d32906706a44d0c331eba7bdd259b2e7adbc7dbd902e7c83032b761690731ad5

Analysis

user interaction
yes
max time kernel
140s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 21:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92D84C5A1A45FBFA7FA4CB597A072883318624DB.nmNZCqn6.torrent.part
Size 27KB
Sample261102-1rn3wazw3p
SHA256 d32906706a44d0c331eba7bdd259b2e7adbc7dbd902e7c83032b761690731ad5
MD5 bf430a1573e9ed2a123fe07176a36b45
SHA1 066005d778887b296221e1e74d8e88f4a93c3d91
SHA512 4801add6e684b74397c9a15470e89d15d6172f900d4364a24b96518f19903364384bf69493a3c0bb69966510ca355b6c18935e73bb3ea97acb9ff50331613a38
SSDEEP 768:+b1oKlcjMEPYMr0VrrEEeGg6JZ10JqxcpF:+ZoKlcjMEPbSrveyLOX
TLSH
T13DC249CE829326513811B0077EE250277E1EF0067E4EB99ECA714F5526DD9CEB3E0B09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution persistence

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4928	cmd.exe

Checks processor information in registry 2 TTPs 19 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\part_auto_file	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\part_auto_file\shell\open	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\part_auto_file\shell	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\.part	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\.part\ = "part_auto_file"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\part_auto_file\shell\open\command	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\part_auto_file\shell\open\command\ = "\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""	OpenWith.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4500	firefox.exe
Token: SeDebugPrivilege	4500	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4500	firefox.exe
4500	firefox.exe
4500	firefox.exe
4500	firefox.exe
4500	firefox.exe
4500	firefox.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5792	OpenWith.exe
4500	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5792 wrote to memory of 5904	5792	OpenWith.exe	95
PID 5904 wrote to memory of 4500	5904	firefox.exe	96
PID 5904 wrote to memory of 4500	5904	firefox.exe	96
PID 4500 wrote to memory of 3884	4500	firefox.exe	97
PID 4500 wrote to memory of 3884	4500	firefox.exe	97
PID 4500 wrote to memory of 3884	4500	firefox.exe	97
PID 4500 wrote to memory of 6140	4500	firefox.exe	99
PID 4500 wrote to memory of 6140	4500	firefox.exe	99
PID 4500 wrote to memory of 6140	4500	firefox.exe	99
PID 4500 wrote to memory of 6140	4500	firefox.exe	99
PID 4500 wrote to memory of 2708	4500	firefox.exe	100
PID 4500 wrote to memory of 2708	4500	firefox.exe	100
PID 4500 wrote to memory of 2708	4500	firefox.exe	100
PID 4500 wrote to memory of 2708	4500	firefox.exe	100
PID 4500 wrote to memory of 5284	4500	firefox.exe	101
PID 4500 wrote to memory of 5284	4500	firefox.exe	101
PID 4500 wrote to memory of 5284	4500	firefox.exe	101
PID 4500 wrote to memory of 472	4500	firefox.exe	102
PID 4500 wrote to memory of 472	4500	firefox.exe	102
PID 4500 wrote to memory of 472	4500	firefox.exe	102
PID 4500 wrote to memory of 472	4500	firefox.exe	102
PID 4500 wrote to memory of 4536	4500	firefox.exe	103
PID 4500 wrote to memory of 4536	4500	firefox.exe	103
PID 4500 wrote to memory of 4536	4500	firefox.exe	103
PID 4500 wrote to memory of 4536	4500	firefox.exe	103
PID 4500 wrote to memory of 408	4500	firefox.exe	104
PID 4500 wrote to memory of 408	4500	firefox.exe	104
PID 4500 wrote to memory of 408	4500	firefox.exe	104
PID 4500 wrote to memory of 408	4500	firefox.exe	104
PID 4500 wrote to memory of 5516	4500	firefox.exe	105
PID 4500 wrote to memory of 5516	4500	firefox.exe	105
PID 4500 wrote to memory of 5516	4500	firefox.exe	105
PID 4500 wrote to memory of 5516	4500	firefox.exe	105
PID 4500 wrote to memory of 4624	4500	firefox.exe	106
PID 4500 wrote to memory of 4624	4500	firefox.exe	106
PID 4500 wrote to memory of 4624	4500	firefox.exe	106
PID 4500 wrote to memory of 4624	4500	firefox.exe	106

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\92D84C5A1A45FBFA7FA4CB597A072883318624DB.nmNZCqn6.torrent.part
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:4928

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5792
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\92D84C5A1A45FBFA7FA4CB597A072883318624DB.nmNZCqn6.torrent.part"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\92D84C5A1A45FBFA7FA4CB597A072883318624DB.nmNZCqn6.torrent.part
    3⤵
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4500
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 27097 -prefMapHandle 1956 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {be3cca37-8616-4610-9dfe-ace4917ea3a3} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:3884
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2440 -prefsLen 27133 -prefMapHandle 2444 -prefMapSize 270279 -ipcHandle 2448 -initialChannelId {7772722f-d929-48fe-9136-eca34d967cf9} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:6140
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3756 -prefsLen 27323 -prefMapHandle 3932 -prefMapSize 270279 -jsInitHandle 3936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3948 -initialChannelId {93021082-582c-42af-b8a8-3fd9063ba0ff} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:2708
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4148 -prefsLen 27323 -prefMapHandle 4152 -prefMapSize 270279 -ipcHandle 4236 -initialChannelId {4d56e10c-0ad3-4bab-b71f-ac8e275c48e1} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:5284
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3016 -prefsLen 34822 -prefMapHandle 3080 -prefMapSize 270279 -jsInitHandle 2984 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4612 -initialChannelId {573f88a9-3736-442a-b229-eb4c9edfa298} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:472
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5144 -prefsLen 34822 -prefMapHandle 5148 -prefMapSize 270279 -ipcHandle 5156 -initialChannelId {fee7e603-f856-45e7-90dd-0aa0bbd6d532} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:4536
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5480 -prefsLen 32952 -prefMapHandle 5460 -prefMapSize 270279 -jsInitHandle 5476 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5504 -initialChannelId {cf7c340e-57fa-4e3c-b1db-8f2f12d75ef8} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:408
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5620 -prefsLen 32952 -prefMapHandle 5624 -prefMapSize 270279 -jsInitHandle 5628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5636 -initialChannelId {0b42fafe-89a3-4e00-9444-09ffb4a14d1e} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:5516
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5808 -prefsLen 32952 -prefMapHandle 5812 -prefMapSize 270279 -jsInitHandle 5816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5824 -initialChannelId {0c738717-1dda-4028-93c7-aa0b35a474f5} -parentPid 4500 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4500" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:4624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.contile.json
Size 4KB
SHA256 5696c71c74442f63dea15354d81f2c62fafab7af7c977c8396977bc7509d36f8
MD5 a8f366eea686ff0db626077147b65e56
SHA1 330bc3b9cb0d1492320fd84c37fc569804267572
SHA512 f1252142c03ff0f7d3d1aa543d6b012a7327d08bc4f02d54b6e0020b9fd2da2a06eaa0f83e9b4725db42a84b97a65c421eb5080cb99d5fda54024dc91831ef06
SSDEEP 96:TwLhP1MIyDm2LhPi8CwT+mRrcn4KY+LhP6N+06D+hlz:mtMdDZ68CBmRrcTyQ0w+hF
TLSH
T1A691C95F857848231735BAE12C463AE8F107B805DAE09EAC70795CA185A8BF981DB9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 0615d2ecc759228470fb3fb55efa15592270f42018da726b395379c9603705bb
MD5 be9a7e527cb58f1177de704ac9187e76
SHA1 9ccbe9817d96146eee7b357891cfd4af406e51f7
SHA512 1f4324698cb82d67d38cd4a6895616abfa2d680915cf4dcc547ec1f0257bdbdfed0874ed2d21f6db7f8bcd0e87ec6ecfaeeda957568b6ec3ab0350adce3b2ab7
SSDEEP 768:EByfindQsD3Wq1B0ji+Zy7Rd51uihA5Xd5OxDS2KOOrLSKK+GYNuQjxN0aIB7bX:EwficaGy7R/s5d2DS3SAGYNxAaCz
TLSH
T13373FAA3A6E8B1BB0B9537CB2C0FB95B52E20195F38506C8ECE9CD1D81DD654123A5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 33d0ac71c1453e934d471cdf0f122d13baf3bf06c368e2c52fadc9d71358f0b4
MD5 a46323daa8a74029c09070d3856321de
SHA1 900cb95aaa418549325aa3b5ec509ab47c408b0c
SHA512 be8f65a40a04bf3d584eb8f3a2523c18f9fd6cfbe9a5d955b2e9d00d778f76acebcb90358cd287244e0b6df5257a0ccc83886b9dcdf4c45cb85854a37769a028
SSDEEP 1536:Ew1Ak086htT+wU56fQqkAwSQgmWtlBoMUKGyGItGw5:t1v6htT+X5EShDMlAf5w5
TLSH
T12773E8A2A2A871BB0B9037D72C0B795B66A6414AE34506C9F8EDCB1DC1CD754027F6FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 2bc8ffd42812683aca5ac8dc4edb0677db7b9b43f16dfbc87a86efeccc24c64c
MD5 e73ac1917e66eb4398e969015a78344c
SHA1 af407ca56ecf90616e7bfc865fbea039909e8953
SHA512 41b2095a870a6bb26a3fa8667d8e0aab36b736257111724934accf720a64f07cf5dfe3e7811c6f91bf31dd02098a6cc06b40ea4e49eb714c3ed6093d2f0aaee9
SSDEEP 384:HXwIiO024YksWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAjpZ:36ZYlWTToXJWTTogB7S/AmVAf+hRMypZ
TLSH
T19D728E7D9F413CAC1767D0E8C8B983558D1CB6A7DFB5C02D25983E09CA88A5A70F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 d09d2df389fb314daa677d1b390dfd79ef18b1fb0f5b20b354ab7aecc788639a
MD5 30682ab637b14c33b819e4e369ad6657
SHA1 e74b2e12e624513b51bd75b3f3e9677e1655403e
SHA512 abc01934bf5aa698028ae4dc5461e5e3637c7ee631b0c2d5adf3efd67cb909be7abe9a053562e0bcb399453bd83091bad96c7bab30d397c7ddf51e4c28238e8e
SSDEEP 1536:jTrli+TeZM8/UhCgq2rVPcuBNiW5TFo60FOHTIcixsSZztWeq3ovR8hGNTOn/CTl:j3lDCgqa/gOJrHlCzXq3Cy/aTdSIH
TLSH
T1AAA3AFF5DBA28D3D64FFE42DAB82853FFC267414B3A72009C953231452C6FB86679609
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 93c6cc816eb90a77b44aee3d9835d6bb3b12e23afcdc2acd934b54192fc21e34
MD5 866b1da27b9b4b9d0018234ffb3521a2
SHA1 e35e33015566be8f8f66ab0212eed26f7a3e1bf7
SHA512 31781efa3a42bde61ae36856e84fbac9b5d9d38c7133a0405d861dfb041df6300ebd5409ac9252d9636ac23000f9b03e1c87b11496657e986b2126d8d5421f1c
SSDEEP 1536:XTrli+TeZM8/UhCgqTrQMRH2HxB6x1PAqTUHTIcixsSZztWeq3ovR8hGNTOn/CTp:X3lDCgq3t6bgApHlCzXq3Cy/aTdSIz
TLSH
T13DB3AFF6CBA2CD2D65FFE42DAB82853FFC667414B3A72009C913235452C6FB86675608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.9MB
SHA256 1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
MD5 322a050bc53af9aad7a659054354862d
SHA1 44dec61c400db851b57e4e2645fb253609db7d1d
SHA512 ae8624becb7619dd9602f416203c54096ae0e23c4c2574c8069e633f9682b0b9bf5bbb95e94fca6610b9581746d5ed648fd41c47d762b174bd5d632937df6689
SSDEEP 393216:vKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHA:wWCmz0dwJIkpqCs
TLSH
T16337E14AE35310E9E81ECDF4866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon-1

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\addonStartup.json.lz4
Size 4KB
SHA256 d4aaa32eaff874e17a3200c38dd1da1f0fe51d21d9739c0db4975f52a76223ef
MD5 b0e0faac2f469eb00e3e5ba70cfae647
SHA1 a7fafae8708c5875153306e9a3a1f299fb3e41ff
SHA512 4dafaa5c8ad8f6d52803e18674c85600356b6c52e9cec7ed1f280cfa127a75f80a02eb3135829241401f536993e07028bb1d079caee8cb9987ef0b729f56572c
SSDEEP 96:NCeTGRo4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N+52xxhD8rGvm6ApwnHUuhN
TLSH
T1A6A17DB6D541EFA2FE32C04248D57FF2FA96AB3414A9C4D0F1AFB1294D64A735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 96fcabfcf80fe2814c5eabc500aebe67940e8e980598856758c5528362f2f1ee
MD5 2fbb1163290d3a2d07b3c55f7d9f2e11
SHA1 2d9ef7fff8b5238994e85d84e2b56e54d5d828eb
SHA512 2eabcbbca39b0568e0809676b1910ebeb83c7d1ce3240e523e433c3e83888161cd31cbe894e16210de65d50fda4ff6c2a4ea53ec0a8723d194190d9084c35e31
SSDEEP 192:a1d66JoztdzgCl6mc0d+kuOv5zbo7VZ2DQyjIu:Ed66Joz/zgC1jEklbopZ2DQyjI
TLSH
T1C0D1FF58E628863FC418027BDCA61B500F76388A989E7F1931ECB01C2D572DD7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 5f23bb868504075462ed30826f0703577c31aa1c1fd460d90fa768a85ebaa6b2
MD5 517ed88bdc64c57f1083cefd02ba4f1f
SHA1 ae9cf8562cc0aaed52b0662b5848f8724cd3f7a1
SHA512 c4031f31d11150a9fa3d862106e89c109b963e133b8a31796df9e3d4929da39faa4a96c11ac94866b3b8ef228a73dd242a43dc00adcd1c0f527bf358394820e8
SSDEEP 192:a1d66JoztdzgCl6mc0dwkuOv5zbo7VZ2DQyjIcM:Ed66Joz/zgC1jiklbopZ2DQyjI
TLSH
T1AFE11068E628863FC408127BDCA61F500F3A389A984E7F1935EDA11C2D572DD778E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
Size 1KB
SHA256 0da8caf6a34737ca20f6ee11d9c8fd524c5cfefa4aad9c9c4dd66199d0f7d444
MD5 6855d9cbd19668ff89011adbb3ff46cd
SHA1 32fdafd803df0673dc38c71a855d25c7ac0aea0d
SHA512 453fb041b18e9b85de0c588a53ffa66c6a1da072fd0cdb7c0c9393a59628e7664b72c83604e9401489dd30eb3481d68935c1ca9700e10f007348cbf71629ce68
TLSH
T1BD217F4C39F88D2A98CBF6ACB450028ED7514E0B45871D435D02DF8CDD81ADD32AE4B9
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
Size 2KB
SHA256 28058397db67df3a099bbf59a9ccced154616df9d09c35fe4e1306235f329f82
MD5 33b4446421dc607e7f276e072ad337f0
SHA1 9599024009081a7ea6c35a76295de880296941c9
SHA512 2bdebbd8b1f20026386bbfbdae7c5d8cc93282da285f37aea9cdbe296c30e5fb576a194c6981aeb0351f9c875a96b88cee4b827f6d2af68d8266fb67dfad3f8e
TLSH
T10A41AD4866A94C7AA8CBE6ECF401068DD7455A0795C32E835D83DE4CCC82AD9329F47D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
Size 3KB
SHA256 4852d2dd7fd447aba60245d69ecc962059d41e95d4fd8cf814abbdff14361ea8
MD5 fca879e97d5f0d394ecbba998a44b502
SHA1 97898e0bead94c19869d7539e19dbde4770a1091
SHA512 971495bb0ac5dc79b9f4df96c3f41bc772e045d085fcfebda12c2e1ab0a3aa9f9dfcadac75c3d8250c02396c1045cfe42aa886e753f8e5fdb76ef7e15e6e309c
TLSH
T1A651AB0866AA4C7EA8C7E6BDF401028987854B0795D71E875CD6DD4C8C83A9A319F46D
MD5 SHA1 SHA512 TLSH

Submit Download

03c7441a-404c-4481-81a3-3587d9d4206f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\03c7441a-404c-4481-81a3-3587d9d4206f
Size 16KB
SHA256 27a96c7bbdafe9a46945a7bc7ce87baf3d865a4d02dd116a6d0d94013df0df1d
MD5 d1040cbe2cb09be917a5d5d9f7aa4fe8
SHA1 badb228959e067c9f0009d43b82114e083802397
SHA512 145d8dcd829611b2c6d50bc086a21b3d309666daa305dee850940023548ba0e81df0fcd3d5ac2cd9bf95621d8af8a88607dda35d305cbd366a23847e8eaba512
SSDEEP 384:tsyB1Mi5K0lPSyUyEKPzrxNuaqsnkrto7J:tD19ohDrto9
TLSH
T13872C856686045BB8251E368D8E8BFC3E5F528CF4C418FCE9BE4BD086DDA06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e68c640-01cd-4032-8f1f-d5c5ba9d5883

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\2e68c640-01cd-4032-8f1f-d5c5ba9d5883
Size 235B
SHA256 f713465ba4b573a3b9eaeebe815fe00e67cd2f250ad026a2e3b4f9cdfbc678f6
MD5 8d5ca9de20d408491ddf47211f1ce769
SHA1 ca939867d627ec549719c6ae1233d9022e665081
SHA512 eb74ec4cc30ac2f1c2855d777862c132c0634f60d3aa645fa40b267446fee8a614094283a2077514432938ee27b2c4adc62ceef8c7ed4c476805f7b546c201da
TLSH
T1B0D097C024C9771D48340F07B0A039C6B2898C3314A0A822DAA14078AEFE9C882A2867
MD5 SHA1 SHA512 TLSH

Submit Download

7bee0ec6-de84-4e7c-afe5-479e07264c29

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\7bee0ec6-de84-4e7c-afe5-479e07264c29
Size 886B
SHA256 d72139208146ffea5795655cb965047da9aa827bbc0036be0ef06ad19485aefb
MD5 bb96fe8af700b6e80f8286ddf5cdfe30
SHA1 8a0706579ba02f02fff13f09847b8bae92760074
SHA512 9438ff84945bf6e4ea8968069390de54ac1d06407ebaa5f9d944c7abc9a5a6c5f603b1a377bc6d5dd253afdcec950b1e9e974995a7b8d6a488045b498730ecf9
TLSH
T1C71104818734B9F2CC38E28B98E1775257E0202380C959143DA4DB080DFE51DE39620B
MD5 SHA1 SHA512 TLSH

Submit Download

a75365a9-8a7f-4bdf-8ab5-8498cbd780ce

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\a75365a9-8a7f-4bdf-8ab5-8498cbd780ce
Size 235B
SHA256 38c2f9a8cf721a40ce6310e5b652cb8b0b2baa521714e98d40b329dec2b5355d
MD5 f6617476ae81dde93f868f88c0e411c4
SHA1 114460ddda624eac8711ca64f70bad2b1daf64cc
SHA512 f1f56a0e3f37ae399afa1ff0049c08b00d551852b413b58ad435d6399f3f4eb05f23e5c23d153977b8665838e70855465c157cbce64c0c76a9e65c05ccd40ecc
TLSH
T158D0A7855498A77D48244F1AF1F079C630598D3729B56860D9A246B899F9DC84161816
MD5 SHA1 SHA512 TLSH

Submit Download

b801daea-c3ba-402f-952f-637f1da5433b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\b801daea-c3ba-402f-952f-637f1da5433b
Size 2KB
SHA256 76cadefa0528db5a2eacea02497d76259f8ce51ee0e1b22bd14e57ad11b30d48
MD5 23139cfc556a99cdf40b67ed513f30c1
SHA1 54e3fe75a3b80485907a940563850a8cf7317f23
SHA512 0d6b4836a26d73a1b3ea878e6b26e5e65b431718acdb12e6ed42dfa053d1bdc026dd15987e3e069cf86ac1444b03be11f2f8a898b372eaa4fe6073b720924dda
TLSH
T19041346C36B85D3B9C8EF19DD042234E63F08D4340C91C436E91DE0C8DE2A9D736A52A
MD5 SHA1 SHA512 TLSH

Submit Download

e5b37514-65f2-468e-b1df-4cd2efaa1dfb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\e5b37514-65f2-468e-b1df-4cd2efaa1dfb
Size 883B
SHA256 c0579f3aecadce1ec5977c085527de0dd08879454df907a5f42085e11ed2e955
MD5 7e4805b1d8ef657db428f36bcf4ad9d0
SHA1 fb1a3b6dea5b855f049345a7d0fdcb32f5b8d087
SHA512 584379ca14d221df0cac4642c68111dbcc32c2bfd0aed198629178e8f75e75efb59eb38fb6c3659003304f04c48356d7e86daa9879a7804bb6c1251c31606179
TLSH
T10F1140408330B5B2CC6C928BC996770257E4252380CA86143EB58A180DBF51EE35620B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extensions.json
Size 14KB
SHA256 87ec1ca454934723f1cf341eacdea73203f06130911d9bae7d7a1b923d06577f
MD5 66c03af5cdeb22397b0a6e49baabb366
SHA1 7bef06ec0d82ca3158e377fed81e1fe0e6236e62
SHA512 c88b64e0079fe4089663f148347fa5a0279d86eeb1bd0daaaa8e5f0bd76aeb8c2933a83842f0646154d0556fbf5eeff3d7fc7f8a65aabd1094610e0b62d4cc47
SSDEEP 384:hkI4vkUmldvc8dhW+94zCN96oyL4HzL4PyL4HozaL4H3VL4HC:SI4cRflXj4G6b4f444f4l4i
TLSH
T19062421545049EB8298FA79AAA367E01C37D473B70445C78F4DD8FC842FA5B902BB62B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3112.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll
Size 21.9MB
SHA256 7b44e84403fbb3faee15ca2d56eb8432fdf4eb68812c4460abdd20972528e825
MD5 5614c2225ece73a37e47894ff3c19aa3
SHA1 df3aadd22db3b5841fe488c985365269709b4b27
SHA512 8b8e55347a7a496cfe52222670781654ada20accf21f3e2dd88847e0a7a00cb083609a5f3907bcc1f927c1227de20373a744028466663c5389ad286a46fc3286
SSDEEP 393216:SKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHy:dWCmz0dwJIkpqCW
TLSH
T1CC37E14AE35350E9E81ECDF4826E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll.sig
Size 1KB
SHA256 f9f160cb5ca37ef81a3aa80eeb7fef8b302e18c82d92c34f42503e0ab085ada5
MD5 a0dd5d559b24af4590e5cae3ac11a0fd
SHA1 04b83b414c36ab24fd27fe432a690de636bd2996
SHA512 2d69ea26916ed156f214c17d57c158cb680f1119849b8dd1f7315fd3fa6981c9d6ec2026b494d8e2e70e969205f063979287265a94e73704fe392884e8b4e4ac
TLSH
T1DE21E9DD697012242880793E5FEDF016FD3325C2AA3014FF456B65C2BCE376018C462E
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
Size 7KB
SHA256 a0c4a412a14d8cc6df1e6c4abce1ca780413d91471d98b6e804215c8d51f31ee
MD5 57f9b274d5a9a8ce49a31ad1737dd557
SHA1 c9d0e06731ee38c4570931c07a621c14bc8fc02c
SHA512 9bd18d79f36a89e0795c86bbac6913373632ba3a2e5d65ba24a8dbc90dc9930688c5ff98ceabd184349ccd03f5a65212844dcee29538259605fc151421d2e6e8
SSDEEP 96:xH4FTUbqGq6fNdkObzS7eSSl4dv9jwnXHTa7+FbBw88Z8L4cnYoO7:uLR6fNdkJeSShqWBw88t7
TLSH
T1D9F10C789404CB7F64B67A7CAC6448315AB2013BBBBF68D750BA44C40558F3846FE6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
Size 6KB
SHA256 9cf19579675287bb6fb042404f4b36e99370c1ee6fd10c0dff61ef170c3d5e1e
MD5 1c20e555d870e3a6190ad3bebd977600
SHA1 91f095c61624d78a456b5b95a83131442b45e374
SHA512 4b93a909a3ab51b813a3b579169490e50f29cd692928b754e06cde1d50af2ccdb959f30eb1795047bd1314591bb05c738a458ae032b77b42619214c2f2aa600a
SSDEEP 96:xH4UTUbqGq6fUdk1zS7eSSl4dv9jwnXH/+FFBw88u8L4cnYQO7:umR6fUdkWeSSh/4Bw88A7
TLSH
T11BE120789418CB7F74B6776CAC6888316AB2013BBBBF68D750B54484015CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
Size 6KB
SHA256 f7d059f7f20d960bbb5818f12f6a6af66e379697b29356044c356d30c1479377
MD5 e71316d40365643fc506a6edc75147e1
SHA1 b3cb661e532323606c4f6bea72649dfec38a79cd
SHA512 af8a4f108863d9ca2a7f415e84857403dc74f3788781e4042ec4b87df5bf6ee2f065347ce7ed45123b52dee40c6a8256402bacf191e7751f8ca53cf76429af3b
SSDEEP 96:xH4UTUbqGq6fUgC1zSRgvmSSl4dv9jXOFnXH/+FFBw88u8L4cnYQO7:umR6fUgCagvmSSWS/4Bw88A7
TLSH
T1AAE1407894488B7F74B677ACAC6888316AB2017BBBBF68D750B54484015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
Size 6KB
SHA256 c0d20aa173d4a2e8641a91093464774a1a93ba087a6d6e9e83534cf2627993ae
MD5 ba0237420cac091a180833c50f5c8614
SHA1 7d872ac4f729cc57ba1ef647d33936cf39d62de1
SHA512 9851f27e08db45bce036017fb0e293423a1dcc5bb994841bc1c45579766ef0390ff57efcf5911cb9e3a62f77e63c83386894e29352305c5d15a1194f1d2b3371
SSDEEP 96:xH4UTUbqGq6fUdkObzS7eSSl4dv9jwnXH/+FFBw88u8L4cnYQO7:umR6fUdkJeSSh/4Bw88A7
TLSH
T1A6E1207894188B7F74B6777CAC6888316AB2013BBBBF68D750B54484015CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 ae1e4be369355ef9f7ad66315ab3cd69191cae76d1af46bdc5eccb95cbbdafdc
MD5 e4448602b9d54da243c9b45f39a92ba4
SHA1 b7c25b16eeb96e49173e1e937b3f9549810410b4
SHA512 a1ef0ff020d6233725ecacd72449f57440b33fe26baced16b36080fcb13e6b537b1f9959e97db12f78ec58bb298689b5a58fc6049e5bb1c722c2bf58cebb883c
TLSH
T135213887ECEB3FF174400134E0A08FE0DA6AB57089758CF04289CA4120CE859F38A25C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 bdfdc24d53523a53fe8e4b302506d0f29ef93686f459eb5fe6536e5f4e7b8361
MD5 2b7e62ff0800cc9a3adea11618931e0c
SHA1 b39b612425893d48dd457e119e17eaa305fc1917
SHA512 588b1c6112088cc13dec184c0b02ab3014fed760d5864124c0346afbe7b80862d0da6fb720371314d99d28a5c94d25e0a3a4564177205b5cf9dc5a186f397c19
TLSH
T1BC215B42ECBF3FF628404058F0A04FE5CB29747049B548F08289CB8225DF858F38AA8C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 eff721664776ff377edb262c4d5bcff493c4f954ce9ce59434734ce122fe2b6e
MD5 45c44f6c34e268b1d0fca93a28be23ac
SHA1 1398c7ce7f705109579c6415413b18327167c903
SHA512 3827c03291aad6f4db6a1c1c8e23d14c9ea91d779abbf91772ed71f1b426843562f18997c29b873dd89f06aa77e87d550a95b881937fb09eeaa0e67fac27d216
TLSH
T148210842E8EB2FF661104164E0A08FF5C7757C74893988F082C9CB8120CE445F35E24C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 5bee4d6df98aad4dc01d596a41c5fe970aecbe02c841794289e0af2a650f1362
MD5 5b2235afbc9bdf7aff962425258a3b66
SHA1 0908e15a1c42119fb7f6d095536ae90a74f2adb6
SHA512 de6e2affc405bc6340117a8c53d47e84f71f1a3e3b145bc59819f5b1c16b42d8fec1e5d8b60e9c7abe02794175f5654ec9ddcb10c8217dc738e776981e724bf2
TLSH
T1EF213B42DCBF3FF665400018E0504FE5C6657470456144F04246DE8225DF864F34A68C
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.6MB
SHA256 58c83f16257dcf843b851b6e2716788b90003b44532060fd196c6daa15cb8384
MD5 33029b199a4bc1c7fadea4b65dd8be51
SHA1 3294ad52d6f56c3c13c2d902f6ca623b98e4837d
SHA512 c833ae23802e563e3f8560164c33c66a05948169f736aa32e536c579f4914a616ab6692dd8241768ffa629c166fa138578ad59f381019ca98be3746c5ac1e5ca
SSDEEP 49152:i9yWktn/X1LeEy2D3/YSMxtI4lI0DvFSoFP+tujRo31xnWS+wAX0xNoLwJipa4xQ:hQpvl8KvjMyna6o
TLSH
T1A7865BE820E19253F34240B3719993EB21EFD01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\targeting.snapshot.json
Size 3KB
SHA256 a471c58c03927082b3e39649010b7573cbb37a864651b931af97347e90586d29
MD5 8803d2649e5c72c8e235ef33486ed365
SHA1 d1cb882cd27a5820dbfb913585a80717b57637c7
SHA512 96e084981f342b0745a40b0bdd0902c2b4b94afdeca82918cd4cc8c51f4cd147f0708e257116062fd8dd48454a641b5c440077d4ba2e5efa97e935ad758e3c1b
TLSH
T1CA71600CA61CA4BEA65BC3C0D6847FA78BBD053770406458DAFE460C55FB5FB122611B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads