8c17800393e3bc9478a17de76616bd7a9b77ee1a4b2c30ea0eb6ef647de2ad9a

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 01:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
newuiv3.exe
Size 36KB
Sample260816-bjkcaaae83
SHA256 8c17800393e3bc9478a17de76616bd7a9b77ee1a4b2c30ea0eb6ef647de2ad9a
MD5 204dd7d31daaef8e5f3d6aa359318de6
SHA1 8d647f5cd5fd5295173e784780f9aeb2b2be6d08
SHA512 4917918e2566ec8127130f8392780d1d8324341a32b71dc8ee7252f012c66b31ab9dbd64eef5807b183b6690e2426a4a372062a7213234e0c575b45dd8343ca8
SSDEEP 768:MhhzNTAeHHwi15MI/do9wB+1xpCsAV29zPJRJRQSLA0NKK+M:MhFw8OI/doyB+1mbcdPJnRQSLA0Iw
TLSH
T19AF22B33878001B5C51AD5FD87E97622F667B84557387ADB87E40A273B40BF07E3AA41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 25 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4232	newuiv3.exe
4232	newuiv3.exe
4232	newuiv3.exe
4232	newuiv3.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3588	firefox.exe
Token: SeDebugPrivilege	3588	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
3588	firefox.exe
3588	firefox.exe
3588	firefox.exe
3588	firefox.exe
3588	firefox.exe
3588	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3588	firefox.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 6012 wrote to memory of 3588	6012	firefox.exe	94
PID 6012 wrote to memory of 3588	6012	firefox.exe	94
PID 3588 wrote to memory of 4804	3588	firefox.exe	95
PID 3588 wrote to memory of 4804	3588	firefox.exe	95
PID 3588 wrote to memory of 4804	3588	firefox.exe	95
PID 3588 wrote to memory of 4752	3588	firefox.exe	96
PID 3588 wrote to memory of 4752	3588	firefox.exe	96
PID 3588 wrote to memory of 4752	3588	firefox.exe	96
PID 3588 wrote to memory of 4752	3588	firefox.exe	96
PID 3588 wrote to memory of 4764	3588	firefox.exe	97
PID 3588 wrote to memory of 4764	3588	firefox.exe	97
PID 3588 wrote to memory of 4764	3588	firefox.exe	97
PID 3588 wrote to memory of 4764	3588	firefox.exe	97
PID 3588 wrote to memory of 3864	3588	firefox.exe	98
PID 3588 wrote to memory of 3864	3588	firefox.exe	98
PID 3588 wrote to memory of 3864	3588	firefox.exe	98
PID 3588 wrote to memory of 3116	3588	firefox.exe	99
PID 3588 wrote to memory of 3116	3588	firefox.exe	99
PID 3588 wrote to memory of 3116	3588	firefox.exe	99
PID 3588 wrote to memory of 3116	3588	firefox.exe	99
PID 3588 wrote to memory of 3412	3588	firefox.exe	100
PID 3588 wrote to memory of 3412	3588	firefox.exe	100
PID 3588 wrote to memory of 3412	3588	firefox.exe	100
PID 3588 wrote to memory of 3412	3588	firefox.exe	100
PID 3588 wrote to memory of 3452	3588	firefox.exe	101
PID 3588 wrote to memory of 3452	3588	firefox.exe	101
PID 3588 wrote to memory of 3452	3588	firefox.exe	101
PID 3588 wrote to memory of 3452	3588	firefox.exe	101
PID 3588 wrote to memory of 2860	3588	firefox.exe	102
PID 3588 wrote to memory of 2860	3588	firefox.exe	102
PID 3588 wrote to memory of 2860	3588	firefox.exe	102
PID 3588 wrote to memory of 2860	3588	firefox.exe	102
PID 3588 wrote to memory of 200	3588	firefox.exe	103
PID 3588 wrote to memory of 200	3588	firefox.exe	103
PID 3588 wrote to memory of 200	3588	firefox.exe	103
PID 3588 wrote to memory of 200	3588	firefox.exe	103
PID 3588 wrote to memory of 1756	3588	firefox.exe	104
PID 3588 wrote to memory of 1756	3588	firefox.exe	104
PID 3588 wrote to memory of 1756	3588	firefox.exe	104
PID 3588 wrote to memory of 1756	3588	firefox.exe	104
PID 3588 wrote to memory of 4400	3588	firefox.exe	105
PID 3588 wrote to memory of 4400	3588	firefox.exe	105
PID 3588 wrote to memory of 4400	3588	firefox.exe	105
PID 3588 wrote to memory of 4400	3588	firefox.exe	105
PID 3588 wrote to memory of 5064	3588	firefox.exe	106
PID 3588 wrote to memory of 5064	3588	firefox.exe	106
PID 3588 wrote to memory of 5064	3588	firefox.exe	106
PID 3588 wrote to memory of 5064	3588	firefox.exe	106

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\newuiv3.exe
"C:\Users\Admin\AppData\Local\Temp\newuiv3.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4232

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6012
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3588
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1944 -prefsLen 27098 -prefMapHandle 1948 -prefMapSize 270279 -ipcHandle 2012 -initialChannelId {618c8b93-d5ba-4ce0-80de-4fc30c045507} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2400 -prefsLen 27134 -prefMapHandle 2404 -prefMapSize 270279 -ipcHandle 2412 -initialChannelId {9aed93bb-be1c-4e8d-8292-e2ff9e63ffb4} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3848 -prefsLen 27274 -prefMapHandle 3852 -prefMapSize 270279 -jsInitHandle 3856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3864 -initialChannelId {9d0c9b72-ecfe-4dde-a705-33a642b567a1} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4764
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4012 -prefsLen 27274 -prefMapHandle 4016 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {634fa35a-65b1-4a28-9ec3-c8a09a65c5c6} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4516 -prefsLen 34773 -prefMapHandle 4520 -prefMapSize 270279 -jsInitHandle 4524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3204 -initialChannelId {17892dec-3a2b-4c9f-8896-c4e64d0ae70d} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3116
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5032 -prefsLen 35010 -prefMapHandle 5036 -prefMapSize 270279 -ipcHandle 5040 -initialChannelId {5c4acfe7-7bb7-4eec-8684-6550a60fcb27} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3188 -prefsLen 32952 -prefMapHandle 3192 -prefMapSize 270279 -jsInitHandle 3196 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3052 -initialChannelId {84d1871e-26f9-40ac-a6a2-629bc837ccdf} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3452
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5620 -prefsLen 32952 -prefMapHandle 5624 -prefMapSize 270279 -jsInitHandle 5628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5636 -initialChannelId {23f8a347-a92f-4147-afcc-25f95a3ceb9b} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:2860
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5808 -prefsLen 32952 -prefMapHandle 5812 -prefMapSize 270279 -jsInitHandle 5816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5824 -initialChannelId {5c5dea17-a266-438a-aec2-fa12eb8a0744} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:200
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6324 -prefsLen 33071 -prefMapHandle 6464 -prefMapSize 270279 -jsInitHandle 3156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6184 -initialChannelId {f83ad634-ff08-4917-8fcf-69b1facfdea1} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1756
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6708 -prefsLen 35198 -prefMapHandle 6760 -prefMapSize 270279 -ipcHandle 6668 -initialChannelId {c878cf65-208c-4082-b7f6-6eb4e66f42cb} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
    3⤵
    - Checks processor information in registry
    PID:4400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6044 -prefsLen 33071 -prefMapHandle 4440 -prefMapSize 270279 -jsInitHandle 2696 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6840 -initialChannelId {305ac9fe-ee00-4046-b3af-ef2ff8b2a7cd} -parentPid 3588 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3588" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:5064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 c893f7ecffee6e07f358fc635754cd77ff04dc1664fc0af8cc8785935b799adc
MD5 440574566a4f4e49d4acc43d23c9a933
SHA1 e9b11441402a7e4be47dc1190470c89ffbb2a5e7
SHA512 bb8a8176af00762c1d6aac41c9221d88674791b035e0e3a6d96399702bf9616d2630b1a51295bd536af19a750d7ad6fee837f37e9d7f82f821f85c2d53702bd7
SSDEEP 384:HXkRyiO024Y8DL84KKDL849B7SOEAd9KVRaAcP+AWRMAVmC:3mZY8DL8lKDL8CB7S/AmVAf+hRM2mC
TLSH
T1CC728E3D5F003CAC25A780ECC5A982AA4D08B7A7DFE6C0AD21583D0DC798969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\AlternateServices.bin
Size 18KB
SHA256 4bd96dcff1e67e3976607666bc73a0b2736d412f2475301b1c5aa7b0a55c86f6
MD5 56b363eaa886b581aca134927fa71a0c
SHA1 d51884e580b0075403135ae7f843566ac1e1cdd6
SHA512 9846df8119453dd629e7cf729922e4ee32e11cf1e42bcf1e9d7ca3a507fbf4a6bdea94d6b1b6b6f761b7e76b7cb88b01acabac737672f4e4b6480a2871c3bfc5
SSDEEP 96:EVUcVtXXBBbI56vjnuSGM/pjnPpQgFpN2uOw5AvF4B4:bQ7TVOOYF
TLSH
T1C88261F36FF2A876F0928FB084A9745CDC7317295C68D684C704D0E706C5AA5E13EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\AlternateServices.bin
Size 18KB
SHA256 823df828b27e1cb0d76cdb4dbe168fd9155e6daf67c0d254952a3419656066db
MD5 35d816afff94b3c7da1be1e6776aa52e
SHA1 ffe478e9acdbdbf0534596889fdd9483079da5b9
SHA512 a0a84397dab39c4e7132596d5a088fa998a9cd31cc0a1fd667d9a62242d084c3c5097958b310a4dadd16c06a6cd184212ce1c9657510295481f18fee8c9f7177
SSDEEP 96:hOUcVtXXBBbI56vjnuSGM/pj+0pQgcqA2uOviAvFvB4:XQzqVOqYF
TLSH
T17E8260E36FF2A876F0928FB084BA705CDC7313295C68D580C704D0E706D5AA5E53EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\AlternateServices.bin
Size 8KB
SHA256 1659f2eb903ecbd2d9f7638629daa2955a30b8119d7f5442761b5c55c6c3f734
MD5 b2ee86d5621d1d6bb3a5db34794c7858
SHA1 83f67bb3ff0451657a5629f3406ca503e2d15961
SHA512 85af0701a5e724b08005b96ead6d7697bc8887cf3ddf3e4fad6e2e9f8d9de0cc7f34912d3277cd1878be6e8c7753d0d347e1ad6c1b0ca1fa763071158660516b
SSDEEP 24:kuhMZR91MiO9xXHiH9Y9Bjim9VvliV5q9F55A5AHiy9lNi:sNUcHowcB0bI56vga
TLSH
T1600241E76BB2A472F0A2CFF08069759CDC33172559789584C754C0F706C6ADA913FBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\AlternateServices.bin
Size 15KB
SHA256 06e5c2a59f4b98413d1c5070a4dd6b5e75a9c9df63ac09e384c4ff8361f1dce4
MD5 20e762c8c90dd14996201be36732c12f
SHA1 320c6237aa5ff6ac8ba9ab1bd2040c921803ff83
SHA512 24a71dcc14bbbad3ce79df71848899083aa3e88c2f557e8364090e89cec1681c0654cbabb2a15f9bc1cf962f91acdfe7c51acf94da021e873267c3f25c11dca5
SSDEEP 24:kuhMZ99VYiO9xXHiH9Y9Bjim9VvliV5q9F55A5AHiy9lNirt9BbiisWN9VxWA4oF:kVUcHowcB0bI56vgaz99sM/pVnPFBFp
TLSH
T1C76221E72FB1A472F0928FB044A974ACDC33172558789594C714D0E706D6AA5913FBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\db\data.safe.tmp
Size 27KB
SHA256 58a07a347debc808eea6a1dcc1becd88736b054689bed489ef56274479c61c8e
MD5 5dc9d67889ad46a07ed14bf833701d55
SHA1 04e18481bc3e876ceabe3486bb3cebab349372e4
SHA512 d8509c695004f59694f97a4b0a3bc5a0eae589a4bf284268c36697d6b5867cc2d7cb95e2485e60eff62adfbdd32a1fb0c47b819f25d1629db92c293dfa187004
SSDEEP 768:bimtiM7H+Gcm+uF4iReTCf0fbkblbGbRR1ge0:bimtiqHR4iaG
TLSH
T16FC22084FB2A953FD41512BBDCA50B042F79B8C998192F573A4C64686C872DC3E9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\db\data.safe.tmp
Size 81KB
SHA256 7eaed37d00a0c231c7ec4298e1eb574ea42761dbe479fbe8a41aa9d9fd6a5235
MD5 9801ecd3ba9af19007128301c1ddc8f8
SHA1 b60c22669b83c4a82c7ae801fb8a62882c0d8e65
SHA512 03aa45347cad46bb6d88e5a484af04d0418208680d9dffc5c233955e1d110f20a02384739fcf76091fa68f798442a878050bab1b8452762491bf67c2ac58e65e
SSDEEP 1536:NGHTtTtuT1qmmJu2Nk1yUu9V5K4Th6yjY:NATLcqdgp1nK5K4Th6yjY
TLSH
T11B83BFD0DB1B403BFC2485BFB4955B3C2625F42149599B1B3AAC04761DCB3BF2D0EA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\db\data.safe.tmp
Size 81KB
SHA256 1a258e686a7cda3eafb885d83e26573bec40e4d5f9267268c88f78348a628781
MD5 9d244a2186c28ecd2d7bc83cddba83af
SHA1 d45a64718929f92354b3883de0780a129beb0a1c
SHA512 ec2877ca046563d153a92d54471decd1e5f0387cee3663433cac893da43305d1b6cc050e72cceb0f0490b889f5ca3f28d08ec1d839f541c2134d9a9058947db6
SSDEEP 1536:wGHTtTtuT1qmmJu2Nk1yUu9V5K4Th6yj7:wATLcqdgp1nK5K4Th6yj7
TLSH
T15D83BFD0DB1B403BFC2485BFB4955B3C2625F42149599B1B3AAC04761DCB3BF2D0EA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\events\events
Size 1KB
SHA256 df2f2e78173a60e0c7cbe6a5c16e7001b076d965f7a779c5723ccd7461047545
MD5 13ba28a886d4d103420a91b9d8f428ba
SHA1 1a26331ac84180ea79bd7ffcb7d88a64fa2adb5d
SHA512 e2ad8faed127f30a8cca0304ec4892e5b8a1054d56bbc58c8a647e79bb14ecb85286788d28e07f1fd3c719c93141bf062ddf3da388b852d7c2eab054b6b25434
TLSH
T174216D9C3EF94D3EA8C7E25C7491128E53554A4A18871D434E12EF8DCE919DD316A53C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\events\events
Size 4KB
SHA256 55501b6cde9d8d510c67ff97db6f6978952362b440efe14254d69451fa6d73de
MD5 179a0f1a723ed6e5997a377cb884530e
SHA1 bbc0f2860904a65eea5934c8f37d349995bb8026
SHA512 f5b63206c7a9476559b44692f3c58685cf61123daca7730c363ffb645a8b2f4e43d4ea028cb84648749409dc856908bcc8e592a276aed64f837754d6c421709c
SSDEEP 48:Y3ckbYAJmIwnWNKy8Djb/i/KOCKKfxbn6WxYacOrXhF44qDicBdZcNaYYQdBZ2xb:A2RDnkGpbyclF4rdJQdX2n1CpOHv
TLSH
T1E3A1301C2EF90CBE68CBD39CB452038D479D4706D4871C878D8BEE49CE96E9A325E139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0848c800-58b3-4bee-94eb-3fd36fab49e0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\pending_pings\0848c800-58b3-4bee-94eb-3fd36fab49e0
Size 2KB
SHA256 dc92dbe77febc57cc50184805decc26e60cbd1d02462006ecfcc9847b9fc8750
MD5 fba0838cb24ad3ebab3deb5825d8e71a
SHA1 c61b3ec42e7f69ff6ec5e51c4e5571974e9784c9
SHA512 a71fbce17a6aa35d62ebdecdfeec461175352b35d4bde27fca677bf7591d023a0f8e2688378e099eaf3bb08997a7b24eb1c7b030566972c8c1a5f72512651542
TLSH
T1FF41535D35785D768CDAE24D949132CEA7609A1354C228832D51EE0CCED639E23A6917
MD5 SHA1 SHA512 TLSH

Submit Download

3c621433-d3f0-4a32-9ea9-94767bb45306

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\pending_pings\3c621433-d3f0-4a32-9ea9-94767bb45306
Size 235B
SHA256 2de12369fd2a629a9c3a723b19a3f3e3d9e5ff03d91572cddf0a372c58d46c5b
MD5 9192a267c64b615dfd2658d0120b7193
SHA1 f479cf088d1a8fc0a38d565833950e4f4ac19d27
SHA512 3d3874bafe14684bad2bb617295fa0767419ae2b75e155afc03758a08931d8038a891f0e2a85bf37a9c37d9e6c24bcbc9ceba5271b5c8d64067141c6e13d2501
TLSH
T1A2D0978114C87B6C08000F13B1A07BEA30A48C3318A8A82096905234ADBADC952A2827
MD5 SHA1 SHA512 TLSH

Submit Download

3db88118-deba-4893-a153-795d757defdb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\pending_pings\3db88118-deba-4893-a153-795d757defdb
Size 235B
SHA256 ccbfd98c663e0d9859daa2abd5dd5a7899f564ae89e0cecea5fc4690c91a4bea
MD5 9f3a0a06e3c4bc7a57a87d8b64d82a54
SHA1 aca22420ca4c31ca8b95a5d16d2d9dddc3095978
SHA512 20d8e99342609113f9bdae0c4ec7b0caad41aebef9b8775a53504cdc4a246a58f21d47c4ef94219a83e0825bea887c67ff0bfacaa8ed38e793692600dcdaf048
TLSH
T18BD097C868A8736D08150F1AB0E02AC232968C3314B2D8A08560023CDAFDAC942A181A
MD5 SHA1 SHA512 TLSH

Submit Download

552dfea1-3e36-4422-ac05-1dbffeddbf5c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\pending_pings\552dfea1-3e36-4422-ac05-1dbffeddbf5c
Size 871B
SHA256 554410886611359eebd4a0cb093bd1448faf8e48f682098df9b1c6cffe66cd5a
MD5 4e8e79dbbd6503b79f1cf37819276df3
SHA1 1a28e3ee14d8f583b869d215fd00528f8ea6b535
SHA512 7ceb5a2b74d45ca230f28f686da7b390bb51616e51ef39667008944f484bdd21b9a272f7f597a5ae5d61d2c935725e795f0c6f6f95e189d7f6a33b98aaf6c0ed
TLSH
T1B611C05587357AB2CD78D20B89953B028BE86523C0DA54143EB06E084FBF61FA7AA747
MD5 SHA1 SHA512 TLSH

Submit Download

fd80875d-bbf7-4ac3-b98f-a98bdfcb1df3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\datareporting\glean\pending_pings\fd80875d-bbf7-4ac3-b98f-a98bdfcb1df3
Size 886B
SHA256 a1c056a7ed9fd2369de96da6fb561c37d22dfb17b9c75ac4bd9df8e3bb9eb533
MD5 07a0ed833f78bc04bcc6ed5985631e74
SHA1 5f3b398c8378d6324d1e4bf050fd2a1dc9764aad
SHA512 30bc47e7d4311e9f58091897f38e26fed812b5159ae2c70b728498cb99a4dd8af116b3190bbd35647749c10b32aee91eb3038abb7d05077298fce78ac139b37a
TLSH
T1C111D0559A257AB18C78D14F84E03F028AE83623C0D619147D646E088EFB51EA766707
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\extensions.json
Size 16KB
SHA256 32744a8a1600db7ff5d3eb307a3a039533db7b55751f0b85796cab25f21091b3
MD5 b941c7072e2d679052ea7f2099a4d5ef
SHA1 b720f2a00883f8f0a75857fc93196956c909daa0
SHA512 65731350e70fb83750c5b581ee8ec65d87fa7426424aa34262f73e81a73e6cc066381e39157f4d1a86abf835cb5513d8c5034bde59468ba66733b2605a0114b2
SSDEEP 384:DkI4vE9Umldvb8dhW294znv96oNL4H2L4P+L4HiL4HrL4H4s4hT:AI4mRfIXr4zV664c4c4w4X414h
TLSH
T13D72411545048EB8294FA79AAA367E02C37D573B70845C78F4DD8FC802FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\prefs-1.js
Size 8KB
SHA256 171cbd126c2a548b9da88184fd6a0ee461f01f17be3ffaee991051efbefd675c
MD5 1f37f08512a8ca2352e71823f334dc08
SHA1 8addb44ac9be830dace239322e6f25e91e6bb440
SHA512 ab5c27ddb5e8c8fea09c909647b105b19b24b473f2905b10dbe8339fa73d11c9aa7fa554b30efcf75ea8455df6ca1c394bd4849d2aaffa1443fd13ddee52c21d
SSDEEP 96:xHtFTUPqGqTfN2l/BNbzSOSSlQdv9j6nnWRBnaBw882s418L4cnyUzGS:bXRTfN2l/BHSSKRBaBw880C
TLSH
T1A9022E785544CF7F64B636BCAC798D315A62023BB6BF68C610B98484051CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\prefs-1.js
Size 6KB
SHA256 7db54fd7279c8d5a2ea2724fa0340d095e40eeebbeb7ab8c10d47d5c00084b69
MD5 a1ed62ee12df4d80777937ab00a180cc
SHA1 352158f1884cb889b20c9fa4c9149dfaecc72d6d
SHA512 b4df1e768535439a698d00dad25841f2bc727fba0966130ec8335492b0b859522b1e2917cdea21ef85d5a05172da949888f96ee4b68e2c5580ad40e35fa7af71
SSDEEP 96:xHtUTUPqGqTfU2l/B1zSOSSlQdv9j6nnH1Bw88u8L4cnyFa:byRTfU2l/BbSSD1Bw88B
TLSH
T11CE11F7890488F7F74B6766CAC6888316AB2013BBBBF68D650B54484055CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\prefs.js
Size 7KB
SHA256 4103dc6e9814f4635a45f2d4a74a9332b7fd5edf326868a6538c35fc4b92c6f6
MD5 4e946a3e8e2d60a692470e08ef9cba9c
SHA1 85ae06502a3fe7ef1bcff49ad17ec1fa89d2747f
SHA512 50cc41e831998a2afab31374f5965dabb3d21cb90ad491c367ab8d8573938570e83c1c571725eeb954dad8fc86195104e09a2eb38fa4a6955adf06df81d69329
SSDEEP 96:xHtUTUPqGqTfU2l/BNbzSOSSlQdv9j6nnH1Bw88u8L4cnyFzGS:byRTfU2l/BHSSD1Bw88K
TLSH
T1BCE1117891488F7F78B6766CAC6888316AB2013BBBBF68D750B544C4055CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 901425353f430e2a3111eaec761f121220a2d9d8d6ae0ae6520dbe1483719a16
MD5 397078a27b589a2638fa2cd260d66b42
SHA1 fcc7893868304b5af50f4a19de21368b5f3eb717
SHA512 46113c66b0e2d8918180219edf79c02118e48f8af16a3dcdd29e182c89f5b1c4bec46f816fed57b8f687244624e88240dacd8327156548ef8a72018c899dc0db
TLSH
T133714C03D5C19FB78A836405F4CE9361BD8F04AA83210D989A45F310C65CAEE60FF65D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\sessionstore-backups\recovery.baklz4
Size 962B
SHA256 738a71e343069b60696ca66196b9dd927cdf69c9dc71df159d4cb98bbcca1baa
MD5 e675c0d7f8c648956ee89d96b83065e9
SHA1 5f11dfc0f54fe46d8fb82ccf8f5bbdd6f3db611c
SHA512 8408e383cdc21925a60799f0ee15347ca40c098c181f60edef3bc6f021ab232acdc0532f0ff2a93aeddba3c223e0647457fc839404963e4ca20c3afac75ed5e0
TLSH
T1B8119452AC06206BE341C01BA499BFFE0FCE30B1C7B92080D6CE6B4100686CB70DF68D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\sessionstore-backups\recovery.jsonlz4
Size 8KB
SHA256 fe1252faf63180068cc3353e66df72b577c51fb3979b18d57e47af40ed866707
MD5 b14cd8d06819b09a6f3ff1f3bfb5926a
SHA1 e37d849c7d91614608982eb0bf1ae06965097808
SHA512 ab30777cfc40fd33d70f415868e03c04fd689c3827bf1447354b4f5156b43800cc1dc11f256de2e846789cd893f1f0d3a2bb35ab9c977505d9b704d7ac0a8b2e
SSDEEP 192:n09NvGU5CNGDaNGCvLtBczEmhdlKeZixVdFHc:n0/vB5u9dTsPhvKeZ7
TLSH
T13302AF47D5E8BEE1C7C3990144DD69776ECAA4580BB8058CAD0A5B01819CBCF733CEA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

usage

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\storage\default\https+++www.roblox.com\ls\usage
Size 12B
SHA256 12507c312f326c909b7c40b47e45acb18962562de3011bbfd36cc1011bb94ccb
MD5 3b7f45a457282f08d570efd95a6b2868
SHA1 bc224a0c269849c37b5523a0d82f7418a620ae6a
SHA512 202cccc993c290e35bfbe527073c3a0253966a77f4f2f8c6ccc8fa5efeada3770f7517bf7a34e44f6e56534f33d2327aa30f2aedee3e7b6842888ba1c139fe87
MD5 SHA1 SHA512

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.2MB
SHA256 e65459d5b4b7555d772250a9818bda38227b0eed2046d26c493ef66e1067453a
MD5 96fcffa4b96c45025ce9178c3ac5f2b2
SHA1 3802cd9c944e232c82cdcfb6f14223b4b3d0330b
SHA512 a038db4bef42e582303f43c6ed8e6cd64e0998805e9d1b5bb318342433c28668be9f52ee29b57f456a86d41747736721486b870de2b4bc706738cc4ceb3dc179
SSDEEP 49152:ILELyjaeUT6QC5zYYseKeW/T41XeEktdyl0MwounUedhzSNQx7l7+UYqeOz1x87k:jXeSfAfD1xDEL7
TLSH
T1F1765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.0MB
SHA256 4a028fb161c934def9dd8571b598b092de0af24e655a11fbe896aba04ff4d36b
MD5 0f30778faf5ebf76adb7291ae0959fcb
SHA1 03bd315dae4b9fc6c64f54aa1c39ea70146a7d75
SHA512 63639c6592cb56cdd26906570ee2cfe2ce71d596107be06383fe9aacd6560150f897a956b9d1934a615e7fa8c492f879726111ff56a0fa95830de069a386313b
SSDEEP 49152:j38pTQ8RzVmxbY9gLVitQQ8arrmNiB+/R:D2u5itTxrrmNA+/R
TLSH
T11C362AF820D1A257F3814033664593EF21EFD00C6037DA085BA956E9A578CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dzn6qwxz.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.1MB
SHA256 e1203c7addc6cc07a0841d904b27f1d22eef04a95a92a40368be459dabb6372d
MD5 d9bdbd6927907157872989b1ee8be5b8
SHA1 346df3b6839b43f9fd85f521aee10540ba1e24e6
SHA512 2912ebc479f8fb1cb88b5132512f4bce089d58411930df6ba4bd2a02ff3108ed0c66854e737af98431b0a89ac4bea227274878be4bf0807e8b347acbb07b20e7
SSDEEP 49152:3khNQxOl7+UYqzOAQx87fbIx/uq9eXKe4wQ/H0iq0sq1Z7NabY4N4CCUkTvIa9m2:UHzpaAfbIxWq9eE
TLSH
T174765CE420E19253F38644B3718993FB21EFC01C6036CE48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4232-19-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-20-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-25-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-26-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-14-0x0000000000180000-0x0000000000181000-memory.dmp

Download

memory/4232-24-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-17-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-27-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-28-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-31-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-29-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-16-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-22-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-21-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-18-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-12-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download

memory/4232-13-0x00000000052C0000-0x00000000052C1000-memory.dmp

Download

memory/4232-23-0x000000000D260000-0x000000000DAFF000-memory.dmp

Download