5188671125d475dc4fc7236e87cf209da63d3065d1ed00b899a50a39c1e12864

Analysis

user interaction
yes
max time kernel
149s
max time network
140s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/08/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LithiumLatest.zip
Size 4.6MB
Sample260818-rnjvbatekd
SHA256 5188671125d475dc4fc7236e87cf209da63d3065d1ed00b899a50a39c1e12864
MD5 0337d0af4b8eda4bc12dc475c70db70c
SHA1 0ce414c20dbab5d76694440196b505b28a905b7a
SHA512 18a84dd14860c7d37007235fcfacfa8e78eee3d6c183ee1df4139c8e9405ed196fdc47012f180c4b6e1d2a7d3601b833bdf6b1aadc386f754719799bdee8deb0
SSDEEP 98304:HQSQa9tCi+HuysQNHUlq+OEGup2nxqO0RLqHlKd4tPgxaPhNwzWb+E51BNp:HsctCDuysQN0wEH0xv0RIlKOtPHPhLBP
TLSH
T11A3633639E94DE4DE830F5BD26058DFAC96169A20399C8567CB1C912332F91F8F7CCA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
6	drive.google.com
13	drive.google.com
38	drive.google.com
2	drive.google.com

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 50 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	4788	firefox.exe
Token: SeDebugPrivilege	4788	firefox.exe
Token: SeDebugPrivilege	4196	firefox.exe
Token: SeDebugPrivilege	4196	firefox.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4788	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe
4196	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 4788	4628	firefox.exe	84
PID 4628 wrote to memory of 4788	4628	firefox.exe	84
PID 4788 wrote to memory of 776	4788	firefox.exe	85
PID 4788 wrote to memory of 776	4788	firefox.exe	85
PID 4788 wrote to memory of 776	4788	firefox.exe	85
PID 4788 wrote to memory of 4760	4788	firefox.exe	86
PID 4788 wrote to memory of 4760	4788	firefox.exe	86
PID 4788 wrote to memory of 4760	4788	firefox.exe	86
PID 4788 wrote to memory of 4760	4788	firefox.exe	86
PID 4788 wrote to memory of 4092	4788	firefox.exe	87
PID 4788 wrote to memory of 4092	4788	firefox.exe	87
PID 4788 wrote to memory of 4092	4788	firefox.exe	87
PID 4788 wrote to memory of 4092	4788	firefox.exe	87
PID 4788 wrote to memory of 2260	4788	firefox.exe	88
PID 4788 wrote to memory of 2260	4788	firefox.exe	88
PID 4788 wrote to memory of 2260	4788	firefox.exe	88
PID 4788 wrote to memory of 4412	4788	firefox.exe	89
PID 4788 wrote to memory of 4412	4788	firefox.exe	89
PID 4788 wrote to memory of 4412	4788	firefox.exe	89
PID 4788 wrote to memory of 4412	4788	firefox.exe	89
PID 4788 wrote to memory of 3684	4788	firefox.exe	90
PID 4788 wrote to memory of 3684	4788	firefox.exe	90
PID 4788 wrote to memory of 3684	4788	firefox.exe	90
PID 4788 wrote to memory of 3684	4788	firefox.exe	90
PID 4788 wrote to memory of 2380	4788	firefox.exe	91
PID 4788 wrote to memory of 2380	4788	firefox.exe	91
PID 4788 wrote to memory of 2380	4788	firefox.exe	91
PID 4788 wrote to memory of 2380	4788	firefox.exe	91
PID 4788 wrote to memory of 3152	4788	firefox.exe	92
PID 4788 wrote to memory of 3152	4788	firefox.exe	92
PID 4788 wrote to memory of 3152	4788	firefox.exe	92
PID 4788 wrote to memory of 3152	4788	firefox.exe	92
PID 4788 wrote to memory of 1064	4788	firefox.exe	93
PID 4788 wrote to memory of 1064	4788	firefox.exe	93
PID 4788 wrote to memory of 1064	4788	firefox.exe	93
PID 4788 wrote to memory of 1064	4788	firefox.exe	93
PID 2724 wrote to memory of 4196	2724	firefox.exe	95
PID 2724 wrote to memory of 4196	2724	firefox.exe	95
PID 4196 wrote to memory of 1960	4196	firefox.exe	96
PID 4196 wrote to memory of 1960	4196	firefox.exe	96
PID 4196 wrote to memory of 1960	4196	firefox.exe	96
PID 4196 wrote to memory of 1596	4196	firefox.exe	97
PID 4196 wrote to memory of 1596	4196	firefox.exe	97
PID 4196 wrote to memory of 1596	4196	firefox.exe	97
PID 4196 wrote to memory of 1596	4196	firefox.exe	97
PID 4196 wrote to memory of 4832	4196	firefox.exe	98
PID 4196 wrote to memory of 4832	4196	firefox.exe	98
PID 4196 wrote to memory of 4832	4196	firefox.exe	98
PID 4196 wrote to memory of 4832	4196	firefox.exe	98
PID 4196 wrote to memory of 3960	4196	firefox.exe	99
PID 4196 wrote to memory of 3960	4196	firefox.exe	99
PID 4196 wrote to memory of 3960	4196	firefox.exe	99
PID 4196 wrote to memory of 3480	4196	firefox.exe	100
PID 4196 wrote to memory of 3480	4196	firefox.exe	100
PID 4196 wrote to memory of 3480	4196	firefox.exe	100
PID 4196 wrote to memory of 3480	4196	firefox.exe	100
PID 4196 wrote to memory of 3520	4196	firefox.exe	101
PID 4196 wrote to memory of 3520	4196	firefox.exe	101
PID 4196 wrote to memory of 3520	4196	firefox.exe	101
PID 4196 wrote to memory of 3520	4196	firefox.exe	101
PID 4196 wrote to memory of 1068	4196	firefox.exe	102
PID 4196 wrote to memory of 1068	4196	firefox.exe	102
PID 4196 wrote to memory of 1068	4196	firefox.exe	102
PID 4196 wrote to memory of 1068	4196	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\LithiumLatest.zip
1⤵
PID:3292

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1520

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4788
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1996 -prefsLen 27097 -prefMapHandle 2000 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {9bec96e8-8f68-4d68-a1dc-0574fa5ef0ae} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:776
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {e4b77815-4de3-4c1b-95f1-97ca7efb54a2} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3720 -prefsLen 27323 -prefMapHandle 3724 -prefMapSize 270279 -jsInitHandle 3728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3736 -initialChannelId {8eb7efb4-881b-4d45-8a49-b2099336c719} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3884 -prefsLen 27323 -prefMapHandle 3888 -prefMapSize 270279 -ipcHandle 3904 -initialChannelId {9f2df142-6211-4001-a5db-e5e53fdc17c7} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2604 -prefsLen 34822 -prefMapHandle 2824 -prefMapSize 270279 -jsInitHandle 2892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2712 -initialChannelId {dc4d7f3c-9759-4f56-902b-3f2c7f65a56c} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4964 -prefsLen 34822 -prefMapHandle 4968 -prefMapSize 270279 -ipcHandle 4956 -initialChannelId {cb8fc6df-598b-4e59-a719-5ed4705cd5fc} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3684
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172 -prefsLen 33031 -prefMapHandle 5244 -prefMapSize 270279 -jsInitHandle 5300 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5492 -initialChannelId {94cc965a-83a8-4552-b16f-f1f1189c0dc2} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5664 -prefsLen 33031 -prefMapHandle 5668 -prefMapSize 270279 -jsInitHandle 5672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5680 -initialChannelId {ab7ba6d2-2b66-449a-b2f0-60fda0593fee} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5892 -prefsLen 33031 -prefMapHandle 5896 -prefMapSize 270279 -jsInitHandle 5900 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5908 -initialChannelId {34e2872b-f1ba-40d1-9641-d646578cf4db} -parentPid 4788 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4788" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:1064

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2724
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2148 -prefsLen 27057 -prefMapHandle 2152 -prefMapSize 270326 -ipcHandle 2236 -initialChannelId {9745d544-a30e-4407-86f2-917fdcfddd1a} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2560 -prefsLen 27093 -prefMapHandle 2564 -prefMapSize 270326 -ipcHandle 2572 -initialChannelId {a76c6eea-a01a-4b0f-a8e0-d6751068e286} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:1596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3916 -prefsLen 27234 -prefMapHandle 3920 -prefMapSize 270326 -jsInitHandle 3924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3928 -initialChannelId {ed3f0114-e301-42d8-b3de-b3e1463a503a} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4080 -prefsLen 27234 -prefMapHandle 4084 -prefMapSize 270326 -ipcHandle 4100 -initialChannelId {e1b54ee9-ae0a-4c3e-88ee-ea7ff1c00b90} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4680 -prefsLen 34893 -prefMapHandle 4684 -prefMapSize 270326 -jsInitHandle 4688 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4664 -initialChannelId {e75eb401-fbc2-4314-9806-bd036ba37143} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5372 -prefsLen 34893 -prefMapHandle 5376 -prefMapSize 270326 -ipcHandle 5380 -initialChannelId {53de4ab8-5293-4902-99e5-de1445617ab0} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5260 -prefsLen 32818 -prefMapHandle 5280 -prefMapSize 270326 -jsInitHandle 5296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5632 -initialChannelId {226aa816-977c-44a5-8e33-c9f529bdef19} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776 -prefsLen 32818 -prefMapHandle 5780 -prefMapSize 270326 -jsInitHandle 5784 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5792 -initialChannelId {f47a72ae-89cc-4f63-a3a9-3a9e2967e6e0} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:2552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5968 -prefsLen 32818 -prefMapHandle 5972 -prefMapSize 270326 -jsInitHandle 5976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5984 -initialChannelId {cff05732-b790-4410-895d-2be69266def9} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4356
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6452 -prefsLen 32818 -prefMapHandle 6440 -prefMapSize 270326 -jsInitHandle 6256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4564 -initialChannelId {a4979d87-eac3-4512-993f-701ee07a1e3d} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5004
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6544 -prefsLen 32868 -prefMapHandle 4844 -prefMapSize 270326 -jsInitHandle 6564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 940 -initialChannelId {00dea849-fc8c-4419-99fc-fca12ac54f9f} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3880
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2980 -prefsLen 36645 -prefMapHandle 6708 -prefMapSize 270326 -jsInitHandle 1924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5852 -initialChannelId {91c9bbbe-f432-4fcd-b8e7-dafbf4385f21} -parentPid 4196 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4196" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\activity-stream.contile.json.tmp
Size 5KB
SHA256 acb4b4fc2b0b2e887d431a79c21e8e884d2215ba008da9671cd6ea6e50f9a96e
MD5 07c69d8514cd0223c9f0f8e14079e985
SHA1 c85b59ca2ec7609d44797bc821ac34f9b80f60d4
SHA512 003e0ad8b64069492810d75696845d2b6b81d0e537c7db092273b7cc06d547e984026dfcd60f09ef95b127a6f8332c4fdde2dd3ac7b31bbe7a5e82a03d06e877
SSDEEP 96:4IFJQLFui5XEtrwSFbjpjAxBxpbePbU/2lxfPwb:TFJQLhIMKj0B/bcYm9wb
TLSH
T1E1B12B8F9D6895334F72B7D84E0A279CF203725F87D9CE9DF2C26C02A2466AA517D484
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\activity-stream.discovery_stream.json.tmp
Size 75KB
SHA256 3340e905723e06f79457a696fc924c7abcfce77a8d4c768b3433ad4ed6746dc2
MD5 e28504427b3edc22bcfa240e5b7abb1d
SHA1 fa2b0a7ce38aadf8eab8e7ada24aaf7e6ffd7e71
SHA512 d051badffb2efc345a74f9305211f20eae11e76915e9882e98c479a912a6b4a5d9f25eca80ddff89490669a419250de04320eef9abcd7013bac7d3a79977101a
SSDEEP 768:6yeB77Ed7NNm61tnucmCaN7/YrnBhTUJpaU4X8Vp4rS3BiKBTS4v9oDuSV:BeB/EnyVN7/GnBhQJpaU4sVp+IBitwFo
TLSH
T14D731BA3A2A971BF0FA577C72C4FB55B52D24189F74906C8ECEDD91C80CC644023B6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

322101F3CBB2F0D656F04B6F1DC8BAA54E883F5A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\322101F3CBB2F0D656F04B6F1DC8BAA54E883F5A
Size 11KB
SHA256 61dafad591653b0fe54e7fcaf2125bf2c439e379aa52413724e60a8584141758
MD5 6ced25058d3e623e67dc860169adb57b
SHA1 885d00c34ceeafde9664c9762c762cc902f96ece
SHA512 32e4c4966d5551af4e1b00646e1edb6ee22c4ec2563797031336f0a31cbb426a046d62fc2241d34cd174cee4ccbb867563e3ddba4c88624f981e1b813839d31f
SSDEEP 192:V/y8ysK1cURPAe3Is9XgJ4M/9702l/nKh863lhu1wqsv6TAQ1kd92lrdH1RaGTAi:Vya6jgJ4IlP61hu1wdvNd9KVRaAcP+Ay
TLSH
T1A8428D385F0128ED0967A4AB8D6FE2C00D74F257AF804A9C596C3904D8C78FAE6F815F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35E707151142415EA05B5238D960F7EC7C385894

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\35E707151142415EA05B5238D960F7EC7C385894
Size 101KB
SHA256 d82d38ac2064db1803fa3a8a122de607e4301314fe14c4ae6ecc26008069cbe3
MD5 24629731739a2afe81c5ebaedf815e49
SHA1 f9f956f48732fefd0a8b050e8b339700d6bcda44
SHA512 13c4ffbc4c42b6da4c7194e8f0f2f707a523ce704bc6687a30a6a4b57d0226bd440cbd971c8703af06385e80d3cda33276179cc393e0d080a304be2ea69b00bc
SSDEEP 1536:eIk6t8v6QU3EN3my5RySbamfR9SNh0Ulxi0qSqWy5QP:K6tpvWWyfym9+7v1d4QP
TLSH
T1E1A35B775AD9197B07A773C42C0F3C9B0FAB0583EBE8C69599DDDA0980E3C58427E612
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 16KB
SHA256 a069440a222f51f9f02d1b337dd8727048413cf861f3230a8129edf1f8c4c019
MD5 03b507e91a17a4576cab6e520f5ad10c
SHA1 7f315c2a1a1cd7b37a96cd6c61a455cfd45a144f
SHA512 58a158a044c7be74f91f82390d9a68b1d2aa6b6cb783f97937a2ac1e3f85a8106d45f0f4d22507ed61f89f6d7e8528d8330ee073dbbc233dd6253d6c4c52b566
SSDEEP 384:/8hQ0B9PjgJ4IlP61hu1wdvNd9KVRaAcP+AWRMAP:/O/Z0J4IlP61hiwdvNmVAf+hRMM
TLSH
T1FE72AF7BDF51289A0B63B1E54E2D2BC85D01B25B9BDD8DDC62953801D14AAEFE1FC088
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 316f8275c49a84fa28644abfab619b9bd1ce50d9c6de324a7c98de42d996d928
MD5 31761648cac21560e55477d80beac2b9
SHA1 1aa1d03eefd52ac51fa1f534151230a4ab53bb80
SHA512 c5e86d9d810238d5e2ddf309895293f2d5799731cad671709a18527f3ef2911d528603c79828ddc77c3419cdac9970f94fdeba9008cae04a53f8ef8f99f15000
SSDEEP 384:HXkRyiO024YXDL84KKDL849B7SOEAd9KVRaAcP+AWRMAy:3mZYXDL8lKDL8CB7S/AmVAf+hRMv
TLSH
T1B5727E3D5F003CAC25A7C0E8C5E982AA4D18B7ABDFE6C05D21583D0DCA9896DB5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 3ece5451d079750cebae5ec4fb713a63c5fac056a0942ef28060964acb6c2da8
MD5 6dc304408594536df9b0b9a61af1c509
SHA1 7ea9939dccb982b8bdf90e1d06d541caa4fc7796
SHA512 3f97ad5dca85481e6e0d12b66a501688085c603e28b376aeb5863878bcb5f560bf0f971ef27a465472e0180436d3c45fdb2d18830bd7ea47272ab7e289e30081
SSDEEP 384:HXkRyiO024YyDL84KKDL849B7SOEAd9KVRaAcP+AWRMAy:3mZYyDL8lKDL8CB7S/AmVAf+hRMv
TLSH
T139727D3D5F003CAC25A7C0E8C5E982AA4D18B7ABDFE6C05D21583D0DCA9896DB5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 11KB
SHA256 a9aae87a45bde0ce306d8fde99f65afe5fcc6272d7b35492c36a83bfdf0c436f
MD5 ae54a29452ce67cb7d7b0655a8de8b5d
SHA1 1b6e9c223dcf4832821c6effccd48f791bba09d7
SHA512 2ff10f147df493c80509c02c7caf5ca562e2fe18473c3faf594bcf9ba4bfb948bbe1aae0e7268507232deee342fe60d827e82c4e68db9a13c26811326144e679
SSDEEP 192:2ChLju6NlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDTcdqkkfq1:2ELju6sSpde+Vsj8wkac8Woh1B9M0lpq
TLSH
T1A6429EF29F61143C0E81A4E2FDAD669A0D54D243EEC7A1FD1D083905A5D12BCF5BD2C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 245KB
SHA256 62ef5bc3fa766213db5a0a9cf8e7800f17b637bb0c746599c23bf88e4f3fc023
MD5 c7d12abec6e3b41fc9386b2c650c2880
SHA1 61b0070764b7566abdb7221fe60ff7f46155f874
SHA512 543657e9a72a37d11ca051cd7cb1fdc61b4db6eca304c26c0cc6ce9544959b6f1b427977dc64efd66669bc9a2c9dd37c3d884f1d27a0753db4de017602a04f9f
SSDEEP 1536:PbYCYPsk76B/OhTYSPrwQAQvvkcIhBQvNQBj5lot7/nuG41UYd8ZEp7lV81t0Skh:B/OhT2c6QvyBEt7/OUnZWERC
TLSH
T1B434F8F7D6AC30FB075296DC6C1D72CF62AF8239DB5209DAFC688148C3C9A651076789
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DE5F6CB1BD71958EB146CDD974763A3115937269

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\DE5F6CB1BD71958EB146CDD974763A3115937269
Size 12KB
SHA256 0811f7bc07475ee300665daeda8ea7cdc20e2691c715f1c14bcb096935e05247
MD5 956ef13a54d6c068c05b793049f874d1
SHA1 b33221a4b8a0edd4df2f86293cdadbab83eb14f5
SHA512 c4f77dc062a84312d8fddc82b33cf6d8224897167365584d7d63dd8244cf12794313fc313873ad9872ecf1e9c47764cff6df8e5b46c944b2d59a7cb17c7ff360
SSDEEP 384:El/bgsSpde+Vsj8wkac8Woh1B9M0lpDIIDICeeCes:egDrecsjBkaBxh1B9pD8Ke
TLSH
T16A428EF3AFA1503C0E8164E6EDAD66960D44E243EDCBE1F91908390994C16DDF87C1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 11KB
SHA256 0712aa3b9d8b3b4775146d111d66fc6befefc87b24d0bd66e849ffae8c85e99f
MD5 db7102f309c89bdb9831e33a01111e6e
SHA1 6b3ac6e2fb22ce71662b71c69cda80852f31f493
SHA512 dfe7b455acfdf100828ab572c1c2959c1139bf0aee3bd6ac94aa57fc9a6ad9b25b1d48a6bdb18c2f0e3b8b062ec0842fa123cb8dd4f0d4d0fa431b14c968f999
SSDEEP 192:ttwONlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDlHdKd1bmdekG:b5sSpde+Vsj8wkac8Woh1B9M0lpDIIDg
TLSH
T133429FB3AE90543C0E81A4F6EDBD6A990E44D603EDC6E1FD2D08390A95D13EDF4AD1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 15KB
SHA256 3002de4a2545c5a6a641c1eacb57f58f31cfa7b1d43dea428ec649b10d474bca
MD5 47b2d49e5b11e20c626ca6c551c865c7
SHA1 225b63da96ed5f04170b21f89f879b061cfa93d4
SHA512 0646014858a24bf1e2239f2807e385bc7203d09074f973e3dbaa0d1735dcd05079bbad900204334c6b243ee041c260340be3852533c78fcd5878e7ab571be975
SSDEEP 384:HHMO0iO024YLDL84KKDL849B7SOEAd9KVRaAcP+AWRMATg3hd5:nrZYLDL8lKDL8CB7S/AmVAf+hRM575
TLSH
T127729E795F003CAC2567C5E8C4F9939A8D08B7A7DFE6809D1618390AC788969F4F948F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F6DB2CC802065A948266A380F89F5EB80BB1A349

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\cache2\entries\F6DB2CC802065A948266A380F89F5EB80BB1A349
Size 11KB
SHA256 738bf96f3f2ce3997fc1556da22a7bde86e5292c5c13abc114ce284cd0b70e58
MD5 0c3cb12eac72b3fd104cb279b4855103
SHA1 cbdd76c48b5fad6b9051e6643db158710574e7e5
SHA512 7eda93c5f2871908b3f38faebfcc9eac04d070b9ce81a4e97a68a7ef2ad594f7dfbe66779319dcab9eb84e94810d98b4fe186aaf7ae9df432de2073f8b7d1f07
SSDEEP 192:XINlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDOdJkkEodJkkE/:4sSpde+Vsj8wkac8Woh1B9M0lpDIIDyE
TLSH
T1B5429EF3AE91543C0E81A4F2EEAD65A50D14D243EEDAF0FD29083A0994D63EDF56C1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\startupCache\scriptCache-child.bin
Size 534KB
SHA256 ec999c99e34e34279f341825cf2137d74d1648bdc9d17713de2660566a10f95d
MD5 7aac1ed709927a0c1ac0db851a639f52
SHA1 33a639281c4e1d2230b535c435b80666565d1237
SHA512 e1b978b9cf9dc12f781dde40e6dc9fdc2d98eb4910f2c77c25db5220db0e07a632bd8d4b0d2373216a9d8ebd6fbe328006abea25126b6a4f8d49573df546a17d
SSDEEP 6144:aFCUbu1hjktpJn2pmYXHqjOepEavSW2psu:m7ubotPnpvBh4b
TLSH
T120C46111EFA64E23C418037A44F753313A31E1451BEAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\startupCache\scriptCache.bin
Size 10.1MB
SHA256 5351ec6d5d33050e3876e8c1b59ed5188230b071a81b8dac3006d1f3bf536f20
MD5 c2478a49a50527a2db4770ed0de63105
SHA1 91fa94c76a4c0f306231dfc67b2c720ceff91cc3
SHA512 459b3b8c86b6f8b9a6a9c9ab39c6bbfc26a9ec44388b8501d899715bca53e849be79d8baafcdd9963b3653090340226cd16ccf675f1091435b647506765279cc
SSDEEP 49152:vkVvxHNHhFDzwH6f8wbM5v938zYPHpJFVFwjdhCXfJDj/BUbSm:Sv1F/wafY5PnRmSRu
TLSH
T128B68315EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\startupCache\startupCache.8.little
Size 8.3MB
SHA256 81db1af50dde28b74b1b4a2d5aafa62db2e6eaf67bed8e8b8bf19b89d26c0426
MD5 824bb6062dcce094e8e9faaf2327828c
SHA1 0fff6509a1d0449bde46fbe2279685ca750109f6
SHA512 6880d6575810ade063c1470d3d605f39a2d04757113d51259c63d06a79927d57af9ccc93af8e970b96aaf34ca9c0dc9637b75c7a97fec55fd770c57594476025
SSDEEP 98304:/r36sGOPeeNd1jqN3YBrnpiYlwO1NTngFVXKF/HEOR:jbGlkm3WticwONoYXR
TLSH
T1F19602B7B3590697C425191AE87A0A393763414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 b8d186737c9092d8ea059b1e1e8cfa754a9907afb369c1b599b1c9946cbb9ff5
MD5 77042ac8523333efb9ed473c9ec1628d
SHA1 1ebd0170486da09d445a072386866d43e2ad30b4
SHA512 40b6c93b64e16e84d434ea4b3b9bef910644028dc7634a126e1b1fb8969bce0fc09d9d087caff20d79104713b286f0d20c239b868c0a26412835ea4561fe5e91
TLSH
T14061C392E47F603B7D62A8FB6D95C171B42109CED1CD20DDBA9663D4209E7DC038EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v1pny25i.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 1bb4c179d688ce7f5e52dbb845acf863fe73a35ea1a0ae67d67d59f12e48d06d
MD5 56b2f5580dcab8c6591ac5a8afea69df
SHA1 d5da301900784befd7b9601bba77f489ebbbf705
SHA512 bdaa8581c96384687d80d2296a69d1bd25f5a6198c45b59f9aef2cca190beaa3ef0a7c79678c8ba7b1eba638fe6a719ff970fc9f0a9f24c91d6fee6255df7116
SSDEEP 1536:jTrliRF9XdDKt8DyAlbLAhQE/tX8N6E12D2hoEQPxoQjeISSUhtE0pB29HTIImRK:j3lDkyACQz0EG2zQpjUVpSzsbalRTdd9
TLSH
T1D1A3AEF6DBA3892D65FFD42D5782893EFD262400B7B7201DC923671092C7BB4627A748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\AlternateServices.bin
Size 12KB
SHA256 08531c5682b679f7a4639bf430a9a185127d50f427a141bb20719fda66e99445
MD5 7fbe752e0f995f7f3d29ceadd85249c0
SHA1 bbf17be19a67efe117bb6e7834bb0a942b994acb
SHA512 190356eb87479fea5bd72d7851bddc7ec623273b76f096ab7954a8f8fe9c5a1bc4200a39f450d417bbd764f7fbbccddc3f1610600205a4a6087a9a80cc27efbd
SSDEEP 12:8KWQphMQSQIjfoHc4qnc3XwFFc4d4bwc3Xwxi/TApjnc3XwxfApfAp/c3Xwxi/KM:8KWuhMZPjfF9FB19x5I+lz3fhA9lrcx
TLSH
T1124298FB3B731962F4618EB44069B09C9C334726587D98859610E0E702E1BD8947EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\AlternateServices.bin
Size 1KB
SHA256 0882f998a3e4ab7f890b42bc02cc7c4741498ab3d9dd202b3847848b54937d2d
MD5 4ea8d68c58a72bfebeaf9d653e86c971
SHA1 1f1af01f8cadf7401fc4f1425fcfa4a80935dc21
SHA512 5ed267f0c5679ea6def7529bb8f62a73c9fd06471e36b1ce7f5bc1f3bbd6f83b3670d2120567baf2a346a362d3990a179174aeb5787232f8b29323879ca262fd
TLSH
T152214CBB51730034E0955AB8BC2AE0044D2753C956B968493760B4632682D9DA4FD1A0
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\AlternateServices.bin
Size 10KB
SHA256 99d11cfb7f90791e3bee0d666f89c40cc033f77d20db0190bcbf75862f08dbf7
MD5 1710f3613bb9e9b233f3aa1460deb2b2
SHA1 7e233de897c33dab74677159c6958acf76646ddc
SHA512 40f895fa64f4b390626e16670f37bf4bd51ac9752a703b9f347aced7538ea61ffa10795873cb31e3a1e59be9eb9729b86a2b2a8e960f2505033f29a6c566e5ce
SSDEEP 24:kuhMZNX9FHPS9htKtZ+9BgZ//9xX8Gs9l0GxGTN911Z9Bb5:ytdPA7KtZE6Z993eFgTHL795
TLSH
T1272222FB2B766862F0628FF05069B18C9C3347295D6C9998DA44D0F306D6FD4943EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 456be61a41f43163aa1ceed12966e78ed847f28f4021c9b5ed0214adbf83facf
MD5 8f1be54d3a8a23e9a808863e33447811
SHA1 a142ee135c7becfb0dd8bb61b1ffd52380136763
SHA512 147f4f6520b6d7af14e9f8486be793644a7db66dbe2d7b9afc65046c04a47c6e3c694169b96c89ece368601b53dc913966620dee87a74d6cf1ee0a086e5a50ea
TLSH
T1232112B3C8AED0A1E1C14734289F54501C5E33A306A3F0EC3F924AE23485EEF20AD1A0
MD5 SHA1 SHA512 TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 83e2a5c9d65ed4f819fd9bd6a52715e7d92eb7665d12e9f6dc431496c2b758f6
MD5 87b094ee8bf6b3236413e045af531f39
SHA1 35b84680882ae729f75eaaaf14047adaf5f6746f
SHA512 0c47f8a39b1342ee8be869ae5e146cf2693fc118f9ae9588a03f08a26a756e2c1453c860d42060f505fc19bd47512d7becf73bf2680e233f1e7c3c10f6d88a4b
SSDEEP 12:DBl/WhnB8/ykS2lcBDMGEJKM+vcBDMvYkMBAlO:DLsB8akrEDE+vED8YfAlO
TLSH
T18CA3C68F0E702680EDC420B0D7828EEEAA1EC32DCB13279202A000B29D0206019220B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\content-prefs.sqlite
Size 256KB
SHA256 fff6c2239e0d2ccc2dfe16bece3f51fe2831ce8baaa337827bbde444207a727b
MD5 d3941a15a96fb3023cf1587a47b586b2
SHA1 94996d072eea6af88a1d96b8ef900a1fe3ea56ca
SHA512 d627318f49a185b6ad4dbd76c9eb5aef82c360ab76fed195641fbd258e045e1f04c0d6359827a9c31c677414bc656e183770c0d1b829821388db8bfd2608f364
SSDEEP 24:DLCKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DmWwae+QtMImelekKDa5
TLSH
T1234426174AA17408C0B014B1D4636F22AF3D405B8933E7B23ABC143A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.bin
Size 31KB
SHA256 f7ecc0a56805851cb14410ac6fc582d52bfe155f578998b909bcdd9f253b80c4
MD5 c2b630374eebcae3013e2002b3318b70
SHA1 26ac7caabb2a17f72e3ed6aaae63cfa31c49a80f
SHA512 c85a6e29611f0e7f0262676e654d1d4a6babfa831f50e2e438a87580c95d06d98797b8421006e1793b67277b2985f042cf268a486791fe5d7fa699fb80ad7a26
SSDEEP 768:7zuEWGcmhuHBKi8G0GIubYbubnbZfWmm8y:7zu1BlfG
TLSH
T1BAE2F044FB2A953FD42912BBDCA507001F79B88A59192FA73A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.tmp
Size 74KB
SHA256 cd4c02329c621eca8075ed44a3a9d491e21955d8a3f685f9ed52bd2822e199ed
MD5 670a540eab8155e7d43b07416866a01e
SHA1 8db32b41726022df7d00af69af8297c01b36fedd
SHA512 3d35e2788aaa0b579c5ae9f03479bd6c2a6afe7af20618b20ff2ea02ad1af3cf287c53941f41089b6de033624eed1bbeb391070adc2f5f1e40ba40212b34149e
SSDEEP 1536:tVt+U4jompi1d/CEX5FJQW43zIIo1QXsctlV7otoFfE5:LUzjrpWNX5cZzG1tKXctoFfE5
TLSH
T1B7730184EB1B803FE92441BAF8952B281B38F85449595B5B369C04792CC73FF3D4E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.tmp
Size 31KB
SHA256 ae8e9bdd0f8d80fcb2208772985f7f58e4ef4084f2069b486baaf69f340a6f92
MD5 f8f46638f8bead720d74beed7eed21c2
SHA1 5af6c7a5d3de04273b08026171b3747d2740fbdc
SHA512 fdf47efb66101dc649c17619f4d6906b039a777524071e9967e8e462748542f012a03a8dc9b7ac5ca339008e63eb8e2892f4211076662d0cad604ae33c384bbe
SSDEEP 768:gezJWmuzuEWGcmhuHBKi8G0GIubYbubnbZ:rMzu1Bl
TLSH
T1F3E2F144FB2A953FD42912BBDCA507001F79B88A59192FA73A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.tmp
Size 59KB
SHA256 673bb5e256239af4cc839f34115c134cd11d8c2fa646f8af1419f1b905f41a07
MD5 b7db8fedab26d12ea4f7127fa4221029
SHA1 0ab21c1130261b88911f1153d6e21c262ed94417
SHA512 33557c92e7b6d339bcc52b6d19853aee311924b61ed6884ea45c7f5ea561f4171a1a2287145aa92e3d34a2b9f423bf81d53bdc406abec41b4b282b8d1eb3ed5d
SSDEEP 1536:/7t+U4jompi1d/CEX5FJQW43zIIo1QXsctlV78:jUzjrpWNX5cZzG1tKXY
TLSH
T16A532344EB1E953FD82802BAAC921B102F78F889551A2FA7375C55786C872DC3D5E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 2fbc6d50724772d1b8f9addd2dd5071e778179531efaec86ef26cbea98c77341
MD5 c360ae41d5512feb6f1acced15848e17
SHA1 9bf40b8577fa6b572184219affdb076b1a72b24e
SHA512 7fa59e8e9fd4b3146a865cbe8cf262dae0fc95272e40acdb0da643c7efe2b9e463176a4a977f0528a0c1eb1d742fcd30d7ebafbaaef1fb814cdc42bf239c6052
SSDEEP 192:rOv5zbooZ0ryj6Xb1d66Joz0dzgCl6mc0dz:0booZ0ryj8Zd66JozQzgC1jd
TLSH
T118D1CB58E639867FC844023BDCA61B400F36789A984E7F2531EC641D2D972DE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 16023c33f398273341e694d0fc9bdce37d6a93846f7af6a621274027b632423b
MD5 72c69a90f7492d420d9aa83de4928888
SHA1 8d4c4a8ae4ffa73803f83c5b8682153abfebe562
SHA512 af6d2334da56f578395357c041fa2da6585a8c1ca4fd0dbed945a312c3c2d53859b4641cc213c6611254f14b916485d754ad597654a926cba667539a68a0a560
SSDEEP 192:Eb1d66Joz0dzgCl6mc0dqOv5zbo1Z0ryj6I:EZd66JozQzgC1jzbo1Z0ryjt
TLSH
T196D1DC58F639863FC814023BDCA61B400F35789A984E6F2931EC641D2C972DE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\events\events
Size 1KB
SHA256 36ac2c63f63c2aae705607264bba7bb05d7e25d3f896350f54017ffef47d4b48
MD5 fe0c6b0d6b808a1a3604ce423bee927a
SHA1 df1cddf78ad6ad0df147081dc37e7f26fa05f893
SHA512 ecdcf942f622cf326b87d6e7273b07409166872cf2102e234fbf9c60c258d0c7326754eccb22c8a644924d0eeff05eb4d329ca72b8f0eecabefaed54392913e2
TLSH
T1E221499C79BA4E6B9887E698746001CE53164E0744871D434D02FF8DCEE2ADD3679439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\events\events
Size 1KB
SHA256 04e5f5de6ad0dff96c3113c2e77fcb57977c6566d6adc99c89062be912165dd5
MD5 cdf4ca2d1a9f8bb56f6e8140609eb2ac
SHA1 1bc288917ce1fabde3b361b1a49ac1bdc9733b87
SHA512 5b99cb969011285113c57d23d113cdc9f882b91aad0aff7169e11581e2a8ecde367fe65a1b7ad835567ac7874ed1d2bef923c08e5a49338c3d39088ea564619c
TLSH
T1B921375C39BA4D2EA887F29C7891028F53964E0B04871C470D02FF8DCED1AD932BA42C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\events\events
Size 1KB
SHA256 5f1cd7b6cca178974d0d43a37d120cc7f0eaf4dda30e9138b56e8f74176a623f
MD5 2761bdcd27dc09854ffda79eb1a5b743
SHA1 a1439aff7291c82752ff4a6d4dfcc9b1cfacc2f1
SHA512 a507b2c38a0ee3677de803ad56d83bc9987dc6efb3d70755dcffa0acd1792cd55f5ea3f293d5eca26704a383693e4d2f2b4a012e6e300dffd64c32ad58f0f489
TLSH
T12D31905C35BA4C2E5987F35C799A028E47914E4B88872D474D12EF4CCEC5BD5327A42C
MD5 SHA1 SHA512 TLSH

Submit Download

129aa160-240a-47ee-91a6-21b989085d02

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\129aa160-240a-47ee-91a6-21b989085d02
Size 235B
SHA256 fbec45add72729d5a9ee9eac756d053279c69d0744313f27349dc192fe8dc1dd
MD5 d7286b5cd2451bdc2115af4838f592e8
SHA1 5a7438cec67d1f3744e870e44bccf89c27d6d1f1
SHA512 df7fd2d49bf98dea2d521aa9289886ad528938e3783b4680418523abf8034de362702f89102eb652a17b51c25704ad9358d118071e52731987285bba0b4c75e1
TLSH
T191D0978024ACAB1C0C140F0BF0E028C730544C3B9071A820C5A205B4D9B9EDC4262816
MD5 SHA1 SHA512 TLSH

Submit Download

3228f4d0-bd07-4927-a50b-1b6f1cf1e950

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\3228f4d0-bd07-4927-a50b-1b6f1cf1e950
Size 16KB
SHA256 a4e4bbdccb139a6b655a2a58d3f6cf965bf1afd017636cfdf06d4a6bbf0dff55
MD5 6c8c6f4529e96d207d9184f38df939d3
SHA1 1a76df52ac7ce6445a765fe84f4abf6338ce1ce3
SHA512 a26cc25a28937f5e6cb5371ae24f43e89ddd7ded4453451427b662e21e4f8e4ecaaabe909046e66b3439826723e22765b5477fc759942a69d24b9e1201248d38
SSDEEP 192:wWGxVOTRuepoqo21hjVBLrc4dU8okyRL2MVe+3IoW18lWMuenKmRpV/F7ST+zx7W:TGxVONuYoWVZAa5SRnH7ST+l7KRZ
TLSH
T13B72C856142089BA8251E36994EDBFC7E6F528CF4C018FCA9BE4BD0869DE06E113784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4823b27b-d80d-4569-bdcc-cbe355010d60

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\4823b27b-d80d-4569-bdcc-cbe355010d60
Size 886B
SHA256 f3969e2d3c8453eb955c4402f5c86fc14187683a72d78a5f054426e3b8a9e9cb
MD5 249d80c80afd3ea7e3a6c1d896f89d12
SHA1 c21760372343c05146d7764ac610b828b396b93a
SHA512 6a2819aedcd6c6fa9557f247685e41fcc5f3ffc35dab88131ffe7645eb5a7318213e346a1535f14d36448126b819432eb08592bfe67206064412cd3b2f067b75
TLSH
T11F1123458930B4F28C78928BE4E177524BE4753380C64C147EA04B1C0DDE11EB76B31B
MD5 SHA1 SHA512 TLSH

Submit Download

7d90231c-23d2-46de-98c4-e020f8f0a36e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\7d90231c-23d2-46de-98c4-e020f8f0a36e
Size 15KB
SHA256 270d93656cb493acb6489bd900b5ea6ee029e2773992b52d512253cd658dc4c7
MD5 b9d2b0eaf51ddbd6550feacf9bb62b9e
SHA1 e8f0470323a54933601580f6715e4a4fd74abc6d
SHA512 77ac766836f37c0d9d3c9f748bafee3a953aeffe0215fd074811cbbf355f242b3a07b2b04a4886a6df85858e44dbdc6752a95cd1f6d14bb8a03ddcb02c0c52b0
SSDEEP 96:eHvrNGzUn6Zhu4Xm2Y4EbXsW3nFW/1m/d0en/jzBEofCTnQKcx14Xs50TDBdO/NK:evruGKh4DfrINTl4LugUmNaAJSZb9
TLSH
T1C462AEFDDE1240473E75E52EF5A6AD6B2017293209CCC79D6BFC483A26D68BB1127318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81d2f728-1e7d-4982-9381-5178d45917a6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\81d2f728-1e7d-4982-9381-5178d45917a6
Size 235B
SHA256 5328aaa15f7bc212f25f6021d544de97ce045b09c396bf5abc33ea5dd905d988
MD5 d33095befec1f3d06f17deb0895360a9
SHA1 c6922200dd034b64301c43ffa9e186fa75e23855
SHA512 52e44ccb51678b87351e63034e309284bf62d5f1b6944fc39fa2d7086ac75a9d7aabd9d9a16955a5018ad64a4990f3140334313dddcbd234212d1230164d9fa2
TLSH
T15FD0978018E8376C48100F0FF1A0ECC270544C3314A468909A908538DEB99C40162927
MD5 SHA1 SHA512 TLSH

Submit Download

984b6f77-6ea0-4915-8c8b-61b6eb46bebe

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\984b6f77-6ea0-4915-8c8b-61b6eb46bebe
Size 897B
SHA256 8ef562ec178197c1bd7a45637eaef0685149d931450052bc9b12fc71b6692eae
MD5 c830240ce8c844deb5a1607a03b2a9fd
SHA1 ed9a9200a7db6188c5da77140cf69c499bbefbd5
SHA512 357af77f419570b141b3b8dae860d20365733facbc7ce4ce9108013f699bfb09ff12f83751a3985de977354dffecb77b5e72280edd44536a7f345800acb24744
TLSH
T1CF114C859934B8F28C28928FA5927B028BE4B03380C649207CB05F084CAE61E776B30B
MD5 SHA1 SHA512 TLSH

Submit Download

a8a851e8-78ab-4480-a75d-2bb3f6604f64

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\a8a851e8-78ab-4480-a75d-2bb3f6604f64
Size 883B
SHA256 0b7e93646ab18b14ff146564350e107ff3e6022e837875f3b73b8cf0c9c08970
MD5 b415540ae324e24d5979005889edf39f
SHA1 f600d7aefa1cb9c36c4577dd3837208911626196
SHA512 20ee623fb3cc4b1896f16c2832eabab867e7e34cf3a1c246ac3ba0a6c140f6aac3442c005296e09c68709698d73f0bee22b717520c80ea9db1d8302596daa6fd
TLSH
T15C11E385E630B9F2CC38935BD6953B115BE4B53380C784243DA14F184D7EA2EA76A71F
MD5 SHA1 SHA512 TLSH

Submit Download

c6b68a3a-e93c-40c1-b568-56b640fc31c7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\c6b68a3a-e93c-40c1-b568-56b640fc31c7
Size 2KB
SHA256 a8b50e41e379121d86143cd869cea16ac3e568c46a58bbc040d57f3018c32fa5
MD5 908c1ae469288e078a56ea885575d61a
SHA1 87d366c8ab7a40753b0359140d05db42e3855207
SHA512 65ad3406c47e7690913b20ee115b2137461d20b38be100d6679c632ab0770fae13d29e6899d2cabb33ccb0d8d2496170a43151cefed52e0cc7c421d2e07ad267
TLSH
T12B51315C35794C3A8CD7F25CA69B234A47A04A4B84C62C872D51EF0C8DC9799336F52A
MD5 SHA1 SHA512 TLSH

Submit Download

d43103e2-e49b-46d3-841f-e48a93d7b809

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\d43103e2-e49b-46d3-841f-e48a93d7b809
Size 2KB
SHA256 1d2c6f4e6df8f370ce42828773520db5d57f90633094b466640aad54cdbc8082
MD5 58de5dc7761e13070d202fdfec7d4b83
SHA1 570805863d5726a404300440b9d0f1ce41663fa7
SHA512 d7deac923c9945d09458fb3c135c4169c08c572aea847382ebf989ac1f21d441a8d3f67193fc9d7594201e9e0f754d871e49353b60d56dd6f3de3f8e3e369abd
TLSH
T16D41106C79784CB68CEAE59DD082338D53708E1300C61C932D61EE4C8D8A659237E42A
MD5 SHA1 SHA512 TLSH

Submit Download

fb011180-559a-4ceb-acff-6603fc8db6ec

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\datareporting\glean\pending_pings\fb011180-559a-4ceb-acff-6603fc8db6ec
Size 235B
SHA256 72eff66031d2aa87c5782a00e654ae3618dadd29dcea5af93fbd94386d8068c2
MD5 fe2ca64eedcec497f111458ae011a11b
SHA1 b73ff25608eb239b411b4f2c54d873420459aac2
SHA512 6ce56029c6fe867ffec7c3da1b91f2bd5c45cb83f0d7c4168aaa01a78a8c4f7c4b3a38620735458f63bdb29df0635b89cb015270310714043198b4dbf55459f4
TLSH
T114D097E038CCA7AC08180F26B0A0A9C632844C3314B8A831D6604134A9B8DC4412280A
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 c7baab1cd8662625bc822a3c3c7b57973b927cd5c26192d6cda60ed9ecc0ed07
MD5 7231237395096e88196ba0ffd7ac0ac6
SHA1 d303ddfed1d4341f30ed79abbc23ce51f651bd35
SHA512 6220c9908bfa889f1db84625dc214127ee76c40c97a0d2b81df251253d4a8cc7ba6387d94f751a8f092850ce8a86d5c7e0d7938b85ef763813c4ab4a0834055c
SSDEEP 12:DBl/ATMbUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLbbv5XvtQhP8W5/b
TLSH
T1A6A32B1F1B1CB840D4C356F26D8329067634D50B8913BEF03B9D84004F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\extensions.json
Size 16KB
SHA256 46d9698fa56dd4661546fb3e717226d804c0c5247cfd1bd599118a5842a004cb
MD5 069d720c1083da7d0ad9bab2d86440fd
SHA1 63285c5ba0953ec7c494f3a12767043a9fe802bc
SHA512 b5a152c43d881d10d6274a3091e51890864f172a0c9362a131b46a3a44e05e83406b322252176c13381cfee6e361586e3bb4b8157c411f25c6f97d3927c7b48a
SSDEEP 384:jkI4vvUmldv7s8dhWg94zz96obL4HTL4PQL4HLL4HaL4HsZ4hM:gI4nRfztX94F6w4/4a434I4E42
TLSH
T15D72321545049EB8298E979AAA367E01C37D473B70845C78F4DD8FC802FB5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

formhistory.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\formhistory.sqlite
Size 256KB
SHA256 479a11b34ffccce96b2949924ee1319785547cce240662c131f1ff459b889717
MD5 502a42abe8eea3848813b3474394c6a8
SHA1 e3227dcc2fbe92c08940838be5892e3e1324d12e
SHA512 6a32840d8d8aee72a9341dff8aeb08573483f1576e320bbb81aeb5ecd84e919a36d7f2915a41acf90a9494964e546d9cfbfa56ea951352ebcf25947b05d411fd
SSDEEP 24:DLd8VxExBWrkier5NzW6LlmProNpNmVIpPuVM7rBmxF/EzgvA:Dh8HMArt0pmcNptpGVM7rBw/v
TLSH
T1E644874F59142432C9D78AB7FDD21F534AAD0056C6632B947EFC101D4FB1A09DE58EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\places.sqlite
Size 5.0MB
SHA256 cc88ad4685f198fb614c074b82c7011b18d22feaac24ee6cb4ce17a5900515b3
MD5 5a2f212945d9588ea63d947cc332bc25
SHA1 4b7c6e373f6a2d0db9b78e8d6f0569090c7c405a
SHA512 5e4f0066f3b0511289c792865979b4545d147e29992a6dba0146fc97298588e162590967d66db8be5c938cd3776a63ed82975b84da8af8ce5e47b9c84b5fca37
SSDEEP 384:M8r54w0VW3xWGGelTD7Ha+1B7QkCpdlLb:rqVW3oQApdh
TLSH
T1B136969F7A245552C8E9A232FCE32B0C183F7406C576764239A1557E0DE0B66786CCFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs-1.js
Size 7KB
SHA256 90f3df02e92f885e93be6200b29622cb82fd2f623e5458e29dfd55e9f9295560
MD5 c8c2df866d6ea22e85976d0c63930443
SHA1 01c0d53fdcefac61c3ae27a2d6b76e997c097fde
SHA512 f5e900a2858cb1d1ada3cd7a194f4a18ebaec664edfefe04e5b92adba2c88cdb038374668faff88185b8b708bac61fdcd595c00c55de48c349004ff396cade3e
SSDEEP 96:xHTUTUfqGqgfVhMObzSU2SSl5dv9jNYYnLHlBoe6Bw88H8L4cnjHWGS:ZiRgfVhMK2SStfl96Bw88z
TLSH
T18BE11E7894188B7F74B6776CAC6888316AB2013BBBBF68D350B558C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs-1.js
Size 7KB
SHA256 d4e330ee015f03746dcf2553ffc6cbba3ed376bc932692f6ff10ad1e90c8d997
MD5 e8b1924c64f823856092783cdcc97117
SHA1 24380226e88140d5a1b8c8337b0aba8e2b50f5c0
SHA512 3b3f9f5069268f97490713d00be7cd677902a5e8cfe155681ae415942eda8ba3488667dd67a6bbe5285a6875867741748b2b72b8e2d8a7594bd10a4ff4f7070a
SSDEEP 96:xHTUTUfqGqgfVhMObzSX7SSl5dv9jqnLHlBoe6Bw88H8L4cnjHWGS:ZiRgfVhMZ7SSOl96Bw88z
TLSH
T1EBE11E789418CB7F74B6776CAC6888316AB2013BBBBF68C750A554C4051CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs.js
Size 7KB
SHA256 db95ed10d21c1066eec3b4f64c9597e46d9be14d373062018233db06d47d3acb
MD5 752f208b07d0233ace632532332c811b
SHA1 f45337ff431decb9bc0e73c6834858fbfefdf694
SHA512 d7de2fde728c8e7c7e952be5f4217874c23fb69ca55e78ea436c0aa0e819db8d061c90a124844af7f40222579ce3b6b7a3bd73429cbff0fe5bb6bb078bd3ecdb
SSDEEP 96:xHTRTUfqGqgfVhMObzSX7SSl5dv9jqnLHlBoe6Bw88A38L4cnjKWGS:ZfRgfVhMZ7SSOl96Bw88AI
TLSH
T1DAF1EE7C9018CB7F74B676ACAC6488316AB2013BB6BF6CD650B954C4051CF3445FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs.js
Size 6KB
SHA256 7f59317a3a735d6539251bcfb7bb6856a8b5c284d779ad678dc0f5da8d1fd45a
MD5 05ecbf0a0b22dedbe7b446f9b9dfe2b4
SHA1 dd9ce061a4bcc48798fe890d18385f15e89f45dc
SHA512 288abae1610bb10547a132d2ad7692c437c1c85c6065bfa66920f6034db546bae67cc570a15c4542350f86de95b789b32dca6e6329645732e80cbfa44bdb4056
SSDEEP 96:xHTUTUfqGqgfVhMObzSU2SSl5dv9jNYYnLHlBoe6Bw8OH8L4cnjHWGS:ZiRgfVhMK2SStfl96Bw8Oz
TLSH
T1F4E1107894188B7F74B6776CAC6888716AB2013BBBBF68C350B554C4051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs.js
Size 8KB
SHA256 454f32f1d2fb0d72c2f088846e16beaa994c0ebe9c5191b3d870f1de4fad9061
MD5 4c5bcb98bd0be7b429b63cd66a52d546
SHA1 e36c47894ee31a5fa1d6e11ae7aadc8116e3d61b
SHA512 a92f914275c72173496bb4c646c4036cbbbebff2838d5ce3d505d1f54b791bd485f3051f77d8ffcd74a9d30a345d2ff1ca226ac652903fab9ba3aa5cc61235c5
SSDEEP 96:xHTRTUfqGqgfiuDhMObzSX7SSl5dv9jqnLWRIRBoe0HqBw88iHS8L4cnjKWGS:ZfRgfiuDhMZ7SSbRa9QqBw88iH5
TLSH
T11002ED7C9008CF7F64B6766CAC2488315AB2063BB6BF6CD650B954C5051CF3445FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs.js
Size 6KB
SHA256 3f5d242c64f4d51f1704660d2ca390467ed2d80cc24b49b80c8df765f9e218a3
MD5 5ca1d42079ec7f9e34ef7a1a9bbee9fe
SHA1 b47f1905e015cb97c43915520d670f98dc32c684
SHA512 364482049d2dfa9a8aebdbf1c977cb79a145cca7062f65ff88722355ce76cb6707cfbbe8f2c05c82342b8bf17ece9be69d4ca31458a1d9f0a75be288d3d1353a
SSDEEP 96:xHTUTUfqGqgfVtk1zSlKSSl5dv9jMonLHlBoe6Bw88H8L4cnjzu/:ZiRgfVtkyKSSsQl96Bw88UM
TLSH
T1C3E11F789418CB7F74B677ACAC6888716AB2013BB7BF68C650B55485050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\prefs.js
Size 6KB
SHA256 5c4f07e0118379e8262bf42945a48fffcb2419b63ad1865cdb806a2832062224
MD5 9ce7b6955bfe3939845ae485c6a60691
SHA1 b69e523ec2140b125aa8dafcda86a7c38ca1b3fc
SHA512 7ad5d88eba58301111805bb84a94e66b86fdcb079fd7c87edfd87a47a1d859377359706468da0d557de33d812d06432a391e12ad59261e61faabe271371057ac
SSDEEP 96:xHTUTUfqGqgfVhM1zSU2SSl5dv9jMonLHlBoe6Bw88H8L4cnjzuWGS:ZiRgfVhMt2SSsQl96Bw88UD
TLSH
T1DEE120789418CB7F74B677ACAC6888716AB2013BB7BF68C750B55485050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\protections.sqlite
Size 64KB
SHA256 f47973dd13805200a469d534a0ec50e224f0c12ae77d93a0e5bcc267af19c145
MD5 63b6f9d979a2cd96d93c105805cafcfc
SHA1 5fc70ce8799617202d1b2a350f6d596b65d48e54
SHA512 ca475720928bd40abab686efb8b890fdccef59c292b26263d41bfd9dfe8f35d21405820e10505fa7cff49eea5ae57ffdbd6ca73d5cf6e1cfe67f5994d2823b90
SSDEEP 6:ltBl/l4/WN1dR4BEJYqWvLue3FMOrMZ0l:DBl/WunddfJiFxMZO
TLSH
T1BF53225E47387021C0891372ABD323923F3CD2FA93232E836A100C358C0A023B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json
Size 193B
SHA256 ecb4133a183cb6c533a1c4ded26b663e2232af77db1a379f9bd68840127c7933
MD5 2ad4fe43dc84c6adbdfd90aaba12703f
SHA1 28a6c7eff625a2da72b932aa00a63c31234f0e7f
SHA512 2ee947dcf3eb05258c7a8c45cb60082a697dbe6d683152fe7117d20f7d3eb2beaaf5656154b379193cdc763d7f2f3b114cf61b4dd0f8a65326e662165ccf89cc
TLSH
T165C012C2C6565071CF8365ADB26C7B659E3E04F67665064470ACD54C147B027421B443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 df6f4c01d4cbadd41844b820bb4502e21e889c58752fb448be03f968fad0c4c7
MD5 b30f9507d196e5f9cb341d2e217b07ff
SHA1 46b64fad9f91f2ca29d4f4a4ba97678199742d1b
SHA512 0a21fdcc6303936e8eeaa7f025e005e3a260d64a04e9d6110fd8028e174d9a186027ef467f4e68e93441dab04a51cce1e22b8a6065848f6ff6c6db1d78bf1e5f
SSDEEP 96:eADHM93yQRMATjQneDKEGJF7wnlMZk0zf8W8Q33goS2gTcyyB93D7:e0HMSuQIiFUlMZkc1LIH+93D7
TLSH
T1E9C18C63C11C69DAE4F8B12E10F799E39FF75181E3FAF058B6051332881B1063B5A276
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

upgrade.jsonlz4-20250130195129

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
Size 901B
SHA256 1fdd296098263efc1e86aa4eefa3e8c8ac49e7c0227cd9946b21bded57e3bb27
MD5 7d344732599872eab2b20ff4d06210a5
SHA1 465a99d1464f84a51db97b6354a1ff538d3d6f73
SHA512 b5bd25b99a6688d568ca8f3e72ac9ebf22414232400c15d78a088632e6ee371c040a6c2ff0bf4328380faf74f588641c63980609ab5af78e32e22559c0905496
TLSH
T1A61167426E1E5DFFA3D7212EC0896FF68AC62837459934A0D0585B410EA814B75DE11E
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 f702992f6e52fb8169135ea9d2f83051d92a34a5ee6dc870b9d27a89b8e454aa
MD5 efce5a21e2cc0359239ee40c473cc592
SHA1 c38c3177642aa2d46ef1cbc9060ea6b984bf4964
SHA512 7cee63d108adda56741fb75912123493f18069614776b09338bec58f2587011f10a930385ec563456f59734ac56b88a41fc3646c47c2a539364693844c9e67d2
TLSH
T12621B7C7BF1F68B712D5D20880C92FE1DE8250638568B4F0D46486052ACC51676ED369
MD5 SHA1 SHA512 TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\storage.sqlite
Size 4KB
SHA256 1db39598ae2ee67e7a598723a6ec07a3b74ab17ef166a2614785c74c43d1c5c3
MD5 701bd81ab9bb9fb95ec393a557d20be7
SHA1 7f6d6f5a146ac2e0c5f5424da7d7199ca8b6662d
SHA512 4f6b7a82f3361c2f452f0093fb0286acfa898528a2933f501bfe627993899cc77e136c435a0cebd95457c72c604b030b46dc07fb7b2b937d67ce3dd46179fc5d
TLSH
T1CF815C8D1F247A00C0B057B1E5E00EE35E3E111E4B5B95C72EA011FACAF35966B164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 fe5f73c3e417a750b80fd625ba024cd4512c7a5b03f654be9b1df0f2987dfd51
MD5 09a4bee94760f7058d0b8b9b3af58f15
SHA1 c093e4c0ffee94472e1c8d2b7dcbf7fd1248d9f3
SHA512 abfc61c85e7d1578d941b4ebb8a61aa29772f7e12362fb79ea354cbb979c962e6e0ec4e7deebf5e623b64b97356f2868e7e1304caa1c93e914bc21df54ebc99b
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBx:Oa16S6CKnqlizbxV+2xVeU7X2B0mKx
TLSH
T10323708E3F07F511C53AF0B178A08D51BC5E321D07222AD669D0DAE4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.2MB
SHA256 aae1589f0d5d5dde4286832b6d3bd8b64e5444b6a9305d1b9f1cf1cf6773ea38
MD5 0f0f35ee9c4b4021afcf143c88ad25e1
SHA1 888c9307803df7996ccaf398391053ec7f9ec445
SHA512 bb3152513af20b470e80b924ec15fb65e037d8159083b335358d9999a2ab126970010b648a88f45cbc82ab185815400f87e93a8285f8ae32186b3d71d2c3e353
SSDEEP 49152:B7l3Q9jg9SieDVYTuB0BXZaW3sNl0q/NEw26:5l3Q9jg9w0BXYW3WlR/726
TLSH
T1101639F824D1A257F3808037668563EB21AFD00C6477DD444BE966F994B8CEF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v1pny25i.default-release\xulstore.json
Size 91B
SHA256 3be1e4b731d24a22df9c0480bcca1813d41c7701b9fb27f020793358f61263b3
MD5 9d7f9e4f3948dbaecaa8b9f518e9c587
SHA1 dfc1cec9e94fb7276899246c1a75956d44f4eb6f
SHA512 51a9931b626f76fb408f5ec016a3a43b017ea6be6c28a13025d0395edd7ebf0a2ed2adf71425b0ce8f22b2aabd5846d652f7e023fd9c349d9341c08261140603
TLSH
T104B012B4411FA4083F28CD9A1647B680342D001040C0622A74931474518030B8D0E249
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads