725654fd5fce3659e503058930eca78677607aad68a55d07541094f4d3c10685

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 21:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Horizontal-Lockup-Grid-Script/Horizontal Lockup Grid.js
Size 3KB
Sample260930-1cldfaaf94
SHA256 725654fd5fce3659e503058930eca78677607aad68a55d07541094f4d3c10685
MD5 dd5bbc3df3fbfd84fa229c5a215d63d0
SHA1 85375b8f39b97e1644c0bbe5d70d4e7bf340cc8e
SHA512 09152b0bb8535055e612f46103d71c3bd05acc817be700ed085e06dce6e51ac657576d741cce5ab755d12e2305559e5f27eb0cec06dba55157aa3e85ebd5619f
TLSH
T14B717EC6DE774F5E2625CE595831743EF589AF740B08A26CF02A7C4A1FADA548CE83C1
MD5 SHA1 SHA512 TLSH

Score

6^/10

execution persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5356	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5356	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4020	firefox.exe
Token: SeDebugPrivilege	4020	firefox.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
4020	firefox.exe
4020	firefox.exe
4020	firefox.exe
4020	firefox.exe
4020	firefox.exe
4020	firefox.exe
5356	vlc.exe
5356	vlc.exe
5356	vlc.exe
5356	vlc.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
5356	vlc.exe
5356	vlc.exe
5356	vlc.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4020	firefox.exe
5356	vlc.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 4020	1988	firefox.exe	110
PID 1988 wrote to memory of 4020	1988	firefox.exe	110
PID 4020 wrote to memory of 1228	4020	firefox.exe	111
PID 4020 wrote to memory of 1228	4020	firefox.exe	111
PID 4020 wrote to memory of 1228	4020	firefox.exe	111
PID 4020 wrote to memory of 3708	4020	firefox.exe	112
PID 4020 wrote to memory of 3708	4020	firefox.exe	112
PID 4020 wrote to memory of 3708	4020	firefox.exe	112
PID 4020 wrote to memory of 3708	4020	firefox.exe	112
PID 4020 wrote to memory of 4768	4020	firefox.exe	113
PID 4020 wrote to memory of 4768	4020	firefox.exe	113
PID 4020 wrote to memory of 4768	4020	firefox.exe	113
PID 4020 wrote to memory of 4768	4020	firefox.exe	113
PID 4020 wrote to memory of 4736	4020	firefox.exe	114
PID 4020 wrote to memory of 4736	4020	firefox.exe	114
PID 4020 wrote to memory of 4736	4020	firefox.exe	114
PID 4020 wrote to memory of 4292	4020	firefox.exe	115
PID 4020 wrote to memory of 4292	4020	firefox.exe	115
PID 4020 wrote to memory of 4292	4020	firefox.exe	115
PID 4020 wrote to memory of 4292	4020	firefox.exe	115
PID 4020 wrote to memory of 5420	4020	firefox.exe	116
PID 4020 wrote to memory of 5420	4020	firefox.exe	116
PID 4020 wrote to memory of 5420	4020	firefox.exe	116
PID 4020 wrote to memory of 5420	4020	firefox.exe	116
PID 4020 wrote to memory of 5904	4020	firefox.exe	117
PID 4020 wrote to memory of 5904	4020	firefox.exe	117
PID 4020 wrote to memory of 5904	4020	firefox.exe	117
PID 4020 wrote to memory of 5904	4020	firefox.exe	117
PID 4020 wrote to memory of 5996	4020	firefox.exe	118
PID 4020 wrote to memory of 5996	4020	firefox.exe	118
PID 4020 wrote to memory of 5996	4020	firefox.exe	118
PID 4020 wrote to memory of 5996	4020	firefox.exe	118
PID 4020 wrote to memory of 6004	4020	firefox.exe	119
PID 4020 wrote to memory of 6004	4020	firefox.exe	119
PID 4020 wrote to memory of 6004	4020	firefox.exe	119
PID 4020 wrote to memory of 6004	4020	firefox.exe	119

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Horizontal-Lockup-Grid-Script\Horizontal Lockup Grid.js"
1⤵
PID:4832

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3376

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4020
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {a4eeed7e-7c0b-4032-b132-750cf6d9822c} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {78ba1a47-3aae-4cce-abe5-7e1f81178d9a} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3832 -prefsLen 27276 -prefMapHandle 3836 -prefMapSize 270279 -jsInitHandle 3840 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3848 -initialChannelId {82c074fa-561a-45ed-9477-6958f85ae0b0} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4768
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3992 -prefsLen 27276 -prefMapHandle 3996 -prefMapSize 270279 -ipcHandle 3144 -initialChannelId {bdb904ec-b9aa-403d-b9e0-c395391750aa} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4340 -prefsLen 34775 -prefMapHandle 4344 -prefMapSize 270279 -jsInitHandle 4348 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4356 -initialChannelId {a1db078c-3785-468b-a311-62a80732d419} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4292
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4784 -prefsLen 34878 -prefMapHandle 4788 -prefMapSize 270279 -ipcHandle 4796 -initialChannelId {9cc88c97-8cc2-4d7b-a797-b503ee065a01} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5036 -prefsLen 32952 -prefMapHandle 5040 -prefMapSize 270279 -jsInitHandle 5044 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5052 -initialChannelId {cf043140-da70-47fd-899b-73d21d02827e} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5208 -prefsLen 32952 -prefMapHandle 5204 -prefMapSize 270279 -jsInitHandle 5200 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5328 -initialChannelId {6e13c37b-b525-4efe-9915-39f3054295c8} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5496 -prefsLen 32952 -prefMapHandle 5500 -prefMapSize 270279 -jsInitHandle 5504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5336 -initialChannelId {0efc9c48-919c-4708-a355-d56a47fbf29d} -parentPid 4020 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4020" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6004

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\JoinWait.3g2"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
Size 16KB
SHA256 0d836418391a3a14db23e9e4b6ad7bc0495885a60623f581d35d07c41ecc389c
MD5 2023c8323c7d0ec5f0b425cd126653c0
SHA1 354942014b089bcb333a799944d7ffa2236af186
SHA512 082f06e9a7b1ccc26959d4eade64fbfb3df92ef184a1bc87a63abc88acfe65b9af65abe9d71bdd30e896ec7157e0b973b92f0d37ea8424fd6fd6988dd3591bef
SSDEEP 384:HalwSiO024Y0WTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA3L+tS+e:6l8ZY0WTToXJWTTogB7S/AmVAf+hRM2z
TLSH
T11F728D7D8F413CAC275790E8C8B943558D18B3A7DFB5C06D269C3E0DC984A2A71F985E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c25fee45-4ad8-4119-aba9-784a78cc6db0.zip

Path C:\Users\Admin\AppData\Local\Temp\c25fee45-4ad8-4119-aba9-784a78cc6db0.zip
Size 3.8MB
SHA256 81ed0b8466c88dc2d17068aa8269ff197f7c5973e7020f2eea84fea39268c858
MD5 4cdf372691da5b00da0b6f8bb3b4167e
SHA1 c2ea5863a1eee151def01a5c918890246ba70005
SHA512 77a3541f2ff883868dc50412f27b37b5a603bbb737f79b4397cde3c7a3df5fffaa91ac04a403081091a54278915c0ac0991e34027976adaebe65521e5029cbf1
SSDEEP 49152:p9RCcc8jP/MEhzodnM0ogC0ntM9vjIKfOf2bd0QBgc124G5rpew8gOW9o+uDmHMG:p/Ccsdb60M9XN6QBg824we7/SHMinv
TLSH
T13B06F175D69F1609C9FF83BB850C2FC2884C4FA68054A96BFB6AB9715CA3DE21F44C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 f8f60342d5bab3633a1c2d399ddfdb91161b6800a628e28dffc640ad4261c269
MD5 7ae8d521b43deae27c451893f2a446b5
SHA1 81647c1989794c5d3f37977f5969b7ec600cfa8f
SHA512 6b85342741b166b3864b13b3d370ffd49c56409bdab908ea6fa520540ff833da88b40c4511f36605436eba65ac446be43d3cdab07d22f119113fd02a4405e656
SSDEEP 768:ZVdCAXTQ6YjOKGcmhuXDrfKD4+Xm0cm3yiUb3bQbib9bWbVb/b5bT/X7T3eRE/:7YAXTQ6Yjjfy/X7T3eY
TLSH
T12103EE44EB1A953FD46812BBDCA207002F78F889591A2F673A5C64786C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 36KB
SHA256 c9332186c1cef37963989512bea411d27d5430586f891f6a119579c60104a5e7
MD5 6c305dfa57602800bdf065f3fed8b21f
SHA1 f291a67b399cc068f1c7bec3c46206b2bf1213fb
SHA512 b9a607a461fc03967ba808be5fc2d8350db132ef4c0346e6aee4a06eda7024436100a31c41e41dc74152f5acf7cfa9e4da417425904921c9fd3576242fb199e5
SSDEEP 768:xAXTQ6YjOKGcmhuXDrfKD4+Xm0cm3yiUb3bQbib9bWbVb/b5bT/X7T3AVdcRE/:xAXTQ6Yjjfy/X7T3W+Y
TLSH
T11C03EE44EB1A953FD46812BBDCA207002F78F889591A2F673A5C64786C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 f079541d6cda7b11c687478aa7199486a1e3bfa6c0c90db4bb268200c7e7f877
MD5 a90d72f4fc85d4a9d5290d3774a5838f
SHA1 5da5dded05cadfbd52cb0bca6f51fd0d4b8257f7
SHA512 c5f4d168d7f80b58fde541fe16d3af73383c213862872eb5affc379e5a8e7b12d69cba3a09e4f1937aaf3ef521f93ade17fb6c8821e10bf57cfd4b32f69ac136
SSDEEP 96:hESdF95/7bkW60rcPyUR6rWZuFRQFlFLF+JFu/dd66JozGzgClKtmc0d/UK:hEOv5zbowCyjCma1d66JozGzgCl6mc0d
TLSH
T108B1DD28F229863FC449423ACCA21B400E76388BA85E7F1536EC744D2D673CD7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 8cae3e109ab2987dc7222409348612cfd20161e99681e1cd6894cbeb5c173767
MD5 f69aaaf871e66df92980f28c6a2b7026
SHA1 45b3b1a8acbafd7750a3e45505c1896f249f8283
SHA512 678a6f11183f2a65e2afcd04ff0204975b08948518b62d72e09535500fd65e691db7eb4b9bbbe23b21050aa457c7281fbcc6e0f064bcc8db78fd57368161e5c5
SSDEEP 192:Oa1d66JozGzgCl6mc0dTzSL7SlOv5zbowZjidShyjGvSvMN:OEd66JozGzgC1jVwbbowZ+d2yjWh
TLSH
T18ED1F064F628867FC408123BCCA21F404F39398AA84E3F15319C651C2D5B6DE7B8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
Size 1KB
SHA256 a72ac0c1d024c78a4d918a59ccdc10c1b10240461019eacb470420e8faa50677
MD5 8357d9bf575376f615401f07d5e36dcf
SHA1 e46059c61f66f36a3981d2b2e993bcce9c5a662b
SHA512 3b87a3570fa74e9cb82cf5568b6f8a72fe600ab05032b1dbf4f04acd5d2195744049684cca732bdbd9377ff745d94b893e4bcb8e34f2c00b78cc15ec5d0caa05
TLSH
T1DF21675D3EB84D6AADC7FAAC7440868E97968A1B04872D431D12DFCCCDC1AD931BB439
MD5 SHA1 SHA512 TLSH

Submit Download

2b649399-2b00-4fdb-88df-e0e8e8d49d65

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\2b649399-2b00-4fdb-88df-e0e8e8d49d65
Size 886B
SHA256 1f58f872e806e30a86a5727bb032f4769d0d95813ad5999536545ab85cefb752
MD5 22a598f7bbed7f78ffbe247d91f93c11
SHA1 86b93a264a65326a132f0f81015248f434855e62
SHA512 9b4f6a8c6e48d28de4bbf3e10a0db655e5c0f37f552c3c4116547108673a305cd5bd35e4e6f751c6376f7dc2a1e96b5a6c5a46e94a03c0f390797fd86080d9b2
TLSH
T1841100419770B8B3CC799257C4A1774247E03513D0CA8A083EA59E180DFE51EA76A20B
MD5 SHA1 SHA512 TLSH

Submit Download

57820882-5900-471e-8d1f-7333a1e42cc0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\57820882-5900-471e-8d1f-7333a1e42cc0
Size 16KB
SHA256 d72d6bb7b63cec41dcb4bd42decccf1b32a9602cae4d72973c20e8ca5cde135b
MD5 84200f2ee1c470015b8bccfb5d6aa07b
SHA1 f5aa509bcdbc9fd5b0b3028268344a35daecde97
SHA512 a41f28637dacac002db2900614703b8fc4ffe95770e706bd71b91f1cda2da346eb6d39f9c9949592c1635f837eea6a406515f8ec1ab44564c38fb49a8df72da3
SSDEEP 192:2Zh6CT1XB6MUcULSY1++JBJkqiJ1BymembDZzV4eQADdizxXcT9KGbPeWI3MH4Ka:mc8teUDbD9CeQADdilXcRKGbm4Hqhh
TLSH
T17972E9566820557B8691E369D4F8BFC3E6F528CF8C418FCA9BE47D082DDE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7462a61c-1e07-4b1e-ba2c-b1009aad2c52

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\7462a61c-1e07-4b1e-ba2c-b1009aad2c52
Size 883B
SHA256 17b72c1467afe067c387e4ef446dfeb7731d74139efe613906c0268d21953477
MD5 62572329aa3ee05264b954d0bea68355
SHA1 a47f43fe0bb7da79ad085ca333d936b81accbc5e
SHA512 0f5d0ae378c5a4a11f4aae2a7a92b918d44df07548489098bc3c92ba894df0d03cde8d15bfc63f7636ea6152190a6067d19a105a7bb67aca820304e05478928b
TLSH
T117112741D77075B3CC7D914BC992370197E47513C0CA95043EB48E180CBF91E97AA70B
MD5 SHA1 SHA512 TLSH

Submit Download

bfd6bddb-b172-43fc-bcc8-bd0f76bdd260

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\bfd6bddb-b172-43fc-bcc8-bd0f76bdd260
Size 235B
SHA256 e66a8f60e295d109d82b3672a7b6d92a1b9b0a2b9eabce54b67f2dae1d2fb704
MD5 06e0574a6c293fac3cd744f3ee85f88a
SHA1 80cfa4c0e8ce89b2a6d39edb51826ab980625a29
SHA512 b149aaeda8616c11374e9db2e7763f7b6f042f7b4a0b0ffdccfea46dba3a3227c376aaee56fbaf36a8c0bf79b64c8fc6806bfd9e1beb94ec73e8fcc65f2a99fe
TLSH
T163D0A78154A8775D88145F16B4E0B9C6345A4C375469AC20D6914574EAB9AC441A292A
MD5 SHA1 SHA512 TLSH

Submit Download

d1b0544d-e62c-4bbd-bc05-c58ccd513780

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\d1b0544d-e62c-4bbd-bc05-c58ccd513780
Size 235B
SHA256 e6112d4f94db28ac8e96e482425fe29b5b608f49197e577505154aa9a30b093e
MD5 099ebebe7f762707f5b946fda8a69064
SHA1 dc12139f6d75f4fb3d12012f15e444037e9772f0
SHA512 3b979f90835e9607d85fc254c545fde845d412dbf258b24a1ec29f55edc53f22f0bb28731373ad3e24dc199728491d9f6c81fa82eab9c047adc2421b0dc00509
TLSH
T136D097A4289827AC08201F02B0F17EC231894C3360A8A85086A04078CEB9ACA5321C06
MD5 SHA1 SHA512 TLSH

Submit Download

f8de5904-3375-4412-8f99-9d7374eeb675

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\f8de5904-3375-4412-8f99-9d7374eeb675
Size 2KB
SHA256 c9b50428777b9d82fc477084532bb9e124abfbd85430eca4d1329de5777a0f67
MD5 a0be9a66d67d78b0f0d0e91801d00a56
SHA1 20997a201512743238310a8f241aed3088bd559b
SHA512 27b47da5b97394a7ab06ece09f30a4df1701fe93a1fbc589eb4b4beaf3b235278511247ae9e927e4d408df276545196ee0418ef8d286cf57429d72f02a2623ec
TLSH
T1EC41235C76B84C7798DBF55C9481238E5B704E8310862C832E52DF4C8DB2E5D276A82B
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extensions.json
Size 16KB
SHA256 5a7507c633db4c32e7c3bb5f68d10d7d3ca80ab57f65d0184728c9617e6b74b4
MD5 ac6e75f307a612cd5d8cd8d7d7d90e91
SHA1 e5614ec743f006c7c7e8625d2ab43c50cd601aad
SHA512 856370aefb0d915463121812cdee694ba8907fe0c9fc8a3ad8242c957a862cb604326c748492fd10063cf2b64a20c742b0630ff8c736efd33449f44b22b6d8d4
SSDEEP 384:6kI4vuUmldvr8dhWC94zn96o5L4HLL4PNL4HZL4HAL4Hup4hM:9I4WRfYXL4x62434l4x4C424O
TLSH
T13A72431545048EB8294FA79BAA367E02C37D473B60845C78F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs-1.js
Size 7KB
SHA256 cbcbf904d595c07a0d30c8598917b58f8316bb48bad2d67831095906bdbff8f1
MD5 0fdf426ec5e9c1ab2b92fa268db54045
SHA1 7a6be37237556ac3724ba326116d8c30674fb2e5
SHA512 ff0ce8c495f11a309a5a059ac0be433dd78254af9023008124a3cc899e1da9b3615d90c0a145cd0ec2652fcb7ddcb1c9982c2752a5063fd56d6a30454aae982c
SSDEEP 96:xH6pTUBqGqgXfanqObzSFSSlSdv9junzRHytUyChBw88Lc8L4cnpVYpS:k1RgXfanq3SS19ytOBw88BQS
TLSH
T176F11F78A908CF7F64B6766CAC248D315AA2413BBABF68D750B954C4050CF3841F9AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs-1.js
Size 12KB
SHA256 4e329ef65f573cde63bc98cc40149800b21c0176ab974768a870fb7a977a27e4
MD5 9d77057e6c5b9694689905f865a7ba28
SHA1 27a1cea2951e2c898745ffff86a905ffb49e8647
SHA512 f29e80fc796766db6abfe127d2f6fd5d493ec624fa3c0c6d2891eb1ca2a857ba0fb2f3ec1ddb0e54f57e160f2285ccb0782a9244657e6f08f5b643424afa948c
SSDEEP 192:O1RgXfanq3SS1XLRqt1HTOBw88IwSO/ofFQS:BXlRPwn0B
TLSH
T15E42BDBC6A458B3F20F6327DAC218E611B9241277AFFBCD645B895C1444CF2841F6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 d4c083222d24bd479e12d40a840dceb1ed973d7b227b867d2ec17ec6db1dd6f9
MD5 d9253df0455dadc5816a31a8d4693286
SHA1 fba0f81db25cfd6aa410bd519bd744f76420ab42
SHA512 80380bac055e8281bc28dfb3baf20a4fd25de09d8e476a393308fa593403a168b798fde026bf55569e9d34e9db768bef5ce846cc3518e3a87f645ace0d3b6045
SSDEEP 96:xH6UTUBqGqgXf6WJ1zSITSSlSdv9j2nzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6WJBTSSt9ytPBw88EpS
TLSH
T1F8E12D7894088B6F64B6776CAC6888316AB2413BBBBF68D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 4e75fbbcda32393581b1fa44ab3f174eac6a450d6c5f27b7fbaecc5b947efc6a
MD5 40f1e1267909a096cee51fe3d3dee02b
SHA1 c59d073838a1a142db396279f0e3cd466a645abc
SHA512 566083e4fb105664c032e75c0ea61f7ae7abbdeaea41e9e7a388ca6ad8973e1be02c9f8d2beb17e337faa36563bc389a7a34be771e94aeda31d5d6b0b658f2c6
SSDEEP 96:xH6UTUBqGqgXf6nqObzSFSSlSdv9junzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6nq3SS19ytPBw88EpS
TLSH
T1CBE12E7895088F7F64B6776CAC6888316AB2413BBBBF28D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 9c9c4b83ebce1713c20753e6bb611d7c1caca5cf08e99dfc7e20440375ec4a49
MD5 08156e9e01925ffaa9c31cf088c674c4
SHA1 9daba47e37e110bd3a77c7439cc354aff625145b
SHA512 42c84550db2f52ad5957db323e409af0b4bedadcfe31bae127d61f248b8a08fdb5931f1725ed74318a8e988cc5e403e43bde08825a422a1db2d09e0fed837705
SSDEEP 96:xH6UTUBqGqgXf6nq1zSFSSlSdv9junzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6nqESS19ytPBw88EpS
TLSH
T1FBE11E7895088B6F64B6776CAC6888316AB2413BBBBF28D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 99c1a8d7326290e1a14413ae5bc2dc1c424fc2ebb151f9e92c64624cd4b9eb0d
MD5 509157183e94a1da30ea786944a24f24
SHA1 834a90719bc8ac504925aef07aac09019271e507
SHA512 25c647bc143ddb2cb066c10aa8ca11039551e13deb06390eb4656c1a6ec886846a2231418ab57a667bf8b81cf180328abe3935b7a94197c878bd7fd70a347cd7
TLSH
T13921EAD6FFAEA8E265904284D0CB2EF5C2DD60418A3458F1F81F5505494C49EB25AB89
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5356-382-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-426-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-355-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-356-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-357-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-358-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-359-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-361-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-362-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-360-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-363-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-364-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-365-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-367-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-368-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-366-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-369-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-370-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-371-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-372-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-373-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-374-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-376-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-375-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-377-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-379-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-381-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-380-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-353-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-383-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-378-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-384-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-385-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-386-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-394-0x00007FFBB3370000-0x00007FFBB3381000-memory.dmp

Download

memory/5356-400-0x00007FFBB2F20000-0x00007FFBB2F31000-memory.dmp

Download

memory/5356-405-0x00007FFBB2C10000-0x00007FFBB2C51000-memory.dmp

Download

memory/5356-420-0x00007FFBA86E0000-0x00007FFBA8925000-memory.dmp

Download

memory/5356-413-0x00007FFBB1220000-0x00007FFBB142B000-memory.dmp

Download

memory/5356-419-0x00007FFBB1010000-0x00007FFBB1022000-memory.dmp

Download

memory/5356-418-0x00007FFBB1030000-0x00007FFBB104B000-memory.dmp

Download

memory/5356-354-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-424-0x00007FFBB3DB0000-0x00007FFBB3DE4000-memory.dmp

Download

memory/5356-423-0x00007FF68F9C0000-0x00007FF68FAB8000-memory.dmp

Download

memory/5356-417-0x00007FFBB1050000-0x00007FFBB10FB000-memory.dmp

Download

memory/5356-416-0x00007FFBB1100000-0x00007FFBB1125000-memory.dmp

Download

memory/5356-415-0x00007FFBB1130000-0x00007FFBB117F000-memory.dmp

Download

memory/5356-414-0x00007FFBB1180000-0x00007FFBB1218000-memory.dmp

Download

memory/5356-412-0x00007FFBB1430000-0x00007FFBB1441000-memory.dmp

Download

memory/5356-411-0x00007FFBB1450000-0x00007FFBB1461000-memory.dmp

Download

memory/5356-410-0x00007FFBB1470000-0x00007FFBB148A000-memory.dmp

Download

memory/5356-409-0x00007FFBB1800000-0x00007FFBB182D000-memory.dmp

Download

memory/5356-408-0x00007FFBB2100000-0x00007FFBB2126000-memory.dmp

Download

memory/5356-407-0x00007FFBB2B40000-0x00007FFBB2B58000-memory.dmp

Download

memory/5356-406-0x00007FFBB2B60000-0x00007FFBB2B8F000-memory.dmp

Download

memory/5356-404-0x00007FFBB2C60000-0x00007FFBB2D43000-memory.dmp

Download

memory/5356-403-0x00007FFBB2D50000-0x00007FFBB2E38000-memory.dmp

Download

memory/5356-402-0x00007FFBB1490000-0x00007FFBB1726000-memory.dmp

Download

memory/5356-401-0x00007FFBB2E40000-0x00007FFBB2F12000-memory.dmp

Download

memory/5356-398-0x00007FFBB2F60000-0x00007FFBB32F0000-memory.dmp

Download

memory/5356-399-0x00007FFBB2F40000-0x00007FFBB2F54000-memory.dmp

Download

memory/5356-397-0x00007FFBB32F0000-0x00007FFBB331B000-memory.dmp

Download

memory/5356-392-0x00007FFBB3DB0000-0x00007FFBB3DE4000-memory.dmp

Download

memory/5356-396-0x00007FFBB3320000-0x00007FFBB3342000-memory.dmp

Download

memory/5356-395-0x00007FFBB3350000-0x00007FFBB3369000-memory.dmp

Download

memory/5356-387-0x00007FF68F9C0000-0x00007FF68FAB8000-memory.dmp

Download

memory/5356-393-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-352-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-351-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-350-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-349-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-348-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-347-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-346-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-345-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-344-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-343-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-342-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-341-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-340-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-339-0x00007FFBB3AF0000-0x00007FFBB3DA6000-memory.dmp

Download

memory/5356-338-0x00007FFBB3D9D000-0x00007FFBB3D9F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads