962fab77a44b6af845dad1a13f349d9c8b37248add87b2663268e1edd092834d

Analysis

user interaction
yes
max time kernel
110s
max time network
112s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
winstall-Alex313031_Thorium_AVX2.exe
Size 893KB
Sample261022-ythyjatxd1
SHA256 962fab77a44b6af845dad1a13f349d9c8b37248add87b2663268e1edd092834d
MD5 32b748d44c78b13010f9df73d493098e
SHA1 0729d3f01c7a50450096898386b0cde563159f12
SHA512 8c1710224948f9cd664c5a481f4845a88c3f7ecdf62e13e43b5cfab210474a716e5a5a7182e10f55f50d6bd4d394acc08bc86e7d51959116a2dcc0faa60a6bdf
SSDEEP 6144:38J2qDRESypESYQBxGXjzHpNwEK6AZPPrOsETw9ja2bTkeYe5sRegrOGVjDRSmn7:i24REnUbxK6AtrWePEebgrO8jFVPtP
TLSH
T132158C17F2A415F9E4A7C178CA524912FB327C5A0771DBDF139086692F236D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
4368	winstall-Alex313031_Thorium_AVX2.exe
740	winstall_helper_4368_240699140.exe
748	winstall_helper_4368_240699140.exe
464	winstall_helper_4368_240786468.exe
4944	winstall_helper_4368_240786468.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	204	firefox.exe
Token: SeDebugPrivilege	204	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
204	firefox.exe
204	firefox.exe
204	firefox.exe
204	firefox.exe
204	firefox.exe
204	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
204	firefox.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 4368	4360	winstall-Alex313031_Thorium_AVX2.exe	85
PID 2968 wrote to memory of 204	2968	firefox.exe	98
PID 2968 wrote to memory of 204	2968	firefox.exe	98
PID 204 wrote to memory of 3164	204	firefox.exe	99
PID 204 wrote to memory of 3164	204	firefox.exe	99
PID 204 wrote to memory of 3164	204	firefox.exe	99
PID 204 wrote to memory of 4596	204	firefox.exe	100
PID 204 wrote to memory of 4596	204	firefox.exe	100
PID 204 wrote to memory of 4596	204	firefox.exe	100
PID 204 wrote to memory of 4596	204	firefox.exe	100
PID 204 wrote to memory of 3496	204	firefox.exe	101
PID 204 wrote to memory of 3496	204	firefox.exe	101
PID 204 wrote to memory of 3496	204	firefox.exe	101
PID 204 wrote to memory of 3496	204	firefox.exe	101
PID 204 wrote to memory of 2588	204	firefox.exe	102
PID 204 wrote to memory of 2588	204	firefox.exe	102
PID 204 wrote to memory of 2588	204	firefox.exe	102
PID 204 wrote to memory of 3944	204	firefox.exe	103
PID 204 wrote to memory of 3944	204	firefox.exe	103
PID 204 wrote to memory of 3944	204	firefox.exe	103
PID 204 wrote to memory of 3944	204	firefox.exe	103
PID 204 wrote to memory of 5580	204	firefox.exe	104
PID 204 wrote to memory of 5580	204	firefox.exe	104
PID 204 wrote to memory of 5580	204	firefox.exe	104
PID 204 wrote to memory of 5580	204	firefox.exe	104
PID 204 wrote to memory of 5600	204	firefox.exe	105
PID 204 wrote to memory of 5600	204	firefox.exe	105
PID 204 wrote to memory of 5600	204	firefox.exe	105
PID 204 wrote to memory of 5600	204	firefox.exe	105
PID 204 wrote to memory of 5608	204	firefox.exe	106
PID 204 wrote to memory of 5608	204	firefox.exe	106
PID 204 wrote to memory of 5608	204	firefox.exe	106
PID 204 wrote to memory of 5608	204	firefox.exe	106
PID 204 wrote to memory of 5620	204	firefox.exe	107
PID 204 wrote to memory of 5620	204	firefox.exe	107
PID 204 wrote to memory of 5620	204	firefox.exe	107
PID 204 wrote to memory of 5620	204	firefox.exe	107
PID 204 wrote to memory of 3668	204	firefox.exe	109
PID 204 wrote to memory of 3668	204	firefox.exe	109
PID 204 wrote to memory of 3668	204	firefox.exe	109
PID 204 wrote to memory of 3668	204	firefox.exe	109
PID 204 wrote to memory of 4288	204	firefox.exe	111
PID 204 wrote to memory of 4288	204	firefox.exe	111
PID 204 wrote to memory of 4288	204	firefox.exe	111
PID 204 wrote to memory of 4288	204	firefox.exe	111
PID 204 wrote to memory of 5168	204	firefox.exe	112
PID 204 wrote to memory of 5168	204	firefox.exe	112
PID 204 wrote to memory of 5168	204	firefox.exe	112
PID 204 wrote to memory of 5168	204	firefox.exe	112

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\winstall-Alex313031_Thorium_AVX2.exe
"C:\Users\Admin\AppData\Local\Temp\winstall-Alex313031_Thorium_AVX2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Users\Admin\AppData\Local\Temp\winstall_4360_240698843\winstall-Alex313031_Thorium_AVX2.exe
  "C:\Users\Admin\AppData\Local\Temp\winstall_4360_240698843\winstall-Alex313031_Thorium_AVX2.exe"
  2⤵
  - Executes dropped EXE
  PID:4368

C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240699140.exe
C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240699140.exe --com-activation-helper WinstallComHelper{E9096B8D-F276-4EF7-8098-C7A65CE41349} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
1⤵
- Executes dropped EXE
PID:740

C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240699140.exe
C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240699140.exe
1⤵
- Executes dropped EXE
PID:748

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2968
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:204
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {e0edd625-0bea-468d-9e62-dfad59bb752a} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2456 -prefsLen 27135 -prefMapHandle 2460 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {0c5e6b92-27d4-4357-86ba-c1cfaabf974c} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3876 -prefsLen 27276 -prefMapHandle 3880 -prefMapSize 270279 -jsInitHandle 3884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3892 -initialChannelId {56172091-81e5-4545-8c01-db8434d851c7} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3496
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4040 -prefsLen 27276 -prefMapHandle 4044 -prefMapSize 270279 -ipcHandle 4060 -initialChannelId {f55fec82-a4b2-48aa-a16a-f03f41181ede} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2588
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1352 -prefsLen 34775 -prefMapHandle 4348 -prefMapSize 270279 -jsInitHandle 4352 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2620 -initialChannelId {f0efce92-4108-457e-952b-f916c3b07477} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3944
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4812 -prefsLen 35012 -prefMapHandle 4852 -prefMapSize 270279 -ipcHandle 4860 -initialChannelId {4f65bb96-e3e5-4f39-ad8d-75701895f45c} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5096 -prefsLen 32900 -prefMapHandle 5100 -prefMapSize 270279 -jsInitHandle 5104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5112 -initialChannelId {ace85589-2769-413e-ad41-f032e800f8e4} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5136 -prefsLen 32900 -prefMapHandle 5140 -prefMapSize 270279 -jsInitHandle 5144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5148 -initialChannelId {19d2d44b-e07e-4f8b-8604-c673db6d55eb} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5524 -prefsLen 32952 -prefMapHandle 5528 -prefMapSize 270279 -jsInitHandle 5532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5100 -initialChannelId {a62291ac-8e86-4022-8251-0f4fa8be6240} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6024 -prefsLen 33071 -prefMapHandle 6196 -prefMapSize 270279 -jsInitHandle 2936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6156 -initialChannelId {7dfaa003-24f3-47f3-88ad-a42c566ff58e} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:3668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5680 -prefsLen 36885 -prefMapHandle 5676 -prefMapSize 270279 -jsInitHandle 5672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {50bef720-301a-4e33-b116-7d17470d0c54} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 4596 -prefsLen 40024 -prefMapHandle 4724 -prefMapSize 270279 -ipcHandle 5736 -initialChannelId {d89cc199-78b1-4dae-a0eb-cf1ef2bafa34} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:5168

C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240786468.exe
C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240786468.exe --com-activation-helper WinstallComHelper{7085E1AE-31F1-4E55-B8B7-881694AE9E5C} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
1⤵
- Executes dropped EXE
PID:464

C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240786468.exe
C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240786468.exe
1⤵
- Executes dropped EXE
PID:4944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.contile.json
Size 4KB
SHA256 c2bf8ef99c7cac2e336c90d30786497e66bdc060e0def2de0560fdcc2f54d9a7
MD5 6bad37f1f3c4f5fee5fdf2eb2304d858
SHA1 b7f560b84a10ea9dde365bf7d4fc881c786cd273
SHA512 1f258eeef0381bc1eb4a93ac0ce07e453aa37435799f4ff4c998815d6d9ae9ad1b95297e75af254d84a3861ae80935f9dbeef676f2fbeaf5db85159cd8695d38
SSDEEP 96:T0g+Mx4a3m6a3VWKbT+mRWNonhrM/4mOnERT:KM6a3alWK+mRWNoh9mOERT
TLSH
T1BEA1D8AFC438441A1B30F7E66C1B27ACF05BB41459E889B8B1DABD61456C3DB80DBCC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 34d696e03f7db501851f8f2089ff4303c54438bc41fa5f886c92b77a6b142e77
MD5 6feede4975d5827fbfeb358fdccfaa8a
SHA1 a0d03e5ecdbd5cdc03eabbdd5b7dc53d119f16e4
SHA512 25265447f7c42573f3d1c36a616c0a615ef445a149bb771109bd2cb9154e86c8b608d9ec98bc3490fc85f662e6ac76415eadfca5e130ff19ec5327374724572f
SSDEEP 768:HByKpQsDa0lm3cMZHi+Qf510n66DsMiZrJ+GtZvOOrlhNHxI95nlq7acKG:HwKsrslqn66FgrwGtZdHS9aahG
TLSH
T1C37309B3A6E8B2BB1F9077C72C0F795B62E20585F38501C9ECEDCA1D81CD654113A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11841

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\11841
Size 7KB
SHA256 b851484c9ff8168bb4c70daf9c9edb690b202377d99be18d06e89aa69582fd6d
MD5 0347a74216e9eaac05f16f399a2ce7b3
SHA1 05d3748c87db95aa777855a90cfa494cabece2ca
SHA512 0bca66c64f7eeffea0e17f792148323051be62d55e0f646013195d9a1c9d7b6dca59143d87c2639496792895a79474cb1d8f9d4a2bdc31471e235511df98e9c2
SSDEEP 96:nH9/toRgbxV3pkYctoRgbxV3SivjCfgp+fY3GB5qdGLxS5qdGLxICr:URg7C0Rg7CWXp+fY3xOx1OxICr
TLSH
T183F14C7F8E4964050AC65BD2C14A335F9C52B74BEDC7C9EAE18823469DC4670D29D06B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28739

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\28739
Size 52B
SHA256 62d6d8b6294c8c0467d5eb753ac254b7acf697d14922795b1e7b8dbb9c811e30
MD5 725d8d6c0e747b8a500f0de8a48e391c
SHA1 180346e021e033f19f7491481ffbecab0efdd181
SHA512 7221b84ab253acb53ed4bb73268087fb62e0faf713f2ae2f700c64ffd72107c05e8a17ddf6aa30a49ac0cef3856200e8524ba980f9acc6f5ffa8cde3aeb10008
TLSH
T1AE90025543A18541D81486310C5291F809203D04C481025335A11BB114111D60A01200
MD5 SHA1 SHA512 TLSH

Submit Download

8823

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\8823
Size 258KB
SHA256 3c251b768a79b29368138482eb74b1494abd2a1878674914d7c281ccb2a73c0c
MD5 77cb192c8c348207ff68070c57af0119
SHA1 f89ffde4c8c03104e8f2711ebb58a8bbc129b1cb
SHA512 2cacf29bafeb94abe7f06a3a8d8f9ce5635a331d03a4812ce884e3f55d83dcb87ef7d5931e323c0d3d3604653c3b0093680969ff2dff041725de78a5f55daba2
SSDEEP 1536:dYCYPs0TvyyZoSPrZR3R6vkcIEKWBbjQoY0SDVtiIN8s5q1ia3Lcu3tUvK8Ct92j:wF9cBbjmDVrHOLvUA2Zj31
TLSH
T1E444F9F7D6AC70FB07529ADC6C0E72CF62AF4139DB4208DAF868C148D2C9E651076799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BF8F6A48FAD3473FCC65460E4B24A5D59E44B814

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\entries\BF8F6A48FAD3473FCC65460E4B24A5D59E44B814
Size 356KB
SHA256 f669fa989a2b5eeb0f067bd26d426519e25ca1f823ab2cec157b5cf114d24555
MD5 78f91d86fbfd36f4f0a5e7d74f9e7f86
SHA1 8c4b26f761d5e622c4ea5d4adf1affd49b74fcb6
SHA512 7ded2c94ace399b50c14aa0aed1555176dcb3612cc735306fa1adaa20744c40326e90aa75943b11f73dbdc034df68173c04bc3770d526f722d5d2e840771868d
SSDEEP 6144:VatIoleCgd8D9UZrUqr3NI5bwvb8PgMvlYeUyPWzDL80niVq03XfEE5:gl3G8DWiqru5bU2yeUueL80mXf1
TLSH
T1E1742327566563A42299DCEAFFF31F02DCEDD27290ACC45B412613ECC64E6932538B72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 c6b5fb2660aa31aa06fc2ff13ea087e96f2db35a644d1a7706413aa3a65c34f6
MD5 ab5f2123178e1af04b32381c68bfd600
SHA1 6aa9171794f3a1867e771c39b094b9dcdcb7b6b0
SHA512 1ca4542cd0cb298dcc94706f1bfab4d883345a2c89c4acfa65d3fa3a105bee91f53bba7d26643e3aeca5417c1de92dae951ea2b425223d35f4d37671dc49f6f0
SSDEEP 384:HGNQiO024YSWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAe:mDZYSWTToXJWTTogB7S/AmVAf+hRML
TLSH
T1EA728E7D9F013CAC175780E9C8B583598D18B6ABDFB6C06D22883D09C988A5A71F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
Size 106KB
SHA256 14789aa2b84a1023d7f5d51f84b1f0686ec109ecdddbf4371fb85c19a080c5ea
MD5 6d223aecc57b65e3314c46e61823f075
SHA1 8b28db0059c812ea2775b58ac66aede22c955a01
SHA512 8570d9b7cf86b7091b8ce327f0aaf7b2816416986852b6adbfb8004aeda7b4d4812d29265e694ce85663a292201b98b01aa9749ea26b415392128ebf57431b23
SSDEEP 3072:X3lQg87JvL/XVfBesFWmtYaOhY0GwcjeJC:FluztUsFWRX5cjeU
TLSH
T11CB3AEF6DFA3CD3955FFD02D9A82843EF9263404F3A72009C9532750A2C6BB86779648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 1bd9c8ae39519a210e8ff93950601324ba0b63ff733a09d4d96c535d5c618b48
MD5 8ebf42b72ed6dad34307d0b468ad3982
SHA1 1b50d5f322d06c7a40cd56eef0a0c8e7475f8e06
SHA512 0da9102e109a0ce35edcb5e41fd82624b504045ba5dde9bea8819555049427d0b9284a8494ca485802aec5db4464584fdb28436b932f46ed4c0601c7569089b4
SSDEEP 1536:jTrliLBsQUHD0peCg87J0OmEcOF0ut/nNksFwts3+Do0IaLgxNm1OJLnGLCfGqTR:j3lQg87J1ZNt/nhF+DtYaOhY0GwcjeJn
TLSH
T1D9B3ADF6DBA38D3955FFD02C9A82C43EF9263404F3A72009C9536751A2C6BB86779648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winstall-Alex313031_Thorium_AVX2.exe

Path C:\Users\Admin\AppData\Local\Temp\winstall_4360_240698843\winstall-Alex313031_Thorium_AVX2.exe
Size 893KB
SHA256 962fab77a44b6af845dad1a13f349d9c8b37248add87b2663268e1edd092834d
MD5 32b748d44c78b13010f9df73d493098e
SHA1 0729d3f01c7a50450096898386b0cde563159f12
SHA512 8c1710224948f9cd664c5a481f4845a88c3f7ecdf62e13e43b5cfab210474a716e5a5a7182e10f55f50d6bd4d394acc08bc86e7d51959116a2dcc0faa60a6bdf
SSDEEP 6144:38J2qDRESypESYQBxGXjzHpNwEK6AZPPrOsETw9ja2bTkeYe5sRegrOGVjDRSmn7:i24REnUbxK6AtrWePEebgrO8jFVPtP
TLSH
T132158C17F2A415F9E4A7C178CA524912FB327C5A0771DBDF139086692F236D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winstall_helper_4368_240699140.exe

Path C:\Users\Admin\AppData\Local\Temp\winstall_helper_4368_240699140.exe
Size 177KB
SHA256 deb9e3ba67d6676f3238a1c863e771177addb67c50439eac53e1cf091a5c991e
MD5 165be3fd9c98c8cf39947c9e2a400f16
SHA1 09dccc9496f405e1b07a69e752641ab0b67831a3
SHA512 fd3f292d38f93d0b15a444da193571a8e6768356bba8b0cba07a72717181d7f52ac8336379ff6e456e33784336b9402db01e809eb87af6c89209258dece174f0
SSDEEP 3072:jVejnMrOGVjDRylfVUn5bPrs+fFkifuzDFVOdQT2G+tQ09:hegrOGVjDRSmnVXqiox+tT
TLSH
T1EC046C4773A520F9E177823889A11A06F772787607609BDF03A4837A6F277D09D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\AlternateServices.bin
Size 30KB
SHA256 050d4c3647208fcab46c75f8ab64261a3e06aeaebb9823ab3558cb10a53df770
MD5 7777111bc9ea62e3971da905fae5a07a
SHA1 925b5e97f45caea8d99da5e0832b77e68b550b0d
SHA512 cd5c725d81018b921d5c2118fbd9f6d17cf5952749c5b25b5c37edf2a0986a768ca0b14cd8fa6d642a6a829b3167edd3491a5168f6ba7b8777443c4a4afef3f8
SSDEEP 96:h0b1Aqb3l41yI56v8BMwyBFkM/pJvyx2PXyuZPpZ1d3NFFhbJYjiOeeQW6E0tJ0G:1QL22PZZ33ydhY
TLSH
T1A1D2DEF75BF57462F1925F7044EC788C4C3302254AA98588DB0DD19B1289BE6E2BFF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\AlternateServices.bin
Size 30KB
SHA256 bd5587dcc89a7c860a4aa283ae3198a76e44697dac59e9a92c49b8ffa730a634
MD5 5e9c472dedb7c8b97af0ac491b9ec877
SHA1 21d5c71235640e038ee45c4fde840d59b747f1bc
SHA512 415664c17bbbd1a47bf5ddc88aef8c5e0a8f9c37e90b502361f6f8301aa0a934601cf7d45a54e5b9413a4f16186dff125892661c0b77d105c87e90c2a6743424
SSDEEP 96:h0b1AqDrf4CWI56uDBpvXxNkM/pJvyx2PXyuZPpZ1d3NFFhbJYjiOeeQW6E0tJ0G:JQL22PZZ33ydhY
TLSH
T16BD2EEF75BB574A2F0925F7044EC789C4C33022549A9858CCB4D90DB1289BE6E2BFF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\AlternateServices.bin
Size 10KB
SHA256 5fe393fddd34fd7402317ce98f1b176fc04b31ff8cc9a990b934ecb15a444a5f
MD5 599037fbc8302602097c21114e8db37f
SHA1 148c80ae83c8a3bd69bd96ead4b157b8eaeab749
SHA512 cb7bd97a291acf5c5ff59443ba9889ba73a0b1938811e7aeb1293f2e4e40c06cd0b305a7bd23a1a68b9a9a1d8c4bb34f2114879b6a5879a31459d370fa874775
SSDEEP 24:gVuhMZB91ne9BG59xhl+lz1I5q9F55A5vG9VvMC9l0:Elkcb3l41yI56v8BMwy
TLSH
T1FE22A7F71BB16072F0928FB08499755C9C33032609AD9188D70990FB52C5BAAA17FFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\addonStartup.json.lz4
Size 4KB
SHA256 837003212ca179b1f6f687ba53ee39a28434b6e6601f19e9013be41133ccef36
MD5 5f3ee5beeef428e228676cdbf56ec98d
SHA1 b60d45a430a5e1e54989c94351db189d62c7085a
SHA512 e6016e61b804c6e656466c7fd0e72bdc1d302bfebc8f08b4904a7b0b2e1c3e9ba3793c68790a04f4ddcc676dcab37babfee71502ddbe642c9a77b61872134793
SSDEEP 96:NZO4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nv52xxhD8rGvm6ApwnHUuhN
TLSH
T172A17DBAD541EFA1FE32C0475CD97FB2E6A6AB3410B9C4D0F16AB1294C24A731705340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\addonStartup.json.lz4
Size 4KB
SHA256 0caa4ceab735f390e18bd0bff41bb13a1756b2fd16a687d654de79253d6cdd43
MD5 5e15fde1cd4a98a622444324522f3311
SHA1 5036c038d08dbce47ef18db4ffaf6900673682b5
SHA512 b726ba85f85f162ab0512895a8c0cf8ba0d42b3f6384bf87f62244d4dfeafd282adf40198defe80f27adef7c4884539786ba2f8592eceb4d275f2dd081850627
SSDEEP 96:dU55sWNNd2xWNhD4fMgGvmHQ0FVO1u+8TXqYjE2IXR1:dW2xohD4rGvmHA8Ti2a1
TLSH
T113918DB5D949FFA5FE37C08698D97F31D2DA5A7420AD9431F06BB2054CA0BE26786300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 18c9010713cc9b1b42328a63bb5d77abc1515bc6536682b1b39dce41d2d4bd07
MD5 916cdc9701bd671fa6fe7d19f7c2721f
SHA1 2a76b0cf82fb80c926a980a3a9dc1bf8d1810f08
SHA512 edc12ef951448d13abdf4cd147f6a540ac76ec970234aaa6ccceb7dceca04036a1313af1492583e04bebfb3cc2095c45c2dabc6f253b620e60f679adc3e8793d
SSDEEP 96:BFi2VFbA/dd66JozGzgClKtmc0d/UUvzSL7SlSdF95/7bkW60rcEjv6dShyUR6Gc:o1d66JozGzgCl6mc0dZzSL7SlOv5zbob
TLSH
T138C1ED24F639463FC419523BCCA61B400E363956A85E3F1531DCA51C2D9B2DE7B8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 7cc8021e999413cbc5d6beaefe0427514f94d6fbb2adcbdbfe3097bf25874730
MD5 f0e332dd79cabcee302c58587277df7f
SHA1 e9b84af761f9d0afe186d34db2688a14f85a5681
SHA512 dc6194b5e332f0897beb348f8f37fef9ce61688b39001667ff88a96a549984eff9d61113e3bda832c022ce53a10502a169f8246b7974aa7626ec804102bc3820
SSDEEP 192:TzSL7SlOv5zbo2bjidShyjGvS38u1d66JozGzgCl6mc0d:Pwbbo2b+d2yjWQd66JozGzgC1j
TLSH
T17CD10064EA38863FC409533BCCA61F404F353856A84E3F19359DA51C2D5B29E778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 18704a1b1f92169e6dc8b471836bbfa1329aac0fd766287decd2dfef5175643b
MD5 47e9170234ab1a6eb536f08ae911638b
SHA1 5d48b0e3aa9052df33e5dd7a2a4c007480381975
SHA512 f6668ccc99d8ab1cc99f8359868e42a00162fd54ffee5833d49b7e77c8e4a1b1a07b27388f9fd68865a7b6df365179f30e99a595613ef48e756d036b93202b15
SSDEEP 192:11d66JozGzgCl6mc0dCzSL7SlOv5zboP3ZjidShyjGvS38k:zd66JozGzgC1jkwbbofZ+d2yjWc
TLSH
T1F0E11054E638867FC418137BCCA61B400F35389A984E3F19359CA51C2D5B2DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
Size 1KB
SHA256 39184ef75b252acbfa3bdd292574df27b1993023ed6d3ed23799317e531bfe46
MD5 4c309b36b672d44c83e82e0e876f4ffe
SHA1 c34304aa73be29471950c659ce8ba1275c3eb81b
SHA512 704c4d7968f69d858f8034f4f929d2bc3f3e6100d11e358894dfa5e19ddeffb3d6d21d559f5cf68c891acede7a6faca230dafa64a06a99554e12bb58dcc51f32
TLSH
T1E811AA9C3DB98D2A9E87F698B480028D53158A4B08875C874D52DFCECD94ADD32AE479
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
Size 4KB
SHA256 163b52710f24c4f0ff451a8adaf3e43f4131674a3ec638c8d76a5503be4ce5c4
MD5 fd5b158d5d9506458668c7718f2c1c18
SHA1 96d5527e404c8ab231ad9e6a6ef5167708a23c2d
SHA512 93336bab9357f109afecc328193d3b2eaff5e8d50dae4738d726d54ffeb84b9173fb1b8f86ed3406cc016559da72736c347a65287c32b0ef33b15446e7baf923
SSDEEP 48:YlltbGpq0wgauJpoe0NhcBi/8kgPMHr0SualanPHu4wRUc3VzQA2xU6Z0qm3jCBb:1MHc9TML82SHu4wtOAt8e2wTOR1YV4n
TLSH
T1BFA1401D69B90CBF29C7E6A9B441039D43984713C4C71D8B4CEBDE8ECC8A65A329F469
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01976604-2a2b-4c69-b167-5b6dd3cd7630

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\01976604-2a2b-4c69-b167-5b6dd3cd7630
Size 235B
SHA256 af51063bfbe15adc57d08b1782e3432769fd48fdd2833bb644387f175d2fbacb
MD5 ca56ed6fca7ae8bc968089be90828328
SHA1 b61cc293e5407a6fabc63c7bf3f346ae362c439f
SHA512 c9cd1a087cd7b7f8fae8309e7f326e4ce11c0c00e720c365139fe4244d6335ba042f092acaaa326b4657ccf4324b742823616230f253ecfce6e95f88f175bedd
TLSH
T1A1D0978028A8239C88200F07F0E069C770488C331478E820895188788EBC9C841D1806
MD5 SHA1 SHA512 TLSH

Submit Download

0a16c9e8-44bc-4b48-a6a3-0d894b4d4b9f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\0a16c9e8-44bc-4b48-a6a3-0d894b4d4b9f
Size 886B
SHA256 ab3d8bfb6b1a6de103f20709ee0aa80abee521bd962777862df06ab386030220
MD5 eb9a3dac069ea5a63df43508f9158527
SHA1 ed6a74192e76295da923b10faa048ee6ec633c5d
SHA512 ba94094f9c8fc0cedc44e3645c3de25091f19c45dba063d17d51f33c4d6ce691f385a5d99e7d9730ff2e9b4128faf9bc25f2ee1f455480a2300e3757e585d7e7
TLSH
T13F11DC418674B5B2886CB286C5D1774286E02523D0CA0A083D648B280DBE91A675B307
MD5 SHA1 SHA512 TLSH

Submit Download

5765fa20-1be5-45ca-a0b3-8b3b40ce78dd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\5765fa20-1be5-45ca-a0b3-8b3b40ce78dd
Size 883B
SHA256 cdbe4386d881b839a830d7f5b4df110a6517a8fbb040e4be29746086a3b13c4e
MD5 87e6c6e02f542d8fb121b21afa569ef8
SHA1 982db41ea4d7b9945b6ca050f45537c52639a981
SHA512 6123c5a833c3dbb2bcd3ea82baf451b99993ed831ed823ebaef1f56cb4263d7ed020eb2856882e24f7781dee21f5306b18c28740cb1b0a938f9baf034420e8f9
TLSH
T17E112341D77079B2CC7DE34BC996370657E4691390CE45043DB18E180CBE52E97AB307
MD5 SHA1 SHA512 TLSH

Submit Download

5fee044e-ea56-45aa-a95f-11e54ef685d0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\5fee044e-ea56-45aa-a95f-11e54ef685d0
Size 2KB
SHA256 6f3ef9457643c7aa17fba66bfcadad8a18a5de8d2d167f53c2b7b180285db7d0
MD5 61b980616ab774deca71bee4d66f657f
SHA1 3a1008dac7b0dcd0faffe124fceb90cedcdfd809
SHA512 77117c6223095626afcdd10a2a391c6c01b38ac6901d6bad5bd087abaa6b392b1e460ee73c6143d99b0501df48ab6280b64560db9c06e7459ea6b893c2824a4b
TLSH
T1EC41411C75B45D768CCBF69DD092238953B08E4210C61C836E92DF0D8DA269A376F41B
MD5 SHA1 SHA512 TLSH

Submit Download

62487987-4442-471c-9ff1-7903e8b00f01

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\62487987-4442-471c-9ff1-7903e8b00f01
Size 16KB
SHA256 4515b59436126398d836f225a7d33904616c71c31ce991754b037dfdd66e1b64
MD5 60bbe6c5939305f4207343f8e522dda2
SHA1 cc07b5d315902d3582cde27887a2594ef9cfdc23
SHA512 111ffee1e541adca01befc39ddf90cd57252213d12156a1b24396890df350e49050d5d3e15ca84e9b3444944596ed17229ac0e31cbe6bdf4a4c445fb828f1686
SSDEEP 192:jKKSYuhuwdBnRZ1eGlPV7+bBMzAMGitcPjM/aaHB/U28+fOzDSxarj1588CP:XSYuwWP/PV7+bBMMXitcS/Rx7P
TLSH
T1E272F9166820557A8691E3ACD4F8BFC3E6F528CF4C018FCA97E4BD082DDE06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae3afd90-24be-4717-8e8b-5bca9f861a7f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\ae3afd90-24be-4717-8e8b-5bca9f861a7f
Size 235B
SHA256 c25f4946ec6aeb232d2c233019419bba895f4e6e6be81a8efe415e622b68bbc1
MD5 0aafacc39fb8234850f1ed8a4c3a2876
SHA1 e8054103a6503702fdaeba1a10d4a714ef1276e0
SHA512 eefc2e8a270d43dcafca73b058c54d48708fe5337c3fc5874c6935731690f43fad6573ab5726192f37591d06b38b0355e20df5a01615789f06adcbd352714bb5
TLSH
T1DDD097906498272D08090F0BF0B1A9CA3046CC3324A45821D5A180388EBCAE64122C16
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extensions.json
Size 14KB
SHA256 1bd3c9439f541730fff0ee4184f8f9a962578891df325cfd0b17e6df2181e32c
MD5 5ff66298104b14333f6a36ce29bd3ddc
SHA1 91248237d7c7f479f3cdf771a7ae7f15c5b7ed58
SHA512 35b99d28ac7306a6c28b70c99152659403a4942d8229221f028f43790b930b9bb0f744924a41d45aec70e1b652562a94e9ed3d6a4a9dfafba8d180b5b34a687f
SSDEEP 384:6kI4vuUmldvr8dhWC94zn96o5L4HLL4PNL4HZL4HAL4HC:9I4WRfYXL4x62434l4x4C4i
TLSH
T1D062421545148EB8298FA79BAA367E02C37D473B60445C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs-1.js
Size 7KB
SHA256 fbb5767ee06d24372fcbb221b3921d2541a87c3b1ca45886441d6c005a7f9858
MD5 b57fdf791e7e8ebe3190cc545a16af20
SHA1 c46c04931214b47f73be860f47040951a81f700f
SHA512 17714796a83534e5302662c8da20f397fe60f74cef530006e416f47ff270873420fcb1fda7d03e8fc42e5fde5afbaf6751f4a88bbe4a01ad811bf51ad5739974
SSDEEP 96:xH6UTUBqGqgXf6QZRNbzSASSlSdv9jXnzRHytUyCYBw88n8L4cnpV1pbGS:ksRgXf6Q3BSSm9ytPBw88EpR
TLSH
T167E1307895088F7F64B6776CAC6888315AB2013BBBBF68D750B554C8051CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs-1.js
Size 6KB
SHA256 4997d9ce6517f1e281cd12703ae6b421d4ece82de7cbd66c31045d0e7782e297
MD5 b4c659b2cd556f9b425d0caf4d42040b
SHA1 e95dbad2a28c65320ee635178aa8b096f4c6ac32
SHA512 be127b68bc2d63f9fad7b9e9062c32b2351f3519aa125b497ee39c38f6b0270c8f5542e6ce2fd049f5f28c1d91cacd4657c91d091daaf03b08f1ceee5fd04e8f
SSDEEP 96:xH6UTUBqGqgXf6QZR1zSASSlSdv9jMYnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6Q3FSSt+9ytPBw88EpS
TLSH
T185E12E7894088B7F74B6776CAC6888315AB2413BBBBF28D750B554C4051CF3482F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 df48aba7f5641050b1260b3c8003d603a7267da8fc4c72d429c49ceff3c91e94
MD5 7acb302ac6915f80aa49b8d3f820041b
SHA1 99b2090fb1b9ed915e1bd15d776cc2fa2fcd46da
SHA512 7a0ed9f5f55dbaa6879a87a72b2cf6f878ec89be9998ddf90e5298bf2aabf1bfa507bf8e1b466030e004b658e1e065fd5ca145746f6bfffc984d9ca273105fde
SSDEEP 96:xH6UTUBqGqgXf6WJ1zSe4jSSSlSdv9jMYnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6WJB4jSSSt+9ytPBw88EpS
TLSH
T1A1E13D7894088B7F74B6776CAC6888316AB2413BBBBF68D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 31a6d8bdbfc4706adebe3273c74b5370123f206b2426d283eea2160d1a176573
MD5 fee4ad019bcc3f29189ee20e5be8f738
SHA1 755d229401f0e7b0cd4f5dbdba0eb308279b6b10
SHA512 07fdec683a18be26ea39debf21fa59eac9593beb264d4b94f1aed636aa35a3aa6df2a7aa40d0722f7e754d0d2f838de5ab1cfe73cb3ccaea9bc5d31e4cbd7e96
SSDEEP 96:xH6UTUBqGqgXf6QZRkzSASSlSdv9jXnzRHytUyCYBw88n8L4cnpV1pbGS:ksRgXf6Q36SSm9ytPBw88EpR
TLSH
T165E13F7895088F6F64B6776CAC6888315AB2013BBBBF68D750B554C8051CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 7KB
SHA256 2a29f72b36ce01ea648d9dd93e86cf5b09f2765de65878712f19caa632119ccf
MD5 412c6a0114e2576aa906d85b7e5cb50f
SHA1 c4eb86b74a0ea36908d16294818e50bbf8ff88c6
SHA512 9541b994ce2306d8e83aeabed825ee207896c6025460236d48a50566f2573702b4c15f650de4f5de716c762a1cc2c6afff90c83f426d3f2caab234be010b1caa
SSDEEP 96:xH64yTmssuTUBqGqgXfDQZRNbzSASSlSdv9jXnzRHytUyCyLBw88yW8L4cnpV1pR:k4yTmssuRgXfDQ3BSSm9ytHLBw88YpR
TLSH
T1AEF10D7C9008CB7F64B6767CAC6849315A72013BBABF68D750B954C9051CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 95342f848559c8da43ccb4730c15d0336f85db5923291618e39d40c6d93e27f8
MD5 9faed3451500b2133a07e2dd01ea560f
SHA1 de45c9f8372e98adb7fa7c8a0031b8533c02fd0d
SHA512 08af7060de9b938f90e6e79f341dfdc02f91175d9ee144c93b35b9ac68fa4285126835c4d946df5082888aa39df23cda2018de54a8bd5721cd9b23f5181e886a
SSDEEP 96:W2r6TqjsRE9JyOHpptMFbP0ScHN3jfyv7oGNm1OI2XsNJD4xGxiqKs+7h0aMqw:WTGV98CpOuHN3oo2+zJD4x6iqKs+Q
TLSH
T1FDC17D1BF602DADE272E908009DE2B1D06C95D89CBAC12D89D0CE9FC84E4A9527BC58C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 fa862edd78887def7eed10996359640c22a3294356fae4c1b086d0e782ce754e
MD5 8cb973ea09d775333b98d7146a48e316
SHA1 b36e17acb405b9ceff9499afd5f56ab374946615
SHA512 33a3c6987b1af9dae033cf35430502f53a4b3479dcc624c932dd5f6b2f113635cb85e39e1e317db34b3181ced3920e9486f9322664c95392e6c537934b096a16
SSDEEP 96:V2r6TqjsRE9JyOHpptMFbP0ScHN3jfyv7oaNQOI2XsNJD4xGxiqKs+7hDlyjq5:VTGV98CpOuHN3ooSozJD4x6iqKs+Kq
TLSH
T18FC17C1BF502D6DE266E908009CA2B1D07C95D98CBA816C89D0CFDBC84F4A9567BC58C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 94aba6724465f1e8a772ef53b910b25e872d5dccf6469cc13bf9585214142098
MD5 0a2c106e14f160a7f2ac11f7a9719e11
SHA1 b44d526d889ea76f0903963ecad9dc96e1c32536
SHA512 3ca162d753304f782cd929e452fb8a455834d8bac7b717e51b4a47887a0a6aaaf592bdc4f7873257f277f792b92c12c97f2a7ce714189528b8fe071f5061f4f7
TLSH
T18C817DB5D92D6C86F8F862B140D248D3DB7FA40097B5C858E619013FC49B2C623C4BA6
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 5KB
SHA256 43319bf40a3222b9fdd2fd2de74311b63a1a71768c51d35b08dc2984f6cc9317
MD5 b946e8cf1ba9854ede18bda543c2492d
SHA1 d29e534e84a8c564a6868282e8a5fe8cd6f9d86d
SHA512 d7c5579daac092f2135c8a52d02d669777d92b4511d3ccf40fa699eca01d3d6227045a5879d5201fbee2f6962bb84acdc80ef299e1a3bf08af1e47376eccb8b2
SSDEEP 96:v2r6TqjsRE9JyOHERnkKkd11dpSGODJq7U1UMZLGf8W8Qp3goS2WSfEQn:vTGV98NnkRjf4FqWUMZLoDLXMU
TLSH
T17AB19D33E956A9C3E8F8B2B500E208E3C3BFA444E7E985CC8608463584872D117DD1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download