e20b7ccb45c5d60e71c1a9fb22096cbad85148c4480382101b18255892a090d2

Analysis

user interaction
yes
max time kernel
900s
max time network
903s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/10/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-plain-1.txt
Size 1KB
Sample261002-w58bfsverd
SHA256 e20b7ccb45c5d60e71c1a9fb22096cbad85148c4480382101b18255892a090d2
MD5 d99ccc8a73e1fd39ec7c61cbd2934f49
SHA1 da0f385a8bcbb3290234b156f719c49652154c91
SHA512 1f1b01791b0ac1a0bb06fd839e2a3e02abe6efc560d0f2f351328ec829a453ea84a4136dc8be16e8f7ce0abe8fb2c38adb90b91fd3a3a89ffc405b0e7c1486d1
TLSH
T19F3161AE038675050268B2747D43670ED33128CFCE24DAE0B22D5B076FA1973974BBD6
MD5 SHA1 SHA512 TLSH

Score

6^/10

persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Checks processor information in registry 2 TTPs 26 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4003929486-1233426720-3594832368-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4640	firefox.exe
Token: SeDebugPrivilege	4640	firefox.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe
4640	firefox.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 652 wrote to memory of 4640	652	firefox.exe	99
PID 652 wrote to memory of 4640	652	firefox.exe	99
PID 4640 wrote to memory of 4488	4640	firefox.exe	100
PID 4640 wrote to memory of 4488	4640	firefox.exe	100
PID 4640 wrote to memory of 4488	4640	firefox.exe	100
PID 4640 wrote to memory of 2276	4640	firefox.exe	101
PID 4640 wrote to memory of 2276	4640	firefox.exe	101
PID 4640 wrote to memory of 2276	4640	firefox.exe	101
PID 4640 wrote to memory of 2276	4640	firefox.exe	101
PID 4640 wrote to memory of 2596	4640	firefox.exe	102
PID 4640 wrote to memory of 2596	4640	firefox.exe	102
PID 4640 wrote to memory of 2596	4640	firefox.exe	102
PID 4640 wrote to memory of 2596	4640	firefox.exe	102
PID 4640 wrote to memory of 2792	4640	firefox.exe	103
PID 4640 wrote to memory of 2792	4640	firefox.exe	103
PID 4640 wrote to memory of 2792	4640	firefox.exe	103
PID 4640 wrote to memory of 1280	4640	firefox.exe	104
PID 4640 wrote to memory of 1280	4640	firefox.exe	104
PID 4640 wrote to memory of 1280	4640	firefox.exe	104
PID 4640 wrote to memory of 1280	4640	firefox.exe	104
PID 4640 wrote to memory of 3144	4640	firefox.exe	105
PID 4640 wrote to memory of 3144	4640	firefox.exe	105
PID 4640 wrote to memory of 3144	4640	firefox.exe	105
PID 4640 wrote to memory of 3144	4640	firefox.exe	105
PID 4640 wrote to memory of 3760	4640	firefox.exe	106
PID 4640 wrote to memory of 3760	4640	firefox.exe	106
PID 4640 wrote to memory of 3760	4640	firefox.exe	106
PID 4640 wrote to memory of 3760	4640	firefox.exe	106
PID 4640 wrote to memory of 3956	4640	firefox.exe	107
PID 4640 wrote to memory of 3956	4640	firefox.exe	107
PID 4640 wrote to memory of 3956	4640	firefox.exe	107
PID 4640 wrote to memory of 3956	4640	firefox.exe	107
PID 4640 wrote to memory of 1848	4640	firefox.exe	108
PID 4640 wrote to memory of 1848	4640	firefox.exe	108
PID 4640 wrote to memory of 1848	4640	firefox.exe	108
PID 4640 wrote to memory of 1848	4640	firefox.exe	108
PID 4640 wrote to memory of 4956	4640	firefox.exe	109
PID 4640 wrote to memory of 4956	4640	firefox.exe	109
PID 4640 wrote to memory of 4956	4640	firefox.exe	109
PID 4640 wrote to memory of 4956	4640	firefox.exe	109
PID 4640 wrote to memory of 2504	4640	firefox.exe	110
PID 4640 wrote to memory of 2504	4640	firefox.exe	110
PID 4640 wrote to memory of 2504	4640	firefox.exe	110
PID 4640 wrote to memory of 2504	4640	firefox.exe	110
PID 4640 wrote to memory of 3512	4640	firefox.exe	111
PID 4640 wrote to memory of 3512	4640	firefox.exe	111
PID 4640 wrote to memory of 3512	4640	firefox.exe	111
PID 4640 wrote to memory of 3512	4640	firefox.exe	111
PID 4640 wrote to memory of 3432	4640	firefox.exe	112
PID 4640 wrote to memory of 3432	4640	firefox.exe	112
PID 4640 wrote to memory of 3432	4640	firefox.exe	112
PID 4640 wrote to memory of 3432	4640	firefox.exe	112

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\email-plain-1.txt
1⤵
PID:1408

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:652
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2008 -prefsLen 27100 -prefMapHandle 2012 -prefMapSize 270279 -ipcHandle 2076 -initialChannelId {1e5f906e-c3c9-4578-9f2e-df54c3b4759f} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4488
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27136 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {41c1e6f8-27ae-4905-8916-661a17050644} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2276
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3748 -prefsLen 27326 -prefMapHandle 3752 -prefMapSize 270279 -jsInitHandle 3756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3764 -initialChannelId {18907827-1531-43e9-85d8-ed5552513221} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3912 -prefsLen 27326 -prefMapHandle 3916 -prefMapSize 270279 -ipcHandle 3940 -initialChannelId {8986dd06-784a-4d23-80f3-ff9fc470494a} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2792
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4404 -prefsLen 34825 -prefMapHandle 4408 -prefMapSize 270279 -jsInitHandle 4412 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4380 -initialChannelId {0bee9ff1-64eb-4194-b6fd-9fe381d17426} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5004 -prefsLen 35013 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 4900 -initialChannelId {cb37ed84-15c4-42fc-9158-c8ba835a0a5b} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5208 -prefsLen 32952 -prefMapHandle 5204 -prefMapSize 270279 -jsInitHandle 5200 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5240 -initialChannelId {5372725c-741f-46c4-ba91-016376846940} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5272 -prefsLen 32952 -prefMapHandle 5276 -prefMapSize 270279 -jsInitHandle 5280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5288 -initialChannelId {f48d13cf-f4c8-4c27-8f23-fb6974180853} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5512 -prefsLen 32952 -prefMapHandle 5508 -prefMapSize 270279 -jsInitHandle 5408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5204 -initialChannelId {8bbddd86-d249-409d-bdeb-a307813a0934} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:1848
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6304 -prefsLen 33073 -prefMapHandle 6308 -prefMapSize 270279 -jsInitHandle 6312 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4872 -initialChannelId {156cfa15-efc0-48a4-9e6a-1b2e5509ce03} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4552 -prefsLen 33113 -prefMapHandle 6532 -prefMapSize 270279 -jsInitHandle 6708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6616 -initialChannelId {dcf8922c-a9bf-48b4-81e5-33172b436079} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:2504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5484 -prefsLen 33113 -prefMapHandle 5488 -prefMapSize 270279 -jsInitHandle 5472 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5284 -initialChannelId {9596792e-963e-4f5d-b56f-2847d4997277} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:3512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6660 -prefsLen 33113 -prefMapHandle 5732 -prefMapSize 270279 -jsInitHandle 5404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6800 -initialChannelId {82a7fa87-0f2f-42bd-841f-bb3831adce59} -parentPid 4640 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4640" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\activity-stream.contile.json
Size 4KB
SHA256 aa8d4d4ef491629f5f2ea92c7413d8fc56a6dab0ae76eb39924dd62af181fec2
MD5 0272beffd4012333eb08a22edc85c770
SHA1 f34f8ca2fa55174d143d59e686e9d8bff59897e9
SHA512 d5d0671d45b41c627b9d7b7e2c5dca0dcd4d351a70039cc355d4412ed4a7482e1cdb3ff1da17d6d4f6580c35dc9685b80afc5a5d7d5973cf1111e41ac72e94ae
SSDEEP 96:TkkHMJN4omG3ckmD5BT+mRqapon4KYZo246DsJlz:/Mj/0k46mRqaO324wsJF
TLSH
T1ED91B82FD53C84921732B6E12D073AACF017B416DAF5DE6871A59C23D0AC7BD80DA848
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 a8520ed4607672f8332d3021a2cd9e318324806afc2cb13337a924b9c9bf8688
MD5 7e3ee959c646f30473c8fb621d84edd8
SHA1 9dfa14cf083db698549e0d2fc34c036314986f7b
SHA512 5168d760c81237441bbfc5cebaf0d1246f8dbc02cf15b47516e2cf435509fa477ea28fcb81c5e96e44123ab9ed4b925a1f467122a9fc73522bc98c5bd27c77ab
SSDEEP 768:qqyqySnrWtKbEkzRVTsi/K5190oFOH3ALsWJmdbdQ8OOrZ+G0a9:qRq9qMbEkzHTsqCcoFOXAEWG0a9
TLSH
T1CB7309A3E6B8B1FB0B9137D72C0FB99762D20295E34506DDFCE9C51C81CD664023A5B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20170

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\doomed\20170
Size 255KB
SHA256 6317a0b3e343ed4e5a6e7e3446212c7b53b577123d29380cbd553dd0d8717087
MD5 0291ca4b4321a4bf22018e3c0e51da07
SHA1 729b88bff1c287895e92b4a4881d33ac7026320c
SHA512 a94150dd7053583a07ff10a2b1168969932b39cb21f48cc52b3ad584ef9526260e63fae211132af3e7084e245c18ac5a9745d2d8003fd6f6c49bf77c3055b1c1
SSDEEP 1536:xYCYPs29umv9phVoIsbASPrrSlvkcIJoCXpllSx0S6mhNL79ZGlZCAyi6JMR4m6C:Q9umv9+SecooC5HSGS579cylMRI2Zj3b
TLSH
T1D344F6F7E6AC71FB075297DC2C0D72CF62AF4139DB5208DAF8688148C3C9A65107A799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20942

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\doomed\20942
Size 7KB
SHA256 0d8774b9f0ca57e30a7d1df1c22af9109fa28e9feb185714a5eadb4b08baab6c
MD5 bf51a451afa72dd640c6c0706628c7de
SHA1 268a9e45812f4851150e8151821e507a7dcaa3c7
SHA512 033a36ac2766d395333568cc22fd63a63cd205e08529e0eefc8efce60b4c7c9d686c0f064545189b72aa05cf1f2ecaf5bc3004bb8fc5c1b448926af28ba19848
SSDEEP 192:eWvsDxckSzVEWvsDxckSzcwM4HP+m65e3uOC+cdlTE1dlTEJ:0D2ODHB4tf347lTEXlTEJ
TLSH
T119F14CF3A804520D1DF28811D07A776E3E28B253AE2EA9FC241D3755D5C8BBFB1A15C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28000

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\doomed\28000
Size 7KB
SHA256 89bdb5cf8b2724def9688c39b7ca9373798695405ef6dfc78e177775fb53f1d5
MD5 555ecd8ba7d4682cc5b0954a51c65c68
SHA1 e06b407a747fe46147c979716e58c645fa2f629a
SHA512 43f9d1d77eeb2ff5a43427538580aa5af0d28d80a3e97e29fc1f8eac7f65e38bd8ce4e45705516bf0ed7e3aa259ee3a23376ef9dfa442e5022521870f27c260d
SSDEEP 192:xEWBWvsDxckSzVEWvsDxckSzcwM4HP+m65e3uOCKdBSTEadBSTEi:rLD2ODHB4tf34G8TEW8TEi
TLSH
T19DF14CF3A804550D1DF28921D47E676E2D287243AE2EE9FC242E3B64D1C8B7F71615C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8788

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\doomed\8788
Size 52B
SHA256 c5d76d47aeb02fb3596c4da4ac1acfdb530896becdfd30e045d37eca6589f923
MD5 a8e47a98052d0b0bbf8ef4d03fdf2277
SHA1 3964678741d461e370f98fe847d2fde33141e346
SHA512 2ad82800889a3e03ffcabec668b4e1491ca380f1fc9f5931350d2bcccdd2cf0b148f36713b2c9d61eb84dd37135d0dfc752390411e3a93cfee9c26713b6d28eb
TLSH
T1029002885793C510D41D8176090088B45421BD0144C05612749117D108922D20001010
MD5 SHA1 SHA512 TLSH

Submit Download

01EFD8AB91960CFB578F52B39D42A97815C7CCDE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\entries\01EFD8AB91960CFB578F52B39D42A97815C7CCDE
Size 357KB
SHA256 6b297d5fc1b2a8b83d2aecf40b8e3311da05406e8519e27f514511e14ca0bbdf
MD5 1740cf2bf847393d923564809c75ce0c
SHA1 20f65455d0e7eb00b6233b1061fe2a00f8ce56ef
SHA512 0f6de8fdca8cc057676bd6c91d36f765b3fcd1d13e67b47bc16fc0cfa773789da10a7d83248680f501904a72f0a91138c34959eccd1c9bae09f5f2c0a025481e
SSDEEP 6144:jgxSiMzLJ2EDV18L01IvoqGiG4mCvRB3h9JUrwxWD2O9aGaclLJ:Y02EvY01x7cmCvRBR78Rn99
TLSH
T1087423184F69C4870E00CA9D479FA5ECBA0335C35ED2EBED806F6198F1A166DE4620FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75299A637155C5048CC18D3F42B01F474D029096

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\entries\75299A637155C5048CC18D3F42B01F474D029096
Size 13KB
SHA256 27b07af452cb7d8cbd53cc6092a5f14c7b437e22a9dd44d7d8f33cab8666ef33
MD5 fd013f49addd985d6f7084adc591d487
SHA1 b6f1f5c1f9a5dc9e2b597d78489b9d014837aa08
SHA512 c05405a31b7737ab26da5400d431a9c1ac4004b784b75b013c7dd1e5cd0813d80978791019d83bc0611cfdc1292a3144356b5ba349d353320c09ff7df9dd6800
SSDEEP 384:9myQbcsTqK+xHSuMpTYD2ODHB4tf34BrTEorTEA:oGsTb+xHoTYD2ODh4tQ9TrTx
TLSH
T159529EB3AD0441491C72DD15D97E636A2D2572838E39A9FC301E3B9581CC7BF7AA0AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
Size 16KB
SHA256 ef3e3b535fd3f35691e613dc62a708902c1b3edab646be5e653a4460ac3cb98d
MD5 abcb55691f982adffc05a14a7611b822
SHA1 d244b4c105e3b50509d1d2110dd15266a2bf4096
SHA512 eb48940503d7c10f5104a763e1517908898a48c54cc9207c84e69bf6807045afd64edc59f8afc87ff713006e4eb1d5457fed4d55fc4bbdd2926e5e502679b8df
SSDEEP 384:HalwSiO024YqWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA9L+lS+b:6l8ZYqWTToXJWTTogB7S/AmVAf+hRMky
TLSH
T12B728E7D8F013CAC265790E8C8BA43558D18B6A7DFF5C06D269C3D09C984A5A71FA84F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BA335524576C016683F7413B32B1BDEB8CEB09E9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\cache2\entries\BA335524576C016683F7413B32B1BDEB8CEB09E9
Size 25KB
SHA256 68b1c3b2b1ee9e4d4f4ced75c719ff75860251dd421a976b5e1e0d29d99ad8ec
MD5 ad0a9d4cf00f911287dcae73bd8a3d28
SHA1 71764cc0d715760dd05df80cd67f3089af257a2a
SHA512 9ea8cb6ef38e817efc84af771fcf63021cfb67625913f9d1b7015d90b37bb6e60a03c6d1f8ab996f4debe97b816ddd00b1037dfce01746da60da88bac00cfaab
SSDEEP 384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgCD2ODHB4tf34BYTEoYTEK:Y22oeKjlCnm9+1y8gRD2ODh4tQ6TYTH
TLSH
T181C2C0F3E90195440DB24C33D0BA97596C4AB283FE28E0BD106DB229D2FDBBE78545C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 84a0cc67ee4a690da3071f337d9a0c449c767bb5a6f29889c4f5ef6385243f01
MD5 dd4633fb1ce1d6c6b335fd05f5c5c3c1
SHA1 6c330eb362911e276e412c8e7f8edf5f36412d73
SHA512 da0edb91f440466ab496d1fcde535dd9591cc6067e0256841bb3727db6463c652a932125d05ca253062c676c781b1e61310fa6b8cc00a3035f565f955587b1a0
SSDEEP 3072:X3lvhzwI7+J6eqHSZX9CeIW9kNb0goh/6J:Fvhf+HqyZN79kXohe
TLSH
T1D8B3A0F7DBE2CA2D55FFD42D6B82883EFD261414B3B7200AC9236350A1C6B787675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 8bc214781bbd0db7b00ce05836862d2bbd51d5b28251ed432c07d71c298408c2
MD5 7219ae6e854acbc83c8f9a66b955e8ec
SHA1 28ab9923a7706d393bf3a42b3900b8af4f17d338
SHA512 0066212278ca3440c0d8b4f449c4b4b6cd2f85fc014f9107fdc56210182d4b0ecee2b7eed7eeab924da6e2ea70a2eacb30373473439407f60d74b62ee7b2ada5
SSDEEP 3072:j3lvhzwI7baoNLVyo9CeIW9kNb0goh/66:pvhfbPN5yg79kXohL
TLSH
T16FA3AFF6DBE2CA2D55FFD42DAB82883EFD261410B3B72009C9236350A1C6B787775649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\AlternateServices.bin
Size 8KB
SHA256 ebd27819b7367ab98381f59a1a58043eda4165a234b890c1dc4c59b8cde62b69
MD5 be2ed2844f77ebfe8906635c336a1255
SHA1 55ee77f2ca92afb8f8886e2e9a3bbefe7b6dc683
SHA512 37f109f98a0995195b8c2ed60942e899dee8f84b154f4d522749dfecdfdce01d879d9d6f93d153878d0882914d8cb10b161dfda833e967006e5eba3458760f86
SSDEEP 24:FuhMZs+x8391lKX9x049Vv6I9Bon5q9F55A5Z:TuDKtyyB6C+5I56Z
TLSH
T1D202B1FB2776F422F0A28FB44469319CDC33136819A891C5CB5490E307D5AAAD17EF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\AlternateServices.bin
Size 20KB
SHA256 b994664be8077c7a7c991ee0cb390549bc5e741494080d0186961938f60d74bb
MD5 0aa1e863ad43dd1e220b8cf523d6c0b4
SHA1 24c0334de3e5dfffc37192ca2b053f8d866a7caa
SHA512 eccd7f8610adf3b0a933bd09aa16946335d7214fa61d4cee0acd821213562bc61f85089048edb8b61be1ba897cb286a36678d9d6ef0e4c3db977dfe862f8e72f
SSDEEP 48:FxMpNrBVphZI56pSA7jI9GmM/pHwbzf4:FxMpNrBVphZI56pSA7jIkmM/pHwbzf4
TLSH
T1CE9297FB277AE462F0A28FB18468719CDD730229296891C1C60590F306D5BAAD17FB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\addonStartup.json.lz4
Size 4KB
SHA256 96d4102a7fdfff0bc1efa5a70700464f50182bdb11805cf62c0d551069fef083
MD5 d997287b3248546da176cdf3630663da
SHA1 347e972ccf85cec06b40a1c91710e90f660cf822
SHA512 f80de4191ce2533502416473f7825f8b2d9cd144b8504523c771f3870ac8e18adb7fd9474179370bdcbba99ac44df3c24fccb46bf9d5207c462702e57b6eff35
SSDEEP 96:NmsPg4sHNw6M2xWGhD41MgGvmHhZrF5pO1LnOYvhQhIRhN:NX52xxhD8rGvmjjpwnHUuhN
TLSH
T13DA16CA6D541EFA5FE32C04358D53FB2E699AB3425A9C8D1F0ABB1294D649B35701340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 b2c8f9ec00edf54fb0a758e50973d50083fbddbacfd5e97d1beda0b76487f261
MD5 9ed489c30dd3ba5bbfbff1230d1a8b8d
SHA1 95ec2f2b075ce212ac5ae8886cc24b22dbbde44a
SHA512 5d56f5bba9fe49a91870dd1986d8772fe9efe65f91e98984c391a60a909389721549a6e360cc27194a5f4ac67b12ebb005ed336bd844bb9dce03a82e8ba1d904
SSDEEP 192:FOv5zbouZMcyjX9MXV1d66Joz1zgCl6mc0dz:abouZMcyjgd66Joz1zgC1jd
TLSH
T129E11E64EA28863FD408427BCCA61B410F39389A9C8E3F19719D651C2C5B2DE7A8E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\events\events
Size 1KB
SHA256 349d1c1b8ec8af3ccb99f0d7c5262576eceec1798f1cdb030cc2a3bc39685cea
MD5 4d7a767b3f40ada7d61bdfd64cf76a5d
SHA1 420dccabb56b14f21de4661992cfa8fd20cd1338
SHA512 b01ff1f44702bb5ff30dd65a543e64c57c49a9aa03fbfb0a873d4aa620caf7b19f84a4fd27f666a87e9767836888255dee6c95ea7de7bfd815d607a58aa686a0
TLSH
T196217C5D3BBE4D6AA8C6FA987481018E53914E0F18C71C479D12DF8DCCD1ADA72AA43C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\events\events
Size 5KB
SHA256 98143b870e7e6cb847a9943829f143720a1ab9eb24517712a8c9b29d58a4db15
MD5 279c99101439a6bca9e9d024368b3003
SHA1 33f8eec0ea1ccb6b65732243778f6b1d87ca9b63
SHA512 68561723e8ab6d6e17bab3a23a81f1b4a08f66c762d25b35d8216e439d06fe1556c21fffa6bd5d18969932e975717f4480b74a7ff74fd537897bda65f0cce94a
SSDEEP 48:Y1cBbDRBXIGaCKhIME8o/i/NVWDEWyGWIsi/7+HCk4Dnfx/ScZkqa44kr3qiOfd/:hPRr8yDoWuB+pXa443dMfdg8mEHAjmi
TLSH
T123B1322D36AD0C7E25DBD79DB88106CD87DC4B06A4871C475C8BDE48CCD9E9A329E078
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47ebd3b8-f1e5-4e97-b022-6f21d07f4fcf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\47ebd3b8-f1e5-4e97-b022-6f21d07f4fcf
Size 235B
SHA256 9c41534be725075cb29c5ea25693b06a85ae1202cc7b14132a3e6f2d303539bf
MD5 2d997f60b491f2889e522bb8b12d20e6
SHA1 fbbcd4f360b1ac8b6134c06970fc0d2ecc2896f8
SHA512 63bdd5d53ef02b31492bebff3f8a1f0af3985dc424cd8ffd0a9e567f240b8ae7dc2acab2b995e2819e09886f9831df3def0199659356fb3138bb4e77dc0f63ac
TLSH
T1A4D0A7C45598B7AD08155F4BB0A16EC670848C3314A4D860DAB64678E9F9DD845B1C97
MD5 SHA1 SHA512 TLSH

Submit Download

61147f32-24e9-4845-8404-ed8af5fac0e7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\61147f32-24e9-4845-8404-ed8af5fac0e7
Size 2KB
SHA256 8b410755453e6e3a7bfa243b01c107a011ad0390bec0ddeb7f23cf688fba9f16
MD5 c4474865ead4a26299f4a537715fa5bb
SHA1 86c9cd4a4c3253065584591da8b245198aadead8
SHA512 638550a314d8a092ee4f5cfaf21a6834924d1851d77fa425f3ab75ba622cd44fe0a1f36934c05c76034bd910b0165cba25665b633206e794b7865c90de0d78e8
TLSH
T10741586875B44C7A5CCBE14D8451238E47A48D5380C22C83DF81FF4CCDD6659736B42A
MD5 SHA1 SHA512 TLSH

Submit Download

a57bedfe-84e8-4601-94b9-fe74da89cd9a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\a57bedfe-84e8-4601-94b9-fe74da89cd9a
Size 235B
SHA256 829d0751dc065f6597205a9e98df8dfa4da1159eb25944d813c16de67ae9639f
MD5 116da848322b1e2287dc08f1ac178f21
SHA1 895c70471f6cd5c3050ac37553a59671a08ae489
SHA512 b996908726b97254a46b2ade6812c510122607f1eb2e2b4a20320d09a6b9c8ceb1f709d7cdad185d0fe7b7b21f32d97f1bbb2a83d43a4357db2f127c593831ea
TLSH
T125D097C834A8233C4C100F12F1E03CE23089CC33146A6820865109349ABDECC4221857
MD5 SHA1 SHA512 TLSH

Submit Download

ad6e41cd-d576-4bff-b8f6-06e0e05a1c8d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\ad6e41cd-d576-4bff-b8f6-06e0e05a1c8d
Size 16KB
SHA256 52650aa2795565d1bb0cc44855f39d81e2aea1f17689fffc084a0487e70ed49f
MD5 6c68393694c574a16fdaf4ab31aac794
SHA1 7a7418917b01d84a83564739c5947bf09237fc05
SHA512 be13372ff328bf679fc99c47b4ef70b2752062897f52b2d44b754338c3fb08b9b6b936eaf6ffb750a1d8a1f706878ca6224690629e4da8b4d8937afc1c808eac
SSDEEP 192:AmECwQ/m+Xdo4j4RvyZfz9iJXS7Rb9ZfCyqtdbFMVpnXZvemzxwAI0Zt6VTgydBL:AmVdXdb4R6dBilS7Rb9Zfj1Ztuyjbs
TLSH
T18C72DB16282045BE8651E36994FCBFC3E6F528CF4C419FCE9BE4BD086DDA06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b80b8174-6f11-486c-8e37-8c737b38de29

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\b80b8174-6f11-486c-8e37-8c737b38de29
Size 886B
SHA256 0b1952383305c8be27858b17c0f0a598f41b4cecaaefd8ba6c014a3b65c8bc2a
MD5 43060eb803dcb2b59678646f2d0ffe3e
SHA1 f56c46644f7b03998f10e93648cdeb77cb37298d
SHA512 8ff9c38f80adca751395d0b2baf6e2514357c9c8979880ffd7a56cb0669a2ee1e4c90198d71d2c543cdbcfa3d0828f4875181529a5d35ac010d85cf368315a33
TLSH
T1851123819624B8F2DC68C29BC5B177024BE4B163C0CA9914BD559B1C0CBA61EE797717
MD5 SHA1 SHA512 TLSH

Submit Download

e26a7b01-a9a3-4fdb-887a-69923904c49c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\datareporting\glean\pending_pings\e26a7b01-a9a3-4fdb-887a-69923904c49c
Size 883B
SHA256 494a44e1e80e46ec7c4d2ee9cb1595afd1f40959a09628f42052900f2c31277b
MD5 c53b2608929ae87b48c51e9d983c51c8
SHA1 c764067ae091c19502a2ff8d6c2dc533519e129f
SHA512 4c134290727891f51ac88addbc923d7a1a5726dba588e3b79d188276e6e94f11f195a15f77afbfb06bddce0846c9bff6e41764c3f02582f0121fa95aacce1c70
TLSH
T1681123809674B8F2EC2CC24BC96937464BF8B53384C694047D714E180CBE61EE75A747
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\extensions.json
Size 14KB
SHA256 ecf176189154967189b52d936c5c6aa4f161b7ff2692c1d4a9c47cd5f0893556
MD5 e8ac3230c52985d134d49d94ddf5f774
SHA1 8ef76f2f2d8ae543c758e7e5159f805a12f769ad
SHA512 0f09ec0171135ec9d704d80ed8faf6c7cef4c1f9de82f0fddb357ea94c86fe6c586e84c5088361db261821ab61928ebfb2b3854fde8a6e2d93566e9c6da883eb
SSDEEP 384:0kI4vmUmldve8dhWgG94zV96oIL4HcL4PXL4HSL4HwL4HC:bI4uRfDXNE4v6Z4W4j4A4S4i
TLSH
T16962421545049EB8298FA79BAA367E01C37D473B60845C38F4DD8FC842FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs-1.js
Size 7KB
SHA256 0c1f945372d018776297bf7ac6c79d8983c6f55f04a791df524721794f92edff
MD5 f7e01f266261b68c49175f780d95d490
SHA1 0af1312a392ef241a8e90c9f5307b9d855699514
SHA512 97f252bd1de1311de5efdeea3104ef9a4c9946567b20a7c5c1276c1058095b4040d8b6047b91277b64070277c38673db6408dc6d3456d30c7d3cef326e79923a
SSDEEP 96:xHcUTU9qGq5rfCjaNbzS3UmSSlkdv9jan9RH5Bw88P8L4cnwAVWlGS:SQR9fCjamUmSSN95Bw88LA6
TLSH
T167E1207891088F6F64B6776C7C6888716AB2413B7BBF68D750B954C4050CF3882F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs-1.js
Size 8KB
SHA256 739595974d9534004672748dafe6c1e76eb3a1fe9c412f1c04eb07c110d62b5e
MD5 732b9ef9fe118d17db5ed578c1ca12a8
SHA1 8f9b92c304f8d9b17c25239f18b046e64945b6dd
SHA512 72065f078575f3a0680b322f0024e58707ced0f768096870b6a65b77e8c19ade5e665e462e8cc920d11e180194833a82a13ccda2eb1a85b5fd9853c9f209562e
SSDEEP 96:xHcFTU9qGq5rfD8jaNbzS3UmSSlkdv9jan9RWRDM29jBw88bIJ8L4cnwAVWlGS:SlR9fYjamUmSSN8RZBw88stA6
TLSH
T19F022C7C5109CB7F64B676BCAC2449706AB2013BBABF68D350B954D4054CF3842FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs.js
Size 6KB
SHA256 66773a2b00c84b24de3a1844ed8179af4f89403ca79acd292d69a0d7357774e4
MD5 2625e18dbd0856f338d21263be89593a
SHA1 3fb34316554f5557a10732a506cf3c69606c26db
SHA512 0d9cd86a29366d8ca8dd376803ba67242871f91339c5f028c1df1f220b3c4340debe749817091461cf5eff1dbe7e4ae9f37b8f79e042a56224c9eeacc754a083
SSDEEP 96:xHcUTU9qGq5rfClY1zS/SSlkdv9jRn9RH5Bw88P8L4cnwAVWY:SQR9fClY2SSc95Bw88LAx
TLSH
T1E0E1307895488F6F64B6776CBC6888716AB2413B7BBF28C750B954C4050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs.js
Size 6KB
SHA256 905354fced8b097665cb048e14ae521599cb760fd7cb770d6c1ae96dae0b8411
MD5 e8d4a17aeaa26b1074cfb8ee77aaef01
SHA1 da64ebd68b20066482b177432637b22bac386519
SHA512 f49accb9c400fa4244582e9a9fe678aaae6cae61b3c59890e13c8a238fc84ae25da80ea00597020c459815e5e3b44ed5ea0fe82bfc1ce9fd1c6abd882b789359
SSDEEP 96:xHcUTU9qGq5rfCja1zS3UmSSlkdv9jan9RH5Bw88P8L4cnwAVWlGS:SQR9fCjayUmSSN95Bw88LA6
TLSH
T1B0E1207891088F6F64B6776C7C6888716AB2413B7BBF68D750B954C4050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs.js
Size 7KB
SHA256 75deb0653d2832bed2ecfe2484b32727abd1506c0b5f16d3b8d37ccb81f43cc0
MD5 384542d966b5ec217eb13cb53cd0dab7
SHA1 e61f7a2e232ee70a88df41903d4e16c71b2ddbc4
SHA512 1eba56b4931838d1a97eb67d4e7fc02afb7656e1b8f1d319c0fe5e883e1ab438a7f8668af745e466c7a4aa0ab036ebb7ea7255dc2ac23b2c6a19a333b5bc5ef6
SSDEEP 96:xHcFTU9qGq5rfCjaNbzS3UmSSlkdv9jan9RH5Bw8858L4cnwAVWlGS:SlR9fCjamUmSSN95Bw889A6
TLSH
T1E9F11F7851088F7F64B6777CAC6448315AB2013BBABF68D750B954C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs.js
Size 6KB
SHA256 1842b2ee88e72afe849b398d98130ff5cc62f517309a49cc661434fb5bad270b
MD5 e74356a53f346d3fa5fb26d54c53ca31
SHA1 ecef7705612931bbdbeba427558dc0d7dac69fc1
SHA512 6a09d49cc6716209c4f074c67b9301693f04b7a988d17d39985aa781cc50e3991759a00d807f99a4237e67bb6f5912bf82cfd1e862328e0f8b708319208b1c22
SSDEEP 96:xHcUTU9qGq5rfClY1zS3SSlkdv9jRn9RH5Bw88P8L4cnwAVWY:SQR9fClYqSSc95Bw88LAx
TLSH
T196E1307895088F6F64B6776CAC6888716AB2413B7BBF28C750B954C4050CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\prefs.js
Size 6KB
SHA256 8ea38e4f5208286fa0c98224f66624430811a2f9d04f728d8794963eb1bbba4e
MD5 2f8712b73df621dca4eb9975cdd1af64
SHA1 194c4595ca13ed7b25dc539a7f3cb61d87ac2328
SHA512 51868087048637553e0ca8c302d692eeceeefcc257d8e1c1279162534bd70905658294e3a532252d182f63d10fb5993225764a07e48306d36e858386751cda0e
SSDEEP 96:xHcUTU9qGq5rfCja1zSMSSlkdv9jRn9RH5Bw88P8L4cnwAVWY:SQR9fCjatSSc95Bw88LAx
TLSH
T13CE1307891088F6F64B6776CBC6888716AB2413B7BBF68C750B95484054CF3882F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\sessionstore-backups\recovery.jsonlz4
Size 2KB
SHA256 8a97fa22fec11067aedf940888a39a41b0354159c908f2eed53720fed7053520
MD5 7b653ec0028448b130a43cc861fda113
SHA1 e99142eb9ddf520a770e8951b670fb7474a7cb07
SHA512 fb2fe28f3c893b7dee2254fa8ef64cf9f50479b1ff31c955faba15f40c8ee9e9c7f5703028ba518975d961ec56014b928f7aa648a7fb7b9ddffa16acf9157f50
TLSH
T116416DC60A3C7CF6548B534970D883E1CED6C477939C8E60DF99A51049EC997BBED208
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\sessionstore-backups\recovery.jsonlz4
Size 2KB
SHA256 b11668e976ab28b90b0de3ab8b329da96dac391705c466ee8b036e844c51d2f0
MD5 e5606435f50dafc7473589122359bfc7
SHA1 da3b0ba14b5665e4ab67178f74728f1933ee6cc1
SHA512 dd53439415e09668cada5d489d365f0daae7f427d16f3236fa1a00cb67a4d05c01a1b427c1f954f2d5e1c90265ed407b6ea697d6fd4a3cbe82eec93801b83adf
TLSH
T1C1413CC90A283EB74541158120B0DAEA8FA09073976D4BD8EB1582120AEDDD7B587601
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.4MB
SHA256 f360d011192ef34f10f5d88b2a34636f58d328c8aaa58b3f2da278678f0fbeef
MD5 6ba2cae4ea4ba0f8de200fd97d15fb01
SHA1 b5afde1f1250e340910e06689ec6f993633bf0f1
SHA512 818d2310c4e8163affd3e1c21471f63c6f4d520d4b2732e327be5ef934078c9fbcb099dcca3c194ab435172eb27d0ff2346ae4b26f843e326bfff5b06ec7d902
SSDEEP 49152:uMhP+SpBPVBK95qD6GJhL5Oxtuln3/31H2HLiWxk5ISllqXbg0Hlcr+jnaSZPUZ2:v85qD6GJBQtuln
TLSH
T161764BE420E19253F38640B3718993FB21EFC01C6076CE48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.4MB
SHA256 c60d366212b2e5d0ea1f55cc1c1fde7a80d0566fc969ae5bbe3c7fc089e1bb38
MD5 6d3bb09f941e0d6a66c886dd2fdab668
SHA1 825ffeaf1427f5446cab046714d8abe71fda05b2
SHA512 81159089181f5d195f4ac24fe6dce5fb7af71d127925905567a21b2bf486a7c6506fb978865ec9c24a854fd49b31a15de43ac77810cb6e7976aa6a8e18165abe
SSDEEP 49152:beCBWkWKV2t5Oiy2D3/YJwCzM4l+gBDQuK+5CGisF5voaUW9w4e9P+S2NaVZXcCE:P72qD62JBQtSAh
TLSH
T1C5764CE420E19253F38640B3719993FB21EFC01C6036CE48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jl8rlv8k.default-release\targeting.snapshot.json
Size 3KB
SHA256 0b5207c3ba8c36e9717f7ba0cadc8eb0b852d8c3542a016af4db3b5f9e96a2a7
MD5 4eb354631a5202d5361307ee78d8c9ee
SHA1 8873a32f97514ba8eedbe3a2fc59d20a0ab630cb
SHA512 b0a7f64cda89e98ffbe834464e313baf57ac3d04aa47d81a43092ed007cd747e4c01dee9108243499aad5a8fc45b8b211e4a5c6e68b501fab704f90ec09dd5f2
TLSH
T17471710C951CA4FEA66BC3C0EA847FA78BBD053370446458DAFE460C55FB5FB162611B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads