hxxps://archive[.]org/details/mcjenny-mod-forge-1[.]12[.]2-v-1[.]8[.]0_20260412

Analysis

user interaction
yes
max time kernel
420s
max time network
883s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 03:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://archive.org/details/mcjenny-mod-forge-1.12.2-v-1.8.0_20260412
Sample260907-dshk6awsat

Score

8^/10

adware google persistence phishing spyware

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	explorer.exe
File opened (read-only)	\??\F:	explorer.exe

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
48	1864	firefox.exe

Checks SCSI registry key(s) 3 TTPs 46 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	explorer.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main	explorer.exe

Modifies registry class 25 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{097D5FF8-3FE3-4F26-A303-2287AE22A821}	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{1F345DC8-3294-4E5A-9C5D-5C0CCABA9B38}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\mcjenny-mod-forge-1.12.2-v-1.8.0_20260412_archive.torrent:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5832	explorer.exe
5832	explorer.exe

Suspicious use of AdjustPrivilegeToken 30 IoCs

description	pid	Process
Token: SeDebugPrivilege	4924	firefox.exe
Token: SeDebugPrivilege	4924	firefox.exe
Token: SeDebugPrivilege	4924	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeDebugPrivilege	1864	firefox.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe
Token: SeShutdownPrivilege	5832	explorer.exe
Token: SeCreatePagefilePrivilege	5832	explorer.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1864	firefox.exe
1704	sihost.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe

Suspicious use of SendNotifyMessage 11 IoCs

pid	Process
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe
5832	explorer.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
4924	firefox.exe
1864	firefox.exe
6596	StartMenuExperienceHost.exe
5832	explorer.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 4924	4560	firefox.exe	88
PID 4560 wrote to memory of 4924	4560	firefox.exe	88
PID 4924 wrote to memory of 2824	4924	firefox.exe	90
PID 4924 wrote to memory of 2824	4924	firefox.exe	90
PID 4924 wrote to memory of 2824	4924	firefox.exe	90
PID 4924 wrote to memory of 3460	4924	firefox.exe	91
PID 4924 wrote to memory of 3460	4924	firefox.exe	91
PID 4924 wrote to memory of 3460	4924	firefox.exe	91
PID 4924 wrote to memory of 3460	4924	firefox.exe	91
PID 4924 wrote to memory of 1164	4924	firefox.exe	92
PID 4924 wrote to memory of 1164	4924	firefox.exe	92
PID 4924 wrote to memory of 1164	4924	firefox.exe	92
PID 4924 wrote to memory of 1164	4924	firefox.exe	92
PID 4924 wrote to memory of 3376	4924	firefox.exe	93
PID 4924 wrote to memory of 3376	4924	firefox.exe	93
PID 4924 wrote to memory of 3376	4924	firefox.exe	93
PID 4924 wrote to memory of 1832	4924	firefox.exe	94
PID 4924 wrote to memory of 1832	4924	firefox.exe	94
PID 4924 wrote to memory of 1832	4924	firefox.exe	94
PID 4924 wrote to memory of 1832	4924	firefox.exe	94
PID 4924 wrote to memory of 2740	4924	firefox.exe	95
PID 4924 wrote to memory of 2740	4924	firefox.exe	95
PID 4924 wrote to memory of 2740	4924	firefox.exe	95
PID 4924 wrote to memory of 2740	4924	firefox.exe	95
PID 4924 wrote to memory of 5372	4924	firefox.exe	96
PID 4924 wrote to memory of 5372	4924	firefox.exe	96
PID 4924 wrote to memory of 5372	4924	firefox.exe	96
PID 4924 wrote to memory of 5372	4924	firefox.exe	96
PID 4924 wrote to memory of 5908	4924	firefox.exe	97
PID 4924 wrote to memory of 5908	4924	firefox.exe	97
PID 4924 wrote to memory of 5908	4924	firefox.exe	97
PID 4924 wrote to memory of 5908	4924	firefox.exe	97
PID 4924 wrote to memory of 1248	4924	firefox.exe	98
PID 4924 wrote to memory of 1248	4924	firefox.exe	98
PID 4924 wrote to memory of 1248	4924	firefox.exe	98
PID 4924 wrote to memory of 1248	4924	firefox.exe	98
PID 4808 wrote to memory of 1864	4808	firefox.exe	101
PID 4808 wrote to memory of 1864	4808	firefox.exe	101
PID 1864 wrote to memory of 5160	1864	firefox.exe	102
PID 1864 wrote to memory of 5160	1864	firefox.exe	102
PID 1864 wrote to memory of 5160	1864	firefox.exe	102
PID 1864 wrote to memory of 4760	1864	firefox.exe	103
PID 1864 wrote to memory of 4760	1864	firefox.exe	103
PID 1864 wrote to memory of 4760	1864	firefox.exe	103
PID 1864 wrote to memory of 4760	1864	firefox.exe	103
PID 1864 wrote to memory of 4940	1864	firefox.exe	104
PID 1864 wrote to memory of 4940	1864	firefox.exe	104
PID 1864 wrote to memory of 4940	1864	firefox.exe	104
PID 1864 wrote to memory of 4940	1864	firefox.exe	104
PID 1864 wrote to memory of 2528	1864	firefox.exe	105
PID 1864 wrote to memory of 2528	1864	firefox.exe	105
PID 1864 wrote to memory of 2528	1864	firefox.exe	105
PID 1864 wrote to memory of 5244	1864	firefox.exe	106
PID 1864 wrote to memory of 5244	1864	firefox.exe	106
PID 1864 wrote to memory of 5244	1864	firefox.exe	106
PID 1864 wrote to memory of 5244	1864	firefox.exe	106
PID 1864 wrote to memory of 6188	1864	firefox.exe	107
PID 1864 wrote to memory of 6188	1864	firefox.exe	107
PID 1864 wrote to memory of 6188	1864	firefox.exe	107
PID 1864 wrote to memory of 6188	1864	firefox.exe	107
PID 1864 wrote to memory of 6708	1864	firefox.exe	108
PID 1864 wrote to memory of 6708	1864	firefox.exe	108
PID 1864 wrote to memory of 6708	1864	firefox.exe	108
PID 1864 wrote to memory of 6708	1864	firefox.exe	108

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://archive.org/details/mcjenny-mod-forge-1.12.2-v-1.8.0_20260412"
1⤵
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://archive.org/details/mcjenny-mod-forge-1.12.2-v-1.8.0_20260412
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4924
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1928 -prefsLen 26983 -prefMapHandle 1968 -prefMapSize 270110 -ipcHandle 2040 -initialChannelId {e3c1ed26-8718-468c-96c9-9f17e8a68115} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27019 -prefMapHandle 2436 -prefMapSize 270110 -ipcHandle 2460 -initialChannelId {a8c77d44-1b3c-4ea0-97f2-05ad6f12895c} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3460
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3880 -prefsLen 25069 -prefMapHandle 3884 -prefMapSize 270110 -jsInitHandle 3888 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3896 -initialChannelId {6941b97b-d995-45f9-a992-054eeaf5e91f} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4044 -prefsLen 27160 -prefMapHandle 4048 -prefMapSize 270110 -ipcHandle 4120 -initialChannelId {b95ad417-d8dc-41f7-ba97-36aa10cd8091} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4496 -prefsLen 34647 -prefMapHandle 4500 -prefMapSize 270110 -jsInitHandle 4504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4512 -initialChannelId {0e7ecb5a-4d35-4fb3-83ce-1e20991e1403} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5220 -prefsLen 34971 -prefMapHandle 5224 -prefMapSize 270110 -ipcHandle 5236 -initialChannelId {95ecbae6-8a04-4c11-85f4-0b4cc9f25425} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2740
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2980 -prefsLen 32928 -prefMapHandle 3152 -prefMapSize 270110 -jsInitHandle 3156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5180 -initialChannelId {25321c9c-8736-40b2-8492-e65c32984bd1} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3156 -prefsLen 32928 -prefMapHandle 3152 -prefMapSize 270110 -jsInitHandle 2980 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5744 -initialChannelId {b9fc2e4c-62f3-4bd8-88a3-286388f40d93} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5984 -prefsLen 32928 -prefMapHandle 5988 -prefMapSize 270110 -jsInitHandle 5992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3156 -initialChannelId {e2fe95e6-235b-4fcb-a46c-720d290f740f} -parentPid 4924 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4924" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:1248

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Detected potential entity reuse from brand GOOGLE.
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 26980 -prefMapHandle 1992 -prefMapSize 270285 -ipcHandle 2068 -initialChannelId {15ee682a-464a-488f-a299-2db6da945ec8} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2352 -prefsLen 26980 -prefMapHandle 2356 -prefMapSize 270285 -ipcHandle 2372 -initialChannelId {781750aa-e0a4-4b85-92fa-932c27feb392} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3896 -prefsLen 27538 -prefMapHandle 3900 -prefMapSize 270285 -jsInitHandle 3904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3908 -initialChannelId {550ed5c2-61f3-459e-8565-a89b3529226f} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4940
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4068 -prefsLen 27538 -prefMapHandle 4072 -prefMapSize 270285 -ipcHandle 4104 -initialChannelId {9bb20b1c-f65a-414c-ad7e-922b65437af0} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4924 -prefsLen 35143 -prefMapHandle 4928 -prefMapSize 270285 -jsInitHandle 4932 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4460 -initialChannelId {4e6993f5-1ea0-45b2-b1e7-ba3742e19434} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3184 -prefsLen 35197 -prefMapHandle 3188 -prefMapSize 270285 -ipcHandle 4920 -initialChannelId {722d5c96-adb1-4241-9d04-554f10969adf} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5664 -prefsLen 33138 -prefMapHandle 5692 -prefMapSize 270285 -jsInitHandle 5684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5688 -initialChannelId {7f29e70f-325f-4b93-8888-7cb056b9a97c} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5824 -prefsLen 33138 -prefMapHandle 5820 -prefMapSize 270285 -jsInitHandle 5868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5880 -initialChannelId {0ca3c8c9-5d08-4600-b324-f2cad163d5f2} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6100 -prefsLen 33138 -prefMapHandle 6104 -prefMapSize 270285 -jsInitHandle 6108 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6116 -initialChannelId {457ffffe-6385-4b68-acfc-eef7a3cd70d3} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6728
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6072 -prefsLen 33178 -prefMapHandle 6100 -prefMapSize 270285 -jsInitHandle 6104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6520 -initialChannelId {92ed551e-5104-46ee-9a21-0d841ee3c44c} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6072 -prefsLen 33178 -prefMapHandle 6100 -prefMapSize 270285 -jsInitHandle 6104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6092 -initialChannelId {b259ed8a-1289-4d82-8a21-2ec31c3884c0} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:5824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5772 -prefsLen 33178 -prefMapHandle 5776 -prefMapSize 270285 -jsInitHandle 5760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6132 -initialChannelId {d6b94abd-13ee-4c46-9440-d1446907c925} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:6492
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6952 -prefsLen 33178 -prefMapHandle 6956 -prefMapSize 270285 -jsInitHandle 6960 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6924 -initialChannelId {7398678c-dc08-4f61-9ef5-3c7881a609cd} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:6500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 3240 -prefsLen 35289 -prefMapHandle 2992 -prefMapSize 270285 -ipcHandle 4796 -initialChannelId {c2279159-8b21-43f9-844f-e10d0dc85bf1} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 utility
    3⤵
    - Checks processor information in registry
    PID:7080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7088 -prefsLen 35289 -prefMapHandle 7092 -prefMapSize 270285 -ipcHandle 2992 -initialChannelId {c3662eb8-9359-4623-8d1e-1d95812fbb5d} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 utility
    3⤵
    - Checks processor information in registry
    PID:7100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7432 -prefsLen 34644 -prefMapHandle 5784 -prefMapSize 270285 -jsInitHandle 6264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7384 -initialChannelId {1cb95a7e-16b6-4331-b9cb-35056868ecc5} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:3100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7604 -prefsLen 37030 -prefMapHandle 7656 -prefMapSize 270285 -jsInitHandle 7696 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7372 -initialChannelId {7e3af768-7d27-47b7-83f3-d456f20a8f94} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:1312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5832 -prefsLen 37030 -prefMapHandle 2500 -prefMapSize 270285 -jsInitHandle 6692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5844 -initialChannelId {6fcb3f58-ac14-458f-ab98-3d37978fca81} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:2252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6660 -prefsLen 37030 -prefMapHandle 6736 -prefMapSize 270285 -jsInitHandle 5864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6740 -initialChannelId {8178eb59-78e7-4d75-92e2-e7e4d5908766} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:5472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6892 -prefsLen 37030 -prefMapHandle 5200 -prefMapSize 270285 -jsInitHandle 6728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7400 -initialChannelId {003b0ba8-ad1f-41ad-a6d9-ca295f54a5de} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:4344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6044 -prefsLen 37030 -prefMapHandle 6048 -prefMapSize 270285 -jsInitHandle 6220 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7456 -initialChannelId {b6c28715-0851-4a2b-94d0-c63b1448fd5a} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    - Checks processor information in registry
    PID:3376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7376 -prefsLen 37030 -prefMapHandle 7608 -prefMapSize 270285 -jsInitHandle 7388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6336 -initialChannelId {e9e5bc75-7dd3-4b78-a030-dd27609d2d13} -parentPid 1864 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1864" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:2748

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6508

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
PID:1704
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Boot or Logon Autostart Execution: Active Setup
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:5832

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6596

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:5016

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.contile.json.tmp
Size 5KB
SHA256 b51549bf2c793cc30b95c101d595232287dd9e8ecf8931b602f59287ad0a27f6
MD5 1bc61b4ffe405878603d88b7cab67beb
SHA1 92cb25a1896aa9ad55c17f3739c5ee69e49019c6
SHA512 8b58e6d5887cc31d3f13c09459535c0c38e52b76a3264622c1038674e5996c8f48ef9a688531182d121e8877174d60d0ee5fefc2ebffffa97cafd8631708b72e
SSDEEP 96:T+Ok/y4EAkYlY7T+mRBnRcpCkSa42LR6ob:s/y4AYlRmRBnRclSQLR6ob
TLSH
T17EB10A9FDC50489327336BD22C1E3F59E193B08BDDE8CAACA3E96C01549D31A429F8C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json.tmp

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.discovery_stream.json.tmp
Size 76KB
SHA256 77e1ac5790ce452acb45fa4e498421c172f2505b4d7346ac6fb500e424382bd4
MD5 b0ea804dd0e9b406d7bd4e68874455f6
SHA1 5e89baad837dd8ccc86f09e86eae15a7c122205d
SHA512 717267841873c64af88b45e24c083c8302dc55ba7e12c30dc03fcadb6dd5d5211ec9b59a9cf306d9bf76a1c62c8682469cdbe86410ad6951bd87b61588a7ea59
SSDEEP 768:tyTenStJ8z9I6pZDLtFRd4JcHdRnsD+lI6qieAjMS/0cyliEal/s1AhwzpA6eXyr:8TenbpFc+y+lINijjMa1EKc8yr
TLSH
T12473F7A397A871FF1B9136CB2C0B795B66E20189F38606DDECDDC91C81CD654033A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

08C52DAFA2E522CD14D7338FF8069E5371C8CF04

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\08C52DAFA2E522CD14D7338FF8069E5371C8CF04
Size 13KB
SHA256 80bdc7af0d848e4d2c9c81d0bf6247ef3e385821aa151d7041d792d6b04c67e6
MD5 3df52031f772ee559131a85cd76acb64
SHA1 09a723f932b6b615ec8be2cb9fb6ec39b46a75a2
SHA512 5c651a48db30dfc1019960d13b90a4568327ed9cf997ab8f3fadb49097f53d6ed149efad095b82fb6fad5cb20bb684809fef1c4c46064924f3ec391ce5905372
SSDEEP 384:MZwDCN91QYOJHrOZwDCN91QYOJHW5G8fTQs92JV47rlocpf4PYo4PYa:MeCNkYOJLOeCNkYOJ2Lfks3rC0
TLSH
T1CD522BF77E0902446F05879F4D6F7A48DC23A9AF7EDAD1E9C6203031DA84E33195A893
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0EEC81849FA77D6ED4058BACBA5959A43A998CF5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\0EEC81849FA77D6ED4058BACBA5959A43A998CF5
Size 168KB
SHA256 2e030e5e2768e044581435689c1c6384f2bc17a00569a8052548da1e328a2d8d
MD5 23dde89ad916de6ac7bc87b7d798d52b
SHA1 327c9b71a884fdad61abe1c6de77a51c1ced3096
SHA512 59700c59fe246984a5c4431963a49a3fa3266a87af18ba4c159ad17a2996dda58a1905ac95c12e90fa72385316c333d1e48b0ce7b194874eed5852b903ae8a93
SSDEEP 3072:47XV7si3KbF4FqQhzhesYQ0528HoMqhYyw3KbJ3phC6M5E1y6aMmh6H1UqcJato7:OV7scqrsYj2eqhY3KlZPE6hgh6VUqc7
TLSH
T1A6F312B39B8731D99AA698F07419AD59C953B6F60F0AB4AD7092CCC750F0671CD8B8C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1477F7CCD1FDCE9DFC8AAA1A94881E7787E576F4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\1477F7CCD1FDCE9DFC8AAA1A94881E7787E576F4
Size 13KB
SHA256 3a871871ffa50cf53bcd4d72e66ac3f330d6cc69316995e5609cf040eca1de75
MD5 937c25d6000091ff67d853a9fb8d3f8e
SHA1 7109c53b790e761ea13db17a9e58a802fbf5c2b9
SHA512 e8f931d5908ad2d91c8696de3b980aebb6636ba73079a053d72352b2d485a61b2aeaa4edaa57c35592e5788b3572a0340dfb671f08c850bd1242c32852a50b47
SSDEEP 384:R0AkBPmoJ+N9aRVnh2zY0DE2Ba/rIVy8eL2:CRBPmoEa/h4Y2sDIVy8L
TLSH
T1E052AFFD8B00544C099AE5E6D88C11B95C3DA327D2E970F16468321E9BEA7B9D1F60C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1A89221C36F00123780486FE3CDCD951326ACBE6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\1A89221C36F00123780486FE3CDCD951326ACBE6
Size 101KB
SHA256 8b69cf5f9d68c01a4b4c130f69aebdbb84a1ed1e0f33fbe1f3135425f88af8f5
MD5 e13d720e413013c2b761d99eb0221661
SHA1 668adfd145134f779599ac39b801c2a66e9e411e
SHA512 5c0586844d22b21eef499f39e217fd87f094696d91f6cab4563a923aa3f0b4ced95774368557a32370f4b920c8286c4fbe786b70fc2b7e43c1074b4449110b0c
SSDEEP 1536:irbYKrtv9liYtoKYrjYG5jpzGuAEAgQWa1gzqWyA:OZFUDKmVpmEA9Id7
TLSH
T19BA33A275BD5197B079773C82C0F7C9B4FA70583EBE9C6A5A5CDCA0980D3C68427E622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21D03B8918A6EB4402983ABB5C96BC7509B401C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\21D03B8918A6EB4402983ABB5C96BC7509B401C0
Size 21KB
SHA256 0b9fde26680db5d39ce2aad039beb5155bac8e2362cd23a009c55d14045f7916
MD5 28433c4b65c4610f7b614345a495e136
SHA1 832dd84b6e87ced9606204e123561740faf7a069
SHA512 e178d761b64617a9392cabc0f71690a37eb68ecef75c6ed3d9bcae27d39b7cdaf210b7cdda0849d82b800e069bf8ea59922db8fe178e825a1bbd42bf46fce7b8
SSDEEP 384:NeIIuHNGkKh3cFkgOUW3UlP8ZwDCN91QYOJHrOZwDCN91QYOJHW5G8fTQs92JV4X:NfIpkI3crW3UlP8eCNkYOJLOeCNkYOJ0
TLSH
T1BFA29FB32F0A05416F08879E8D9E335CEC27656FBFD9E1F446543561ED88E33256A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

233A988E0741C7C0FC28B80715EC63F0D1AB792D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\233A988E0741C7C0FC28B80715EC63F0D1AB792D
Size 9KB
SHA256 0523a39ed60a934592c9360d2dc56e44a085aca332d83f5820d8ef9733a6a2e3
MD5 8d15be6c31b8647bf9b825c1c5e7174b
SHA1 81a51107f25d35225f18eb0132cf7c29bcfd7da3
SHA512 1a77194fed9999cb6add567dc0e24f520c98505634882055935d5d7ca0922886be517293ac8db4222b50ad72be0edc5b780c5d4f2d3d33f48eb0f1838729151c
SSDEEP 192:BZM1DCJzL917UYwBJm6X7OZM1DCJzL917UYwBJm6Xm5G8aeTQs4JA26YH147rluH:BZwDCN91QYOJHrOZwDCN91QYOJHW5G8i
TLSH
T179125D7B7F00248D1D03C519CE9F5664AD2BE96B5EB4E29E4744340289CA63636AFCC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2AB2E2A684F72F36A1C627ECF43FE5B0995EDFED

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\2AB2E2A684F72F36A1C627ECF43FE5B0995EDFED
Size 11KB
SHA256 6137f7039780a1d3d6d97a850c0d1c1f179a8f1a5b42a8d6a2f1fd18413e4dd8
MD5 9ab1da6fa2aec5222e1332b00bb1f3ab
SHA1 074f818cbb99ae80f138b2ed4959d5a74004dc5b
SHA512 3aff9dc8a92cb941e8ffe4534310a026052264fc65725aa38a4243353653a3a55cd3ef4fbc4f1e882bfc8129cd4cb02de692c0c7bc8c625a9e14ca9e25d710ba
SSDEEP 192:X/y8ysK1cURPAeQIs9XgJ4M/9702l/nKh863lhu1wqsv6TAQ1kd92lrdH1RaGTAs:XyadjgJ4IlP61hu1wdvNd9KVRaAcP+A8
TLSH
T190428D385F412CA9095364AA8D6FE2C10D78F2579B518AEC59283504C9C78FAE6F816F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

374B9B139673B5DDBE8D5AC8EE2C2175235CBE1A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\374B9B139673B5DDBE8D5AC8EE2C2175235CBE1A
Size 366KB
SHA256 ea2684606f96abc5d3d7b6f3c18d59e8f38e30863cbe67dfad533336d61f4b6f
MD5 864f5edae5a67994abf8241490e416b4
SHA1 99f7d917d1786abf90023837a013955a6170d4cd
SHA512 368591ba407bb408d0f729194873e6de8258cae472bb741e8c6d25560475088e2365986b0678413598af708473211a7e5d4737db94152603ebbb2fe42e9d6ca1
SSDEEP 6144:qZHssF/GKbrF/H0QDymDEMpAUZENFwfo4/1Vhn75vzh7CTp/WcBEYELW2+dWceEW:qZHxOq/H0QDySxSkCFwQ4/bhnZxKVBEB
TLSH
T1DC8423BC84A138F70E17FB2ABC39541B980CE9ACF719599CFD452035A59C4EBA7EC844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3A722B8E71F543497259F8A506FC42C123707D29

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\3A722B8E71F543497259F8A506FC42C123707D29
Size 15KB
SHA256 14c6ab76be4407e7006d7d90c0a23991d7ca3c5bf392751c547f0d8b097ad653
MD5 bcbee1475164716ff8850672b07b962f
SHA1 2c3d90d2f46a24d6e6cd3373cc2f404545683ed5
SHA512 238453962f12fd01ae0980e106e2a723fe8c41662eea6466c26a491786ce95dd81356e3d0b10f801f4ff6a74dc910d0095bd73cea88906577a022fda243a992a
SSDEEP 384:NRMymkOtCZwDCN91QYOJHrOZwDCN91QYOJHW5G8fTQs92JV47rlocpfqPY1qPYr:v/OtCeCNkYOJLOeCNkYOJ2Lfks3rCY
TLSH
T195724AF32E0905552F09C29F8D5E7A9CDC23A96F7FDAE1E5C7203431DA88E731556842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3C23D2DACB571F94C9C24BFB93EA5C3EC636E9B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\3C23D2DACB571F94C9C24BFB93EA5C3EC636E9B4
Size 16KB
SHA256 c447f458cd4823415729f7c0236f2e2051e9ee75db5f2104ab3698a5a3669fd2
MD5 26f8e05de72df6728c861d633d25f5dc
SHA1 126f783a6bf683569a2ee8fd70fd804d2b7c98f0
SHA512 293706e464d5d874d4910596f269fbaf79e6d2141b2ad12ca94aaf35c72bc022639f8f939240edfdf00cba38bc77d8da212e4c1866ee0e4bf97bec3cf0a12cea
SSDEEP 384:kxcVkBdYiAJuZwDCN91QYOJHrOZwDCN91QYOJHW5G8fTQs92JV47rlocpfstPY1S:EgkbYVJueCNkYOJLOeCNkYOJ2Lfks3ro
TLSH
T1DB725BF73E0900502F46C7DF896E3658EC23A9BF7FEAD1E886157031DA84E731999846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3FDF61F92F46CA2CDC7269B91F61F84C1EA2DDC8

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\3FDF61F92F46CA2CDC7269B91F61F84C1EA2DDC8
Size 25KB
SHA256 999e25d0ff12295ca56e381ada86997b53ffd86cbf59a3757213379151c456ad
MD5 3be91a7217dcf4a54c6182065f53979a
SHA1 c64f3116616d5fa33a8752616941a59ab8fe4707
SHA512 e0c17d162c51ed4ebe143f6809755e879231e0b0ba3d0a79d6ed41c8619099740f440c4ecbd9c134a67e319fde2d5c21ac464a93c920d59eedc2977a750a64f7
SSDEEP 768:oE2to4U/QagAHwY2IKWlp+INJq24FwdvNmVAf+hRMU:Y2DV527Wv94FwBN5W
TLSH
T1ADC2D0759F923CC40107E5F99CBDE5A51D2DE293CAC8909C6A403B0EE2997BDD5F802E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42D3E42A580EB17B3F1B94392AA9049B61B4FB48

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\42D3E42A580EB17B3F1B94392AA9049B61B4FB48
Size 11KB
SHA256 1dbe1a1e2489fcdefc159ec4ca591aa7646f5a60c72f9aef26108740fa0e4ac8
MD5 14542a65b24e6dbc34a2af6c67102edd
SHA1 465dd6a079765d07dda4997b5431dc035eee9da4
SHA512 0e0466caf47acff774eb6ea167960b0adb333e88c3e64f4a37ff645f52823a2a0df4f4762603bc223fdbf7507689be3fd13011a9c323e8b313b061ba9bf58fc4
SSDEEP 192:GEG3y8FevwTUbtY1J+Nn9am3+j7VMirN2zsb0HjGPl2BadE4Pro15j75ywpskCLi:G7PmoJ+N9aRVnh2zY0DE2Ba/rIVy8eLi
TLSH
T1F4429EFD8F00654C0C9EE1E6D88C12A51C1DA757D79970F46518321E9FDA3B8D1FA0C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4F7F3B643F01931E0628C11F4D30E514780D17D9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\4F7F3B643F01931E0628C11F4D30E514780D17D9
Size 18KB
SHA256 76eb35645989bf4233adc00c8b041e942bfe0ab5d6a15caf160c1b3141002a75
MD5 eba63ff8a72ac73cd7df4ec8599f4ef1
SHA1 b2f3b968ea212bce1f3ddd619ce313425888c81a
SHA512 66f70ef3bb85905da473d60e280a578a961f41644915ce7510910f340fc6b37ecd797e6a05311005ccb9299511102bb967fea236aea218696d4e69f61961cc08
SSDEEP 384:ETqtXYxDP595wiE+bsc8PmoJ+N9aRVnh2zY0DE2Ba/rIVy8eL1T4:CF95Nvt8PmoEa/h4Y2sDIVy8OT4
TLSH
T17882BFB51A10B91C4DAFD1C6D88C11E96D2CF303E28565B92914315E9BE77BC86F908B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4FC1656D92341081D4DBBF1837BADD5D7393362C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\4FC1656D92341081D4DBBF1837BADD5D7393362C
Size 1.4MB
SHA256 fb0600465027e383ba5fc42d61d5e43b0624401bf37018ebf511a72d80c406db
MD5 d3e249a22a6663db94ea30b35dcf0ed1
SHA1 a9fcb7c0c2feea7c2ec34ad65c3ce3958784fbb8
SHA512 4d10b30d5fba1301c537d19a1b3b183dfb3d29110b5b81cef0d9ce23091ceaeb2c2f8b1668ff23447d2e67fbcde5052bf05698f44ce59fcc346274b79607e1fd
SSDEEP 24576:5UoAm9BjEPdCXKbRthTRC2AAAnfEdt+f9mGsLJK9YxDiK5xJ+VLCrB+7EEpojVSd:WnCpEAuhArAAcbSgXLJK9kiexJuYB+7j
TLSH
T11F6533D607C29BACC754FA83615B0E408C3AB76F76531368CA09F76783F596A4B1C2A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5262E033529DBDF96AD31ECCAF93B446FAFB26B6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\5262E033529DBDF96AD31ECCAF93B446FAFB26B6
Size 85KB
SHA256 9ea4e6e4ff9c4c5744fd4ce60132774b528b8eaa6e518fa30565915e7cc6dc2f
MD5 56e346e140cc6271fb8089650ac43f84
SHA1 188bc0b089f5c46842404ce78e8f70be9f687a8b
SHA512 ec16a025c3911d4d3e07ec74eaac9fd4972ee889ceca2c13180bf706f31249770199f5b27f563efd7a727ff306a326e759d52ad7d7e8543dd626b5ab916d8280
SSDEEP 1536:QM5lHfUYuwc4jZWDA+oDts/UqRSNofJP3DVF8Jh6PRivARU5IgzKiY4q8Yk1TP1D:QMcpmUU+oD2MqkChDYJsPjQIe7L1TP1D
TLSH
T13A83F1FB9A8842DA2B1742AF54A77A5CDD63ABB3BCE6D1D6C52437906C8CF3710500D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5479F6E8E6BCADEE1972E76D6C2E84D6C06843F9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\5479F6E8E6BCADEE1972E76D6C2E84D6C06843F9
Size 84KB
SHA256 722626b14ab17190b060fb252dc5faf6c2e053ecdbce9a5b90c8cad63f163a52
MD5 942d35e3c6168a4ef74032054b229009
SHA1 e7a5b40db8e83c535e620b99cb8e84885444e30c
SHA512 500e32262638e5ca69f437499ffd5177b9e3bf49c4cb4a7fdc59d15405c13fea6237d6686a84de680285a76cd2926139644477849c0b5e894736bcec154ab674
SSDEEP 1536:d7SQKaZckocww+olQHuT3k2G8it9/cwHCuaegC1XeW194FwBN5P:JSaZBo9Vz63k75PiF8XeM94WX5P
TLSH
T1D18301793E213CE40A43F5B0A9E494920C2DA317674684AE61A53B44FDED2F977F884B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5E43012191E7B1F510ACD5BF039D8BF1B9A277B2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
Size 16KB
SHA256 4c05b50fb6c8520816b11ac79829a2094197291c048edf28d8e58c848d81529c
MD5 523e165f4e8232b2b78b768b05b985cc
SHA1 e3cc4d3114d8e9c0c263ee8c815099dd71537338
SHA512 02ae6c53ffcf2bbf1688bd6f6cd8e6fdac6b604d599dc5d5170b3ba01db752fb62e3d653e29099b532a13a502380c321923163ac17ee9b7a291b34bb3933974c
SSDEEP 384:HkCjiO024YIDL84KKDL849B7SOEAd9KVRaAcP+AWRMAU:EzZYIDL8lKDL8CB7S/AmVAf+hRMN
TLSH
T199728E795F003CBC1597C0E8C5B592DA8E18B7A7CFE6806D21583D0ECA98A69B4F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5EC47CD516913FED2E8D5B4E8117823AA9E47465

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\5EC47CD516913FED2E8D5B4E8117823AA9E47465
Size 15KB
SHA256 bb8bd4a8de1a8c49cff72131235cf5d0f18f0cead35455dd8855d9b81591b586
MD5 370e85980cea758645341a89cb9cd188
SHA1 f60b73b06e44a5dda3588ed2879f9893c428c3e4
SHA512 a5252c3b13cc04e02a7e9776130f49453e008c28c10341ccdd6ecd0b850a8ca2330c6c375fbab18219fad9d73515888cc8e736897560b2ac54a75adf6653be06
SSDEEP 384:KM/0dzbj5pnPmoJ+N9aRVnh2zY0DE2Ba/rIVy8eLXvI:Ku0FxpnPmoEa/h4Y2sDIVy8ovI
TLSH
T1FD62AEFC4A10A51C4C9BE1E6CC8C01E62C7D7327C2D9A9F49558350ACFDA3B8D2E709A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 16KB
SHA256 bb92f56547964e248b7935830fa1fda72dbf256fa11792c08a3698c484d9b548
MD5 9d609cbbb44b1135eba302ea7511164b
SHA1 f1f808b05f85e40f17b642a39504aa9c57ef7703
SHA512 32dd6409e5c1eb5daeddf140e60e6867b32b3d96f7de9d1e866a5e464c8e919928550455f6ae1c49b81365be6c82e816aa377084d6538401ee4f8eb545064564
SSDEEP 384:PzS/FjgJ4IlP61hu1wdvNd9KVRaAcP+AWRMAl:PeN0J4IlP61hiwdvNmVAf+hRMi
TLSH
T11A727C3F9F5018DA162365E64D3E6BD91D46B18BDBE8C5EC13A93800D09E2AE81FD0C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6DFB57F55EC801511D191391712F5B6DEE7B0381

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\6DFB57F55EC801511D191391712F5B6DEE7B0381
Size 69KB
SHA256 39a942b6cede0b0c7daa7a3575da326542d30552d2b7b4bb58e044140417cd25
MD5 8ed0a820f4340e36b096b91d8d622311
SHA1 fed0cdb00d674b2a60382d045ad9107cb0b31047
SHA512 2d6ca2c9ee681a497cdd4d9603a087a5ade40ec00dacf7ffad3b032d102f79762d2082ab0cc61863882027c7e1bdeca9b7f3819bf5901b78968a3f4e48a3728b
SSDEEP 1536:B043JlQrUTZuHU1Ed4E5s3CKdIdYAObtZ4Co3ofhdgv:BtZWuAUGd4EcdESq3oJdgv
TLSH
T19F63027A2803760CAD420FA184BBB108ECE6D7777A99ADBEF20C6415D39671E7F08564
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7CBCEF5162967CB4F8AB18F2FF2C849491E2F64F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\7CBCEF5162967CB4F8AB18F2FF2C849491E2F64F
Size 11KB
SHA256 a2c23a993209d9a6ed84c4ac234d39c89278dd4895f6fbaed7e92bf123e42642
MD5 89273021fc2b8085c06d8a1d7f9c49b2
SHA1 d8fedc63e85c1c67f068e5a71d28f8d26d4f4cf1
SHA512 3c67cbd5ed6e14ba7bfb1173d186fceeca62fbcaf2f222237846771f285e08a8f9e9f57a4428aeae36b7db2382681c84215652a78b6f840245577e647b3e2697
SSDEEP 192:W63y8FevwTUbtY1J+Nn9am3+j7VMirN2zsb0HjGPl2BadE4Pro15j75ywpskCLBF:1PmoJ+N9aRVnh2zY0DE2Ba/rIVy8eLBF
TLSH
T13842AFFA8B00A45D4D9AD1E7D88C22A91C2CB727C79974F56564310E8BDB3BCD1F60C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

A8A62A61E64682F95986B526A21FB96A740AA2F2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\A8A62A61E64682F95986B526A21FB96A740AA2F2
Size 20KB
SHA256 c2a8bddfcfd05648cbc1fd180cf9cd0921e0caba0825ab656e67a2e0fd5745a6
MD5 8c71ef1144e6b493d1ff424e8cc22444
SHA1 9065ac435d6d5db0e01a0805d5f05db8500b1901
SHA512 9f486805ef6dc8046311b844b7d9237f30eb9fa526aaaf44e184ea50be3d49507fd0da98949a39f8943f0ec0619e3570bc0bda2752b81c7b4b10caebe4d7fd71
SSDEEP 384:dOuxaCgTjk/iDg/lRsgM2hBfAWTlYsiPmoJ+N9aRVnh2zY0DE2Ba/rIVy8eLm:ECgTja/l6gnhLTysiPmoEa/h4Y2sDIVn
TLSH
T14592C0B68E10580C0DAFD1DBD49C51A61C3CB633445EB4F1A144391EABEA7BC81FE4D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B0513C17AC20F8954723597F55ABFCBBE91DDFF9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\B0513C17AC20F8954723597F55ABFCBBE91DDFF9
Size 20KB
SHA256 2d0a574ae5cd19f99d30c9e73adb690f08e82e143bce0397cebd053f08163994
MD5 f44fa3afbc2e47c6dc9822dbdf03720f
SHA1 4f2050b199dd7397a4b7168734ba1a84dd118776
SHA512 03785be5adc7f3264fdb1848126d9384a184a316ce43e3e2ea01fd0771b33fe28af97ff9994143bd09d05f919f7ba792cdb30f5bd3eb8bf0bdf677808ac60f85
SSDEEP 384:ryXMNaMXM6wLPrrmYk+me2p+I+wJq2GJ191wdvNd9KVRaAcP+AWRMANU:r6dn6wLTrGM2p+INJq24FwdvNmVAf+h4
TLSH
T10992B0362F413DEA069796F5E97DA9D21C0CF1438F44409DBA1C381BE2D89AED8FC05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BB95D0607349D05725D5FE01D4FB300E319072AD

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
Size 11KB
SHA256 692473060d57afea2fc1b937115471e37198d54cdd97c7326a6636b678dc8465
MD5 eeff0b69b8ee9d6f154bbb8a78c89619
SHA1 ecd61eb507ceaf31e9ccb534fb1711620614e8c9
SHA512 7bfe401f567defc64ace5c3519d48c036cbe49363f9e4e32035a5de741775e3f4e9c1f013d8bc28a76f4cea37130b62e992f6cf7fe092f2634bfcdfef84aa492
SSDEEP 192:2H6i+9812tNlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDlkd3kg:2Hq9ZsSpde+Vsj8wkac8Woh1B9M0lpDG
TLSH
T14F428FF39EA1143C0E8268E1FDAC66890D54D143FDD7A1F91D08394A96D16FDF5AC2C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D02FE8E3E1AA17FC0BF0221BBB8F9F6065C9B8F1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\D02FE8E3E1AA17FC0BF0221BBB8F9F6065C9B8F1
Size 13KB
SHA256 96999044165d0992efb9728895fdb1eecc930a6b0808b43fe5542d717d1b111b
MD5 23b5a525bbd2609a7d6a057a1fff1e6c
SHA1 2c16a35f7f8b99c88991dc3893c4127df2b4b635
SHA512 44c740aad8d27bc52951a8d25ed8c06f94d00be0b942adedde339ed41bd931a57db194bd2b7035b16f42bb8b72b720b04c3b296c7c2ab8ca86b5c48b9b801b05
SSDEEP 384:G1t2p+I+wJq2GJ191wdvNd9KVRaAcP+AWRMAN2101V:i2p+INJq24FwdvNmVAf+hRMDOV
TLSH
T17E527D762F003CE80853E1F19C59A5D91C6EE243DB8490DC7A183605E6E96FEE5FC05E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D04200C11BF95A67571F3ABF82691C2AA376DE6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\D04200C11BF95A67571F3ABF82691C2AA376DE6F
Size 12KB
SHA256 4a4edd5d5989e34e551d64cc759b17eddeebcc9e5144051af346404b0dd07cbd
MD5 2ef2861d7ba35bfcbbc75e4ab37b6b94
SHA1 42ba2b47366d694c3aeeb5b2c1adfe1f43d72171
SHA512 ab72f988c75e113c2650946fde6af5fba0288d2c2780a5cce7658b4a45f52122680e2a4b5e686c4b5ac93a481813b3eb80b8374096891b6749fee78f9866fe1a
SSDEEP 384:GtPmoJ+N9aRVnh2zY0DE2Ba/rIVy8eL7MEv3:gPmoEa/h4Y2sDIVy84
TLSH
T110429FFA4B40A84D4D9AD5D2D48C11F91C2DB317D798A0F4A568320E9BEA7BCD1FA0C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D0F48A0632B6C451791F4257697E861961F06A6F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
Size 52B
SHA256 a3471518ca478b7991bd55127b4e3e6300ec8064cdbdf7b7d0ed1b7e88c41472
MD5 e606da12376ee40a5b2f427b2765d46e
SHA1 12f3ddb160c392f05efcd2dddebb5fe0f4d85a71
SHA512 bfe83c5ec640822016d3e845ac231621c7cf645b577224b96036cb5df326eb8175f062f29149830659a62ff949ca1a8923e83b71c71bc699fd030332cdcded15
TLSH
T12F9002496351D945E05C9132081084F805103F044480121234A317E205562D61085400
MD5 SHA1 SHA512 TLSH

Submit Download

DE5F6CB1BD71958EB146CDD974763A3115937269

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\DE5F6CB1BD71958EB146CDD974763A3115937269
Size 12KB
SHA256 07695af055770f3c11969e4e296634ce7241574ce7f04149cc31544f54e1bbba
MD5 be5e098c28be7a8df6ad04d13287d040
SHA1 18fac9a8eff87201080bf71c65fadf9eaa5b0316
SHA512 3a184d26cde1fa5c59efca5faa6884773c272307def15b1e8052e80d979aa5d3a83e5665ac200813e972644c35fda71df4b0bbaf1304b54f64f7ad41e7f700c5
SSDEEP 384:msSpde+Vsj8wkac8Woh1B9M0lpDIIDNCbC8:mDrecsjBkaBxh1B9pD8KO
TLSH
T1CB428EF3AFA0147C0E82A5E2ED6D56890E18D203FDD6A0F52D4C394AA5D12E9F96C1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E473D920361435DF4BBBF194E406FE372015579A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
Size 11KB
SHA256 0e698c717d4e4d25dd2368c311f6c8bfc88d6f2a644d0cb9bc3abc3a19325b18
MD5 f7a451fe2d86ad139bedeaf7e9a2fdec
SHA1 d556302322b8cab52ce1c01ab2618ef23e9ba320
SHA512 b0f932bdb13c7f33f94d8499587a76135643866966f2de0b5f5262465cc2a80e46bc2b71309052297e8fe3705e18cd4ec060e8c830de7875eeaeb29f7ae64d2f
SSDEEP 192:ttwANlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDU9dIXkkkT9du:bjsSpde+Vsj8wkac8Woh1B9M0lpDIIDl
TLSH
T1CF42A0B39F90243C0D82A4F6EDAD6A990E44D203EDD6E1FD2D08390A94D53EDF5AD1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F6DB2CC802065A948266A380F89F5EB80BB1A349

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\F6DB2CC802065A948266A380F89F5EB80BB1A349
Size 11KB
SHA256 8e93841c03804b0e4e30a01dbf27b8287a0afba15ddf39a90239882ff6bce542
MD5 6d37efd1f71b549540d3e745c77e3d50
SHA1 a19395092aa6e93e82e9382ab927969a21c36758
SHA512 e7f899a4d4dbad313dc3988e52cae492d75aae8a68a3fa7f6bbd7af6643a4bb75d0c958364c0f825843e4448e2c146e4d02867fa6de0d1fd32d2ad2223df775f
SSDEEP 192:NoINlqTfsgyN/de+c4sj8wkac8/E5oW65fBydFGf1e0lpBNDIIDlidFkk47dFkkN:NtsSpde+Vsj8wkac8Woh1B9M0lpDIID7
TLSH
T19D428EB39F90647D0E81A4E1EEAD56990E08D143EADAA1F91D0C390A95C23EDF5AD0C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

scriptCache-child.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\startupCache\scriptCache-child.bin
Size 477KB
SHA256 d82f8adb9d7d333bec227d6bd18f71640a79acdc7b389c7d9d79983266323520
MD5 9d2a739a1e5f4d04465f45819d781d59
SHA1 6399b785c2b91927dc1db15d58531247a01de5c4
SHA512 9ab37323faa0e9c7d51056d078bcd4cf02d6e15ac287758641ffa6c2fe3dd1b2988887300e05c951d499beb1cffd6ed98096996362a654e1b03b27da1765d15b
SSDEEP 3072:KiO5Ho9UbaekRHeUwCbZ7jktcvFiTTBdtTapBCACi0uvjmHSTXHqZot0V4QWSW2p:KFCUbu1hjktpJn2pmYXHqmVvSW2psu
TLSH
T137A47211EFA64E23C418037A44FB53313A31E14517EAE3276F8F7629BC673A91D8A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scriptCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\startupCache\scriptCache.bin
Size 10.0MB
SHA256 e70b0243163dc72d4652754fda55e5e5c1e63da241efabfe0b7488ef6d3c5c61
MD5 dcb174257d2d78c5a76bbdb2b7618b1c
SHA1 daf66c77029bb4ee414a631dc53e73be3a2063e1
SHA512 56b748540d7befcbea052ac5dd8c5f2b7edb5ed515fcb3f513cfc8613c1b6e72876869114d8add89dbc51902fce01b44748426756d6872ea215c4bf19fd90cff
SSDEEP 49152:2skVvxWNHhlx+ADzwH6f8Vbg5vw38zYPHpJFVFwmdhCF3Je/3UbSQD:2JvIlx//wafa5PnRRsZ7
TLSH
T123B68315EF664E23C468027A48FB53313A30E08547EAF3276F8F7129BC6B7691D8995C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

startupCache.8.little

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\startupCache\startupCache.8.little
Size 8.2MB
SHA256 da6181176742842060ee57d0b4e7b4dac6ab0e7598a9344143d7e734078c3e75
MD5 1875abcca1301543f4c09b07f51a738f
SHA1 40fb1b186fdb52b44293435d03a71e412ccc72d5
SHA512 b799d8824b698ea25b20e67ceef9b41188af5d6c948507a1f0e9fac2ee3f49f51922c6291054c6ef3961d55342db1cdafe205e7c6d783cc7682c472222323e66
SSDEEP 98304:Vr3/gXVGxXeNr28qP5So8SZxlwv1K+TnxpYFGHjrR:tvgkRkg5VDvwA+z/PR
TLSH
T1C78602B7B3550697C429191AE87A0A393763414203E166AACF78533FFEC724C1BC6E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urlCache.bin

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\startupCache\urlCache.bin
Size 3KB
SHA256 f4929425671aa201613b8ef5ac97f4f422c362cf63616d4bbbc0d78ed634755a
MD5 e67f729489477347fb09214200f59148
SHA1 ec5e35f2e1944618c779f0a78a82c3c26035164f
SHA512 08d85200f4dae00ed8217e17ced0a9653a4482c1f5d0939624599cd7f7af5459f172cfa966d46ede007453deb0974863021bb02feb136d5ca9779fa675ad5dbe
TLSH
T12F61C393E43F203BBD62A8FB6D95C171B42109CED1CD20DDBA966394209E7DC034EB1A
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 eeb6b3adc9c713550346c7a796c449ba4bd829ed5bd5c8e83797797b6000fd44
MD5 50dceb919bbb93f70af542a4a0fe8deb
SHA1 456bde49b1bd2096203c82ccd2aeba7c016297d1
SHA512 dbb873150cf8e94147e29c2d688900de21de2b49566174d59c3b42c3ba44f2b03cfddf0e9fb637b487707edef35ec48cf20fca21eae61b05831e550769e88cec
SSDEEP 3072:j3lAvCgpJ3ZRt/z0BzpdtTyO06GNKyG9PnK:p3A3t/z0BzpXyZ6A4PnK
TLSH
T1D9B3AFF6DFA2CE7D64FFD42D5A82883EF8257440B3A72009C9132715A2C6F78627964C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prep_Activatable Class_Hermes_perf.cache

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
Size 599B
SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
MD5 658ab8c32d4cc5deb36ac5f63da4658b
SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
TLSH
T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
MD5 SHA1 SHA512 TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 576KB
SHA256 59ec4af1f59cfb3da27519c1e2ba477c120bf573044e884baee25f9d37b7322b
MD5 9af904252863b9dab5b79bc5fbfebede
SHA1 e3bde64adccb09992ff19feb73bee5d27ca81261
SHA512 3ec8fa12a576b38767e9a6d2ed2a1d41e52545301bf1500b70432283657d32f52062d2c1ba8a2351e1311047d8fd2a19aa9dc0b07dd88ecd5453e001a9ebc223
SSDEEP 12288:r0UnhTmKFZt9kf8imEaldw8Xv7n1IKkvewjaW4ne6om5YescPafEu3Kk11XD8R19:r0UnwUZfkEFEal+8f7n1I7GBjpoIPvyW
TLSH
T166C401F6F7607CF3A77E034B9D95BFAD07664622864BA0CC443B2BC2465772AAF64104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JC8YM62RKPZRR6EJX19T.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JC8YM62RKPZRR6EJX19T.temp
Size 20KB
SHA256 cb0a2a6390fb581482e145c68b927c746991a55ec1c548bfc257087e3c0150ff
MD5 ed820cf5aa52021e12f3af4b9c809c82
SHA1 bed0554cc6505f89f92a2f4beb8ebb92a84a42a7
SHA512 961887d841a3497c33baaf0b814dbd88b7778c412d4ba7fde7efd38715faed7e5e31f73e51aabb55c74aaae5116709836ca7aec0099b5ff8dafbb19f0caa8030
SSDEEP 384:xygMygjygPjygLmwmCyg0ygRygFCn1yg3rgygzygfU:ymwmn+Frz
TLSH
T1F592330117F30994F2F78AB2BA7637166B33FD01AB16A66E4141610A0933F54CE7AF97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 15KB
SHA256 ba81242e4e56e03463b658b7d1b753e82d4b85a3164f08435dc9066b9645c776
MD5 cc424257aa2fcc9543c60869691f6d4a
SHA1 10f41235f05c8dcda79a45e2b578b28828e1f519
SHA512 e0c4a3ab5154c539a3bd7050278c537c50756756d89f844c0cff5ae4b37554dfea550d4c078a4a4a459393fcc067c1b7d60e8e3a47c0fbb4c883a7acaf5b462c
SSDEEP 96:krtAEASL8BOLaI56OA8LeitEM/pOCZyx2xfQyuZx8wy8tY:k5jn5SQMm22x4ZZx/Ft
TLSH
T141626EF72AB26462F1628FF044A8718C9D332324596CA594D645D4B702D1EE8E27FBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 20KB
SHA256 8253e4953304b77fab9cc6c3bd22bd02273223f907a84099281c0f5ae7a7bbce
MD5 2c71d77e0cc4c14621b3c8287e2f4a36
SHA1 a595211eb50cd3d36b3e9e6505f1dbd8096ae6ee
SHA512 ae7086ef00f864a74b7fb181b1cbf7a341c68bc3112851c46a254a58085ee30d7f314f7f7039eaadcf66bbe124ef6ed104a2503c6123cadc0a113e0897570046
SSDEEP 96:kdLAEASL8BOLaI56OA8LeitEM/pOCZyx2xfQyuZx8wy8tYy4Kz7UzG4KGjG7UR48:kljn5SQMm22x4ZZx/FtbH
TLSH
T13D9296F73BB26463F1B28FF045A8718C9D332215196CA594CA05D4A742D1BE4E27FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 27KB
SHA256 fa463581d8301b3a0e132fe317e4444b82b25620d3a8bcc5f90491e40d819387
MD5 ed1138507da20ec1adfe1494ca7e5166
SHA1 d2b33fe8e6e4deb7b9055c9d3cad900b255117b1
SHA512 4a876d9138c00a243c74af46dd36c19b2796b8609adb55e375c3602242ff0562169fe3264db21bf1cf520bc85dd0d00f3da6d2a74592931ae088f0e84646e40e
SSDEEP 192:wEckIbhmqcQMm22x4ZZx/FtbHSINp8DEYKq4+:TO8PQMm22x4ZZxHHSINp84YK
TLSH
T1CDC20CF73B713452F1A28FF044A4719C9E3332151959A9A4CA09D4A703957E4F27FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 27KB
SHA256 27c701800e9f70fcdeb835255b62fd8f4cefc5aa47b9d516b44c8700ef5dd0dc
MD5 07233ed89d79fa42f0fac24061e64ded
SHA1 461177b370474e2a5bb9b56437f1eccb95443ccf
SHA512 2b1680a5468bc55205d596d2df8183cd354fe6fe24e3644fc3653557d17abc31e770043cdec725ba597762fbf32d2f4bdcf95843972791d84032ce0a9b9b3980
SSDEEP 96:wzwcziG4zgGjG7R5z+ozq3rqz2z8zGM/p3K4KzgbG4KGjGgR4GPHQkLft9aG4KGG:wEcoIbdmqS4KQw8DEYKq4+
TLSH
T141C249F72B726452F5A24FB0449471DCEE3322152A65ADA4CA0DD89B03957E0F22FBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 27KB
SHA256 7e59fe0159367a05c6a224a8998f2962879b9913522e0e61893010baea3f6f8a
MD5 6e29690aef4ab06181555a62857cf920
SHA1 92a79aea276ebf5abc28cdd7a90185085114bbcb
SHA512 349ec8102c8bfbc81bd3b78a64747e91ee8c36bf26e46bc2c99b2f5fff3dd3fe23eb7b04404da791746a85bea598b4bf739cb2a0f95c67fb74ef39e1654a449f
SSDEEP 96:Yzr1zy296G4zgGjGLzrQZozq3ezmzMzGM/p3K4KzgbG4KGjGgR4GPHQkLft9aG4u:YV5+i9ByoKQvDEYd4+
TLSH
T12DC23CF72B766452F6B24FF0449431DCDE3322151A65ADA4CA09D89B03957E0F22FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 1KB
SHA256 c63e8b9672bb53ae49262cfca10c6b763d96ac6ef31c1eae306b9214d6822414
MD5 e4d7d26a049a918158a68d892c9ea63f
SHA1 f75b4c062a6d28e52362ee031602cb26c5650e55
SHA512 65b66141ee6714ced189a08b606045a4832c98035a5ff05c886d41ee413c89196ec82ec85f3cdf834578802120969f78fb6476b145d4ffdffc34dff6366ee90b
TLSH
T191214CB782730070E2245AF8F81A70045E2777C557B9549917A1E4631E83DADA1EC0A0
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
Size 8KB
SHA256 435d7e25b5500e6c77688fb623ebaa2f22faccd1a89eb0b3e84e7706a639ca07
MD5 e5fb9fb168f6d876834d2a638a284c7c
SHA1 6ea85a759eb0e44f6694b162c18eb60198731845
SHA512 035855a99d3b22e3f54ee4d8e888e098f622b6e632e2cc86d2f3af5f1966bb19b4de69bf9de390b6ca374243e2736745169635c1031f1cbaef0475fef7ae81a3
SSDEEP 24:NyuhMZXpDw91CS9xOS9BwLG9VvOLg5q9F55A5klS9l2L:kx6kAEASL8BOLaI56OA8L
TLSH
T1A40291E32B72A472F1A28FF08459718C9D3323241A6C9194C601D4F702D1EE9A27EBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\SiteSecurityServiceState.bin
Size 5KB
SHA256 903335ee589b458014224291fe8aad71a5097ffb1079116060ba569d7fd1c1d8
MD5 dab2355f323430e4a1aa45955aa7926e
SHA1 8640ce662ca6f790415441b5f940248a269bb900
SHA512 d5a5198b9cba94335292c7dfe005c8544e482915b18bd692737cba54fb69845f33230633483d03db9f58d0feb82ed78ea907dc6bf3fda9d43d4a30a44ce0887a
SSDEEP 48:KlPrQDTHDYLh0qqEGUYyoeTnotUBZzkUo7UGo7:Mj4fyocoWz/oQGo
TLSH
T105B1277E7D89E463F8D34E3550EEB8881C7A43A29C52A880BD0681C72099F79607F776
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\SiteSecurityServiceState.bin
Size 2KB
SHA256 e10f0830ab8cd669bb57c3427f894025bb633101da1311b3034bd9d370f3b4f0
MD5 e4b04eeb1f8c03f4ad7574761f83e52f
SHA1 c6914c4ef3c03f01fd5abac659e2685926dcf19a
SHA512 4070547e2037b981a06145369625c1e78c717f79ee5b900ca63d1f05974dff24f505149f06e3ce794c8971743b579d1622642f2cd52eb9cf2bd61fc1a9c1e901
TLSH
T1BD51F9395C8DD433F8930E3A10EE74841C7A12965D96A490BD1282C57059FB5107EB76
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\addonStartup.json.lz4
Size 4KB
SHA256 8df1da163497d83c98ff0f7d57b169472a8ea418ad7b324790fc46f71572d04d
MD5 9705236320c0ff27035147f7526a9128
SHA1 a72dc817cada305cef6cf18ddd0872eede44323f
SHA512 c01620015db2f07875d6ce8bf955cf84d46d0169184519dc968bc4377d284a54aede72ef9cb764fe1e259ea6ad5fafe69aeb388a3eb0fd17c8d9eda5ce493e59
SSDEEP 96:Nobq4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N652xxhD8rGvm6ApwnHUuhN
TLSH
T158A17DBAD141EFA1FE32C04348E57FB2E696AB7410A9C8D4F1AFB1194C24E735700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-09-07_10_ig9BSvzqMRRH1BwXDrDz_eRECWf26z5Yu611ubSP8hs=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\bookmarkbackups\bookmarks-2026-09-07_10_ig9BSvzqMRRH1BwXDrDz_eRECWf26z5Yu611ubSP8hs=.jsonlz4
Size 858B
SHA256 31d3570ca42fa3f8c724b2b984b67d922dfcc5f8572d96f755399cc94719a591
MD5 7e22764f2e45b8d300ad3588c9d84005
SHA1 e039c7a1e9af1757cb83f5f44651dcd5d69789f6
SHA512 980ce1055f0cdf02a0f6962d06fd2d69b05b04505b8554a60c1086964cd0677ed84b6c690158d80e97fa4d59ae5e8a06ac90d14462b08de5b257251c35bed670
TLSH
T18611960DF5B514E01982407E50461B95B8E37D028FC854ECEB89045010546D883D5A89
MD5 SHA1 SHA512 TLSH

Submit Download

bounce-tracking-protection.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\bounce-tracking-protection.sqlite
Size 96KB
SHA256 97b6969dab725a3acfe07734e31ece06d4196d4d155d0d4fcbd4a1d99465e385
MD5 06c89f675608157ff5cd44e9fe0797bc
SHA1 56daba1030d28d5d52e3a1bd41312d070410f3d0
SHA512 8e9440377df54ffeec5e4f5b128fd7ac2c43ff7f67fb48ae74b4dfb9ee42f6e32733901794bca7f8a665a746d3815f5a35bca9ae9e446dc137875399922e774b
SSDEEP 12:DBl/VnC8/ykS2lcBDMGEJKM+vcBDMvYkMBAlNA+aSFX/RlTXC:DLVC8akrEDE+vED8YfAl2+aK7TS
TLSH
T1D4A361CF2B752542FDC525F9E380D9FA965EC36DCB2B1A91115041F2FD010715511179
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

content-prefs.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\content-prefs.sqlite
Size 256KB
SHA256 fff6c2239e0d2ccc2dfe16bece3f51fe2831ce8baaa337827bbde444207a727b
MD5 d3941a15a96fb3023cf1587a47b586b2
SHA1 94996d072eea6af88a1d96b8ef900a1fe3ea56ca
SHA512 d627318f49a185b6ad4dbd76c9eb5aef82c360ab76fed195641fbd258e045e1f04c0d6359827a9c31c677414bc656e183770c0d1b829821388db8bfd2608f364
SSDEEP 24:DLCKvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DmWwae+QtMImelekKDa5
TLSH
T1234426174AA17408C0B014B1D4636F22AF3D405B8933E7B23ABC143A4F886AAFC791E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookies.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cookies.sqlite
Size 512KB
SHA256 3c060b65e12cfa94767ea3974acd97a1faa8ea1dae613fa8a1bee78df5117f51
MD5 679a56771f8bba12ba08734a8a29a959
SHA1 24943a597f9f49d609c131db8912dc97ba11822b
SHA512 1435b6920647b886f6653d1cfd947248314f95ea97a6a441a432551340d22d0fdf6cab86b0d27fa22b8945dc29d308a18a095730116dee6eddbdf320f433f16c
SSDEEP 24:DQnS232mNVpP965RayKN0MG/l5zfGdxKMO3ieS8Do/Mo6:DQnS6rh9WTzzYKMuiez6M
TLSH
T1E2B412D56FBC12A5E45300F2ADA0904AAC3DA1B69CAF6E75686430F39C91F9349314F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.bin
Size 56KB
SHA256 02f6d1dc67ac64c12f4f326ad0e9f838421fb8348accb2e5b3f3be0bafba7fc8
MD5 5b6632fdc4a8f78cf42f06d68fc15aa2
SHA1 a35559925889d18ae15ce4bb93e998af651b707a
SHA512 5e31d25d77da61fb841b400026545bf49f41dd93ce869abbad5429e89065eb0e76057cdf4e06365ec1dff5f47a92c3275a259064cdc697db8eb1aecfed081ba7
SSDEEP 768:/Wo1gZ8uQ7ddnGcm+uc1HcKDs+ZRlXbwbHbhbPvpe5K4svdZ1:CZ8uQJH8dQ5K4svh
TLSH
T1A543DDD0EB2A403FE82481BFB99517282625F86149585F5B3AAC00691DCB3FF3D1E57E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 8bee4c6bee0944e5ba56ccb489a3974f5d68b9209b3dae495d5b858345600619
MD5 4046ae5abd5fe7f8cdf47a863d051fa0
SHA1 0d9e71d9c419dc153add953738a5830a33443d9b
SHA512 baf50112bdb61f798fce7b42010c4b1b07c7e6d87cc3e770d1ac01d67cd2812c1ce5d30127c4422930c613050fcbafbd39d8736332d91d026acdd6a094efd7dd
SSDEEP 192:QOv5zbo7g4hyjyc8o1d66JoztdzgCl6mc0d:bbos4hyjTd66Joz/zgC1j
TLSH
T1C2F12F68F629863FC408027BCCA61B400F75399BD84E7F2971AD21582C5B2DE778E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 171KB
SHA256 14146965461cfe8b397224a81b8648571cd3ffdc893a1570f076bf92aceb9e4f
MD5 d3d15525adeee6975b5a95f50a16d5ee
SHA1 01b3e3c0bbb9a298b6d0bdcd08312d165e09f0c2
SHA512 e12e02ea49d35b086e2500d96807db02bb567a768fb1923f176f5f16fb4d6d28025ee2f4af6f15c9932b17c53bbd5155871fe71ba8f6850f1b4397dcaad99a7b
SSDEEP 3072:n6zpSuiMIJ+UfgAACzyHrGt0MyOv0yc69f4xNk7EUAdy4UWOE:n6FSuiMIJ+UfgAACzQrGt0MyOv0yc69a
TLSH
T11E046CD4DB16407BFC1085BFB495673C2635B4314A599B0B2AEC04762DCB7BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 171KB
SHA256 e66fb244338c34bd3d3f18b2b9d1831ea073ccaa4843892c4c38c50380fb402c
MD5 09c2739832e4f1f1ec0d4f1f60784610
SHA1 326536998de0cd4a8a001f926c46df18d5465f78
SHA512 adebe40d16704f2b243f23c0cd2267837847416de947b164b9ca4dc18420e0c72633476364f8db5fed73f514461b6b135883af6b9292b5426218e651b5fee3c7
SSDEEP 3072:f6zpSuiMIJ+UfgAACzyHrGt0MyOv0yc69f4xNk7EUAdy4UWOE:f6FSuiMIJ+UfgAACzQrGt0MyOv0yc69a
TLSH
T1B4046CD4DB16407BFC1085BFB495673C2635B4314A599B0B2AEC04762DCB7BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 56KB
SHA256 175e6665f3826edf0f101f0e23e4f9d8f4f0230dac571fa36749a57dc4aa0a75
MD5 44d8b0fdcdc28277e92d4f0f29fe3da7
SHA1 08f817a6a42bdaa842d5c033dc96873e97e6cb49
SHA512 5bd745232ca528777962363c91e87b33ca6ea089c2ca75d0aa38a3b838a2a1f27859cf6650f948d249f8e9361c4131e43f7f71de4789351b784f13345d0c7eba
SSDEEP 768:EyTZ8uQ7ddnGcm+uc1HcKDs+ZRlXbwbHbhbPje5K4svdZx1/:VZ8uQJH8dS5K4svv
TLSH
T16743DDD0EB2A403FE82481BFB99517282625F86149585F5B3AAC00691DCB3FF3D1E57E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 171KB
SHA256 17578eea8e41644a8038a0e417ed29236fdd3e7dc0fb487214db5a86f3292a9b
MD5 a830059fa536febb11a9c3ee977a5feb
SHA1 14d286e3b03108e3b0558eeb15eddde6ac49f0b0
SHA512 af646085282eb926d67924793739b65476e9df6c20f88c9f79830a4515dbc8909d780eeaa2a9088396678c78a142f62aadac3331f989cfcf90b78e707d3258b7
SSDEEP 3072:b6zpSuiMIJ+UfgAACzyHrGt0MyOv0yc69f4xNk7EUAdy4UWOU:b6FSuiMIJ+UfgAACzQrGt0MyOv0yc69O
TLSH
T160046CD4DB16407BFC1085BFB495673C2635B4314A599B0B2AEC04762DCB7BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 56KB
SHA256 6ea2d1db9436fe06bdc6cd27e0f5d445c17ee94be1afef7fd7e658a9294b1424
MD5 ec2379bd4075d4df703c71c289248718
SHA1 b0619ba8ba9770c1248cb759761eb6f32ea28bba
SHA512 8b0a822e39660507e73cfd60f6535ebc32dad36296f175019f0bc4ead45dbaed3d646a6c3c71f6a534eddfed78550fe6caa94279658629b816eab58b7e680cf1
SSDEEP 768:ZZ8uQ7ddnGcm+uc1HcKDs+ZRlXbwbHbhbPje5K4svdZx1K5g:ZZ8uQJH8dS5K4svj
TLSH
T16443DDD0EB2A403FE82481BFB99517282625F86149585F5B3AAC00691DCB3FF3D1E57E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 171KB
SHA256 ffd9fa57cdeba241955337ff263348c0fefbfe22b7fd5d0a314ff03029055f3a
MD5 5db77ae6cc5639a9154e665e274cfe03
SHA1 95e0ca28a08888645e30846def2068b76178b7c6
SHA512 508e11d263427bf1a1a2595afc5b32bcf4bded39b4e6997fe0ddd2f23bfaca46bbfdb4f0381bee1bc46cd5a07159a1ab6cbb7763825f2e6b270a154656f6e673
SSDEEP 3072:j6zpSuiMIJ+UfgAACzyHrGt0MyOv0yc69f4xNk7EUAdy4UWOk:j6FSuiMIJ+UfgAACzQrGt0MyOv0yc69u
TLSH
T115046CD4DB16407BFC1085BFB495673C2635B4314A599B0B2AEC04762DCB7BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 bec0fda78dc5b51bce1ffa30d7f39bda834be5f8b11ed3256fb2ce96733c4a33
MD5 734e4d6e30110532c30899b0d3d4ea32
SHA1 b05bc60246b6a4b8037f1aede2bf29944f2d144e
SHA512 2524561df99e614a9ca83a2860bd2afad0ef4dd8b1a1e2bee7ad2ab081f1f2f212db300ea2f22963d63f16f98a42c6aa61f72a686535648bc1233baaae38d161
SSDEEP 192:ND1d66JoztdzgCl6mc0d1Ov5zbo7dZ4hyjycD:3d66Joz/zgC1jkboZZ4hyjb
TLSH
T19DE11FA8F628863FC414037BCDA61B400F75399AD84E7F29759D21182C5B2DE7B8E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d38e33211262f951ca769fb612676926f9aaa71a9db82201c56cf7e716004cb1
MD5 b1c25cd2cd3df0c81254907591b6c846
SHA1 d31e076e80532aa2a9b0738aff220242cfb6d255
SHA512 8d3b48f8e2ba6562949c0b4ad214fad9d80b72a2fe56184651de18c1c2d3900ca51281ba00cc307aa72f6f6d2f337f672363b3d0bdff26aa9fa261d9ec397e18
TLSH
T12D115B5C39F84DAA9AC7F29C7441118E63914F0B14475D930D22EF8DDED2BD9326A439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
Size 1KB
SHA256 67e2ed2b48b013ff1045c310e41bbc95e495111562ef82aa7f7f1a6c4f038e64
MD5 ca76c1326083b0531416594c1ae6b961
SHA1 83a7e1be2dc7922fe7e78e109ca71a8358ced5f3
SHA512 797e5e01a5ff00a37cecc5ddbc917b2d2c853356d9d0b83e85ab8e3325093b0b555643d0780171259ce591869ff3e8e106d1c6bc2d282e83d5397287a41380fe
TLSH
T19021815C35F84DAA9AC7F2DC7440118D63814F0B05475C934D22DE8DDED2BE9326A43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
Size 4KB
SHA256 601d151eb950f823fd6f44c9741ec7e1bf1894a411f1cb899a15f29f9dd7d72e
MD5 070f09a4fb488a1e13afd77983f4b3fb
SHA1 763c14ae6ecf74b02ea071e4396a29af095a292b
SHA512 911ba6d32c14f7eddfe9aa0b4be8d89626d49ca0afb5b292b41f4b58ed752a3b2938d370b657cbdffed473924ecbded372884ae15dfc383dfa6c8c0d5832b493
SSDEEP 48:YpIlnYTC19piK/OK60R8i/As9uKZhZHhVq64CCl7RilhCLmdGpmC7VQKdmKtXDCS:34SRbhE64ft6dO5dBxulS4F92X
TLSH
T1B4A1121C75A90CBE2BD7E2DCB841068D479A470281C72C974DDBEE4CCD99ADA335E039
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
Size 1KB
SHA256 12d3271bd4310e5f1dfbe696a1e8df736dce2342a74f07aa149473a3ef9ac213
MD5 fc0a6e89a1af707034f0d5213bc1db28
SHA1 4b5fa196adcfd693e3e54e84d078a6344b844ee2
SHA512 0f7f6f7ac322264cfcf745cbe1a53bbfe916142c60531b8b9686d733df01e268af14d349b5a0f1be34f96031caedda3c4e4bec9567564c47da35dae22cd4d167
TLSH
T13421495C3DBC4D6AAA8BF2DC7880028E53524A0605872C534E53EF8DCE91AD9336A47C
MD5 SHA1 SHA512 TLSH

Submit Download

pageload

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\pageload
Size 497B
SHA256 c4d158217f09a945dae4ebb992b2deb0859a047976bc5b9531c42b8504648871
MD5 897945853aab7b22cfdb6a351896d7f0
SHA1 6c3873667170bfa94e98f269c275be024f4b308e
SHA512 222b25ede9f64c3da8d0f196cdcfcd9c98d740d9ccf636392478988c00110a59fbb8be581ac86a6c4b723c6ff32dc2a24014f00a9387e4eb536496e34c0fbf1b
TLSH
T12BF0971FAEA19CAD9B83D02C24C083FE6F86924312817A136C70ED1CC48465E310B269
MD5 SHA1 SHA512 TLSH

Submit Download

3f59aba5-c883-40a3-9413-fde9a7e2787b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\3f59aba5-c883-40a3-9413-fde9a7e2787b
Size 2KB
SHA256 58cdfc5bfaf14664601ee3eb5492c6290d157255d7161b6691a1f0b75ce7b59d
MD5 125d44cb28d57453d7a3240c33d78008
SHA1 e2ba55a140b8528f17f82d590db134c2a1658512
SHA512 a8c0fa632b9044697b087f0475c454bc9627959c037084489a8f81e12075bc2e062386424874257a59a547efb2326cee3ef8f58251bdd5b23877d0a0db321711
TLSH
T1F041415C75789CB78DDBF59C9482328D53A08B0640C26C932D21DE4CDEEB79A336E42B
MD5 SHA1 SHA512 TLSH

Submit Download

7ad4cd2e-8bf4-4e1a-bfcd-f5afe02269a0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\7ad4cd2e-8bf4-4e1a-bfcd-f5afe02269a0
Size 886B
SHA256 0ba70922c7a4413e96edc42ab8cd565cd18d828f75994e1da64607c2afd9f697
MD5 05f2327e31717cdd3df72201ef6c8820
SHA1 a2d7fcb0aeae65e2b779dcf9b0707ddbd16a7806
SHA512 9c221ce0295a41d98baa63131556a3e9ec1148da58ce4a9d21ded60c46a965c03817d79a1c5fd2004b32b50cd3d1bab6081a85580b32c3067c186f22335ed524
TLSH
T12A1100909534F7B3CC7892DBCAE537428BD4B533C0C65E147E641B280DAB11FA76A207
MD5 SHA1 SHA512 TLSH

Submit Download

8f33d173-1d62-4deb-81a9-02d3aa76638a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\8f33d173-1d62-4deb-81a9-02d3aa76638a
Size 2KB
SHA256 531ce92bde040b5dac2e5307b03067ee12ee2c33113104b737865025f61a3056
MD5 736ae8d78809a5fbbf0e8ed3d9ad9f9a
SHA1 195d80fc6196c71717f4592aa743427f56313b58
SHA512 bedad70d6bfbe53456e7dfeefa87475dd08fbf58146b822f818c33a6d4a7ee37795763a6f4749ace3eeeb307d8123c8d4837d59c56b5f4f1ae646f0d862edb39
TLSH
T15541556C35388E779CDAF15D9082338E87E4960300C318832D51EF0C8E9765E236E52F
MD5 SHA1 SHA512 TLSH

Submit Download

9e38b497-028c-4fb6-9fdb-0de696d09a5e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\9e38b497-028c-4fb6-9fdb-0de696d09a5e
Size 280B
SHA256 124ee669553d57df0f102e1aef3d40b0d2ea8fdeb08b976fc7c85b84d381f5a1
MD5 fe7e22fc5d422e2cfe4b4a142d35a6d9
SHA1 6bff6093be598db50446970cd17cf3b81b73a55e
SHA512 2d88c1cbdbf9ab337b9c89b2fe674745ab8131be3727960974aafd36efc2eee9e20812202bf3e488e1566ab6e7b069a498df12d077e5c896780965d35b06fd85
TLSH
T1B1D02B9478C8635D4C684F06F0F069E631A54D3354F5AD0495E109749AFEEDD8113D6A
MD5 SHA1 SHA512 TLSH

Submit Download

9ff84e5e-abfd-4427-a76f-e59d052c2079

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\9ff84e5e-abfd-4427-a76f-e59d052c2079
Size 15KB
SHA256 e27c63df62c98598d20d5f23ab5ee2b7be7148596287e9c54d3b1ca6d614e155
MD5 34110a9da72bdacdfa606ef1322e1739
SHA1 19726c2867b106864781f3f5f64be33914ef1072
SHA512 32ded9b2bf3b3af2be3602aff38d2d47c9c4e045976866fe97a08b098738d4196498317f5d91d0736aeff3866b01cde2517f9c382df2a824ad7fc06121cfdeb8
SSDEEP 192:eiKCDiVUykuzu4Iu4SZ8r4zSWBBJBsn47MuPeNsP8DpnNePJzxYJBpYoBdv5Xy1k:OCDiVUyriYxZ8r4zSWS1qJuGoTb
TLSH
T17262D9556430497B8691E368D8E97FC3E2F518CB8C019FC9DBE47E0869EE06E5127C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0c55af8-c615-4b35-9cbb-421ead6fb473

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\a0c55af8-c615-4b35-9cbb-421ead6fb473
Size 235B
SHA256 10cc56f7da9d02d408204daca99a1979ce468688afc08c8d7d45db63add31cf5
MD5 2cddde8b2f1f73fcd0096424dd2a131e
SHA1 743dfc2e260aac3a5c42ae235fe9f8479d41fd47
SHA512 b891a67c0853a8f9f3e66995dc71eb628f8c1261404aea3b0ee7800d58bdeb99780e21151232cae179a5933d22c04626454e797f76869c0c413dbb7c414a8f68
TLSH
T199D097801898BB2E08001F0AB0F02CCB3096CC3320789C20EBA10078AABAEC88161A17
MD5 SHA1 SHA512 TLSH

Submit Download

a45d8006-e25f-4014-9fc7-3eeecd0340a5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\a45d8006-e25f-4014-9fc7-3eeecd0340a5
Size 972B
SHA256 8639fc394ae5596388b3ee8dd0a9601127cb6b2de771abe96ec1164165c398d4
MD5 4aef261c58784a6892545f2c616a0583
SHA1 392882efe08deaf82b33a90ea1ed574887810236
SHA512 1b2dac6c8d2d1238b1f0836552c1c486a0abc18a6ed24fbf35eae500bdfbb160d07b8ad410b30affa9286543966a6560bddf0846054f1d579f2eb56aebbc0689
TLSH
T144110E949935B6B3CCB8829AD5D436134BF07133C0C25A147DA50F080AEA91FA32B607
MD5 SHA1 SHA512 TLSH

Submit Download

ab2c064f-9296-4a6e-9fe8-8d14e026e16f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\ab2c064f-9296-4a6e-9fe8-8d14e026e16f
Size 918B
SHA256 fd5d998a21bd6b904192335b6a046d3c299f7550fbbe877096ed2b6d3a86f12e
MD5 1520e9f845a70d3093956a0be5a6eb23
SHA1 3e1150c7419ce5e93a24f28dd461178f8db841e0
SHA512 6ba4e66c9ec8d6793475d2f77165475936d22e9a7f5db1ea1a26f879feb6dfbfb96716ef6872328457fc4c946fc3324ae494a714b1209089805fe3a4f2601bc8
TLSH
T13F1144078410FCB68E7CD21C84C673EA5BD4A12300C665253CB0DE1CCDA511F5326707
MD5 SHA1 SHA512 TLSH

Submit Download

b9ef9dfd-1b06-48e5-bcd1-d8e895be6da8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\b9ef9dfd-1b06-48e5-bcd1-d8e895be6da8
Size 8KB
SHA256 c2d7a570f019290d28ab0f26a6097510de5cf7303a786280a95f7ddff307517d
MD5 3dbc8b89518f212530d9b9a469ccef6f
SHA1 1181dd3203fcaf3bf210cc22672d34bb7d408609
SHA512 302103a320d286e9a1910ce357c6b824ffc6fe6a3d453aa5962dd78ac98c2a94319c005f4e8273b429b7008d13f220d74d99c22340bb3110835ab463879b9ce7
SSDEEP 96:cvSoSNYOUHbM0wMw2woHV9emdVhfy7WzhhJLQh1xD9vEjnm37wVm13096a7vL3d7:cvSess3zoO39VgwHHSa
TLSH
T1E812BAFEDC2241433A65F62EF5A8BDAB005629314AC8879C6BEC4C3A32D2EB71517715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc92c9e7-76a6-4993-82b7-688543982821

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\cc92c9e7-76a6-4993-82b7-688543982821
Size 883B
SHA256 e6e8d9dd7dbd88311c8deaa181fcce0bcbe82b569b28d48f0abf2e7197b4f3cd
MD5 6ed560090d6b58d135b038466c3af3cf
SHA1 335891d973684e84d93f56e79ee79e27bed5148f
SHA512 c324417c72f0b3d8b5a43c6a4453d5b696494eeaea6eb645af0a8c99d712fa754f3aeec465b7be373b3b8f63ec85fdefff9c7767728360ad8fc1cf82f0223f5b
TLSH
T116110490A531B6F3CC7C825BC9953B0247E4B923C0C685147D580B140EBE51BE75A14B
MD5 SHA1 SHA512 TLSH

Submit Download

e46b689f-e4b7-416f-a7f4-c24f6e25efd0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\e46b689f-e4b7-416f-a7f4-c24f6e25efd0
Size 235B
SHA256 c1b83fb92ce30215ecb3df8c175787e4346d0e1060fbc04a0048f4b287d8b300
MD5 76ede665bef9aec3dcc2433c1d456cd5
SHA1 125b023cc6fdcc080d865c96cf02aa561402131b
SHA512 8679a0ee4a08c7769592ed1948ea776faa8e81dbb5fbe85d3fe4eff76d99b903260ef4e0bdeab7c8e81ad8a26c3df9161a252f878da9309bf1e0133d2906be3c
TLSH
T1A3D0978428A8237C081A0F07F0E16CC23545CC3324645830CBA14134CAFEACD42A1C26
MD5 SHA1 SHA512 TLSH

Submit Download

domain_to_categories.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\domain_to_categories.sqlite
Size 96KB
SHA256 c7baab1cd8662625bc822a3c3c7b57973b927cd5c26192d6cda60ed9ecc0ed07
MD5 7231237395096e88196ba0ffd7ac0ac6
SHA1 d303ddfed1d4341f30ed79abbc23ce51f651bd35
SHA512 6220c9908bfa889f1db84625dc214127ee76c40c97a0d2b81df251253d4a8cc7ba6387d94f751a8f092850ce8a86d5c7e0d7938b85ef763813c4ab4a0834055c
SSDEEP 12:DBl/ATMbUSoQym5H9L9ftirhP81MONd4/F0LA6Gr:DLbbv5XvtQhP8W5/b
TLSH
T1A6A32B1F1B1CB840D4C356F26D8329067634D50B8913BEF03B9D84004F066481C35AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\extensions.json
Size 16KB
SHA256 1368834504e05e4cea895a58367188304cb3b4f9ff301f82cbbc2bdc973f1918
MD5 68605586b49990ac45dec762c3fc2d20
SHA1 b10f5559aab2c2b84abf064bd47b1195dbb5574c
SHA512 eaeb278e797e63bef00063d951f5492d541559fc8e06e5be867b2decfb8f3e84194c197ddab507d0c091dd04d2ee33e6ed33a20fd2927a12c4647044567b5efa
SSDEEP 384:9kI4vcUmldvD8dhWr94zS96oJL4HZL4PGL4H7L4HML4HRwj4hy:+I4kRfQXC4q6+4x404H4m4s40
TLSH
T1F672421545048EB8294FA78AAA367E02C37D573B60845C78F4DD8FC842FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicons.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\favicons.sqlite
Size 5.0MB
SHA256 030d469686b9dd48d72a078bc04cc26a922fdd375b27253f1c5ea03d22a1e1f0
MD5 ac479a4ada4af9819f40a42a2e9e22d4
SHA1 16a6de1ed12017311eb3acb84943dd2157cde643
SHA512 5b5d4db24f4099a80c6dd1efdfb9a68dc189b8df020fa231339f0d7b8dbac07f0a728444db5cdd1c996f981ddcf8bdc35a9727803fd48435fea8f5bff925145e
SSDEEP 192:6HHwkEEfTMzdLI+04FTU0EfTMzdLI+04FTUT:6nwqLu2+PFTUjLu2+PFTUT
TLSH
T148367EB29E15506EC3054977FC272225BE1F6259CFE78A0736DDA0B4D8B00B0EE4B4E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permissions.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\permissions.sqlite
Size 96KB
SHA256 8a21d4fbccf0234445794cf2eed01aeda2734dd5ce0282f9838463f87e68ffbc
MD5 719be2f7f925bd080e34868b6f543b5a
SHA1 614805d709bdf54fd6e86cbad78037ec3b1488c2
SHA512 96607757b11e004865eb7f03e21dfce734d61b1fdb9ddf21b84303c07646c1a0769b81229b3b342d52d3bfe3b1284d7929f179cb6863ecc18016a1b1b2fb3721
SSDEEP 12:DBl/A0cbWla0mwPxRymgObsCVR45wcYR4fmnsCVR4/FAkXeGlX:DLhcb5sh7Owd4+aFAk9
TLSH
T11DA38B874D3979D2EC8006776EC325D8A43D0919482FB2C60D4284375D039C6DE05EFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\places.sqlite
Size 5.0MB
SHA256 7a8a6990f4098ddf9bec862d8a957e9dab8a52ae995d2c46d48659e472b50f9c
MD5 9393c6888b6cc14933f1c3e9a1de55ec
SHA1 302a07f547498623ca4fa2c6fe8d9aab6de422c1
SHA512 6fbdcd0da1d1bc80b2260c52b07af9b91ee00a57f1f7471d60e85262c2e12a0a144e3498f0081ecc97e435fb9c0837e2dcb59a9dce09356249a33b429b07654f
SSDEEP 192:M8rJQaXoMXp0VW9FxW1DhIZwaPU/EYmIKtrdeNm:M8r54w0VW3xW1DhIZeclZ
TLSH
T1AD36951F3A641091C4EA9232EDE32F14283F70169A37769338E4556D0DE4B63B96DCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 7KB
SHA256 49c31309a8107ea87d48e02d43dbb9a2acadf591886c4534a0b83eacaa10c150
MD5 3c85158149694f4f704c78ef058cf218
SHA1 8827bcc2128ce3f17208013fd6cd0fa9f12470a7
SHA512 3afeb837c603c329fce73ea0fafecaaaefa9a47e6eef5f6ed8dee8817fda026f3fceaf9163ebd812c74029a7c0f040277b8ce71ebdd33b48dc56d1228843052f
SSDEEP 96:xH+tTUbPqGqsfaNbzS8SSlvdv9jFnAHdA0ScSnww88c0i8L4cnEVjR:AOCRsfalSSCdA0Sc6ww88Py7
TLSH
T125F100789004CF7F65B676BCAC6449715AB2023BB7BF68D710B99884054CF3442E96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 6KB
SHA256 af5bc525b98108fcee689bfcf96a482b43f21266b04d3946372826e730119e39
MD5 291f838d8b5ca8cb849ef25c51942c41
SHA1 41cfcd03bd9eb931f9779916b51c2c012142244c
SHA512 128dcca610691886d47ab4844e7f4cec28c44d5c132fd11d9d3f97305347d223bef917ec73d3a1ce48af0159868c5cfd26aa6928fb19b1806fb2d138e0f868be
SSDEEP 96:xH+UTUbPqGqsfaNbzS8SSlvdv9jFnAHdA0ScSqBw88u8L4cnEViR:ALCRsfalSSCdA0ScDBw88eQ
TLSH
T165E13F789508CFBF65B6767CAC6488316AB2413B7BBF28D650B554C4014CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 6KB
SHA256 2ec044571236686a25f9fec940d7d3cbbcdc1d346b90d02bd5c83aca1ce0e116
MD5 8f27161b382f82b341eb6a281bafd458
SHA1 263323457a4a09d9d0de187960569d4eaf3f6405
SHA512 1fc526b22407db3268a0f99a41281568ea74eed1f964937daecdf54278cd256f9079c2dfd333217b6c36b3eb1d4fe273c872d1d14f61010d90dcbdf3d0952f58
SSDEEP 96:xH+UTUbPqGqsfaObzS8SSlvdv9j8nAHdA0ScSqBw88u8L4cnEViR:ALCRsfaWSSXdA0ScDBw88eQ
TLSH
T1E3E12E789408CFBFA5B6767CAC6488316AB2413B7ABF68D650B954C4014CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 6KB
SHA256 38772b61d3c032f06ace8cd06e84c0f02936b2d7b356e7dc3d5b6bc29a5379cb
MD5 6f44dd7e1b0be6279fef94d3d538bb59
SHA1 8835a91da7a3afaaf2405034f5e1e0d5c546b02c
SHA512 c1cc11d0d658240c6f9a3897c0eed8c0a7ae053b610049c4d573d5e4ca5ed3da0a86f9dd33e9269c607eaec1ee4e97df736897f1687a819b52a7bb08c963e2d8
SSDEEP 96:xH+UTUQqGqsfa1zSOSSlvdv9j8nAHdA0ScSqBw8828L4cnEVgR:ArRsfa7SSXdA0ScDBw88W+
TLSH
T1C6E12F785408CBBFB5B6776CAC6488316AB2413B7BBF68D650B954C4014CF3842E9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 12KB
SHA256 c1f9d074aa97ef16c95d81f7ac1d63fc94d6ab394447dbe6e09e68775112f79a
MD5 48ef419267480311096eba5606159414
SHA1 d668d99ff0fb15bcb7fd5a4e3f3673d72925f071
SHA512 f0d3fb4c17dd71be01196f453abb99f76dabd0d99d325a415db7c2a21b6b699ce190da849684f5bf3545467af19b7bf52cfb23099c620d32bee8962803151cdf
SSDEEP 192:GOCRsfaiSSuLRFA0Scyj0aOww8/kD0kjIbnGvr+h0:zCRFK/wMs09WL
TLSH
T19542AC386144CF3F26F332BD7C2149A05692422777BFBCE605B99C85055CF6482E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
Size 12KB
SHA256 11566fa458044fd2b7999e4167aec3f25de31a83a2e7d35d09cb1b2a36b4c965
MD5 3687766da405349464671f17bdd00ed7
SHA1 6215845821efd0fbf30140089be2d9032d49580b
SHA512 8a23a2679bbc68a4105e41c6414eb61cf30c60fcfefb282bd68a43fdb5dae2f54b80f4d00a3ff1dc0b1191d16f974088a6d75edee82f569c19ffda415ad620eb
SSDEEP 192:GOCRsfalSSuLRFA0Scyj0aOww88jIbnGvr+1:znRFK/wcWy
TLSH
T1C842AD386144CF3F26F332BD7C6149A05692422777BFBCE605B99C85054CF6482E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
Size 6KB
SHA256 a3fb448367c59ef4f45d633a9c9efc6f0f8eed9c88e32a5f097bc4907fd82300
MD5 c20343fb7f8ca324f7cc302460b928c5
SHA1 f51a0d86d8e800237d6bd28fe8487e8a9668b7a1
SHA512 8c89430a3d9bc04340d6217e1c2e846ba8dacefb86a9181e56ca7c6b9965243c306242b6b63eae9cf0fa53f25f20f4d37d5ecc44a0bfa2ef478452da6d033ce3
SSDEEP 96:xH+UTUbPqGqsfaObzSOSSlvdv9j8nAHdA0ScSqBw8O28L4cnEViR:ALCRsfaISSXdA0ScDBw8OWQ
TLSH
T139E12E789008CF7FA5B6777CAC6489716AB2423B7BBF28D650B954C4014CF3842E96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
Size 6KB
SHA256 c6bb7b58288445e56b56b78619d658c384ca0833e8b3732ce5956935b7ad79f7
MD5 16213b98c08a630b054ac084e394d40a
SHA1 607362535a92e0c88ff03bb3488075b297ce5037
SHA512 86c4503be02788912b74b275a96708219a374cf1c14f47885110d3b71cb3d8c93956879f07f06ca06e54df161e9f51f96c2064fc8d603b232ff9c02eefb37a93
SSDEEP 96:xH+UTUQqGqso1zS6SSlvdv9ynAHdA0ScSqBw8828L4cnEVgR:ArRsovSSldA0ScDBw88W+
TLSH
T1DCD12F785408CB7FB4B6776CAC6488716AB2413BBBBF68D750A954C4004CF3842E9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
Size 6KB
SHA256 2711fa980507d2d214ff743fc5db9a7a4d95a8c12376fa3524479c202a3083d9
MD5 2f18c66f9cd31e916638222893a436a7
SHA1 e64183e17a33fb9719eef983f1ff488a0a7d30ee
SHA512 f671d5eccaf826e6bfcf44d953618e5b1867135c5cf9e96c130499c8d8232cf4918351beffa7775684c24f95a197037adf800ed9f7e7776162322cc4345fa474
SSDEEP 96:xH+UTUbPqGqsfa1zSOSSlvdv9j8nAHdA0ScSqBw8828L4cnEVgR:ALCRsfa7SSXdA0ScDBw88W+
TLSH
T158E12F785008CBBF75B6777CAC6488316AB2413B7BBF28D650B954C4014CF3842E9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protections.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\protections.sqlite
Size 64KB
SHA256 f47973dd13805200a469d534a0ec50e224f0c12ae77d93a0e5bcc267af19c145
MD5 63b6f9d979a2cd96d93c105805cafcfc
SHA1 5fc70ce8799617202d1b2a350f6d596b65d48e54
SHA512 ca475720928bd40abab686efb8b890fdccef59c292b26263d41bfd9dfe8f35d21405820e10505fa7cff49eea5ae57ffdbd6ca73d5cf6e1cfe67f5994d2823b90
SSDEEP 6:ltBl/l4/WN1dR4BEJYqWvLue3FMOrMZ0l:DBl/WunddfJiFxMZO
TLSH
T1BF53225E47387021C0891372ABD323923F3CD2FA93232E836A100C358C0A023B822AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\search.json.mozlz4
Size 327B
SHA256 a7c44a8d928c28fd679a8176a78ce028109693311f32f203b3a95f4354dfe4ad
MD5 f0158e5d9053583799b76587a3999afe
SHA1 8a13fd648ae40d60cd099cdda411835f34ee71fd
SHA512 dbfd167cf3f9acc93fc1bd1c1c925c76923f7c722faa52cfbb6f11245e0fecaf799467659dd633f83bbe7499509b64fee33362e31051266c5b46d42fb34151f6
TLSH
T1D6E07D3E9C5590F6C3A806C35F0B459B4F58487A9310FC8C91B09D91897FF9A5258D2B
MD5 SHA1 SHA512 TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\search.json.mozlz4
Size 327B
SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
MD5 240589068f063f8f706378168230e975
SHA1 9531374a22dea374d032f7484567fb1b201af87d
SHA512 6d04629da44769a64b8808d198f3b3ba6388a0cd5441269e35ca39e7595c4e9abd32618f76ff60b79df80732838ee2a67455e195a801a67334a592b6b6240da5
TLSH
T169E07D3E9C15A0B6C2AC0AC35F0F494A0F58583A9324AC8C90B49D91557FF9B5248E2B
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
Size 8KB
SHA256 d40ec126046b5aa90882f80e53765c1e4a62b6e923684c26a79dacf804d90851
MD5 aa1f9083dc721b655342ff55efea9748
SHA1 a48009a0fc4c82a6688d2ae00df94e4f112f98b0
SHA512 c4f481b750bc690a75d67711157a80d346023c38d4ad5e4577a62c1d5c0ce94594fe4f9d2702e3b8cf60e800b1871b928cc60632a6a4bdac66df4bb0c39b8b5a
SSDEEP 192:8I9qNuF+9/+tGKSeJcYb27NiRw90kXzfoTV/x+inwZCad78NGbSe:8I2/+SpB+w90kDfkn6Cadws
TLSH
T13D12AFA3B4563973FD1AACC540D436C86ED65DE7C9EA05E0613A3F5B28B0E01133E21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
Size 19KB
SHA256 7b3d459142a7657ed51ebfd6ac5603bcf6eac3050c963aacca8ccdc0da5a8b4f
MD5 9816ba6381a8f7ceb3cd8da8934f504f
SHA1 bbd3cb0a4e733a91a38ec8830aa57b907b7e5ebb
SHA512 0102fa627b0659840b751b4ff54d9a369836c036c5d1458280a348fe3ff5ec00723ea0a4fed510beba3cebf2b915d251f50df85f24fd8c51b9098306f8da0da1
SSDEEP 384:BW7o+Hth1t6BqTdZs7Gdy49GIs/nfn6CadwEJ:H+HtDt607vGSC25
TLSH
T18C92BF716E1F98B0A77F24805A7539A60F676DBB431C4AC914367ECB24B0F49E733288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.jsonlz4
Size 25KB
SHA256 7dafdb2b4d6b5390366c5d749f5db43ebb7705fcec96e2dfac85b7cca6ba74a3
MD5 6841da5f432b3649186a6ac96f19280a
SHA1 5950dc222581f1c7d372647503dc1c3bf97fc518
SHA512 b57d209bc972e5abe39a0a521892a66af7eea5dfedb3e02046a06da0a50737bbc29b2251b6bd5810da3619adce5011f3e0835f21f8093208b6e526a1d04435a6
SSDEEP 768:9LciZRlI+YPU8jDV7P2dLvPkQXhd3ATGTqwTC2iqRP:+i+3jh7uXdXhd3nTqwTC5qRP
TLSH
T1A3C2CF22FA833703CD491999A1AC3F283AB674C757FA4548A94CBF9E14B5F411B3C259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore.jsonlz4
Size 5KB
SHA256 fa281d528ee4c1f6734944942f6ead7eec04a2452034f5b19d25fa249d06d2a2
MD5 2de0f9290ebb1950db4389b081bf2153
SHA1 4b31a62a18a8809363458302233694ee3369c8b8
SHA512 92304cf4846548cb500c37603b221c1aa5a6b41a888edbf7306a215235e537e544748411a8f78ee147274244cf40a1151d9ad4c1bc7ac1d865d22c8c530ee5a4
SSDEEP 96:zxf/f9yfht1lus4JLjSonx+inwv8Ryv6ag4RYt68xH6j80MFfY:l/f9yToZx+inwZCad78NQvMW
TLSH
T1C0B16A73280B3EF2EE1AE62A48493B80565325B7D3FD04D4249F9E8A34A5D05133B39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

storage.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage.sqlite
Size 4KB
SHA256 b8ccad800a36eefcb37282227d1b8c201de4f8b90d6914900a5f401148821e96
MD5 7830ec9f0d5f61718a82a9e72bb9add7
SHA1 a517075440e87e3d1ac2753906997118c611b63f
SHA512 27a8a25cf67c85165becf4c88a3cf534b684b182375e2192a5ddb6685144f925fa5a51dc80a21cccb23c9678cff476d8094fed7f0c5dc9af6056106441666a02
TLSH
T192813A8E1F247A01C0B053B1E6E00EA39E3E111E4B5B95C73EA011FADAF35966A164BD
MD5 SHA1 SHA512 TLSH

Submit Download

1657114595AmcateirvtiSty.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Size 48KB
SHA256 2fcb0fe6d6b6b23ecf7b673c306e525d309e6247862f573f97ab12f7b164011e
MD5 d344f3fb3ba934547a250463058018d1
SHA1 81fbb230e98f4a10b6aac47de6286173194e1c46
SHA512 1b9cbcb7f5469936584e152c7ea8444bb48b8a983bbec32ebdbe480a1780f9a10b525b52cdb94449eda8da9f0750b0cb1262fe9eecd167d276672e823d92571e
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEmkBB:Oa16S6CKnqlizbxV+2xVeU7X2B0mKB
TLSH
T15223808E3F07E511C53AF0B178A08D51BC5E321D07222AD679D0DAE4C8F215AEA1F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.4MB
SHA256 3875efc8db3c1b9a61894dd7b8fa5cfd3f3bcb62eede13ab065db917469b8f22
MD5 e1eb3dd4b4976ea57b89efc568c14aad
SHA1 866c1379563dd73cb3b8bf8eb8ddb9c118b83b59
SHA512 07228d5efaec9565506efaa8e2f277797d50ab3d1229f31afa207e0562bdb6771317541fb4cc9a424346a3430314ec613a7f41e791c89a9c980369f87f321b17
SSDEEP 49152:eYpKU0HeTmSYSm3yERUs4lgN5BQ4iLX/q3:374iERUTM5BQ4iLi
TLSH
T1514629F820D1A257F3814073724993EB21EFD00D5037DA085BA95AE9A574CEF8E17B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.4MB
SHA256 9b7916b64c81f2364b3bf4bd67b6a968549831670c5268509d1826a7e565ba1c
MD5 6c25b90f41dd1e6b5d764cf977c5c5be
SHA1 b03edba0909c6100daaac191e251e23c22ae6d45
SHA512 fd125f2a46b5845fed95728a8606bfbf196e22ef73b46486da62e98bf5eb61c41e25c988dacc0c4a881abca2bea50edb1b061d1e8bd48966bf9378a93b8e7244
SSDEEP 49152:S9yWk9n/X1Le4y2D3/Y9rxtITlyGBhL1f6TyIUcdF575ayiIk7ZffZ6l8gLxYPNK:cSN8QWDT8J636q7Dg1L
TLSH
T13B765DE420E19253F38644B3719993EB20EFC01C6036CF44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.4MB
SHA256 e447ca0a0f1111d62da93a700befb68b640062988c06bf29182c863a635c03d0
MD5 c2e8fae0da2f20bc88dc0569f82c7553
SHA1 61a5080714223c1c5ac7e9fdfd5ddae30073b635
SHA512 ee1e8aa0a1d0e9dc50b379692cb31c0c754d8f3d687cf4c08da5ba808152910a3e6cc9aa92dd19d67110337b4f0b57dc7c7be54048701cb8c555030ff8c9266e
SSDEEP 49152:fYpKA0vv22ZYJt3WERUI0lgN5BQ4iLs3w9:A6cmERUfM5BQ4iLz
TLSH
T18C4629E860D1A257F3814073724993EB21EFD00D5037DA085BA95AE9A474CEF8E17B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\xulstore.json
Size 141B
SHA256 810e1a840df3b88ddadb287b4d0edae23128b207379070b8925c977e6605f9e8
MD5 dcf4b0de860a5dc3f87591e6e76b900b
SHA1 e3d8eebb801dabf682162fdf42e1d30df8948035
SHA512 6fe6ed05584c8721e894750442fc5cab622b1265710b5cf9ce703334e1b90edd64ab0c33768a0a70aba88d75f6d30208531a4ab45f80f6a7f5de4c29adf65caa
TLSH
T1B9C02BB2215FD8487F178E8F028A26643D24453442C021E175D224B4004130F4D1C24F
MD5 SHA1 SHA512 TLSH

Submit Download

M5naqQQV.torrent.part

Path C:\Users\Admin\Downloads\M5naqQQV.torrent.part
Size 4KB
SHA256 38a1a24fec784eba7ba45e135e497ecf9b068980293bea8f6bcfb41d97cef9bd
MD5 85874a2462faf2b4c1b4cef7dae25a6c
SHA1 24461717b924820ee55d99d08f60fae5bbc08533
SHA512 57020eb71987bce4a7aae98df0e3517099ca9515563e558f24308f7e30943dff9cf789195c6566d3311b8f39a09c3d3313b4397107d96e87002bbc2c699ef830
SSDEEP 96:jDiPQwcspKD8pRtZNXnfxGMo9KukJz8xwtCtoSmpjm:4QN2Xnbo99k98Wt2qm
TLSH
T14E8109F52BD441A3B771C609BE8532B84627A0B80EA755F0D0B2C7582565F02F2AF997
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5016-2418-0x0000019D04E90000-0x0000019D04F90000-memory.dmp

Download

memory/5016-2432-0x0000019D07640000-0x0000019D07660000-memory.dmp

Download

memory/5016-2464-0x0000019D07E20000-0x0000019D07E40000-memory.dmp

Download

memory/5016-2433-0x0000019D07AA0000-0x0000019D07BA0000-memory.dmp

Download

memory/5016-2450-0x0000019D078A0000-0x0000019D078C0000-memory.dmp

Download

memory/5016-2571-0x0000019D1C7D0000-0x0000019D1CA6E000-memory.dmp

Download

memory/6596-2570-0x00000157865E0000-0x000001578687E000-memory.dmp

Download