70918ad75f8a91c20c80ddb9d83159839f366bd1a74b0fd96bcd81bc7a0ac5a2

Resubmissions

07/11/2026, 15:16

261107-sngkmayx4p

07/11/2026, 15:13

261107-sl3ebafc323

Analysis

user interaction
yes
max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 15:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AnimeAdventuresMacro.exe
Size 2.4MB
Sample261107-sl3ebafc32
SHA256 70918ad75f8a91c20c80ddb9d83159839f366bd1a74b0fd96bcd81bc7a0ac5a2
MD5 210a7063111493ec4f161c588d7f0fc6
SHA1 cc68663ec6e6f62b5d68f28529344a663ae79195
SHA512 d394b7071ec8acdda52c01b9ac7e99325d066fdc27d8d47ee6fc83d289263a00ca8d0c757b4b08a880200baa967392ba9ed16ca6838a15ef33c9ce2f2c783bbd
SSDEEP 49152:ZDfffR1vk5Q6hWh0Ei3hA2E97XtYWEQ0Vd+paou/WfMoDryGX:ZjaIqEIh0pgQd
TLSH
T1ABC5E10373E6C1E8DA7781F5C5665622EB31B8641B388ADF2150952EDFB3BD04E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 39 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3568	firefox.exe
Token: SeDebugPrivilege	3568	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
3568	firefox.exe
3568	firefox.exe
3568	firefox.exe
3568	firefox.exe
3568	firefox.exe
3568	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3568	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5964 wrote to memory of 3568	5964	firefox.exe	93
PID 5964 wrote to memory of 3568	5964	firefox.exe	93
PID 3568 wrote to memory of 2268	3568	firefox.exe	94
PID 3568 wrote to memory of 2268	3568	firefox.exe	94
PID 3568 wrote to memory of 2268	3568	firefox.exe	94
PID 3568 wrote to memory of 5084	3568	firefox.exe	95
PID 3568 wrote to memory of 5084	3568	firefox.exe	95
PID 3568 wrote to memory of 5084	3568	firefox.exe	95
PID 3568 wrote to memory of 5084	3568	firefox.exe	95
PID 3568 wrote to memory of 2688	3568	firefox.exe	96
PID 3568 wrote to memory of 2688	3568	firefox.exe	96
PID 3568 wrote to memory of 2688	3568	firefox.exe	96
PID 3568 wrote to memory of 2688	3568	firefox.exe	96
PID 3568 wrote to memory of 4872	3568	firefox.exe	97
PID 3568 wrote to memory of 4872	3568	firefox.exe	97
PID 3568 wrote to memory of 4872	3568	firefox.exe	97
PID 3568 wrote to memory of 5992	3568	firefox.exe	98
PID 3568 wrote to memory of 5992	3568	firefox.exe	98
PID 3568 wrote to memory of 5992	3568	firefox.exe	98
PID 3568 wrote to memory of 5992	3568	firefox.exe	98
PID 3568 wrote to memory of 6168	3568	firefox.exe	99
PID 3568 wrote to memory of 6168	3568	firefox.exe	99
PID 3568 wrote to memory of 6168	3568	firefox.exe	99
PID 3568 wrote to memory of 6168	3568	firefox.exe	99
PID 3568 wrote to memory of 6420	3568	firefox.exe	100
PID 3568 wrote to memory of 6420	3568	firefox.exe	100
PID 3568 wrote to memory of 6420	3568	firefox.exe	100
PID 3568 wrote to memory of 6420	3568	firefox.exe	100
PID 3568 wrote to memory of 6428	3568	firefox.exe	101
PID 3568 wrote to memory of 6428	3568	firefox.exe	101
PID 3568 wrote to memory of 6428	3568	firefox.exe	101
PID 3568 wrote to memory of 6428	3568	firefox.exe	101
PID 3568 wrote to memory of 6440	3568	firefox.exe	102
PID 3568 wrote to memory of 6440	3568	firefox.exe	102
PID 3568 wrote to memory of 6440	3568	firefox.exe	102
PID 3568 wrote to memory of 6440	3568	firefox.exe	102
PID 3568 wrote to memory of 6900	3568	firefox.exe	103
PID 3568 wrote to memory of 6900	3568	firefox.exe	103
PID 3568 wrote to memory of 6900	3568	firefox.exe	103
PID 3568 wrote to memory of 6900	3568	firefox.exe	103
PID 3568 wrote to memory of 3108	3568	firefox.exe	104
PID 3568 wrote to memory of 3108	3568	firefox.exe	104
PID 3568 wrote to memory of 3108	3568	firefox.exe	104
PID 3568 wrote to memory of 3108	3568	firefox.exe	104
PID 3568 wrote to memory of 4976	3568	firefox.exe	105
PID 3568 wrote to memory of 4976	3568	firefox.exe	105
PID 3568 wrote to memory of 4976	3568	firefox.exe	105
PID 3568 wrote to memory of 4976	3568	firefox.exe	105
PID 3568 wrote to memory of 2796	3568	firefox.exe	106
PID 3568 wrote to memory of 2796	3568	firefox.exe	106
PID 3568 wrote to memory of 2796	3568	firefox.exe	106
PID 3568 wrote to memory of 6208	3568	firefox.exe	107
PID 3568 wrote to memory of 6208	3568	firefox.exe	107
PID 3568 wrote to memory of 6208	3568	firefox.exe	107
PID 3568 wrote to memory of 6208	3568	firefox.exe	107
PID 3568 wrote to memory of 4804	3568	firefox.exe	108
PID 3568 wrote to memory of 4804	3568	firefox.exe	108
PID 3568 wrote to memory of 4804	3568	firefox.exe	108
PID 3568 wrote to memory of 4804	3568	firefox.exe	108
PID 3568 wrote to memory of 6856	3568	firefox.exe	109
PID 3568 wrote to memory of 6856	3568	firefox.exe	109
PID 3568 wrote to memory of 6856	3568	firefox.exe	109
PID 3568 wrote to memory of 6856	3568	firefox.exe	109
PID 3568 wrote to memory of 6764	3568	firefox.exe	110

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\AnimeAdventuresMacro.exe
"C:\Users\Admin\AppData\Local\Temp\AnimeAdventuresMacro.exe"
1⤵
PID:3232

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5964
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3568
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1964 -prefsLen 27097 -prefMapHandle 1968 -prefMapSize 270279 -ipcHandle 2056 -initialChannelId {61093e2e-b20e-4a23-8196-039f5db77394} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2400 -prefsLen 27133 -prefMapHandle 2404 -prefMapSize 270279 -ipcHandle 2412 -initialChannelId {5c49b019-6b48-4e36-8bb5-2f620c89cc62} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:5084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3848 -prefsLen 27323 -prefMapHandle 3852 -prefMapSize 270279 -jsInitHandle 3856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3864 -initialChannelId {85ba639e-78ea-4441-888f-89bb1fd5d0b6} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2688
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4016 -prefsLen 27323 -prefMapHandle 4020 -prefMapSize 270279 -ipcHandle 3992 -initialChannelId {2a9e57a1-f185-45ad-bc36-daa25a1b55f5} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2632 -prefsLen 34822 -prefMapHandle 2608 -prefMapSize 270279 -jsInitHandle 2740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2712 -initialChannelId {6a034b37-0de9-4511-b7c1-53e48c70f2ef} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5992
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5064 -prefsLen 35010 -prefMapHandle 5068 -prefMapSize 270279 -ipcHandle 5080 -initialChannelId {bbea9baf-9526-4626-9769-bbe218c1f3b9} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6168
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5696 -prefsLen 33031 -prefMapHandle 5692 -prefMapSize 270279 -jsInitHandle 5716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5724 -initialChannelId {d0359824-c8f5-4d89-8a50-e112dc6c94c3} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:6420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5916 -prefsLen 33031 -prefMapHandle 5920 -prefMapSize 270279 -jsInitHandle 5924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5952 -initialChannelId {689193ae-2505-441b-9364-6097a6f84995} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:6428
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6148 -prefsLen 33031 -prefMapHandle 6152 -prefMapSize 270279 -jsInitHandle 6156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6164 -initialChannelId {cd9e0574-b927-4d6c-814e-a69658d42cbc} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6440
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5700 -prefsLen 33071 -prefMapHandle 6328 -prefMapSize 270279 -jsInitHandle 5952 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6148 -initialChannelId {53304126-f61d-4e23-adc8-db6fe9a7ec3f} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:6900
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2772 -prefsLen 33367 -prefMapHandle 4740 -prefMapSize 270279 -jsInitHandle 4744 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5796 -initialChannelId {f0c0a0c1-8c15-4f7c-89ad-c495f6c38f7e} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3108
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6396 -prefsLen 40022 -prefMapHandle 6380 -prefMapSize 270279 -ipcHandle 6408 -initialChannelId {62f4677d-dd69-449a-ac7d-4df52a089905} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:4976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6068 -prefsLen 40022 -prefMapHandle 5700 -prefMapSize 270279 -ipcHandle 6372 -initialChannelId {dbd17b2c-d36e-4425-a41e-bc778dbff85b} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
    3⤵
    - Checks processor information in registry
    PID:2796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6192 -prefsLen 36885 -prefMapHandle 5848 -prefMapSize 270279 -jsInitHandle 6340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5840 -initialChannelId {813fee98-9c61-4014-b74e-6c83f30aa004} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:6208
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5464 -prefsLen 36885 -prefMapHandle 3164 -prefMapSize 270279 -jsInitHandle 2864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6576 -initialChannelId {15de6814-fb49-49d0-b644-fd2a32600dd0} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6336 -prefsLen 36885 -prefMapHandle 6604 -prefMapSize 270279 -jsInitHandle 6608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6580 -initialChannelId {deaf6156-f983-434c-87fb-34c4c46244d1} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:6856
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6760 -prefsLen 36885 -prefMapHandle 6780 -prefMapSize 270279 -jsInitHandle 6660 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6888 -initialChannelId {e69cd6ff-420b-4028-a242-5ed451538e7d} -parentPid 3568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:6764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\activity-stream.contile.json
Size 4KB
SHA256 f6153c1e41f728c15bed3e7bdf1826d02243d55eab10e333a6fff05bd8a0a1f3
MD5 9378b1ccd5e3aed8546ecb64dde0f678
SHA1 ae70bf3fc9c845a30cbfa32595bca34c111574e8
SHA512 eaacba4cfc0aa3373fe096f48288a83d3a41e0838affb568e2a03f0fc028846754507eec77cc7b33a210dad4034b1c2758fba1b9ccf04703ab0169ac9dbfa9cc
SSDEEP 48:YdbALreDZLhyuWMoidmpq6ioaQd2Omqp4J9reDZLHyuN1xQpGjy6T+jiR0Qd2PnT:TEIM1mhtmgHjxT+mRF8nhEaAbLGlz
TLSH
T166A1C95F895C44121734E6E06C0F2B8CF107B009C9F1CEEC6199BDF0959C7EAE0D5A96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 b044076412eb8d34353dbfe61b1448ba16d7f60f536359fcf3e52dbbcabb1c39
MD5 62e6a26a0d0a0180047745f901ef08c0
SHA1 a77a8c33a4232156c0b1a1a2492b3bffaf3a7db8
SHA512 ee0699364f9f9a6da3406ed7122c365b236850c5134f7113688203a48dea671681c58639add00ff39ccc8a152eb2af47f7a4ecd6b8601c907386e9ec865c2207
SSDEEP 768:MyvPePaPPDA8djDuPLdpbXPWmNsM13EsJOey1a1Zaon+8l1wtKklCCGm+ltEr+SK:XnKmPObXPWMsMGz136u+RltEiyL+lD60
TLSH
T19D73FBA3A6A9B1BB0B9537CB2C0F7A5B66D14159E74705CDECEDC61CC1C8750023AABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

184

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\doomed\184
Size 7KB
SHA256 1730c28abaa1f34c0f01bdea1e370fe46c92a2d833de828a327d01b8e81c639c
MD5 18a423f846fcede749a74814e833f271
SHA1 6930441e78ccba4b85fadb3aaca3b3eb45902f8e
SHA512 94e7bb75041494b138a32a760aa258b27d9098477cf497ff62963a6d4caa7d8ff96467b833ec15ec13af6898c831ee42d74a4a9ab41ddb52e681217d066a001f
SSDEEP 96:MH+6b04/Az/0lw/kYz6b04/Az/0lwZivjCfgp+fY3G+AuGLxMAuGLxDwemFAP:P4/A244/A/WXp+fY3tZOxMZOxDtj
TLSH
T1F1F129FB4E446A6C26E24AD1D41D764C3D30A357A9DEECFCE5442B5149C8B3122E94DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19841

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\doomed\19841
Size 259KB
SHA256 04f25fccfaa222337a8192e2c5ebc13cd4eaa407f28cf53453b1bd8cc32974f3
MD5 455b63a16f8a5904be81c63d90745538
SHA1 1bdd750011deeceffb200d7404c63b2260a08b35
SHA512 36d317e3c44151505e05053d4010bad897c447f5d914a305969c28d0bc978b4aa107a03c3f7d28731c5041c48b79a32c7cd9f79eb3578781d141eccd5f39dd87
SSDEEP 1536:zYCYPsRAN6vR5bMteR6SPr5TLvkcIDIr3uvtEWd3z0Rw+fMAOLcBFrVnK8Ct92Zo:4QMGJT4c1KvWNweMAOQBFe2Zj6n
TLSH
T1A54408F3D6AC70FB075187DC6C0E72CF62AF4279DB5208DAF8688148D3C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29601

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\doomed\29601
Size 52B
SHA256 fe536f1550416e33d9956c7efc9293271f3e4733a8a66b1423f08317fe9b34a7
MD5 0a0eda897c2f942d83255e649a4ffb32
SHA1 33812c55da53a0041af4cce1fa3781668084d4cf
SHA512 0b6e6d333a80a527ec9c8bd5ab1811747246a9fe06020ba92994a8bf00126490d0cd8418292bdbe9ef56b870e888a1fe941fa9dd3f9bc33a0a316fff87f8aba7
TLSH
T1F4900404C775C705F414C133CC10C4F504107F3044C4073334D74F5515110D30504150
MD5 SHA1 SHA512 TLSH

Submit Download

30545

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\doomed\30545
Size 144B
SHA256 0039efaa72a0e8f345b66096a8ddffd2fc91198c25c530684172522259e6662f
MD5 8af4fc1c77245da7da1a2ab54db96c71
SHA1 b683671aed42b8b9b3157a0ccae414b304104d6a
SHA512 7cb30a50e0046419b4fa3e886b6511e0db28efb71bb41a2a77787d0e35b9d133f22ce444fdf675d5412d7de133c6a89ac971b6522e505afd72ae635ba7fb98a5
TLSH
T144C02BD7FE22C81BF0125CB5C878F84C5C030725159441E3F884468D1078F5105343A2
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 64a56ab0e4a2c991974eeb301efeebe098e2b29ea39b3d43c5cf09b6854a8bcd
MD5 84b41a25d2367136776e8320efb93541
SHA1 2f93b267476abd14ac0107cc9c7fb0eea933627d
SHA512 19eeca17bec3522bcbada2552865f4123fb5b98f672b8b6769dd347c726b6556da5a33fd8e6668d1dc6fd1d4d06d78591bf815bde80935d44bc4776d10cb437e
SSDEEP 384:HXwIiO024YvWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAH5g:36ZYvWTToXJWTTogB7S/AmVAf+hRMk5g
TLSH
T124728E7D9F413CAC1767D0E8C8B983558D1CB2A7DFB5C02D159C3D09CA98A5670F984E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ED789FC1FC155EDFA5C5BFA3A4348A17809F771

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\entries\2ED789FC1FC155EDFA5C5BFA3A4348A17809F771
Size 54KB
SHA256 b96d032e7da3ab2703af6ba7e5f5014e13ee2b533441c8e0dd8b2629a237ec1f
MD5 de2dd8585324bac52970dcc33c337b71
SHA1 6d05e7de53ecb27ee7c94bec631b6cd5ec22e8b1
SHA512 994f1a08cf2854891f395b659d98a7c544a5ceb5a64129d227013e4f0b1ca812593f185d78e9236bbd14184a883a9c9de59be2de42489af7584090f221cab7e8
SSDEEP 768:1rKgXPlUh/7dwRvROXlEOdC21rvzZmE3fLPP5BbdhZ1QDBFzbVJmH0toqUg3d:1NP0TdovROWOdCcrUOh8jbVBiW
TLSH
T11B43F2306634C61F5A062D4752A6435F9EFABAA34D92E5ED314818603F71CEBF2F900E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DF9C2F64DE858672749721C1F688EB8DC4D3B4F6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\cache2\entries\DF9C2F64DE858672749721C1F688EB8DC4D3B4F6
Size 354KB
SHA256 3bf9978238cdae6f34e9125b21f3849891e13def0d38b3fb6792c0f31d9f7960
MD5 619a8a0c9a8a95fe1dc193299cee6888
SHA1 295318b91f95f7bdb3133cab5eef953bb21dff88
SHA512 617d7a2c49b7aecaf643934035848689dd26af79929bf7063300443850b994e3f7081310e4c2d5bdbfd37fd6d373952a5d085bebfccc005d71b84e8323b14aff
SSDEEP 6144:lydQII9pOs9yUxtm8wdzKNt6tpTqH9qQSemZEQySrLOgSaKOywu8V:cI92Uxad+XHlSemwOOg3u8V
TLSH
T1AD7423B4793A842280F8D4D72E3A37933450622678FBCAA555D8230ED2ED34C5756F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 4496da6007b8a954c04d978aa1871fdb0a840d15674ee9b01fd73c48cf2dfe56
MD5 f611d58ae477c36c395c994467c76884
SHA1 c7cef0ff4ca04536b85616dc35f1dbf7bf496cf5
SHA512 1e9fc11e184d1429d50786b671f42092d9d7012b98ccaf0953af44993be9584a3c2b2d1655c7757db622e9df07c7ea9d7dff9d4a641b5abea1a5e1f428ee3b4b
SSDEEP 1536:XTrliJj/UDIitygl9pevYAvkt6p0nhL0uqU82WDFEOrTPc0L+HQMYO/YOBDxiH5I:X3lFtygl95tQ7AgSQMLLY91Shg4
TLSH
T16AB3A0F7CFB1C92D69FFD4196A82483EF9273404B3973009D823665462C6FB876B9648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 53478d4ff28a33eff746d89837e1df1e054689c87f98b6ddc0efb73bf4e0cb8c
MD5 5e1e05f6a5c33d9e02d314b50d59d74b
SHA1 99389b358c661eeef213f9b4b0cb74851713b18d
SHA512 8d5dc76423783c0ac20c10cec35b1c9e449c1e144c6af407db890dc2a00fc9656772e1c89954d977e080ea3d188456d011ca110830eeb5a2116e69b9f74becbd
SSDEEP 1536:jTrliJj/UDIitygl9+LVs9bk7sWtU839DFfOrTPc0L+HQMYO/YOBDxiH5V9TwyUR:j3lFtygl9S9uSQMLLY91Shg8
TLSH
T1B6B3A0F6DFB2C92D64FFD4196A82483EFD273444B3973009C923661462C6FB876B9648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\AlternateServices.bin
Size 7KB
SHA256 a13398aca9c9c91223e63435b6b9b122c89e28470321c76e451bc997e568ae68
MD5 589c37f3e52f72019fe77ec4f3556f91
SHA1 2309f6bc06b02e386460469ca2c167cf80323a1a
SHA512 da124153293ce5ad99befc4ac4d7b34a7c5a4dd3c83a4e5cb3a8dd8d7802925831e525d8b872f8f215ecf14aee24ce4bbcd69969961ec5ccce79e1bcea2b0e0a
SSDEEP 12:3BQphMQSQdiDc4qnc3Xw1b4pG4vyc3Xwxi/nZujnc3XwBf6IfFc3Xwxi/vZ2Apjp:RuhMZs91WIS09Bja9xmv/9VvLL9lT
TLSH
T181F171F72B76A073F0A28FF4815A718C9C330329192C9194C644A0F706D5BE9917EBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\AlternateServices.bin
Size 7KB
SHA256 84f41f8a33625244dc0a4b31a0d4a2719bc6d88a4e9b60e772750f05e9414e31
MD5 860d08bd3d70d19c9fd85980198d3941
SHA1 c9ca2a2d237c5fdff42ea92a73216d244e18bd44
SHA512 938ffb847877bbfecd99aef45b07c202602b55516d77c097f606da5c065ff9df24ab085641ab62e2ecbc82a6af18622ec68af32037ea1c3daa5c17343db2b33c
SSDEEP 12:3BQphMQSQdifZujnc3XwBf6IfFc3Xwxi/vZ2Apjnc3XwxfApfApfsc3Xwxi/i3KF:RuhMZ709Bja9xmv/9VvLL9lT
TLSH
T1E7F184F72B76A072F0A28FF4915A705CDC330325182C9195C744A4F71AD5BA9917EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\AlternateServices.bin
Size 10KB
SHA256 dc51f3f428e39184050e6670627b104d8fb6dfac60edf35aa859ab04e22b7dae
MD5 6b055e63816dc1c1e494c789eae0b541
SHA1 19cbe90345ddaa00c8cf91a43f0579da1c7d87bc
SHA512 6a5b4e022f0466768ba3d26ac80dbf3299e1e8681d4c94d10bd43caa690c337fbbb1b9470d7d54a7348403b347b8ee87b9984cfe7e55d9ee0f59549802e68462
SSDEEP 24:RuhMZ291LS09Bja9xmv/9VvLL9lTu9BbeUWN9VxWAn9:YZSWt4U9BLp109eUM/pn9
TLSH
T12B2230F76FB5A073F0A28FF48169708C9C330325186C9294C645A0F706D5BA9917EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\AlternateServices.bin
Size 13KB
SHA256 821693ac90961babf877d558c0755bfca2c995b4ad29f52cd89716e4e920b975
MD5 f5b081c30ff99a1431ee7a02da90316e
SHA1 8a78c8d4451579e19491cd1324127aac68ac765d
SHA512 361ea167912bccd4b6b3b9e181d0173f4a70aefeccdaf27e2295d3e8d8a3e39bf9a38ae50453b7d6d1ec82c81b3477e39f0246185e21e49e858ea56fae1054d0
SSDEEP 48:8NSWt4U9BLp109eUM/pn9x1HSD1HWHzzA7:8NNt4U9BLp10QUM/pn9zyx2TzA7
TLSH
T1995262F76BB56073F0B28FF49159748C9C330315586C9298CA55A0E706D1BE9907EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\AlternateServices.bin
Size 16KB
SHA256 5078e11d94577a0c75e233ff4665851828124750f29406890bc18ca1c2583081
MD5 3010e62f19406cd95f9e0b37428d685c
SHA1 57a23286df3f154c2ed3d45dd40afbd0fcd35c94
SHA512 b7fc7f2273378b8f36227f16fc99e8e6b1c8f06025f296f28424a78bdcff58497f7de8810ef2308f6c5833f13e6da32476c82632ca2acbdb2740235d1028692b
SSDEEP 96:wNgcRBvBF7z1BYM/pF+yx2g4A7pGuGbGY4:JQi22
TLSH
T1927290F73B796073F0B28FF48558704C9C330315586C92E88A55A0E206D5BE9A0BFBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\addonStartup.json.lz4
Size 4KB
SHA256 40980ccae4549722e918d20fd8acdae63809a89e08db61e6441ac47b7063280d
MD5 3be290fa2f23b72a8b583a25b99cb230
SHA1 d40b68484fb2115b52e7baf8f8429e98d4a5ceff
SHA512 766bfd74381e2368269b5dab17ba8b519e036cbe1940969f8cc8dc613047678d060f4cd5f6df8ae783a3d59bed8ac4e50fb569477859700f5d40810c982021f0
SSDEEP 96:NK6ot4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NSc52xxhD8rGvm6ApwnHUuhN
TLSH
T1B8A18DBAD141EF61FE32D04348D57FB2E6A69B3414A9C4D4F1AAB1250C24A735305340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 73ad3325a147b8b71fc3fddf8933fa493afa3db75fac1fcc6c74ee988885bc00
MD5 8f0925956e0488998070282819d38203
SHA1 a60e29605cb6f3aed9f99af3e46efe1a37960a9e
SHA512 1af4bd537bc6fd460e37dcab9447af2012e2eb770bb032f8099b0e6bc762c461170bc58c36cd033354d37d0211a8de40bf8f43d2095aea93da845d9d8dda4bc4
SSDEEP 192:u1d66JoztdzgCl6mc0dBOv5zbo8MBjyj7uZ:Id66Joz/zgC1jEbo8MBjyjA
TLSH
T173D11F68FA28463FC408427BCCB51F410F39399A984E7F69319DA0082C576DE779D17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 5cf673f2e5b098628bfb72e25b9b7637b8475bbbbb6183d2a8410fe74adf3007
MD5 3ef62f55e62ca41d4daa9233137fa930
SHA1 8d62bdf6b1bbf0a30084a861ac768133a9c6a157
SHA512 56734935ffb65baaa50d98b660cda7d4f1a05ecb646cbb4811892c5974d12f87a8b1bd5fecd3918266f85e328689a637ffe14a11b3f808950bfe154579725afe
SSDEEP 192:u1d66JoztdzgCl6mc0d/Ov5zbo7pZBjyj7uZ:Id66Joz/zgC1jKbodZBjyjA
TLSH
T16CE12068EA28863FC418027BCCB21F410F39399A984E7F69759CA00C2C576DE379D07E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 230a16697d477507c91a340ab85d2d2a95f283c036b37bba2e2b8812fd07597c
MD5 00c7ac8a6de5da6bb3a54f625076106b
SHA1 a76757adeed9a7ed5d100d5d311baf3472aa5f4f
SHA512 14ac36fe14e0b50495faed3a6080da5608921eb24175dba9caa68ea4fa6f7d050019e8154aa1965e9f28e94af73ad015bf4997219d86a12477ec603a6675c229
SSDEEP 192:7Ov5zbo7FBjyj7up1d66JoztdzgCl6mc0dz:kbopBjyjid66Joz/zgC1jd
TLSH
T1FCF11068E628463FC418027BCCA21F410F39399A988E7F69719CA00C2C976DE779D07E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 6910d2a638296b2ea6f094402a8bd0227a5e09cbb3c648d3006f6168b3faf299
MD5 686ac72482531f18aedd97974a4f4ee1
SHA1 00f5acbdb98134f3b915691a1d6076138d85aac2
SHA512 92e36cd72dd292aa6812587f71e9489e3941b82ea2e7610ee7d364f60138f8e0c99a128908bba8ce8b94c6d023c05581e57b96c416abe471dc8823bdc47e6074
SSDEEP 192:X1d66JoztdzgCl6mc0dgOv5zbo7FBjyj7uZ:ld66Joz/zgC1jVbopBjyjA
TLSH
T16EF11168E628463FC418027BCCA51F410F39399A988E7F69719CA00C2C576DE779D07E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d93c3e203e28afe80632548c09ac0369221c196ef4e8f7c930a602c6d541c561
MD5 2d7f6bd483707cc305b9d44c865759b1
SHA1 43c3112b440b60a090e888da0cd64e3af10201e7
SHA512 65a0b140e632badb73945857a55fb25f0ff4bc6a9bccdb63a47ef0fb1cfcdbc14dd15f71f2429c92b63b8d7e5c687db072894e729a3c08dadc679428d4c8b7af
TLSH
T1E421786C3AFD4D3E5CD6F69CB992028E53454A0A08831D570DA2FF8DCD81ADD31AA43C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\events\events
Size 4KB
SHA256 51098871d7717313ca8276d82f8687659255259c4d93057586d24225e00ae546
MD5 cf8035bbc33e73f600cae28929bd3d3d
SHA1 fe4cb3e956b528dabd65eff9d50416d6b9fe1cc3
SHA512 3bd4f941d86e964619e18f941413338f17bd534129b77bfb633ba0853950cf6b7143677248b2fb8a2f6c0be6677b4ca84ea526ff74be63b769d5ba38e2496632
SSDEEP 48:YpU0HUpYAuG8VihK/zHK3i/9OKxvlFpmoUcvJR53tfF4RUU2upX4pExYws6S+4Jm:us5smo5pt94YMrYM94fdDdVBm8B6
TLSH
T103A1EE2C35BD0C7E59ABE79DB481068E87AD4A0284871D9B4CEBFF49CC85A59325E42C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

017870a4-046e-4573-8246-103460048920

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\017870a4-046e-4573-8246-103460048920
Size 886B
SHA256 81e77acb8246d1a8c944cdfa3b2f4c5c62ae836db450affaf5ed72316582bc46
MD5 7f5b548639558370bb4d7fad4b5d1f19
SHA1 2b50c46942436ec40953931c79584f39efe3d4ba
SHA512 c52139bd87e0fc718a1e342c512960137fd759021b1ce33ac2bb1e1ba7d615d95ac3169fbfc3a5ff0d1b192d95869c5145d6387f117732bb540e3800ea5303d2
TLSH
T157112344DA68B5B2DC78D18B45E13F8347A8347380C545583ED48F180CFBA1EB376207
MD5 SHA1 SHA512 TLSH

Submit Download

1b5708b9-08f3-4e0b-a34c-cb1dcdaecb50

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\1b5708b9-08f3-4e0b-a34c-cb1dcdaecb50
Size 883B
SHA256 07b339a49df70f83d5388fc90c545e80dd8c3ea3b7813e841b16b042a38e9944
MD5 7f67261ad7bf3d6c12d041bddc238038
SHA1 5eb247ed88452e655984dd0e4e6c6d0c2e2f7442
SHA512 472499f8f53ae54928473584c037a355047a82f1eec591e9b28aeb5daa1fc5d1cac92a6d43ec5c864fbe780e462cc1a28a9a7bd65d1b4391ea1adddfc2413a76
TLSH
T138110444E6717676CC28D14F86913F4747EC353380C985187DE48A040C6AE1EA366207
MD5 SHA1 SHA512 TLSH

Submit Download

41c89513-15f8-4182-9a65-2d48695be2c0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\41c89513-15f8-4182-9a65-2d48695be2c0
Size 235B
SHA256 7949ecea942641831afdd9502097e30a7e8e9cabfcfd7a9429afbd2ea0899dd9
MD5 9b05c177e559905089fb6180c5b85506
SHA1 30e123a1b1d3c723b94a25fd63123791ee7c85c1
SHA512 cd5262a1572fa947005b6fe58ca438e3c4480b8479b88913edee92d1e567d04d4626dc8e2b8fdd446cf56bcc8675289860ceb4f9009fef448220532276c58494
TLSH
T1D1D0978024A8235D08204F03F0E468C770E48C3310B0981095B00038D9FDEC80211C2B
MD5 SHA1 SHA512 TLSH

Submit Download

6d02095a-58e7-43ec-a288-9df2efe60833

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\6d02095a-58e7-43ec-a288-9df2efe60833
Size 17KB
SHA256 893ae2a03bb91d8c419d882a691a40f2fd51b8fb29da4c4c36002fe911c7b9ad
MD5 cc4955307bae62aa14ec2f934032c576
SHA1 bc426adafb8cd7c1f18a1c074dd760e636848101
SHA512 8db5a32a50ada53d28b998eaad6e93e8005b84df97264ec7a3bacf89530c7a7e0a0889665297eb847f4016c66d2021077000f995688cabd099540ec2f3fb7595
SSDEEP 384:QvqUgendPPckFE6ih8Ak/lfZWMclSAo41RV:QvqUgendPPckFE6ih8AkdfZWMclSAo4N
TLSH
T1A282ECFDDE1200473E25E51AF2E9A96B2057193149CDC7DE2AED083A2BC697B1527328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9be92a94-5b88-46e7-af0c-8773a1a6b991

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\9be92a94-5b88-46e7-af0c-8773a1a6b991
Size 2KB
SHA256 f0a7c7d955b1bb809d786caab879c10f85704e282eaccf3cc1107752013b16f1
MD5 ae2e992e945985a147cedb7cdb11a04c
SHA1 1a0d57c067f54faa903883f2e0692dff1ebe7b93
SHA512 61c78886609e795ef88b974fb5a907462fa58dc2ba92d38bf135ac1fcbdba5e7d8561b49db0278809f4d2a7a9c411e4758c3b4e51c093d9b1d9e4bd7fa227584
TLSH
T1C441435C35788D7A9CCBE15C9593278E43A44D2210C72C832D41DF4CCE8269A73AA53B
MD5 SHA1 SHA512 TLSH

Submit Download

a374a704-60e8-4d43-8d7e-7295121812f1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\a374a704-60e8-4d43-8d7e-7295121812f1
Size 235B
SHA256 9e48a2ce72813473eceb8b31d8357c16b78466212ac723d0a645be054351f6de
MD5 0a20be32d55f09ce5d77987538304c10
SHA1 8f46d43c547871904eee49c376c25bddd934491b
SHA512 318c0d9af6750f9b75702498f753cbb05d6f10407ef4cc586a7bd32a751e31c2b57793b47016584e4e374eb98c21e9133e804f12425e5fad96b3710293709af0
TLSH
T11ED097C0BCE8B3AC48088F03F0E038C230988C3320B8A820C55084388ABDDC84211C1B
MD5 SHA1 SHA512 TLSH

Submit Download

bc693ea7-694f-4167-a183-a811021038e0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\datareporting\glean\pending_pings\bc693ea7-694f-4167-a183-a811021038e0
Size 2KB
SHA256 2cbb9ef59a596200a7ca04478e749233a4ab237a81bab9c9adfc0d89c4f41159
MD5 ff9bedac7dd0fc50f41274c20f9481b8
SHA1 8bd2f313068e5d9fa09880f15067d9807e00a07a
SHA512 f15a6869c43e5d89ed1a5a228d57ca20bd93469db2cd0944b5d4c33f24c59b987923c2e69f2b8d0045dafe0abe4b1e65b1d34c8c99dabeb21f9a34aba464a8b5
TLSH
T11C51A5299160C87DC879E31ADD213B838BF6180B408B194EAEEC9F0A14BFD4E9369245
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\extension-preferences.json
Size 942B
SHA256 4c5205b8a6ededa40bb0a92f8d937b29124e7a0d4d05a58da84e689b48bd4c36
MD5 f401f4a45dbfec4fe024a9302620283a
SHA1 90053e73f968c4ad10208178c4fdb569a59ce985
SHA512 c9dc0b5be5c890e6beb62a1154b22dbd0de8464242d203b100367ebb5d173b92eabe21907c1a1cf50b7ed7fec01c15565777584943ab9a4124357edd7492fe7d
TLSH
T16C11F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\extensions.json
Size 14KB
SHA256 b148eb2ed6584f2e68c37891337dbddf90bc5b90ad1239084a035de2d547af1b
MD5 7278d2b8b435de4badc2e3ffe942c32b
SHA1 b1b8581820b0250db2c2871bad2a44a8434d3b77
SHA512 605307b5dd54ecf4e2925bb7820c7862a21e7914ffc2304ed3ddda3f523bd980161403826da987f1b0dfb47a68b4510067ddc8257097d4bdf19e02646f518ff8
SSDEEP 384:DnkI4v7Umldvt8dhW294ze96omL4HeAL4PoL4HOL4HrL4HC:DkI4zRfeXn4m6L4+i4C4U4X4i
TLSH
T13662431545049EB8298FA78BAA367D02C37D473B60445C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\places.sqlite
Size 5.0MB
SHA256 0421b56b11d432604d94378fb8ed286c55e989cdec3ad091b9fa88952ee39134
MD5 a7ed4c3515fc7cd61c489643f0f795cd
SHA1 d240877aefb4910cf440cf1fc4c2ad7bd0409ae4
SHA512 4366b162489ea3524a1f718f8a332a91c97d27029443d90c2f25e1a76795337b6cbf16b9677b1142512ba30847fc2e49ed975e1a836f24b6efd7c3e9a5a80a03
SSDEEP 384:M8r54w0VW3xWRBUySD8nyds4m7ZITTPRbOy+bQucs3/qWr5:rqVW3oRBUyAYZITTPRbOy+bQucs3/qQ
TLSH
T11936945BBA205151C8EA9232EDE32F19183F7116C53776823D94166D0EE0B63B92DCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\prefs-1.js
Size 8KB
SHA256 7a72bf51ba76f0724e686bd05dadf7d1e4d76f96aedee13c75f8483ed7e0363b
MD5 6daa58b3b2e95a3d77ddd62f1d129fce
SHA1 d5a9df0bdcd00fdccf1a4f3f2ecf0f6697c5c170
SHA512 2d7ccc3befc64b990067e2e56b87d3bde29782dc0fdea1a1231940dc3b1c724cf17eddb2eb3c683d7a60034f23972cfd9cde6388d485c0c5606d6fd55e4fe1e3
SSDEEP 96:xHcFTUcoqGqmJffB+blNbzS7HdSSledv9jRnkWRJc4d1Bw88qwY8L4cn9tgaGS:2vRmNfB+blsSSeRJfd1Bw88pdv
TLSH
T12C0200786408CF7F64B6766CAC2449715A72013BBBBF68D750B9A4C5060CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\prefs.js
Size 6KB
SHA256 6e8a45428e36c4b70bd3ffcd4e23797e82b3946e9b73f55266f11b31e18e8e27
MD5 37eecdc2e3038148cf8adcddd193fc14
SHA1 57e87a006967df41ecc4c8506f3d6529ae3f6ac4
SHA512 6d1c5b6fdeb6dc0503a9dc47cf9a4094a87ee5283348fc8cb4416c81f0d905e36df10c515e9f0c68d6da488c7a2f00d5f2043afe5ce71cbeb5aeaecc99a445bf
SSDEEP 96:xHcUTUcoqGqmJff5MMr1zSaSSSledv9jc2nkHUdEBw88u8L4cn9tgT:2iRmNf5MMrPSSSDTUdEBw88/Y
TLSH
T19DE12E7894088F7F74B676ACAC648C715AB2013BBBBF68D750B65484050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\prefs.js
Size 7KB
SHA256 9495d77e1b520939d08f609ccd2b1e4626bdbf88feb6832148dc2508bb0c45d9
MD5 51c9344ffa329ad4f5c870b7015dd199
SHA1 dd2fa1aa002b9f974b3d05a9251c40a3b46f6a2f
SHA512 0195ac5d728e6ebae05eb4a41641da97a9ec2d1cf0409aad739a4c05caf5695ef939a9499e424b145c2e55832debc64bf0b0c5b0b471a0599ab9f7d22bf29e25
SSDEEP 96:xHcUTUcoqGqmJff5+blNbzS7HdSSledv9jRnkHUdEBw88u8L4cn9tgaGS:2iRmNf5+blsSS/UdEBw88/v
TLSH
T172E1207894088F7F64B677AC6C6848715AB2013B7BBF68D750B554C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\prefs.js
Size 6KB
SHA256 4bcf9be8d3575a05d8d84cfca1b2da566c14dd7aedf9485f69269cb0faae4a4d
MD5 d330edb33a74f071abeee28c14f23a27
SHA1 ca253c1f2f42964febe224230918ade1f18d13aa
SHA512 1c2ef9ca7ff66521039e397296d93d842d6ab1ee527752855661fa6abceb1a2ea0c5ee0a91995c6e5836927ae48d3534d101a1d8f26acc1cf8d1a6deb6989a63
SSDEEP 96:xHcUTUcoqGqmJff5+blkzS7HdSSledv9jRnkHUdEBw88u8L4cn9tgaGS:2iRmNf5+blnSS/UdEBw88/v
TLSH
T1CFE12F7854088F7F64B677AC6C6888715AB2013BBBBF68D750B654C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\prefs.js
Size 6KB
SHA256 4f7d26c1d9c197449c2f97a21e6d73dd63d92a7f967d4cf06cb51c89fa3935cd
MD5 e0044f87aaa1d19dba5ba85fe75cc3ec
SHA1 d873339fffe3a24eb85ef0ba6ac2915fa041b9c0
SHA512 5b9c75165ab5168e84c30d8637c23d5274697aeb61564fe7cd3d00d8ba9b2dd30cb7babf9e9955cfbbddc50cfa17d92b58222cabd7e99c3e27228b16a1f58d8a
SSDEEP 96:xHcUTUcoqGqmJff5+bl1zS7HdSSledv9jRnkHUdEBw88u8L4cn9tgaGS:2iRmNf5+blgSS/UdEBw88/v
TLSH
T1FEE13F7854088F7F64B677ACAC6888715AB2013BBBBF68D750B65484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 193B
SHA256 ecb4133a183cb6c533a1c4ded26b663e2232af77db1a379f9bd68840127c7933
MD5 2ad4fe43dc84c6adbdfd90aaba12703f
SHA1 28a6c7eff625a2da72b932aa00a63c31234f0e7f
SHA512 2ee947dcf3eb05258c7a8c45cb60082a697dbe6d683152fe7117d20f7d3eb2beaaf5656154b379193cdc763d7f2f3b114cf61b4dd0f8a65326e662165ccf89cc
TLSH
T165C012C2C6565071CF8365ADB26C7B659E3E04F67665064470ACD54C147B027421B443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionCheckpoints.json
Size 228B
SHA256 db037b650f36ff45da5df59bc07b0c5948f9e9b7b148ead4454ab84cb04fd0e2
MD5 a0821bc1a142e3b5bca852e1090c9f2c
SHA1 e51beb8731e990129d965ddb60530d198c73825f
SHA512 997528e2ecd24a7e697d95cd1a2a7de46a3d80b37fd67fac4fb0da0db756b60a24648b7074255dc38f7651302f70894a53c3d789f3d7cd9f80fb91bd0cade4be
TLSH
T14ED0A783C6055075CE83696CB39C7B519E3E04F672640245B1AC954C187F027414B843
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 6bd5199577f91ab513314b608e1d8f1926c5b22083173179160fab74193f2167
MD5 1d8757d97e6a1b2f7682a19b6c60d25e
SHA1 431f4b4dbe3c49959abebbe99d3385dcd9cf660f
SHA512 90ef194e964fe99e897bc942fe58dbebc5b1f6eac9b20e235408d59177113e2b92d6c25ffc168ce4498957967cf890e250a07f6fa0a8f906092755a295869ad4
TLSH
T137717ED7C405ED670A68BB98C4CE3D9D45AC2040D5F82AEC4A1C1D25429CF0D79917AC
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 2855fe1f4dd79bc8552b5d5f0430dafdf0547ea5a1778df898c6243e3c49bd9f
MD5 cd755622b9fa2323cb739d2d8bd363ee
SHA1 99b25a777187dc1667038138077989a022d26c2d
SHA512 d11fb9548c52da5eda34cd029e1d3884dd7a1e71f9067d2bc697fe987b73f39a40bba5a1d56a3169fa25776a9724d26cd3df41c5b6dbe0f11c69dd81b19ebaf7
TLSH
T195815A72CD9D6C81ECF8B3BB10D14AE3DB3B100142E6E898E915102AC49BA8537E4A79
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\sessionstore.jsonlz4
Size 5KB
SHA256 6d185539f4dd83ee0af8cd297f10fdf862328aa4933c3fcb4bb070046caa8719
MD5 2b63fbcf698aaf9483b9194dade22ce6
SHA1 8ae1870bb16d1c2d604c9a8b85df442ce78de886
SHA512 d48818218be4469229a7816851d77e3188d52a7844aaa5c21be634a58d1ed6ec01464eba34405555979b3cb601dd34c72983e2b7be1c41f999dd352dc4de28f3
SSDEEP 96:R2Y8AERjpmT9omH5kGjIEa1iYuA6oDSS0UNM8CywH1LXBUBr9z9uODCsGoHmHd/D:Rb8LRo9DjIB1iA5wHhuxB1DCOiU70X
TLSH
T100C18E67E755DDEA0E28EB4CCCCEAE5C899C308098F471AC5C2D5B0592A8A0D773577C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2135660075ientParvi.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4ybnhgq9.default-release\storage\default\https+++rule34.us\idb\2135660075ientParvi.sqlite
Size 48KB
SHA256 c0fd936715be3754370955cc0dfdc29811266ec294aa650f345507ac0fd4dd54
MD5 4d3ab09203ab57cc847455c718d5389d
SHA1 47cd4a172dc6d452f15d6d214112eb2b38006f6e
SHA512 23540044485d954bd2a6010aa233f62605b2dd432c59ebdb0554f417fe88028dfc136ff3eef351604a235336a4c14879fb2290f5dedb5d71b6e582bf82f7f97e
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyES6:Oa16S6CKnqlizbxV+2xVeU7X2B0x
TLSH
T16D23608E3F07B511C53AF0B178A08D51BC5E321D07222AD579D0DAE4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download