hxxps://www[.]terabox[.]app/spanish/sharing/link?surl=dqDmE112QRHe09auvuO58w

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/08/2026, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.terabox.app/spanish/sharing/link?surl=dqDmE112QRHe09auvuO58w
Sample260820-ctxk2aybnf

Score

6^/10

discovery persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	736	firefox.exe
Token: SeDebugPrivilege	736	firefox.exe
Token: SeDebugPrivilege	736	firefox.exe
Token: SeDebugPrivilege	736	firefox.exe
Token: SeDebugPrivilege	736	firefox.exe

Suspicious use of FindShellTrayWindow 15 IoCs

pid	Process
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe
736	firefox.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 736	2460	firefox.exe	80
PID 2460 wrote to memory of 736	2460	firefox.exe	80
PID 736 wrote to memory of 5428	736	firefox.exe	81
PID 736 wrote to memory of 5428	736	firefox.exe	81
PID 736 wrote to memory of 5428	736	firefox.exe	81
PID 736 wrote to memory of 2596	736	firefox.exe	82
PID 736 wrote to memory of 2596	736	firefox.exe	82
PID 736 wrote to memory of 2596	736	firefox.exe	82
PID 736 wrote to memory of 2596	736	firefox.exe	82
PID 736 wrote to memory of 3828	736	firefox.exe	83
PID 736 wrote to memory of 3828	736	firefox.exe	83
PID 736 wrote to memory of 3828	736	firefox.exe	83
PID 736 wrote to memory of 3828	736	firefox.exe	83
PID 736 wrote to memory of 1380	736	firefox.exe	84
PID 736 wrote to memory of 1380	736	firefox.exe	84
PID 736 wrote to memory of 1380	736	firefox.exe	84
PID 736 wrote to memory of 2488	736	firefox.exe	85
PID 736 wrote to memory of 2488	736	firefox.exe	85
PID 736 wrote to memory of 2488	736	firefox.exe	85
PID 736 wrote to memory of 2488	736	firefox.exe	85
PID 736 wrote to memory of 4720	736	firefox.exe	86
PID 736 wrote to memory of 4720	736	firefox.exe	86
PID 736 wrote to memory of 4720	736	firefox.exe	86
PID 736 wrote to memory of 4720	736	firefox.exe	86
PID 736 wrote to memory of 6028	736	firefox.exe	87
PID 736 wrote to memory of 6028	736	firefox.exe	87
PID 736 wrote to memory of 6028	736	firefox.exe	87
PID 736 wrote to memory of 6028	736	firefox.exe	87
PID 736 wrote to memory of 5088	736	firefox.exe	88
PID 736 wrote to memory of 5088	736	firefox.exe	88
PID 736 wrote to memory of 5088	736	firefox.exe	88
PID 736 wrote to memory of 5088	736	firefox.exe	88
PID 736 wrote to memory of 5864	736	firefox.exe	89
PID 736 wrote to memory of 5864	736	firefox.exe	89
PID 736 wrote to memory of 5864	736	firefox.exe	89
PID 736 wrote to memory of 5864	736	firefox.exe	89
PID 736 wrote to memory of 4680	736	firefox.exe	90
PID 736 wrote to memory of 4680	736	firefox.exe	90
PID 736 wrote to memory of 4680	736	firefox.exe	90
PID 736 wrote to memory of 4680	736	firefox.exe	90
PID 736 wrote to memory of 4816	736	firefox.exe	91
PID 736 wrote to memory of 4816	736	firefox.exe	91
PID 736 wrote to memory of 4816	736	firefox.exe	91
PID 736 wrote to memory of 4816	736	firefox.exe	91

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://www.terabox.app/spanish/sharing/link?surl=dqDmE112QRHe09auvuO58w"
1⤵
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://www.terabox.app/spanish/sharing/link?surl=dqDmE112QRHe09auvuO58w
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27097 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2080 -initialChannelId {695939fe-c2f9-4c75-bbbd-bf0b4dbb3391} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5428
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27133 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {40983417-db61-439d-ba5e-7b5d2a48b764} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3728 -prefsLen 25164 -prefMapHandle 3732 -prefMapSize 270279 -jsInitHandle 3736 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3744 -initialChannelId {4f0a8cf9-3379-4b7a-9f3a-bd088f4b3da5} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3828
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3892 -prefsLen 27274 -prefMapHandle 3896 -prefMapSize 270279 -ipcHandle 3964 -initialChannelId {fae8a934-74f4-477f-b96b-fbd6d538b622} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4420 -prefsLen 34773 -prefMapHandle 4424 -prefMapSize 270279 -jsInitHandle 4428 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4432 -initialChannelId {a0a1ddbe-4176-4fe8-b1cf-3cde4fe9b69e} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2488
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5004 -prefsLen 35010 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 5016 -initialChannelId {de011063-6722-4f5c-a7af-921023b3213b} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4720
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5612 -prefsLen 32952 -prefMapHandle 5616 -prefMapSize 270279 -jsInitHandle 5620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5592 -initialChannelId {29c744e7-ad57-4380-8bf2-4a35cedfa525} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6028
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5756 -prefsLen 32952 -prefMapHandle 5760 -prefMapSize 270279 -jsInitHandle 5764 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5772 -initialChannelId {c983bd6c-42f4-45c3-8e52-2f96ac17905b} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5088
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5976 -prefsLen 32952 -prefMapHandle 5980 -prefMapSize 270279 -jsInitHandle 5984 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5764 -initialChannelId {dab99192-a333-49de-b3dd-160896082585} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6240 -prefsLen 32994 -prefMapHandle 6244 -prefMapSize 270279 -jsInitHandle 6248 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5524 -initialChannelId {f6117c6f-a475-47a4-afdc-f1f1651b4539} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4680
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6576 -prefsLen 33044 -prefMapHandle 6512 -prefMapSize 270279 -jsInitHandle 6564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6680 -initialChannelId {df05218d-046e-41ce-8a09-51d9ce7dc5c4} -parentPid 736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\pccbfso0.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 567c6bf6da1f27170bd07cc4a3cf00fa6a0a1afeb26cba75eb1e2dd099248f2e
MD5 597b404db89ca3a1807dd7541140e798
SHA1 39755f2827e78b3abc306ad1f546574004858d6e
SHA512 e0a6f3420950fb69546c6fad32a041b098837e484e3a8b43c51e91d8b4d6d2a87024b18da1f03dcff4900cde1e88f9878ef1dff43eda90273eb78c8d2e734cb1
SSDEEP 384:HXkRyiO024YXiDL84KKDL849B7SOEAd9KVRaAcP+AWRMA2:3mZYSDL8lKDL8CB7S/AmVAf+hRMn
TLSH
T161727D394F003CAC25A781E8C5F992A98D18B7A7CFE6C0AD21583D0DC798969B5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e45d730-b457-4191-8a5e-e089635b97e2.zip

Path C:\Users\Admin\AppData\Local\Temp\2e45d730-b457-4191-8a5e-e089635b97e2.zip
Size 3.8MB
SHA256 df4a1cd562eef86e117e9a79497f799c3bb82d7a1c5ac8d9c240abf8640ff159
MD5 95ba08187ddb4e27dd69430be0320e72
SHA1 ac31024971fe7cfb8b0f78f5fd711b67121875cb
SHA512 c4db61248a74a17417310c47b4c11d11b3299de2a3180541429dfc2d42a9adb4174381c54a321bec3a59dfc37ab6e2429c635f61b1ffc402833285d435d9d0cd
SSDEEP 49152:YRbffsMDFFzwF7YyPeit5NFn1ZG6joqDtaSi+Fk7mJe8K12MxH3+qcxDoegA3oE6:6bf2YXc/1ZLAAFk7Ge8sxVEh3oEVg
TLSH
T13606F135D65C1609CDFF83BA8D0D2FC2B84C4FAE8054B96B6A6A99715CE31E21F44B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\AlternateServices.bin
Size 10KB
SHA256 470a6c282a5d4cb4c576cc7b1b77e2883a3a6634a771688562e25c4c524ddf58
MD5 304c8256867c8df3305636fe7d37d5ee
SHA1 ecd932e6d826bd98a109a5dc6db8a843f9aed117
SHA512 42bb9cc0db59cf72bc3200b6eea915e1b7fbeeacef080fdf576f101392e210d7c4ca0542ed16889a47115abb413c70e339fffb10ffe8e3aa87bbc9dd0bca40df
SSDEEP 24:aFuhMZN/vnOS/XtKCE4C/3hMKwt2/P4e/v+FyL/vwyoyICl/XKYO:tSKJiF3usY
TLSH
T1962217EF7AB26823F1F54FF4006C7A9C8CB3170945DC49844A9490A789C7B90D13EB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\AlternateServices.bin
Size 28KB
SHA256 14083ea2595aebd6bc00e442d754408bae4b7ee50a4d08659aa7fd7c42926472
MD5 cc2e19df1b1c352a6b4a9bd8a503463e
SHA1 afbb88fdd2fdaafb153dc4b4ca9f31b4479b24e3
SHA512 4a1caec8641b6a45edf34ac9aa1a526314852dab0f36aa22b01a27d58ba6369aa747bfcb5c2f4195572d1b0699167d581d6bc8282ace156d96ee5b97fb0fc343
SSDEEP 96:LF3WsYEEPEbEzpa7WvuiWuytx8IeFgIJJB9etVS4:8sYxsgzpa7JltV
TLSH
T18CD2C5EB6AB26823F1F14FF4406C799CCC731715599C89C48A8491AB8697790E13FBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 e326a330c3b8affc9bbc38a102bbe1ded94a70ee3a35711c7f1b3000b48d483f
MD5 806c38663f5b54199407dd1122eaa1fe
SHA1 377d2ecdd461ff768b3bd79243c59dd76ed01c77
SHA512 73b8bb416e34c39d520c071e392a5473514d3945d99f69078acc8909841fbac14acfd39b9e780a995d9d974b3ab42c452b809f3a2d564a3c0cfece8d67ba30df
SSDEEP 192:AoOv5zbooMJgyjm3ZS1d66Joz0dzgCl6mc0d:ATbooMJgyjAcd66JozQzgC1j
TLSH
T1F0D1FC64F628863FC449427BCDA21B414E36399BD88E3F15319D65083C5B2DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 66KB
SHA256 69de2192dcf90eeee1dff80aaa09d0c9104e3f279c8895f5f5d9042a1ae39959
MD5 6b17e6dc5ff0d95722b13facecace86c
SHA1 44a7a7be3ff57bf8f88cb86a21b68fa82beadba8
SHA512 cec5e4188e300d4ed86599208c855c6ca87978110d97efba3f7dd68e318f22df4ca304ae2a379b22bee7b409d310d38007a99c4a1e102c4e6aaca595fe9d8aa3
SSDEEP 1536:4Yw9UfZOTUNXcLFbds4AGbdjcB1e5GrGQtkpXvPzYyvp4j:4YCUBOoeLHZAGATk9Tp4j
TLSH
T1E9631244EB1A553FD82803BA9DD21B103F78F8895A1A2B67375C64786C873DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 95ac6732c83e851026d340a0fb95c52ec4a4214eea7c26ebd586cb21eba30024
MD5 63dff4046e40937e471a4bf0bd445834
SHA1 226532421542fabd0e6524c7458b9e73ea3defd2
SHA512 6cc15af3cbd246e86c173827157ca97a44d6d99640532b29647bc5586dba57ade665049e77efefe838552c866a50f2477084690b317e7be37ac2b0530d59b2d4
SSDEEP 96:4jFdHuF3CFzF8/dd66Joz0dzgClKtmc0d/UUrYyxSdF95/7bkW6QXjrcEJYNyURR:4S1d66Joz0dzgCl6mc0d+oOv5zboobJc
TLSH
T1A2C1EA64F628963BC449423BCDA21B410E72359BE89E3F15319C640D3C572DE7A8E27E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 f5fe02aeb99a9d89a2aa9dc7494fb6bf593eed85dad04476eaa3d38ff3501396
MD5 018e6fa8dfdde66cd6dc464d64b49fa9
SHA1 8e353a00aea4c12141e0fb8bb24d360542fc3c0c
SHA512 a8015d2236d11f92348f1327e22537b477ec9645b8bed7519b4069e48c0fb53ad05a0957c9c0938f7a7c8db5de60452ca00d39a4daaa90f4982bcf57f61e59ec
SSDEEP 192:5oOv5zboHPZJgyjm3ZS1d66Joz0dzgCl6mc0dz:5TbovZJgyjAcd66JozQzgC1jd
TLSH
T1A1E11CA4F628863FC409427BCDA21B410F39389AD88E3F15359D650C2C572DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 a4f20b73c351e3f904e71e2bfc60b9cdd82c1678da7a14e286906ef8384fc1a7
MD5 b26c4bb9be053ddedc549380ae0c154f
SHA1 65248ee53727c7c36a6d23c92f4896199b3b6977
SHA512 3043c32709660649fe699b92a81ed37f797a8d9cee3f140410154c380852f1b4b56ed70190046cf7b4d7cfd56a84af8a107bfd0e96a0495b12e592804191faf8
SSDEEP 192:XoOv5zboHdJgyjm3ZS1d66Joz0dzgCl6mc0d:XTbo9JgyjAcd66JozQzgC1j
TLSH
T13BE10CA4F628863FC449427BCDA21B414F39389AD88E3F15359D650C2C572DE7A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 66KB
SHA256 e421b982cb4970abfad38ad6545a6e4a9c489f651eb03173a8fe599a70f22985
MD5 3dceae7d4d0d422f208d3d43c45cd31f
SHA1 b0dea7cb8ab0bacb46fc6f7daa0d46738bbbb0fb
SHA512 7e95ba97ef6e000076adb92eb5edb2abc56e91dd760f632fa5ff3012632b9f0eaabca7ec7bb75ea0d3d5235c971c82e2d50d09bd46d6a83f0dc3b03e390e64c2
SSDEEP 1536:3w9UfZOTUNXcLFbds4AGbdjcB1e5GrGQtkpXvPzYyvp4+q:3CUBOoeLHZAGATk9Tp4+q
TLSH
T1C9631244EB1A553FD82803BA9DD21B103F78F8895A1A2B67375C64786C873DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\db\data.safe.tmp
Size 66KB
SHA256 3d471b54922e27ec4cbca4a69c501c2c6618f2af1e63ae999c0f946e63c7b942
MD5 7ef3f7e377756f4fa8e918fbf0889fa4
SHA1 1f22786e32c57ac6963de81671ec9afd7feeb8a5
SHA512 49fc1c73bcc0c8ae167a7b79b1686cd16b47df04a2b108df04f555f91f95d78c86a69051c4f0ae70c7eafe3b92aa7a34fb9d897ce8dc327e71631df0ac3e169a
SSDEEP 1536:Aw9UfZOTUNXcLFbds4AGbdjcB1e5GrGQtkpXvPzYyvp4Vq:ACUBOoeLHZAGATk9Tp4Vq
TLSH
T1B7631244EB1A553FD82803BA9DD21B103F78F8895A1A2B67375C64786C873DC3D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\events\events
Size 1KB
SHA256 5d2795a0cc0017dadfb0fce3c12ec7088ad53b6a313a2c13e9a1a7440e61fafb
MD5 30a5de74565a587f7eed74cd2607acb8
SHA1 e41ad883133f1d42a061afd433252d719f207a8f
SHA512 4b4218e740bef6e73584906ab745636c0e60a31649eaaa8fa36bab3fc9703752a3af61c97dc45b2b9917b7e6d91c8ffd5a94e8245992ea4e40f6295faa036d80
TLSH
T16711579C7DB84E7AA9CAD298B4512A8D53B14E07458B1C434D52FE8CCE80AD9367A438
MD5 SHA1 SHA512 TLSH

Submit Download

208b2258-faef-4cf0-8631-6d8d1b653356

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\pending_pings\208b2258-faef-4cf0-8631-6d8d1b653356
Size 2KB
SHA256 99ee282bc3b7e2d8e57ab13ac56d3eeb530b6ec26d41f84dc175b3d3c803ddb8
MD5 4db1dcbf960f733be83c8d653a7dd090
SHA1 004866c0f7c0727701bf49fd8ae8e7da06e8adfe
SHA512 6b5c78b3bcf21be701c539e6af3c61eb942d910be0f5f863bccfd67c963f8e267eab5f1e23db120e8f5cbf3a6ecf34afab01d93274c39fdd6805c84d3d4f9b65
TLSH
T1C741336835789CB78CDAF18DD1C2374E5BA05A1750C62C832D61EF0C8C9669D336A52F
MD5 SHA1 SHA512 TLSH

Submit Download

23006caa-1f4d-4ff9-9619-f63737a25155

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\pending_pings\23006caa-1f4d-4ff9-9619-f63737a25155
Size 886B
SHA256 f1115c438a307aa56b3ab601d7b02a306a7fe965e4422c891f88ee0d6fa2629d
MD5 92db481cdc601dc5fff26a26226bc2c2
SHA1 6fa2a9463ac8bd99ffc4cd0f82687b61c77ace7e
SHA512 308b1e5e909223e7c51023a5d7de7135589c367d686d643aaefc2278be78dd698ceb0b7bbf9c63bf22155879a56826992c74e503b7271c97ed7ba76529e79596
TLSH
T1C4110081A5B4BAB2CC78D28BC9E277434EF47023D0CA18047E955B181CAB51EE39730F
MD5 SHA1 SHA512 TLSH

Submit Download

8f99c908-8322-4394-ad1b-129e99edb94b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\pending_pings\8f99c908-8322-4394-ad1b-129e99edb94b
Size 871B
SHA256 8c26b5f4374ae84eecfbfdb3646b18607bbd374d9e5a2e533db9ca86ab39458f
MD5 ff564058f0dc2e6375e2d9831c3a8773
SHA1 a3615ff26a075bd7b9ed7f78db7d233c8cac7ac7
SHA512 d4cf83b6b7f1e60b714e839960ce0065bd925450c5fe71af8ad7c557f0a6b185c04bc6953a60b139e4c2b75ea5455e1cf9b7724a823a1e71ba8863dfd141e566
TLSH
T19A11C0C1A534B5B2CC78C24FCA927B479BF47523C0CA44103D915A180DAF51FA79A30F
MD5 SHA1 SHA512 TLSH

Submit Download

d2d0d6b6-e459-4e18-a309-a614af7ba36b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\pending_pings\d2d0d6b6-e459-4e18-a309-a614af7ba36b
Size 235B
SHA256 34cc66306f767628063f41618fec45ba3814811a645a44dd438ea89096435415
MD5 ab178e6104a50eb6bf376df5e9cba5fa
SHA1 81129ef319ceab4885315366bae908af0cd9a29e
SHA512 bcf82e11413de743e2d2412464839fc830c2181a43d40ce54657467ea32e973ad12ad5871e5bd0af3d329bba24a021b38204a41eec2f5fbf8b535479f7d844f2
TLSH
T1F4D0978094D8A36D18184F07F0E078D630884C331469B8A09A928434DEFDDC8115280A
MD5 SHA1 SHA512 TLSH

Submit Download

dcedb2c5-b039-47bf-b5bb-5f0a91def045

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\datareporting\glean\pending_pings\dcedb2c5-b039-47bf-b5bb-5f0a91def045
Size 235B
SHA256 fd278065c92d42d45d44a955c611ccb5e68d212273f51b1e2cd1e18aa267982e
MD5 f65c3c6bc44efb3036488a48d72a3755
SHA1 afc7dd4f7a52cb56d984b1941ae71f8a732f1554
SHA512 d0ad9ea7f8570e02f9461f68e698593622369a6b59b81b42d4f23a8232a966ec1df48f59cda4d0e3c723b1322eb4c0bfd7c8d4cc7ddf2d4a5d1f2e4ec5daae8f
TLSH
T1C6D097C054D8B35D08144F0BB4E07AE6308D8C33D0A05820A69110B4CAFCDC4816281B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\extensions.json
Size 16KB
SHA256 4328ae9349d35b1a2379ec5a6cce8d48139b327fbd041ef579ad529f3b6ca47f
MD5 9e0143760b3e338bcddfbe4e43febe0a
SHA1 aa115b2c73adbc3b9f193ff96f30449f02c2e908
SHA512 79322509359efa400f82bf1b08a5b927cb8991ad5a7a9b560d397f7307637bc5d5f77a51de0a39186268ade83faf9c56ec86eb0a8b41a2aa8b36dbd16cbf9606
SSDEEP 384:2kI4vrUmldvUg8dhWC94zf96olL4HuL4PfL4HhL4H5L4Hea4hF:ZI4DRf8BX/4p6W40474Z4R4t4D
TLSH
T14772531545049EB8294EA79BAA367E01C37D473B60845C38F4DD8FCC42FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\prefs-1.js
Size 6KB
SHA256 0cc29d002e57d08880f8428f65fb319c3349be8d9ea1b580ec340c25788c6f3b
MD5 fc7f64e0ffaa5541202c418da0b5a581
SHA1 2eda8ffafa967e4431adc99b5b32f7e17fc7f915
SHA512 eec1592e7c5d25b1ccf951386449aecf0e390fa910d30ac492383f2a8c655e122d509c65f746ed1308d61a0c022c0cf2c234848ae81ad4162563118c91bc089b
SSDEEP 96:xHPu5UTURy4qGqjyfDf9h1zSAwUmSSlQdv9jFntH+xiIgBw88H8L4cnKV1HBm:1u5hyTR2fr9hRwUmSSy+xi/Bw88vk
TLSH
T15CE12F789508CB7F74B677ACAC688C716AB2013BB7BF68D610B95484054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\prefs-1.js
Size 8KB
SHA256 5b03525b40be4e2e08ce2f27a6760e974f97cf896155c5dd3ee039072be71b2a
MD5 0c0fc06f1dc9f702f969ac26b2e7aae1
SHA1 551c663120786595af0616d49c217b49a4b7395a
SHA512 6d561cf9e3c34306900c76880e1d09f1cdf9b191887b0423dc8068d3422f05328c4761f493d22959ae762ead2044bf5e97e74ebfc7b5f0e23dca4c947f2ea713
SSDEEP 96:xHPu51TURy4qGqjyfe9hObzSAwUmSSlQdv9jFntWRjKxiItUBw884+18L4cnKV14:1u5GyTR2fe9hawUmSS3R+xiKUBw88Flk
TLSH
T198021F389504CB7F74B6766CAC244D715AB2023BB6BF68D710F95489014CF3446FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\prefs-1.js
Size 12KB
SHA256 7bda084a6799e54e195ac7117ec76487057ca69884d46c62904ce53292264ccb
MD5 5dee6018c76fc0c46cac7d00b3a4b0a7
SHA1 f5b036f19b432087a562d648411f7f24f372af1a
SHA512 2ea639ba3778e5d8cf81292cd30a3e7c3f2bce13befaf56e64d83495c11f653b97633bd98d943b5e77a046fc3a75595b7eded90384cd18c9251556b21b64e450
SSDEEP 192:ylu5GyTR2fe9hawUmSSeLR+xiKBOBw886eRsNV9g:y6sJRxHw544
TLSH
T13742BA3891408B3F20F6327DAC215DA45AB1062BB6BFBCD305FDA499444DF2445F6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\prefs.js
Size 6KB
SHA256 ddad8f1658944fef3f7bb542d9e40f363d526cf298140aa9a89e933b2a4cbb5d
MD5 f888e66b5fa803723fddaa2ab75ade85
SHA1 5b502450ebfa74f0593d6d1eac5a7bfd0ec09c5d
SHA512 50a7f802ca038894dd122a4a3c1df43b925c19a81fc9291839b9fe26c84636ad4fa405155339694a058dc4b5cc9122504dbd33936a68e611d44b9066665490cb
SSDEEP 96:xHPu5UTURy4qGqjyfDfsX41zSA1SSlQdv9jHntH+xiIgBw88H8L4cnKV1HBm:1u5hyTR2frg4V1SS8+xi/Bw88vk
TLSH
T108E13F789108CB7F74B677ACAC688C716AB2013BB7BF68D610B65484054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\prefs.js
Size 6KB
SHA256 6be295c2347b6c7d1e94f72e6cf2d37af7e14764b7d81d35fc18ebca6e100ccf
MD5 6669493b92a5e701882a1382f17c8d71
SHA1 a42b5bdb568bc938271405973936284031efbf4b
SHA512 9a066feb2a0ac2a7e65615d83e1e9b777651823a1cec158bd160264df76c5318b8e3c35e24bbe4e197978d8d2f2c3ae2df7790e799588a7ef8674fcb5840deda
SSDEEP 96:xHPu5UTURy4qGqjyfDf9h1zSArSSlQdv9jHntH+xiIgBw88H8L4cnKV1HBm:1u5hyTR2fr9hRrSS8+xi/Bw88vk
TLSH
T18CE13F789508CB7F74B677ACAC688C716AB2013BB7BF68D610B95484014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\sessionstore-backups\recovery.baklz4
Size 46KB
SHA256 adeaaf6f4577ffc6d51fe69297ed2909d9ed6b9347c42139efe1c8f3b77d0046
MD5 9747b82a58e5b7205865104e636aa7fd
SHA1 a834ccbf5dfcfd5e44da6979644f1d2fb9e5b07e
SHA512 01f92758e3fca661ddad31612dca7eb398e99de1d5a7e407c531ab070867e5ac8826a1372fd9dd826584cdf2899a5c5b848240b36761db1cf92735418ab6817d
SSDEEP 768:Bpdn+1K4HPX7JQvTgfcym5ASofeQr13kOcL+YcSrAI1mmzGwCO/Bci:3tP4/7ivTFyQAS0x5S+duANwVX
TLSH
T12623E1AF90607D80FB9E4525D058184F5FBD38A30EB366995D3898AD63FF6C0A23903D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\sessionstore-backups\recovery.baklz4
Size 38KB
SHA256 0b0859ace695114087cdce96f5117f78f00013de918ffb261b7718eda2731aa2
MD5 596bf9ee8b00c2f5fcf0d72dcab44cfa
SHA1 6753ebf26dc79cc4428a2021e8b65d5a8ba97d31
SHA512 280101f18285aa5dc43a8bdc4ba85bcdae6ab8aa1d344871c6a8a9d61f604a6b32da2b52e41fca86a3a0dec9e4d501595611a7dde607ec2e2bbee397aacc83c7
SSDEEP 768:1APww1g4HPX7JQvTgfcym5ASofeQr13kOcL+YcSrAIU:KIb4/7ivTFyQAS0x5S+duAp
TLSH
T18803E19F65747D40BB4A4516D108198F5F6C38F709B2729C1D39E8AD63EE6E0E13A03D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\sessionstore-backups\recovery.baklz4
Size 46KB
SHA256 238a49e6ab6a420b3bf17cc1891c7653aa86c2db184c056ff0af8def5f5c82b1
MD5 846b4e4f0943cc1230775a501d013bd1
SHA1 3c87217fd76937f0d227e85846811cdaee84e1ea
SHA512 46b06c4f5f7562633750aec83f039252b66c82621b173cf091abb71b8af86b373d162e563f67cb9861ec1b4cb4db2f127f08678b2eacc82ff92cce2fad13df17
SSDEEP 768:tJAPww1g4HPX7JQvTgfcym5ASofeQr13kOcL+YcSrAIqYmzGwrO/By4:t+Ib4/7ivTFyQAS0x5S+duAYwkX
TLSH
T19023E1AF90607D40FB9E4529D058184F5FBD34A30AB3A6995D389CAD63BF6D0A23D03D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\sessionstore-backups\recovery.baklz4
Size 46KB
SHA256 07ecab585e9039c22ecdaffe61e3a8f13ad7ca7e03e8ba53d8b7d8833c61ee39
MD5 6cc6502452dc6cac7ab64a10caa6635b
SHA1 3c6e7e5c32e5d10f93661a06629bbc666bbedcd6
SHA512 f717a579bc481381f6b046ba76ae881f20c13e182d73101cfe102b302fc74e0ac230d33a2241ac726cefc4449ef113704b97957fa855391bdc0dd44ac0d72540
SSDEEP 768:3CjX41M4HPX7JQvTgfcym5ASofeQr13kOcL+YcSrAIfkmzGwuO/BYI:yjr4/7ivTFyQAS0x5S+duA5wxx
TLSH
T17F23E1AF90607D80FB9E4529D058194F5FBD34A30AB366995D389CAD63FE6C0A23903D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\sessionstore-backups\recovery.jsonlz4
Size 46KB
SHA256 70bcc34b707831892012423879d7dd723c1821b7e785fb96ed41362e3a48e22e
MD5 cc477dbc0dc6970bf6a9205a315aa1d1
SHA1 8ff16d286ab5592c74c9a5718ed525f0228de2a2
SHA512 13a346ecb4e25b87bb7be2b930c5e7f8abc542368fc269675c64a1cc5711cd99b39b08d0ae19aa60e46b2a3964a1cf9cac7e4f3e9c24b66b918334e382709dff
SSDEEP 768:Mconb1l4HPX7JQvTgfcym5ASofeQr13kOcL+YcSrAIChmzGwJO/BLU:D474/7ivTFyQAS0x5S+duAvwKY
TLSH
T1AA23F1AF90A07D80FB9E4525D059184F5FBD34A30AB366995D389CAD63FF2D0A23903D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pccbfso0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 11.2MB
SHA256 f8c4a8d31b9aa7528a2938fcc69339eb176ea3c1243f44b56b38ddae55e7af42
MD5 47d2a2b4f1d5376d0d72449d9db28605
SHA1 dcbc28264d5684e4c1a542e7ed02121d7a2d4091
SHA512 06d234f2bda811906fe450025228ac11c2c22108bfd5d56a401825d9267a5362f4eafa02d407a7007560e5da27987b54fbcd7a50954b8a24da192df736b07ba4
SSDEEP 49152:E9yWk1n/X1De4y2D3/YGwbIyTl9JvDsrkz7ICnA8s++I6nkyq2C1G7BwFFtYdM/W:QP/kz86XB018BgOC
TLSH
T17EC66C9570D0D692EB0185B7F35F03DB31BFC18C20A5C98017B8AAB858665DBEE5F368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads