d2d47eda543865411ce922011db544dbaf88af2c33239d41579c0395c2
MD5 3fa56a76d406b6ab5de1c75ae7a8f63c
SHA1 bdcbf73e7ee5d1a49543d312814ca6c1d2e4c378
SHA512 e731bd8f8951d31b5e36d975fd5daa37bb953401bae7043b975e9c99e5445af3d22f99878bf98842d08b41a5a33117fcd5a0fcfb70a9c907c2b3cf96a6404696
TLSH
T1D4214F5C79BA4D3A5CC7E65C7444028EA3514E0B04871D835E13EEDDCEC1BD9326A87D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 4KB
SHA256 bb81ce1adc6c9946590440a31002a927f59b29c3819b837362f46525b3176d88
MD5 eb66c51bc778b1f53f346965360de2c5
SHA1 c001c84a757a1703193dcaf19efaa0325e2fa38d
SHA512 a8c60e89058a0290d3fdb6c16d838b5bd6e42e8de659a018506f8207de5e50e1d90780c588d4010233a9c6dc2338516213c7bb86b08e313c5d3a948934cec4c4
SSDEEP 48:YprHXkR9TD3URwKKfxOEBVkW/i/50QInpV8LEgt4gIVoytudPZ4yK1dYyHraysvv:n33AmYSkNkst4gj7dqyWdPWvHaH2F
TLSH
T14AA11F1C65BA1C7E69C7D29CB440038D87994B0695C71D878EC7EEADCDC2B89326F429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

256a2cd1-ba35-4c11-8f86-dff22d585107

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\256a2cd1-ba35-4c11-8f86-dff22d585107
Size 886B
SHA256 769e72b7841cebb8ccf5c6f465bab20b16f7205088ff5a0292d77a947bf7e5d1
MD5 ccb9a43751bce3b21a11aec5431f8ccc
SHA1 5fe424c001f7dd096a9fc8be1fd0d4c5e55b353d
SHA512 49162d4abb61f15334aa3f48ec8f9a3f7efc76780d948e8a731b7027c06831f11be7b75024ab4d4789c12431d437f899ee71be784deae4a2ef4ee94c99e0f9d4
TLSH
T1CF1167419F6CB471CC7C824BE4B5BB4207F03433C0C649047E904B180CBA62EA7D7217
MD5 SHA1 SHA512 TLSH

Submit Download

35d2ac60-f406-4633-a0a8-076b2a820f17

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\35d2ac60-f406-4633-a0a8-076b2a820f17
Size 2KB
SHA256 ff9fd77f73adddbb0f0a02cd93a1c4fd24887adf661cd5f3edd079ba62d4c4ca
MD5 a3e2aad16db43c3d7dac66333da5058c
SHA1 2723bf2ae5853276f522a5cc2e963c07d64fc1b0
SHA512 b6caa3ceaac0081c49a9504b6980b681bb47d595a8b7f569ca218612b169a54e8a78e78f1a34bbfbf287457a912c5d948f400d8c8c97c8f5b7403f5c34f734e2
TLSH
T14941435C3A784C768DDAE29DD842374E53A48A1300C61C436E96EF4CCC967A933AA03B
MD5 SHA1 SHA512 TLSH

Submit Download

a1acaf06-48fa-44ec-8b7b-20c9e18d30ce

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\a1acaf06-48fa-44ec-8b7b-20c9e18d30ce
Size 16KB
SHA256 e98ec6b6d8e7c43b415b46adaee7602ba958e55b20ad2e60a380479a119a4243
MD5 709fbc8ec051c7dc08816dc2df612831
SHA1 b3cfd1ab249f23f8dcddaebcaf123b493818794a
SHA512 2e9893dfe199f4eb6141f52ea8b250532038d9f02343b12082499d8dd01b5caadb0023b0c1d6dcbc95b9716e328fc56da358828c599a895b2da38409136c4d68
SSDEEP 192:wSurNg50hFBFAoI2+702o2hiXbu8eky1PrqbO0GI7g1ZGTWlBk62BzitZik1YOEv:wSux2MXGIqUY52B+Zik1Yr4vL69
TLSH
T19372DA166860557E8251E76898FCBFC3E6F628CF4C018FCADBF47D0869DA06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acbd00a3-3cc7-41fa-84b1-a89da92aaa7e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\acbd00a3-3cc7-41fa-84b1-a89da92aaa7e
Size 883B
SHA256 44e73a505e40fcfa4c2fefe121efe27d7ce79cf4670cd8700cbd319d3d36870e
MD5 69de7a96b86a577201418f7c8aa4a3b4
SHA1 3c852c1b96aabe124967ed6bb3ab8eae8d816a7b
SHA512 dc53aa0800b58bebb5830e7616f796bd2bbbdc56c669574d6f8a98d9fa866ea4e80dc06dcdfd217516e25ad4915f4ca96d55e045a5eaea094033a0ca2950f312
TLSH
T1BA110045DA387972CC78920BC9657B464BF4392380C594083EA14A140DBEA2EA3AB66B
MD5 SHA1 SHA512 TLSH

Submit Download

e2a75060-b9e2-4817-87ef-d3412ea8f160

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\e2a75060-b9e2-4817-87ef-d3412ea8f160
Size 235B
SHA256 75cf2bfeb960fda48b953f47125e6eab4f637bd95cc65efb1bd061c10cccbecf
MD5 908e4111795b53e87d52102fdeb0e349
SHA1 c97dd5170ebfdbe9e43f153cd1a82b9970b07da1
SHA512 9c6777b1e41241c4a8cdce4a731ad439c0057bd122d063c53e42fca304da430e6b1f0516c6400707d6deaab40c94501e501ee374c7edb2c2c6deb6eea2e2cc73
TLSH
T106D0A7C418A8676E8C140F07B5F179C6344A8C3B18B5D820F6A249B899FE9C54251A5A
MD5 SHA1 SHA512 TLSH

Submit Download

f955edb5-2d61-4639-8665-2000694c6519

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\f955edb5-2d61-4639-8665-2000694c6519
Size 235B
SHA256 2e15af0bfe20ae4ca6cad635ccd789c9e38514c3464cc05f96d8fb27a19a8666
MD5 1b3376bebe5b96933dbd9ce064963e44
SHA1 f310ece2d1bf8e64b02d01fe265fbcdcbd692d01
SHA512 4c26710af79086eabe221016a039656d19a63321c5ffd897e006f2c82ca51ceabed157b27dd1f0d28934db38cc3d0b0732325eb49b6f661f1b0c278125f35552
TLSH
T13CD0978028ECFB1D481C0F16F0E068C231A48C3318B49820DA6081389AFDEC54165C17
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\extensions.json
Size 16KB
SHA256 8808b5d47bf50cb4249ad8842d9b14acd1bf6dd1d1630fa3d04927bba95d4dfe
MD5 0d4c27528da262e2638375f8f87df091
SHA1 7f570c742531677a3784611bb9c2508cd2584d74
SHA512 0084c986a9c5c480c0a167900fb16746f51c82dd6e1b4d9c0ec59500e193fa6b4d1b1ae8768d5cc178746b8912eccc2397b07c1a5ab0a080519127cbad4d54c8
SSDEEP 384:B4kI4vuUmldvB8dhW694z396onL4HyL4PLL4HcL4HpL4HO44hX:BvI42RfiXb4p6Y4g4P4W4h4X4x
TLSH
T11772511545049EB8294EA79AAA367E02C37D433B70845C78F4DD8FC842FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 6KB
SHA256 fd19267bf3bb7b9bf514599df75e2e20a927dec84c6249d3e04c24fd81b844af
MD5 720c129f2f44075efcc4d97397be23ab
SHA1 0b2249af86f89fde8948aea8042e3a69b438104e
SHA512 f8bbb93755f7e37fea4cb34ce4ec91f71fac7603936cf3bcb8810fd4e14074ce5e6ce70c73c5619d488d5bfeb00ddf37555d8814df03a12699b5797df4d5e13a
SSDEEP 96:xH07wUTUzqGqvf82Du1zSCsgZSSladv9j6n/5H1Bw88n8L4cnDOT:acORvf82DuhsgZSS/1Bw88L
TLSH
T1DEE13F7895488B7F64B6776CAC6888306AB2013B77BF2CC750B654C4015CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 8KB
SHA256 a9a539cb2c43a8f9c4f10c36e8af151b3cdf59d92952169d3429a7e29d731883
MD5 379a776ac71d90a2e7bf423094f7d59f
SHA1 b56f4ac526c0f7b5ccf42db0718b97a98a9340bb
SHA512 c69bd87604b9e02480d3cec7b268f1802d01590a02f2f03a1c3e619a5b01d1013589ed1c35616fc2943e349b2e7d1465ca1b50e8dd97af4bd34442e284ca09bd
SSDEEP 96:xH07wNTUzqGqvfME2DuNbzSCsgZSSladv9j6n/5WRi5LNruLBw8828L4cnDOaGS:acDRvf92Du1sgZSSeRGLmBw88l
TLSH
T10D022F3C9004DB7F74B6377CAC6889315AA2013BB6BF68C711BA54D80548F3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 7KB
SHA256 4baebd2e791d680428de8780b8dcb02dcd7bc84a46e07f1c9cbd0815cb27ec2d
MD5 21d71aad2a6ee60a9ef46bcaa354da63
SHA1 2607be920f61e73a7a286b71cf025d1b4001013b
SHA512 0e3db14e1bfa266f9af95a8de5d3c24bd8469f4e50fda05841c077acc320207589226f80bcd809e1587e6fc177c367cefe4efbb73ebe148853df9acfa2e11b3b
SSDEEP 96:xH07wUTUzqGqvf82DuNbzSCsgZSSladv9j6n/5H1Bw88n8L4cnDOaGS:acORvf82Du1sgZSS/1Bw88M
TLSH
T1F0E1307895088B7F68B6776CAC6888716AB2013B7BBF2CC750B654D4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 6KB
SHA256 a9f9694c8cd1648d439606c2531855f6cd3c03effe10da498cff41265840282c
MD5 eccff635c9ff0ef4950db163cbb1dbfb
SHA1 a81c470c9971a02f99d2b8c8f930a2658af80ab3
SHA512 706b92591a4731829262d178ace32d47dc36163d09b897e8074eb1623ad4ccc9295a42bbe28a3ddc2373bd66ee15fdd993c3a8cb2ede85de6e05ad40d491711a
SSDEEP 96:xH07wUTUzqGqvf82DukzSCsgZSSladv9j6n/5H1Bw88n8L4cnDOaGS:acORvf82DuEsgZSS/1Bw88M
TLSH
T109E1307895088B7F64B677ACAC6888716AB2013B77BF2CC750B654C4015CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 6KB
SHA256 bf3979f7c325d9f615588d03ce1c8d6156005ecbbf79fbf26feffb810070063e
MD5 e072c49503deab8dda1c060a95d1489d
SHA1 b9dc601fc258ab49821c10616900627f35e1193e
SHA512 28a64606642fca5f743ae03b1952e40067e6405a28eab43b8db898806b0df8da40ed23c7706dd4c248148d19509e6421d794828ef26da22b18697434da735a47
SSDEEP 96:xH07wUTUzqGqvf8nm1zSCsVSSladv9j5w+n/5H1Bw88n8L4cnDOT:acORvf8nmhsVSSdE1Bw88L
TLSH
T1D2E11F78A5188B7F64B677ACAC6888706AB2013B77BF28C750B654C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 d0a3021f2751b926225722adc9825983906005c06a8e394ef8f352c8dc85f90a
MD5 9ed5984eff81fb773b4a003c69ff5dcd
SHA1 1a8534cf47de2f059673ec0e97c1c5c66a1508ee
SHA512 95c2b065e911faa1b6c4f0b241128ecb69e7eb6c8f240b42c576fb1cb59fba9bb0a9ba948f51a254e1f97736e2a017517058ae29b53f6acc8dd5915cd9840a6c
TLSH
T1E0515C7B2C3B7CFB7951C26578DE0FD1CA23502005B574A9BA68BE2001EC10A9295E2F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 9KB
SHA256 7b82c3467c3529b126e3522722dece3e8b52c8ad1e628fecb9d3d382cd14a312
MD5 55e558c98351397cc0606f24c7528f9a
SHA1 0cfea18745b03d389c350fbcd544dd1bb2b46b66
SHA512 367724695ddf5bb11d2662f19a6a0bdd70d106cb28f125bcb74243e266e0af982d3abcbdf45f01b9377d3905c766effcaccaf4efc16118cbf846b906b793cf14
SSDEEP 192:6/Z3wXu9qkQPEBGO2K2XGk7xNvmvyGtAg9K7UX4TAgX1:2muUj2TAG88KQ4TAs
TLSH
T16512BFDEEC69BC39FE780468C0C52B700AB3044C076664899309EEEE4580F7A626C26E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 9KB
SHA256 1769b9233b3003c3e0537f6f1da18e206b766afbde447582c9245b97c0ccce55
MD5 4f6d33a77b2341fe681f04be93bce933
SHA1 3b52cee655a4e19b2cdfc7e835934c27c5277547
SHA512 1533f39bf4ebff2a5716ff7102111a6381760c8bb128bb76e4fe04b200d01a52853c32a210d11cf460265f2c65c2c6ffaa2666a1aab7e4ac7525e10faaf628b7
SSDEEP 192:b/Z3wXu9qkQPEBGOZ2FJ+t7xNvmZyGtAg9K7OtHN9fsI:VmuUj2RY+X8KKttSI
TLSH
T16D12AFEFECB66934BB740818C0C52F700AB75488077A60889319FAEE4585F79617D26E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 9KB
SHA256 9a062d96d8ce36f1f5feee53128e5aa2de58b85a2f856d9cd46a4ef614315299
MD5 628e04b6b3856a1b2d00a8235600c656
SHA1 f98a9fc60213d3e36f5b0e6588b83642321f8706
SHA512 40ccd2b90c6e828ff2d0e299fcefe6ee18cdd86e76d97ff2e95ef5419c95bbb120c19733fb51b4f581ce7c1ffd2d373fd806df9d1c8fff521695a8bfa473d4a7
SSDEEP 192:j/Z3wXu9qkQPEBGOT2547xNvmNyGtAg9K7fOcTQBS:NmuUj2L+G8KbOcToS
TLSH
T193129DDFEC69BA34FA384868C0C56E341AB74448073624899309FEFE4685F7D613926E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
Size 9KB
SHA256 70ef6bd400d7ebc5df0957e700676c84200a38562a83893708a275eefa856244
MD5 1c717e46e36720e11d9c1ba7468a3c17
SHA1 5fa322b928179fcbcb5b9a8259ac9a9dd24bcc22
SHA512 60c555185cde0077eb7e573203fa356a1c803c6128c3398e788457b6bb7c56a1d5c32e700844904b462b998940553c2653e6d09b38fd7281da6de12da6ffb952
SSDEEP 192:6/Z3wXu9qkQPEBGO4K2XGk7xNvmvyGtAg9K7UX4TAGX4:2muUj2tAG88KQ4TAv
TLSH
T13712B0DEFC79BC35FE380468C0C52B701A77144C076664898709EDEE4580F7A622C26F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.jsonlz4
Size 9KB
SHA256 2b012385319e455d4e2b47e4b77cd7bf56fe99426451b1661ac4ead57f0fd900
MD5 f9c16f88c9a7b95414dfec8a12b6a991
SHA1 7131b729fb79fb9745ab11555a58783355dd15bd
SHA512 396d673cc5eba31e50c733e9e50bb145e45ab466e2601f1df20269c4f6d97874bd961dd9cae19c9e9f9b77195b3a90321eb569a5ba0b78a1867619fc35e9514f
SSDEEP 192:j/Z3wXu9qkQPEBGO/2547xNvmNyGtAg9K7fOCQBS:NmuUj2n+G8KbOCeS
TLSH
T12A12AEDFEC69AA34FB380868C0C56F341AB7444807366489930AFEFE4685F7D613925E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.6MB
SHA256 3738df2aeb473d69af89bf9a92ec85e6d89cad1ccbf8c8962333b1e0277a4cf5
MD5 d97ffacd5f473480450143acfe89d061
SHA1 94b50596c1c3efd78cb00d9d24f978dee01e54d2
SHA512 f846b6ee799233d2216f6eff393473056c1e92eb14beff09620b63cbb4dd6d695667fabbda32e39cee3004661f3df5e739d831996d50aed7612fdfa481a7888a
SSDEEP 49152:6UzxsO7CnamnUnljVYarCECEQd/TFPMY95iKQtAX9zYhKZEMu1xItlRtO:6UzxselmnUnlLyFuWW
TLSH
T197564CE860D1A252F3468073B18993EB21FFC00D6077D94457A856E5E474CEF8E27BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.5MB
SHA256 f5bbbf530e24e1d930780bc12364707f8b6b75bc8f47da185104be80516457e0
MD5 7e593d91687d92be0d6dc7fb7baa8a2a
SHA1 f5b8bd43391464766880a15d7552309a8d7240ca
SHA512 809dabef09fb15f4cd5febc46c1680e26e0c07cea48455d710e860dd155be3c13ea9ff100861db6a5cd58055fa7d2764a41de1657d1f05f2d2f2d119acb53935
SSDEEP 49152:/L9LyBaeUwymfJT7lNREb6QC5zYYw6lmhwqK0ezx1O7CnamoSJZyrVUarCECEQdf:Qtzx1elmoSJYD2vIb2WS
TLSH
T13C667DE860E29252F34644B3719953EB10EFC00C6077CE44579496FAA8B8CEB4E97B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download