05b0eaff93e1659abb9fe888fef154b18df8066d6862f7efc499d72830dc5058

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260911-de
resource tags

arch:x64arch:x86image:win11-20260911-delocale:de-deos:windows11-21h2-x64systemwindows
submitted
22/10/2026, 22:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MCLA_Release_v1.1.1.zip
Size 25.2MB
Sample261022-2xe8lavthx
SHA256 05b0eaff93e1659abb9fe888fef154b18df8066d6862f7efc499d72830dc5058
MD5 e35c434cb8dd39a4a42aa265a6bdbc09
SHA1 3910f66456b13eab2b0f7b48bcfe7ebce3f07d50
SHA512 ecb4575ed0f05ceba9668adc75319efe56271704709f4a71fced2c3d1586197974415370b6cea7f7526e2fa3242518c005819b192b174cf15c1f0c728c929d61
SSDEEP 393216:aRxUhrWjPpNKY+qG8p2eB0xtGjSBhoQ7seu3QRT553hPErFH0IlXjBOCSgJNf:QxgWjPGYm8qvGQ5sa95RPUtjBOCS0
TLSH
T1904723D7C9F1C8B0E5D1EB7B09A1335B1316DC179E0EAF0266E169F617811E083AD4EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
5	raw.githubusercontent.com
77	raw.githubusercontent.com
88	raw.githubusercontent.com

Checks processor information in registry 2 TTPs 30 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4077919521-2131189092-3796306753-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\MCLA_Release_v1.1.1.zip:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	1804	firefox.exe
Token: SeDebugPrivilege	1804	firefox.exe
Token: SeDebugPrivilege	1804	firefox.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe

Suspicious use of SetWindowsHookEx 13 IoCs

pid	Process
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe
1804	firefox.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 3116 wrote to memory of 1804	3116	firefox.exe	87
PID 3116 wrote to memory of 1804	3116	firefox.exe	87
PID 1804 wrote to memory of 3724	1804	firefox.exe	88
PID 1804 wrote to memory of 3724	1804	firefox.exe	88
PID 1804 wrote to memory of 3724	1804	firefox.exe	88
PID 1804 wrote to memory of 4940	1804	firefox.exe	89
PID 1804 wrote to memory of 4940	1804	firefox.exe	89
PID 1804 wrote to memory of 4940	1804	firefox.exe	89
PID 1804 wrote to memory of 4940	1804	firefox.exe	89
PID 1804 wrote to memory of 1136	1804	firefox.exe	90
PID 1804 wrote to memory of 1136	1804	firefox.exe	90
PID 1804 wrote to memory of 1136	1804	firefox.exe	90
PID 1804 wrote to memory of 1136	1804	firefox.exe	90
PID 1804 wrote to memory of 3540	1804	firefox.exe	91
PID 1804 wrote to memory of 3540	1804	firefox.exe	91
PID 1804 wrote to memory of 3540	1804	firefox.exe	91
PID 1804 wrote to memory of 2780	1804	firefox.exe	92
PID 1804 wrote to memory of 2780	1804	firefox.exe	92
PID 1804 wrote to memory of 2780	1804	firefox.exe	92
PID 1804 wrote to memory of 2780	1804	firefox.exe	92
PID 1804 wrote to memory of 5080	1804	firefox.exe	93
PID 1804 wrote to memory of 5080	1804	firefox.exe	93
PID 1804 wrote to memory of 5080	1804	firefox.exe	93
PID 1804 wrote to memory of 5080	1804	firefox.exe	93
PID 1804 wrote to memory of 3188	1804	firefox.exe	94
PID 1804 wrote to memory of 3188	1804	firefox.exe	94
PID 1804 wrote to memory of 3188	1804	firefox.exe	94
PID 1804 wrote to memory of 3188	1804	firefox.exe	94
PID 1804 wrote to memory of 4280	1804	firefox.exe	95
PID 1804 wrote to memory of 4280	1804	firefox.exe	95
PID 1804 wrote to memory of 4280	1804	firefox.exe	95
PID 1804 wrote to memory of 4280	1804	firefox.exe	95
PID 1804 wrote to memory of 4320	1804	firefox.exe	96
PID 1804 wrote to memory of 4320	1804	firefox.exe	96
PID 1804 wrote to memory of 4320	1804	firefox.exe	96
PID 1804 wrote to memory of 4320	1804	firefox.exe	96
PID 1804 wrote to memory of 3304	1804	firefox.exe	97
PID 1804 wrote to memory of 3304	1804	firefox.exe	97
PID 1804 wrote to memory of 3304	1804	firefox.exe	97
PID 1804 wrote to memory of 3304	1804	firefox.exe	97
PID 1804 wrote to memory of 4516	1804	firefox.exe	98
PID 1804 wrote to memory of 4516	1804	firefox.exe	98
PID 1804 wrote to memory of 4516	1804	firefox.exe	98
PID 1804 wrote to memory of 4516	1804	firefox.exe	98
PID 1804 wrote to memory of 548	1804	firefox.exe	99
PID 1804 wrote to memory of 548	1804	firefox.exe	99
PID 1804 wrote to memory of 548	1804	firefox.exe	99
PID 1804 wrote to memory of 548	1804	firefox.exe	99
PID 1804 wrote to memory of 5616	1804	firefox.exe	100
PID 1804 wrote to memory of 5616	1804	firefox.exe	100
PID 1804 wrote to memory of 5616	1804	firefox.exe	100
PID 1804 wrote to memory of 5616	1804	firefox.exe	100
PID 1804 wrote to memory of 876	1804	firefox.exe	101
PID 1804 wrote to memory of 876	1804	firefox.exe	101
PID 1804 wrote to memory of 876	1804	firefox.exe	101
PID 1804 wrote to memory of 876	1804	firefox.exe	101
PID 1804 wrote to memory of 4264	1804	firefox.exe	102
PID 1804 wrote to memory of 4264	1804	firefox.exe	102
PID 1804 wrote to memory of 4264	1804	firefox.exe	102
PID 1804 wrote to memory of 4264	1804	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\MCLA_Release_v1.1.1.zip
1⤵
PID:788

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4948

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3116
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 27097 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {fccc55db-defa-465d-8b88-0997c2096bdf} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3724
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {28ac10f8-46a3-4478-86de-c566c4cf7996} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4940
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3840 -prefsLen 27274 -prefMapHandle 3844 -prefMapSize 270279 -jsInitHandle 3848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3856 -initialChannelId {94f4a957-ad3e-4f8e-9872-d75f281e287f} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27274 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4032 -initialChannelId {1eea5871-363a-4b18-8f16-8e286d47320e} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3540
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4440 -prefsLen 34773 -prefMapHandle 4444 -prefMapSize 270279 -jsInitHandle 4448 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4452 -initialChannelId {07d1a7a2-83d8-4372-afd9-064287dc89c5} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4876 -prefsLen 35010 -prefMapHandle 4896 -prefMapSize 270279 -ipcHandle 1540 -initialChannelId {24684064-3aa1-45c3-8fc9-9e1d436ee1cc} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5684 -prefsLen 33031 -prefMapHandle 5688 -prefMapSize 270279 -jsInitHandle 5692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5652 -initialChannelId {a555b268-2bc0-4553-97db-1a673a982003} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5896 -prefsLen 33031 -prefMapHandle 5900 -prefMapSize 270279 -jsInitHandle 5904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5844 -initialChannelId {cd42df00-46dc-4bea-93fb-652185bc0d10} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6104 -prefsLen 33031 -prefMapHandle 6108 -prefMapSize 270279 -jsInitHandle 6112 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6120 -initialChannelId {93be1fec-2e5a-41d0-b8ae-28d782b9ba41} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4320
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6740 -prefsLen 35456 -prefMapHandle 6588 -prefMapSize 270279 -jsInitHandle 6592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6556 -initialChannelId {f6ed0276-3faa-44d3-8e69-dca901ba9abb} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:3304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6336 -prefsLen 36885 -prefMapHandle 6468 -prefMapSize 270279 -jsInitHandle 4596 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6376 -initialChannelId {f466608a-82b9-4167-87a5-5e44f230bd99} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4516
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6208 -prefsLen 36885 -prefMapHandle 6212 -prefMapSize 270279 -jsInitHandle 6196 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6256 -initialChannelId {18b5af69-0070-4075-a2e4-23480a576862} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:548
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2844 -prefsLen 36885 -prefMapHandle 6000 -prefMapSize 270279 -jsInitHandle 6088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3004 -initialChannelId {a49da35f-42fe-47bd-9206-9ce914b50368} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5616
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6704 -prefsLen 36885 -prefMapHandle 3100 -prefMapSize 270279 -jsInitHandle 2992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6736 -initialChannelId {8b2b4e8e-03cb-4538-abaa-f6b338e6bdf6} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:876
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6664 -prefsLen 36885 -prefMapHandle 3100 -prefMapSize 270279 -jsInitHandle 6516 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6520 -initialChannelId {695fe0c9-ad35-4c22-a1f7-a4768d2ee4e5} -parentPid 1804 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1804" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\activity-stream.contile.json
Size 4KB
SHA256 b2bf1f2a26f78af8e6b606aa7b462f026cc94339d4b81413f740fdaa5d5f62f5
MD5 6cc0613aa2c602218e9b0dec01712366
SHA1 c883ef9c20589c94c8bf2caa67e620c55a595fd2
SHA512 77eec4de506d1ee4d40bd38f7dae5952a7f6ee85d6314299b60c21df02a09afed3db207d79332e105ede0235c49d07eae40a0a846a1385207437307b06d809e0
SSDEEP 96:TI5XMI7fY9mexsWXT+mRzen4KYm7K36DaPPlz:MM0Y9gWKmRzeG3waPPF
TLSH
T1AD91C85B857885131B30F7E12C1B3698F11BB407DAE5CB98B1A9DD7085687FA81DA8C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 358105a1ee219228389068993438dd0f1f92d2416cf9366bc87d2d5376d29d7d
MD5 3ab75f3295c02e3aae71bd17c1eaec73
SHA1 39e3215beb38b7a44818bb40b43e9b235ca3f687
SHA512 608e04cd53fd2409858c113ee777fbded5c9eb25fb4da2007523fcfef0e6e9175b1123508a1fd0d17615194836deb4097043f383a2feed2e8685611433bd72ff
SSDEEP 768:Jya3a6ppgo/I6O9cZ516iP/s/LsYAOOrD++GVkbsUuRVz:oaqC/I6O9cTsWs/wvGVkbstz
TLSH
T16D73F9A3A6A9B2FB1BA437CB1C0FB95766D10146F38505C8FCEDCD1C819D664023A6BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11699

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\11699
Size 7KB
SHA256 0ed8907818e6ca14934d867f538c45fc0cb36860b7edecf61a362383eaf5f72f
MD5 dd9070767bc7b7285896ecd6066097d4
SHA1 850eeee038b2aeb68d70033c1922cf82f0538933
SHA512 7263134bdb3782afe67810feebd64eb818af366708ee98d48ee78397b300bb8bf0b59ca8c41c4a72b6dfddb37307b983b2f45b2dd5b2a5478bcfa5245b25aa4f
SSDEEP 192:kF6idoRuwxMj2o7hATWlxwxoF9op7wOZEdHEdh:yrdoudawAFoF9op77eHeh
TLSH
T1C0E1197A3A5924A01F91AF62CDB5E3831C51B783A896D0FEE894218086C8BE471C735A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11901

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\11901
Size 6KB
SHA256 787fa9e7ae9a37fb2bad0e8fd0882625b5f6d25e2abd58f6d753eee9b05318dc
MD5 ea2f52c55975d7aa89ed0cf28a4ce8a9
SHA1 ec0d131a06cd8828c3104b39df14c262167ffe63
SHA512 47e802be9de85f6217ddcb2bc127f93afce61cf410162944c6cc11a77defe4e502a8c8ea3bc7e851454e72e125a63de77c3adf113c9b728c10cc77413ab0441d
SSDEEP 96:VgXd4+toRgbxV3pkYctoRgbxV3SivjCfgp+fY3GURGn8NRGn89aP:VgkRg7C0Rg7CWXp+fY3HRK8NRK89+
TLSH
T18BD12C7F8E0530251F8656D2C14A6A9F3C15B947EDCB499DD1882342EDC8570AABD0DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28897

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\28897
Size 257KB
SHA256 13c13a931d387d01c07585e1f313cfe72f6d00307cea3f1f59080b7f9f03c0f9
MD5 2f6248931cf4cdace71e481950a2d450
SHA1 00813acd653b67a0f634a4383b3c1ace05dd8a0a
SHA512 12d4e67a69134b2888161685192f760ea4440176a125be61ad54880253f041f4cb0436872a25d55a6af3bd4146409a9b39dfaef1a5339b22183e9d64b7aba9b3
SSDEEP 3072:RHnMQgtJ8nUPDc7scbjuxIMZKmtb62Zj31:mcg1
TLSH
T1184409F3D6AC70FB07528ADC6C0D72CF62AF413ADB5209DAF86C8148D3C9A651076799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29432

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\29432
Size 134B
SHA256 d0a952577189e30370d6e92315511795eadd4bd519945f1971b2fba1a1fb377f
MD5 625d215c0ed3b1b2f5044e04fb4aebfc
SHA1 b8591ed0dacc260579c1ae6ec76336b6e9439520
SHA512 32622659b883f883e116d5e20fc130911fd4364c227b36e67d110f23508abb113c98d514b8219d8170b008f1204602f1ae93b73a1d647524d28da5391a15c850
TLSH
T12CC02B831DC39021C050AC7180D4A0CC4C3131007C3483C0F6E0037600B4F2810053A0
MD5 SHA1 SHA512 TLSH

Submit Download

31924

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\31924
Size 215B
SHA256 d681024bb6bb3dbfaa3c3a24c1200ed34ff854b531a0334e098b97e9ed940b84
MD5 b04a7a56aae5a8601cb2532fc4fd1761
SHA1 c41969eb8d8dd33ee0dedebbf30d3454d60b012d
SHA512 19fcacded74f61db5008078e4da2bbf7f3c695aa184030193233c1b3bcee76cb06c76c771dad4158bf71a1d4950710bd5d2e29b36ac354a9f9ac6207508c50e9
TLSH
T16FD023DB6943F461C07B8D34DC6CD0CD0D4D4C8165C31189EBB1121501B47A9006CB80
MD5 SHA1 SHA512 TLSH

Submit Download

4268

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\4268
Size 139B
SHA256 ae3d99330c120f9ffe31b67ea855b0257d5a85a101205339c402d10eaf6dffec
MD5 c5564c15424124bb98363a71c703b1f0
SHA1 c05e77d9d00b65355d13686829715f8bff3bcddf
SHA512 561314280dee804def9fc9c543ef0addd1a36d6ce603863d8fd8b2a043f803bb06a2f3edca195cc164db0d063a967451aa201614d5dcd76439cb48296464a37b
TLSH
T16FC02BC10CC4D0C3FE001EF080ECBECD80220404DE808600B1F303428C717A200DEB01
MD5 SHA1 SHA512 TLSH

Submit Download

6659

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\6659
Size 6KB
SHA256 188cde39d943983256370f1286dae8d7e925a032b95563cefa6f5997ca905619
MD5 449d6356199104cb51c999e0d58cd2d0
SHA1 0ce1f1f373bd22aa8ca03cf7f99f8461e64c79e8
SHA512 6916a9ffeaa1d9b7eb9aecc8a0a44fd91b908a1cf72dd80bc591c1f7ad960f9e596cdcc3d9a7808383c74b36dffd2039ceac758d923f445e71aaed197b0f44cb
SSDEEP 96:R4+toRgbxV3pkYctoRgbxV3SivjCfgp+fY3GmGn8BGn8zC:QRg7C0Rg7CWXp+fY3LK8BK8zC
TLSH
T10FD13A3F8E0530141BC796E2C10A6A9F7C14BD47EDC749AEE1882347EDC8570AAA90DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8605

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\8605
Size 52B
SHA256 6fc0f931550bf4f4ffe98eca3cd72efdd379e9b8f9363e5149b68bdccd450386
MD5 7dd3b8f21861667bf8dfa501c387e172
SHA1 a79539987d4df14affffe906fded1702fa4f9b58
SHA512 2975075e335d60ae16dcf840010ee5106cea9b0f446cb9d29c2d05fd7fe0983ac8be1136ac0755e28cb2e9bbbe085f8f7650059e0bbd7fccdf056db89534ab22
TLSH
T1899002868A968651D45885314C0680F44C103E005484232239D1076149514D20440101
MD5 SHA1 SHA512 TLSH

Submit Download

8716

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\doomed\8716
Size 208B
SHA256 50212c0c8b4ae9087a702ef44444bf78f5bfe9ee1aa08e2f503681214cf3d504
MD5 8cc33f06cf0e5c87753ae48c96fa6bbb
SHA1 524346f8dc2c61f519b5c4d1730d02de81029198
SHA512 dbe6e0f4ae497adc160c508ea359b6742f7de4538bdb482b363131865a23851b3da24bb7a2ff39be8f8f8a1a34de3b30757b3bc8fa4fa8872b5fa2c2507505c8
TLSH
T170D022DB6D43F4A1C43B9E3098A8D0DD0D2949C2AA86018CEAB0131700E4BAA005CBC0
MD5 SHA1 SHA512 TLSH

Submit Download

664C736B868C1DC3D88F46F85169BC875D247A4C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\entries\664C736B868C1DC3D88F46F85169BC875D247A4C
Size 125KB
SHA256 a44e415db1a1a185700b2cf71698b25b02245817b4b39e424668e6905619f560
MD5 60eddca42b2e038fb62442118ebacc99
SHA1 6c47b3f5ae1eba1e689a961f36b7b28c9ecf6f5a
SHA512 4f6b286257ea821bce2f33edfa5afed7e056a378ac81839fcc905b9e9895ad4534806f5100f08016923b458fb1907887f6127eebd8927f25f7e0e9b652f72c40
SSDEEP 3072:XJvgX5kVXx/DUWtWi7yz8MYKDRlUTzz/WNACK3OwXFEaJuS:XJ4XaVh/DUWt/MYBPzWrw1E8r
TLSH
T1E7C312371A3037351EA38642D598056E162DFEC8358BAB7E8D70A2D1EC30A6117DF36A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 c1569089e17148852c39440fbb953ddcd0b7868a28f2ae5782d7352c0160d6a7
MD5 e39111e1f938346f6406b4d38efa83b9
SHA1 c7af78889be6b57296980c12ad8cb8087711f1f0
SHA512 0ef8ed4dbf91775efd1f0becaf01628a97e64ab8640f50ffcc7387c6344298dcc0a205a5f06c01061e80bcd3e771fcaad47ae394602354133b056ed81454b97a
SSDEEP 384:HGNQiO024Y6WTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA9:mDZY6WTToXJWTTogB7S/AmVAf+hRMc
TLSH
T143728D7D8F013CBC175780E9C8B983588D18B6EBDFB6C06D26883D09C988A5A71F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 7068506c7fc7163f5c236462f0150939e7c81ab74979f563316bbda867825f19
MD5 ee0030d907ae034dda1c3de348f0351f
SHA1 0cbef1a0fdcc27db5f7af2549cd604532b42370d
SHA512 f0664c28a1ae99fe66823a08506b087a72e641fd011193771c31760628dbeade28b93acafebf0dcdec3e59de67949e3d4c12cb74a887c7d08babec486295b6b8
SSDEEP 1536:jTrliZK/3DEDCF62kv97nIckmBb+vil7fiBdy/WJd1d0EjPUUCtuNe3EDhD10aL9:j3lyCF62sn2ZKl7k4EjWt+vgaR
TLSH
T131B3AEF6DFA38D2D65FFD4286A82C93EFD221400B3A73009C963775061C6BB86679649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 ce2b895aa1d0eec47c6f6f1786a4177ad7ecf725a66dcd5b5aed57851997c92b
MD5 7f3b7e933a0403c7fb77d90231c602fa
SHA1 85cbaa48840f3b0a7ab56cbe6354367de929775f
SHA512 e18cd85d40683f6d90beb3917a14b0209d821b0b00a9d42876faab8f878aefeaba98c6c736c9c7655ce271f0202075fd8ff83d901824530fc1272767ee5755eb
SSDEEP 1536:XTrliZK/3DEDCF62ePvbGSpq864s+vYl7fiBdy/WJd1d0EjPUUCtuNe3EDhD10a6:X3lyCF62FSphQl7k4EjWt+vga6
TLSH
T167B3AEF6DFA38D2D65FFD4186A82C93EFD222400B3A73019C963375061C6BB86679249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\AlternateServices.bin
Size 21KB
SHA256 fc96ec30652accab38b2cbca3de891870e7d3a8698bf12d4bd26e97c9a49217c
MD5 347a483f09b2c5804ba0bddd986af51e
SHA1 30706794fe7d49406a1dc589a7065d47f64cee18
SHA512 5a64b6315991fb754d56872e5c8497f530305108af94e8ecc497b5ac898c7067c40de6a0f20f9bc48bed7358418287d1b5e2f2eaf267a4af7a96bfae912c7d29
SSDEEP 96:uLZ4H4LOKwQgs3Bh6I56aHbaa0IM/pewyx2eX0yuZe+y8tesydp0C6w:cQJ22rZZDFt
TLSH
T19BA263F73FF26463F0528FB044AC749C9C334329586C9194D65990E25392BA9E1BFF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\AlternateServices.bin
Size 10KB
SHA256 9fe74a2807ef6d0a0465fd884e7f6d6704fadb4a1378b60fa94b1595b9cdfbb4
MD5 cab44bd4908635d278407fea1d8dfb0f
SHA1 084a45730b613171b460d0ec52dc97ab0407a8a4
SHA512 5605ea0b1f06c4b6832a665c325ca833beb2f79dafac16a67d1227d42c54590f56ec6964bfcf1fc7890db38be5f2e4642c4d17e5754a36514480d79d760fb0d2
SSDEEP 24:uDPuhMZZJk+lz9o91M5d9xbMc9BPC/9VvI95q9F55A5bTe9lA:uLW4ka5Xd9JClBIzI56bTk6
TLSH
T1E32294F72BB36072F092CFB08058759C9C334725496C9180CB5990F653D6BAAA17EB68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\AlternateServices.bin
Size 21KB
SHA256 94d44e298ebd493750779c50d9ccb4e28913d26da3f1c7e8dae1af886bca0bd9
MD5 23848ed6c47ffe054a4895ab7a42b3ba
SHA1 25c76f6db242d14a9107e26cdc06d86a82aa4bcd
SHA512 32f2f46e50591ef252e1a322a373d253c8799f544d8082665e66bf648c47109c123999632a3df16c97241120dc06f998686976ca09e0c96e4c4a7c866371b4b4
SSDEEP 96:uLZ4H4LOKwQgs3Bh6I56aTk6vX2M/pTwyx2eX0yuZe+y8tesydp0C6w:PQu22rZZDFt
TLSH
T142A265F73FF26463F0528FB044AC749C9C334329586C9194D65990E25392BB9A1BFF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\addonStartup.json.lz4
Size 4KB
SHA256 9ae18f2f0fd0a280ca5b861b14d8d6d0c84f05505820c504bb3b1b2530bfc753
MD5 c342eca481544d08bb534516f4f0b29e
SHA1 b81834e17646eb3ff9b29ce5ed5d89e67a1755f3
SHA512 68232b3b3853cfbf065fc30588fa3431ee35d36c0169d6fed2ae0c89d8de174f03372f23199c0200561cbd975a6bf7b101f6a6783d9675837ddab2f66c32d632
SSDEEP 96:NDU4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhrp:Nv52xxhD8rGvm6ApwnHd
TLSH
T13FA17EB6D151EEB2F922D04298D93FB2E9D5AF7414B9C4D0F1AE71294C24A631704384
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 a6ec6909075ad6f78525c8871b30f966385f7abad5dd953a8830007dc2bd0459
MD5 17fb826c5d273ca16b2238cad67aebdc
SHA1 4d494c0aea46d31145d4b5bf163c2ffa3ba9b40b
SHA512 cde7a1b2620b76a356dfc1a0820f7224022bcb6957506546a983b60ac6dee5a167b2cfc6e9064af3d3d2026814570e1b41fb352e07f4aad5b0a095c974c0305b
SSDEEP 768:WmcAV9epGfGcmhuI7Rj0s+fZ2bvbIbkbVcL0m/:WmDV9epV7j9U
TLSH
T1EED20284EB1E553FD41852BBDCA54B002F79B88A98092F673A4C646C6C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\db\data.safe.tmp
Size 27KB
SHA256 05f5e634fc2d1568b7bbfc813cd782523464ed0c622843960d8fe97db8c150a3
MD5 4080396aae413cb53625af8c1c3aca85
SHA1 b3613e9a3fa46e3fbba161a2095a78192a21f7a6
SHA512 01fc3bfc73441a3ebfdeb825e0ad2131534a8701a13f56dda08fa740ec4763dfb00d608739785005255ea47faa5427786c4207037bfc54bac18159ef35811c8d
SSDEEP 768:smEQGmcAV9epGfGcmhuI7Rj0s+fZ2bvbIbkbV:WmDV9epV7j9
TLSH
T1BED20284EB1E553FD42852BBDCA547002F79B88A98192F673A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 8e7f2e0b6d60b95833f5a2d264c575d091f213054c54d404d634d9005f6655f1
MD5 44df8967870a7faabb29422da27e5b71
SHA1 c0b23d5554ee2bb2f88680bcba083a96fdb234c9
SHA512 f5971a22dcda3a15e2c2b05020bed34a22e378fc2e45eb5188e8992aa471b04f66df47011caed6469ca4e6642e4aeca647f078e4f1d1a9f09aab0818033460f1
SSDEEP 768:WmcAV9epGfGcmhuI7Rj0s+fZ2bvbIbkbVamdt6:WmDV9epV7j9k
TLSH
T168D20284EB1E953FD41812BBDCA54B001F79B88A98092F673A4C646C6C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\events\events
Size 1KB
SHA256 619e42d7b39a89cf8c4430587bdbb10f8a967ec9a76a9bc7f70deb7200c91d58
MD5 b737096c302f9452f8a7e80b9d923ec8
SHA1 7c46ebdb742cdc94dc8c3c1a4db7a4f42c521e2c
SHA512 1aff5ca9118ae085a247365b9a27de175138d329fbd680de8a155146213cd0650d71d6272c6e9112a1a8c6c963f9e168965bd0b614df9f8cf8adb4e2b711d687
TLSH
T16D116A5C3DF84D6A99CAF69C745106CE53528E0B04871C434EA2DF8CCEA2BDD32A947C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\events\events
Size 4KB
SHA256 71fc1c9cbd767b78bb32f2b93ed3bc3d46dbafd6f64c5ef082991c803d5c44a5
MD5 183c4efc653d480f93c8984287e26810
SHA1 bb9459b32139b85c7d91953509aa9ef2e4732de5
SHA512 4f879608d843e5d6ab5627f31b74a2995a629b742741352f8f4c228cab931bd002d772cfdff50b7075a00c3495064b53fef9dcbf1821918a2a0559513447a198
SSDEEP 48:YDpHOYs7yWL5CxKxPJbaz3si2yfYqw3v1i/80UuCBhMC3n26pc4mChki8szqYhGy:R5azscER0OD3n2+Dp8sna4Vr53dj
TLSH
T1A7A1EE2C7AB90C7F6C87E69CB84106CD47C98B0394861C474CEBDF488E57A9A329F569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b77487f-d59d-45f4-97dc-4d2fb34742cb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\pending_pings\7b77487f-d59d-45f4-97dc-4d2fb34742cb
Size 2KB
SHA256 44011c69312b447b254d65cc453b00dbdcdb63c324fb2405c1acd9cc9be36597
MD5 08fee75669b7d7d634f18700c360b22c
SHA1 f4263e1ddc33f65205b5bfa808a03080f8d19c35
SHA512 7bec9cd7a8a2f3010cd6ecedb2d2595e5d84c8094bc387e48c9c39e17c9ecd7e0fdbce6cd96c6e7c0a1a09ab4190d2ca4c6102ebeaa06a30b6a412698d5977ac
TLSH
T1ED41335C36B84DBB9C8AE55C8492278E53608E1350C62C436E51EE0C8C927AE337A53B
MD5 SHA1 SHA512 TLSH

Submit Download

db27b258-9050-42dc-afd8-963ccf3062ca

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\pending_pings\db27b258-9050-42dc-afd8-963ccf3062ca
Size 871B
SHA256 352644d22faf9b4ffb4c91a85d84a3c6c481824982d37d1ed2041b1406168473
MD5 b493c9340414b564fcb567a502010565
SHA1 bc05f6559bab97db05c8c64cd3bdf18eb50c7a59
SHA512 48859b35aea2bac807d47692681062b4ae6589fa160e58191b9684d82177fc8bfc28655551097aba2a2d85ada0159a758e8143f63bb9bb466c8b1b618ba09b17
TLSH
T1C3112381967475B2DD7CD20B86653B428BF47523C0CA4C083EB49D180CAE20E93AA30B
MD5 SHA1 SHA512 TLSH

Submit Download

dcbdeeeb-9ead-4129-a082-46f870bd1a12

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\pending_pings\dcbdeeeb-9ead-4129-a082-46f870bd1a12
Size 235B
SHA256 f441afb42152526b7703b685cc169a5e41b9f676f1b34f22f239dbb2a5138518
MD5 dbfdc8dc584e65058272b04de46f0f9c
SHA1 c836a294b522ceff7d7ab5905f47a0bc8eebb420
SHA512 539f93313f9de3e10f01f10a8fe6ca9bc77f82123a1e855620aef3e755460e7aebefeee93baeae8a4caf76db5f1a2d04b83423c8c5cca1f90acfd1b44a54ae34
TLSH
T145D097C02498332D89040F0BF0A06CC630884C3314F5D820CEE04A359AFCDC8017196B
MD5 SHA1 SHA512 TLSH

Submit Download

ebf1d275-5d3a-461d-82c1-9144ef14a3cb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\pending_pings\ebf1d275-5d3a-461d-82c1-9144ef14a3cb
Size 886B
SHA256 245fafcc78ab071b390d674a55acca8f47dac6f1b4c26f5767f64ed120a5e045
MD5 f3eb6991ab5b86b894c8a61f3bbaec78
SHA1 ed5408266710e9ba64233e7259fbe54ee1e14ab1
SHA512 cbb5c5643353c83d7a88871b1922b189a823b96bf10f1d1581bbeb5bf5695279d8df042bbfedc7ed9c71799157c1c06d82e54c287c298b47f0128b682eefcf4a
TLSH
T1CE1104819774B572CC7C834789A477828AA47423D0CE1D083E649A180DAE20E639671B
MD5 SHA1 SHA512 TLSH

Submit Download

ff5ff76c-773f-4f19-bb4d-6738343f6512

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\datareporting\glean\pending_pings\ff5ff76c-773f-4f19-bb4d-6738343f6512
Size 235B
SHA256 01a0007cf549e0341c988c6a7e7c6095f2f5048988a9b50e08dd56b4e19416e7
MD5 aa3b250770d24396aa1d71b7cd92d3ab
SHA1 f472f5573fe199b1b2b1d14406a32a20ee9de822
SHA512 42866fcc3805a379d35244076242c0c48b72178561f3b210d29e699ed32d12134cccb215fb6e924075940dd135603e5952ee668e1a522d8f6a093f1cf9632315
TLSH
T190D0979028CC735C48140F2AF8E068C6309C8C3314749810E990803C99BDEC84195C1B
MD5 SHA1 SHA512 TLSH

Submit Download

downloads.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\downloads.json
Size 1KB
SHA256 b7ae4ee095d48a7c4ba20a4217ef413d162fee8c797c0cc1f7d787c31282329e
MD5 b36483cad5440ff10ec2dcd44d3bd45c
SHA1 d8e8cabee5bcf75b1bb95ecc3d13d0a473698d4d
SHA512 578dd28f9eb82fbe604cc66f0dc583e654c5925ce2d0ff9e840538eda111ddecb0bc1bac4a24bea2f616cc4f6cad6e5804eb7deb30466c253ef8972dc9e8fe09
TLSH
T17D31D8F7A93ECE3F230595A18A1C3F5D4C3CB3AB8280017E125DC61480A927472E7937
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\extensions.json
Size 14KB
SHA256 54b4d67fcd1e050da55d44c16d1bc0747cfbaf323d7986b8dd270a0e64517c50
MD5 ddae481b364e62572e0963eb10451e0d
SHA1 ed15a8dc9a9f5484a48031e9536848d042d4d9c3
SHA512 33cbddf212cb7df011c016ace2e10fa930bd67ba096e1a5b1214c6e76510ed925cfbff0554d684a35c03f6a5d39a46f06fe31d9eb9c1cae508cba1f15633e5af
SSDEEP 384:NkI4vxUmldvQ8dhWC94zUp96oOL4HaL4PxL4H+rL4HJL4HC:uI4JRfpXP446/4I4B424B4i
TLSH
T10162421545148EB8298FA79BAA36BE01C37D473B60445C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\prefs-1.js
Size 9KB
SHA256 4f1333cf921ee0b59b46d7e866c82ed3e72b27e824d465ea45fefa9dd84d4fa7
MD5 f8d4c21cc3647cad6306e175b67fd9f3
SHA1 bf73501817adc1319363524de3feacbd957e9d92
SHA512 b39efac20a9a41f729351fc1344476682018700cf4164b2d3b2bcc27ac14016a6314f2d6cec295ca8db2069406fa3b5eb1e818702e42de9ce6ed6a90aaf94363
SSDEEP 96:xHjetTU5QqGqnfZs+NbzSlLFSSlldv9jln3RWRL2mMBw88yFpQC78L4cnwU+GS:VegRnfZs+8LFSSF8RABw88AQCz
TLSH
T1DF120F3C61548B3F64B676BCBC2449702AA24137BABF6CD750F954C5064CF3441EA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\prefs.js
Size 6KB
SHA256 cdf23874f7077b5f4e8ae86dbf5a2f0ad3b90e414a6e4ae63aa0589480697875
MD5 5a41efd16ba7b971d682872e2f34b085
SHA1 1d35ffb15067ef41e9bcd3981cd3e83ca964bd7c
SHA512 af890e62ed088e8237a2460105e95b01e39cdd961f30978482a9882294ce7df240430eeb23a9851e48590d79e6fd856d430f2e35e38a7d7afb4dcc2bad0e2886
SSDEEP 96:xHjeUTU5QqGqnfNfC1zScSSlldv9jyn3RHyrBw88H8L4cnwb3:VelRnfNfCRSSw94Bw881
TLSH
T1ABE11E7894088B7F64B677AC6C688C316AB2013B7BBF68C650B994C4055CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\prefs.js
Size 7KB
SHA256 7e70882d46cfe3db3271e789d9b00693c9a912f8f5b9a7d826f4f481b345dc9a
MD5 9021d5a31318ea62d9bb909519ffa1ac
SHA1 002c33bab68bf8ffaa463fa45d9561268d24c70e
SHA512 722d8aaaa06a11f8ea05c56f0d2508c44fb26579a64e6f83670401189bbe84e1d0c2f23d32544dade5c447d402931c0bf38e9e4fd37ce079be076b524c26932f
SSDEEP 96:xHjeUTU5QqGqnfNs+ObzSlLFSSlldv9jln3RHyrBw88H8L4cnwb+GS:VelRnfNs+zLFSSF94Bw88u
TLSH
T10EE11E7894088B7F64B677AC6C688C316AB2013BBBBF68C750B554C4055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\prefs.js
Size 8KB
SHA256 fa4c36f896a4b9fdb686b5c6ca8d46ef8c6ee71344f76a4b77f1174c19c8aed5
MD5 c98ddf7a01feca41ec7e811551d35ae6
SHA1 60cbfa89a049a4e9900b7d5b76b105683a209af5
SHA512 e95c874ab438db55eacccc6bf80405a169cc9d0c4400abb8a043df79b27cc4f02a41072035c7ddec0986bff09d3d8f077c6f54d57653fdae81638fe7f213748e
SSDEEP 96:xHjetTU5QqGqnfZs+ObzSlLFSSlldv9jln3RWRL2KBw88ycN88L4cnwU+GS:VegRnfZs+zLFSSF8RtBw88bk
TLSH
T17C021E3861548B3F64B676BC6C284D706A72413BBBBF6CD650B948C5064CF3441EA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\prefs.js
Size 6KB
SHA256 3a5bb25daa095380810f8f055304b9732ec5f6b821fe77e7ba97f0a9754836e5
MD5 fcc0180c31761f41b032677cd22fd3fa
SHA1 70aa60352bb8d6132c70d4069e1151041972d34c
SHA512 62a97db35fd292855cb2cc8ef36e3e0ef14d81939320ac0a02a0344312de9e211c83808228b069062c93bdf489c19c5e2c8761616cdee07ff488b584b83f5b95
SSDEEP 96:xHjeUTU5QqGqnfNs+1zSlLFSSlldv9jyn3RHyrBw88H8L4cnwb3:VelRnfNs+gLFSSw94Bw881
TLSH
T11DE11E7894088B7F64B677AC6C688C316AB2013BBBBF6CC650B954C4055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 4724d6a95ff9a3a8a616485a800c1ba5038da6dba06204d0025efaf6cf086426
MD5 8f36ca1bc1be88526076701f74b3a921
SHA1 f40312fc66c644d62c0faaafbb53c5f86b6c5940
SHA512 0d8695d422e73416c6706c868cf57e235b18e00fff9a82f97fe912906af08bfa34460284bd061bffceaab6b9de4f086640b05b5abd063d209d55c088a12bf64f
SSDEEP 96:r255QGjnbNk9XyS6H0l9Eso2mg2HCd01VrqM4EcZZi6rLKJyv7g:r2SGjbW9iG+BFLi0v/4B0
TLSH
T11E918DA79C066D7B6171E9926CEF0FA080F32044D4DC5161EE3DAAB100FCA6AB71974F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionstore-backups\recovery.jsonlz4
Size 9KB
SHA256 6cba8c01b9f428ac5e4a1ca9c1adf7832bef3d51f0bf60496aa20f7cbca07a6b
MD5 56ae5f0f5a73e7a3f667b6473fbce246
SHA1 f24a1d394b07112226c61f322950b5bc7e6d5cf7
SHA512 9384db016c16fe21cb907beaf0c93ee5879953ecccc5158d9ff772b12a9b194163509a43b757633dfd291fa1bc73e97bb3aa4172e8c84493f422beecf98e9cd6
SSDEEP 192:h2SGjbW9iG+BjZadBGmDmE1hSAIA/2LsikQi2Pp4swuXE8u0LCf:ESGGIG+joxmE/rj/2oYi2x4swVl
TLSH
T1A922CF37DD3116EA0943BC80DBC90E9696CEFD02D2A19300CF70BE6E86D0E9D335918A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 ac89a49c16709c36307bca6b9073eb56fa1d555e084a4dc4d8fb70c954708765
MD5 470cdb85ca93313211bc4c9026c68971
SHA1 377500fbf46fdb7b503710a7f4fb35482afe8da9
SHA512 58e140a13b982a530364cf25069247860ffa270c64a2a30713bf23b539e47341c5ad83513ead895f55540cdf6634a7ee6b59128bec3bcbe57f37adabf880f1fd
TLSH
T19321B741FF2F1DA22216E059C0C91B90F6586050423CB8B0DE5A3A1126DC91A32CE349
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionstore-backups\recovery.jsonlz4
Size 7KB
SHA256 214e4e4cb7c5ac8cd56a174297aa670ded2443a339910406d91a7ea7a2f95ccf
MD5 3bdf5150df53547237299db4876d2fc5
SHA1 4f68ec306e5a9c99fd762bd5f1f44d44c27467b7
SHA512 cecf4c953e21b61e33daee2dbe12ebf2cd52f8e7910c407072ce3bb46589788d83d2a3d2672477705663a6bff72d3efa54c8a1e0906c6df318fa479c3f2e806f
SSDEEP 192:S2SGjbW9iG+BjZadBGmDmE1hSSki0v/4yqu0LJ:7SGGIG+joxmE/Rkpgyi
TLSH
T1C7F1AFB75C263A9F8E37ECA5EACA0F7245D55801D1E88304BF24DD7705B8E29720840E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\sessionstore-backups\recovery.jsonlz4
Size 11KB
SHA256 122367aac662716ced1c7d32061d6d1ef8230fb368bd061b8ddba567e778668a
MD5 66db32c1e6079c619aadb0dccf564992
SHA1 07330c3515ef2e83248925fa5901022b38827ba8
SHA512 07c9fae804965103883468227ce31c89f883bf3b248f4a5621b6953595be8cfcc25dac49cf4c51834538fcb6dd880df2220cdfdda6750206c305c72a4b8f4fa3
SSDEEP 192:7Xi/Dul9sEnX6iAcGDw++I+gHadKGmDmE1UtnZcPMuVxdMqSwQIwFcvg7Du0LF:7y/il6qKcGDF+IigmEO/c0YxdMQJzvgt
TLSH
T14D42B073E93042F68E037CC9CACD4D9EDB8EED03E5609204DBB4B69A8195D4D321D28D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.5MB
SHA256 5560eeb72fb162f28e0dc99193f3fadc30325f90baea81965dc158e5e197b3cc
MD5 31f07edf0f6d909dc76392d1bfd2e72a
SHA1 30c28263fe3bccf06f50bde0b9943249706cbfd9
SHA512 4333986ca6e2a86740cb319a37bd3d9051d82a47a0a7edaafe719a754dbc394a92447186ba7fdaec8b7373a8d19fe2c2840e14678fd5ce70ebe75da06fba4b49
SSDEEP 49152:6ii2PXHXZszgeiPxC7/od8sNBm89S9q3KVCTH2HLiFxQ5ISl6qXbg02lcr+j7aSk:xWjiPxC7wdNNBmca
TLSH
T16F864CE820E1D253F38640B3718993EB21EFC01C6036DE48579496FAA5748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.6MB
SHA256 1f322a82b9d2e952c6b4b413e1e2616d671fc8b9e73110e4915bc47c18abb9f7
MD5 6954490fc637f708f48706f69cf440ad
SHA1 9fa670f61519b929443fec3c2e0640d328c87462
SHA512 e0c83ac954435983bc57726064080474dba44d16da267ebbcdc2458e51e54e1863c6f4eb9e4dc0245ef6d02d3c5840ae9717e8b81175b2f17d1ff3c9c4a0118f
SSDEEP 49152:JD2D3/Ys4jx4k7P/DujwQZEgWZ1EoUQ/pW9wfB02PXanZbzg0iAOxC74fd8sNL7p:GPxizxC7udNNL7E
TLSH
T1D5864BE420E19253F38644B3718993EB21EFC01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.6MB
SHA256 ad64753101d8ce13dd6ccb9b18f71eaf19a03fb6417e31c98de05ff9342bd031
MD5 a26e9c960cc16d13816891c4d3834d4c
SHA1 2dfc6afa3b165383a7deca9b57f7c44b935a4b30
SHA512 09bd4db24f39683c2b85a71587b1ea693dc4d293c9ed405f23756a3cf6bbc475fa119653da49bc6cfe074a4b15f7580021730c9ef8ee3cbc4cb593e914da61e1
SSDEEP 49152:G9yWkSn/X18eFy2D3/YvX4jx4lL/DujwQZEgWZ1EoUQ/pW9wfB02PXanZbzg0is:APxivxC7udNNL7E
TLSH
T131864BE420E19253F38640B3719993EB21EFC01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.6MB
SHA256 1e54e2b69143a9033c0b9dc560d4ddfb41f87e83340865d75e3cfcd0d6d2767d
MD5 62aaddf6bb50ade4321c3e3dd6c78871
SHA1 f0a476d6b8428a3c2dbe43af71e293083a40b114
SHA512 0c05d69aed8c996fa7d9df3b4a23b7996981f1ee61963b37c12edcc5a6715f5eec3ada5b06507895e9f5ccf1de86ccf59ad89236353c1d971afd8f296d0f2f3e
SSDEEP 49152:f9yWkSn/X18eFy2D3/YvX4jx4lL/DujwQZEgWZ1EoUQ/pW9wfB02PXanZbzg0isK:ZPxivxC7udNNL7E
TLSH
T101864BE420E19253F38640B3719993EB21EFC01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zbi0yx4i.default-release\targeting.snapshot.json
Size 3KB
SHA256 d5bbed24cb35481a1f463a25c3a474c289f8d75fed9c83f023a3f68a9e10b2ab
MD5 68580d8f3593cec3ddf4332f60e98561
SHA1 e08d3ba61fd86cb62067ab3cfad9ef74d4d62954
SHA512 9ac058e0ccd0adc61148ae768c3ffdc4b69a211f2a012aeee73032f3cec553fcd88a3d6b828d4f46361dd1ce6269d23e3c1c5e5e94df1e8c066a621541634ec9
TLSH
T19671810CA61CA4BEA66BC3C0D6447FA78BBD053370447458DAFE460C95FB5FB162621B
MD5 SHA1 SHA512 TLSH

Submit Download

MCLA_Release_v1.1.1.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\MCLA_Release_v1.1.1.zip:Zone.Identifier
Size 1KB
SHA256 a9582fc6504d4faeaf9bfcd9a82f1fba09f8c40299c676f429c10f0db8002590
MD5 829fbd68fd51ff9e598f94147f21e54a
SHA1 f8c33bca31bf02084b9c208184df98efb69a6d3d
SHA512 047b4c006b64081c5ec3792885030c290b24d4f2e66252ce949be9ab9f9fd11bb5fb46367cd21823b43f3588aabb06815c94dc3cac57a6cc2a17840534decf2e
TLSH
T1E71165F7A42CC66F1309B5D28E4C0C6E903EE4FAC60346ED9169C159C0982B562C7637
MD5 SHA1 SHA512 TLSH

Submit Download

ukqL5iLb.zip.part

Path C:\Users\Admin\Downloads\ukqL5iLb.zip.part
Size 9KB
SHA256 1a069abe9432c7a83618d29ce7e5ec5746900a63b8c12f71d8097289fabb1216
MD5 fb8d7f388bc1d3c6be30988fd7a902bd
SHA1 867f50e3eb1cc83fa934e31c4440bab73b3c16f2
SHA512 f8b7b087e79bb80138dffefdbd6c6ef8ee81be945439a981630f278a0c528894fbd973c9adb4166f1f443d8db6f2101287220d0897419f5e9aaa2826f3d67eea
SSDEEP 192:DIOtA2CO0e1I8gKQ9j+mwdEycB43a76w+2qU/W1rei2+ECT:BtrCO5uOmbCEyM4K76A/W+8
TLSH
T1DD12B11E33F4952023B76731DFBEB534622BCB58CA0947A114386CE5D9EAF608D59836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads