1cee14a456fdae44df85e9e6882462a6ca77ec4859522410868cbd8bc4d5a1cb

Analysis

max time kernel
2s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 07:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 85KB
Sample261023-hw97sscd67
SHA256 1cee14a456fdae44df85e9e6882462a6ca77ec4859522410868cbd8bc4d5a1cb
MD5 9d41943e6a9c7cb0b113f68625e7d346
SHA1 43cf21f42623c198568daba1ecf27c5ebc01ebda
SHA512 072f0bcf5f34f99fb1888e20a6113a3b41510be0dac8cc1836e34e3fffd3241a3d992da3b3fa3c1a3e6237d3b77cf6db7a3b32db4a15a4779543093e64b9df86
SSDEEP 1536:z4vynxxePDI90pfadnQ98PK6zRetm05j2SBItwsE8TIdjaMot9M48wWJ5fk2PYIH:8Pc0ZgZYuVPVil
TLSH
T1B1831A2762B110729A1751D927EF572933399003D606CC397A9E0384DFCADEC97E7BA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4396	firefox.exe
4396	firefox.exe
4396	firefox.exe
4396	firefox.exe
4396	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4396	firefox.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 4396	4816	firefox.exe	89
PID 4816 wrote to memory of 4396	4816	firefox.exe	89
PID 4396 wrote to memory of 2532	4396	firefox.exe	91
PID 4396 wrote to memory of 2532	4396	firefox.exe	91
PID 4396 wrote to memory of 2532	4396	firefox.exe	91
PID 4396 wrote to memory of 2400	4396	firefox.exe	92
PID 4396 wrote to memory of 2400	4396	firefox.exe	92
PID 4396 wrote to memory of 2400	4396	firefox.exe	92
PID 4396 wrote to memory of 2400	4396	firefox.exe	92
PID 4396 wrote to memory of 4912	4396	firefox.exe	93
PID 4396 wrote to memory of 4912	4396	firefox.exe	93
PID 4396 wrote to memory of 4912	4396	firefox.exe	93
PID 4396 wrote to memory of 4912	4396	firefox.exe	93
PID 4396 wrote to memory of 5612	4396	firefox.exe	94
PID 4396 wrote to memory of 5612	4396	firefox.exe	94
PID 4396 wrote to memory of 5612	4396	firefox.exe	94

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\.html
  2⤵
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1932 -prefsLen 27097 -prefMapHandle 1936 -prefMapSize 270279 -ipcHandle 1916 -initialChannelId {3cb80a92-aeee-40fb-87b4-e65d8207533d} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2388 -prefsLen 27133 -prefMapHandle 2392 -prefMapSize 270279 -ipcHandle 2400 -initialChannelId {a77acf73-e32c-4006-b207-2679adf1fb15} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3852 -prefsLen 27323 -prefMapHandle 3856 -prefMapSize 270279 -jsInitHandle 3860 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3868 -initialChannelId {2b8eefe4-a69b-416b-a68a-54aecfd59dae} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    PID:4912
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3896 -prefsLen 27323 -prefMapHandle 3996 -prefMapSize 270279 -ipcHandle 4132 -initialChannelId {94391b79-886f-4bfd-993d-1418d0ca75a8} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4600 -prefsLen 34822 -prefMapHandle 4604 -prefMapSize 270279 -jsInitHandle 4608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4660 -initialChannelId {c80cdc6f-ac89-427a-8a46-0d4021990025} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    PID:5708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5340 -prefsLen 35010 -prefMapHandle 5056 -prefMapSize 270279 -ipcHandle 5064 -initialChannelId {6c46fe24-a8e2-410a-984d-3ce052d22e76} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    PID:4260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5600 -prefsLen 35062 -prefMapHandle 5580 -prefMapSize 270279 -ipcHandle 5848 -initialChannelId {e7482eb0-8025-48ed-af46-626d1db2a103} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
    3⤵
    PID:5676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3464 -prefsLen 32952 -prefMapHandle 1196 -prefMapSize 270279 -jsInitHandle 920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5888 -initialChannelId {af7b2007-1367-455f-9cd0-fca126df84da} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    PID:3404
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5528 -prefsLen 32952 -prefMapHandle 5856 -prefMapSize 270279 -jsInitHandle 5868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5904 -initialChannelId {adf8a4d4-fbbb-40d0-bf45-bef521bac9b4} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    PID:3604
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6236 -prefsLen 32952 -prefMapHandle 6240 -prefMapSize 270279 -jsInitHandle 6244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6252 -initialChannelId {b27a3961-f054-4f2e-9da5-5b6bfc001bd3} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    PID:4268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6516 -prefsLen 35062 -prefMapHandle 6388 -prefMapSize 270279 -ipcHandle 6400 -initialChannelId {05f82f5f-a155-42ea-8487-2321c8ad4237} -parentPid 4396 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4396" -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
    3⤵
    PID:4928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.contile.json
Size 4KB
SHA256 81cfb96e5dd11a4ddd176eb66bdf1840587649e897922a953a9c06089b702bf4
MD5 f1820f53743aaa9ae79a26262c446412
SHA1 32011040a68d456ada32ab550fb65e2c0c652acf
SHA512 951623ee45e608b814fe6c4ae00f696b7c6bc8a0b91a180919cc6d2141e4c1316b51da8712aed85b0e78084d7c0360658bb2746afb5d108ed1b6c03fe388b4ca
SSDEEP 96:TP5qMHlOFmf35BDH6T+mRrfon4KYl95a1o6DKNPlz:EMFOFKDHmRrQWu2wKNPF
TLSH
T18191A65F857848130B30B9E16C4B37BCF0477056E9E0DE6CF16A9C71957C7AE90DA588
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 cd4360742a363f0b16074a7667e7e9c170e4e2e01734501faf117c0475225ea2
MD5 1e747e595c55c6500b0862d0c75ddd7f
SHA1 4ae3b86c6eae2dc32b929d7b5c2c07992a24b39d
SHA512 750bd92b7893932fc02e66fb137cb00d87cfd5160d3b9c13fb946c7f4f199221b4a61215fff885ecd6371428472b9d294b84b04d61c0872fe801219de0c8cdc4
SSDEEP 768:ByrMPNKdqzEpvX051uPBVRitZFeP+/+G7qCOOr2UOORJmc9:wrUhzEOwPdYbeP+2G7qNUOOX
TLSH
T15C7319E3A6E9B2BB1B9037C71C0F7A6761D20145E78506CDFCEDC91D818C798423A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 2a4565a2b92c161ffd2654564d4a34dd6d7459ea714f52b9106eb1c9c91d1d87
MD5 9bffa7bbc933d4155a0525e18e809f80
SHA1 a20fb4e12fa4469c66b2bd98f69d0d512cc33b06
SHA512 a23bf29a7fd7dc981b8ad9f123e717499318de249acbd3d1c4268c4dca765e91a3a084cae6ed716232bff449f10aedff27fdf3e1feca4ba30972e51ffd3b204f
SSDEEP 384:HGNQiO024YpWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAG:mDZYpWTToXJWTTogB7S/AmVAf+hRMn
TLSH
T196728D7D8F013CAD2B5780E9C8B583588D18B6E7DFF6C06D269C3D09C984A2671FA44E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 cd754e37df37449dc46b87b32bf411a293a6929054a62c67ff76cd390c5d7d41
MD5 9f36f57cd109cab0c4c63dc28710db5f
SHA1 b44c541fced771f4c53afb389c756acd1263faec
SHA512 8214057c8023e4ff0bd7eb7046a4e23dae3ffe4850b7753f1f88b32ca7af705c777f341724714681b76c4e494fcc3626ef87c43d9b8241ab7920d2913121580f
SSDEEP 3072:X3lgDmqvbqGUMA0WfZRvNVaCdqfDhWVvo6Lo8q:FVyq3NfrvzawAh0o6LLq
TLSH
T1B0B3AEB6DBA2CD3D54FFD42DA6C2883EFD263000B3A73409C913275466C6BB87679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 44b495dfd80d24e1ca93f352a5b2d73223a3d320b9d1ad15e0e4682004c1507b
MD5 4d7e82cb8665089d4e2265054f43b365
SHA1 c26a40875178d95a92e3be80b824e405f2f8690f
SHA512 56f1863ab47b2d7b249b25aa0a5c42a6e7b26154389cb23b86aa028e8378ffd9e1fdea855ea9bee4d42529abea4a502e69296d9db1abfacaf7c7cc7e3f937445
SSDEEP 3072:j3lgDmqvbf/VYtf9BJvNVaCdqfDhWVvo6Lo8I:pVyfNKftvzawAh0o6LLI
TLSH
T15AA3AEB6DBA2CD3D54FFD02DA6C2883EFD263440B3A73409C913176466C6BB87679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\AlternateServices.bin
Size 6KB
SHA256 a0ca7896d8b8bc8d16d0cd851b3547cfdf509779c1b5a63a4eec3e973938484f
MD5 9b382c3d5a7a989fced38d28d6cab744
SHA1 f106f61068562d302beb364f671595780d9bcd33
SHA512 8f443643891a1c9a041abe1fcf2cb04cb7374dac2c1761f4e46e5b4f981054f3a2569af922b97503bd7366f4f395a5701c4ba742c8d79cdc9d7aa7126039f67c
SSDEEP 12:JQphMQSQH4JBG9qncm8fG9qG9hEBEcE/e4qncm8X9QfEcE/QApjncmGfApfAplEt:JuhMZyk0qkezhEBtkNsm+5RI+lzn
TLSH
T112D1C6B362B74062F0615FB4E02435D4DD37162A58B891840761DADA56C2BE6D0CFB4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\addonStartup.json.lz4
Size 4KB
SHA256 531c931238bb8b8f27818a17e0a53364a0db3dabba2cd4085a7f7f8776dc47c6
MD5 76c763c57afeb799debf01cae52caed7
SHA1 6f179a00cb77c1d0ac2b86e25c2c9607194c6fb0
SHA512 9df99025d3585c6aa7ba7de952809517c974b4ad71c04c714e702d02f0c7ab485e728b6f06cdc131f1752f9ec091136239cb38051b2ca9c954afcbe2dab08d5b
SSDEEP 96:NgxQ4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Ni52xxhD8rGvm6ApwnHUuhN
TLSH
T184A17D7AD541EFB1FE32C04348D57FB2EA96AB7410A9C4D4F1AF71294C24A735700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 e579ad48dc67c07d66f434ac85f4f8aaea6a02e341133e4b2ca2ad117da6ef4f
MD5 7debe457a02ba4fcb3720a5e3c4b7915
SHA1 ddc961f2ba69af39a4cbff485d0d47bded8f3b57
SHA512 b879b3e967c12c7158a6f414c9830ccd41f7ac19415a7e45f7d279843b90ec19a825a4699093addcfd9780cf51d8e02bbf002cc8e6166a487ff3c3daddd5988d
SSDEEP 192:GOv5zbo7WZdYyj+Mv1d66JoztdzgCl6mc0dz:9bo6ZdYyjZd66Joz/zgC1jd
TLSH
T182E1FFA4E628863BC008037BCCB61B410F35399AD84E6F1975DD651C2D5B2DE778D1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 38e6c83334473dadfc895d2e6487103999558f92a3e5860b4be870a688c1bf22
MD5 75727e461c6602247ff856af82aeaa7a
SHA1 a9878ff68a8da25c08f83a1271fe840852b44c16
SHA512 5c225061c6cd7ff0bd3a6a7db1ee71bdd0157de0044916564ba4d65dfca0aaa2ddaab1a46e792833c6175a7e2d4c821c070d470024c4c1e3b7a775e25e63a64a
SSDEEP 192:wOv5zbo7udYyj+Mm1d66JoztdzgCl6mc0dz:7boydYyjcd66Joz/zgC1jd
TLSH
T1EAE1F0A4E628863BC008037BCCB61B414F39399AD84E6F1975ED651C2C5B2DE778D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 f5cde4bae33ac58b5109d22d515a244768c26d5f452c67e4d4ef09470c1080ec
MD5 5525f8a6a739971023b2dba0aef03fa7
SHA1 4fa7b9058d14a24d2e7df8e8d5b310a936731193
SHA512 16c298185f8a772d44b5e8a1d0b17d8ea1fed70c81f3884b9d0d48530ff3ac3443457bab7d80780ae803bdbc5a96c00041a480a7668e43d2830ca0d3049763b8
SSDEEP 192:oOv5zbovbdYyjiMm1d66JoztdzgCl6mc0dz:TbovbdYyjYd66Joz/zgC1jd
TLSH
T1BDD1DB64E629863BC408033BCCB62F410F39759A984E6F1931EC651C2D5B2DE779D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\events\events
Size 1KB
SHA256 a85e040f9d61f493a3fadb530ffb5ba7ee3e1100b802d107dd177674c2f1e4a9
MD5 71a1f49a859f0cf6bcc2b6679580d16c
SHA1 7309ddd20903722d0786ab5ec42fdcded264ff92
SHA512 4a0abc2159083849be03a487a5d8a29c2b8c8c76426b853fafa97e9e85e358fb71e3620e2c77f6d070e47d7a642763750aa2ea8dc208d5ad3515f583b3596afd
TLSH
T1EC21375C3DF84DAAADC7F69C784112CE53564E0A04871D474D22DF8DCDD2AEA32AE439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\events\events
Size 2KB
SHA256 bbbc4bef7dc7437d102930ad680cb099921beb165d806d7029f480117a45f823
MD5 f52bd2a8cd3624478c98225bd61285c1
SHA1 94588a913191c240f41d9bf677305c6c2e8346d3
SHA512 9451dbaa7c5fdb1cc3518dbedb25eb59cf1f28482a9a51f5b5e7fdf38077ed10a8c04320df0c4ae8632f38de08851883d099906136fffb0400fa3500f24d96c2
TLSH
T137419B0C2AF94CBA7887F6CCF841028D57965A0694832C874C93DF4DCC53AA932AF53D
MD5 SHA1 SHA512 TLSH

Submit Download

24855bae-70fc-4057-9fb7-fa97413c5711

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\24855bae-70fc-4057-9fb7-fa97413c5711
Size 16KB
SHA256 ae68f492c3dc662518286a7c570c17520fa8b4c195714437c12fe07672ed6e8b
MD5 8c6cf42e754f197225e33715cd317a8a
SHA1 45d866f49960c32e0f47475b9545f3ba73dcf91e
SHA512 daa44aff029b7c9adb12718348aa9de4ad6e38dd13064a2d98f6f84f0537b79f478f2f4f3d02c9994ced251487fc7e165d0a2804e9898492b12cddcb8c863c69
SSDEEP 192:PkzQbAS5Qd65QvHvweC8mok5R19ASBQMbD2tjCbeJoUhS20F+h4osBrgNE6Cbosy:ckbAS5Qd6uvvw8m15PyM3eE6vj
TLSH
T17272C9565820557A8291E76998FC7FC3E2F628CF4C418FCA9BE4BE0869DF06D1127C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a3c43cb-09b6-43ce-bade-6492da3a0333

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\4a3c43cb-09b6-43ce-bade-6492da3a0333
Size 886B
SHA256 fcd5531fa35a8ba873eddd090909f2d60de52239e27ed8b0aace1473fdf88492
MD5 38ce48eb5c4ef8cc1ec321e9bd727e8a
SHA1 fc64ca69351e5b04307ce4074c9559afb564cfc1
SHA512 9c3ce2009058fb8aa50cac7b46e832ac29bf9ca252cf3f8f977f7a48d0b779a36f05c014153074136feaeff1b635ff920fe52408a943ed7dd91e38ae82d1cea1
TLSH
T1631100909761F8B28D2C925F84D577428BA4B53380CA8D087EA18F1C8DEE61EA366607
MD5 SHA1 SHA512 TLSH

Submit Download

94d371ce-7c7c-4a82-aa01-cb6d1ba12085

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\94d371ce-7c7c-4a82-aa01-cb6d1ba12085
Size 235B
SHA256 60a77f76ee4932728edd4f4d043b59c963159d2ada7e3de50d1dc6248e4b5b3c
MD5 62143dce32ca697c356d4a61b0668deb
SHA1 87e80dcca6dbbcc0315b9abe3aba9f84a225a7a6
SHA512 d27db879f46198761f183fdce28c7e920721bd82466cece7a09cf6918369319f25892c83bf1447f4bd1e4a5a0687c8c5a0fe35fb4f6c814cc6ad41ba33789f84
TLSH
T168D097C0A48C276C88044F0BF2E069C730868C339470AC20EAA498B49DB99C88112C16
MD5 SHA1 SHA512 TLSH

Submit Download

979fe761-fcc4-4a0d-abee-16589b008bba

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\979fe761-fcc4-4a0d-abee-16589b008bba
Size 235B
SHA256 2f7c2f31c1b745144408e8fe5c0b247c5379be4438f8b0c219a94a98353cca94
MD5 982b4dfdf3f395b988f0f7418d157770
SHA1 68fd0b1480f620b84bc4a3e326c5bfc62a344f4f
SHA512 ddddf70b05564b59500923f605e51385869b54a2be54c31402eee9a3edb2098af9f21b55c1a59bf735851aae1e42f747441e88c5951221f1551d663282e15ba2
TLSH
T1B2D0978124982B6D08208F07F0E268C730CA4C3314B89820C961943A89B9DC90262C1B
MD5 SHA1 SHA512 TLSH

Submit Download

a264b0eb-2441-417e-96c3-ae02404ce7ef

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\a264b0eb-2441-417e-96c3-ae02404ce7ef
Size 2KB
SHA256 bf365cc95035f1576f9c89065419fc87e544cad522b7b68416b61d650df24bbd
MD5 47aed31bf4d6709fa75e4e2067cb7c9c
SHA1 2775f7fe1cc09437d92663a1ced5962310e0c82e
SHA512 83cf429ac77bdb106f0e2caedb2af0dd12c77b4d8d9b3dcecffe0fb441894162fdba3e63b3c99b68eac0a5a474df6a08a268ab9ffb119280983328cfa3044994
TLSH
T15F41546C75B88D778D8FF24C9081238A43608E1344C21C876E91DF0CCDD669EB37A527
MD5 SHA1 SHA512 TLSH

Submit Download

cc28d739-917d-4358-9086-ff6f9e29724c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\cc28d739-917d-4358-9086-ff6f9e29724c
Size 883B
SHA256 5764a5efb50a9d328cbba3928d560f55345e727cb1b640bfed90e81d14ac0a58
MD5 37e22fb45dee19723b1ff337a1983436
SHA1 399a49b839db7582650e8248e95ab0fb747d1759
SHA512 5ccdae7ebc46da00fc9d4793d597da284abfe3940b7600cc407b72ab05fca9a563a5c6bfe0a9dba3371d5ac78ecddd7a87dbbc39b3bd0b468310c6848596dc7c
TLSH
T11911C090A725B5B28D2CA25F85953B424BA47633C0C5C4087DE55F084CAE91E93BA60B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\extensions.json
Size 14KB
SHA256 a2e21f6b1af114d61328e7decb2a1b15d63ce8587e88f19a3b4a1f892427f15e
MD5 eb42279ff4647b48313ed77da5cb2fc3
SHA1 4676e0f62974562ad107968f96a6998a66f12eb1
SHA512 45b21007b29d4f064adf99862235fb9c0eab1bf146de534ca9f565fbbe7a0cd8e60f0e37598f2463d71895f6fedaee8f09d293eb834498d66de9752f56f45877
SSDEEP 384:9kI4vyUmldv98dhWY94z+96oBL4HxL4PpL4HJL4HnL4HC:+I4qRf+Xp426u4J454B4r4i
TLSH
T13662432549049EB8294F578BAA367D01C37D573B70445C78F4DD8FC842FA5B902BB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs-1.js
Size 6KB
SHA256 92987fc99bb1b40e528f8f70914a032f1f760c5274d76578f1482347832859a2
MD5 8a5cb9ff1076c264378148151a9142bf
SHA1 7bd3870350b7eb328fb97f817d9540720507181a
SHA512 4ed2f52ad33f6088537ec2a9c456a366487c9d6ab42de2476335a646eabd40737a9dc690b4120cc4b33b01e6f4e580e7bd956d8f12201264324dd74cf2575e5a
SSDEEP 96:xHeUTUDqGqTfXDSObzSsSSlXdv9jWnNHG/C+DBw88u8L4cnEtjI:8eRTfXDSKSSCG/C+DBw889
TLSH
T1BDE10E7894488F7F74B6776CAC6888316AB2013B7BBF68D650B54489054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs-1.js
Size 6KB
SHA256 147e7ddf2ee198cf374f78e549eec56b0a91f6997fda7b21bd51dfcaced5d1b6
MD5 2d6f26f9518dc92ac6da3242d4981089
SHA1 34096182d2f9f9ae12ff5859f94da0a3fce0f892
SHA512 2dd216a6025d5ed488452573d3e22cb16d910287a0693c6718a408dfaa56b5c0e84a01e3884a510c985a87d639ebe01cc1e90aa8d3d66258c5dadcb68689162e
SSDEEP 96:xHeUTUDqGqTfXDS1zSsSSlXdv9jYnNHG/C+DBw88u8L4cnEtjI:8eRTfXDSFSSQG/C+DBw889
TLSH
T19FE11E7894488F7F74B677ACAC6888316AB2013B77BF68C650B55489054CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs-1.js
Size 7KB
SHA256 1829758b84513b5216feefb7609e14abe4f72d6cc5fde345042eb0ff424b1b49
MD5 a677c994b8112c37a782149df5df2f5e
SHA1 fa765a88f415ae758798ebf6f128f948b1914278
SHA512 e231aa280002ef143db0fda55318722cc1bed082a9ec2b881f048f0254f5303efb818eaab9652f96d1c12e3b9a7baf02debc430f12e1933d4faab502b235814d
SSDEEP 96:xHeJTUDqGqTfMDSObzSsSSlXdv9jWnNWRnUC/C+7Bw8868L4cnEtjI:87RTfMDSKSSHRl/C+7Bw88x
TLSH
T133F10C789448CF7F75B2776CAC648D715AA2013BB6BF68C650B944C9050CF3442FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
Size 6KB
SHA256 c072acbba30b9f1b70bcb737b4b004c005ce1e25119bb0a023b4cdfa30b61620
MD5 6ad727fa44e4b2a47ccdbdcb2ffc7c0e
SHA1 2b7d95e928e3a46ec6ed8c0d5b29b21a32c871a6
SHA512 fbc0817757e5d8c35c22d8fd6b7e8ea1e56f418e381158a370b6a62d2817f895f9ffe94d5b8fec102e656ec2a03822cc6e44c280a7b828e5dac4886f41fb246d
SSDEEP 96:xHeUTUDqGqTfXc61zSq7SSlXdv9jYnNHG/C+DBw88u8L4cnEtjI:8eRTfXc6HSSQG/C+DBw889
TLSH
T127E11F7894488F7F74B677ACAC6888316AB2013B77BF68C650B55489054CF3882F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 feec4b7069f8251fd72969750176742e3a33afc428240352af051f0937c51d7f
MD5 a882bdd1da429cf8a4ef8702dadb7280
SHA1 a62ac6f2bc1efd00456b96a5e037b69db374fdb0
SHA512 57af554afb6c81def91fe0731d30b830fa69134a5f85c912cedabdcd3ea4360a9afdbaf96c33ace0e72e48f5ff343d3c6971c9340b6c6e0d165426bc706a6113
TLSH
T1A92108938D0B3FB167C1865EA081CFE2C7EB2061027508B0D15AEE421ADE45E7F8B35E
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 acd9e78da30925d708ff55a748e7a4cd4b5e3fc9bed714a70369e799c118623f
MD5 517ccdeb5324b0d0419cd1bf669f8830
SHA1 008324f0b613de92fed5fba9274a6743656f88f8
SHA512 445361c47a9fba7641d414b7f547a788a0b86edfef335215beb1c2c15515c92385e2a08ebefdc7837c27dba39941bbc7a6401afc57936222dd0698e756cc6633
TLSH
T1BF2108938C0B3FB166C1829EA081CFD1C6EB2051027408B0C149DD4119DE45E7F4B35E
MD5 SHA1 SHA512 TLSH

Submit Download