hxxps://qasar-dsrtjvns[.]manus[.]space/BSrwhx9

Analysis

user interaction
yes
max time kernel
84s
max time network
111s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/11/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://qasar-dsrtjvns.manus.space/BSrwhx9
Sample261110-e2p72ayzaw

Score

3^/10

discovery persistence

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2368	chrome.exe

Checks processor information in registry 2 TTPs 20 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
568	firefox.exe
568	firefox.exe
568	firefox.exe
568	firefox.exe
568	firefox.exe
568	firefox.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
568	firefox.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 3904 wrote to memory of 1672	3904	chrome.exe	80
PID 3904 wrote to memory of 2340	3904	chrome.exe	81
PID 3904 wrote to memory of 2340	3904	chrome.exe	81
PID 3904 wrote to memory of 2368	3904	chrome.exe	83
PID 3904 wrote to memory of 1988	3904	chrome.exe	84
PID 3904 wrote to memory of 1988	3904	chrome.exe	84
PID 3904 wrote to memory of 5036	3904	chrome.exe	86
PID 3904 wrote to memory of 5036	3904	chrome.exe	86
PID 3904 wrote to memory of 3232	3904	chrome.exe	85
PID 3904 wrote to memory of 3232	3904	chrome.exe	85
PID 3904 wrote to memory of 820	3904	chrome.exe	88
PID 3904 wrote to memory of 820	3904	chrome.exe	88
PID 3904 wrote to memory of 4084	3904	chrome.exe	89
PID 3904 wrote to memory of 5512	3904	chrome.exe	91
PID 3904 wrote to memory of 5540	3904	chrome.exe	92
PID 3904 wrote to memory of 5532	3904	chrome.exe	93
PID 3904 wrote to memory of 5816	3904	chrome.exe	94
PID 3904 wrote to memory of 5816	3904	chrome.exe	94
PID 4980 wrote to memory of 568	4980	firefox.exe	96
PID 4980 wrote to memory of 568	4980	firefox.exe	96
PID 568 wrote to memory of 4624	568	firefox.exe	97
PID 568 wrote to memory of 4624	568	firefox.exe	97
PID 568 wrote to memory of 4624	568	firefox.exe	97
PID 568 wrote to memory of 4476	568	firefox.exe	98
PID 568 wrote to memory of 4476	568	firefox.exe	98
PID 568 wrote to memory of 4476	568	firefox.exe	98
PID 568 wrote to memory of 4476	568	firefox.exe	98
PID 568 wrote to memory of 5948	568	firefox.exe	99
PID 568 wrote to memory of 5948	568	firefox.exe	99
PID 568 wrote to memory of 5948	568	firefox.exe	99
PID 568 wrote to memory of 5948	568	firefox.exe	99
PID 568 wrote to memory of 4676	568	firefox.exe	100
PID 568 wrote to memory of 4676	568	firefox.exe	100
PID 568 wrote to memory of 4676	568	firefox.exe	100
PID 568 wrote to memory of 2872	568	firefox.exe	101
PID 568 wrote to memory of 2872	568	firefox.exe	101
PID 568 wrote to memory of 2872	568	firefox.exe	101
PID 568 wrote to memory of 2872	568	firefox.exe	101
PID 568 wrote to memory of 5596	568	firefox.exe	102
PID 568 wrote to memory of 5596	568	firefox.exe	102
PID 568 wrote to memory of 5596	568	firefox.exe	102
PID 568 wrote to memory of 5596	568	firefox.exe	102
PID 568 wrote to memory of 940	568	firefox.exe	103
PID 568 wrote to memory of 940	568	firefox.exe	103
PID 568 wrote to memory of 940	568	firefox.exe	103
PID 568 wrote to memory of 940	568	firefox.exe	103
PID 568 wrote to memory of 4716	568	firefox.exe	104
PID 568 wrote to memory of 4716	568	firefox.exe	104
PID 568 wrote to memory of 4716	568	firefox.exe	104
PID 568 wrote to memory of 4716	568	firefox.exe	104
PID 568 wrote to memory of 2552	568	firefox.exe	105
PID 568 wrote to memory of 2552	568	firefox.exe	105
PID 568 wrote to memory of 2552	568	firefox.exe	105
PID 568 wrote to memory of 2552	568	firefox.exe	105
PID 568 wrote to memory of 5048	568	firefox.exe	106
PID 568 wrote to memory of 5048	568	firefox.exe	106
PID 568 wrote to memory of 5048	568	firefox.exe	106
PID 568 wrote to memory of 5048	568	firefox.exe	106

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://qasar-dsrtjvns.manus.space/BSrwhx9
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff2017c728,0x7fff2017c734,0x7fff2017c740
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,8246500116557061281,1061196450989187535,262144 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1892 /prefetch:2
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,16078854029418947962,14585606757742509423,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,18279491446388305370,15217323590572830363,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2736 /prefetch:13
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,17705543955959598608,11934795173086236137,2097152 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,3858508757891069189,7280940821215501146,2097152 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4548,i,5449043577700430089,5798772037726250171,2097152 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5208,i,12952910767241542468,8678110203674607941,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,1624432567442115160,6276384407116916955,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:5512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5060,i,8750084291588118064,15431592654233888877,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,12701120557139012436,12367769761270631821,524288 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5476,i,3279242884753527054,15502932120376406408,2097152 --field-trial-handle=1896,i,14912974180435567226,15590878578088958387,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:5816

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4984

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4980
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:568
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1972 -prefsLen 27097 -prefMapHandle 1976 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {e594d153-dc8f-4cc7-8cb2-10e934025e7b} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2436 -prefsLen 27133 -prefMapHandle 2440 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {abe36d94-5005-4f3d-b3e5-8d6c80e1c6dc} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3872 -prefsLen 27274 -prefMapHandle 3876 -prefMapSize 270279 -jsInitHandle 3880 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3888 -initialChannelId {f4fb8ff9-25cf-4ff8-b9b1-bc404198a01c} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4040 -prefsLen 27274 -prefMapHandle 4044 -prefMapSize 270279 -ipcHandle 4124 -initialChannelId {3775c5bb-b1a2-434e-a51f-68d88f066fe8} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2960 -prefsLen 34773 -prefMapHandle 2728 -prefMapSize 270279 -jsInitHandle 1540 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3040 -initialChannelId {c4bce349-21c4-4668-b364-4bd09656e76c} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4796 -prefsLen 34822 -prefMapHandle 4800 -prefMapSize 270279 -ipcHandle 4812 -initialChannelId {03850089-f0df-483a-adda-8b46e3808bab} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4632 -prefsLen 32900 -prefMapHandle 5084 -prefMapSize 270279 -jsInitHandle 5088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5096 -initialChannelId {1f35d876-4778-440d-9f7b-76ae8345ed7b} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:940
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4632 -prefsLen 32952 -prefMapHandle 5140 -prefMapSize 270279 -jsInitHandle 5304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5312 -initialChannelId {d1adf5cb-97df-4d71-8a36-bffe2cae4021} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5620 -prefsLen 32952 -prefMapHandle 5624 -prefMapSize 270279 -jsInitHandle 5628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5636 -initialChannelId {28fedc31-9b9a-4efe-ac8a-d160f3a2ff52} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6200 -prefsLen 33031 -prefMapHandle 6204 -prefMapSize 270279 -jsInitHandle 6208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6164 -initialChannelId {7d35d374-14c9-450c-b9c3-6aefc58b71f7} -parentPid 568 -crashReporter "\\.\pipe\gecko-crash-server-pipe.568" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3fb309aa-57e1-42fc-8fe8-a96ca76849a6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\3fb309aa-57e1-42fc-8fe8-a96ca76849a6.tmp
Size 131KB
SHA256 dfea9f29cdb44cc9356903d47390ec5ded5690bb92512edb5b50b90b70a45bf2
MD5 fae6b64d9c58397d9acf00c7913b6a5e
SHA1 21b87aebfc50fe7308850bf3c714956cb22e14a6
SHA512 050f138f3874bc40c37b81f0efa5851df04634b473a55e045b41c532f5aa79cdf7c9d5df22971d2f982342e6f122fc3c3854c3d1cbbaa5e95c3a35d97ec95451
SSDEEP 3072:3MhgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:3MxmX/B5UgKf2ne1utL1
TLSH
T1A9D302BEDCDDEF9363A1B025A9991A5BC9F67FC96160EE4090F41085009B1FD83D5A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a80f6e0-97a8-439a-be14-ff9773488858.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6a80f6e0-97a8-439a-be14-ff9773488858.tmp
Size 130KB
SHA256 25d417cc6fd4d698bb5a9a7c0fcdfe27f00019cc24bdad2aa0f0ee001ca74cc3
MD5 3088a184279b9cb43ce36dac3e2a43cf
SHA1 3529bb623842e68f45388ddfe033b6709b56724c
SHA512 99d1b91cf4549b234c8249c6f4190f38e7c96eff5e1f17203b79b8627b1cac5787833d43fdfbddb001b1146dd4f53e78102ac0200f9ee597c68c303c099e55a1
SSDEEP 3072:VhgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:VxmX/B5UgKf2ne1utL1
TLSH
T1F1D302BE9DDDDFE36361B026B9A95B6EC9F67FC4A160EA4080F41085009F1FD4399A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16215686-dd25-4809-b216-1a534a13520f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\16215686-dd25-4809-b216-1a534a13520f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

27b36f3f-bb87-4544-b4fb-56c5a03843f1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\27b36f3f-bb87-4544-b4fb-56c5a03843f1.tmp
Size 11KB
SHA256 fd4c51698ea1bdb8aa93d2a3de8bc3bf7dffd4c9b663426a468b855772397976
MD5 8a08f145cd74e756679abc07afe5aa11
SHA1 768bec6b62f7b6a33ddbd1be6411e4b6ac203631
SHA512 1760a210b10ed6aff0dc88b087a4ccbbdba64e6f3e265e432d5c18a7c1a554e487cafa203df57a35c88ffe7f9499a8a763fb3f19db10a4dc2ceb4b9364861309
SSDEEP 192:WRbcsJdv7+7pAPRp2ZR9ZHsb+WNn9oMcF2ybeQBa6HVyIsnAUge:WRbcWdS7UXmbwu12IaAe
TLSH
T1C142B629EE10793B6EDBC21AFD65775BD2F5102225D52E80EAFC8D2C21D7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d64de5e-f736-4a83-b5bd-ab31ccf53fdd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5d64de5e-f736-4a83-b5bd-ab31ccf53fdd.tmp
Size 12KB
SHA256 b7ac38987291b47f5055944454393c023b086266de85a163953d33091d660e09
MD5 2d030d9b790899e8adffd210914b89ae
SHA1 0cb12f87f9b81ffb5b0f425ab3e27bf42015cbda
SHA512 3905d35adc3cc551c51635eabb5d7f7ef6c425da9889f52407c0fcf0055073611a0e57723ca9bc50705334d002a5598d0c59337b19f691b8432ed43b8ca8fc32
SSDEEP 192:WRbcsJAv7+7pAPRp2Zd9ZHsb+WNn9oMcdYIbeQBa6qVyIsnAUgE:WRbcWcS7UXabwu5YSaLE
TLSH
T13B42C629EE10793B6DDBD21AFD657B5BD2F5102221D52E80EAFC8D2C21D7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

604b111f-c3dd-43a8-83fc-d474a5f4f86c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\604b111f-c3dd-43a8-83fc-d474a5f4f86c.tmp
Size 12KB
SHA256 9019115a39a3bdce5d27921f3d1fcff286bd5fb3d2adafa6e50983e75909f102
MD5 0fd90ae645dbb15afd1450c5c1af793d
SHA1 94a3f930954104167c7f8b9ce00655e18b60a1d1
SHA512 c4f879d970b84e67182dba799be30a996aeb7f10db7f56650ca875c4dbf4e392dac9aef8b97cdf79d6cc3b520cd93c32e7df166673af3d436e431a56c67351ee
SSDEEP 192:WRbcsJVv7+7pFPRp5Zd9ZHsb+WNn9oMcdYVbeQBa60VyIsnAUgE:WRbcWlS7bXRbwu5YbaPE
TLSH
T13142C529ED10797B6EDBC21AFD657B5BD2F5102221D52E80E6FC8D2C21E7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a41941f-3107-4e37-8213-5af138c0142f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6a41941f-3107-4e37-8213-5af138c0142f.tmp
Size 12KB
SHA256 699b49e45040e98b16b86a67c4cfeaa06f19c4900daf7bc329e31889863dd926
MD5 ffb1aaac9a84bcfc112758ef66b1a748
SHA1 6252837c865a9bba62b61f08ffd30f1ae66b3b35
SHA512 a9e10f4eb8fcadde27bda269ac58c03efc45c87ac26985fa36ff8b07350f7afbdfc57585ec70b26a34106b9bcbe0fedbd2ffa22e55c18ae692d1ae2504d8da21
SSDEEP 192:WRbcsJVv7+7pAPRp2Zd9ZHsb+WNn9oMcdYIbeQBa6qVyIsnAUgE:WRbcWlS7UXabwu5YSaLE
TLSH
T11B42C629EE10793B6DDBD21AFD657B5BD2F5102221D52E80EAFC8D2C21D7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

246b0d22-bb05-4df0-9ad7-edaf80fd384a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\246b0d22-bb05-4df0-9ad7-edaf80fd384a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

2771067e-2575-4161-a25a-53bcf6f37798.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\2771067e-2575-4161-a25a-53bcf6f37798.tmp
Size 2KB
SHA256 5dcfcae851c15f093666abbadb1994504c72073528612f08f3acfde1983acf03
MD5 dbea91601ac50049497a55e69ef120b7
SHA1 4a4cecdf402dd16f33639533642ea85079b76d06
SHA512 0b737a987b7f09679141a62ca87462d77e8780b9f92cd9f4a74d4feab3ec11d91738494fce337a3a3ec2ec4a4524489bb8ca0f08b02692651ebf3b420321cbb2
TLSH
T1AD519CF787F4897DD91196F4AB116F2FCE2D0918032C3866C8E4AE1B53E28B1D15075E
MD5 SHA1 SHA512 TLSH

Submit Download

d273a62d-dc72-4ebd-8a62-88c2bc3eebdd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d273a62d-dc72-4ebd-8a62-88c2bc3eebdd.tmp
Size 12KB
SHA256 525eeef0ef0b2a0c2d19a6d7ea2bbf810610eb985fbd64eab9abcc424a1b2b27
MD5 962d5dff38890d3b1d35700ab9319747
SHA1 8f477504646927d0e9a41415133fe5fd4077eab9
SHA512 f78d00c3afc12805d55ad5eae349c5b571fb8f60102513390cdc165c79dd61fb00f569e85e33f2561557c32d7435ec8d990a06c02314b8e6717750687a7fbb1d
SSDEEP 192:WRbcynJVv7+7pFPRp5Zd9ZHsb+WNn9oMcdYVbeQBa60VyIsnAUgE:WRbcyJlS7bXRbwu5YbaPE
TLSH
T1EC42D629ED10793B6EDBC21AFD617B5BD2F5102221D52E80E6FC8D2C25E7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8775a69-86f9-4ded-876e-24b728ab5185.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d8775a69-86f9-4ded-876e-24b728ab5185.tmp
Size 414B
SHA256 c758e97aa9b657db4a63a2f50daa0e95276ba20e3646a745069946e7730de288
MD5 7029f9b884b08be645cffd7d8d945553
SHA1 b44d30e6d6fb0236b3b92b32648525e2a8b2dc08
SHA512 fd47de11fc7c998b54d405f2fa6f2b345b424e95727ba349656105882f349fb36de6c1d6df60aad6a384e63a505230e03b38a70b611c35b831516ff92be01e99
TLSH
T108E02BAEC825AC2716FC0F2892545746E74123163A5189CF3B3DC1084F71B274686C2C
MD5 SHA1 SHA512 TLSH

Submit Download

dec9732c-f0cf-47f4-aa29-9c53ed88057a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\dec9732c-f0cf-47f4-aa29-9c53ed88057a.tmp
Size 13KB
SHA256 cbcfbe27999bbf1c38c32cf734dbc58c0c74e8fb94cebfe52fc4ac99ec4b2c4e
MD5 2687abbcac7af17c0b616b501e486b1d
SHA1 baf57c5410325446dd74e61be138853be50fcccc
SHA512 d6063c76c0f9513dcd556327052394a8fbae929daff68178795f4017c88a3a038bc8b09526fadfd4132488a9d51a09e3cd9ab6243430667f2c455f48c796d43f
SSDEEP 384:3hjb67KxkXqKf/pUZNCgVLH2HfgslxwXODb++ErU3l6HGjOoAWI8n:3hb67KxkXqKf/pUZNCgVLH2HfgsP6OPJ
TLSH
T19152F867A84D9A7F0FD8C94DD8266F4FACB5015766680C6893FB5C0803E5BCB114A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2a4e1f7-7a87-4e97-ae51-83dcb3672060.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a2a4e1f7-7a87-4e97-ae51-83dcb3672060.tmp
Size 131KB
SHA256 966b937655cf6f193ae0b051ea8a5f406e5eda44eaf2255287cd7599d7a6c0b9
MD5 3a7805de2d041f86f50d34d2d4ee5ebc
SHA1 dcc3493d2e4386ffd3aca23866d66dedcb04cec4
SHA512 b64a291ea6f4057d2522233263519b5fce6b6f9af3d4182b72e9fc339a8b3af2b3458b684c5c36da166343409a7067d3bb2a393aa6b6d3ee1637f5872e14dcae
SSDEEP 3072:+hgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:+xmX/B5UgKf2ne1utL1
TLSH
T18DD302BE9CDDEFA36392B026A9991B6FC9F67BC95160DE4081F01185009F1FD43D9A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e32c80b5-ff2c-410e-a7fa-20627355b7b4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e32c80b5-ff2c-410e-a7fa-20627355b7b4.tmp
Size 131KB
SHA256 c9b38bd9ae95095c2ef008c00b0a15b3e15787ad77876a05d98c6faf37797fc0
MD5 7fc6d07d2522ad48f0ec5362afe5f4cf
SHA1 40c04cbc8256a7b446b12417928edc70e9402751
SHA512 f4f45f7b86c023880d8a18ada5310ba943a80688c426468dab67e56f034a14239b261c11179f470da948311bfdb5b528a2baf6c97be40a15b4d8d02caf8432d4
SSDEEP 3072:shgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:sxmX/B5UgKf2ne1utL1
TLSH
T16BD302BE9CDDEFA36392B026A9A91B6FC9F67BC59160DE4081F01085009F1BD43D9A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\activity-stream.contile.json
Size 4KB
SHA256 77cc7117a9f7aaa940e98657c3e6c8ee4c5565403d5fede1549aa9e62eb79370
MD5 199b6281326092b12e26b82f22a55bcf
SHA1 46b6a61f830d1656fe2aeaa09e397c444892d34c
SHA512 9f4fdc56bf49fb9aa67109ab71076fb6c66b147df4b524edcd1a38c186a21e010a21f54bc2ab5db963341b26b6172351ce7c6c96ac51fa20bd0ac0ca61836667
SSDEEP 96:TMt2MUVicmiINtdRT+mRl3On4KYqMyk+Z6DQ1olz:vMvcEbdgmRl3OKiZwQ1oF
TLSH
T10091B85B957484132B31A9F56C073AE8F01BB115D9E08D7CB15BEC208578BEE84EE884
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 2aa34b03a3777f52c9dad7e2ff702e9ffdde4c1b32d5308e09447efd0bcff43e
MD5 917f81136877774f9818727e30251b04
SHA1 46ff105fba3871f2aea42b9fcb8241c22e2fc804
SHA512 6d2b893978b3c59f45c2656aedfdf5c5e77a4abe8df2fec0cc7dd903f58b9edf98a4ddc038d5044106eaf913e7f9d7d4ea5e915b4974703ca0ee087eefa4507b
SSDEEP 768:MyMZ7z/ErifgZhqoUws511CiNO6t7JX6tp+GNtpLsE:XMJ4cgvqoURzCMO616uGNvz
TLSH
T1787308A3A6ECB1BB1B9137DB2C0FB95B66D10186E74506CCECE9CD1C81CC654423B6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10257

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\cache2\doomed\10257
Size 257KB
SHA256 448dd4ef18d73e1ab3f8718cb637d904581b63c8ebb10540d9dc4cd43d592e54
MD5 4c5a41996f5995e838f38ed2783c2999
SHA1 74b33c5caf1cb38b9b2e8b59ec45e09f1bfe18de
SHA512 e508dcae2f96e63bdff1a7f088ae19872d9fa63ac7f6548ded488361a6bed6aca4e5a14d6da51b441ecde06e41e045764d0818ad93aa68aa3628a6d6ca0b1e8c
SSDEEP 1536:oYCYPszToSpIFIjmJSPrQghvkcI3/5ykAJ1jcE18ASNUFhK8Ct92ZFZWkM1SCumo:rUIFIjUgCcQ5yk2158PU42Zj3H
TLSH
T14044F7F3D6AC70FB175286DC6C0D72CFA2AF4179DB5208DAF86C8148C389E65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15707

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\cache2\doomed\15707
Size 52B
SHA256 d6dd60f811457b4e10562fe28f9a6e2ba2461826b461af6b9841b5182b1223d9
MD5 b79e775cd88253d3ea07dd75b1442b07
SHA1 3d6f3e14470103595dab0ebe1ba8a849c61616e5
SHA512 71e3a135c2fca5f09fd2915122dd3a6e2ab839bdeaa2aef88b1f05334065050caf0e266fff35096b1afc9e804889c53116afb7adab53e4fc8044244940b96fe3
TLSH
T15490020C72918501E02580B1088199B40C243E40888423A634E10B9104654D34004005
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 568a4f925f20a9c699e1e699f7b8f5fcfae05cac92eac7a7766e13b16108417f
MD5 f70bd25df56f3f43f5d3832bf5daa8c9
SHA1 43233f9490de1d546d21078830d68d3118e40aac
SHA512 71521aecd677070bf800a92b30e10fdc4724a16debe3320c01ef0c635c224557842becd7f55d4f1003b57f22a8d9f8613f1ea6707864f54b1c13f17329c8e96a
SSDEEP 384:HXwIiO024YHWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMASTG:36ZYHWTToXJWTTogB7S/AmVAf+hRMzTG
TLSH
T15F727D7D9F013CAD176790E8C8B983558D18B7ABDFB9C02D259C3D09CA8861A70F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 69a82b08494c5025076c45e41b11c1e40c7d4e3b02ba47b6ccc756254b6bb9fd
MD5 1b85c4042cc6d2e392a6ea83d227be6b
SHA1 70999b3bf624f47713c931f94343d611b6a994c5
SHA512 cc8578025b84adfdccd0425b17ae9cb26a3e8a7946bb6236b2216e08e0be3c2877382db90c1082d9c6f5425c9d7d268acac0f45a03a076d15e50fa973ec7d542
SSDEEP 1536:jTrliWiPMDgPkwZ3Qke6VYwK39xiZ/+hTv0kq7jIa07AoSDcQoyanqkiw0+NCqJZ:j3lSkwZ37VETiZ2qQXsDmJqkLZ
TLSH
T1A1A3AFFBDBA3CD3C55FFD42CAB81C43EF9266840B3A72005D923671066C6BB46675249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 9eb147683506670f48b7835b5f47b63c0bfb62a190ab57c60d295f580d8c62d9
MD5 6e70a5bd2e361af975b2c7d1d0be6494
SHA1 7504b37f2cea1090605367b7c4cfbd6980d7dd1b
SHA512 233a0f1e9b29dac59ab6cc86b8ae56f4d6bebcff98b08a46a0583b2cb6c9df6c546f7e2d59d22800f9fde321fc55c88517e9c154f51bedc41363109f3819704f
SSDEEP 1536:XTrliWiPMDgPkwZ3ftm2pSLdgw+x5/n8sbhTv0kq7jIa07AoSDcQoyanqkiw0+NF:X3lSkwZ3lmjxExn8UqQXsDmJqkLX
TLSH
T1E1B3AFFBDFA3CD3C59FFD42DAB81843EF9266440B3A72005D923271065C6BB46675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 8.2MB
SHA256 22cc4fd0fe47aae4b8fa9374cf68cbe17ffe622e67fedced1e162662ab28e801
MD5 7aa72194b59968f37cf9eb7a75b82624
SHA1 7afc1030334d943a32fe9dcaf7fbe90d071d547e
SHA512 5b73134c002438f042209f54b7f738e564a1fb95386724d74e93d2412d2f53757a5f1bf5342fc148ef7f59f1d5e3b9f9fa149dc745868d9fe87de5676473890c
SSDEEP 98304:8XYpvNa5R+WAjfAm11aGMFRGg9LEGLYmghF5Q/i4Wvq/i2tSY4za:KYpvNaejfHuGMFIg9L4mghF5QD/9ia
TLSH
T16B868D89E36350E8D85ECDF4826EAA72D434384E0335AAEF17D48B315A727C42679F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\addonStartup.json.lz4
Size 4KB
SHA256 3cde7905dea88a31ca3cdd0f79abc1c651ef3d34459f5160661afc8af26f686d
MD5 81f01069f2815793a8daa08dcfe5cfab
SHA1 41399739f04ede1172aa819725f6387f593b1a6d
SHA512 4bb9e506d1806e384ec0f3defc6de1be5325694c16d32497d7dd6f66a12fb50b7e5c9b8f4e877934df7bbc97b4d5d6f23bcb285a349e4ecebbeced3532b73c2e
SSDEEP 96:Nl964sHNw6M2xWGhD41MgGvmHhO+rUpO1LnOYvhQhIRhN:Nh52xxhD8rGvmZApwnHUuhN
TLSH
T1E8A17D7AD582EFA5FE31C04348D97FB2EAA6AB7410A9C4D4F1AA71194C34AB36700380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\broadcast-listeners.json
Size 221B
SHA256 c8ca74f2460f0ff1b5a2c9cf1065e3476c00383f56e97f34c4e0982be63261c5
MD5 2cd6f50a08baf71cce5e139dde729c69
SHA1 bd5b2b967aaaa5c351a741f8d3be239434b892ab
SHA512 7a3b25c61fa6da5cfb60598ecf3a3a5dfa66d9d75d7e49eb08d79537e6acee6cf3523a3e403acdbc0c2221b595a6b85ce8dcf78eb5f07bb2badc66f0e3c5d6bd
TLSH
T126D0221F10177C7F4B99662DF00427C50BEB21093270903DC3AF34540A2FAFC80082A0
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9f5b2d1cbb44f578ee915099bd770a5788d37b310ea9a7ccf1b0633f1fdd62c2
MD5 2d63e7aeb6cea1e358d79bba4d1ca7a0
SHA1 c958dd3dfab6c0a07a8274cbdbbbbc9c339da2e8
SHA512 3186f00e15cda0a1bdb59782ce323d146dc51d8b1f3d67afab37a54871b1a1c4b445cd0d80b9736574ba93bca3cabd951f004ff71126b8d8b028037ac8d788e9
SSDEEP 192:+c1d66Joz0dzgCl6mc0d53eOv5zboAZuB9yjHcxI:td66JozQzgC1jVboAZO9yj7
TLSH
T1A0D1CC68FA28963BC414023BCCA91F500F36388B984E3F29719CB55D2C576CD7A8D5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 4ec64c82cd4dd4b528dc2df7ae39820ff7568dffbcbf9f7c4eedfa01556ab7ba
MD5 8167feae67012fcd22725b0cd7681596
SHA1 0428c7a685be8e47276819d3b57b781568d5731f
SHA512 de63d8e2b03c2588a73a27b96826786c56e1ab11458107ed26be5580870496e4eebd8b5b6d00bb2eedf9eab9447ac1064651cb252e6f4effd6f2e78a3f00b165
SSDEEP 384:zbo+O9yjBd66JozQzgC1jQRFYCIccd+1AFkTbKGcmhuBEq8zKqPhwFKb/bDE4rpa:HmbmyRiKbTGGcmhuqq4KqPhwQb/bXrpa
TLSH
T1E6D21F80FB2A953FD41412BBDCA507142F79B88658192F6B3A4C64686C872DC3E9E47F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 d356736a87b658706c3fe810efe5ff57d97c26c37f7745c2ce8814ed10dc82d5
MD5 1ffe5cc793c3326044ad2e585b73c36d
SHA1 08870d3f2d1f7afb20f0cdf8a86ca2f28681d2ad
SHA512 6cbcd8ef5809d6614c15fb4a2a24fb8d3c47265135d744bf9344ef2561732402a33ef41a3ed27bda025095483aedf73c832acd9d11200ac44493958bcfc0fce0
SSDEEP 192:Y3eOv5zboHxZuB9yjHoMoc1d66Joz0dzgCl6mc0d:cboRZO9yjBd66JozQzgC1j
TLSH
T1B8E11EA4EA28863FC004037BCCA91F414F39384B984E3F29759CA5182C5B6DD76CE1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 0e0b6fb6c6c6f79b4bfb379285527d16b3b40a458b5b72bcfb87818d92186b60
MD5 6bd696910bd2aac07b94b923723cd311
SHA1 00c667c6afe95f857682da97915af1514d6135d0
SHA512 a4d7e52d0e69c385ab4804034cf1c2681727851cb54e962e8f17a724a726b57494459c7629b8daadc93121df2cd1299ba41b4d69ff98c73ac7a6e498f987692b
SSDEEP 384:LRFYCIccd+1AFkTbKGcmhuBEq8zKqPhwFKb/bDE4rpsd66JozQzgC1jYboXO9yjL:LRiKbTGGcmhuqq4KqPhwQb/bXrpJma/Q
TLSH
T172D21F80FB2A953FD41412BBDCA507142F79F88658192F6B3A4C64686C872DC3E9E47F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\events\events
Size 1KB
SHA256 3c7e2bf7b6fb1e3bd13a8f60c3a04a6c18ee616f64eab0c97d56b7c9525f83b4
MD5 82f3535d4b61a5e6fdccad90f0d685e7
SHA1 602a5fc371580980bf3fb1212198deeab5e3afbd
SHA512 b744cbb4406749f54c13bdd5541a7d057868c2e2c9c11b0c88da41c0440293172e0c31ee3efa3dce8b70296a45c6d51f0e7f2412acc6b2d12c8ecf9e4b0b7873
TLSH
T1C921AF6C3AFC4D2B58C7F75C794502CE93164A4B46971C470D12EF8DCCD1AD931AA438
MD5 SHA1 SHA512 TLSH

Submit Download

26f1ecfd-8c4c-4514-9315-bed0568f66a6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\26f1ecfd-8c4c-4514-9315-bed0568f66a6
Size 886B
SHA256 96c18afbf9eb32e6d420ddcefaeee0645f7311b4a3986eb3353e18f89b1caf5d
MD5 06f4565d9395f16182c7f1b6c6cbbae3
SHA1 4b2efaf21ce8cfb929d75f8b63a34bffebe7ee29
SHA512 9311a100be05bb4f932f3f1cc7386e5412cea833610ca93790a30bcaa092bc4a0674a613f4f8f5ab4acd0553005eb7eb47185b20ccecd3b2dd5f0f5ecb35b3b7
TLSH
T1701104819B74B5B2CC78D24B54E47B438BE8702380CA59187DA0DB180CBB95EA396A07
MD5 SHA1 SHA512 TLSH

Submit Download

34cfa1d5-3b94-456f-bbe8-f9e4ce6e6208

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\34cfa1d5-3b94-456f-bbe8-f9e4ce6e6208
Size 16KB
SHA256 05ec18c4ba4d08a1c16efad19ffcdb920fe48edca3ae4f8ede1267da32f81972
MD5 ca9d1ad623f9df7096dcb72917362061
SHA1 601580cad15041c5a3550c93c3a97b09eb471d0c
SHA512 6c5aabb902bd533d71b66c873afa8051c9e2ce5f025f4a96288098bbfd2473c97cb26bc0167236cb0b397d7b92181a70677aa812241701c277c3e7186ceae008
SSDEEP 192:9YaIQ1+S7dw3hBs0NBz5lbRjuRdPn8jjSqrmfv1FvnyNk1Oqoo6gfWepeaY2csli:+Puw3hVNB9lbRaRdPn8jjVLrqRaf
TLSH
T15772CA566870557A8251E36894FCBFC3E6F528CB8C418FCAD7E4BE085DDE0AD112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80f336d5-96a3-438c-af35-285ccc03183b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\80f336d5-96a3-438c-af35-285ccc03183b
Size 883B
SHA256 c588fc59ed8e1199b94560e21b088b89e2551aef36e4222759c7a79fce5d236d
MD5 f565699b8372728b48c1628615977c56
SHA1 5a58da1e64391a848bf92bc465d49dae85907286
SHA512 975c4c43e65eaaac33858b50f8fc00771c5a37cbcf2960e5d8d763bbe4d434a50acafea89d8a3c080df82adb00eb2482c4fa2e0e6d6dcba3f3045414a3339d89
TLSH
T140110485A634B5B1DC38D20A88A977018BF87023C0C595143DE1DB040C7F95EA39A747
MD5 SHA1 SHA512 TLSH

Submit Download

8a2ae7c0-06d3-4480-8d87-c9526d001c58

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\8a2ae7c0-06d3-4480-8d87-c9526d001c58
Size 2KB
SHA256 1ec56f2c39268431a14788c9b83c794d5fa1b7ec647fd2f26a420d55ac5cf380
MD5 540f66f8d8b91996e102e316065e9e40
SHA1 d1453666db5795d6fc58022c9c78bb07b257c09a
SHA512 b60fb6283a81297e31d3c7d6e9234f071a9288c19aec8b1d6ba4cd17027a7668841bfbb04afedf72542cdb6e5c463eae2fb30a5b662936fe119815cbea08098b
TLSH
T1E341445C75FC5C769CDBF14C9492338E97248A0304C628436E51EF4C8DA6B9D736E927
MD5 SHA1 SHA512 TLSH

Submit Download

96657f00-040e-4b0c-9dd3-dbc6c134df0f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\96657f00-040e-4b0c-9dd3-dbc6c134df0f
Size 235B
SHA256 db3c7cdd18dd79ef21d61c7a282710147da3f9c89b95afcfe2e4a953d359ab6c
MD5 2484338799c7c19021309a63d4e1c2a7
SHA1 d1f56e4f300d1a168734b6a68ed73099179f1f6d
SHA512 92609a1f1cf078de47f92fa0b830d96ed9ba6fc530a064cc579d9f8544cb93a9e4925364ac082f1650cbbb0f0f219d3abd8e1138df9cff13970670d0821eacd0
TLSH
T125D097812498376D08040F07F4E139CA30844C3324A49814D5A101748DF9EC81162857
MD5 SHA1 SHA512 TLSH

Submit Download

b5bd7b1e-330e-4527-8811-83e35d65e6c8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\datareporting\glean\pending_pings\b5bd7b1e-330e-4527-8811-83e35d65e6c8
Size 235B
SHA256 68e3381ea107eff0e3b0485ce284fde3f7bb4cc7cfecf4c1607bd4ec3f3cb957
MD5 1390b7bd70bbab58afbbaa962b1bf8af
SHA1 8ec829db851f2845b0848b81781cb7f69f986e18
SHA512 18504a00d05a0d40fb982573ce3a2ece04e874f7c939b5f1d99bdf73fd7f009c346ed954813d9d9cf21815f62802e0e068f508270b728f0b59aa08194d5dfdcc
TLSH
T165D097841888632E08048F03F4E128C630858C3324A8982096A18238DABDAC8012181A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\extensions.json
Size 14KB
SHA256 6cc1b311d112250f38ce648258d47af0adb8726e5f4c5028c905b80914f147cb
MD5 8b9bde8c7f46600c53a79527333d54fa
SHA1 e390be5797941a6a2637cf8196fdafe2c4fb354b
SHA512 346b98b544da0f63a570fe98432a9fd2e81be7624ffdf89be8c241e9e1a6e269097e8778e9a6dc25e15bfc54437a259772769f452881b2a1c86ebb7f4d7cb108
SSDEEP 384:kkI4vXUmldv88dhWD94zW96oUL4HzL4PZL4HOL4HEXL4HC:rI4vRfFXe4m6x4f4J4U4kb4i
TLSH
T19D62421545149EB8298FA79BAA367E01C37D473B60845C38F4DD8FC842FB5B902BB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 8.5MB
SHA256 2e8cb1b695eee31c16c640b6e8873dfa1e2770d049aebb4410b7062ecc9c3447
MD5 4fb4c14f2819b9c8d3da5862464a063e
SHA1 9a0ea9288218efed5c253b1694dbee1a57b55ba5
SHA512 681064754a1888b5975edb7aa8502fc0ed21dcb47a45ab8a52eccfb4961ae2389e7014f7ac808c736a0438ce97e7797107114f620c9ef94ca39f7d80b4f1c429
SSDEEP 196608:bYpvNaejfHuGMFIg9L4mghF5QD/9iRWo+:bYXajn9L4mghF5QDwWV
TLSH
T13E968D89E36350E8D85ECDF4426EAA72D438384E0335AAEF17D48B315A727C42679F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\prefs-1.js
Size 7KB
SHA256 eff6008986bebce7e4f8eff66641b8fff257d5c17869e85808e2fcd95b553703
MD5 ecb1b1f6988830dc2316f73b1b17260f
SHA1 036d46e29102ba6eccf0c6b31cbea907c42bd2dd
SHA512 bf4e84bd1e7ce0a4c5b1077eab741faffdc35c3078a7c5b09dea35c52f873f08e3302f137f7907217ddd0cfac1bdfd757128492226403b18dde0eb220abfd882
SSDEEP 96:xHEj9TU9+qGq5fkPlObzS4UhOSSlcdv9jqnuHjNlBw88nc8L4cn2eVstQGS:OjSR5fkPllcSS4jvBw887qU
TLSH
T137F12E789408CB7F64B677AC6C2888705A72013BBBBF68C750B958C4011CF3846F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\prefs.js
Size 6KB
SHA256 fe4ba9f0b753ffd2c7e42ae224ca0fe4b2f872375efd6894660b8109e6c63ea5
MD5 cc99e5860e44b15b21c47361c70b84b2
SHA1 d329e02127ef4354c05125db13b1ec428b774add
SHA512 b11e7f420edea2b1f4e1c802804b8d2d9821a2672bda29d999897dff4e42fe45a7cac239c9e9cc1ec27696a1286caa781001b04008b189bbcd59121adb4dc51e
SSDEEP 96:xHEjUTU9+qGq5fxlk1zSFSSlcdv9jLnuHjNlBw88H8L4cn2eVotF:OjLR5fxlkoSSZjvBw88GKj
TLSH
T1B7E11E789508CB7F64B677AC6C688C316AB2013BBBBF68C750B55484051CF3846F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\prefs.js
Size 7KB
SHA256 76c7bdf20a176ca508bd8a8bc81ccef0b9209c505cd0555a8ab0918ab594fcad
MD5 bccd8d970311f9431c93e06721e49a06
SHA1 97ba5c96eff1562a7737d7f8358687d61a594751
SHA512 97c0e49f1e50bb36ddba06d04b61eb806a6b3267f80104e7d2b6a016dbcb87e8e1d6d4a919c0606218f47dac967e3c9adb33afcf4ba469a227c5960cebd05c09
SSDEEP 96:xHEjUTU9+qGq5fxPlObzS4UhOSSlcdv9jqnuHjNlBw88H8L4cn2eVotQGS:OjLR5fxPllcSS4jvBw88GKU
TLSH
T132E13FB895088F7F64B677AC6C2888715AB2013BBBBF68D750B554C4051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\prefs.js
Size 6KB
SHA256 098c7a725afe463c0e8b4ae0c731b46165748431910a9f1c761c72732910ad20
MD5 8d628e2a3ecdf5ce9547639e7dde169e
SHA1 bc5d856cae2899ccf91478863b9877b067ea3ace
SHA512 cf45af87de73635e54d71060258bdd3d294eb382882ff853b4b0424397ec0374565377c9d26c64ec68554b01d0437d8793d0ead2080554de994a79b90b228c5f
SSDEEP 96:xHEjUTU9+qGq5fxPl1zS4UhOSSlcdv9jqnuHjNlBw88H8L4cn2eVotF:OjLR5fxPlGcSS4jvBw88GKj
TLSH
T164E12E789508CB7F64B677AC6C288C715AB2013BB7BF68D750B95484051CF3842F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 97f0b5dcab3854539b8e999e6a7e769eee6b14ed02ea8a7de96a538419986b5a
MD5 0339a35e3061cef389b47b9b8612cb5a
SHA1 da6d10048906b32b20d6152422366666f6582690
SHA512 3c0770e39172097c37f3463b37fe4e17d0768392741e2bb5982122b66462316324fb78ce71597b667f5b04b180eb996a4c28b7565c2b1988f12231eecbbdb647
TLSH
T17221DA82ADEF2CB555B5E34E91C50FE9E720505441F8D8F0DC44B90045AC6097BDFB0A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\k8l5y2d2.default-release\sessionstore-backups\recovery.jsonlz4
Size 1000B
SHA256 769d8571c42e1d57e0a1e07c988f1024b2949830aaff23f1acec501dbaede66a
MD5 465982f25e6d2696843d82d1b4e4191c
SHA1 4a8dcbb9b11ba7c33e92af09c2b9a440bf23aafd
SHA512 ce7eaf0ad120eaeb363f4b28817f3e2b788dc8f47dbdc8f4229b465f113d746f1230ff6eef55c7c23bc73e435acce893aabf8d5cdff869c27679a2dff59bf59b
TLSH
T1AD11A5E1FE9668B72A10D18171C53EB8C9D91003837A65C0F6692602431481FE1EF282
MD5 SHA1 SHA512 TLSH

Submit Download