hxxps://romsfun[.]com/roms/playstation-2/

Resubmissions

12/09/2026, 23:49

260912-3t6f2sxfkd

12/09/2026, 23:45

260912-3r2ebaxeqa8

Analysis

user interaction
yes
max time kernel
102s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
12/09/2026, 23:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://romsfun.com/roms/playstation-2/
Sample260912-3r2ebaxeqa

Score

8^/10

defense_evasion persistence

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
266	1632	firefox.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier	firefox.exe

Checks processor information in registry 2 TTPs 60 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1632	firefox.exe
Token: SeDebugPrivilege	1632	firefox.exe

Suspicious use of FindShellTrayWindow 24 IoCs

pid	Process
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe

Suspicious use of SetWindowsHookEx 37 IoCs

pid	Process
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe
1632	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 1632	2744	firefox.exe	82
PID 2744 wrote to memory of 1632	2744	firefox.exe	82
PID 1632 wrote to memory of 4932	1632	firefox.exe	83
PID 1632 wrote to memory of 4932	1632	firefox.exe	83
PID 1632 wrote to memory of 4932	1632	firefox.exe	83
PID 1632 wrote to memory of 2668	1632	firefox.exe	84
PID 1632 wrote to memory of 2668	1632	firefox.exe	84
PID 1632 wrote to memory of 2668	1632	firefox.exe	84
PID 1632 wrote to memory of 2668	1632	firefox.exe	84
PID 1632 wrote to memory of 4384	1632	firefox.exe	85
PID 1632 wrote to memory of 4384	1632	firefox.exe	85
PID 1632 wrote to memory of 4384	1632	firefox.exe	85
PID 1632 wrote to memory of 4384	1632	firefox.exe	85
PID 1632 wrote to memory of 2148	1632	firefox.exe	86
PID 1632 wrote to memory of 2148	1632	firefox.exe	86
PID 1632 wrote to memory of 2148	1632	firefox.exe	86
PID 1632 wrote to memory of 4448	1632	firefox.exe	87
PID 1632 wrote to memory of 4448	1632	firefox.exe	87
PID 1632 wrote to memory of 4448	1632	firefox.exe	87
PID 1632 wrote to memory of 4448	1632	firefox.exe	87
PID 1632 wrote to memory of 2524	1632	firefox.exe	88
PID 1632 wrote to memory of 2524	1632	firefox.exe	88
PID 1632 wrote to memory of 2524	1632	firefox.exe	88
PID 1632 wrote to memory of 2524	1632	firefox.exe	88
PID 1632 wrote to memory of 3996	1632	firefox.exe	89
PID 1632 wrote to memory of 3996	1632	firefox.exe	89
PID 1632 wrote to memory of 3996	1632	firefox.exe	89
PID 1632 wrote to memory of 3996	1632	firefox.exe	89
PID 1632 wrote to memory of 4104	1632	firefox.exe	90
PID 1632 wrote to memory of 4104	1632	firefox.exe	90
PID 1632 wrote to memory of 4104	1632	firefox.exe	90
PID 1632 wrote to memory of 4104	1632	firefox.exe	90
PID 1632 wrote to memory of 2952	1632	firefox.exe	91
PID 1632 wrote to memory of 2952	1632	firefox.exe	91
PID 1632 wrote to memory of 2952	1632	firefox.exe	91
PID 1632 wrote to memory of 2952	1632	firefox.exe	91
PID 1632 wrote to memory of 2168	1632	firefox.exe	92
PID 1632 wrote to memory of 2168	1632	firefox.exe	92
PID 1632 wrote to memory of 2168	1632	firefox.exe	92
PID 1632 wrote to memory of 2168	1632	firefox.exe	92
PID 1632 wrote to memory of 344	1632	firefox.exe	94
PID 1632 wrote to memory of 344	1632	firefox.exe	94
PID 1632 wrote to memory of 344	1632	firefox.exe	94
PID 1632 wrote to memory of 344	1632	firefox.exe	94
PID 1632 wrote to memory of 2196	1632	firefox.exe	95
PID 1632 wrote to memory of 2196	1632	firefox.exe	95
PID 1632 wrote to memory of 2196	1632	firefox.exe	95
PID 1632 wrote to memory of 2196	1632	firefox.exe	95
PID 1632 wrote to memory of 2624	1632	firefox.exe	97
PID 1632 wrote to memory of 2624	1632	firefox.exe	97
PID 1632 wrote to memory of 2624	1632	firefox.exe	97
PID 1632 wrote to memory of 2624	1632	firefox.exe	97
PID 1632 wrote to memory of 2532	1632	firefox.exe	98
PID 1632 wrote to memory of 2532	1632	firefox.exe	98
PID 1632 wrote to memory of 2532	1632	firefox.exe	98
PID 1632 wrote to memory of 2532	1632	firefox.exe	98
PID 1632 wrote to memory of 560	1632	firefox.exe	99
PID 1632 wrote to memory of 560	1632	firefox.exe	99
PID 1632 wrote to memory of 560	1632	firefox.exe	99
PID 1632 wrote to memory of 560	1632	firefox.exe	99
PID 1632 wrote to memory of 4720	1632	firefox.exe	100
PID 1632 wrote to memory of 4720	1632	firefox.exe	100
PID 1632 wrote to memory of 4720	1632	firefox.exe	100
PID 1632 wrote to memory of 4720	1632	firefox.exe	100

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://romsfun.com/roms/playstation-2/"
1⤵
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://romsfun.com/roms/playstation-2/
  2⤵
  - Downloads MZ/PE file
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1632
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27100 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {6ab907bd-7792-4009-9253-6517295d28ce} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2508 -prefsLen 27136 -prefMapHandle 2512 -prefMapSize 270279 -ipcHandle 2516 -initialChannelId {3660bb97-e9a3-40aa-9ab1-7c60a2fdb7ff} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3776 -prefsLen 25164 -prefMapHandle 3780 -prefMapSize 270279 -jsInitHandle 3784 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3792 -initialChannelId {038f2b89-fc36-44bd-b88b-49bc0f0d3eaa} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3964 -prefsLen 27277 -prefMapHandle 3968 -prefMapSize 270279 -ipcHandle 3776 -initialChannelId {c54c5786-dce6-4afc-ba2d-0676fd234236} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2148
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4368 -prefsLen 34776 -prefMapHandle 4372 -prefMapSize 270279 -jsInitHandle 4380 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4388 -initialChannelId {8e27d7aa-b7f6-4e87-b6a7-f48abf51dc90} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4448
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2544 -prefsLen 35013 -prefMapHandle 4716 -prefMapSize 270279 -ipcHandle 2524 -initialChannelId {948ae45f-8024-4c07-a900-7c7f47c8ef68} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5196 -prefsLen 32900 -prefMapHandle 5200 -prefMapSize 270279 -jsInitHandle 5204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5192 -initialChannelId {9dc55ba1-a4dc-4521-84f5-f95c0b9660a2} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5288 -prefsLen 32900 -prefMapHandle 5292 -prefMapSize 270279 -jsInitHandle 5296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5304 -initialChannelId {c1c05dce-1521-4564-aed1-d40825f3c29a} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4104
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5604 -prefsLen 32952 -prefMapHandle 5600 -prefMapSize 270279 -jsInitHandle 5596 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5288 -initialChannelId {5d5da04e-4b0a-415d-876c-f9671d90cd33} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2952
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6196 -prefsLen 32952 -prefMapHandle 5960 -prefMapSize 270279 -jsInitHandle 6020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2936 -initialChannelId {742f2c42-1583-4d9e-9f7f-3d992cdcbd56} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2168
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 6324 -prefMapSize 270279 -jsInitHandle 6328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1488 -initialChannelId {ea110fe0-7dcc-4106-8cdd-74a332195b07} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6480 -prefsLen 32952 -prefMapHandle 6484 -prefMapSize 270279 -jsInitHandle 6488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1488 -initialChannelId {f147ec5c-394c-4b27-860d-b4082c3d39a7} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:2196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6412 -prefsLen 33184 -prefMapHandle 5516 -prefMapSize 270279 -jsInitHandle 6408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5820 -initialChannelId {c647d137-9550-41ba-8b2f-69a1cb87a0b0} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:2624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6220 -prefsLen 33359 -prefMapHandle 2988 -prefMapSize 270279 -jsInitHandle 6892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5788 -initialChannelId {d1aae7db-12a0-4a5a-b1b1-c59117a1e7e1} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:2532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 4820 -prefsLen 36273 -prefMapHandle 4824 -prefMapSize 270279 -ipcHandle 4800 -initialChannelId {833ef311-2250-41cf-89a1-7cb8072a0869} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 utility
    3⤵
    - Checks processor information in registry
    PID:560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7560 -prefsLen 34842 -prefMapHandle 7564 -prefMapSize 270279 -jsInitHandle 7568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7192 -initialChannelId {43c8f53c-8d00-484a-bfe7-0d50a594562f} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:4720
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5780 -prefsLen 36508 -prefMapHandle 5756 -prefMapSize 270279 -jsInitHandle 3068 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7264 -initialChannelId {14a35c4c-617e-4fa7-849a-8d9b29c1e975} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:5184
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7000 -prefsLen 36807 -prefMapHandle 6112 -prefMapSize 270279 -jsInitHandle 7532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7280 -initialChannelId {50c5d18e-aa92-4fb8-bea8-8d6ea1057095} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:4784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5688 -prefsLen 36807 -prefMapHandle 5292 -prefMapSize 270279 -jsInitHandle 7464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3048 -initialChannelId {c68ba9ea-039d-41a0-b1af-61ed46a86ad1} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:5376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7304 -prefsLen 36807 -prefMapHandle 7676 -prefMapSize 270279 -jsInitHandle 7244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6964 -initialChannelId {97ae9e9a-e21d-43f9-8e5d-1b8a21c43d59} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:5296
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7628 -prefsLen 36807 -prefMapHandle 7632 -prefMapSize 270279 -jsInitHandle 7616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7304 -initialChannelId {d38dc1ce-ec82-4430-a574-b6edb16e1966} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    - Checks processor information in registry
    PID:1368
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7672 -prefsLen 36807 -prefMapHandle 7660 -prefMapSize 270279 -jsInitHandle 7648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7840 -initialChannelId {5b477dda-703a-4831-aa4d-8d6fca10f4a7} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:4984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7688 -prefsLen 36807 -prefMapHandle 7444 -prefMapSize 270279 -jsInitHandle 8020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8028 -initialChannelId {e7428a92-cf39-46e6-8323-1d61892b8d20} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
    3⤵
    - Checks processor information in registry
    PID:2640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7036 -prefsLen 36807 -prefMapHandle 6968 -prefMapSize 270279 -jsInitHandle 6956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8020 -initialChannelId {334ae51c-e56e-4ef4-9a1d-7578898ff4f3} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
    3⤵
    - Checks processor information in registry
    PID:5160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6956 -prefsLen 39947 -prefMapHandle 8164 -prefMapSize 270279 -ipcHandle 5488 -initialChannelId {ee82f620-1719-4673-8577-462f06f30e0c} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 utility
    3⤵
    - Checks processor information in registry
    PID:2868
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3052 -prefsLen 36807 -prefMapHandle 6560 -prefMapSize 270279 -jsInitHandle 8168 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7448 -initialChannelId {3f0e2b5d-cd5e-4e00-a9f3-eb91b35a4762} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
    3⤵
    - Checks processor information in registry
    PID:2112
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7584 -prefsLen 36807 -prefMapHandle 3164 -prefMapSize 270279 -jsInitHandle 8164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3076 -initialChannelId {024adc6f-7b10-4da1-980f-4e155508d1c1} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
    3⤵
    - Checks processor information in registry
    PID:5876
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7752 -prefsLen 36847 -prefMapHandle 6396 -prefMapSize 270279 -jsInitHandle 5760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3060 -initialChannelId {0130fc53-7274-4d2a-ac75-20786c2325c8} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
    3⤵
    - Checks processor information in registry
    PID:4244
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8156 -prefsLen 36847 -prefMapHandle 8148 -prefMapSize 270279 -jsInitHandle 8144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2956 -initialChannelId {6b730d7b-e06f-4e12-82a1-1d0ecf87e472} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
    3⤵
    - Checks processor information in registry
    PID:4612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7556 -prefsLen 36847 -prefMapHandle 3040 -prefMapSize 270279 -jsInitHandle 5624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8136 -initialChannelId {5e345faa-e182-4918-bd77-fb2816455102} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
    3⤵
    - Checks processor information in registry
    PID:6140
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7032 -prefsLen 36847 -prefMapHandle 8160 -prefMapSize 270279 -jsInitHandle 8052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7016 -initialChannelId {673fea29-69fa-440d-bcd5-38f354c8158e} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
    3⤵
    PID:3200
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6372 -prefsLen 36847 -prefMapHandle 8136 -prefMapSize 270279 -jsInitHandle 7692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6160 -initialChannelId {fd9d7910-ba5a-4811-aace-477f6b15d688} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
    3⤵
    PID:736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8404 -prefsLen 36847 -prefMapHandle 8420 -prefMapSize 270279 -jsInitHandle 8460 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8356 -initialChannelId {2addd42e-dbd9-4c51-9989-35ec5b80234b} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
    3⤵
    PID:6040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8092 -prefsLen 36847 -prefMapHandle 7680 -prefMapSize 270279 -jsInitHandle 3692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3080 -initialChannelId {cc16af86-9cf2-4cb8-b708-a0d1f05833e4} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
    3⤵
    PID:636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8052 -prefsLen 36847 -prefMapHandle 6704 -prefMapSize 270279 -jsInitHandle 6656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6728 -initialChannelId {27441d19-9ece-4c30-bf2b-62937809f1ce} -parentPid 1632 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1632" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
    3⤵
    PID:4492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26625

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\doomed\26625
Size 15KB
SHA256 a5cd2d2b7d9bcd52e6f4227678d07ab89f741146d69b22a07f01510abb5e9917
MD5 32b88db99d5ecb6c2a4e6815c49907e0
SHA1 f601a3380a250146b2b1959fa3a40d9d565241af
SHA512 a64bab2abcb4d713cac4f2ad722a5978308be254626ac8786cfbd9a81109f6b94d18f9310c74acf99d7f04568318cba034f048da2b42459dfb68cbb3332ff26f
SSDEEP 384:Oubshrx8Mtjszilwx6chDRMMG2UZ4rAiPza:Ozm0sziaTHUZWAira
TLSH
T18A62C0B46F147A1119D3B5918BE6A34E6E11F4CBDBDCCEEE78400D8049983B814F92EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0E63E3254FDC3520D39D75644B8ADE4C56680C63

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\0E63E3254FDC3520D39D75644B8ADE4C56680C63
Size 131KB
SHA256 d4020c77afe6a98d5866784c22c09b719c615cfc32293907ab49b07babb6c23f
MD5 78dd1c6349d2a3c614a62025b5607fe6
SHA1 080e0b969c1d8bdf3e970a5ad82f5fbb676df950
SHA512 18dacee0ea84e6de1f66b5771b443e3b85a94e6de40d64f191c39922a95f9b25316ea120426965fdffa8a7abd6ff4444e83a27581ebfce725b8a7f089b592235
SSDEEP 1536:kf0wkylf0hIlRlVp8T3jspziafEJLlVmQtPtLzzAoQrH/q0n96FEr1hIEBC9nRsF:IZR04iYFmFX6fJspswM
TLSH
T1F8D33914EAB70732C43602BA5AE716B57A31D04343C5E72B7ECE91083F657398D56E9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1F22BFA1DE8A0D1E4E595187E00C7BB032C03009

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\1F22BFA1DE8A0D1E4E595187E00C7BB032C03009
Size 15KB
SHA256 7afb72b504f92ce999a4ac7861c23d99673c14cee1d6e821b5727a46c9a00e4e
MD5 a615bdd25c8177fd31f0ad1dfc7c779c
SHA1 64beb870c38cb4e157a7553f88caa94adbfb0983
SHA512 073fd2097dd9e28c681ad6334bb6b8d064787ad6956060ffbce8a12ef9a54f30dddfab45398c9eac79e321285985d82a15e8629c533d651ea3c7f87c50c24168
SSDEEP 192:N5Cjjy9tSUz3NSUcjdWYVu8mz8+ozgIxTkWbaRgwQL4z9zVaD5JAmqxvUPEij:Ngjuv3Tclq4HzgIxTkpZ4rAiPB
TLSH
T12D62BF779F70295169F2A5934BED6BCCBF40F0839BD5D4ABE204A58948883FE486204F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22CF1994347896B2A86D0EE1E664EE13AD46B26D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\22CF1994347896B2A86D0EE1E664EE13AD46B26D
Size 17KB
SHA256 5042abf5d19c407553d607b90d714bd1828568578c09fdea4549c3eee37f0634
MD5 ad6e89243c49ceb705065d61f0ba5a11
SHA1 f59674ed62a25e52ce1e24252396471670c60dda
SHA512 f0eb2887476b4920be483b1ce2aa385dd12d58547399ed9c105755198d5a06396f5a47cb172213fa4faa777d70e90d276cd430dee636c8dc18c02170fe1627eb
SSDEEP 384:FjsCJEn3i30CUXuH1nwYs6Qf5ZqzDQYFj182YhzZ4rAiq:VsCJm3WRUXuVnyf5CFFjjYhzZWAiq
TLSH
T11472C0374B316938AA6299D1C7ED3B885F41744BA3E5FAEC65C8345802CD334E477497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43419A63195CFDEA4FEAA22040CEFE59F82FEDC5

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\43419A63195CFDEA4FEAA22040CEFE59F82FEDC5
Size 142KB
SHA256 6a8555e737d1c2c6c08e73c619ad2935d39704927d5ad931f185fff6ef4ae7de
MD5 6d8f966312ab7a41a09986c2a32f040e
SHA1 1d2e99171cbd41462c9c5604fb51c979e49c0933
SHA512 b55b5ec113c666df9f98c8e989bbeaf4b4aeae402c9ff9699d95c272e38d7284632fad8026782d73d1bd375334db17c0a219aef174044bba41a5489811b844aa
SSDEEP 3072:Au+EEUwzdFcnvzXd8ApA/IAT15LaUyaFx:Au6Uwzdqzt8iJQ157x
TLSH
T12BE34B25AA560733C86312B546EB23343A71D04387C2F31B3E8EA1257FA97795E16EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53CF23FB80666D2B5FACFEFD6FFD88E5664584DB

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\53CF23FB80666D2B5FACFEFD6FFD88E5664584DB
Size 50KB
SHA256 9a31db22e3eee7cdc859f4f4bd7c79b4766588728419036c3b540b4dc6423af5
MD5 1ec7d07dd76d297e4c4245a57104e869
SHA1 6d71ac342ad9f33a75b1f67977e2b371616d1433
SHA512 3e820f2568fc1d2c47df931ee04c46cac6405ade61598cb4bc1fe7cea748d4da3ce55ddfb0991bb334a2e18156ddf2d5f8592d702d23a798b1d56bdcfde29d8a
SSDEEP 1536:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlmbEVT+6w+ko9F:c6nHvPxMUsglU4AZ6Nko9F
TLSH
T14A33F133DF50A9544B1540B585EBFE982E37348BDAB2DCDC1E4932CA5BC013869FA89C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5E43012191E7B1F510ACD5BF039D8BF1B9A277B2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
Size 16KB
SHA256 7b81a1519a50a1d6c92217eb1850d7a18149c3db9377ff7e5756551fa42f7178
MD5 809bd2938fd2bc4bbf76bc8035e4f935
SHA1 f744b3de226d30e0c7a28a741dbc83b42761b0f2
SHA512 671d1bf2065f63c7c3b8d14cfd59c41cbb9ae7ded9f535dcef6caf94751a70416501147dbf246bbec00592731b9f66cdb9ab456c9885ff414fcba7fe737e05dc
SSDEEP 384:HkCjiO024YrDL84KKDL849B7SOEAd9KVRaAcP+AWRMAd:EzZYrDL8lKDL8CB7S/AmVAf+hRMY
TLSH
T1BF729E3D5F013CBD2597C0E8C4F9929A8D18B7A3CFE6806D21583D0DCA98A69B0F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

A247117FC7ABA1D23DF0B5B99D9116C1C330E662

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\A247117FC7ABA1D23DF0B5B99D9116C1C330E662
Size 15KB
SHA256 456055e2907af090d6cfb369ecf1154d7da724997301ba24ec867faae85b6338
MD5 d4447c2f3b7d07f020f4dee46d22d3d3
SHA1 8719b0128bb03e51f3a749fb6ea31e95e7dbb74e
SHA512 8a5dac7043920123cbb70ebe8329842521047bc94e0d8da79cbcb2ce48df77cf7d0bf99494585251a9d9068c6c269839deb4bd8ccd39cdda5af224199d4fd599
SSDEEP 192:F8nIK4JbYKZ054isj9hEnDAB0TqPB/5NJOzeGcFnYbaRgwQL4z9zVaD5JAmqxvUy:ZTbZ0us88qZXSanXZ4rAiYV
TLSH
T176625C3AEF140F35CD7602B687B673783A34E083DBC5A96A9E5D01295C457A92D33D8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AA847F6F8DCABA7724FA217C5629C260BE4E3C73

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\AA847F6F8DCABA7724FA217C5629C260BE4E3C73
Size 414KB
SHA256 5ef8d9ed6036c8e5ec2a76767d319cf4f42fd9059cb04bd5bfdc7a184de3089b
MD5 cdee0e7f3f805ed85785d3129b63b6a9
SHA1 2f85f78a4115c61fcf676afc53ceb40ada7b6469
SHA512 e277f0fd66d93a3c6558f71eda941b2abaa41b4565bfb9def982d12572dedbe8c12d97968fb4b094fc296aadea5b2440dee0dba689cf88aab72504b517b3932c
SSDEEP 6144:kc6YfX6HWK9VCH8UBQ47GKcG1UU5rQbGmL/nUrhQc6yJX7oX5nVF6p:tVxK9YcU2m15kZ/nacHc
TLSH
T1E294E767FE866E23C92502F540B723363B70D4865BD6F3272ACF7526BC2A3690D5189C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B4B9CFBF3007461E5448AF63F594BCDC8D43620B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\B4B9CFBF3007461E5448AF63F594BCDC8D43620B
Size 63KB
SHA256 98643a3a08df6b9e603c537c1ecd5948d664e1d0f7da5d39db536d0af3546b8e
MD5 bda8f9c2d20504635ae44dd143e6c305
SHA1 14a7d7cff140680a35434bd0d9c57c50bec07c89
SHA512 a02dc1e35b18aa8ed013e459e33c676aa7cef10373d9874b59d4cadb2cb4fd661d9f283f571de5c72f1b789d52a4a3f52e715475c28052d39f2311536814926d
SSDEEP 768:mkDb1CrK60LP3m4qJ+h4MpyPE2vTNT9HXUmSf6v+nUhtHhXJIt5ZWAiNo:xA+rP7Q+hKPEqTNlXUvf6vjVJIKNo
TLSH
T1CE532A29EE564E23C92102B150F7A33736B1C0865BE7E31F5BCF7022B81E7B94D65958
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C520C17FF0A3AB65C510FE925B75195857FA50FF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\C520C17FF0A3AB65C510FE925B75195857FA50FF
Size 68KB
SHA256 a65c95d6819bf57a59a245c45b1b58db60dcaceb98bb278b7d265488a7f6be51
MD5 2fbdf3a7468fa193859e8a722b1da113
SHA1 fe6c0ffb1bf8b763dc9bb774081b950838e13dc2
SHA512 34ef0b58415314e6cf83ddf8024e259044151fe740631cefbb883a814b2e764b712fbc2d2045889d00d61d61f56f2af071992d5477e62923cb5ffa3314445aac
SSDEEP 768:2ULkMNivHjmsk9bUL3px/YqXgAP+h7Q9bUL3px/YqXgAzhNUJCtgtSVhVY/ZWAiR:2ULkc4Dd0c/UhOAgcVhLR
TLSH
T1EF638B5BA33A4E8BF43E3BF38D928F5DD99A554322C0F179DBEFB28168601564670C84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FC7CB003B6965E3755D9C456C5544DDEA6D78628

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\FC7CB003B6965E3755D9C456C5544DDEA6D78628
Size 33KB
SHA256 b813c162467443639a747a71a0ab73aded992c7947de6f59fa0331cc808bd01b
MD5 2690d8111c89e32b2ab202b648a6c5e9
SHA1 3f54bc797332da6330d1b54c51425ee726f32d14
SHA512 6b208293d71940832b2693dd3a18c686406cad621d5f86a79131f21d564c8128355ac09313d028c132d902adb7965102097dd9962d90e948bca0ebcd1b9a318b
SSDEEP 768:n0gFhI7MkLaG7480/n2mbmQVkFLijZWAiD:nlFhQMkLaGU80f2mCQ8u2D
TLSH
T161F229259E610722C86742F648EB63693A31D0038BD1E71F7F8EB111BF962750E62EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 32KB
SHA256 214e263ed6ce08f807d4a029c1792fa120fe24aed6e5cbe8fd81081657465d81
MD5 92391a3860c7739dd9ba940e0c874e2b
SHA1 579d23a29f36564bfc4ab86c1c463e8d53342016
SHA512 ae525884a273871d603a291464b124ba67c30b6146e3973047769945dbdcc2c5af9e3357980fea57e36a83ebf4ee30d60759c6af14e896b282bb8b57e32ef2b4
SSDEEP 96:tRebFRwUb0VW26USaIkUhBOO2+RebOJ9b9blbcgbgz2bgL2eb5L2u2/bULdbpLza:tWGhF7rr/ywyEYk0xt
TLSH
T159E2E8F74B756451F4929FF49098788CD8334629ADA8C5A5CA00D0EB12BA3E4E03FF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 35KB
SHA256 4a95e1094b55e3b5524308b6adb22133e22878386232b39bd6b338804deec1c9
MD5 e1ceca6c8c316f8989c239e3647329bf
SHA1 d82c65f5ffafa20e5f728b590bc54b9b3093dc61
SHA512 d3b3658554f61b777be3fc7a53b1f826d755f975211da19795e8e4779c382b9830e64caba507b6bdc91de73067e0bde3c7cbaf7ba5cd597853ef69d558c03f6d
SSDEEP 96:zRebFRwub0VW7sQGChO2/MebOJqbDbDbmgbgzYbCL2eb5L2u2lb+LdbpLzebn4dS:zWGqha7LrAyjyAYkRxt8
TLSH
T139F218F747B56422F4929FF45099388C983346295DA8C5E4DB14C09B12BA3E8E43FFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 38KB
SHA256 dd9bcaaebf8f523f4bcf7899bca6a4bafc6fcb4316e1193703e58b3d65739b9f
MD5 9b53224ea565325ca30e151b5f7a10ea
SHA1 46b863b8d6ee06cce9c48677b1e1220bf1f1cb19
SHA512 24f7bbcaeefa642ae661d15fd4781517b4ac3c682c6a4d6881999f67a5abf82f2a44b288841de0b32bf9be61904511f1528b28f973a25327200be6f8386f0413
SSDEEP 96:zRebFRwub0VWBxsjxyPxdaxyrsQGChO2/MebOJqbDbDbmgbgzYbCL2eb5L2u2lbL:zWAHvqha7LrAyjyAYkRxtmSV
TLSH
T1E9035AF747B56421F4929FB050D8398C887346295DA8C5E4CB14C4DB12AA7E8E07FF9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 38KB
SHA256 efcb80a3b3738c2c316cd287ef1334d80cbdc00eecce33687874dd9205fb9f5a
MD5 3a97452e73cfa8b75b11ae4c528e102d
SHA1 11994524ed1215866a95d07c99d5c12c0d69a8ae
SHA512 a2fcc4b97f6795bdc5ca3c04937773de993413df91160bc105295b57b142e9fc1145e3562266cf23e1cdbe7122c5aafb630b55794f4bc00b5419013ef81bb714
SSDEEP 96:zRebFRwub0VW4xsjlSxdalrsQGChO2/MebOJqbDbDbmgbgzYbCL2eb5L2u2lb+LM:zWiqha7LrAyjyAYkRxtFSVU
TLSH
T1520359F747B56422F4929FB450DC398C887346294DA8C9E4CB14C49B12AA7E8E07FF9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 10KB
SHA256 49a2f53992521ecfe75ee3a87eaef600a9bd7dd9e4df57cd11b4bf8bab73573c
MD5 da224f8e5e7e5a24e0328c19db90a607
SHA1 60e3a08ecf8f181ecadc71cef15a64e25349614c
SHA512 847c2b4e5fe58c7172b980d1da40acd76eeae367382b6bd80a5485d0735eb0bf155c96fb9e3a3e021b52b8c132af71e407f6b2e051b20ccdbaf87c50909ce50f
SSDEEP 24:RBuhMZiGMkAlLH8mGsAV/G63GX3WSAltKPB53yAx57rXAx8ELfFWx3qYflDVq+:s1X0xv36mLXKPBN7MSk4xhB
TLSH
T18C22DDF787B35422F9629F71A0D8758CD9334735A864958A9A01D0AF02863E4F07FF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 20KB
SHA256 42832cf4270f5c502a40cc33a2318ef5268ca35fddcb18b36fff33db6e23d859
MD5 1f3a3201f5e9f028843f368097c9e959
SHA1 fbddce9642f2bae4d12bb787ea47168b49ed53d6
SHA512 6a0840f650695fc00b3288d395ae9aa6bb77812670d825b8e3b06a018ce53b8411c0cf606c1d6360ccb921359692ad58648664758cf38037e586ada23f1fc03e
SSDEEP 96:49kVqqiBN7MSkUhBOO2+RebOJ9b9blbcgbgz2bgL2eb5L2u2/bULdbpLzkb14BbM:HhF7rr
TLSH
T192920BF787B65451F9628FB490D8788CD8334639A968C5998B00D0EB43AA3E4E07FF5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 27KB
SHA256 040d443e3617f8b82639fcca22e7f336b4af854ae21ed9e6e08c0d1f851908d9
MD5 75083a80860ede8c4c58e5132cd068bf
SHA1 5d0d753f094e68395ed265cb23e5e96f02bdda92
SHA512 b8b35a9596998ddf949622a3d64529e1f2e71ed2d68b7182f7000152e96a5e0c3e7ae856724328dfb42ce9175a834014edc03e186f2d79776bd8f70c2d52c6a9
SSDEEP 96:49kVqqiBN7MSkUhBOO2+RebOJ9b9blbcgbgz2bgL2eb5L2u2/bULdbpLzkb14Bb0:HhF7rr/y
TLSH
T11EC2C9F74B766452F4928FF45098798CD8334639AD68C595DA00D0EB12AA3E4E03FF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 e56f4a888f277d067eca1c9e98f3c31a2bc9cd46680247fb0ccf8f309e5faa1c
MD5 1e8807f9c741e43a564851596d286261
SHA1 41b986b40f6b7b8b244095fbf0d0892fb70692f4
SHA512 b6a3e32fbca62135b4b822038c52f7b37ea197294384909b29febe3e25d115d247afb0886ff9850b3d067b8a0d6f6a74c151be911749b970159e9f40762a4d8b
SSDEEP 768:hP5D0Lq2vV7GcmhuHpYE9mRcxCpvb8bgb4b4bii:wLq2vJD9mKi
TLSH
T1EDD22284EB2A953FD41912BBDCA11B001F79B88A580D2F673B4D64686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 25KB
SHA256 69724d972a36024b392a9cd0d4441be371578c67d6ab7ca5070f2017a8635110
MD5 9434ccc9330e84982f4dbeaa3f489ec8
SHA1 84c25efe8782811f9765cd0d94620da207fa8c3c
SHA512 3aad406575560ef69bb5be46938ef17fc221dd7d8148fb1b1aeb9ef28be9e194e1452c89e31cfbe8e9b842ce5bfa577ce32c9da51bd28ed6c754a5f3434af486
SSDEEP 768:XLq2vV7GcmhuHpYE9mRcxCpvb8bgb4b4biDPk4:XLq2vJD9mKh
TLSH
T169C2FF44EB1E953FD41912BADCA14B002F78F88959196FA73A4CA46C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 d4c6a40075f811ce4e5e4370af3fdaa0581a5581dee32adde405710c0672f2fc
MD5 db437596abc7c5afd211a2a169c91386
SHA1 79890b1e724d9d1bf8dccfc24b6050454e4ead0d
SHA512 3cf13a063d94ed224ed18747a24b1da66d7d0b112ebd9e592140508cb44b54ea49b18a047d977f5c3ca52993a62cb97f1d5948b01ce572a1bf71458c4b282e9b
SSDEEP 768:hPfe0Lq2vV7GcmhuHpYE9mRcxCpvb8bgb4b4bi:JLq2vJD9mK
TLSH
T1A5D21284EB2A953FD41912BBDCA15B001F79B88A580D2F673A4C646C6C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 95619bd00a6704386c0e9d6731cd11990df785e9e42521f6c7cd2a77a8caff17
MD5 ca04d56cb361646e7e466141907a5d31
SHA1 3f242246c0bc789528f43c5c44c0aff627186047
SHA512 3ee0aa9a396b818cbe0a336c4c8963e6884deba72682f22e7228838a422c1c86b4b4856cbf17d10a00d8bff7429d19a026b27c3ce00145bbaefbe46a08dbafc7
SSDEEP 768:XLq2vV7GcmhuHpYE9mRcxCpvb8bgb4b4biXPAK7:XLq2vJD9mKB
TLSH
T1ECD21184EB2A953FD41912BBDCA15B001F79B88A580D2F673A4C646C6C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\events\events
Size 1KB
SHA256 0feaf968173dcaedb49d96c3cfbac20298362768b04b0759c25bf7adfb15bf1a
MD5 c5134e9758bfb8f0d2d1d46489d6f1b4
SHA1 237071c812ebcfeb859382832f4b2ca5eb573220
SHA512 1704bd35243c3e1a1f43afda73c67f268706f46ee11f9d0e6c774cafcd793ad074cf4652ca45ef3a56476664be46541c67e357ad95d45dac22f1160ad7fc19d2
TLSH
T186213A5C39F94D3AEDC7E29CB481118E93598E0618871C474E12EF8DDED1AD9326A43D
MD5 SHA1 SHA512 TLSH

Submit Download

15424eff-1327-4071-a2de-6a20bde5fcaf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\15424eff-1327-4071-a2de-6a20bde5fcaf
Size 871B
SHA256 6d07353a0b00cc90c2928f6b1305eefba16bd2654b00f6ac44d04688de4efe10
MD5 e279e276dd03dace1ae2254146024d26
SHA1 a2993b346c7ec46251480ef13277788f9987dd9d
SHA512 4a532e15643a80e4245c0d620ad760238cdebac279cec64229b914bfdd28bc1adb58268e3e51263ce023968d89252dd6068b7fdbf354b006008ba99715f843b4
TLSH
T17911E380AA3079B2DC78D34BC661774A47E87923C0C998183DB46E145DAE51D53AA64B
MD5 SHA1 SHA512 TLSH

Submit Download

3086a93a-ac0a-4f33-81c3-b4679be8af1f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\3086a93a-ac0a-4f33-81c3-b4679be8af1f
Size 235B
SHA256 25cabd397366e4b701228357066f2123fe35b911a19a100da718c8924df8f878
MD5 13fe4c13445ab1ec60c50b2104cc63aa
SHA1 e75826dbfd4b0b2cb1137242a26edeca76d13a66
SHA512 eda7d22c4f8cf759482e0fee87cc38116146f5b2d89193ce63086157e4f9c3f57d914bd9261cb85b59ae17f615879344061716b1a408420ccd944f4bfa5e19e4
TLSH
T146D0978814C86B2D08040F17B0E069C2B0D88C3710A46C1089A050B49ABAEC443A2816
MD5 SHA1 SHA512 TLSH

Submit Download

3e7d1d08-1fc5-4394-ac94-4f24ea0f0196

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\3e7d1d08-1fc5-4394-ac94-4f24ea0f0196
Size 2KB
SHA256 807a52184c25c11943e039af16edcccccdd1f8b905108b6bf424f2671b524ef3
MD5 7fbd22654534cb5be6c0664be4f23d8f
SHA1 04a4b0c2a5550036e886524dd3e54627b980883f
SHA512 53321cbbd9083a22a35b85f567f6db1f3f2ebf5d121cb31485fb748ab72d90274a839fe6adf5fe54d56652f4677ab4a247c517f7fe97f8b45eb23077efeae366
TLSH
T14D41106CB6B84D779CDBF14C9192278E97A08E1240C96C436D51EF0CCDD369E23AE52B
MD5 SHA1 SHA512 TLSH

Submit Download

3fb4e997-4ee1-476e-9e7e-0c77780d85c1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\3fb4e997-4ee1-476e-9e7e-0c77780d85c1
Size 931B
SHA256 fb771eef52b6a1104c42eea520a0c2bda52d589cafede0c6cdda40bfedefe1d3
MD5 4ce829ef8e8d4ce64986d67c9a8d1840
SHA1 92c47646e7bbe740e734cdecd75a1e0e6da13b46
SHA512 3257bee49b40b72bc15f6435cb31bd7c57bc9add2a1746bfea1a507f0e0ae5d06fd08a6fde62949e8856cecdd66f0bfa7931721f7be3704a4985c4fe74edc1ee
TLSH
T1BC1144D0AA3474F1CC3C928BE1A077424BF47423C0C65A187DA05F185DFF51DA3A6607
MD5 SHA1 SHA512 TLSH

Submit Download

f631e3cb-ca20-4703-9d8e-3521bbeb1cbd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\f631e3cb-ca20-4703-9d8e-3521bbeb1cbd
Size 280B
SHA256 e7d70718caf0c7df2ee52dcd9fb28d2c5e4633b45fb37e488a48678da56c7948
MD5 1ab1b122089fed37ae49cb24ee7653d8
SHA1 5f66fb1d0a91c1cd080d2c783b9eda7ef1711e2c
SHA512 2390ed26918329b7279012440b34779177dd7dd07d96e94b6a321e7302a30972472e10a04fd446f0e655a3deba31c05a46aaca44891aae0d555cbdf1ae7d6521
TLSH
T1EAD02B963CA8235D0C688F16F4B075E676664C3215F46844A99105749AFEED98161C4B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\extensions.json
Size 16KB
SHA256 e45d9aa626be85a76fe8afefb72973bfa5037faf86ba6f1393b47c0ff9494aaf
MD5 034643b2a8865a0830734504bf8106ae
SHA1 05e29f3d216fc69be084fea99a942ca79df0a201
SHA512 a4c1838ca49957301547d3f77d9f54a4d977281a9550b0fcd56c51f8d8225306da24363a1775b1ce6c1535c7f2f276e763d0769355e0876b75ad46a9f7d6f1f7
SSDEEP 384:skkI4v0Umldvj8dhW994z996oPL4HaL4P6vL4HzL4H2L4HMYb4hFb:srI4sRfwXc4v644I4Cz4f4c4j4v
TLSH
T18272321545048E78298EA79BAA367D02C37D473B60845C78F4DD8FC802FA5B902BB62B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs-1.js
Size 12KB
SHA256 f3eca68a9b65e21cc6ff934c6f518a837baf74248c51233a84be0cd342b86f12
MD5 c7b4dae64697061d68b2262069c06681
SHA1 f379755c5155406762d482c4604b03de56ecfed7
SHA512 d4c76b221d0ed45727d9ba87e3fecbfd155503a87c3a0e0e9e2cc49efa6312c3d4a124edbb9e1d07da306c0ad96cfa6089e18c4a2c153f3679df22173a07b457
SSDEEP 192:OuCRmfy/WCUmSSZXLR6iUOBw88iErfyvbS:toRTvwpK2
TLSH
T18042CD3C50808B3F60F2727DAC655D7119A60A6776BFBCD306F89882545CF2841F6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs-1.js
Size 8KB
SHA256 3e7eb710d8d2708d6e3114e8d89988f74f3ab586e29533930e110cec7625ca2d
MD5 3aa54a79b6578c0cd7d1c080e7eea55f
SHA1 79bc2733dbb552066887d7c79dbf1c462ee38bd5
SHA512 b0fc222c150a5693791f42667dedd2108d9e9ab5b1044853125965cedec20519c1c87b2614e6dc7ac74b6b77fcf50f64952bbe58348283b2241e3f3e371594a4
SSDEEP 96:xHk1TU4qGqHGfy/WObzSgUmSSlkdv9jZnoRWRipEr7dBw885w6D8L4cn1MZ1:OmRmfy/WCUmSSZ8R6idBw881v
TLSH
T1BD021F389044CB7FB4B6766CAC6448305AA2063B76BFA8D711B95885050CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs-1.js
Size 6KB
SHA256 77db81efe2633f1528560bc5dcd2de75251100b257125b9d7a7e1ef26f9d3ef0
MD5 10cd3d33b8b0427988a30535fd255b41
SHA1 c4eb0ea7bb74b94e58964347afbaf125fae23401
SHA512 5bb9020771ea870c34123d4ed270106d0524bc4c40f656a6340c0fb528096304180b56cb63cc07fba367c2aaa7a768a7862169879843faff6a1add3be7717bc4
SSDEEP 96:xHkUTU4qGqHGf3/W1zS7SSlkdv9jZnoRHdErMBw88P8L4cn1MR1:OjRmf3/WKSSZ9dxBw88L
TLSH
T154E12F789048CB7F74B6776CAC6888316AB2013B7BBF68C750B55485055CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 3d8f23a1cc4f02746d896dccf431a884a53f35c8d03646cf806f3789b85a96ac
MD5 867313b4d3a2b061d9bce300a21e5efd
SHA1 9458257068c54ce27ec85a488f7b2a358ec7b762
SHA512 7424ce2e6c6abb6dec2f4109f26a38dad0cf423c7ddfe4baf6a8f4d825922e309726e101123bbc1161d1a8dc75d4d5fd8bffdd806b1aaab5d1bfab24b9b294c1
SSDEEP 96:xHkUTU4qGqHGf3sT1zSRtbSSlkdv9jz3noRHdErMBw88P8L4cn1MR1:OjRmf3sTObSS0Y9dxBw88L
TLSH
T186E12F789008CB7F74B6776C6C6888316AB2013BB7BF68C750B55485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 e76a60712274b90ee89413f2acac8495dd940375bccbefb71c5fd045cb12f70f
MD5 2a9a7f8aba86252fd764b474338f6fbe
SHA1 3cb06d7609bffc465573477c7f71053967d1b81e
SHA512 7cc3cc95d260702718a3dd3b003ab844a9c9f0c2ff344f91bc9c4292b95ad36d0e40341c5ae7eceadbb72080255e65d2e62b4bdad487cc4f3e5f1ecee2e5decb
SSDEEP 96:xHkUTU4qGqHGf3sT1zS7SSlkdv9jz3noRHdErMBw88P8L4cn1MR1:OjRmf3sTKSS0Y9dxBw88L
TLSH
T12EE130789008CB7F74B6776CAC6888316AB2013BB7BF68C750B55485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 f5aabe35fdda091444b1bf01e5b4f17a1a6607179d43b2294fb7fbf85fbd4925
MD5 e748155ce306374c610bc542821d5f77
SHA1 ca4da2eb31cfe7f4496cc7011a8edf922b720644
SHA512 664c0d267eaa809f45f1906d97d417c26d7affe0ded831e5911229af3f7e1f6e706b3bb9e535fce27c3b51415a55603f029fc24bec45357cb612be46903eb96f
SSDEEP 96:xHkUTU4qGqHGf3/WObzS7SSlkdv9jZnoRHdErMBw88P8L4cn1MR1:OjRmf3/WdSSZ9dxBw88L
TLSH
T101E12E789408CB7FB4B6776CAC6888316AB2013B7BBF68C750B55485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 b801359c8be993b1ae5baaf1ce1b703560fdac6e57aa876a8c52d4efdc10d63a
MD5 9daab228076766e5e68c456a817dec91
SHA1 72914cc80eaa1f861af9ae740cdcd5b8f6c68032
SHA512 ec6997432fc4b9940d4d1774058f0b2d5c5ad6919e76c61711b33e06404dccf173ced403a752a3409a23988d9548addd4ed417ef50cf4be60182d499a7a400fd
TLSH
T1CA716E8E54953BF37F11A19F87CCC35FD74B286E44A004ECC55A1B35155DAE69890507
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 5KB
SHA256 54ceea22c7e9b7e6f2719332333624987ab2a8e82b2ebd7e8a55f916d351cbca
MD5 546a27032bce0b0399b9243ad93ff5cd
SHA1 97e0e0519c63d7bfebb13e2cedad8716001a226f
SHA512 985895a75cd0849071df1058fe2e365b83217d2a79e71b8d2af539734aad9d59ab601ea3a489bd5dc37f492524ae9684456f5ed0e0efcbdcccaf4753b3d178fb
SSDEEP 96:i7fhuQk491Fp7ocONqHsncJNoK4FBOQf0O32AOMKoaYDPDoG1p3bF5U4cHF4uLEq:aa49V7nONiscJ6/FOOGQnoGD37U3HF4e
TLSH
T172B18E7B70653BE77F246857944DABAE994D381AD4B9DCEC860B7F6006371011089A2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 13KB
SHA256 fe3fd4ae7cbaf200922f049033d14ca087b5159f45d56ed6264cb73a1696c128
MD5 18fd1812b5a51c045d17144434162a34
SHA1 018ed46f28bacda96041d93d660d13a13f4238be
SHA512 503e9148e8e41c6256781559479d1906e860fdd739ae8f252aef84d8c2309ecfa31eb9eca1ff336ffeec09cd9c37996fe0119a7ef8619f43200d54b17fdebb6d
SSDEEP 192:VLk49zwCscJ6/FOOGQnoGD37U3HF4RjTNPnQA9qqcAgw/zWNp13lZn7+YDJTVeq/:VntwK+o03oXF4VhCFVY2DHKY1kdj4
TLSH
T15F52C03C6358FAA95F6C1A82D8449E8F1DDB5C9D92BBC4E48401BF412AF135A824D63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 18KB
SHA256 2ac8130c4785f5deda1bece677be2f9517bd00bb2777a11e55174f60b9bce9f0
MD5 15dfe6dabf67d699171cab3b6a3bd2e9
SHA1 30a672a16b737bbab5f1c456bfa4896baf7d668e
SHA512 2fcccef8cc5905f662188b14a49635c8b1845039011a3ea79503c211470c7eb73a93846dde20238cb6b8f5f6cfa4aacc96df17fed17ed0ec751e9aebd7dd99b7
SSDEEP 384:gntwt+o03oXF45DZ0VcfcUAj1/ShEcZQ2MswMfayg:g2ti3oXat0V7RJiEcZQBsLSf
TLSH
T1C382BF2AB3A1F9E44F6C2A82E450EF8F19DF5C5A81B691D94106BB1419F028F834673E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 21KB
SHA256 7fb9374f12f241b0931b9685b57d5c7cf29042f79dfd8df42b72e7ef2074e84a
MD5 1a5c21eda6a0022c2809e133c5891459
SHA1 f26f12f3ccf56cf0c5abf816ab93af4501258962
SHA512 27b6cbb7e84b57168552c8dd6b655987cc7f19f2d92cc1d9e34b41ad649f96e32de4e29161d49e099519b4864eda9806913092db3d1d8032ed764273a8672a07
SSDEEP 384:zPXJxX5bmsK+o03oXF4H50QcuS5Hc1x5hnc6Q2nTwMfayP:zP/5bmsKi3oXa50QWpsNnc6QkTLSk
TLSH
T102A2CF2E7360BEE04F2C1586D954EE8F29AB1C5A91B3C0DD40457F791AF028F860A7BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 20KB
SHA256 802a0eb015f63351b342dc4b2db12ba1dcbf7bcb002c854d95e16ea734ccbe45
MD5 649de541c10c6d06d48895acf3b5d639
SHA1 f7364cab593b1082fbbbbe7915cf87e523414e31
SHA512 1390aa0c7917fd989f47b6774a5db2728a61c012f72c205922139bf62aa50ef704a24dd96898b4e0bd12d577f4e1ae0e3fc80b25c92332e053dd5821cb736f62
SSDEEP 384:uBQ0tA+o03oXF4l6PRIy0ocu6bzM1wQhQcIQ2vqw9gulyM:u2AAi3oXzIy0oGv8VQcIQGqU5X
TLSH
T1FD92C02BB364B9E44F6C0986E850AF8F29DE9C5ED17681D980417B591EF028F830B77C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 20KB
SHA256 caa416e01ce1908a4f7855ebf164c082a2159b3ed4f70612cac65b5f4f22a64a
MD5 f89169da49c21ea1e84ef95fc425d03c
SHA1 ac818d965f36b8f724b54448f2aa2c61ddd22375
SHA512 96f59a4ae2738edc75970ed388c3480075abd19ff762e726dbb5de59db66ec76dbf820f72d535dca24f189313f7f7d763341bdc3fd46b875969d89e00b05fdff
SSDEEP 384:0BXG0+o03oXF40gy0ocut7zM1+9hDcIQ2XswMfqyD:0Y0i3oX9gy0oRP82DcIQ4sLCM
TLSH
T13D92D02EB364B9E14F7C1982E854AF8F29EE5C5A917285D984057B581DF024F830A77C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.baklz4
Size 25KB
SHA256 ac780bc5b862bec55bde02f0d5ba256f8469cb4100dda24fc85a9c3d2d67453e
MD5 6cfa66046bf0b7dc64d02ea4b950bd13
SHA1 ef691059106b762c31fa710b7c7b4fe7ccb2d4c1
SHA512 ddef1d02fe5d02ac0c1c16e6b58e6ab66b60c420e79cb4d4040f77813a7cc1d4b0b2bd376927068efbd9a072543a826210b49d0db4d95a20aec472ad1ec81073
SSDEEP 384:PBQ0iA+o03oXF4TXcRFLer0a45yAP20icu6VtOkM1Cthvc+Q2PewMfulik:P2zAi3oXqrYP20iGVr8kvc+QmeL8f
TLSH
T1A6C2E1276314BAE40B9C2686F4516E8F5DBB2C5AD176C5CE8001BB191AF028AC30F3F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{cda1021c-04be-41ee-8fb5-9dbcfe0f67da}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\storage\default\https+++www.youtube.com\cache\morgue\218\{cda1021c-04be-41ee-8fb5-9dbcfe0f67da}.final
Size 192B
SHA256 04cae3c7b208fc55b25763913d0bbdc99232942086efdf705f2a27764be6f5ee
MD5 2a252393b98be6348c4ba18003cc3471
SHA1 40f75302fcbe4a8ac2e33a8d9daf801abc2a9598
SHA512 07af4a7b0d10f1b5e1fe0877b21abc98483d78797608a1763cfb71e25559fdce10d20f03c16f4284d7ae7ab90266f45240425e3a264de9525ec1657345b85198
TLSH
T113C0225846A8EE3620A3CB3CC827E2820A3B831000498484E6F94A540C8BE850129A01
MD5 SHA1 SHA512 TLSH

Submit Download

2232182701SeesravbiacteaWDosrgk.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\storage\default\https+++www.youtube.com\idb\2232182701SeesravbiacteaWDosrgk.sqlite
Size 48KB
SHA256 7cf8ec17828453a8b2f4b52837a17091e7379ebfea399d5fe2b176e7784d69cc
MD5 885a288f2c662ef2181f8310def827bf
SHA1 9d626b1793b7ed5f3b4f7f2c18c873453d05d548
SHA512 e06f92757e0b49b640c8935b01573b2c7ce12ca2ede6904f412d6d92efab79c7237879824c304a35ae49cc4da3de166966ef49ff947c7a7235ff6081c2b39fe9
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyErs:Oa16S6CKnqlizbxV+2xVeU7X2B0rs
TLSH
T1D223708E3F07E511C53AF0B178A08D51BC5E321D07222AD579D0DAE4C8F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.4MB
SHA256 ad5af9680dbc1845e3da1cdceccd3f9a3b281157c04421ae1208b205589090b5
MD5 abd83ad99468e8d4d2a057f0e8681bff
SHA1 af22610a1981f7d5cf33ae4ee1af8fd8f202d427
SHA512 0ce63d81bcf2818baa44b42c82eaa7fd829cb21fd93b36d466e49407a503de71093a486421462e9143dd8526aebed093cc35b4ad027d7eb32c3037cbfa4c0a25
SSDEEP 49152:ritE/4aY2u6TZ64ux0QGvFrhA1aVwag4W1CxUtxR5ISlEqXbg0vaSZPUZg4WXAsS:WIu6TZxQ0QGvFrS1
TLSH
T14A764BE420E19253F38644B3718993FB21EFC01C6036CF48579496EAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaGXSetup.5qJutYLR.exe.part

Path C:\Users\Admin\Downloads\OperaGXSetup.5qJutYLR.exe.part
Size 3.9MB
SHA256 06bdd0ec85a4060351362b4dd343202ccfe949dfeba61b95be379704a92df648
MD5 aee5cdba6a2f974c2e43b2e3fabf9b08
SHA1 c8b0bffd6ebf01a43d46b1cd8e70c5555db47532
SHA512 773bbd11db3b9ad7b4abe3237efbe5bec443bf324f52bb3de1445a85b83dd8ea3310dbc868a49e2bd9e0da8c9c8495a886daaf85861204edea574dc4947ad862
SSDEEP 98304:bAqrJMO1+ViWeJ7xTS3dZbX5mADes7EJcb3v2+U:DJMO1+V6JcHVLrEJcb3v2+U
TLSH
T1B71633127BC1D8F1EAD336314FA8FB28457DB9690F366A5B3388592D9F300819636F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads