2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426

Analysis

max time kernel
898s
max time network
639s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 17:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 57KB
Sample261024-vkdexaa17y
SHA256 2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426
MD5 76b0390598ea2ff37ed466f1762e8ef1
SHA1 0681ace3e8e9e2f6ac1cb294d172ea886c6bfd97
SHA512 245c82d12f935102d5d7554fc73a3701afcf9eef41856b880c4a98ef045460d7be24795f48944a87d61abc21e7425a94c911e27604945153dcbd36df910a7bb6
SSDEEP 768:2M5Fojxe7vioZVOWsqESWmlYIeMmihkGjbo:b5y4L9BWmlYXMmihm
TLSH
T1EA43C73922F3157A119386B2B7D2AF1BAEA9D307C55BDA9A319C47801FC7CD18D63314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
5	discord.com
8	discord.com
9	discord.com
19	discord.com

Checks processor information in registry 2 TTPs 19 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe
Token: SeDebugPrivilege	4148	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4148	firefox.exe
4148	firefox.exe
4148	firefox.exe
4148	firefox.exe
4148	firefox.exe
4148	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4148	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 4148	4572	firefox.exe	88
PID 4572 wrote to memory of 4148	4572	firefox.exe	88
PID 4148 wrote to memory of 5552	4148	firefox.exe	89
PID 4148 wrote to memory of 5552	4148	firefox.exe	89
PID 4148 wrote to memory of 5552	4148	firefox.exe	89
PID 4148 wrote to memory of 3532	4148	firefox.exe	91
PID 4148 wrote to memory of 3532	4148	firefox.exe	91
PID 4148 wrote to memory of 3532	4148	firefox.exe	91
PID 4148 wrote to memory of 3532	4148	firefox.exe	91
PID 4148 wrote to memory of 2628	4148	firefox.exe	92
PID 4148 wrote to memory of 2628	4148	firefox.exe	92
PID 4148 wrote to memory of 2628	4148	firefox.exe	92
PID 4148 wrote to memory of 2628	4148	firefox.exe	92
PID 4148 wrote to memory of 3668	4148	firefox.exe	93
PID 4148 wrote to memory of 3668	4148	firefox.exe	93
PID 4148 wrote to memory of 3668	4148	firefox.exe	93
PID 4148 wrote to memory of 4760	4148	firefox.exe	94
PID 4148 wrote to memory of 4760	4148	firefox.exe	94
PID 4148 wrote to memory of 4760	4148	firefox.exe	94
PID 4148 wrote to memory of 4760	4148	firefox.exe	94
PID 4148 wrote to memory of 5736	4148	firefox.exe	95
PID 4148 wrote to memory of 5736	4148	firefox.exe	95
PID 4148 wrote to memory of 5736	4148	firefox.exe	95
PID 4148 wrote to memory of 5736	4148	firefox.exe	95
PID 4148 wrote to memory of 3060	4148	firefox.exe	96
PID 4148 wrote to memory of 3060	4148	firefox.exe	96
PID 4148 wrote to memory of 3060	4148	firefox.exe	96
PID 4148 wrote to memory of 3060	4148	firefox.exe	96
PID 4148 wrote to memory of 3232	4148	firefox.exe	97
PID 4148 wrote to memory of 3232	4148	firefox.exe	97
PID 4148 wrote to memory of 3232	4148	firefox.exe	97
PID 4148 wrote to memory of 3232	4148	firefox.exe	97
PID 4148 wrote to memory of 3480	4148	firefox.exe	98
PID 4148 wrote to memory of 3480	4148	firefox.exe	98
PID 4148 wrote to memory of 3480	4148	firefox.exe	98
PID 4148 wrote to memory of 3480	4148	firefox.exe	98

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\sample.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\sample.html
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4148
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1932 -prefsLen 27097 -prefMapHandle 1948 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {85c661a4-ce7a-4758-9b46-0c7586185c57} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2436 -prefsLen 27133 -prefMapHandle 2440 -prefMapSize 270279 -ipcHandle 2448 -initialChannelId {01c8f8ec-7d18-4865-b7f4-86fbed4a4188} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3700 -prefsLen 27274 -prefMapHandle 3704 -prefMapSize 270279 -jsInitHandle 3708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3716 -initialChannelId {3eadce27-83d0-40a3-ad43-fb9ad6840ea3} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3856 -prefsLen 27274 -prefMapHandle 3860 -prefMapSize 270279 -ipcHandle 3928 -initialChannelId {5fc42356-1f37-44be-b8f5-c9916763e086} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4452 -prefsLen 34773 -prefMapHandle 4456 -prefMapSize 270279 -jsInitHandle 4460 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4468 -initialChannelId {2a6cb5ee-ba17-4705-809e-81571871ecf8} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4736 -prefsLen 35010 -prefMapHandle 2908 -prefMapSize 270279 -ipcHandle 5160 -initialChannelId {ff7d4a7e-34d6-4f31-ae9f-0607f01de4c8} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1628 -prefsLen 32952 -prefMapHandle 4868 -prefMapSize 270279 -jsInitHandle 2920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2648 -initialChannelId {1f36c810-7d22-4112-84de-53cabba20f13} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3060
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5496 -prefsLen 32952 -prefMapHandle 5464 -prefMapSize 270279 -jsInitHandle 2768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5064 -initialChannelId {1086b2a8-2bc7-4b5c-875a-020ad0860ad9} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3232
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5788 -prefsLen 32952 -prefMapHandle 5792 -prefMapSize 270279 -jsInitHandle 5796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5772 -initialChannelId {ed9eeaa9-3f87-45ae-98a0-47b0b31cac0e} -parentPid 4148 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4148" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3480

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5004

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8z6dgki7.default-release\activity-stream.contile.json
Size 4KB
SHA256 09a7d60995a2296de189754af08088da4065dc9e397f1eccd9b579bc5d5848ee
MD5 f443b1e5569f0f58807fac75a5bc0ae4
SHA1 1aa4471a3c2484e3b322c53933bc951d7521f41e
SHA512 0cb4ceeb4f50064477d7d4aab003d82e91c757511e716a98261a66b07bfb8d4c729c79422febd2a585afc45b8717ae91c4574c834f2c1dcf2d091a52610eb1bc
SSDEEP 96:THy8MLQgm5IiLJGqT+mRhBnymqlROxKqlz:NMcgaLJGXmRhByxROxKqF
TLSH
T13AA1D68B897481130B71F7EA1C8B239CF013700ADDF0DF78B1A59C1295ADBEE91DA985
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8z6dgki7.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 cb09ea9b88cbf89e0312c7fa3a8e7a3eb4b1e7c6e082bf3094659262ea385145
MD5 0e41b1bd28787e7e42c0c7f7db6d6885
SHA1 f0ad3b9f7c540c0390add2dac883140d26fa13c1
SHA512 bca92b6bcacfac1979e7e10beab20c3eef63ddbe4a2a0dbba48b9b3a2692999be9c263ac6c608d961f7bc2129fb590ce0b980070a633d0ec101c6d639e9d6346
SSDEEP 768:GyBQvrKnsrJbvROx9fwNpy/zhY3mdiV51PU82iaUJOOrV:dKenYbZOXcACmdYtU82iaUL
TLSH
T1BE7309A3A6E8B1BB1BA137C72C0F795763E10189F34905D8FDE9CA1C81DD654023B6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8z6dgki7.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 b3db9154a140900803f55b35dea3b55e4a8cb0b3430d3ed923e90a2d633a2ec9
MD5 6e01fe0573c29c8123df8661f21df226
SHA1 537e3698fe46e060184b81dfa3eab5b003aa6cc5
SHA512 a92dc70e9d1eb1933301243f5b1fe7e40bd1286d0d1d2c4a6d2bad1797e95e6759c337cd3841d6a442127b85752ead7b04eb0df0d7ee07ae267e41960e4c199b
SSDEEP 384:HGNQiO024YGWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAT:mDZYGWTToXJWTTogB7S/AmVAf+hRMO
TLSH
T1D6728E7D8F013CBD1B5790E9C8B583548D18B7ABDFB5C06D26883D09C988A1AB1F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8z6dgki7.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 d18164f67654f9506fa52feccaa84edcea6b445021fae7af7face3620b4340f0
MD5 402e8c5703cd6097abf20cc25c79984c
SHA1 8aedf58dc2c5944ac1150c8a66d388ead6f632e1
SHA512 dc5225586b2620229eb9cc927dabc59a7baaddf5fd6084bcf09f3de1988d26b61963254dd2a93e1a05fd8948f8dc2865bba8b239ae7ac693dbefa2cc66c883be
SSDEEP 1536:XTrliEy//D+f1uV9AHUd/MV6QYdolLV0lgqRU1deNqmCqHB5M37LLxVMYySecJGp:X3lD1uV91eVbLV0gq2np98M3fb0Hn
TLSH
T1AAB3AEF6DFA28D7C65FFD42DAA82893EFD263410B3A7200DC913275056C6BB46779248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\8z6dgki7.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 ee467266c803304faaa5249c6c3a20c7042955c91845de2bb9bd579b88d87a84
MD5 ecf8ad12c92d1609cff49ba08bf554a2
SHA1 77f9cdfd8cf22bbc43f59347ae2177dca8f802c2
SHA512 f33c7001cc68939dd044ac1a82422e85ebd501f3f889c7507bb1858fa9e737477d687a6256b13d1b814c0c3e36050f7e86b9b9a3c83b873a15b1407a845f42ac
SSDEEP 1536:jTrliEy//D+f1uV91EevcFHXiHsa8L/0lgqRU1deNqmCqHB5M37LLxVMYySecJGC:j3lD1uV930H/L/0gq2np98M3fb0HY
TLSH
T164A3AFF6DFA28D7C65FFD42DAA82883DFD262400F3A72009C953675056C6BB86775248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 6464d47da07fe98aec184bb0e4072ccfbb8d1826317f1be5a60997ebe1e4ce0f
MD5 4f8268e746c5036a66b5e2dc15830c27
SHA1 51e511162d715c1f978714c52f4192abdfda6e59
SHA512 d9465a795aea3b6107a15774f89c225ba38ca52a6aecabdc83c9d44befcbb02458f6b820510d9b598a68c29d079252c7a6d7dd4f298df31be9afac9c5fa4d38b
SSDEEP 48:bh8Wdsb9J5Ugdw/E3zKh9Wdsb9J/6Bdw/ExKhjWdsb9J/adw/ETNIhmWdsb9JspS:bS4EGX/3E4Z/HEqws8SpE40
TLSH
T1F9F1DE020BF70A99F5F396727B313743B773FD02261E427DC18262A40972760956DF96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\addonStartup.json.lz4
Size 4KB
SHA256 d3deb853760c5898e4e7bf156471a5e3c2769d937798e7ba5f90a04e465249e6
MD5 d5006e76eb903b9b9eb1f1a6339c682c
SHA1 d91fe59bd809101135ac9f748c2bcc00327ea9c2
SHA512 ec7c340b713700695813de1b9968821f5925dd2de1927c90f6008182c41526e580d338ae929368dc5aac6401390431c94dd5d39541c9d3c314a72d4223593ced
SSDEEP 96:NjP4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NO52xxhD8rGvm6ApwnHUuhN
TLSH
T11FA17D76D541EFA1FD32C04748D93FB2E6A6AB7410A9C4D0F16B71294D74E731704380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 b9148239c168f9592ef212cc2a8a27256c5bcf173e25d21a3dece4fd6099e594
MD5 69401cfc0da5bddbe7cccd974b090d31
SHA1 b83f45d950e807e218b43704de0cdc92523c1c1d
SHA512 b387eaa03ff36940f8976e2b4ab898c9299b8140e845ef8821c6675f5695eaf690c518746f6f2f2a5e1a7d6282bbde62ab84dd3a969c9f4e7ab156ede6dc022a
SSDEEP 192:POv5zbo7QjlyjHcua1d66JoztdzgCl6mc0dz:gbocjlyj5Ed66Joz/zgC1jd
TLSH
T108E11F64EA38863FC414027BCCA11B404F39389B984E3F1975EC611C2D5B2DE7A9E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 e8f279232d7b8279451356d66051d9430339c90d6c9cf627d363d67c155e2cf6
MD5 16d63383b49cc6ef72ad5e722476377a
SHA1 e938829e3ffdce6279cc53ca9f672456eb2de2b8
SHA512 0f2fbe08dc1d157d9b5d900d64cc46923dd0084113ef761a5020f38efa25e769c71fd82abff50fa4011f076c311a7e44918229f8323b1ee1710cb3d5cc0413ee
SSDEEP 192:BOv5zbo7kZjlyjHcua1d66JoztdzgCl6mc0d:ebogZjlyj5Ed66Joz/zgC1j
TLSH
T13AE11F64EA28863FC414027BCDA21B404F39389B984E3F1975EC611C2D5B2DE3A9E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 38a2baf1a2f67b7cf74647835c381ba197d6ca05addc6713896cb6b1f150152b
MD5 91d78c6922ae4edb81cb5da28a97144a
SHA1 a21b936b97f2840fe5f13663ad35bbe718e41bd8
SHA512 d4827b1c4303ce7d4290d27151e8075efe6d5702db8b5031b8e0059a1ef0228fad27b5ea89cd1bfa53b497bdf2868da4f2624d092ac3c49535f8f78b9f890f09
SSDEEP 192:nOv5zbotbjlyjHcua1d66JoztdzgCl6mc0d:Ybotbjlyj5Ed66Joz/zgC1j
TLSH
T13CD1FE64EA38863FC415123BCDA51F404F39385B984E3F1975EC65082D5B2DE7A8E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 64ba0934f41adf04c39f8fbeaa802bd70e5eed7c929d4722f6b17872af06183a
MD5 47b09772892ab0f16a2cf8f8dd655a49
SHA1 7eda115db1532c6bd220db793ca7f02e7ebb295c
SHA512 f661d7a836bf191dec993ae2b0a90ad44723bca450263493f13d97e5787b91764a9d086ae8900ef1f7498db4bfc1fbdaaab3795f5de15ec1df933474c5d1863b
SSDEEP 192:aOv5zbo7QjlyjHcua1d66JoztdzgCl6mc0d:Zbocjlyj5Ed66Joz/zgC1j
TLSH
T1CAE11F64EA38863FC414027BCCA11B404F39389B984E3F1975EC611C2D5B2DE7A9E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ae287b407f24c84517de887851440be2c1ef7a6b2957377c3774e128db28070f
MD5 7d8b553cb4fb83539eb4dfe3c417cea7
SHA1 e80b9db18855ed785bca7f508e9b5c0d2993fb43
SHA512 d68b58cbfec093a642a2d331cd3043c1b526539bb135b16671a47de7e57876a1b50935b09b35a3bf41f8a0b62be7b0582a187c3bca0e5149fdfad8bced6aa9a5
TLSH
T10821485C3DFD4D2A5887FB99745012CE53258A0A06C71C434E52DECECD81AD931AE42C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\events\events
Size 2KB
SHA256 60c94275136d84d40bce09868f840197721d3642259d0b21ba5d12097aead66d
MD5 2f68658191e610d79ff7dbb3ecf09d2c
SHA1 9bef0d284f5c8818c817ff2ce94941f019d9f377
SHA512 12df6d8b527895bfb44ea44567da4f87e332a43e424767c8a9bb314155bb5976b19207fb20121d47301e2832c6ea2649391cf882f9189a8d54bacd7c9c6ad77d
TLSH
T13641BB0C6EAA4D7A688BF7CDF840068D67554B0655C32C874EC2DE8DCD42A99319F42D
MD5 SHA1 SHA512 TLSH

Submit Download

398181a6-c38e-4b3d-b4e5-45dd47174359

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\398181a6-c38e-4b3d-b4e5-45dd47174359
Size 883B
SHA256 002d75e3c3d45ce4cd14231db537bb3a1d2586fbf3762ceb870eb808cc083564
MD5 4ec009a2e039978e7d83e00e390ef7bd
SHA1 d0b1fd79f90d317bcf11842d0884a9fe185ed154
SHA512 c44344f3de065d5ae28e30bfe1b3f7929fbd25f782f8317b72e7c9c7436e12a7c08f46897099c072bbd40ad1a1dcd6a8fa985a5d2cb65679daf105219bbcf049
TLSH
T18E119C409635B5B2DC78921A8961370287A47523C0CE95583EF55A180EFE65EB37A207
MD5 SHA1 SHA512 TLSH

Submit Download

5c71f8f7-4166-4a6e-b5f3-83897bbee7b7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\5c71f8f7-4166-4a6e-b5f3-83897bbee7b7
Size 2KB
SHA256 7760b8fd53041abeae453e5974b6cb69d50513c9534198fe0925948246f052f8
MD5 0dd31d4979848d553fbe23485b36aa91
SHA1 af8089f7c5155bb98025cd70585dfef6388f0d32
SHA512 69ed915c328b53cb1c07a87daf0f722a1b177afb1542fbf76240bb11c950345603ccfa0690c73e58c7f05e810e8a37a00e420f339ce8db101f314023f2ccce9a
TLSH
T12E41411C35F84C769CEAF14D9052334A57A0895B50C628836E91FF0CCDE72EA336A52B
MD5 SHA1 SHA512 TLSH

Submit Download

7c62e181-04b7-49d2-9eac-b3e3dab19b0f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\7c62e181-04b7-49d2-9eac-b3e3dab19b0f
Size 886B
SHA256 7e9daf4824bf2093312924a5aceccc3eae2be909abc6f662f902ead1db8db66e
MD5 d2b344335626b331082db5d41352e1b2
SHA1 4869de791837e75f25c95bcbf150b33d0bc739d0
SHA512 e7e2f7dff3247bbe597bb6bc426f67b1144923d364d9fa6cbf27dd0cf8580eceed0f6c9bf5c13c4b5fbf8f6a688d519dbde14e7e16d33ff3370e7ecfa47d7b68
TLSH
T1BE1100408A31B6B2DC38924B85A17703C7F03023C0CE59087EE45B180EFE26BA37A203
MD5 SHA1 SHA512 TLSH

Submit Download

85027522-bd52-4b41-bc2c-e64e90c61c21

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\85027522-bd52-4b41-bc2c-e64e90c61c21
Size 235B
SHA256 c7b75176eb905917d3bbb05d342d1d936484aa15b75afe678330330a01d5ae33
MD5 576225096656a430d097901839bdcb9c
SHA1 734950f225e3170501508de8604c45e447a27e2f
SHA512 95a8b5b089725fcc2272281efcadcb62cabe0376ddf9da601d18051396c42be9cfa812fe3adc06d478242eed0e89aac1f77b8c0c809119e9c2c83db315b8f900
TLSH
T1D6D0978C28A82BAD48000F06B0E16CEA30888C3310B8A810C99640B89BBADC94162886
MD5 SHA1 SHA512 TLSH

Submit Download

869a39a5-1666-453b-bbbf-a47d22c800ec

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\869a39a5-1666-453b-bbbf-a47d22c800ec
Size 235B
SHA256 0683a34a548c21dbbc042b2b789351ca67117baf210ed57870df2c3206d8f6e9
MD5 14991051ecad8c8f6d965784a208fb3e
SHA1 0a5c91701d4ae19f0ecd053da67fc71ad2538fcb
SHA512 10657e1baff7adc51a09c880d6a35eb5eef946515b5c7ab604af7e7c3b055ead04edc8ad060dc9fd378ccb9ddc427608e52542db75f271d12d8a4d86a4ac69fa
TLSH
T19CD097801888636C08008F5BB1A038C230488C3354B4A820DA6046388AFEEC50151817
MD5 SHA1 SHA512 TLSH

Submit Download

d64d1338-3976-4c57-9be2-004d15eb6133

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\datareporting\glean\pending_pings\d64d1338-3976-4c57-9be2-004d15eb6133
Size 16KB
SHA256 4553bb957eea038ec875857a33e0b7ca5807ce88bba56b71dd26ee9ec52cb0ca
MD5 72e53f3adf28cbe926316a99549870f8
SHA1 425d891cf79bc5813e190d84aeca8a252291ecc0
SHA512 2fc9a02e402530a32b14519f04d0f08fd67ed26916603aaaac6972e7b7d2ac3924d819c21fd10bfd2f1d2d866ab4d17fea877d772c617d1f341f4bcfcb4bfe39
SSDEEP 384:wAeReJal+5KRbqXr8X7BDRDPXeZNWLnQL:B2878XjtQL
TLSH
T11472CA16546045BA8691E369D4FC7FC3E2F538CB4C419FCA9BE4BD086DDE0AE102794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\extensions.json
Size 14KB
SHA256 96bea2ea2634f6bf32a8e57550b547a1baa9ad44884d7c0d508dddf4c03f40f4
MD5 7ab82db5997d0f709cf22ea94ec092e6
SHA1 d6376e1f448d57d0832c159e5ba15c7c7926a781
SHA512 73dc2ef1feab416f21bf62bdd141ea8ccb41529abf587edc1c9139d8ef0337e71e17112f55e65dd081527c7e9c08427f9ee7fbc209d042a863dbba392e654664
SSDEEP 384:4kI4voUmldv98dhWg94zj96oSL4HLL4PiL4HeL4HtL4HC:vI4gRfuXJ4V6X434Y4E4N4i
TLSH
T11162431545148EB8298FA78AAA367E01C37D473B70845C78F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs-1.js
Size 8KB
SHA256 3b602e8c85024e9fbb4fae4bad4db280b4c56a521c856f2db3478dd396321b9a
MD5 ed71ff83addabcdef86725b9bfaa5347
SHA1 9836f2c27bf71e449884309d9ee7cb7dfd11cfec
SHA512 f5a27e1d871dc417007f50614c768e281d570046b1daab22c5f660574897609e81f2f2cb221658700661e25cee898bf75a44db61ab48a869791f3c9052ae2850
SSDEEP 96:xHSFTUNqGq3Jf25wObzSRSSl4dv9jKnbWRhJXsdq+Bw88EItk8L4cnKM5I3J:EVR3Jf25wjSSSRTX6hBw88V8
TLSH
T155020D389408CB7F74B6766CAC2489705AB2013BBBBF6CD645B944D9054CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs-1.js
Size 6KB
SHA256 ef9952fb640dd36836cd6a1cb31e40a263c622eaeb2cec62d8e1a4a56e0efd05
MD5 1a80bb76dda49bbba62e997b1d689161
SHA1 ba5a6c2a851b11a4e7bf7edec4c0e33e34d5973f
SHA512 377e4f65e239f9c9632ee11e9f45fe5377e9d453bb3728ead8b7ee9ac62e927f49f289f1aaaded71f60d8fded3bd063ca3e7c5a4a158bb72c5e37b016101414f
SSDEEP 96:xHSUTUNqGq3Jfb45w1zSRSSl4dv9j2fnbHtXsdSBw88u8L4cnKM5I3J:EAR3Jfs5wYSS5tX6SBw88y
TLSH
T16AE11D7894088B7F74B677ACAC6888319AB2013BBBBF28D750B954C5055CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs.js
Size 6KB
SHA256 e86cfecda155e7f6a8cc5b3b7b7aec1f3325cd156b198f9d23235d6150e276ee
MD5 e030587231afe78441f475b3eda7915c
SHA1 c94e515650b31488168a47e7473ab856003a5a62
SHA512 85dfc415abea22dddf1bb4ed0d0c12b04767e17c5db8cd4e40647640b4f2fede04d8a4ecf87221e56b3cd56cc5d8c35778338123b9d5d4b8d09bc85538e5f5e0
SSDEEP 96:xHSUTUNqGq3Jfb4zVm1zS/IGSSl4dv9j2fnbHtXsdSBw88u8L4cnKM5I3J:EAR3JfsBmOzSS5tX6SBw88y
TLSH
T107E12E7890088F7F74B677ACAC6888319AB2013BBBBF28D750B55485015CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs.js
Size 7KB
SHA256 2b48ac558644ddba7c643e705983b74f1650fbd10ffd715719c6fadff6bcbc0f
MD5 f06ec9e3ed8f96f5c1cb600cad5ad6c8
SHA1 5fe3c3c4ad32833abb0abc0bd9fbb1f3fd53c328
SHA512 85a43d6c36e1cbd4f925e657206c72dbef604d652ce3637b96cf7a59181b00342bd23772157d2f74a58b5d19776bb8628b5ddb0b4455dfe1ed96101f2b3645f5
SSDEEP 96:xHSFTUNqGq3Jfb45wObzSRSSl4dv9jKnbHtXsdSBw88i8L4cnKM5I3J:EVR3Jfs5wjSSbtX6SBw88G
TLSH
T153F11D789408CB7F74B6776CAC6888305AB2013BBBBF68D641B944D9055CF3441FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs.js
Size 6KB
SHA256 03e7dcb1a3dae4a6a1656bd01cc7048912eb20b5c857ca47945cd90104050171
MD5 3180c57397ae23922b0417351a53d7df
SHA1 afbc8e12519bbcfb1f146caa92dc7265e999629e
SHA512 7b8927acfc3bec4ce53c6983c39c69a9908d57db1531373281d880bb6eb44a265576739b6427e866a9ae63d22225929f7c268c58fe0e76a04b68d7fbe0a76a91
SSDEEP 96:xHSUTUNqGq3Jfb45wObzSRSSl4dv9jKnbHtXsdSBw88u8L4cnKM5I3J:EAR3Jfs5wjSSbtX6SBw88y
TLSH
T137E12D7894088B7F74B6776CAC688831AAB2013BBBBF28D750B954C5015CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs.js
Size 12KB
SHA256 64c8469367c8b9b7560f0d8e41333978b312605d8a897f8f7218e9f7de7c17a1
MD5 69b28ded0ed8cac083bcdda28e73ef92
SHA1 db8f6da29c9e0db70020d9454742dea71a674262
SHA512 6c24085d0d363c5edde6dff9bbf119960611ad9db45bb8608044b0a0092ef82693b2c8724001f98fb39f74fa0d1d10e82b6c4056fd284144457560e5d5f58535
SSDEEP 96:xHSFTUNqGq3Jf25wObzSkSSl4dv9jKnbpwoDRhJXsdquH+OBw8847H6WOzQb2K8X:EVR3Jf25wiSSdLRTX66OBw884OWOzQbi
TLSH
T16D42DF389445CB3F20B2327D7C259DA01A650127BABFBCD24AF944D6494CF6441E7AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 b86b79a8867634dd46b115872e02e9a1f5cae23443b668d4d52234e77dd9f36c
MD5 c6a10d53c353f708cd44285a03999558
SHA1 932cfe9deefdd67d1fbbac00db9f169873c4b7bd
SHA512 46ca4b4d3fdecd25fe62ac5c6963fefdc0076e7366c03b238a1207665ded4b8037f6f1e9d54b69c63ad1777f6d0b5cda7e154f079edf2d863c72b06830f897b8
TLSH
T19E21D8A3405B2FF53790A60BE0819FF1C956343A84F094A1A94ECF9220D951A778631C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 02b16ad9fe32a07e14a08f947a41406e843baadc0d0eca1d1306afb45aeec076
MD5 8d79772c03e72d5da9d5f3f93d8ae2f0
SHA1 751353bcb278f696ca580d3098dba3aae963bb3b
SHA512 e34442823168c08890ab833db4a2587365f317adc0ffd96243095368e4de8920b6c47b9f1ec175c16a941142469e3f77d8839c03a85a1ae525f35a0e8338a939
TLSH
T1C82108A3405B2FF837909A0BE0805FF4895A3439C0B084A0A54BCF4121D951A774721C
MD5 SHA1 SHA512 TLSH

Submit Download