dba8f40cf4dcceea7c99fd3565dced3f9023ae6efa2c76ad2d529e06d259b694

Analysis

max time kernel
299s
max time network
211s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-it
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-itlocale:it-itos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 10:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
263043995550563.html
Size 27KB
Sample261102-mgkqtabs3p
SHA256 dba8f40cf4dcceea7c99fd3565dced3f9023ae6efa2c76ad2d529e06d259b694
MD5 bad1157383bf4b0d4fac5a28d62bb4ba
SHA1 d93f2d3a5c8533f526461689d5da79951e2b38cd
SHA512 844d3efefe76c9ee909fd4a711e86eb095b939ac37d0ccb1dbaa0fa9ad511ee413f2440b33bed0afeff95f560a667b69de6953141f37c96b4730cf2d7b6d487c
SSDEEP 768:r91rkbCop2LGWx1c4qi3CnhPmP7IPPPRP+PQPKNTkoV5DxVF+NX2OfufDM0sA0Cz:pLGU1cPcOhejIH5GYSNTkmDxaXvfU
TLSH
T14EC2D58E7A615A5A223789E4F1CFFBC5A27A8011C64C4D24F15D18E92BDFFD4A12339C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 19 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	6120	firefox.exe
Token: SeDebugPrivilege	6120	firefox.exe
Token: SeDebugPrivilege	6120	firefox.exe
Token: SeDebugPrivilege	6120	firefox.exe
Token: SeDebugPrivilege	6120	firefox.exe
Token: SeDebugPrivilege	6120	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
6120	firefox.exe
6120	firefox.exe
6120	firefox.exe
6120	firefox.exe
6120	firefox.exe
6120	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6120	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 6120	3224	firefox.exe	88
PID 3224 wrote to memory of 6120	3224	firefox.exe	88
PID 6120 wrote to memory of 3716	6120	firefox.exe	90
PID 6120 wrote to memory of 3716	6120	firefox.exe	90
PID 6120 wrote to memory of 3716	6120	firefox.exe	90
PID 6120 wrote to memory of 3824	6120	firefox.exe	91
PID 6120 wrote to memory of 3824	6120	firefox.exe	91
PID 6120 wrote to memory of 3824	6120	firefox.exe	91
PID 6120 wrote to memory of 3824	6120	firefox.exe	91
PID 6120 wrote to memory of 2196	6120	firefox.exe	92
PID 6120 wrote to memory of 2196	6120	firefox.exe	92
PID 6120 wrote to memory of 2196	6120	firefox.exe	92
PID 6120 wrote to memory of 2196	6120	firefox.exe	92
PID 6120 wrote to memory of 1596	6120	firefox.exe	93
PID 6120 wrote to memory of 1596	6120	firefox.exe	93
PID 6120 wrote to memory of 1596	6120	firefox.exe	93
PID 6120 wrote to memory of 912	6120	firefox.exe	94
PID 6120 wrote to memory of 912	6120	firefox.exe	94
PID 6120 wrote to memory of 912	6120	firefox.exe	94
PID 6120 wrote to memory of 912	6120	firefox.exe	94
PID 6120 wrote to memory of 3832	6120	firefox.exe	95
PID 6120 wrote to memory of 3832	6120	firefox.exe	95
PID 6120 wrote to memory of 3832	6120	firefox.exe	95
PID 6120 wrote to memory of 3832	6120	firefox.exe	95
PID 6120 wrote to memory of 4472	6120	firefox.exe	96
PID 6120 wrote to memory of 4472	6120	firefox.exe	96
PID 6120 wrote to memory of 4472	6120	firefox.exe	96
PID 6120 wrote to memory of 4472	6120	firefox.exe	96
PID 6120 wrote to memory of 4592	6120	firefox.exe	97
PID 6120 wrote to memory of 4592	6120	firefox.exe	97
PID 6120 wrote to memory of 4592	6120	firefox.exe	97
PID 6120 wrote to memory of 4592	6120	firefox.exe	97
PID 6120 wrote to memory of 5240	6120	firefox.exe	98
PID 6120 wrote to memory of 5240	6120	firefox.exe	98
PID 6120 wrote to memory of 5240	6120	firefox.exe	98
PID 6120 wrote to memory of 5240	6120	firefox.exe	98

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\263043995550563.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\263043995550563.html
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:6120
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1976 -prefsLen 27097 -prefMapHandle 1980 -prefMapSize 270279 -ipcHandle 2052 -initialChannelId {b7e892c1-a4d8-4191-9047-71e19572459e} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2436 -prefsLen 27133 -prefMapHandle 2440 -prefMapSize 270279 -ipcHandle 2448 -initialChannelId {18ddecae-011e-40f6-8047-708fb989afb3} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3836 -prefsLen 27274 -prefMapHandle 3840 -prefMapSize 270279 -jsInitHandle 3844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3852 -initialChannelId {2b1d86d6-e513-4f25-9c3f-c1f498d851fd} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4024 -prefsLen 27274 -prefMapHandle 4028 -prefMapSize 270279 -ipcHandle 4104 -initialChannelId {c1275bc0-ea71-4f52-af73-61039538dc67} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3112 -prefsLen 34773 -prefMapHandle 3116 -prefMapSize 270279 -jsInitHandle 3100 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3176 -initialChannelId {1593f231-226c-4ef2-8cc6-7e8bae429e5d} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:912
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5056 -prefsLen 35010 -prefMapHandle 5068 -prefMapSize 270279 -ipcHandle 5096 -initialChannelId {7ce04199-3ecf-42be-9a23-f71d9f1a22e1} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5488 -prefsLen 32952 -prefMapHandle 5492 -prefMapSize 270279 -jsInitHandle 5496 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5076 -initialChannelId {c54fbd05-2df9-4224-929a-1316e85f6040} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5664 -prefsLen 32952 -prefMapHandle 5668 -prefMapSize 270279 -jsInitHandle 5672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5680 -initialChannelId {36e33bcd-351a-4255-80c1-0e27e309d39c} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5852 -prefsLen 32952 -prefMapHandle 5856 -prefMapSize 270279 -jsInitHandle 5860 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5672 -initialChannelId {80baa615-8006-49ad-ac35-02fcd0dadee9} -parentPid 6120 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6120" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.contile.json
Size 4KB
SHA256 5618771afac4e768ffa107497694f84f9e667d08abddfa3c9763061ffcb3e32a
MD5 cb9bcaac6908b4ae7ce0cb047f6d5ffb
SHA1 86fc5b90e371a956160aff872ab1a2a572412184
SHA512 2bc4fb14d20fd69a6c7329f411513233de1765476879d91c88f6b2122dcd7f7791248a2b9208393c37f79f997676817a9a9ac8025aad5ebdee726cb20b4c04d6
SSDEEP 96:T3jk2Mhf7omNBtuTxT+mR2qn4KYVwq+Rr6D/Klz:DpMBswbuMmR2qSSZw/KF
TLSH
T1A991A65F95A48C121F31BAF66C4B27A8F113F005F9E44A6CB1699D60C5EC7BEC0DA584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 ddb56292e089c58bd2c45c5c586e209a65388658bd66fbf15b4daad44f93b745
MD5 6567b50d97aed1e28467e17985973893
SHA1 a27e03abf0826232f608ecbf1ac90dbacfc38276
SHA512 e141c414b1150344b53cfce644a0233db30f0bf5d141bd211eadb50d4ca672016e16042640840ec92121764a093a5279228fbb9390907b78129f9c1daecbf4fd
SSDEEP 768:zyRgUcjeQ83NKX0x+G/J151xi7rwrO//77TOOriNbHlm77:OR3AcKPG/JHX+rwrO//77UbHk7
TLSH
T1A87308A3A6ECB1BB1BD037CB2C4F795762E20196E74605C8FCE9C91C81CD654123E6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 697acfb9da9019a847b6e620cae6ef1085d919343b78ea374f6a346d3f68c031
MD5 7e5ec732046b32f05c91a9975c4815cb
SHA1 8af298a2cfefc3600339052cbbe3e1b0edb2016e
SHA512 5d8ceb8eab94c7305c4f5c0e2d7411440406a5055206b38bb9d812bdc6e9f9aa38773e70176c82fe822e622a2179c26a4f13f954ee43185cf227acf11d2fc8ad
SSDEEP 384:HXwIiO024YDWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAjJn:36ZYDWTToXJWTTogB7S/AmVAf+hRMyJn
TLSH
T115728E7D9F413CAC1767D0E8C8B983558D1CB2A7DFB5C02D26983E09CA88A5670F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 0209a5158f622cfc08362fa165b58861da8a5b05c642065cb57550056ba91a4b
MD5 573fa375f239b2cb919ae5f3b08c9bb9
SHA1 452439dde92f88133d680dd06e3622b77e69772b
SHA512 bca77d49108f8b970d01282f698fe6d1c778e62f2e747f6c33ce980211367e349c646b4f4418ee800537ab57ce3df04978082a9bd9be0e74cedeb08d6283a902
SSDEEP 1536:jTrliJkfD/Uhc+irCre/MvxwCnsJM4ZqqbOTidXyoBr/S6R5Vf9yFF321nfWs7Ca:j3lWlirXMpwCpsg4tl0m5WEC1GPxhus3
TLSH
T1BCA3AFF6DBA28E7D65FFD429A692843DFD222444B3A73009DD23272052C6BB87275748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 2f320b43eb63259ad9c22b9101baf7dded06ecb1afb8ff65fa12ae7371b5874a
MD5 231e29e78adda08f6a88e7998a5281cb
SHA1 4493cc0d3846b0f0fa8921eb42cdc64c6c70ee83
SHA512 04b7e6668d64f9a16f6c3525cdb712d3b3265c70d9d3187ff5aeed65936028b7380d0c81ee798e60ff636ae38f0bc80a8fee837ee18f30f1a40f5b80a6951086
SSDEEP 3072:X3lWlirusnGIk6Me4tl0m5WEC1GPxhusB:FWyu8ifeo95WKxYm
TLSH
T133B3AEF7DBA28E7D69FFD42966C2843DFD222444B3A73409CD27272052C6BB87275648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.9MB
SHA256 1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
MD5 322a050bc53af9aad7a659054354862d
SHA1 44dec61c400db851b57e4e2645fb253609db7d1d
SHA512 ae8624becb7619dd9602f416203c54096ae0e23c4c2574c8069e633f9682b0b9bf5bbb95e94fca6610b9581746d5ed648fd41c47d762b174bd5d632937df6689
SSDEEP 393216:vKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHA:wWCmz0dwJIkpqCs
TLSH
T16337E14AE35310E9E81ECDF4866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 c0e52be1dcde41e33ac2e4fd3460e88afaa37a27434863f65d4a03a110fe59f2
MD5 93ae49210a59d4605da3a5f220d81a3a
SHA1 d6c2ae498957143c18d27db64a3772020946a060
SHA512 d0d63f95a9e88808879b375811ca13183d2ce0b406e0eb939946a7cad5d66b401bd544839dfb845de366f0a1910bc4826d292fbb488f1958a65f881aeca65388
SSDEEP 48:giFidhWJ5Ugdw6dzXjFidhWJ/6Bdw6bX1FidhWJ/adw6JDTRFidhWJ9fCi+oiBPG:t9/99/SB9/Cz993cz7c
TLSH
T177F1FA100BF70D51F5F39531BA327B46A737FE111A0B529E818292954A73B608DBEFA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 d8a95528ab23f179da21fd8a1804d3abc5a18627943beefc928fd2a39c719af9
MD5 4c73ad43f4677f32a2738f53efc3657c
SHA1 eb5868f747835d648d16fb488a8f52fcdcd3e4ff
SHA512 eb2e3e0c878c604a3868c808bdec323111b81fab7991583da2fd1899a1c265aa7ac16fc5814631752dea1c7150123ff9041f7d867cccd2e4196a676f71fe376f
TLSH
T1A02112798E8FC53EE1E259BD3CAD4B511C7E234A516BF4AC3DE642A431C4FE561AC090
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\addonStartup.json.lz4
Size 4KB
SHA256 87311ce0334d9b0e77f8c6e959b23bb9f339de9781ead4fff7d4e43752909adb
MD5 ef67359481d4ee87429fb21c8b8beff0
SHA1 e4bfdd01da6e7c046fb8dec9cde03e51e4c93ae1
SHA512 526b12259b3dadf71add42137d441915262d13add6ca725b2738c911ec7f33e1684133b81c0406150888a1cea88f42f4da30a676ad385a9cf8d9f8c955311667
SSDEEP 96:Nr9Dlq4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NpDT52xxhD8rGvm6ApwnHUuhN
TLSH
T1EFA17D76D581EFA1FE32C04348D93FB2E696AB7414A9C4D0F1AA71294D74A735700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 bfcc9bd05d6369fd428b00c1c329f3ba97b96d037ce599bffe20dbdcd5d319de
MD5 9ff5359722b35ccc41d3aeff04fcfdf3
SHA1 bd4cb70a05443b62c7da980fc0b7a03591a56c4e
SHA512 13213f23d0e6ba5b8affca7e90599284659e046e7b38eceba2f45e770ce13f4d5c092632c3d86421c9e4d91cc775f35e52c0ccf13baaf550ab4cf1730e91ddde
SSDEEP 192:Z+41d66JoztdzgCl6mc0dbOv5zbo7abtyjrM:Z/d66Joz/zgC1jyboebtyj
TLSH
T13BE11EA4E628863FC418427BCCA21B400F39389ADC4E3F1935AD611D2D572DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 b323840f4f212dc9e253ab2cd70afde06da09abf1cca32e3036aa35b35e7aff2
MD5 26bd4a7740be2953b7e15495305774c1
SHA1 842c74f32af85c5a4f3f4eda193040c1c729f808
SHA512 7f1381aba15b02535860ea59b4833f68b57579281dd5d1c9bea34493cd1234fdcb93217970ec141e39bb198abcf8a35f62bdc377511c8a3b4822310f381029fa
SSDEEP 192:ZOv5zbo7vZbtyjrMh+41d66JoztdzgCl6mc0dz:2bobZbtyj6/d66Joz/zgC1jd
TLSH
T1D8E10DA4E628863FC408427BCCA21B400F35389A9C4E7F1935AD651D2D572DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 fb263ee2c534f1795f8c400a3258b7586fd4179d0b7506a04e70e90676ee19d4
MD5 92b6832aeb570432f52e97b96d8f83a6
SHA1 7bb20196c6ddbfe3c443d5aab3c995aca0332790
SHA512 88fac8813d2b4370556b6ba09f3ed42fae0b59e52eeacd37629621eeffd4a090195b96fc8555c6253dd6fa463974f6449984f6ce09217dc3a3e849289f44503a
SSDEEP 192:S+41d66JoztdzgCl6mc0diOv5zbo6bbtyjrMN:S/d66Joz/zgC1jTbo6bbtyja
TLSH
T121E10EA4E628863FC408533BCCA21B400F35349ADC5E7F1935AD65192D5B2AE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
Size 1KB
SHA256 04c0af8cec693a002f824d932f24afbd04d6a61727744e9cf215d8981f671c6d
MD5 9809fd6c057f7cc1bb86cf995dea9d55
SHA1 c670f3c9099b9fbf23475afb55a7469c35cf5223
SHA512 d1f1257e5e8a8b4a1e8f9564004275020e0a9b284da47cfea0b538a842e329f4aac57dfc355971961e128198bdceec2b48e085126d45b69178f70d80caf98a0b
TLSH
T14C21495C39B98D2A58D7F6ECB892068ED3254E0B05871D430D23DF8DCD91AD932AE47A
MD5 SHA1 SHA512 TLSH

Submit Download

34e867d5-0798-4a05-85f2-16131d11447f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\34e867d5-0798-4a05-85f2-16131d11447f
Size 235B
SHA256 06aeec33f140b3befce95b633e9fe450b08302ab6b5b7918ef0fd8f85e978f7e
MD5 1d0b7eceae271c8753f7cba3b03922c6
SHA1 5181197c636a10cb986b5cc1f5ac1be2ec955a07
SHA512 89b358751c747b3f0df3e92497a935ea92ed2a3e471bb10de02c583974a29bdb8b475b8892a6344905deb704ba4e544df3710d78f8f00e6ae1227cd55fe8341c
TLSH
T1DBD0979018887B6D8C144F13B0A06AC730888C3721A8982089504738AABDACA4162846
MD5 SHA1 SHA512 TLSH

Submit Download

56987498-ec30-4d17-bfcd-3983edd608ed

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\56987498-ec30-4d17-bfcd-3983edd608ed
Size 16KB
SHA256 95a7afaa7899899de5a6a470625f82947f3f5f6e2269d432d5bb08f7793f0133
MD5 43ecadb44209ef7ba51a60d9395e6c57
SHA1 d058d29433b52bf3db83ce6bd03167c0c2877a6c
SHA512 98c5db644bac5f6bdf72d0b19d5652cba9bef0d1193595e33e0ab19c919b3f514d7a1b6ed16bb245ccfedcb73d6bc6d3417b7c60577aa9947c96e345b074caaf
SSDEEP 192:cf5espTFaPzdD7cEnK72bzx5iM11BudWGlAPgPRGCfm+q6gqV6gHQiB5X+JUs4R+:85/pTALdD7cyK72bl5fIdjlDJmU1FdO
TLSH
T19A72C8566860597AC650E768D4FC7FC3E2F528CB4C418FCA9BE0BD086DDA06E112794A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a11d43af-ffc8-49c6-b886-aab7fd1009d9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\a11d43af-ffc8-49c6-b886-aab7fd1009d9
Size 883B
SHA256 073b91607b00c8490374ae6fc687951e1028c9ff6b3cae8ee5d573bf7f629ad3
MD5 1d04c889d9d04a93be8bd8d77c34a68d
SHA1 e4e4c4c2bec3f28704fee68253e7e1b448a055ec
SHA512 840755d463a68da2dc08a7c3ab3a923b958e5752a0970420dd836bda2564ba21d35c3b0e2bbd549d75046330f8d9a28c337b3f42240e144c5a738d31b7a57cee
TLSH
T149112391D2347A72CCBCE35BC995370147E4302780C684143EF09E280D7A61EA376707
MD5 SHA1 SHA512 TLSH

Submit Download

c03c9c5c-ad6f-4f70-a52e-6f2ffabc8a3a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\c03c9c5c-ad6f-4f70-a52e-6f2ffabc8a3a
Size 2KB
SHA256 bf956cff2d4a8864bcc6ee8a9d77898b63625a5f40c078a5e31b04fee48ebbdd
MD5 a73e78c62f6c41c267bca0498e64e689
SHA1 2b8438e949039c043cddfd51e9c43ccdcc595ea5
SHA512 1ad7f2ab597dc5dced731e6c05a9670732bd7253384477385ce27931afbe20afb95d82f45b93b1a8eb9807b54de04408b2dd81356c8ce41b6a48a62cecac70d2
TLSH
T1E641335C75B89D379CDAF59D9492378D53A04A1300C32C836E91EF0CCD9279E236A52E
MD5 SHA1 SHA512 TLSH

Submit Download

c668a04b-17ba-4b9d-aafd-36b2539f22a7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\c668a04b-17ba-4b9d-aafd-36b2539f22a7
Size 235B
SHA256 47dd96928d45333e22a5e6bb6a512c0d5a7e4575ff30abdcbd3d3920790bb27f
MD5 36be2e85157a32f8f76bea89230971c9
SHA1 ad3f436e29e23397a7cf21facb0fa712fd846bfc
SHA512 6a6db467e7754a27501d8959fc2a5aa7a2892084f3659cfa5b97aeb81fbcd288b5b091f2f8700025c3deed10410a49d5820bae19b5ccd9f20535765a16884490
TLSH
T147D097C0148C679E08180F22F0E069CA31484C371465A82086904838C9FEAC882A1806
MD5 SHA1 SHA512 TLSH

Submit Download

e70ad791-903c-4f5d-8d79-be363cdf38aa

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\e70ad791-903c-4f5d-8d79-be363cdf38aa
Size 886B
SHA256 49933aa9382766d20e0c684bc849a7825c3ea874b822601913461045888835e1
MD5 1915d8e54b4f3d572333ab4cbbddef2d
SHA1 ba34f29c11c2fc86d9b312bc81601dee3ef96c84
SHA512 b3be053ce3fee347e66575d3bc634c90232ae0a1ff4e9c4702a595ecdc5c976a581062780be7cb50b5d02d27207e40705d90f3aa5db7ca5dbdd6456bf572e244
TLSH
T11F11E395C624B971CD7CD29B89E1BB5147E0306380CA4D147DE19B188DFA61EA36760B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extensions.json
Size 14KB
SHA256 608115f77250171254420630f5a3ec02f1de543cf90ae13be8712a4cc9198cbd
MD5 b5bfe46bc1191aca8c35cf995c6eee33
SHA1 d6af0cfd485137209519c55f95fcd2bd21bbe27a
SHA512 70fae2c855278ef074fbfcfc317266013061e693415dc87fcc119340f1d137cb5ab95d6c1c721c2114839e776e959b7a58565abd125f2c7bd7d8863111f3d40b
SSDEEP 384:mkI4vBUmldvj8dhWv94zt96okL4HXL4PjL4HYL4HUL4HC:pI4ZRfQX+4v6J47434a4u4i
TLSH
T1BF62431545148EB8298F979BAA367E01C37D473B70445C78F4DD8FC842FA5B902BB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3112.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll
Size 21.9MB
SHA256 7b44e84403fbb3faee15ca2d56eb8432fdf4eb68812c4460abdd20972528e825
MD5 5614c2225ece73a37e47894ff3c19aa3
SHA1 df3aadd22db3b5841fe488c985365269709b4b27
SHA512 8b8e55347a7a496cfe52222670781654ada20accf21f3e2dd88847e0a7a00cb083609a5f3907bcc1f927c1227de20373a744028466663c5389ad286a46fc3286
SSDEEP 393216:SKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHy:dWCmz0dwJIkpqCW
TLSH
T1CC37E14AE35350E9E81ECDF4826E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll.sig
Size 1KB
SHA256 f9f160cb5ca37ef81a3aa80eeb7fef8b302e18c82d92c34f42503e0ab085ada5
MD5 a0dd5d559b24af4590e5cae3ac11a0fd
SHA1 04b83b414c36ab24fd27fe432a690de636bd2996
SHA512 2d69ea26916ed156f214c17d57c158cb680f1119849b8dd1f7315fd3fa6981c9d6ec2026b494d8e2e70e969205f063979287265a94e73704fe392884e8b4e4ac
TLSH
T1DE21E9DD697012242880793E5FEDF016FD3325C2AA3014FF456B65C2BCE376018C462E
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs-1.js
Size 8KB
SHA256 b973a60512480ad6f9927f7ed7eb7fc394188d7ef92f5ede63922516cf8c646a
MD5 3b85040bb2645bc9b152519fa7ead953
SHA1 6962cd0cce822157557fbd22d48d0cca2b0868d8
SHA512 b9edcf42c9fa452b09964834a0a897f8bcd342a239477625a6890f3acc186dd25ae371c7a4021031783807b3f4c2e890c0baca62388834813062fe22778c87aa
SSDEEP 96:xHV6FTUWxqGqa0fyUpuObzSjSSl4dv9jhQwnS6WRNDY5xNUZcBw88Eed8L4cn3Vg:r6SRLfyUpuRSSdRRNDgDBw88dcq
TLSH
T153020D389004CF7F64B676BCAC6889755AA2013BBBBF68D750B954C5050CF3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 94e1081df502d544c9d93598033c8b2b3700b1ee537ee0258142ffd82142d1f0
MD5 e44ff7479690fd6777d4c6e93beb7084
SHA1 b37cb0667aa95a2ecf9b6050999fbcc46d3654f0
SHA512 c39b24a41da0887270f85b9d8f68f32d34abf7850af82eaa36b15eb8ab6e0da3cc1cc932da1899d8266d4f8bb712ef542e2311345e6543d3a880252fb1545d0c
SSDEEP 96:xHV6UTUWxqGqa0fm6S1zSGgWSSl4dv9jTHnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfm6SFgWSS2y0HrBw881q
TLSH
T14DE11F7890188F7F64B6776CAC6888316AB2413B7BBF68D750B65484054CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 0bb51ac8704d01130cf2bfbd710762834e27b830a26c863ec98ba2f21a732dea
MD5 5927ae49c677c9cbd49c0a899174bc00
SHA1 a6bc9d0c49104ec78283aac81cd06c051bd9e89f
SHA512 1970971d2c0bb1ba366bd9e111f5134f7793841d1b25ecc636986f52fa97a346b3783e7017bb65da40d2ceb1804795920b7a688049938abee01326d4fbe1bbeb
SSDEEP 96:xHV6UTUWxqGqa0fmUpu1zSjSSl4dv9jhQwnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfmUpuaSSd0HrBw881q
TLSH
T10CE11F789018CB6F64B6777CAC688831AAB2013B77BF68D750B65484054CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 f2fda283dbe63f7ecd9d9013ed37491904bf112f2d59cc5eea00d2809d9990e4
MD5 656e5e366dd014ca67a6812fcca5704e
SHA1 f9111e5fd90222bda8bc73f46c911f22c51d5b37
SHA512 76ae12fd017d6f950963308f31283ebe95f1d49e31d6a16d6928c1367a666cabebe9d18cd9ce1d80479c995825a254d53e6187cbb49d4e39ba6c6932cf9f7cdc
SSDEEP 96:xHV6UTUWxqGqa0fmUpuObzSjSSl4dv9jhQwnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfmUpuRSSd0HrBw881q
TLSH
T15AE11F7890188B7F64B6767CAC688831AAB2413B7BBF68D750B654C4054CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 78a605f0163a727c77bbeb40cd95cae6ff325ce982d7d9e90e84dc53d8c48299
MD5 b5ebb1516a273df38758d17683dc37e6
SHA1 908bc943df026baf23953decf64ea9e8577f9b04
SHA512 d04847a1b4db7e46a1c69033e9194fb4b5d7f42893587920f759ca2f74964a634231a45652d9a286601435458fdd0fb69017e3dacf2f506089ece28985a11804
TLSH
T1B3715D42E92E1FF3F76E92A55C8962F0B637A03004765050A3EDD781A6FE8E9716E304
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 a79a45760c3432baec95675fad4d2ea32a59039fcb28b2b5639c75a415ec3782
MD5 390e6299c49e987314e2a714c0603259
SHA1 bf38eb06d7e7bbb5ed2c35536662852a1d431622
SHA512 21e25002bd825366a3e06e9fc77bb94df2dcb9fd518bfa3d842d5cbcf91400cc817ca67bfaa8a2a0db61415ee9d59a0aec1d702a9923c9dccf0cab44aa5743c1
TLSH
T12C714D42E96D1FF3F76A92915CC962F0F73A603408795040A3FDEB81A6FE8E9315E204
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.5MB
SHA256 089b74b9711e37103fc5d0fa00b7f1ce4cc9da4790bfc7f1269ddbe54c9c74dc
MD5 5381d88d530cf1b1a81e9b5a17bf8a8a
SHA1 5eae255e227d55481a92c3377f9039c1ccc8b48f
SHA512 c6598260a1a8d311b23edab1a6decee5ce4867aaad15232114f0c78790328618f79033b6ba59be4f57829a21bbf197c721ffedc97791ce04186e83d7e1d1c9ed
SSDEEP 24576:kNJwu7DmsTOPjPh5YoMkhj0BDNDWEheQPhTJxK9Z15P7UNqs5Ahe3QNoNx5Cm:kNx/kDbYQhB0JxmT5P7xnhsqoph
TLSH
T1DE4629E820D1A297F3814073724593EB21EFD00D5037DA085BA99AE9A574CEF8E17B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.7MB
SHA256 8c080054c3fdd8a967d654a4e45b9c5f7b7be852462b57190f2bf31ab83222b7
MD5 ccac06b51dff4a59fb98f3e405aaa7fa
SHA1 5006cc50995d48ea624b6a0b07225bdd9ec35aa9
SHA512 b1cd38025fa0329aad8fad2630503de238b5ebd18c2d074d19e0b4ac415c69e15f81b8f9bbad15fffacd6deea4e57e3ec4e8e616e010d6ed902e06bae2cbbfa3
SSDEEP 49152:j8G1xpyySs3LOzG7p87gIl4ADNRm8Chc3TzH2HLiFx95ISl6qXbg0Nlcr+jMaSZv:YuLOzG7p88ILDNr
TLSH
T12D864BE820E19253F3864073718993EB21EFD01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\targeting.snapshot.json
Size 3KB
SHA256 89b6ce6b4597b17687081ceb5296b8658dc9ff2679288a35a0491b37f2afcff4
MD5 ea285860d19d55b0b411797e6939eaed
SHA1 bdfe6a137313b00877210215ee00ab189f679ed0
SHA512 3ac2f81a70539b0d5d0aea2e1da11d788d591bc1ab8eb8ff38f38993491394c2a7e4f6d24ae4a4722c70fafbacd3be3d79f717274e1ebc938df73a57d9a94c67
TLSH
T12471700CA61CA4BEA66BC3C0D6847FA78BBD053370446468DAFE460C85FB5FB162611B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\xulstore.json
Size 167B
SHA256 a261f6c4c1f49fbaac01d6d7437da1149f9b03588d54b2fd860fdfe969596115
MD5 e116daaa7b2ab9bd0f8985831cbbac49
SHA1 e7d1fed6c2125cee196699694b7f4532f20536c1
SHA512 5d0ccbfdd9e5160a07f658fcb99e7527fdaed658a3f7c78c9bec2b7fcba9025e88be25b804102b371307edc1aec5972752fcdb204239dbc5e65f7a3c59a268b8
TLSH
T1CFC08CB022AFA8087D27CBCF128D22983E398A5491D0529A7AEA94A018C470F9D18388
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads