57aae5a04ed01df767f903915dbd72f2d380bf6ca31a7d6408d91dea7bb28909

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
40s
max time network
36s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
67ClientCrackedByDexter.jar
Size 3.3MB
Sample261024-ebe95sfw2v
SHA256 57aae5a04ed01df767f903915dbd72f2d380bf6ca31a7d6408d91dea7bb28909
MD5 adcf13d3e097c3291aee6ba5d7f92008
SHA1 430935e0de8c328e14fc7a054c2daf150145cb90
SHA512 27ddab3bcdd14d680eaefa3931812210ab2e313a42ce03683c1e9353f74c7d5bfb27ecc36a73c04e605922c04732551bbc9977d2f6a22caebe69df6d33a9ec72
SSDEEP 98304:m5v8uQ0qomPDGbxM12pPGrj/OXsLGL+qG4+VR+:mOT2b+124f/OXsLGTGXVI
TLSH
T1ECF5339B2EDA6CACE423703D865494E26E764288918F5C3F040461DB19FDE1F2F4BBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5008	firefox.exe
Token: SeDebugPrivilege	5008	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe
5008	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5008	firefox.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3844 wrote to memory of 5008	3844	firefox.exe	96
PID 3844 wrote to memory of 5008	3844	firefox.exe	96
PID 5008 wrote to memory of 4988	5008	firefox.exe	97
PID 5008 wrote to memory of 4988	5008	firefox.exe	97
PID 5008 wrote to memory of 4988	5008	firefox.exe	97
PID 5008 wrote to memory of 4348	5008	firefox.exe	98
PID 5008 wrote to memory of 4348	5008	firefox.exe	98
PID 5008 wrote to memory of 4348	5008	firefox.exe	98
PID 5008 wrote to memory of 4348	5008	firefox.exe	98
PID 5008 wrote to memory of 2756	5008	firefox.exe	100
PID 5008 wrote to memory of 2756	5008	firefox.exe	100
PID 5008 wrote to memory of 2756	5008	firefox.exe	100
PID 5008 wrote to memory of 2756	5008	firefox.exe	100
PID 5008 wrote to memory of 4316	5008	firefox.exe	101
PID 5008 wrote to memory of 4316	5008	firefox.exe	101
PID 5008 wrote to memory of 4316	5008	firefox.exe	101
PID 5008 wrote to memory of 944	5008	firefox.exe	102
PID 5008 wrote to memory of 944	5008	firefox.exe	102
PID 5008 wrote to memory of 944	5008	firefox.exe	102
PID 5008 wrote to memory of 944	5008	firefox.exe	102
PID 5008 wrote to memory of 5084	5008	firefox.exe	103
PID 5008 wrote to memory of 5084	5008	firefox.exe	103
PID 5008 wrote to memory of 5084	5008	firefox.exe	103
PID 5008 wrote to memory of 5084	5008	firefox.exe	103
PID 5008 wrote to memory of 4816	5008	firefox.exe	104
PID 5008 wrote to memory of 4816	5008	firefox.exe	104
PID 5008 wrote to memory of 4816	5008	firefox.exe	104
PID 5008 wrote to memory of 4816	5008	firefox.exe	104
PID 5008 wrote to memory of 5016	5008	firefox.exe	105
PID 5008 wrote to memory of 5016	5008	firefox.exe	105
PID 5008 wrote to memory of 5016	5008	firefox.exe	105
PID 5008 wrote to memory of 5016	5008	firefox.exe	105
PID 5008 wrote to memory of 5804	5008	firefox.exe	106
PID 5008 wrote to memory of 5804	5008	firefox.exe	106
PID 5008 wrote to memory of 5804	5008	firefox.exe	106
PID 5008 wrote to memory of 5804	5008	firefox.exe	106
PID 5008 wrote to memory of 4124	5008	firefox.exe	107
PID 5008 wrote to memory of 4124	5008	firefox.exe	107
PID 5008 wrote to memory of 4124	5008	firefox.exe	107
PID 5008 wrote to memory of 4124	5008	firefox.exe	107

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\67ClientCrackedByDexter.jar
1⤵
PID:4716

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3844
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27099 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {fc8b0c4a-82ef-4255-96d8-8a810785474c} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4988
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {4e44e6e0-85c8-4b67-905e-d4f1d724556c} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4348
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3820 -prefsLen 27276 -prefMapHandle 3824 -prefMapSize 270279 -jsInitHandle 3828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3836 -initialChannelId {9245682c-f9bf-4523-9db1-6396eb914891} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2756
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4016 -prefsLen 27276 -prefMapHandle 4020 -prefMapSize 270279 -ipcHandle 3872 -initialChannelId {10bd05e1-1361-4db7-9951-dfdfb0c08795} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3988 -prefsLen 34775 -prefMapHandle 3984 -prefMapSize 270279 -jsInitHandle 2656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4456 -initialChannelId {2cbda3ab-f659-4242-9454-63197a6c2490} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:944
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4764 -prefsLen 35012 -prefMapHandle 4844 -prefMapSize 270279 -ipcHandle 4876 -initialChannelId {f6c0601c-3116-4488-b41a-3c7090c28c87} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5048 -prefsLen 32952 -prefMapHandle 5052 -prefMapSize 270279 -jsInitHandle 5056 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5064 -initialChannelId {95fb7f8f-262b-4d4d-a64f-c8454459f02b} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4816
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5132 -prefsLen 32952 -prefMapHandle 5136 -prefMapSize 270279 -jsInitHandle 5140 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5148 -initialChannelId {12810558-efa1-4449-852f-4b76249b2433} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5452 -prefsLen 32952 -prefMapHandle 5456 -prefMapSize 270279 -jsInitHandle 5460 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5468 -initialChannelId {48956933-be32-413e-a7d3-2cff7ffc2403} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6048 -prefsLen 33071 -prefMapHandle 6068 -prefMapSize 270279 -jsInitHandle 6072 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5992 -initialChannelId {6c365d87-0d71-4e1a-8385-4835a4a20ff7} -parentPid 5008 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5008" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.contile.json
Size 4KB
SHA256 0f3257139ac7dedbd994fa26ce28cd2992910766878964febdbbb8c9f0fe85ab
MD5 eb5b122ceeff69cf7413940d7b8a1417
SHA1 d1cd2ffeb8ac62c589c139961c3498ef66fd0b9c
SHA512 0c7ef80985cd150c3e7cf9b6a8ebcc10ee4e34d914ae9f98ef48cab70b05343e2ae6354b9639a3e5d4a3213c67e246bee44fc8d9f7758949cf1ae2be95f3e279
SSDEEP 48:Ydf3reDZsCdyegwpN9VbQ8UPugLvNEiQXnnreDZsCwyeE2vT5GSs2avQFycnqVKG:HiSN9Vb27yiMRa2tHn4KYQxC6D4Dlz
TLSH
T19D91DAEBC179401607B479F42D0F26E8F11B742959E4DCE8B25A9C63E25CBBDD0AD980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 fcdf44af210ee29c1d2e127980887481c0c7e596c269c3e12479de82ec4695de
MD5 0a74b0c2d21811beb931f4f5f3afe58d
SHA1 c916b669f42e3628b08ab2ba6ec56132c98ba36b
SHA512 d4e2b656933909f83aa75977701913b0a73a43e6162307d92ebcba5a37c82e43243566f139a06a10f502e904e662f6391bb5f8f4dbdc874173f771b5d39bf46c
SSDEEP 768:oyd8+xtZX3sVsQM5MA8Y844lN7nTI7uScezJeLR95sLcSV36TskQDxD:TdzZnsVsrMA8Y846NQ6SRleX5sLcqtDx
TLSH
T1F67318A3A6A9B1BF1F913BCB2C0BB94B66D10159E34505C9FDEAC91CD1CC690113A6FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 d98c8b08ac7767f9a2ccf47c90cbe198ecf2db6cc63cd58a353bf7e276af4fea
MD5 d3a358d6a91311f67ed6d0f1f3cc98ad
SHA1 4ca80d15d9b115f2afb6c6e47d87f48e4f10774b
SHA512 51be9412d7b9b6e3ef2f4086e2e5d409eefcfbdd99fa15fbb148688c67c2e8722e1a1c23b4d7feb5915f3ff00578e54508e802e48e4de51a82789698ad2613b1
SSDEEP 768:oyWxxQsDJ2P2MGeRi+3g6kQ5RvhpkiRR51k9Ex7Mse4YOOrJ/+Gf/OcLH:TWx9f65LpGE72CMse4c2GXtH
TLSH
T13B73FAE3A6E8B2FB0B9037C72C0F796B56E20195E34505C9FCEAC91C81DD754123A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

17981

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\17981
Size 52B
SHA256 6d099606f3b02fb2cbc05223d6b5a94829d5b324c6e5a629f5f0813c172a0ee0
MD5 e07f6770d23583ad73f6810734edab20
SHA1 2ad2944461792f51bceab550e708bb04c10c0e66
SHA512 8d8063a7110f98f49118341f75b2f70933429df5dafaadd2efacef9b050b3b5c8467072fbd324544c2ddf2bd3508764c390a68e887709b031e97191493a24f46
TLSH
T17A9002884251C901D15580710C00A0B81C503D0044C40F227492075648160E24004911
MD5 SHA1 SHA512 TLSH

Submit Download

22398

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\22398
Size 313B
SHA256 5b8c17c69958b0cf4039461f63ec7b9cadf290d9bdf3fa773450e5ce2b2b9ffd
MD5 3872a7b429bc74ce065f7661a325eed2
SHA1 b50664efe86c6b6e76204e1d05a7eddc88a673fb
SHA512 a062a86f810fb3241ebb794d1417a81a99503c89a1e7874f93a56b19c4bd5ebbbeaf2df859b61a31713869bd230a59563211e9dc39b696cd264af814a18b7a0a
TLSH
T1E5E07DB30CBBCC46BDD5CCB84CABD58C9C124253942D67866401921305D49C610227E0
MD5 SHA1 SHA512 TLSH

Submit Download

733849FFDF119F55FC621850508A6E493C2FEC79

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\733849FFDF119F55FC621850508A6E493C2FEC79
Size 353KB
SHA256 e19186c01c546187395da9681245eabb90aaa8c121dd2b134df46072ef496abd
MD5 7dc898d12367cd8270648223e59f08b8
SHA1 6e24ff459eae84021319a8d316e621aaf202eace
SHA512 361436be102b37ed19f8d55f1b0d3cdbbcf2c5be7c1cd92dce95ee7dc0171ae5969575ac2a2ad5b392a7941394e2c3f6554f699a5cb36fbdeb5162ee7798d49a
SSDEEP 6144:kEen5NJZWrGd8LABzhu4/tZvMBhSoAxh/u0jd33ScBSNFWMI+t4A9AdHgndKrRqV:ktLWrGDdlMBhSoAxU033ScoNFWMmgnEm
TLSH
T1D074231B2E0DC93227834796913E391889019A1A4FCF67D11B6847E8853CAFBADF51DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 93c371c5ab3fff6259e892628776153359e0e1afae449b732cb56e2427b73c75
MD5 82cd953dbf3b86dac632515a10437b16
SHA1 f9784a4ad72a2e6e006418682793835b7ad92f61
SHA512 12551d6ebbdf3498ccd7c8717a4cc35f27850bc9db5992bc10e9c236a7c43c2607a5059da56f58e4e32af07924e4ee2df517a225b7abe4028e4a08d752299712
SSDEEP 1536:jTrlinM/bK3+WkuvHLOac42SVbvDFvpcnvjVvHa+9lcLzWl7QGzc2auQxVFQC9DF:j3lNPuvnRbvDCPrQSlfKZF9Nl/8Y
TLSH
T12AA3AFF6DFA2CD7D68FFC4289AD2853EFD222414B3A72009C923771466C7BB46675248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 5KB
SHA256 e136477d0eafe5393dcb04af7f1db39be9649b5ec192fcb248418af10256f936
MD5 286214fd1cf951cd8017ffe1093b9d2f
SHA1 ce98b75edaa96fe0851da0750f4fc6f596406445
SHA512 5e76f67a23d9c3ac3d1a10d1ad392f441c6f85a18d6e2f7fab6447067eb9f6c34d904cbff1ea4dec73ef70a9e349ec84a6da895e0be8ef2cd8eb49629f0dcecd
SSDEEP 12:4MQphMQSQcGb4qnc3Xw1b4pG4cc3Xwxi/6+Mfjnc3XwBf6IZc3Xwxi/9fApjnc3R:VuhMZe91fAS9BHH9xz
TLSH
T10EB184F73B72A062F091CFF04059BC4C8C330729997885858B4590E35381AAA91AEB68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9eebdb9b6fc26d9578235e7b7ffb2943022b522593ee10f459d75e361c3b1b89
MD5 ba216b5358551ed66239b963afd1733c
SHA1 e4ec9b4262aefc42e634e7fbb5531fd58441cf63
SHA512 5095766635d7a1171f3ccc67aa8b485e2847ab71c53727f03df4277a43638c39278d4a77cc7495716851fa5a9847f46fc51f0028fd9099c0d8b2a7406da6d048
SSDEEP 192:JU1d66JozGzgCl6mc0d/Ov5zbowboCyj3dW:Jed66JozGzgC1jybowboCyj4
TLSH
T1F1D1DD64EA28863FD404133BDCA61F410F39399BAC5E3F2931AC641C2D5A29D768D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 112010f13c7849aec0fe8c67d81f9a89a04f63220a5354032fd1a148497ef346
MD5 df2de1f2e8a519a7ee89fedc4b1167e4
SHA1 051fb30d6955bfcdd1eac16dc77c35f51da47699
SHA512 b4da4ada9793b718eff1159fd6bf779d9da0e303643da7ab7d66365f990eea85eca2c6e0cd339140e9f19a3f1f5474d0d7cb90491917be86cfe89680d2fc8037
SSDEEP 192:OOv5zboPBoCyj/dez1d66JozGzgCl6mc0dz:Fbo5oCyjoRd66JozGzgC1jd
TLSH
T129F11EA4E628863FD404027BDCA61F450F39389A9C8E3F2971AC645C2D5B3DD768E0BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 a519671bc1729a3782701e0e149cd9a657b85f175831302f6f802a72138fc149
MD5 2e81624c756fbd2926774ef7ad9e603d
SHA1 c676a1ac0629bf763d5213886a97d3ae0629dbc5
SHA512 cf8b88739b901889faa16eca298adc5e68bb98049e4f20906a98c31d7c6b856f7f4595b619a18e813e6af71939fd389155d90a0dfafb495539ef81e0887e7985
TLSH
T115619998F2288A3FE444423ADC965F411F34749698AE7F2A34ACA14D1E5B2CD76CD43D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 7c766d6d0baa871d6f1aee66b3e04769bc558c11ce650dd9aa781ed160758262
MD5 75424d1fba88bfc964aa60676e827125
SHA1 2c69245ab33f7ec66972fc115fa5b99516ddddc3
SHA512 4911378edb77cf2791dffd3c03a9f1c51c64f6c1dcf92887a08529194b26013c9004db180508cbf60fbfa17995bef62830b9ad72b1612745ebc9c3b61ad2691a
SSDEEP 192:5Ov5zbo/ZoCyj/dlU1d66JozGzgCl6mc0d:Wbo/ZoCyj/ed66JozGzgC1j
TLSH
T12EE11EA4E628863FD404037BDCA61F450F39389A9C4E3F2971AD651C2D5B2DE368E0BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 1KB
SHA256 2269958843a7a9aa23ea56526f559267cdd306c06da51e3afdaaf86bbabda97f
MD5 a59c8dcf099a069bdc3eab375d48b091
SHA1 05e7f0593a9e89c4259d06a4c99b7b8d2fa5e685
SHA512 00f7d358be16757bd6b7b23a6151d1bfed1adb41b768c823e1ffc7984d9e8c637cb104f6b755df82585aef0a975abeb4f598e2146db530941a40e660f9cdaa4f
TLSH
T1FD214C5C3DB88D6AE8C7FA5C74410A8E53558E0E048B1C534E42DFCDCED1AD931AE439
MD5 SHA1 SHA512 TLSH

Submit Download

1568b5cb-614f-47b8-a7e2-c69e851c6bf6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\1568b5cb-614f-47b8-a7e2-c69e851c6bf6
Size 235B
SHA256 53bc8aabbe7c34de09d0475207fc34ab7d6642c9413da83b319507e7cdf9088f
MD5 c570057116834d39b63bb2e0f9e13a77
SHA1 eed86e35afe4d5c3b186158dd009d506eced4ff0
SHA512 17c2d0e0c044f9cfcae0384210b5474a196772b6e642f157bdac9951dbfc82c7d936ea0020096cad8aecc648c20f620781ef1177dd6d71496497c35e6483c89b
TLSH
T1BFD0978414883B6C08244F13F2A068CA30688C3310B468649A914574D9FCDCA02E2D07
MD5 SHA1 SHA512 TLSH

Submit Download

525bb632-75fd-4901-83d7-7b5f506a0ffa

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\525bb632-75fd-4901-83d7-7b5f506a0ffa
Size 235B
SHA256 f0bfb2df90de759164376e3796763364050fb4913e2d99dff830df4f5ca4a0aa
MD5 b47ca8d821f598796dd7569a57e50254
SHA1 0070229d607635f560d7ecce47625f900a3dfdf1
SHA512 a28f21b3caab141b9975ce89aa23827ebb12f43156efaa601edf0cb44fda0fdaea8f0c9d5c259e1f6c17b98501176998b018e9b082e7de28d872dc1f948b71d8
TLSH
T1FED02381388CAB6C0C000F07F0F07DC230848C331478AC10E9A122B8DEFEECA027281B
MD5 SHA1 SHA512 TLSH

Submit Download

58c8bcb6-010b-467d-982f-aff624a25fb7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\58c8bcb6-010b-467d-982f-aff624a25fb7
Size 4KB
SHA256 fd74903d863ebcf12f78efe4f7788be83760172668949d8b21f6ec507e6c98de
MD5 4a288dfa2b322a2334a7f8a04c65cd1b
SHA1 555e31b117a3c804a864d75f41b3276098f83357
SHA512 226a9f7cb20f6dd35bdd69627731e06cddbb85f0d3c13c36abc809e05738c3b16802d409bb7e4ded519e166b31119e6efa70526ef34b7888b1deb5f596801baa
SSDEEP 96:GgvUzYUB0/zfS2stn/Q9lhwHp/kDzY3M9seV/MvkEITPJGm1cb3PKTfD/DQpsaR4:xvhSkLGwSgN
TLSH
T114A1EEFEDD2241437A65E62DF1E8BEAB005A693149C8839C6BEC0C3A37D2EB71547315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6184b6d3-b274-4812-b543-ec1a5ff8fde2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\6184b6d3-b274-4812-b543-ec1a5ff8fde2
Size 2KB
SHA256 ee4c2d0619bceec5e33d209a90db71d47f3412bafad570d73cbbaf56d67a8e20
MD5 f7667e5cadc0c287b14abbaccffc580d
SHA1 37dd2c01e68904ceb2ad409faddc5e40c257746f
SHA512 64ae1764a85422bc20374a171ce1030952d06e244952f80854877fc414db7d96a0e5f4ed38bdcdf15d437d796002776f64a534b9a17121ffd02698a4173bed76
TLSH
T1BE41249C75B88D769CDBE14D9091278E63B08E9340C618437E51DF0C8DA575D736B42A
MD5 SHA1 SHA512 TLSH

Submit Download

7173faa0-8e14-4786-950e-e8ee7d6fecd6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\7173faa0-8e14-4786-950e-e8ee7d6fecd6
Size 886B
SHA256 a27400ea54a513edcd1bf78f41a23242e4f9b9e0bea8f6544995a43c858cdbdd
MD5 5550df93ec4989c88d4bcf967c039b8d
SHA1 9f01e02d655e410a2b0c61ff9bb530d6aaab149e
SHA512 378ab4b67f39e3bb268d61d81a1dc3959358376715988a4a157630ef58cc551568157419fb93d3b2180b7734a44446deda79cbe4ad55139416107791c2ffd5e9
TLSH
T1511140808570B972DC65838B90A47B0347B470B3C0CA08647D608B1C0DAE21E63AB203
MD5 SHA1 SHA512 TLSH

Submit Download

76d4b36b-abb1-4e1d-b66a-726a389e04fd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\76d4b36b-abb1-4e1d-b66a-726a389e04fd
Size 15KB
SHA256 d5820e446729d644590549723776bc8ab40460c2707c63eca50b2f76243f527d
MD5 bc28f81ec0f02219de689ed578aa15dc
SHA1 64f5c693a6173103c4ba73c6c07bb63e64082cba
SHA512 80684f3b0a496bd4442a00583043bf4ea158a4d6cfb21f3f40d7e5cc5211c464dc3d6324faf1de6f4ae8f12fe6f201a766a43c58caaacfb197acd72942a6cbed
SSDEEP 192:zALa3Hhkc4gLl/QfPf30ghJdbvTyKze5p7KiX4U1vRhCBW1ADPCB4Lqz2El:UL2MDhTyKSP7KioU7hCXG6LqKEl
TLSH
T11B72DA56243059BA8651E3A994FCBFC3E2F528CF4C419FCA9BE4BD085DDE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ef17b37-b164-44a7-b7e7-5fb4ba6c60e4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\7ef17b37-b164-44a7-b7e7-5fb4ba6c60e4
Size 883B
SHA256 c845e574a94d94bf4cd798de82cb9d82909f4cd132e8c87eacff1273ecfbe23c
MD5 b17c80d9c97881c1243ce0948a4b78c4
SHA1 e198e548a7719a444c61390b32fa7ad2ab54bf5a
SHA512 ce4cd313f0e577c0c12588a8aff5dd3e21fa83586600e25ec645d20c3afdbeb9603b21512afe04bb4cd68694bfd2e80235ccdfaab141aa17aaeebc69a82c1f19
TLSH
T157114041A131B5B1EC68824FC5B53B0363F4B1A3C0DE48243DB14A280CBE61DA3A7647
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 5a16f03b5e28bc4c84e60064f88446391f62d086aa0253a87a6dac946c32edf2
MD5 6d47b4193467f50df1a0f32e4f3bef55
SHA1 d41081cdc3d9bc66ef8b6fa09816c774e1d5f1ce
SHA512 43488aee3623f279ff4640e4bbd76549766c004ef2a9e6bfc5098ab2a26a2d326fdbc5bc0158f38a29151d7a58d463f2ba0f519a7905f7c6024cc7b02b18b701
SSDEEP 96:xHlwUTUnqGqEfxv11zSUSSlSdv9j/RnHRHZlejyiBw88n8L4cnihK:0aREfxv1FSSk9ZTiBw88k
TLSH
T11EE12F789408CB7F74B6766CAC6888316AB2023B77BF68D750B554C4055CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 b981f80fad5f0391f7c00d849f1e7a0e6b7a3b6d2e440a8628d82de30c9b0901
MD5 d804b610f6b2ed10d9b52ef66c2c7c4d
SHA1 2d3e9adb1b515d18e35d7204e041000c192b3234
SHA512 eded07b393ab81b35f741d29b3d1038e43be7dd131921cd30be7dcc21d7ffe657cce275bc3bb799880d1514adb9f693d478311afca500ca4d73734e55f69c3fd
SSDEEP 96:xHlwUTUnqGqEfx/uNbzSDJSSlSdv9jBnHRHZlejyiBw8On8L4cniGjGS:0aREfx/u6JSSo9ZTiBw8OC
TLSH
T15BE1207894088B7F75B6776CAC6889316AB2013B7BBF68C350B554C4051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 cad0bc57dccf647284fb15bd8b43c48054a3a378d7c7e527a8b7f98ca3abeb53
MD5 31acbc4816b394b769dc857205e00c7f
SHA1 88b7f2b07a26973eff541346a1368d3f3ee7531d
SHA512 69cc870a8511d2bb48298546c708c290e0806cf4bfec0195aea33417597700cd679cb912d1b2ca782cd5eab7322db68f6e543999e2aa72d235672b0a65035f99
SSDEEP 96:xHlwUTUnqGqEfx/u1zSDJSSlSdv9j/RnHRHZlejyiBw88n8L4cnihK:0aREfx/uOJSSk9ZTiBw88k
TLSH
T1DCE13F789408CB7F74B676ACAC688C31AAB2013B7BBF68C650B554C4055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 8538ea8ae112aee7e7885754a2789add0ac091c15bf6a013a04b0be6baf593e2
MD5 863550c74586fe4c4553cd112bd121e6
SHA1 b9d5685248e43a5e013fa84386d6372811c085fc
SHA512 403955579bce206b2a75819b2f549f31943038466e7749bfea37d845b97dd925a8820241082203955a4baf46d331800bb7c4836dc0473f7903cac15cf4a176f7
SSDEEP 96:xHlwUTUnqGqEfx/ukzSDJSSlSdv9jBnHRHZlejyiBw88n8L4cnihjGS:0aREfx/uNJSSo9ZTiBw88L
TLSH
T17AE13F7894088B7F75B676ACAC6888316AB2013B7BBF68D750B554C4011CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore.jsonlz4
Size 5KB
SHA256 e15d24b87a6bd229a9b5dd89fedef98e09ee62722564b21793e5f77bdb10ecfc
MD5 e424c5b610175f53027cd861a6637191
SHA1 9a08de5040a05defd4c80e0124f277eaaa5282f1
SHA512 a5aa78f9b653a48584662adc72c1dc68b59d8a9e2920f10629e33f2216e330fc3336e71c708e1b37b0078c04b3becd3cb18cd36d5249c8fa90bc01e886fb1d37
SSDEEP 96:Q21McjmBOV9/y6lP3OIsqhJ5K7jnkMZL+/f8W8QYB3goS2Jdqx3Eb+:QYj9K61J7QvkMZL+z8LvqF
TLSH
T195B19D73DA0DADC2F6F0E46D00D24CD2D7BB2004C3E891ED8718143A898A7C65ADE27A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.1MB
SHA256 fabbbd60ac4f242b95915e1b8ff3589dc8b59b012c8fa47f42f6d011c3c8a1fa
MD5 d50bdeffc43bab7ad04a0c16c684c95f
SHA1 39de064e9cd1faa3a32315b259d6fdcaf628fc08
SHA512 ca63ca313d3d8f81a3f7aed5f8158b683169446f5e46d46740623c8aa5f98026115dfbcf7958fb76ddbb4444b4c85307a38f1402228d56b1bca94dab32a2a5aa
SSDEEP 24576:tx7qD7IRPUQRjujY8KpPh3WhbrHyZ1Lgk+7HGplmDiuQI+Kk0kxK:txYN8KjY/ngk+7imDifck0ks
TLSH
T1A94629F820D1A257F3414033764593EF21EFD00C6027DA085BA95AE9A5B4CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.1MB
SHA256 7c44b7a61128f0f5091a550fcb3197345cd6a27629608063c6eccc0c748c65ae
MD5 b481e0b9a08ff15b67fb3f664bc3a7a0
SHA1 e24a16059134b8c46b9ae5f2de61d7aaf18d5199
SHA512 2dd5f40310c5ce8b3d1b7f3fdb1b35a9aa6ff518a4f4535100b8d0c39c7dfdb82cf90affe443f8b55ec401feee1e742626a2e1c410959c8a48fe307b682a10a4
SSDEEP 24576:ox7qD7IRPUQRjujY8KpPh3Whbruys+Lgk+7HGplmDiuGI+Mk0kCK:oxYN8KjY/Egk+7imDiNmk0kl
TLSH
T1314629F820D1A257F3414033764593EF21EFD00C6027DA085BA95AE9A5B4CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\targeting.snapshot.json
Size 3KB
SHA256 9586e4f8cb21917efe03924701f64b9dd0346fe891f28a186b2eb1d620473263
MD5 38763e9afa92b6e1460713d35daa4d68
SHA1 324cbcb3b91cfa20377cdd697d72034e1a0f5665
SHA512 ca952c15e28381b372a4b3ab6f6fae9551ad49d3fc2ab67318c55f3f32bfb300b44a2c6d623dbbc246f5b631b36f441d2ba65ae0aab8f1aeae1dbd9d9aff6b70
TLSH
T13571820CA61CA4BEA66BC3C0E6447FA78BBD053370446458DAFE460C95FB5FB163621B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\xulstore.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

memory/4716-2-0x0000020292A50000-0x0000020292CC0000-memory.dmp

Download

memory/4716-12-0x0000020292A50000-0x0000020292CC0000-memory.dmp

Download

memory/4716-11-0x0000020292A30000-0x0000020292A31000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads