hxxp://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid[.]onion

Analysis

user interaction
yes
max time kernel
125s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 10:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion
Sample261110-mdvfvaef22

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	3536	firefox.exe
Token: SeDebugPrivilege	3536	firefox.exe
Token: SeDebugPrivilege	3536	firefox.exe
Token: SeDebugPrivilege	3536	firefox.exe
Token: SeDebugPrivilege	3536	firefox.exe

Suspicious use of FindShellTrayWindow 18 IoCs

pid	Process
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe
3536	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 3536	2296	firefox.exe	83
PID 2296 wrote to memory of 3536	2296	firefox.exe	83
PID 3536 wrote to memory of 4600	3536	firefox.exe	84
PID 3536 wrote to memory of 4600	3536	firefox.exe	84
PID 3536 wrote to memory of 4600	3536	firefox.exe	84
PID 3536 wrote to memory of 2076	3536	firefox.exe	85
PID 3536 wrote to memory of 2076	3536	firefox.exe	85
PID 3536 wrote to memory of 2076	3536	firefox.exe	85
PID 3536 wrote to memory of 2076	3536	firefox.exe	85
PID 3536 wrote to memory of 5076	3536	firefox.exe	86
PID 3536 wrote to memory of 5076	3536	firefox.exe	86
PID 3536 wrote to memory of 5076	3536	firefox.exe	86
PID 3536 wrote to memory of 5076	3536	firefox.exe	86
PID 3536 wrote to memory of 3960	3536	firefox.exe	87
PID 3536 wrote to memory of 3960	3536	firefox.exe	87
PID 3536 wrote to memory of 3960	3536	firefox.exe	87
PID 3536 wrote to memory of 3204	3536	firefox.exe	89
PID 3536 wrote to memory of 3204	3536	firefox.exe	89
PID 3536 wrote to memory of 3204	3536	firefox.exe	89
PID 3536 wrote to memory of 3204	3536	firefox.exe	89
PID 3536 wrote to memory of 3856	3536	firefox.exe	90
PID 3536 wrote to memory of 3856	3536	firefox.exe	90
PID 3536 wrote to memory of 3856	3536	firefox.exe	90
PID 3536 wrote to memory of 3856	3536	firefox.exe	90
PID 3536 wrote to memory of 1188	3536	firefox.exe	91
PID 3536 wrote to memory of 1188	3536	firefox.exe	91
PID 3536 wrote to memory of 1188	3536	firefox.exe	91
PID 3536 wrote to memory of 1188	3536	firefox.exe	91
PID 3536 wrote to memory of 552	3536	firefox.exe	92
PID 3536 wrote to memory of 552	3536	firefox.exe	92
PID 3536 wrote to memory of 552	3536	firefox.exe	92
PID 3536 wrote to memory of 552	3536	firefox.exe	92
PID 3536 wrote to memory of 4412	3536	firefox.exe	93
PID 3536 wrote to memory of 4412	3536	firefox.exe	93
PID 3536 wrote to memory of 4412	3536	firefox.exe	93
PID 3536 wrote to memory of 4412	3536	firefox.exe	93

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion"
1⤵
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3536
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {3a818302-cf6d-471a-9507-432311e28571} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {027d66ec-dc54-4b13-a78a-87a3c503875e} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2076
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3732 -prefsLen 25164 -prefMapHandle 3736 -prefMapSize 270279 -jsInitHandle 3740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3748 -initialChannelId {2b7bf0e3-1186-442d-8f7a-0f2684480891} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5076
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3896 -prefsLen 27276 -prefMapHandle 3900 -prefMapSize 270279 -ipcHandle 4004 -initialChannelId {dca1033d-b026-401a-a780-579808fb6045} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3032 -prefsLen 34775 -prefMapHandle 3016 -prefMapSize 270279 -jsInitHandle 3020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3056 -initialChannelId {2c86f632-66bf-4cc2-abe2-ac12a8316d66} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3204
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3216 -prefsLen 34905 -prefMapHandle 3220 -prefMapSize 270279 -ipcHandle 2656 -initialChannelId {3da4cb69-5921-47d7-ae79-5da8d4168f05} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3856
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4944 -prefsLen 32845 -prefMapHandle 4948 -prefMapSize 270279 -jsInitHandle 4952 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3220 -initialChannelId {b52b9b0b-0f2e-4724-9a3c-f82f60bfcc97} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4980 -prefsLen 32845 -prefMapHandle 4984 -prefMapSize 270279 -jsInitHandle 4988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4992 -initialChannelId {56068dfd-dced-4c13-a568-f5f811fa7d28} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5336 -prefsLen 32845 -prefMapHandle 5340 -prefMapSize 270279 -jsInitHandle 5344 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5352 -initialChannelId {0f3ecd40-63c5-4338-9423-45297a619d2d} -parentPid 3536 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3536" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.contile.json
Size 4KB
SHA256 cad9f88aa856a49e4e918d513b0c7dd9e0dcebcef2b691458ae214cb96f11eba
MD5 dfd1a522966e55f54b679de12075317e
SHA1 092bff8541956dfc0d8c103deb905f417f2bfd1b
SHA512 1a3d6049ce6766756ec04afc8f85f16f78db352ffc57739f98067105262696e0e7518a87033d0d72c5c5e2295321d818c3b650187b80017e5641502c37362d61
SSDEEP 96:kKYxYktX6D29om+ynI3qAaPp1NonoJ5hZ0Odc+lz:hsXw29ox6y5OC+F
TLSH
T1F3A1B7AF846444972F71B7D52D8733ECF11330098BF8CEA8F4169C2586AC77A899E584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 27f9ab115c667ea8c94ffadbdc2b562bbf1030cc964fe7658edb3ca50892772e
MD5 22b982d108aca9d91ae0afb830deb848
SHA1 245910323f9bee8b8a003de1885f457e15bee539
SHA512 3ada9d1be636d4c3ef8e00a743098eb0e9daa1214b1da83fa85aee23ad082e657e11981271f10befecdfab79d164347abb36fd426e5f1d7d299ebab98c01f1f3
SSDEEP 768:FyKHy18XtBIm1idzGptzKpARgV8oASfIW3nhOvbHKSym9C63YOkJWKPiqbq:kKH28XTF0zKzqASTUvbHKSLNq+
TLSH
T158731AB392A8B1BB1FA427C72C4F795B66E64146E38505C8ECEEDB0D80CD754123B5AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 172ebf3ff33312edb1e3b8c6444081a47fe97e79a041d57d705df5a7130ba96a
MD5 5b8ff8cb82f052d3951a034c465237ee
SHA1 d1c62cde8931b6e64ee7e888f5b9fc116182d93f
SHA512 c122f0652b37cd8711eba75b98bacfa366d71eea18a6d3799ceeb4c5c6ce9f30fa103fa3d54497851547968cf41d7910f80b824c54a45f3f8d4dc9bfc8bf8844
SSDEEP 768:FygxMQsDvh5KQVgbi+xQ1gg51csTIzTiFBMNPn2el33+GFOOru8EYl9:kgxa6UggGJHwBMNP2el3OGt
TLSH
T119731AB396E9B1FB1B9037E72C0F795B66E20195E38906C8ECEDCA1DC1DC654113A1AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17167

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\17167
Size 163B
SHA256 21c554623406737de22a123e982cb4f0be5ed6d1e3e559fd6647d66398f71a8b
MD5 a6050e83c25433ecf42cc439eef23b1f
SHA1 43b57d5c3b0f5960ef7cc21aef6b918605df8e9f
SHA512 360b8063e9d68b09f567c6f9a31f90a03bade524582399c6733caf7a72520c68a15d4bfdad0fb05f0162ee829748599ded7bf64039f40ed06b73e7426c953c6e
TLSH
T12AC08CEA30B4C4609A14C5BA74AAA0249A03BE86C8A7908E32A5670AC0A8B2128D4D44
MD5 SHA1 SHA512 TLSH

Submit Download

32310

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\32310
Size 4KB
SHA256 b68519cd38f390d9e1a98b853868f67d4e813964c73b80f2c178d115b41abb78
MD5 ec4cfdd94af5fd53c4459ce915abdc69
SHA1 3291c8b78f67b68d8c342073a1042b1743b5d555
SHA512 20efdb46c09071ce3a7084a5b9181a390325fa4793568ec0c83919ee7de315a567571146044b53f956c02a5b20e2099be539121f40e8d481e5668a19ea1ffc38
SSDEEP 96:Rp3rKHlPn/5LZgtcp3rKHlPn/5LZgRrKHxPVlyWL1e:72HlH7gte2HlH7gR2Hxdo3
TLSH
T16B914C3B4460B62D7EB586FD2CCE01D80E995A63D90DB93A5D1F2004E889BB42FF184F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 f3dfd5dd1a6b79e963e61fb85536b4d1c9fa32dae3ae1f9903c0761cf5d2c3a0
MD5 9a764f0e7a79a1ab8db086f7b85c542c
SHA1 3a767055c1ab024b9264d82ccb1d46f1e719da80
SHA512 982688de79604a6a56e60053bd0bc446a49a1bb1c73192db03ac412e0fe825ba268fa3c0a841371407f241b9d70aebe05eb7cfa89c74b5674efd89283cea834b
SSDEEP 1536:XTrliLp/0DPTj0Sh9vgQgxDZqKePi07a8yV1iIia26QyKssLXGcOFhZZUyY7pY1z:X3l1j0ShC5DzkjyVsIwsMOxZUjbfXy2s
TLSH
T195B3AFF6CFA28D2D55FFD42C5A82893EFD262404B3A7301EC923631461C6FB86779649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 454a7d33dacfa2871f3274103f4a4ffe9d77e3fd74110a7aaef0e6ce3707ab84
MD5 0385d80bf120e561c018794647c6444f
SHA1 70730a17c4a141f068292333b78414c7d8ad1299
SHA512 a6d4a2f1611f7d8baf9e5a884c049e49a9fa4978e64348b14fd19c3b0cc023752324c2ed218120fe1fa391191aed2f9e02892e0d81b15a2e5493b266ef37c76c
SSDEEP 1536:jTrliLp/0DPTj0ShOLV5cgf0bLyWbnIf1iIil26QyKssLXGcOFhZZUyY7pY1sfXJ:j3l1j0ShU1W6fsIdsMOxZUjbfXy2H
TLSH
T170A3BFF6CFA28E3D55FFD42C5B82893EFD262400B3A73019C963631461C6BB86779649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 479KB
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1
SSDEEP 12288:u8fhrUPE5+8TK1g9M6y5JJtuiA50eHgB2rAnavTQu:fZrUPE5I1g9M6yyZ0AgYra4Z
TLSH
T189A42315F4A41CDCE8B5200CCADED74501995084F126FE2A5D32EEEADDDF683E26C8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\addonStartup.json.lz4
Size 4KB
SHA256 ad99728a1c644a59403128b12491e738010797755b54f052ce8aaa5e695d412e
MD5 a053723591a9080b5bb29031d3be6a8e
SHA1 e29bfdbc98e1d62f0d4b04b18941b86d145babe8
SHA512 e9b48ad82f6e97d49f13f04414cda1ef522526d7087ddf73687bb91d9f5b1b318300f901a50a96bb5742eecb925f304ffbd49513c91809eebdf11d2f4ed364f6
SSDEEP 96:NlH4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N052xxhD8rGvm6ApwnHUuhN
TLSH
T12DA16CA6D542EFA5FD32C04258E97FB2EA95AB7410B9C4D4F1AA71290C74A735704380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\broadcast-listeners.json
Size 209B
SHA256 63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24
MD5 97c3738563a9448365a735f5f29ed3d5
SHA1 15a81433236ca6e6ecc4e1c8d0fdb8523b265c57
SHA512 ed98f42d5d02ab53a9e50f80b312bed4b5d05d053bec582cf9d619ef91251e86cf4f4d1123c645500fc1dc4673b49a8b7badd3f3a39f565ac643ca4fd0157ae6
TLSH
T159D0220E14177C7F4B486229F00827800B9A10093270A03DC3AEA0540A2AAFC4008190
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 a9e752c23b1ccae07ce803a474f46bb859a7c017c3f87fe818044e8ed81544cc
MD5 39def15dc17531ebc4a6bbf5316e2d39
SHA1 9714747c6b2dd655be43e02b1e73c67b27dde3d8
SHA512 772a52a4046183547c6f63f86a8b2be00b4b51bd4a72289dadd7ce653ceb46b649eb172f253dd5e5f45670e2870f04bdad1f1235ca50ec71507a52746b7668d1
SSDEEP 96:JvzSL7SlSdF95/7bkW60rcEjv6dShyUR6GvSmWZBFi2+SO8T/dd66JozGzgClKts:VzSL7SlOv5zbowbjidShyjGvSh/1d66V
TLSH
T1A7C1DA28F638463BC459023BCCB61B401E36385AA89E3F15319CA45D2C5B6EE7B8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 0321c2db1e844284c710f9b5a5f731c6eec50ca88d74e19b1d28be613d9b5726
MD5 462578aab494b942eda8fb5e86b6b28c
SHA1 37f95511ae948a5f8a59bffbe1ff8c36dbfacc7f
SHA512 a0d70472b2386a7f6bc5f6c9174ee80babeeacfc530489da52c7b96fdeb0102e506cbbda2673cb45b31924f6903deb229f1970ab28e706c763c9cecb03386f82
SSDEEP 192:AzSL7SlOv5zboPXZjidShyjGvSh/1d66JozGzgCl6mc0dz:MwbbofZ+d2yjWed66JozGzgC1jd
TLSH
T18BD1DC58F638563FC458023BCCA61B401E35388AA88F2F15319CA45D2C5B6DE7B8E07E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 df520ffb9393cb41360838102cc6a289bbf13fd429c777d0ad0f90ce4809bf80
MD5 99519bfc1c9b1f27e0f3a32c3d6f2533
SHA1 7cfbdb128de23c38ffea753a17d94bf70f0faca8
SHA512 f6d09d91b52b21396e0919900124022fbc5ae5e9ae7d5d058e24927e77428c0bc6de1d9469358deb215f50d911ff9900abc0f16bfa3d70b440212a55fbd0f8dd
SSDEEP 192:E1d66JozGzgCl6mc0dCzSL7SlOv5zboPXZjidShyjGvS3hN:Od66JozGzgC1jkwbbofZ+d2yjW+
TLSH
T1B4E12254F628467FC058027BCCA61F404F35389A984E3F19359CA55C2D5B6DE7B8E0BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d756ff4b9c95ee3a5da595f5512e276b8b13c3e63807164ee4c32d63e3c1fcc8
MD5 7431a924e5475442b80c4f1db96c1a71
SHA1 054a2a582098028d303cbcd15dd097272b517dcc
SHA512 bdd8f49657a5a4cd2720c0b84014828e9aafd8d9a78c2773cd35bb567e3d72000b0647d4d8eb0d31f3052cedb767da62839c32896c4ce2d1a225e6d4e68239d0
TLSH
T118216A6C79B98E2A5C8BEAAC758501CE63154A0A04871D530D23FF8DCDD1ADE33AA438
MD5 SHA1 SHA512 TLSH

Submit Download

097cc296-9075-4cc4-abbe-3b66a0a3859e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\097cc296-9075-4cc4-abbe-3b66a0a3859e
Size 886B
SHA256 6f6c1034e3a28d2dbd0837246fc6490ea8275ba9bc519393a96034c25a9833aa
MD5 73c6f417090af2957f583540ba9a5c98
SHA1 4d39ab86eec12be6e8f50f7ca790632c97f8bd37
SHA512 2399dd09025407cb56067c587472d231e91a29c247d40440dcb22f7547c6043919f2dd5b0a49f83baca18a09f50efb80a19146d79666f69417e133717ed32b09
TLSH
T16F11C441E7707572C9A89157D5E5BB4256D0642390C61A083D64CE180CBE96E6756207
MD5 SHA1 SHA512 TLSH

Submit Download

1fdf215e-fe62-4f30-a4f0-f7cabffafba7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\1fdf215e-fe62-4f30-a4f0-f7cabffafba7
Size 235B
SHA256 c6dc5eba6f17b7f8953171bada4f537e4e23d0cd894075e3a6a848e7485dfa2f
MD5 0a0662951be42c3d1caf7f8a55d050aa
SHA1 9795b5864cde9911d345fefeeb8b90443d6697f5
SHA512 0a9564b80b990b8bb15a1d3f49187eec1dd3e89ac0784dd27c1072b21bce6d38674e4fa1274173d24284ddb7c192ee673c0776e0c9793ec67ce05d29105a8897
TLSH
T1F2D0979024A867FC0C281F0AF0A038C230A88C3714605810DEA045B89EBCEC99252857
MD5 SHA1 SHA512 TLSH

Submit Download

42a98221-d00f-466d-aa9b-613e7e6dff51

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\42a98221-d00f-466d-aa9b-613e7e6dff51
Size 16KB
SHA256 b74bd8f5a855c10d0c059196058339acf08a2b944fb80dcc542dafa433e4a30d
MD5 7a3ab15f745a129b1a100e586e45567a
SHA1 f5549fb035edc532104a0ca655a3736ca7db43b8
SHA512 724d14fadddeb32977b4d6ecc444f155073d4b19bb5e88b8b903c5d741471ee760c69a2dd5fdab034b926e7389a11a1f43b9e42f1eb20883df2ff2952e1e785d
SSDEEP 192:gpj/vHI2AdVqt7AXX27gDb9fLBuX/eEyoRBsQ541V/HYPHWJIYE2RhRDzqSMCwz:i0wgI/xXh5ewPHWDE2RHDGSMCwz
TLSH
T15B72EA566820557A8691E36DD4F8BFC3E6F528CF4C418FCA9BE4BD082DDE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d0f8277-b841-4913-87bb-e35ee46cffa8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\5d0f8277-b841-4913-87bb-e35ee46cffa8
Size 2KB
SHA256 5cf008e975cbb1117dc8fdbf59ae58325c8fe090740df61472391f88400b18ea
MD5 ef7299fa3631e3670fed531e15b1a84a
SHA1 d792cf7840b589305e475a2cd8d3016636784a34
SHA512 c678a9c4ad93c7a01549ce7ba98d727d0ffbb8fcb7b5a5a1ea3837ceb8047af8afd0291fad620917c0d76c3302ed5a0089c23d3032c493ff526edecfa254c174
TLSH
T12B41215C75B84D7788DAF15DD0C2234A5BB48E4310CA2C436D52DE4CCDB6A9A336A52B
MD5 SHA1 SHA512 TLSH

Submit Download

605da033-5a20-4346-828a-1395f11c0e08

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\605da033-5a20-4346-828a-1395f11c0e08
Size 883B
SHA256 cefcca62ac73e4104d797f46603f23c00b5b2a3e135f3c5047f1dc12bf175bde
MD5 c820bb17b5c2450fda6a249151e5ea62
SHA1 41defb968827234357b28fad845d7e4b897ced32
SHA512 539db2b72bfc23898699a64dfdbb0c350ab15e92a7fbd438a14bcf5b6e76c2195b548a7a34c8cf9fe9d4cd6868475be73f499b93170f5c7c50e2a6086f7b9f8a
TLSH
T13011E341F770B9B2DC7DD25BC995770197E47423D0CA56083DA4CE180C7E92D675A24B
MD5 SHA1 SHA512 TLSH

Submit Download

666e963f-13c9-4d00-82b9-015db672ceea

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\666e963f-13c9-4d00-82b9-015db672ceea
Size 235B
SHA256 1ca966fa5d94875395d3e1f1c9a5db126aa4e33e553da16aeaeb40ff0c64c4f2
MD5 e8ffd76eb85b65250fc4b8e5fff48f07
SHA1 96e202cdbb48fdfbe37a5e8fd13d3376ed93d058
SHA512 087315f4ec78854bc1b6856b60d25d11d3b36ea4dbff91b831bf556a7e3d4d9d8d86eac8f636552fff1db35497d5cd5b762eaaafdb780d96e7895b54c441ab47
TLSH
T1CFD097D01898A37D18000F13F0A029C230848C3324745820C69186789DF8EC94152A0A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extensions.json
Size 14KB
SHA256 1bd3c9439f541730fff0ee4184f8f9a962578891df325cfd0b17e6df2181e32c
MD5 5ff66298104b14333f6a36ce29bd3ddc
SHA1 91248237d7c7f479f3cdf771a7ae7f15c5b7ed58
SHA512 35b99d28ac7306a6c28b70c99152659403a4942d8229221f028f43790b930b9bb0f744924a41d45aec70e1b652562a94e9ed3d6a4a9dfafba8d180b5b34a687f
SSDEEP 384:6kI4vuUmldvr8dhWC94zn96o5L4HLL4PNL4HZL4HAL4HC:9I4WRfYXL4x62434l4x4C4i
TLSH
T1D062421545148EB8298FA79BAA367E02C37D473B60445C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll
Size 1.1MB
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157
SSDEEP 24576:bif6DS+hWYEwTkhPcB64VjVEj3cYemypfYIC:bTDSNwToPcfjBmypf6
TLSH
T1D9358D0AF1A311E9E41BC074867EA622F639344D572568FF169587203F77BC0AB3AF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info
Size 116B
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3
TLSH
T176B022002803B0B0082282030C380AA02A3A3382E020082CAE2F03E0838832303AC0E0
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 7KB
SHA256 40b80522f5d0de56b93d05a4781d4f1c737b781285c07574fe94353d2aedeb44
MD5 cab878e08fa8addf1a7d933f7df0cb92
SHA1 b498685b15997f753c0bb4db9eb1a223ba4b725a
SHA512 2e34d719a6db6a94802c72c974531ea71c31b95b41f8c0249581fe1c113acc8d7a3036fa93e93f9b15b355f6139ff6611dd4db006af518a312a017e2749fbb7b
SSDEEP 96:xH69TUBqGqgXf6uYObzSnSSlSdv9jCnzRHytUyCYBw88n8L4cnpV3pS:kBRgXf6uYxSSp9ytPBw88EHS
TLSH
T12FE10C789408CB7F64B6776CAC6848316AB2013BBBBF68D750B654C4051CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 80170a4c8bb7e7af81b4e035ac05ba5db0ee2b52707a8a2acdc0bf8ab3fa7317
MD5 1eb18c974efe568b5b16e95aa4b5d0af
SHA1 cb736fb30eca44360c80c167778a1a872d9132ed
SHA512 6fabb5bb304f90f0937b0140c84d40a46b7ed40f533f57bfd2c15a2ad4de8306eb98a3da7dc9b2a7511d4064d18d7eef7c3733dba570dab13774a48199367df6
SSDEEP 96:xH6UTUBqGqgXf6uYObzSnSSlSdv9jCnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6uYxSSp9ytPBw88EpS
TLSH
T138E13E7895088B7F74B6776CAC6888316AB2413BBBBF28D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 7KB
SHA256 e1b0cbeef7a0ce2dabe2f823e0bf48e176122914921faa50ed1b09bc3ea960dc
MD5 18c6aac1656a21969809725d8faeaea0
SHA1 f26fb4a9e16f9e1dea3a3c580a021feaff09a981
SHA512 02eed9231f56eb4989e44aa676e91454e54b1a2365464df66fc57d4e4a6518f1d29514c9d135a76e736e343a584e1559a99b8dadcbe3f25290379e02e2f53e09
SSDEEP 96:xHo9TUBqGqgXf6uYObzSnSSlSdv9jCnzRHytUyCvBw88n8L4cnpV3pS:OBRgXf6uYxSSp9yteBw88EHS
TLSH
T1C5F10C7894048B6F74B6777CAC6848316AB2013BBABF68D750B654C4051CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 a6429959d505fbece3a684a180e0187d6661800205dbb4e04228b9f7dc213c17
MD5 b74a735bd2e014ed6183e2dd7b45b497
SHA1 824d67d66259bf426ce7b125fd8e4dfcae7afca2
SHA512 fecdb3faf0e7b32aa5fb5f365f806123d68d51474b5fe43a235319106c3c8b1fd0c13868142708a69054651d68a79dd965816fba811037ef9707f7b20e215fad
SSDEEP 96:xH6UTUBqGqgXf6WJ1zS9GSSlSdv9jCnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6WJKGSSp9ytPBw88EpS
TLSH
T197E12D7894088B7F74B6776CAC6888316AB2413BBBBF28D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 d356ab034c56b0a9f436d6ea3a5cdf5ede7c60c32eb260308a68cc3805c36b32
MD5 7b5aacf91598b8b14f96e5ee3c4c1ef5
SHA1 bfb9d79d0d0cd1b4d6cb697ca7a1371f3185465b
SHA512 c822b6e840be7783dadebe16dfe860178e07ac3ec875dc461bd5e4d188990f00967f5da2ff270cd5575ba212c412df852347ba4eadbcfa1dc40d6156e59ee364
SSDEEP 96:xH6UTUBqGqgXf6uY1zSnSSlSdv9jCnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6uYaSSp9ytPBw88EpS
TLSH
T186E12D7894088B7F74B6776CAC6888316AB2413BBBBF68D750B554C4051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
Size 6KB
SHA256 e8505f4265d70f3345f1e220c2fcce7224d07e9d76b7c9178c8984f6f88da4c0
MD5 3c073b546a02277e140f75ba2dde2838
SHA1 511327a6cfa8b5b067aad45947014e6e18d7b6a7
SHA512 0727d09ee07226f3d1c70e9d557a36a2cfdd0e52a5d3b58c6a2708c6ac52e2d86c8db66a1a9fe46d0c83d99143546c6d8b4a7f168ec4209f7db0fabbc94ea35e
SSDEEP 96:xH6UTUBqGqgXf6WJ1zS+GSSlSdv9jCnzRHytUyCYBw88n8L4cnpV1pS:ksRgXf6WJZGSSp9ytPBw88EpS
TLSH
T1C6E12C7894088B7F74B6776CAC6888316AB2413BBBBF28D750B55484051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 18bed9bb4a5ee4bbb0c0fa6d1775c687c1d951faa4f9a53e82f57cba777ed9db
MD5 7778f6e0aeabd210cd208f0f0ad50cc0
SHA1 2a7116f31cd68f1d78d01312d26d55c3c963f1df
SHA512 0deb3545783b3953aaded3ee47c9c5e7ab556c52457296c92ef026fc01185a89bce28b5f570e7bd1d2d8193ebd0e64c3c8d6e8fe008cfa419b78935052a8e703
TLSH
T19131D7AEBA7529E5A09187BBD28F8AFCC28D2093443058A8C5F97D06471440E72AC549
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 3aeeb494fb250233837090dbafca54ddb5be3e565b4c333307de88b43d82777c
MD5 4d6c49fe82958528b879c2e9f43a38c8
SHA1 d8952b8af9330af2bef023d1b2a4136f46e838a0
SHA512 4fc4c6280ec1863672fc1a7169f3b027e65020b67b50540edcc508b1ad87e5ce701bfc62be5ff0441eb3095214dc093f4891adbdf84ab157b6558379605e747c
TLSH
T16231D7ADBA7529E1A0A187FBD3CF8AFCC2892093443518E4C5F97D03071440D7268549
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.0MB
SHA256 d756fb05b97f3d286d8d260eae647f91b7149c500b4b0f74074b6c3dc5275f4a
MD5 ee2e5e4a5c55801a9da3a0c023153f41
SHA1 937179b5b1ae59506af5bf73b9bca32a968fee30
SHA512 298e69b28bfeaac91b99b50aacf3981231c8810edb9ee9a2e3daa118b6f1b74fa4792dd0df4ee319e1f85b260ce08f22a36af5581091d46f8915d2254f29c468
SSDEEP 24576:WRpJlohpBXfSTjyJDYBRwM3svtc36wLW3QOOYaQLuw8BBBjZNTtv:cp0JIGJYUN7QOOzQLuRdjjTt
TLSH
T167362AF820D1A257F3414033664593EF21EFD00C6027DA085BE95AE9A5B4CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.4MB
SHA256 b91b31d8bc0c2f9f21c79a2926b12c1913773bc52b5ee448f433d1942874d363
MD5 9f76da26046b193780055e1ed3dcdfe8
SHA1 35d01b5344e27efc25fd4c37718df421aa5e4e5a
SHA512 cb12ae3f725acb309b2d9e9ca9ad4a3a4587f928f6d2adddca31823a34626b4b40be341212418cd6ff8a56c8f9ec72dbbfe6daff25e856173e14863a8394fca1
SSDEEP 24576:7pJlohpBXfSTjyJDYBRAwPTAbjac3EaLWwQOAYaQLuw8BBBjZNTl/JCx:7p0JIGJYkUeQOAzQLuRdjjTlh
TLSH
T1D04629E820D1A297F3814073724593EB21EFD00D5037DA085BA95AE9A574CEF8E17B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\targeting.snapshot.json
Size 3KB
SHA256 1e618f83250b5f3ddcac3091ea903adf4a471dff42f3e8c6a7f6742d92015a6a
MD5 7524aad08cd9aec11fb270143338b64c
SHA1 ea4119538e43269ecfd3fd7e68536615ffb9a764
SHA512 c9995d26d64d2246f0c4bcde8399ea52b7f3963e666c756fefc1e3fb13a3cf00f7c6abeb96b7a3873c13ce6a7b67d4584d42bec84a9803900e2b1c826a2fbf66
TLSH
T15B71710CA61CA4BEA66BC3C0D6847FA78BBD053370407458DAFE560C45FB5FB162615B
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\xulstore.json
Size 170B
SHA256 824b37fb029b3460c8dee14ac1afbbb0f2a5b90101a109ad3d824bc82966f647
MD5 d7db90990dabc8b1100642834d2f360c
SHA1 f72c992007d781e754b599ffb6ac47f27c91f208
SHA512 baadf0e40b1fa9df3f4a2390255fedccc9db9c012dafc86e210a00871f4bd14dbe914c7da61e1095cc47a0cdf44dc27627b42ccd9922d8dcf00968449d976da5
TLSH
T1BCC0C071202BC8443D13CA8F12C561543C34492441D011C170E590F0048030E8C041CA
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads