2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426

Analysis

user interaction
yes
max time kernel
396s
max time network
391s
platform
windows10-2004_x64
resource
win10v2004-20260911-de
resource tags

arch:x64arch:x86image:win10v2004-20260911-delocale:de-deos:windows10-2004-x64systemwindows
submitted
24/10/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 57KB
Sample261024-vrexbabs2x
SHA256 2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426
MD5 76b0390598ea2ff37ed466f1762e8ef1
SHA1 0681ace3e8e9e2f6ac1cb294d172ea886c6bfd97
SHA512 245c82d12f935102d5d7554fc73a3701afcf9eef41856b880c4a98ef045460d7be24795f48944a87d61abc21e7425a94c911e27604945153dcbd36df910a7bb6
SSDEEP 768:2M5Fojxe7vioZVOWsqESWmlYIeMmihkGjbo:b5y4L9BWmlYXMmihm
TLSH
T1EA43C73922F3157A119386B2B7D2AF1BAEA9D307C55BDA9A319C47801FC7CD18D63314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
50	discord.com
51	discord.com
52	discord.com

Checks processor information in registry 2 TTPs 34 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\CuteCraft1.21.11-fabric.jar:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe
Token: SeDebugPrivilege	5016	firefox.exe

Suspicious use of FindShellTrayWindow 15 IoCs

pid	Process
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe

Suspicious use of SetWindowsHookEx 31 IoCs

pid	Process
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe
5016	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 436 wrote to memory of 5016	436	firefox.exe	83
PID 436 wrote to memory of 5016	436	firefox.exe	83
PID 5016 wrote to memory of 4760	5016	firefox.exe	84
PID 5016 wrote to memory of 4760	5016	firefox.exe	84
PID 5016 wrote to memory of 4760	5016	firefox.exe	84
PID 5016 wrote to memory of 3188	5016	firefox.exe	85
PID 5016 wrote to memory of 3188	5016	firefox.exe	85
PID 5016 wrote to memory of 3188	5016	firefox.exe	85
PID 5016 wrote to memory of 3188	5016	firefox.exe	85
PID 5016 wrote to memory of 2380	5016	firefox.exe	86
PID 5016 wrote to memory of 2380	5016	firefox.exe	86
PID 5016 wrote to memory of 2380	5016	firefox.exe	86
PID 5016 wrote to memory of 2380	5016	firefox.exe	86
PID 5016 wrote to memory of 3220	5016	firefox.exe	87
PID 5016 wrote to memory of 3220	5016	firefox.exe	87
PID 5016 wrote to memory of 3220	5016	firefox.exe	87
PID 5016 wrote to memory of 220	5016	firefox.exe	90
PID 5016 wrote to memory of 220	5016	firefox.exe	90
PID 5016 wrote to memory of 220	5016	firefox.exe	90
PID 5016 wrote to memory of 220	5016	firefox.exe	90
PID 5016 wrote to memory of 5376	5016	firefox.exe	92
PID 5016 wrote to memory of 5376	5016	firefox.exe	92
PID 5016 wrote to memory of 5376	5016	firefox.exe	92
PID 5016 wrote to memory of 5376	5016	firefox.exe	92
PID 5016 wrote to memory of 5444	5016	firefox.exe	94
PID 5016 wrote to memory of 5444	5016	firefox.exe	94
PID 5016 wrote to memory of 5444	5016	firefox.exe	94
PID 5016 wrote to memory of 5444	5016	firefox.exe	94
PID 5016 wrote to memory of 5452	5016	firefox.exe	95
PID 5016 wrote to memory of 5452	5016	firefox.exe	95
PID 5016 wrote to memory of 5452	5016	firefox.exe	95
PID 5016 wrote to memory of 5452	5016	firefox.exe	95
PID 5016 wrote to memory of 5460	5016	firefox.exe	96
PID 5016 wrote to memory of 5460	5016	firefox.exe	96
PID 5016 wrote to memory of 5460	5016	firefox.exe	96
PID 5016 wrote to memory of 5460	5016	firefox.exe	96
PID 5016 wrote to memory of 5264	5016	firefox.exe	102
PID 5016 wrote to memory of 5264	5016	firefox.exe	102
PID 5016 wrote to memory of 5264	5016	firefox.exe	102
PID 5016 wrote to memory of 5264	5016	firefox.exe	102
PID 5016 wrote to memory of 4544	5016	firefox.exe	103
PID 5016 wrote to memory of 4544	5016	firefox.exe	103
PID 5016 wrote to memory of 4544	5016	firefox.exe	103
PID 5016 wrote to memory of 4544	5016	firefox.exe	103
PID 5016 wrote to memory of 3608	5016	firefox.exe	104
PID 5016 wrote to memory of 3608	5016	firefox.exe	104
PID 5016 wrote to memory of 3608	5016	firefox.exe	104
PID 5016 wrote to memory of 3608	5016	firefox.exe	104
PID 5016 wrote to memory of 2196	5016	firefox.exe	105
PID 5016 wrote to memory of 2196	5016	firefox.exe	105
PID 5016 wrote to memory of 2196	5016	firefox.exe	105
PID 5016 wrote to memory of 2196	5016	firefox.exe	105
PID 5016 wrote to memory of 4828	5016	firefox.exe	106
PID 5016 wrote to memory of 4828	5016	firefox.exe	106
PID 5016 wrote to memory of 4828	5016	firefox.exe	106
PID 5016 wrote to memory of 4828	5016	firefox.exe	106
PID 5016 wrote to memory of 4488	5016	firefox.exe	107
PID 5016 wrote to memory of 4488	5016	firefox.exe	107
PID 5016 wrote to memory of 4488	5016	firefox.exe	107
PID 5016 wrote to memory of 4488	5016	firefox.exe	107
PID 5016 wrote to memory of 2356	5016	firefox.exe	108
PID 5016 wrote to memory of 2356	5016	firefox.exe	108
PID 5016 wrote to memory of 2356	5016	firefox.exe	108
PID 5016 wrote to memory of 2356	5016	firefox.exe	108

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\sample.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:436
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\sample.html
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2092 -initialChannelId {9bf22944-46c3-4209-b5d7-a70a007431db} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2476 -prefsLen 27135 -prefMapHandle 2480 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {ac5e82af-0bba-428a-af08-dc58943ffc31} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3044 -prefsLen 27276 -prefMapHandle 2644 -prefMapSize 270279 -jsInitHandle 2700 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1544 -initialChannelId {b047543a-f826-47f5-8234-01b85260c25f} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3812 -prefsLen 27276 -prefMapHandle 3816 -prefMapSize 270279 -ipcHandle 3044 -initialChannelId {ae211cf6-db1b-4ed8-aa0b-aa9ddbe337c2} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3220
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2632 -prefsLen 34775 -prefMapHandle 2636 -prefMapSize 270279 -jsInitHandle 1240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4460 -initialChannelId {d9c6971a-4be1-4274-a2d5-c8ccfc899c71} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:220
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4948 -prefsLen 35012 -prefMapHandle 4952 -prefMapSize 270279 -ipcHandle 4732 -initialChannelId {61583f7a-6f6f-4f69-85dc-79bcaebe211a} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5072 -prefsLen 32900 -prefMapHandle 5076 -prefMapSize 270279 -jsInitHandle 5080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5148 -initialChannelId {54d8a445-1b08-4fdb-a2fa-7641ae4ab856} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4936 -prefsLen 32900 -prefMapHandle 5200 -prefMapSize 270279 -jsInitHandle 5204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5212 -initialChannelId {90d787b8-59ed-4840-bc62-821efa5c9868} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5452
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5228 -prefsLen 32900 -prefMapHandle 5232 -prefMapSize 270279 -jsInitHandle 5236 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5244 -initialChannelId {861d39de-a8e1-4b71-84ff-4d9b414d7a38} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5460
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5888 -prefsLen 39905 -prefMapHandle 4348 -prefMapSize 270279 -jsInitHandle 2676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6100 -initialChannelId {23c1679c-8dd2-40c8-afe3-2daa1e7c9a76} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6048 -prefsLen 36845 -prefMapHandle 6072 -prefMapSize 270279 -jsInitHandle 4808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5992 -initialChannelId {80b0f3bc-6647-4790-922a-d91cc60a4f3a} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4544
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6580 -prefsLen 36845 -prefMapHandle 6584 -prefMapSize 270279 -jsInitHandle 6588 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6072 -initialChannelId {45f7d410-12ea-4084-8727-c4b4f03d5a17} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:3608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5544 -prefsLen 36845 -prefMapHandle 5548 -prefMapSize 270279 -jsInitHandle 5532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5604 -initialChannelId {c1467880-af31-40de-9f8f-fa24a3855213} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:2196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6500 -prefsLen 36845 -prefMapHandle 6680 -prefMapSize 270279 -jsInitHandle 6684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3004 -initialChannelId {5843f87b-2630-472f-8e35-c27a777b45b4} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:4828
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5848 -prefsLen 36845 -prefMapHandle 5780 -prefMapSize 270279 -jsInitHandle 5928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6492 -initialChannelId {75371e17-91fb-4b50-b9f5-d60653b00583} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4488
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4064 -prefsLen 36845 -prefMapHandle 6648 -prefMapSize 270279 -jsInitHandle 6644 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6656 -initialChannelId {b7e2b256-87bf-445a-ae63-5a09721f843b} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:2356
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 3108 -prefsLen 39984 -prefMapHandle 6148 -prefMapSize 270279 -ipcHandle 5464 -initialChannelId {0e74c4c9-b5f1-4107-95e9-60d68bfe8481} -parentPid 5016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 utility
    3⤵
    - Checks processor information in registry
    PID:6088

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4364

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\CuteCraft1.21.11-fabric.jar"
1⤵
PID:5908

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\CuteCraft1.21.11-fabric.jar"
1⤵
PID:3852

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\CuteCraft1.21.11-fabric.jar"
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 a35d446887c56108e924c7c4b5269ea7002a237852ee3f27723bf8e0d2e39287
MD5 16ee1ec63ad67a73012abd2f6a2b442e
SHA1 af33650812a39c0ffaeddfc20b1bb03a298a0a25
SHA512 792e8f5fce108fb5798d94df1dbfcb3a6de1b11fe3e9d2153286116661182d2ffa34e8e17b9b739b3b1ca5113a4dc9dbd773d9e7342c49e094c0757554c5126b
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 a5058e0cd4a5fb3fc602d87336a34ebd14647fe057608d80fc41379171ae0807
MD5 4093b05c07e200c7ee32a007e3037a9a
SHA1 9be69488e88c23325c14e67d6052bb51b9ba7861
SHA512 f96d483ac1457ba7784a1a72183b92cdb03f433b4eeddbe2f561ba33eaeaf3a1fbb24361c0fa222713cce4cf07f5ed9238263d560b33b6bc0a0c93cc71259b40
MD5 SHA1 SHA512

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.contile.json
Size 4KB
SHA256 222963b1448d39428fc1cf4cf08fa3aee7deb9483e9642e975025aec818659c3
MD5 0c51cd1026be5fd3231045f5e9c761d8
SHA1 8fa98f3d0cf22e71e920effa1cf76415b5fb1016
SHA512 030d43617f85aa6e147ace6aa2600b183ae1ee6f40113f4764bfc2b3a9c2b953f46b080c9d49e9045c66c74a76dec13ffac29146dbbabcabdbcd729343ec0260
SSDEEP 48:YdbAIreDZlywWMZwpqQHioPQamqp4JyreDZ7ywN1d3QPGjy6T+jiR1QnnqbtreDu:TvaMigamPx7jT+mRmnnNyJW0Uolz
TLSH
T15F91C76F846445221A78F7E97C1B27A8F007B0059EE5DFAC716B8C11857CBEDC0DE984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.contile.json
Size 4KB
SHA256 09a7d60995a2296de189754af08088da4065dc9e397f1eccd9b579bc5d5848ee
MD5 f443b1e5569f0f58807fac75a5bc0ae4
SHA1 1aa4471a3c2484e3b322c53933bc951d7521f41e
SHA512 0cb4ceeb4f50064477d7d4aab003d82e91c757511e716a98261a66b07bfb8d4c729c79422febd2a585afc45b8717ae91c4574c834f2c1dcf2d091a52610eb1bc
SSDEEP 96:THy8MLQgm5IiLJGqT+mRhBnymqlROxKqlz:NMcgaLJGXmRhByxROxKqF
TLSH
T13AA1D68B897481130B71F7EA1C8B239CF013700ADDF0DF78B1A59C1295ADBEE91DA985
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 420550385e693f36b2e9722020ae990803ab435c2e39f62361946df1557ec0d1
MD5 e29f39e3bcddc59a02c215abf2ece760
SHA1 a239cc52803c50724a11c20b706dd6a5fa0546e7
SHA512 a3e0aef97a47ec454dcf1b32b06a36696209b794258efd55f21bb099bbf0714824c90bc3fefd5a4bd219a9e589260aa75730e1bf65145f905521511b83ce1ccf
SSDEEP 768:MyLhRyXIafS+BVEcJgXeZrTdaxn1i84GZxt8wLRIu13Z9I9/IY:XNoXXfZBVEcU1B1i84mn8wmu10IY
TLSH
T1DE732AA3A6A8B1BB2B953BCB2C0FB99B16D10086E34901CDFCEAC51CD1CD654117B5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 464a1475f2cbaa057f987feda15277f9b08ccae98c87462790528adce74db497
MD5 6e96b5e120da057634daaf32fb44ca38
SHA1 2ec5793ddb7edb21624dc79f8507bffb57f4936d
SHA512 e2dfc7858168ef8ebbe5a9e0221bcb744708c82e6a91fe4c5fd3b252796b30553b0169fc30cd1c9a5a9eec8a7bbe551a984a46226064da28cac611ff8a0aa8a3
SSDEEP 768:MyHPuIUQsDmflH3i+cn6kYq4zi0luX51dl40ByE+GluOOrCKKeeTwW7anfl:XHGKm6kFQ7wpzl4cyFGZ9Pfs
TLSH
T1FB731BA3A7E9B1BB0BA037C72C0F796B52F50185F74602C9EDEDC92C81CD654523A5AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13530

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\13530
Size 10KB
SHA256 41486667536e6a583086004d599a762b561e49e03a871776b21f5e6e332259fb
MD5 266170bd22039d879c7de1174f9ac92c
SHA1 5df0dffac78fd14654b491e77fb00982e4d8791a
SHA512 ab67e9cb419df55a61d2ad30fb15c7f8e07d7e70c25dece13ef21fa3197879c8f896b2e73223af276b782d27ccc3b790a791566bea6ba16ecba41b8a0f54a04d
SSDEEP 192:iF7dUtJFRg7C0Rg7CWXp+fY3wldUtJ3OxBldUtJ3Oxl6n:iXUtJFJ0gp+u4UtJQVUtJQl6n
TLSH
T197223A7B4D067E3916D4C2C1905AA1AD7C01FA4BE94B9799C38C539ACECC8785FD808A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16923

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\16923
Size 303B
SHA256 d084d91aaf3d110c67bff5eacd9d429e3ed72f01c5a7ca9ea349eb08ecdd506e
MD5 7ded4a1cfdd1f1df3f0455ed1a1138ad
SHA1 233483945ee98e01989f6b13cb7e1698e5366727
SHA512 2688500019af3bd2c2cbe68a219c58e6149183dbecb66c5ef8626b6275d71df52b4bc4fdd08bd8481a033e5462263c8c4280449068c1e1741d93d4b244873307
TLSH
T19BE0E78FFD3AC073E0D9D53C2C64DA8C8C230E30CD0600D1D422C54904F49B5B6C4650
MD5 SHA1 SHA512 TLSH

Submit Download

3920

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\3920
Size 239KB
SHA256 02b4bd96e11222b9f7a077ab375d6e0f2cdda12715eeeeef94f785aa609f4df8
MD5 e0f3fd2f42036c015898c66bcc1adcaa
SHA1 b3fb59c89de12cc7405175220be3e1f67934a1fe
SHA512 59df6874db1a7eef551e89bdda5cd121b976aaa1cdd3177f5f2f42817141b9b38663dd6c8b541092512cd4aba8d6fd81e153a83a6c88f74f205a522e58197a49
SSDEEP 6144:hSoVzf0VVTywnqVThC6cPd7pIVG2J9yKILIGf/yLzfFGsxW13Ua0Zi:h198rTymqvClPd7pIVmnSzfu1J0Zi
TLSH
T1CC3423E8CF1EA0AC91338DFF2D118FC946039F37765A1DB55666F704452B3AA3E482A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4001

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\4001
Size 52B
SHA256 27ceeac0bf6a1b275c63853f5a2d33e1ad5291ca8ba726047000c2df3b25bfed
MD5 cceadbbfd7bf0f94789197e490dcfccf
SHA1 49b7cd62f86763b6b5ce54605bc0b87cf0f6a68c
SHA512 a61c9e1fe6a8db92473f0feef68402ee11823e79a2224f2ab79464702d99eb8cd7dab03459189d71ffb843f6046babdfc3433ac47a25989b37244232ff0f6ffd
TLSH
T1A79004444751CD54D414D4317C00C4F474303F7444D113337FF707D115150D3C015001
MD5 SHA1 SHA512 TLSH

Submit Download

9988

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\9988
Size 15KB
SHA256 361b6854c1838284d8c9d78811f3c6db639ceaed8341d5d9055ebf7b9548645c
MD5 aaa5026315521f679fe65928713027fe
SHA1 04e0b2bb6d35883bf28509eef574da61f7839573
SHA512 77cfb97155150390dc6e73a433961a11be84739f37c5abf28538df257cc75e6475bd74f91912c21ddca150e71c0588922bb9d6f440c9894728a395650e6d6bcd
SSDEEP 384:4kSyNyvDLuybJKTK5EaGUzHODWoh1B9M0lpDIIjp:4nFLLxbJMK5EaGUzHODxh1B9pD86p
TLSH
T113728E7B9E6094660AA0B1D6ACEE169C9C07B00BDEE1DA6C2E9C3801C1957FD61FD1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29A69EFA38A0E0F2B03A300EA3F62C2FB523CB53

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\29A69EFA38A0E0F2B03A300EA3F62C2FB523CB53
Size 78KB
SHA256 b065c4aa1ac07614db38c62a11974d3aca8ad50f471560825efe971e4e3caa7e
MD5 b213fc6833f34f1fd2914810245091f7
SHA1 cbfd5bf936a5433e0c3ced702b35f9bc3bbc6cd4
SHA512 fe07ef5626dd429448e0b90ab6e0e21a5b2a74f15a1c4cfe9f99f3dc172f982fab653f574d10b4a184f269bc21ffafb5decdc0a3f85bb2576773133f50c23a1e
SSDEEP 1536:cm5T+yQrGk2NKD8igJ9T5vuH419V2oPU6t/7CF9HnpDF5/s3V+Hv5f:/5TXjk2NY8iETtK4132oP97CrBs3V+PR
TLSH
T17F73023B8D0E5B1E1BA5C4E1C31D0B0B1D80E7B3E02DA8DA77EC31457AD5676A28C4A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

340D8D255721D9407DDF5CF244CE23E4DFF9C17B

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\340D8D255721D9407DDF5CF244CE23E4DFF9C17B
Size 14KB
SHA256 b80d5c357a724a63c4001bbcd8a692a75e48d1f9460111f3ffe3a71cef470504
MD5 bc43c965c2afb07f4c5242b09b2113b3
SHA1 7cc1cfa84b460405e4e5b6f72498292538140ed9
SHA512 00db6e9d52cb2a13817fdf6d01aad2c1d2c1456a7eecb114067b615961f374b4f58b1cb0a8ea8599f480bee36e48c6bfb7fc2da6b0638c93994269a18a846af2
SSDEEP 192:i0gj331Tv5NC9dV6GkBYQ5pSmPQCuI+R9h9cRg7C0Rg7CWXp+fY3Wapat:iJz31T5NC9dV/euUQCutRJcJ0gp+uW+4
TLSH
T1D2629E7F9E0038051A8186C2F20A9D9FFDC0F803D8DB96EE929933D2BCC8355A55816B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3564C7E85067FCA9C43F5F2659A7DEEF39082484

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\3564C7E85067FCA9C43F5F2659A7DEEF39082484
Size 73KB
SHA256 c6526fbc54ac5e4f297eee67d238a89b0f6fa0442ae6b9a52562a008ec726d05
MD5 5c35027e3523f9b17977e6e7d29c0be4
SHA1 ee6799538f6d7be9556267827527b5acd1075d0d
SHA512 9d4d65764f0b16062520503ea6d673de085a308b49bd6d02745132675774f68bddff22c2584dd83b749dd8cee811ee7d7a17485214bbb463f5b27041daeb24ab
SSDEEP 1536:mVk/NJ0UZ908DHMOOWksno4nphQLSLCfJ0kiE1pMYEY3CpZLUvtmN/:M8J908SPsDnnQYCOW1p1LyjLUvt8/
TLSH
T13473013F2A6DAC8D0BAB59E44A032E4E5E54DD27C722CEDD334736A41DC5429A2CC1DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36F9D48FFB7611A5A6F03B66F4A83EB912C5656A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\36F9D48FFB7611A5A6F03B66F4A83EB912C5656A
Size 13KB
SHA256 4ab13b7dafe9d8ec79337aab2365a24d66a0750b2280b68d9891da48dd2037a1
MD5 9aa3d63e132beafe85e37794f48a16e6
SHA1 115dc6b0383996a824007e3b5f82da30734778d3
SHA512 98531b33920274e5a41bdcd1a10adb22cd20088e5ce854a5ce0a08290956363da3635f9b6a815f78692a58da12ba1be3042c58f49ab38b026d819274732f169f
SSDEEP 192:/BVQ6gq8yU3LH8+4SU9EBDalidED1cLDP7CRg7C0Rg7CWXp+fY3WaXac:U6gqg4+4SjBGIERQCJ0gp+uWcl
TLSH
T180527D378F0A250417D64FC2D207CB9F9C52FA57EE4BC8EDD28876829DD8765491C0AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3EDDA4487B7BB0FA688CCAD556998906EC4B89A1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\3EDDA4487B7BB0FA688CCAD556998906EC4B89A1
Size 13KB
SHA256 32738889ddaf637a7c24a6acf46ee3eb5ed9c330c6de137c74571c70a775f158
MD5 02a949dc6b21881c752b7444d36c2d98
SHA1 145139389b3db3b8477191b9c23aba3d27d7c3e4
SHA512 fa79249a7ae4e502fc0ca29076a448e13a76639fea443b9b6410c244f6365c596e624ccbbe7a1d3e11e7d74b51568610d29aa6852f7cc235c02589e99d498227
SSDEEP 384:59MXV9RLyLV1+yPouKANzbUwUDWbUwU7p+uv:AXBOVtRFNzbaDWba4uv
TLSH
T18B529EFF8D4C214096E3C1D7E806AE44ADB0F98365CAD8DCA47C27511B89A3449E68CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69CBB9E04D0DEE50B80ECDBED0EF9869637EC154

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\69CBB9E04D0DEE50B80ECDBED0EF9869637EC154
Size 31KB
SHA256 d330f00f96e94b46bba6615ff823fe669c7cd2ae203f1b162a6ba92ba0760a9c
MD5 4723c7253f61b81da03364993ad5f94a
SHA1 dffdc327b83e58aaba914c63d5e219c0e589b037
SHA512 ecf9c0ff6aaecf76a3d0a43fbc8f5562fcbb71c4f8d1c04ac8f3672cdd5311166b663364b471761431dcfd6e95d4d845d2291e27f0664e444d8c998fc7538916
SSDEEP 768:jWePlEZijskrDK336NZoerM6kNCVMTF2w94:jNlLjskrO33SJrCAekr
TLSH
T142E2C0334B198924DF8481C6D494BA8F7D07BFD7A1FA9195705C1A990CE0372FDA90EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81BA596E31316C46D59922AD5D1B9B3F750CE337

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\81BA596E31316C46D59922AD5D1B9B3F750CE337
Size 98KB
SHA256 72877c272d401252538a10a03d2ad9811268ab5fcfc7516962f29930a4b01205
MD5 423bdff9a773204d6ebcdf721dbdb852
SHA1 9ef27f201418c5c011c2f5f296906a727e27309a
SHA512 63390745bff80c6b5c0f78782dcd5ec346ce70b9e97620ddc65230e893cc1717c9a44c72fddf165b92f3d57c0125fd7f12a410f126d05fc7369295e187ce5195
SSDEEP 1536:GvHmkJt9VsXYCN2hXWECMTZUC/jAnPDLIbdYGRZMDUAn2ihAGmMz15tLtdL0F:GfjJCYCYpsMNU4APgprZCJ2o/15FcF
TLSH
T15DA312FABF55964488A592C13FF4BE19AD788F87FCC3BE48DE69450CD98F26D8880005
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

893E3A12AF183597E8BE13EE5F85AEFB9226E05D

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\893E3A12AF183597E8BE13EE5F85AEFB9226E05D
Size 58KB
SHA256 f9d49297985c3a088b0ff7043fb492bbba47b1df4e40f0c9962c611bdc5d276b
MD5 bd8f9e6af3670d59217e5238dc01fb39
SHA1 778d43b10d8094f4dc77d8ab0e795ccede0ab02d
SHA512 033ce1888843df17a97bd7385bfea17b90f0359a7f57096eb496360b4b7260e0dff4f1b25370e70b0598427e44dde8199f30931d1bcd4adb4d966897671fd5a3
SSDEEP 768:MNO3suN0zcQ1LeeZhWqirSGAxlCxlvZCpZIc+KE1wR8oQ2FnbAswa/4nLqYXuuS:r3n0Z81AxlCxhFvX2tbA1agWa+
TLSH
T10D43F17F5B3A6DA413D5F9C2898C74A81ED4FC9FC8619E4DC30E25CB3DC8AB08265598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8B19E798B3D060367801307DBD706E2EEA91CE1C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\8B19E798B3D060367801307DBD706E2EEA91CE1C
Size 16KB
SHA256 388baff67ac89adbd3566ea3a71e4d5006e1a2ad26f06f5db7040f4dc7011d4a
MD5 2b18a63087ede9f93e7e389d2d99f336
SHA1 ed34f19def3b8b2d5593176af5c2683345d2dd85
SHA512 4dc06f737eca226c1991b791f35652f7475de4326796f278037558b625beac76024e599c88fe5b4252e77ae0d1e256902df036b482ac30fa382aec6bf6a72fe2
SSDEEP 384:/7NX/bvkLH7qRu1e8NOCNSIoYjKJVZcNt63:x/bvu70keE1d+fZcN03
TLSH
T1D0729D3BAE403E146ED28392C9959F8DFE31B283F9A6E0EE125C66CD68D526C515204E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8B893CC51BC98E09082DCD5255718426847ADC48

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\8B893CC51BC98E09082DCD5255718426847ADC48
Size 15KB
SHA256 6ca0dcc91267206cf856dd988b811adac2f7efb51996bb77ef0a7c2e446ef942
MD5 68b829c900162d6471bbed504e2340a9
SHA1 4c03edab1def64794ceb995bee5d46f0335c0b96
SHA512 cfc9aa71ec14cbadbb94dd3073332d55983338496382d831fa738dcf8b40e12eebcda3b92c20a0954b4e56995809df038ee5a30eba94b8164cd89b833c1f8cd8
SSDEEP 192:bXBtP8qzdKoP+3ZFsonG9uAA5vmmkaLO8HLSq3DjFvFRg7C0Rg7CWXp+fY3W9BHw:bzNmb3nG9HAtmmkPeSuFNJ0gp+uWLHLs
TLSH
T1B3629E779F01601C0692C5C3C12F96DDAE00EA039ACA599E8BCC3BE56CD86D4BB2D15F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BA83674F96640023E80C48A54E66DDCE6369480A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\BA83674F96640023E80C48A54E66DDCE6369480A
Size 134KB
SHA256 c16f08d3a851d67166706d6120fa464ded73e064383824e16bdd545350a5cf62
MD5 75d44ab458598601707a69a888d60020
SHA1 c281c33ab36309d7be5b42c58b4fd1c3d872bc34
SHA512 61e9c2fdf0b753ffc3b9e0da88978a28be201195cc54146b7ae74a09a44841c6e82529c7a6901b21f2e4aa1bbf97b2e39c59cd8d0362bfae140afc419d458312
SSDEEP 3072:J2asdkDsvJY9vnjMaKxhAJPW30UeI0pNflUksEx+4aU:J2asdJJ60Ge3f70Xy6+4aU
TLSH
T109D312F69FE1B66418F213F293AFA74CDDA6ED53E484D88CA04804E9C1AD5AC14E349D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BF8F6A48FAD3473FCC65460E4B24A5D59E44B814

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\BF8F6A48FAD3473FCC65460E4B24A5D59E44B814
Size 356KB
SHA256 21fdd905394e5f30484bb509922d87c5f340ddbcd4e025b489192a3e1d5ff6dc
MD5 73616207d6e5ce8d998fa0fa761506c2
SHA1 39da202a3da68628b7fcb80b7fdd467ff5c02c1d
SHA512 88011b9eaa4d7001ee91f57b2694bd7927920c3df40c68a48c4c91142038ae50e880f400c3bab3ab0d0055e11fe6f60e3d6d62acbbfbcc857f43b7e24e98e3c3
SSDEEP 6144:VatIoleCgd8D9UZrUqr3NI5bwvb8PgMvlYeUyPWzDL80niVq03XfE52:gl3G8DWiqru5bU2yeUueL80mXfX
TLSH
T1D47423275A6563A42299DCEAFFF31F02DCEDD27290ACC45B411613ECC64E6932538B72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CBE4CE1C728CF799B1D550362B26420F7166D4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\CBE4CE1C728CF799B1D550362B26420F7166D4C0
Size 537KB
SHA256 1aa72fbb67c218058af7780d8d557763bb0e5c67349376df33c1ca2ae9238172
MD5 9c28db56704e3dc4e6f0cf33c5c28810
SHA1 24ac9112ec598af6ecedc95d6991bfdbc146e5ab
SHA512 929c2c077e7a1d77b4dbd978629df4edec04de5ce55d876a29a081a8c7a1c0644d392fb4e6951e5d0a972d476843d4f5900753b914b91e5299e9f69d8805f2a0
SSDEEP 12288:RhXNWU/SXG3wkoArn8CnEDrSAbyX7u7CgI6ft3sp:RhXNWU/SX6wNArn8C0rf2X7irI6fxsp
TLSH
T17DC423BF9C1EC8C907E514B035A98E0FDE64639F877D6B8F83DEE8804E9E8156239445
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E2E41CA3E48D2627D2A1C76828444D9215432E1A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\E2E41CA3E48D2627D2A1C76828444D9215432E1A
Size 11KB
SHA256 20e38b420dc1cac222b475fa3f5805f9db90ec8702bcf7ccd4eae024ecbb7062
MD5 b79292c5545f61bd1b029a169fbbbb56
SHA1 6e527984f0c96f7eda940377d0c8fb462b73b16e
SHA512 0db6a04b7fcdcbffb825a39921acf69c9e0331802cd0cd10ea5ca27ac76481005bd02e2c5a623d9b166f16efc48903fcdb2bcc3677322930a7109b300f657ae6
SSDEEP 192:QoFxh89Zw5ZZtApFiG/0hPUveO5EGOwxjS6SkInBb1uwUDOBb1uwUiWXp+fY3ocx:7yMBmpFiG/06veO5np9IBbUwUDWbUwUt
TLSH
T1F3328DBB5E04962452B3C0D3C9466BD82F60AF97D5C6D0E8A48C2F12979C6358B92DCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 5786cb4737c02cbc8aca9ad2afe1109a922f7f92fb3659e0c1198b33bb3b606b
MD5 9f9c21366627f6faa6c1f4e88b405736
SHA1 9e577d2f8bcc9fe3a59bf4ef2e537de3b0ccc3d1
SHA512 a1c7b2a2810aae5f916b363c20b19211f621b648157319a0eca8231a9fb66383103d0447da43461426d060ec2785d3b2ed9e1e0244c6ca575fc46d8e520b5776
SSDEEP 384:HGNQiO024YDWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA/:mDZYDWTToXJWTTogB7S/AmVAf+hRMu
TLSH
T151729E7D8F013CBC1B5790E9C8B583548D18B7ABDFB5C06D25883D09C988A2AB1F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FCC7001BFDD510C5A43379D3F42BC3909B08B76F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\FCC7001BFDD510C5A43379D3F42BC3909B08B76F
Size 16KB
SHA256 e52035873ff02b844a20ebbb6c5aa51f0afc1255d83956aa733684c8dc6d15b4
MD5 2da4769436c42e7f5e3bdcfebf90af1f
SHA1 0084c822dccd7f6906c0ade424890149c5b20969
SHA512 6f8ae0bf5052da97d6d3bf9ffbb9b273ec7f019184a4b4a4a1933229e2785bc065258f30ca3a185c08eb2c39a14b957d2ddc066c87e07d0b9b93f6966f03cda0
SSDEEP 384:Ht2jIiO024Y9WTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMASJC:QjRZY9WTToXJWTTogB7S/AmVAf+hRMDQ
TLSH
T1FD727D7D8F013CAD275790E9C8B983598D18B6B7DFF5C02D169C3E08CA88A6671F584E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

N_QcEP9nXAPvMT0f0GNraU7J_Q9YSAuQUA5x8cPLQQI=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\jumpListCache\N_QcEP9nXAPvMT0f0GNraU7J_Q9YSAuQUA5x8cPLQQI=.ico
Size 691B
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013
TLSH
T15D0194C2B2203025F81A82B05613C895D04E81EE0998A42A8CA7D1F6A848A23958EFE4
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 b0a36490adf2f9400a28b568d748d64402d5bbd0b26579abb2216e34468201d3
MD5 76dbdfb2afaa5d03c04daf8dd3f592c8
SHA1 f3a44fa9de4238bb04d596bb7080c9802b167a81
SHA512 6ca7bbe48873b91c1929310b858f0679fa63c5a2d76c899513b3bf224add52e68551da7010ace127c4f542276a46cb48162b19e29f55c73c6e3d5f751c9b9ac9
SSDEEP 1536:XTrliIwfD/tVXNNzAfRxxxisnkYoHzmmOwOfOzEXUB+OHbRcay1KcomIBJTxA4v9:X3l0dNz0xZkemqkYOdcaycb1JdvQisIJ
TLSH
T1FBB3AFF6DBA3CE2E54FFD029AAC2843FFD226414F3A73019C913635462C6B746676648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 8c54245b24d052b650471df5457d9f7d3f26bf78c38270c70205a49232213d06
MD5 103fe46270b1c118a77447ff7063fed9
SHA1 4905847de20ad1174cefa3c4453080066561c1f8
SHA512 5dfa77ae22ec6b87b6883460ce885147a90d3c09be1a27d52687c9b0bee5bd5f8f7127aac80b03c30096ff06a89a4d17a010432ae9a88b620e3b9a74f4664e7b
SSDEEP 1536:jTrliIwfD/tVXNNzjLjdxxcmOP2OrOzEE3F+OHbRcay1KcomIBJTxA4vRVOiw5wU:j3l0dNzpxYdMkOdcaycb1JdvQisIs
TLSH
T179A3AEF6DFA3CD2E94FFD029AAC2843EFD226414F3A33009C953635462C6B746676648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 32KB
SHA256 364416de1e724dde28e142e746a6c68e960d8ab233f4bc214783dc8dc564f65e
MD5 7ef26f57fcfe917c355dda5513250b0e
SHA1 703ad5589080c5baee10dd43fa78c20919fc035e
SHA512 2aa38c79f1d043186b6cc35d44d62931e2bbc34d709a6bd79e8a0f846015d258ded3c76b2c86157c475fde551f01c40cb909eda42005b1ca0acca54262f6ee30
SSDEEP 384:YrirBrIyrOc5WO6rsreBPTtta/gVmrC/m2xCMLrWYYywAr1Qc5wh/eu3wDc5WOh3:iXux2xliRVej43
TLSH
T146E2DF013BFB1159F2F39E716FF5BAA65A3BF5224A0A597E508143460B32E04CD5AF32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\AlternateServices.bin
Size 18KB
SHA256 6f237c075c26f3b2f6ce34c1a0034c4d0d9994bd85963de662fdf221a7ea43c9
MD5 fc55f24c36553120494a2e3cdd5aa7a1
SHA1 0f7b6f2522bc5d2c019eaf5e66c30c12ebdf4695
SHA512 1d7b70dbaa6afd1b20bfa1e0713c2cc09273e01657abbbe81e4b4f7f618a2293e576cc4514d85437012c1d592335dca0b5a2d61c3feeec2b78aaa9512e601d71
SSDEEP 96:2EzfO4AZTjQooBc0SdbN8M/pZjbPI563EGaNM1l:NIuQiN8
TLSH
T13C8263F32FB5A062F0928FB14058B59C9C730729196DD1C0CA8590E71BD6BE5D17EBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\AlternateServices.bin
Size 10KB
SHA256 216aaf0ea873fabd4337ed4cd171ecc1a27f79e351abfce17a3e3970db28aa50
MD5 7cb77f4a690ba275c9d31e3c9c57e8da
SHA1 c7c4dd565af634f28f1a2d0e4a670efe796c3f95
SHA512 73ba2c61f60f341d2f31680dffb6a8c9c9906b0a1c8f011ba9695a5d3da4761ef5017cd99f0b5046f91f6fcefaf3d0abf300b70643f19c2b6443b5c3b89d6d04
SSDEEP 24:nPuhMZMqkezn9+U+lzL9VqyB91Uyi9BeK9Vvc:n2Ezn4pZTjQooBc
TLSH
T1C62266F32BB6A063F0D28FB18054758C9C330626596CD1C58B41D4E71BC6BE6E0AEB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\addonStartup.json.lz4
Size 4KB
SHA256 5c8e6e9ecc86be0b31d32488d144f6bdd5126e4530b93692c3ad43032c0cd4c6
MD5 aabff6718b5032ece0ef07f1d977c898
SHA1 9b3592a66c0945eeef6db8d338c52ae99a04b2ab
SHA512 6adc89efb1166490d8d9e88d5be05bf43fcb18c0d13b28cafdfdf67a05f00d56b6e72f68a6d5e23cd4157fcfa5c2283b3bc3ba802da9863b38f8a7e8ebd93827
SSDEEP 96:N36Ye4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N3p52xxhD8rGvm6ApwnHUuhN
TLSH
T15AA16CBAD541EFA1FD32C04658D97FB2EAAAAB7410A9C4D0F1AA71150D64A735705340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\broadcast-listeners.json
Size 221B
SHA256 c1fe51cf3cdeecfdaa31db4a3d3ca43085bb1db9e563a48b5e3c6228dc8527a7
MD5 2948a47f4dc6ab74fc8b6e6d72e43c34
SHA1 dccfb9f1cf9b3be3526432bd0155230b858ed3f7
SHA512 81d23d8ede7f633d06f681d9a8021278f0470ffa0a911fa4bdefe679fd293410432ad918c31d5a051372b7cac239f7d5a7e0fb9e6ea8fe57466ca9d3a8d8b04e
TLSH
T1A3D0220F58177CBF4F486629F004A7814BAA200D32B0A43DC3BE30940A6EAEC8108190
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.bin
Size 29KB
SHA256 79abc1d1d9b2eca7fa4040f3adbdadb66f06adcef7200d59a5460d3027cd9368
MD5 f48feda30cfec34afd7f13c841186c62
SHA1 2fce7ea38cb459c381f74a3e9e05113ea0eacee3
SHA512 1862f55c188271ca88a1dcb29793bd7cc11dd6046689902dad4077340dc9f8f763f5351899254f9ff13dfd657094b103018f70308b8dc52fa7c1a57a8fd6afa5
SSDEEP 384:pRCqTpXXcf2ndYiUDGcmhucYc6EgKW7DurbabUDbbonRtyjed66JozGzgC1jd:pRV9nzdkDGcmhucDgKW7DurbabQ/qSE/
TLSH
T113D2EE44FB2A953FD41512BBDCA50B002F79B889591E2F973A4C64686C872DC3E9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 149KB
SHA256 7527effeeafaba191ef445d5545f0e6a96cbc42aeaf38d9f827dfc31455049ec
MD5 56dd0e54a69c07a351c1e71c862ee603
SHA1 f2569b4297600c759e260304a83dd6af827e6aef
SHA512 70bb94d89ba5a8a3540fb688a81799e5e8af64aec0762197161fa46a0a5727bfe193132649fcdb3dfb4346b7311b82ccadd155da44730647161e280238a5da56
SSDEEP 3072:vb6fT2u5T6yjCfRpMBGtK/9Hj+zR9t/sNJmOZDdv4PWOx:vbeT2u5T6yjCfRpMBGtK/9Hj+zR9t/sA
TLSH
T17EE3CFD4CB17407BFC2485BFB495573C2635F4654A599B0B3AAC04722DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 148KB
SHA256 cb5ec2de00f45fb16e9f4657394c6d83a0ea2b2f1c383bc2f69bff0225bdc361
MD5 c76e1c038eb925307e9becd4be454fa1
SHA1 f68dd994cac9c87b5dc7a6234ee62c5aeca7c8a8
SHA512 adb263d31a3fb9d043620d7ddbb4ef01eae8794b240a19eadf507c0dfa9fd286bf9667de490a1bda7cd5dd2f739afdd23cef38faec6f1391449c4d3a0bccaa95
SSDEEP 3072:Ob68gaX+UZ6+xjCfRWfkBh6gKaaxAzR9t/sNJmOZDdv4PWOE:ObVfX+UZ6+xjCfRWfkBh6gKaaxAzR9tq
TLSH
T1FAE3CFD4CB17407BFC2485BFB495573C2635B4654A599B0B3AEC04722DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 148KB
SHA256 f9595ba054a0e74c556f464c5b0a1ec18d6c3cac7ea6da12bdcfa391b3d888a4
MD5 51969bfca560dc44b6e5ce84baa6d621
SHA1 79957a26a22a4f719684d2b510e21eae0d493b67
SHA512 f06b12285457ae0071ad45b7bb9373a4ac75cdd16d62b98d9756a7020f75457a336e319687b18ff51abda2228e9b46a57aee5b4001343639e3958a57f0004740
SSDEEP 3072:sb68gaX+UZ6+xjCfRWfkBh6gKaaxAzR9t/sNJmOZDdv4PWOQ:sbVfX+UZ6+xjCfRWfkBh6gKaaxAzR9tG
TLSH
T11DE3CFD4CB17407BFC2485BFB495573C2635B4654A599B0B3AEC04722DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 149KB
SHA256 73b91c9f5877bb289a485a841c674a95195addbec09ede31b24ad83b9898806f
MD5 bbc1fa17f0d47e669b22d21bb6822da7
SHA1 695e5cd3117e8ae3bcd1670c465a8c507a1dba58
SHA512 9145b5abe0bd3866d4556f8b1183e660b52b47776f061644f20478b52e602b89485226d69110d669e534e5bd71f103fc7b82f7875ad512b7ece1f8436a514323
SSDEEP 3072:Sb6fT2u5T6yjCfRpMDGtK/9Hj+zR9t/sNJmOZDdv4PWO0:SbeT2u5T6yjCfRpMDGtK/9Hj+zR9t/sT
TLSH
T1E5E3CFD4CB17407BFC2485BFB495573C2635F4654A599B0B3AAC04722DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 286e8d0ccc2e18de9869a63ef85313fad5256b89b2b6cf84a991be669ccf19e3
MD5 43de461285081b3a3133034fae74443a
SHA1 1149abb017d9eafd3e8f955f239a2df520bd6894
SHA512 183fd0fa261be44c6e31250e3b69acb05413c372bd393f4778b3b5d736fea41e8acc97dbda64cff67ac622729f3ba49b9b38bf73e548316edc2e264ae15e584c
SSDEEP 192:bL1d66JozGzgCl6mc0deotOv5zboPbyCzJyjBvO+:td66JozGzgC1jQboPbRtyjh
TLSH
T178D12EA4E628863FC048127BDCA21F414F76386A9C4E3F19359C651D2D5B2EE378D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 148KB
SHA256 97d8ec8f013a23dfc610525df3f1ed9b97ca0edc96013dca2951ed1b068f2295
MD5 bdfa1f81eb1599a7212786732738eeee
SHA1 2ed787173a98fe99272d1efa43ffa82bd385bae4
SHA512 fa1c3ce7bbf766ea797c938c47186bf3fca12b3d9cc9086e010dcb91a706e097373f49dbd6ac4944e4bfece19a8134b3b343f6ed7579fe4d6c641b1f2cc964fb
SSDEEP 3072:zb68gaX+UZ6+xjCfRWfkBh6gKaaxAzR9t/sNJmOZDdv4PWOJ:zbVfX+UZ6+xjCfRWfkBh6gKaaxAzR9t3
TLSH
T1ACE3CFD4CB17407BFC2485BFB495573C2635B4654A599B0B3AEC04722DCB3BF2D0AA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 28d3881347197c3ce2ba31360957e51de39137e4c5c54e46abf56274e9bad59e
MD5 d03fd4f2641983e5a8cbfcdbffc1d10c
SHA1 dd33f4edcb625123b76f1d88f987c3d39a26259f
SHA512 d3a1c6ec0256dd7bc0f22bef6d4a51e36656f93c3edf10193e324a15609a40fd13cfd99f135a41626ca617b00a598cc9a0a6cc31c0fa6f74341216e4f41206a3
SSDEEP 192:VotOv5zboPGZyCzJyjBvOPL1d66JozGzgCl6mc0dz:jboOZRtyjed66JozGzgC1jd
TLSH
T15CE11EA4E628863FC058127BDCA21B414F3638AA9C4E3F19359C751D2D5B2DD378E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\events\events
Size 1KB
SHA256 0c5c98f59d7d003282fa10552753937f528309cf2db275cc6e76972279f6a207
MD5 63be569925f7c7adec9c4b7b6dadb287
SHA1 accc540f1a0b4d2d622be9e2784f78f0360a9a32
SHA512 621d45aae26074e85bb4f5e0bbdf8a9b8b02ea82a104d6102f6c5ce5c715649f7eebc039291a08e48f0a564106d0ab321caa08ec29198cba954139a8b83d5dd7
TLSH
T1CE216A5C3DBC4D2AA8CBFA9C744112CE53554E4B068B5C830E42DECECE82AD931AA43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\events\events
Size 2KB
SHA256 924a6a7a93a8f9a565220c1ccfcc149ded27170ff725536e7da6fee729907a61
MD5 da65f6f7dc67032b6a8b682ac363a98c
SHA1 00d41602f5ce9cb0364825d45203d8ec0afd81cb
SHA512 c8fc2d592dec3dc69315128cb8d735a9fd34060bb905cb1e19e8672385cf83f06e01396769f22a511ebc14a14221b325af49b54c6f8748a1679d6dd1223d266c
TLSH
T15D41BB1C2EB94D3A688BF68CF88102CD57954A0795C729C74EC2DE8DCD43A9A329F52D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\events\events
Size 4KB
SHA256 5fa7a469bd4d60484be7fab2c34b76f76f6a755eb3e814efcdbbbf751dbcc45c
MD5 bab4acc01ce6db7ed3abde05ba834dd3
SHA1 810198aa1ab18af69bc82d34a625dcd3c958e97c
SHA512 6f86e18ccd41f5680e9a2f6bd391b2fc3d5567e95956d0845690dc37e634209c81351e33d2aeef2296c615a7f2e7a0d65197b4bdd14a36fab6cd3910a8cacd3e
SSDEEP 48:YE/ITtp8UW9eKfCpJu1IC+J8I42F6tpxo2+8Z/8MA3w4Ri/p67gZdYITdRCgL458:SxuyC+6B2H2ER6hdbdl45fcf47f+
TLSH
T1FCA1F01D2DBD0C7F288BE69CB88142CE43D9470391CA1C8B4DD7DE898D8665A325F56E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06532d4e-c384-427f-ad54-202645fe0ddd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\06532d4e-c384-427f-ad54-202645fe0ddd
Size 2KB
SHA256 320d23e2d1be19df9dc6547f33d65f3eb7b97e653d4929134318f39269568246
MD5 d64250b2c92356825d6bd1269d924480
SHA1 508b0aa76bc842d3af9c73aed86d084ecbd59e6e
SHA512 ce09348497c2320131da9da94a899ecfb6b27f7c8312f23245fb8fa9566b783fc652dce1a9ab781174139331813c6023c5a41e34803ed98eae5009ce41522790
TLSH
T10441336C3AB86C365CDAF18D9452278A43F04E5254C61C836F51EF0C8DA669D336A51B
MD5 SHA1 SHA512 TLSH

Submit Download

1f0d3b1a-5d29-4c60-8f25-b6c88c43907a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\1f0d3b1a-5d29-4c60-8f25-b6c88c43907a
Size 15KB
SHA256 9564838a10fb207cd844a6eaf7c0e36e8dabd2c99f225f351dad41346c926be6
MD5 81e680fcd29133b4b0f256cb57b35a7c
SHA1 ca95119da68190d400a367e15afb8ab8dcdc2372
SHA512 0cbb044a7bdfc727ff0f386a2a01b332009a8da264c6c27634d19d9df7f2b13f0783b764405f0cbcadb3d5938958fcb8cdae263808f5b6712240eceb99f44347
SSDEEP 192:1KcR6zRKe/3sTOlkIy7d86ItcB/dIjDYbRkOZe1YGBbL5uwYeCWQtYL97iRcEzkR:2/pARByPYdvZqFNuhXWQtYp7iRcEq
TLSH
T17472DA562860557A8251F368D4F8BFC3E2F528CF4C419FCA9BE4BE085DDE06E112798B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c00eb96-6e0c-4f1b-baf8-a0502ff192dd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\6c00eb96-6e0c-4f1b-baf8-a0502ff192dd
Size 235B
SHA256 61d5b4a4976bc9ef59db09a1d34b6a24ad68c09a8dc816f3bbd7aa6bc5af99f1
MD5 1c6be04caed66c91f7f67f9bc49c9f51
SHA1 9c58a558244dc20e0f64926bf7cc90aff2777bc9
SHA512 7a8dc5215301fd7c191a3fe356ee288944fedd75d396da2fe668571a81b241332be39aa412cbb0ea74fd80785dbaa1c7fa44a86064616d43de8e41d422f48751
TLSH
T104D097812898331E0C000F07B0E06CC230854C3B1474A8209DA142B49AF9AC491A281A
MD5 SHA1 SHA512 TLSH

Submit Download

7f58ce84-cc46-42d0-acf1-3f796e0e14e1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\7f58ce84-cc46-42d0-acf1-3f796e0e14e1
Size 235B
SHA256 c1077759dfe1bff94efe024b81cd7d409fdb145dcebc0a33347a63318a3d8f90
MD5 65ca93a4b5d40526092ff55b793ba7b2
SHA1 ebc903331379a0782118a6aacb954c58833172ff
SHA512 f64ab5636bcc1055e23010c2aa17010aa042077783c63257c34c349e2d04c0339ad6b13b858807e8672b3d1c0a4bee7e8bae48631f4e3ba370cd345a4c360e2a
TLSH
T1A3D0978024A867EC2C281F06F0E079C239444C3B14A0A820D6610139AAFE9CA8222877
MD5 SHA1 SHA512 TLSH

Submit Download

96b04b2e-f50d-4b92-ac47-9299cf4e1b9b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\96b04b2e-f50d-4b92-ac47-9299cf4e1b9b
Size 883B
SHA256 78187902833efcbd736a5e2a4667726e1db74356d107f4d1a93a2974be0d50a1
MD5 1cf83482aebdc43e6178dd1cc7aa2e38
SHA1 9101d9286b1bfd5e8590c0190a5a5ef6ae275161
SHA512 d24ec8ff2161d98b5cbfa842ff717e52723bb95562adee20e2baf88fa694834f36cbffe51c60686051feddd2357211e979e13a6c698a8552123bdd887b58fef5
TLSH
T19A112380D631B5B1DCACE247C6A53B4287F46533C0C948143EA45A244DBF95D936AA0B
MD5 SHA1 SHA512 TLSH

Submit Download

dd9b9e66-cfd5-4ba8-8f60-d7985bbe0fcf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\dd9b9e66-cfd5-4ba8-8f60-d7985bbe0fcf
Size 886B
SHA256 07b9bc610e7ecedcefb4df5ce83acf0d7eb5f6a0261b24a9ea1a97060644593a
MD5 d4e1718b91a4ad1e9c7ff717f4556880
SHA1 6e7acff27aae10770b9ea5e6e7f35225779ec841
SHA512 a8e328e722eeaaf4de0613fe9f202cd5e1cbf7532f90a5c4f5c0510c1f1ed0ff9cab25d801a9aa59011334dbd62c4e93eafda14a49a5200318004d0d66aa0e86
TLSH
T1C91100809631B5B18CA8E29BD6B03B4387E0213384CE0D043E645B284DBF56E636A60B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\extension-preferences.json
Size 942B
SHA256 75556cb7ef37fd52a4979f0868544a1336d4ded4de77bb9303aa2fed17930d1a
MD5 3e21ab593e5cf6d2ae8ef31f7dda93f3
SHA1 ea5bf6d1dbba6c135c87bff1f016c92cf1e740a0
SHA512 59a0359371b7f97e477a32f0ea45ae4c526c0115abe43ac305343d97d1d63d076d8dae75606366a486523bcfb54d1fcb20c953c9bef1c71ba3d91a80c688b649
TLSH
T1C211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\extensions.json
Size 14KB
SHA256 3fb22b219ad48f24cec7248c2bd749a09d15b05116a6bd27737a35ec394caf4e
MD5 2555210fcc8adc297cc3acfe96c13b40
SHA1 21107ad747a60f5d1efa7b5b733422d1b5d7665a
SHA512 8bbdef16ba250c2a17888112343c738d37ef916948c223f4877287ce771394856e32b726a261dbe9cefcb8caa479e78e827769eabd6c157f15f9bdd94f357c62
SSDEEP 384:6kI4vVUmldvfu8dhW594zNI96o+L4HhL4PiL4H4L4HjL4HC:9I4dRfLXs4i6D4Z44464v4i
TLSH
T15662532545149EB8298FA78BAA367D01D37D473B60845C38F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
Size 8KB
SHA256 511ee4d95b04da20495350b4b658c374c6dc0b03756620e7a56a91ce84ba7210
MD5 021c4080d70bc9a04bd3fabae31d23f8
SHA1 09e722ef451fecd02ff9f4a2288e4f240857874f
SHA512 52432327665fa144dffcb1b851b2aa5cd07cd841e7ddc713041b573c9f7fd2018c39435ec9f1d44c6098582987a6add94935125cd5617a6b7ffabcad3f4aa248
SSDEEP 96:xHpdTUQqGqEf3bqObzS/SSlSdv9junJWRWe9VIKNBw886AF8L4cnd2+q:7qREf3bqhSSWRPeuBw88Aq
TLSH
T1C5021F389508CB7F74B676ACAC248D315A62013B7BBF68D751B954C5090CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
Size 6KB
SHA256 77cef5e4c8541d2ba13aeb930a35573e3da0bc41bf511558a904eef001b572ac
MD5 5c2efe33a5b485213e4db8865b96c802
SHA1 96eb56d4abde5458a611da2a6f14a7550ca6c18e
SHA512 d5332b3ab3c5df8025299fbb2b6192c27749ffa4afccf3f5a9e512e4e34342702235a36f7382235e23ccf1b936a3647449c2b4329348c8eab3fd227f7aa1ad34
SSDEEP 96:xHpUTUQqGqEfKbq1zS/SSlSdv9junJH5VXBw88n8L4cnd2+q:7rREfKbq6SSH51Bw88Uq
TLSH
T18CE12E7895088B7F74B676ACAC648C316AB2013B7BBF28D750B994C5051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
Size 6KB
SHA256 039d2df37e964ec3d211e2b40cee72e4bc8c38967c204fb87ece278ea4bccca5
MD5 57abf2fc95b990a302d1481934a73a5a
SHA1 a106d1a5746c2d2096c70ef0525960b49ac8df24
SHA512 0e3710e2d94a5e55c9a9ba2fec9edf5a320c40dc75650d171e3b82617042cfbf5394755a69f7ca003a22396790e38ba1faa60f8ea772482c52197ee3b6f1618d
SSDEEP 96:xHpUTUQqGqEfKbqObzS/SSlSdv9junJH5VXBw88n8L4cnd2+q:7rREfKbqhSSH51Bw88Uq
TLSH
T140E12E7895088B7F74B676ACAC6488316AB2013B7BBF28D750B594C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
Size 6KB
SHA256 1edf54f2c8faf83c2bcf94eee08ed3b752a8c915e00ae266178b2f41dc755f72
MD5 af23df0d7862d79ad5c204862af9da8f
SHA1 19e3f915a4e988d1407000cec8644c548eb6d6d4
SHA512 b7a00b7f027e78ce94a969a45ca7c67ef3ba7fb2738f05deba38db7cf933ce29909c46f777c141a8a867f72ae60484103883f21f70480199bd36c33f73573f8b
SSDEEP 96:xHpUTUQqGqEfKlJ1zSs+SSlSdv9jInJH5VXBw88n8L4cnd2+q:7rREfKlJ9+SS951Bw88Uq
TLSH
T194E1307891088B7F74B676ACAC648C316AB2463BBBBF28D750B594C4051CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
Size 6KB
SHA256 cbd6763053189a46528db4c9678b0baa8d603fe5146ef078fd1837affb994099
MD5 35bbd0cce04d3cf04c62cecc661c7054
SHA1 b0dc78e22beab0033fcb115cf6a544df81e8e065
SHA512 7ab0b0920d828b3c022bafe6ee8ada1155c319deef547e1a80662d153f2555271000d691c038dd42a5f80c74875dfe414a1d8d28dafa31006dbbe0cc3dc585d3
SSDEEP 96:xHpUTUQqGqEfKlJ1zS/SSlSdv9jInJH5VXBw88n8L4cnd2+q:7rREfKlJ6SS951Bw88Uq
TLSH
T17FE11E7895088B7F74B676ACAC648C315AB2413B7BBF28D750B994C4051CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
Size 12KB
SHA256 8547adcdd6a5ecd3493ba35550ba88e148251abd71c3351ead85b3123d3ed484
MD5 99df5b19724dd5ab254d1f307c5d4a2a
SHA1 6b4595fd89195484b58b35103e2a759ef4a72fd9
SHA512 3582cc4b50483773e667765d40f946388ba18f5962f10bb37ac2ecdf7f49e1863bc288fcb86d0f98f22d9607c3d688cedcb48a0d98d2e65db42fd4f99d779d83
SSDEEP 96:xHpdTUbPqGqEf3bqObzS/SSlSdv9junJpwoDRWe9VIK3gRONw88oh9WIwhe/2A8I:7KCREf3bqhSSpLRPe3ONw88oaIwhe/dZ
TLSH
T1D442CE3C55058B7F20B6327EAC218A71296101777ABFBCDA46F994C20D5CF2441E7AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
Size 12KB
SHA256 14582a47c102cebc6ceaf0a700b1b1f4dc54829567902cfa63cfb2a04716e4b6
MD5 652e8e5752fbb60977efdea1d0bd5e5f
SHA1 41cd75082ec7bf73c0ab63dd37688f361e5a2ca7
SHA512 c929a42895e36d08f5ffd9cad3a3bf809db5290923a7973e8f5a283c9634fb8a6348221ae33ad179aacd8b6e452080e8afcc2f7f1fe9d57aecc1dc31f715caba
SSDEEP 96:xHpdTUbPqGqEf3bqObzS/SSlSdv9junJpwoDRWe9VIK3IRONw88oh9WIwhe/2A8I:DKCREf3bqhSSpLRPe7ONw88oaIwhe/dZ
TLSH
T16442CE3C55098B7F24B6327EAC218A71295101677ABFBCDB46F994C20C5CF2441E7AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 18KB
SHA256 2f9549ca0e0625bec6702673e498142c3c8f55ade85f6293e20713cc5effcab2
MD5 67655ed6e2839fe2534ab0cd9bda5856
SHA1 f8c80139bb26ee39b5fe6871e3de10b84ae35dbb
SHA512 ec36ba19de034c3f46ad09a1cd2634001143df11f6a89ce32dedac5972fc0b87d11e8711429663f63f4b25fa55d84dc27d33dc3a978ae0dfc0253b04256d9bf7
SSDEEP 384:711vqTNBNZGebH0vEZ2OgBEyaGkZjXnHpghOf:J1mBN1UU2OWwGS9ghk
TLSH
T1B682CF27A6357FD6C530AD13A4FD0F9A13D60A9284F2161F6E5C6F2352B8B090268277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 3ce3030fc846ec5eecb98dee7c3a06112d60f13bf3319d3c4d40c4e8f2a1b269
MD5 081caf208edba91b0fa21f96aeaf3221
SHA1 a079984c06f2603eaeb444bcb2ece59a0070434d
SHA512 7510418c1d7f3f1ee81b7eacbd15d8f5642aebfd2bac5010013bb132a26717d8a09c3f3db18dc8ee0b9827da47be2b27b4592a4c20f2427c65696a5bec94bfff
TLSH
T17941F88AB7B2267F1A9CA5BB94E43FBC9E46306900C814D542BDDF240E78606F1CC56A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 174KB
SHA256 4a651b2292d8c9c86545fad8f4ba38571e68d7f9bdf2a79df40f43d4778a4dc0
MD5 7dccd0e797beb90a46a1ac99a9655f57
SHA1 6eeb82487ef09b06ee4789b593a6e0bfd9524da3
SHA512 6647b68162b4df9b4d93c71379ef79511ebc0fdb260019172715f7256c41478bfaf60d549c2d912da6bd719e607b41691881e636c73ea8f70bf5940dc4b54ebc
SSDEEP 3072:vdZhP2rMlMq5XSDDyoHiA6KXoJwAbC2E253cIU3/r/Ipa8TzBjEQWppZ4a:vdZ5XwXVA13fWLOJjEjppZ4a
TLSH
T16C04123857713E4B17BC28F5B43D2C4C2E6A6E43E6398181E151392797FEB08DE54AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 6d874d1bcb6cf6846bce51dee2b53912abfc173180b841ab63ba9c34cac5ab4f
MD5 7e4cfb1904b183f0b018416ff1e5a60b
SHA1 5b7e55650aefe34d3d08e5be9e203a16d1b89343
SHA512 147faa5f0bd69d38d3b2f01cd8efc62925c29ff4089f45a677012dc4b7b6f46629fac2e482f59ecc23041605528194cae2bc41ab39195973b4e54a38d9290c82
TLSH
T12A31C7017A3A35FF260D566649DAAABCCA99207080AC8090A1EAEB01166D80B318E668
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 d96355540213a7e5fe922a4c7eee1e5102c8684924bc9a22ba30506167422802
MD5 b7d5640ace230e792be37dcd2d8d81b2
SHA1 92e38dd568d65f3b209b4423ce6a77d30bd619d3
SHA512 e209f9cbd65b97dcb9469a08897918471cc3758f7f01e4f0f9804b8c6192d6630e2e87e1820bd8db6c1f901f79f4a9df5b528b7aaf708f8d1030a3d9e6ff5ed1
TLSH
T1A1312C40BB2626FF1A0846371DD27EFC594430B1C4AC94C5B2DE760551ACC0D32DE5BC
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 dd6f7e524a0c98159813832ae5aeddf5d8b85beb34c5f4655ca81e0dfa37d5c3
MD5 5c6a64e71b506b43b8cd049a40808956
SHA1 4de5aea7135b0e983905b7eb504823eebf2e4ab7
SHA512 6b137819ce466848a69b611d313b10d141e35ee749b79a00ada5b6ce7846585d5f6d35c3fdf377f7cc329e8716d11393f082927a309b635a6d06a6a287a17ebe
TLSH
T18E31C741BA3A39BF620D166649D6AFBC8A85107180AD8090A1DAEB01166C80B318E668
MD5 SHA1 SHA512 TLSH

Submit Download